Antonio Cheong
Antonio Cheong
It's been fixed
This is pretty cool. It would be interesting to combine the approach of scanning OUI ranges and using wifi tile as seeds to get the largest set of data possible....
CLHEndpointSelector in locationd
```c /* WARNING: Removing unreachable block (ram,0x000100432e38) */ /* WARNING: Globals starting with '_' overlap smaller symbols at the same address */ undefined4 FUN_100432696(double param_1,long param_2,int *param_3,int *param_4,byte *param_5, undefined2...
I'll take a look later. Something may have changed such as the initial bytes
Also remember to turn on and off location services
``` $ strings -a dyld_shared_cache_x86_64h | rg -i "gsp85-carry.ls.apple.com" https://gsp85-carry.ls.apple.com/wifi_request_tile ``` Can't find `wifi_request` in any binaries but found something close in `dyld_shared_cache_x86_64h`. Need to figure out which of the...
Some magic numbers: 167797871, 3982925012049145399, 6124895493240913920 They seem to be shared across requests for different BSSIDs. Might encode my location but it's not right (it's somehow in the middle of...
The first URL seems to send the BSSID of whatever network you're connected to along with metadata. Can reliably reproduce by joining new network.