Search results

• Racoon String Format Overflow Exploit
  *[http://pod2g-ios.blogspot.com/2012/01/details-on-corona.html pod2g's blog]
  2 KB (296 words) - 16:45, 12 July 2022
• Activation Token
  ...e Foundation|CFDictionary]] string representation which gets sent to Apple's server.The object can be obtained by using the [[MobileDevice Library]], AM ...en signature is not correct, Apple server will respond with message "there's problem with your device".
  5 KB (509 words) - 16:36, 18 November 2015
• How to reverse
  ...surrounding functions. Get in the head of the designer; think about what (s)he was thinking about when writing this code. Also, enjoy it. It's really cool when things come together, and you finally figure out that one
  2 KB (343 words) - 13:28, 17 September 2021
• Posix spawn kernel information leak
  ...etrieve leaked bytes from the kernel heap. If you carefully craft the data's size, you can leak bytes from the heap using a ''PSFA_OPEN'' file action. T ...m%20iOS%206%20Exploitation%20and%20iOS%207%20Security%20Changes.pdf i0n1c's writeup]
  1 KB (207 words) - 00:34, 24 January 2016
• Kernel Patches
  See also [[saurik]]'s comment for a list of "the 'best practice' patches that jailbreaks install
  10 KB (1,564 words) - 09:45, 11 October 2015
• Bypassing iPhone Code Signatures
  ...ow to make a self-signing certificate you can read this article from Apple's website: [http://developer.apple.com/documentation/Security/Conceptual/Code ldid -S Program
  3 KB (500 words) - 14:27, 9 January 2012
• Obtaining IMG3 Keys
  ...ng the IMG3 keys using iBoot/iBEC patch based on the Dev Team's and Geohot's exploits and was tested on both Linux and Windows OS. Epic thanks to #xpwn ...ute the patched iBEC. Your iPhone will reboot into a blank screen and that's good. You need to reconnect the ibooter after the "reboot".
  7 KB (1,062 words) - 10:01, 12 October 2015
• /System/Library/Frameworks
  ...n App Store apps. Private frameworks are intended to be used only by Apple's apps, and are more unstable against firmware changes, but many of the inter
  35 KB (4,011 words) - 06:41, 25 December 2021
• MobileDevice Library
  ...] (OS X framework written in C that can be used interchangeably with Apple's private framework MobileDevice.framework) Unlike OS X's dynamically linkable libraries, Windows dynamic libraries do not support po
  6 KB (609 words) - 13:18, 24 January 2020
• Xcode
  ...le as a free download on [https://developer.apple.com/download/more/ Apple's developer site] and the [https://itunes.apple.com/app/xcode/id497799835 Mac
  13 KB (1,385 words) - 20:35, 20 September 2022
• Apple Push Service Protocol
  ...send a notification to Apple servers, which will then send it to the user's device to be displayed, even when the app is not running. **<code>01</code> device's push token
  8 KB (1,140 words) - 22:18, 15 August 2021
• IPhone 5s
  This is the iPhone 5s introduced by Tim Cook at Apple's 'iPhone' event in late 2013. It is very similar to the [[iPhone 5]].
  2 KB (223 words) - 12:57, 16 August 2020
• Image3maker
  -s, --imageSecurityEpoch [epoch] Set epoch
  2 KB (232 words) - 16:28, 25 August 2013
• Image3maker (Internal Tool)
  ...er''' is an Apple internal tool used to create [[img3]] firmware files. It's implemented in mostly C with its symbols stripped. There is an open source
  6 KB (664 words) - 20:39, 9 March 2015
• Keylimepie
  ...generated are not all accurate from 7.1+. It can still be used to get KBAG's.
  1 KB (180 words) - 12:29, 23 March 2017
• IDA Pro Setup
  The [[X-Gold 608]] has a memory map, as seen in it's page. ...pack), and the CODE starts at the ROM start address of 0x20040000(since it's the main firmware)
  4 KB (641 words) - 09:18, 10 February 2012
• Address Mapping
  * 0x7858 - memzero (this looks funny in IDA, kind of, but really it's just optimized as part of memset)
  3 KB (546 words) - 12:29, 23 March 2017
• Phone.app codes
  <!-- call blocking and divert codes, plus your carrier's services --> ...e incoming call; the phone will become kind of messed up, thinking that it's on a call until you restart. Can be used to stream music to Bluetooth heads
  3 KB (421 words) - 12:51, 14 September 2013
• System Log
  ...place of the method mentioned above. It functions similar to Ryan Petrich's [https://github.com/rpetrich/deviceconsole deviceconsole] tool, but runs di ...n be convenient): install '''syslogd to /var/log/syslog''' from [[saurik]]'s repo and reboot your device.
  8 KB (1,382 words) - 17:44, 26 August 2015
• S5L File Formats
  ...beta 3, or the [[S5L8900]] [[VROM]]. The [[S5L8720]] and newer [[bootrom]]s have no support for it. * [http://www.jbfaq.com/article.asp?id=70 cmw's IMG3 Unpacker]
  4 KB (641 words) - 17:01, 12 July 2017

View (previous 20 | next 20) (20 | 50 | 100 | 250 | 500)