Discover jevinskie/kernelcache-patcher Open Source project

Stars
6
Rank 2,526,621 (Top 51 %)
Language CMake
License
BSD 2-Clause "Sim...
Created about 1 year ago
Updated 12 months ago

jevinskie

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Library for reading and patching xnu KernelCaches and a tool to disable loading of AppleSerialShim for m1n1 UART debugging over USB-C aux lines.

mDNSResponder

121

substrate

C++

101

emusca

Power trace simulator using Unicorn Engine for side channel analysis attack testing

Python

xnu-trace

Tracing of iOS/macOS binaries using HW single step and Frida DBI

C++

amd-lm32-smu-exploit

Generic exploit for all version 7 (maybe others) LM32-based AMD SMU's used in APUs (and probably works on GPUs too)

jevmachopp

Modern C++, range-based Mach-O parser designed for embedded use. Uses stack allocations only.

C++

pypcode-emu

Ghidra P-Code emulation and static LLVM lifting in Python

riscv-smol-linux-kernel

Patched sources/configs for RISC-V Linux with musl-based toolchain targeting 8 MB RAM

aes-over-pcie

A VHDL implementation of 128 bit AES encryption with a PCIe interface.

VHDL

litespih4x

SPI flash MITM and emulation (QSPI is a WIP)

Verilog

jevxpctrace

Hopefully an insightful XPC tracer that helps vulerability research by tracing server and client call stacks

Objective-C

ps3mfw-ng

PS3 Modified Firmware Builder - Next Generation

Python

bus-pirate

Bus Pirate

dagger

A decompilation framework based on LLVM

C++

liteluna

LiteX LUNA USB stack integration

Python

pcie-mitm

LiteX-based PCIe MITM, sniffing, fuzzing, device emulation

Python

ghidra-lm32

LM32 processor module for Ghidra. Useful for AMD SMU reverse engineering.

llvm-qemu

Automatically exported from code.google.com/p/llvm-qemu

surf

Surf - A digital waveform viewer for macOS

C++

tegra-bootrom-utils

Utility for interacting with Tegra SoC bootroms

Python

mips--

A dual core MIPS subset CPU written in behavioral, synthesizable VHDL

VHDL

frida-ptrace-hide

ptrace hider based on frida-gum injectable shared library and a JavaScript version

presentations

Some presentations I’ve done

litelitedram

Minimal DRAM controllers for LiteX

Python

xfinity-stream-allow-airplay

Tweak that unlocks AirPlay functionality in the iOS Xfinity Stream app

Makefile

fpudump

A simple, header only library to dump x87 FPU state

proxytap

Tunnel all connections from a TAP interface though a SOCKS proxy

Python

undefined-behavior-crimes

Various experiments/hacks that language lawyers would shoot me for writing

FruitSU

Python library for Apple CDN formats

Python

llvm-project-embedded-library-in-process

Clang/LLVM/LLD/libc++/etc all in process as an embeddable library

es-injector

EndpointSecurity process injector

C++

jev-elf-tools

ELF tools like external -> local symtab entry patching

C++

pdf-unwm

Remove watermarks from PDFs

Python

usbip-toolkit

Python USB-IP server library to emulate devices with a focus on HDL cosimulation

Python

xnu-get-proc-path

Utility to get the path of an executable a given process is running.

frida-panic-ventura-beta-7

This panics macOS Ventura beta 7 because why not?

m1n1-apfs-umbrella

Umbrealla repo for m1n1 supporting APFS an macOS loading

pyenv-macos-dynamic-dyld-loading

Stub libpython.dylib/Python.framework to read .python-version and load the appropriate pyenv Python library

C++

modern-xcode-legacy-support

Use modern Xcodes with deprecated SDKs and architectures

wine-rosetta-aot

Experiment to see if WINE can utilize Rosetta AOT instead of JIT using PE -> Mach-O translation

ps3-decr-stuff

Python

flash-adapter-pcbs

Various PCB adapters for flash memories and devices that use them

bus-pirate-old

The Bus Pirate is an open source hacker multi-tool that talks to electronic stuff. It’s got a bunch of features an intrepid hacker might need to prototype their next project.

redirect-to-os-log

Command line utility to run a program and redirect its stdout and stderr to XNU's os_log facilities. Also includes an injectable dylib for the same purpose.

CMake

debugserver-unsigned

Tweaks, Xcode plugin for using unsigned and super-entitled debugserver on jailbroken iOS

Logos

pmod-qspi-flash

Simple Pmod PCB with a QSPI flash (targeted at PS4 reverse engineering tool development)

CarlinKit4-CarPlay-Wired-to-WiFi-dongle-RE

Reverse engineering of the CarlinkKit4 CarPlay wired-to-WiFi adapter

delta-debug-verilog-test

Delta Debugging for Verilog/SystemVerilog

Verilog

pyfishhook

Python bindings and bundled build of fishhook: A library that enables dynamically rebinding symbols in Mach-O binaries running on macOS/iOS.

Python

iphonetunnel-usbmuxconnectbyport

Automatically exported from code.google.com/p/iphonetunnel-usbmuxconnectbyport

inject-debugger-spawner

A library to inject via LD_PRELOAD to spawn a new terminal with an attached debugger

C++

SlothNS

a proof-of-work based extension to DNS

TorVTL

jevps

nvcrypttools

nvcrypttools fork with support for off-device use (using mbedTLS) and exploitation via warmboot h4xery

sneaker

Do crazy things with your sockets

ps3dotdir

keys n stuff for f0f ps3tools and naehrwert's scetool

riscv-smol-linux-qemu

Patched QEMU sources/configs for RISC-V Linux with musl-based toolchain targeting 8 MB RAM

ps3-gcc

Latest and greatest GCC for the ps3toolchain

jev-lldb-helpers

Various LLDB Python helpers

Python

jev-pci-utils

Various PCI/PCIe utilities.

nih-sftp-server

Single file (almost) SFTP server by Eddy Langley useful for integration into a multibin dropbear server

xpwn-modern-buid

A cross-platform custom NOR firmware loader and custom IPSW generator for the iPhone. Modern CMake build with no OpenSSL dependency

litex-fork-searchable

pyxcselect

Python bindings for libxcselect.dylib to find Xcode related paths

Python

jeviterm

C++ library to interact with iTerm2 using protobufs and WebSockets

CMake

ps4-kern-dump

PS4 kernel dump stuff

aes-honeybadger

Tinkering with AES partial key brute forcing for side channel analysis

Python

aarch64-experimental-disasm

Experimental methods of decoding/disassembling AArch64 instructions

sacd-ripper-google-code

Automatically exported from code.google.com/p/sacd-ripper

C++

plocate-xnu

plocate for XNU operating systems

C++

litejtag-ext

LiteX JTAG extensions

Python

pycuse

py-cuse - CUSE (chardev in userspace) Python library

pytrofs

Python implementation of Tcl's trofs (Tcl Read-Only FileSystem)

Python

git-submodule-prep

Simple git submodule wrapper to track and merge changes to an upstream repo

Python

ublaze-rev-utils

MicroBlaze reverse engineering utilities

C++

bzip2-embedded

digital-waveform-samples

Digital waveforms (e.g. VCD) samples for testing and benchmarking

musl-libc-aarch64-baremetal

musl libc for AArch64 baremetal applications

qemu-microblaze-bflt

QEMU with hacks to load microblaze bFLT binaries

riscv-smol-linux

RISC-V Linux with musl-based toolchain targeting 8 MB RAM

Shell

jevutils

Various utilities I wrote for my use. My favorite so far is a find(1) alternative that searches using libmagic

Python

IOSurface-sandbox

Sandbox for playing around with IOSurfaces, compositing, and private CoreGraphs/CoreAnimation/SkyLight APIs

Objective-C

ld-audit-injector

A configurable shared library injector for Linux based on LD_AUDIT functionality found in glibc’s rtld

AArch64-SHA-Crypto-Extensions

Implementations of SHA(s) digests using AArch64 Cryptography Extensions

C++

auxv-dumper

Auxiliary Vector dumper

C++

frida-konyutils-ng

Improved CenturionInfoSec/konyutils for decrypting/dumping Kony app JavaScript bundles

Python

cmake

C++

jevshell

A node.js/socket.io shell on the web

JavaScript

ps3-bd-rev-util

Utilities for PS3 Blu-ray drive reverse engineering

Python

frida-trace-child-test

Testing child processes with frida-trace

volafox

Automatically exported from code.google.com/p/volafox

Python

libusb-cmake

libusb with CMake support

llvm-polly

C++

pyclippy

Your favorite friend Clippy, easily accessible from Python!

AppKitEnvVars

Shows env vars set by launchd and not your shell init scripts

Objective-C

smoke-cpp-tests

Automatically exported from code.google.com/p/smoke-cpp-tests

C++

flac-streamer

Stream FLAC audio

C++

py-data-utils

Various python data utilities

Python

100

quartus-archiver

Quartus installer archiver

Python

jevinskie/kernelcache-patcher

jevinskie

Reviews

Repository Details

More Repositories