async_wake-fun
async_wake-fun copied to clipboard
async_wake with a bit of fun! - async_awake by Ian Beer (https://bugs.chromium.org/p/project-zero/issues/detail?id=1417#c3)
I know it is supported for iOS 11.1.2 but I want to know about iOS-s 11.0 - 11.1.2.
Seeing that the xnu kernel uses PIC to randomize data and code locations, how are we meant to find and use the offsets (for kernel instructions) in this if they...
Panic!!

addr_t find_add_x0_x0_0x40_ret(void) { addr_t off; uint32_t *k; k = (uint32_t *)(kernel + xnucore_base); for (off = 0; off < xnucore_size - 4; off += 4, k++) { if (k[0] ==...