Skip to content

Instantly share code, notes, and snippets.

"""
0001565c int64_t sub_1565c(int64_t arg1)
0001565c {
0001565c uint64_t x8 = arg1 >> 0x28;
00015670 uint64_t x9 = arg1 >> 0x1e & 0x3ff;
00015674 uint64_t x10 = arg1 >> 0x14 & 0x3ff;
00015678 uint64_t x11 = arg1 >> 0xa & 0x3ff;
0001567c uint64_t x12 = arg1 & 0x3ff;
"""
struct FileEntry {
char tag[4];
u32 offset;
u32 length;
u32 pad;
};
struct FTAB_Header {
u32 unk[8];
char magic[8];
  • `brew install libusb``
  • ./configure --enable-bonobo --disable-werror CFLAGS=-I/opt/homebrew/Cellar/libusb/1.0.27/include/libusb-1.0
ROM:00003965 DCB 0, 0x60, 0
ROM:00003968 aArgumentD DCB "argument = %d",0xA,0
ROM:00003977 DCB 0xA,0
ROM:00003979 aPullingTz0Blac DCB "pulling TZ0 blackbird",0xA,0
ROM:00003990 aTz000xX DCB "TZ0[0]: 0x%x",0xA,0
ROM:0000399E aTz010xX DCB "TZ0[1]: 0x%x",0xA,0
ROM:000039AC aTz0RegsModifie DCB "TZ0 regs modified",0xA,0
ROM:000039BF aTz0FailedToLoc DCB "TZ0 failed to lock",0xA,0
ROM:000039D3 aTz1FailedToLoc DCB "TZ1 failed to lock",0xA,0
ROM:000039E7 aTz0Base0xLlx DCB "tz0_base: 0x%llx",0xA,0
fio --filename=/tmp/test --rw=randread --size=2Go --direct=1 --bs=1M --ioengine=libaio --runtime=60 --numjobs=1 --time_based --group_reporting --name=seq_read --iodepth=16
fio --filename=/tmp/test --rw=read --size=5Go --direct=1 --bs=1M --ioengine=libaio --runtime=60 --numjobs=1 --time_based --group_reporting --name=seq_read --iodepth=16
@matteyeux
matteyeux / decrypted.json
Created November 20, 2023 13:15
Apple Vision Pro firmware keys for VisionOS 1.0 beta 1-5
[
{
"url": "https://updates.cdn-apple.com/2023SummerSeed/patches/042-21091/60572AF0-9BC3-465F-89ED-77117194CB26/com_apple_MobileAsset_SoftwareUpdate/3df121022bd578846478faa25a4dcf3055396954.zip",
"build": "21N5207g",
"filename": "iBEC.n301.RELEASE.im4p",
"kbag": "AB7893B981E44BFF298328C89C826F8BA6EF1A7ADC80DB156C9D55D9F4E27E8AD2CC21AFA42A41E1392B57E9FE90D992",
"key": "34b218667cd03eb93e073b9b3bca4a865b20f130550a800b2aa2c1c2348041865cee47db7e3bcda739d05adde9f9f716"
},
{
"url": "https://updates.cdn-apple.com/2023SummerSeed/patches/042-21091/60572AF0-9BC3-465F-89ED-77117194CB26/com_apple_MobileAsset_SoftwareUpdate/3df121022bd578846478faa25a4dcf3055396954.zip",
@matteyeux
matteyeux / f.md
Last active May 24, 2025 21:07
macOS and iOS Security Internals Advent Calendar
@matteyeux
matteyeux / sptm.py
Last active December 4, 2024 18:14
Binary Ninja snippet to symbolize sptm
# void _panic(char const* func, char const* str, ...)
def get_panic():
for s in bv.strings:
if "somehow a violation was triggered in early boot" in s.value:
break
ref = list(bv.get_code_refs(s.start))[0]
real_panic = bv.get_functions_containing(ref.address)[0]
panic_ref = list(bv.get_code_refs(real_panic.start))[0]
panic_wrapper = bv.get_functions_containing(panic_ref.address)[0]
@matteyeux
matteyeux / avp.md
Last active November 14, 2023 13:01

We will add a 15GB disk for a specific partition : /var/db/elasticsearch

List the disks :

[root@centos8s vagrant]# fdisk -l 
Disk /dev/vda: 128 GiB, 137438953472 bytes, 268435456 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos