ios-jailbreak-patchfinder | binary iOS kernel to determine function offsets | Reverse Engineering library
kandi X-RAY | ios-jailbreak-patchfinder Summary
kandi X-RAY | ios-jailbreak-patchfinder Summary
Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of ios-jailbreak-patchfinder
ios-jailbreak-patchfinder Key Features
ios-jailbreak-patchfinder Examples and Code Snippets
Community Discussions
Trending Discussions on ios-jailbreak-patchfinder
QUESTION
I am currently working on an iOS Jailbreak for iOS 13.7.
As part of the jailbreak, I need to do a series of patches to the XNU Kernel live in the memory.
Of course, the kernel is protected by kASLR
, KPP
/ KTRR
, and other memory watchdogs that would trigger a Kernel Panic if something is modified.
As luck would have it, KTRR
(Kernel Text Ready Only Region) can only protect, well, static data that is not supposed to change (i.e. the TEXT
section and constants). The variables can still be altered.
I am building a PatchFinder which is supposed to locate a function or a variable in the XNU memory based on tell-tale symbols and I am wondering what would be the most effective approach for this.
I am currently adapting on top of the PatchFinder made publicly available back in the iOS 8 era by in7egal
which looks like this:
ANSWER
Answered 2020-Dec-31 at 16:55The variable you're looking for doesn't exist anymore.
The bytes in your first snippet make up Thumb instructions, which find this function in AMFI in a 32bit kernelcache:
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install ios-jailbreak-patchfinder
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page