Discover gdbinit/readphysmem Open Source project by fG! (@gdbinit)

Stars
25
Rank 957,573 (Top 19 %)
Language
Objective-C
Created about 9 years ago
Updated about 9 years ago

gdbinit

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A small utility to read and write to Macs physical memory using default AppleHWAccess.kext.

MachOView

MachOView fork

2,495

Gdbinit

Gdbinit for OS X, iOS and others - x86, x86_64 and ARM

1,596

lldbinit

A gdbinit clone for LLDB

Python

325

firmware_vault

A repo for all Apple EFI firmware files

255

readmem

A small OS X/iOS userland util to dump processes memory

218

onyx-the-black-cat

Kernel extension to disable anti-debug tricks and other useful XNU "features"

209

rootfool

A small tool to dynamically disable and enable SIP in El Capitan

163

EFISwissKnife

An IDA plugin to improve (U)EFI reversing

C++

142

HexRaysDeob

Hex-Rays OLLVM Deobfuscator and MicroCode Explorer

C++

118

hydra

A kernel extension and userland daemon to patch applications

104

otool-ng

Some improvements to Apple's otool.

100

gopher

A OS X crypto ransomware PoC

mach_race

Exploit code for CVE-2016-1757

efi_dxe_emulator

EFI DXE Emulator and Interactive Debugger

pydbg64

PyDBG64 - OS X PyDbg with 64 bits support

osx_boubou

A PoC Mach-O infector via library injection

mpress_dumper

MPRESS dumper for OS X

Assembly

gimmedebugah

A small utility to inject a Info.plist into binaries.

gdb-ng

Apple's gdb fork with some fixes and enhancements

ExtractMachO

IDA plugin to extract Mach-O binaries located in the disassembly or data

Gatekeerper

A kernel extension to mitigate Gatekeeper bypasses

kextstat_aslr

Implementation of kexstat via /dev/kmem with kernel ASLR support

can_I_suid

A TrustedBSD module to control execution of binaries with suid bit set

crackme_nr1

fG!'s crackme #1 source code

bruteforcesysent

Small util to discover OS X sysent via bruteforce

tcplognke

Apple's tcplognke code sample

TELoader

A TE executable format loader for IDA

unicorn_string_deobfuscator

A Unicorn based emulator to deobfuscate Equation Group string XOR obfuscation

mario

The kernel component of rootpipe fix for Mavericks

adium-ng-preview

Repo to dump some preview info and builds for adium-ng

MicrocodeExplorer

Hex-Rays MicrocodeExplorer

C++

readkmem

small utility to dump kernel memory

rex_versus_the_romans

Anti Hacking Team TrustedBSD module

llvmpatches

Misc llvm patches

CMake

hello_santa_bye_santa

Bypass Google's Santa

fixobjc

IDA IDC script to improve Objective-C disassembly output

checkidt

Small util to dump the IDT table of a running OS X system with kmem enabled

armorysandbox

A USB armory based USB sandbox

Makefile

MachOPlugin

IDA plugin to Display Mach-O headers

icetheguardianv2

A TrustedBSD module PoC to monitor writes to Daemons and Agents folders

diagnostic_service

OS X rootkit loader version #1

C++

kgmacros

Fixed kgmacros to work with VMware kernel gdb stub

ExtractMacho2

IDA plugin to extract Mach-O binaries located in the disassembly or data

C++

syscall-benchmark

macOS syscall performance benchmark

Assembly

av-monster

PoC kext to disable OS X anti-virus software

luigi

The userland component of rootpipe fix for Mavericks

Objective-C

carbon_copy_cloner_keychaingen

A keygen for Carbon Copy Cloner private keychain

Objective-C

Crisis-Analysis-Tools

Scripts and other material related to OS.X/Crisis malware analysis

diagnostic_service2

OS X rootkit loader version #2

C++

calcspace

Small util to calculate available free space in mach-o binaries for code injection

idc-scripts

Random collection of IDA's IDC scripts

Disable-m3u

iTunes plugin to disable creation of m3u playlists

rexthewonderdog

A lazy PoC for implementing backdoors in OS X TrustedBSD Mac framework.

fuckyouilfak

A IDA Pro 9.0 Beta 2 macOS x86 Fix Loader

delambert

GreenLambert macOS IDA plugin to deobfuscate strings

C++

GiveMeHex

A quick IDA hack to get addresses with 0x prefix

C++

twitterwipe

A Go utillty to delete your Twitter history

how_crap_is_ida

An IDA plugin to compare IDA detected functions output versus LC_FUNCTION_STARTS information

C++

evilquest_stats

Small utility to hash EvilQuest code and cstrings sections

keygen_CrackMe_nr1_qwertyoruiop

Keygen for qwertyoruiop's CrackMe nr1

spiflash

Very fast reader for SPI flashes for Teensy 2.x.

bpf_dbg_output

Small tool to convert bpf binary bytecode to bpf_dbg format

evilquest_deobfuscator

EvilQuest/ThiefQuest malware strings decrypter/deobfuscator

icetheguardian

A PoC to protect critical OS X files using TrustedBSD Mac framework.

SMBIOSKeygen

macserial and GenSMBIOS merged and ported to Go

yage

An age fork with internal Yubikeys support

snake_queue_parser

A decryptor for Snake/Turla configuration files

Objective-C

Mach-O-Lib

Library to access and manipulate Mach-O headers

macserial

macserial Go module

gdbinit/readphysmem

gdbinit

Reviews

Repository Details

More Repositories