bruteforcesysent
bruteforcesysent copied to clipboard
Small util to discover OS X sysent via bruteforce
Bruteforce Sysent
A small util to bruteforce sysent address with a dynamic approach It is very fast and appears to be very reliable, even when implemented in a kernel extension.
Compatible with OS X 10.6, 10.7, 10.8, 10.9.
(c) 2012, 2013, 2014 fG! - [email protected] - http://reverse.put.as
Note: This requires kmem/mem devices to be enabled
Edit /Library/Preferences/SystemConfiguration/com.apple.Boot.plist, add kmem=1 parameter, and reboot!
v0.1 - Initial version, 32 and 64 bits support
v0.2 - Bug fixing and code cleanup
v0.3 - Mavericks support.