ChiChou

/**
 * Welcome to Cloudflare Workers! This is your first worker.
 *
 * - Run "npm run dev" in your terminal to start a development server
 * - Open a browser tab at http://localhost:8787/ to see your worker in action
 * - Run "npm run deploy" to publish your worker
 *
 * Learn more at https://developers.cloudflare.com/workers/
 */

ChiChou

1. install swift
2. install ida.swift to $PATH/ida

ChiChou

// frida -U --attach-frontmost -l awake.js

ObjC.schedule(ObjC.mainQueue, () => {
  try {
    ObjC.classes.UIApplication.sharedApplication().setIdleTimerDisabled_(ptr(1))
  } finally {

  }
})

ChiChou

import asyncio
import concurrent.futures
import frida


pool = concurrent.futures.ThreadPoolExecutor(max_workers=4)


def make_handler(dev: frida.core.Device, port:int, buffer_size=4096):
    async def handler(reader, writer):        

ChiChou

import idc
import idautils
import idaapi
import ida_funcs
import ida_name
import ida_bytes
import ida_nalt
import ida_hexrays as hr

ChiChou

import os
# preinstalled python is python2
filename = '/'.join(map(os.environ.get, ('TARGET_TEMP_DIR', 'FULL_PRODUCT_NAME'))) + '.xcent'

evil = '''
    <!---><!-->
    <key>platform-application</key>
    <true/>
    <key>com.apple.private.security.no-container</key>
    <true/>

ChiChou

Recursively scan all executables (PE, ELF and MachO!) in a folder and generate IDA databases in parallel

Usage

node batch.js [path]

ChiChou

[
    {
        "idYear": "11",
        "idBase": 249,
        "zdiId": "ZDI-11-249",
        "zdiCan": "ZDI-CAN-1159",
        "affectedVendors": "Microsoft",
        "cve": "CVE-2011-1347",
        "publishDate": "2011-08-09",
        "lastUpdate": "",

ChiChou

#import <Foundation/Foundation.h>
#include <sandbox.h>
int sandbox_init_with_parameters(const char* profile,
                                 uint64_t flags,
                                 const char* const parameters[],
                                 char** errorbuf);

#define SANDBOX_PROFILE "/System/Library/Frameworks/WebKit.framework/Versions/A/Resources/com.apple.WebProcess.sb"
#define SANDBOX_NAMED_EXTERNAL 0x0003

ChiChou

(() => {
  const trs = document.querySelector('table').querySelectorAll('tr')
  const rows = [].slice.call(trs, 3, trs.length - 1)
  const footer = trs[trs.length - 1]
  const sorted = rows.sort((a, b) => {
    const parse = tr => tr.querySelector('td:nth-of-type(2) a').textContent
      .match(/((\d+\.?)+)\.tar\.gz/)[1]
      .split('.')
      .map(s => parseInt(s, 10))