From 7356b178585a499eda4bc85c801d2ecc6965c853 Mon Sep 17 00:00:00 2001 From: spv <92738222+spv420@users.noreply.github.com> Date: Wed, 1 Jun 2022 11:41:40 -0400 Subject: Create README.md --- src/gen/README.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 src/gen/README.md (limited to 'src') diff --git a/src/gen/README.md b/src/gen/README.md new file mode 100644 index 0000000..bdeb351 --- /dev/null +++ b/src/gen/README.md @@ -0,0 +1,11 @@ +# racoon exploit +this code generates a racoon configuration file to exploit the Rocky Racoon bugs, and obtain r/w in JSC. + +file descriptions: +- `ip_tools.c` & `ip_tools.h` - code to generate ip addresses from `uint32_t`'s +- `patchfinder.c` & `patchfinder.h` - patchfinder for racoon, incomplete, many hardcoded offsets (mainly for ROP) are still used +- `shit.c` & `shit.h` - possibly unused code for formatting +- `stage0_primitives.c` & `stage0_primitives.h` - Rocky Racoon arbitrary relative 4-byte write +- `stage1_primitives.c` & `stage1_primitives.h` - `lcconf` arbitrary unslid write (stolen from @JakeBlair420) +- `stage2.c` & `stage2.h` - ROP chain generation code that sets up JSC with r/w, and runs the JS portion (stage3) +- `main.c` - main function & such -- cgit v1.2.3