V1nteg (@V1nteg) profile picture
Joined October 2014
Photo by V1nteg (@V1nteg)
Microsoft BitLocker Bypasses are Practical : blog.compass-security.com/20…
100
1
296
26,264
For those interested, this is Apples official tool RepairCal v3.3 meant for programming iPhones like screens and batteries. Starts from recovery mode, and begins screen programming and calibration for this iPhone 11. It’s cool to see what we use to make your replacement part “Genuine” after it’s done it boots Diags to post test the programming and make sure all is well to return to customer.
14
31
174
27,028
All the details about this vuln and much more will be revealed tomorrow by us (me, @bzvr_, @kucher1n) during our talk “Operation Triangulation: What You Get When Attack iPhones of Researchers” at #37c3 (14:45 CET). There will also be a live stream. fahrplan.events.ccc.de/congr…
Jailbreak and kernel debugging is coming to new iPhones! (Apple A12-A16 SoC’s < iOS 16.6)
50
167
24
831
319,844
تم التأكيد ✅✅ بعد تثبيت TrollStore، يمكن التحديث إلى iOS 17.0 وسيبقى TrollStore يعمل ١٠٠٪ لكن تحت شرط معين.. يجب أن يبقى تطبيق TrollStore موجودًا في مبدل التطبيقات! إذا أزلته من مبدل التطبيقات ولو بالخطأ فالموضوع انتهى وستنتظر إلى وقت غير معلوم. اذهب الى TrollStore وهو في مبدل التطبيقات وانتقل إلى إعداداته وحدد تطبيق التلميحات كمساعد التثبيت ومبروك عليك 🎉 حصلت رسميًا على TrollStore على iOS 17 في جهاز A12 أو أحدث!
47
58
9
393
128,250
HARDWARE STATE MACHINES I was so frustrated when I was first starting with this stuff because I had NOBODY I could talk to who understood any of it. (till about 3 years ago) I will try to tell the story of my work in order. This is the basic configuration:
17
36
3
319
48,289
I got JTAG on the iPhone 15! 🥳
33
354
44
2,963
407,115
Replying to @Rainmaker1973
“When paints are mixed, more and more wavelengths of light are absorbed and not reflected back to our eyes. Since we don't see as many wavelengths of light reflected, the mixed paint appears darker! Additive color mixing can be thought of as wavelengths of light being 'added' to reaching your eyes”.
3
14
100
17,071
How much of this math do you know? A clever animation vs math by Alan Becker [full video: buff.ly/44cL72j] teapaw.org/Levandov_2/status/1708…
151
4,005
330
18,529
2,807,421
Let’s gooo
13
63
2
939
157,683
The (phys_range, obj) dumping were SEP/OS’s this is done using a putchar syscall, which is not handled by the kernel. Other apps use SEP/OS console, which is written using L4 IPC. Here are the phys_ranges for ya. (6/11)
1
1
8
iOS 15 + #checkm8 + Elcomsoft iOS Forensic Toolkit = full file system acquisition ❤️ (eta son) #dfir #apple #ios15
25
107
3
441
V1nteg retweeted
MachO file viewer/editor for Windows, Linux and macOS. 0.02 [+] m68k support [+] bridgeOS support [+] Linux AppImage [+] Autotools build system [+] CMAKE build system [+] PKG installer for OSX [+] New translations [+] Many bugs have been fixed. github.com/horsicq/XMachOVie…
35
125
Just published a tool I wrote a couple months back to pull C++ object names from kernel memory. Bit hacky, but works & is useful if you're someone who spends a lot of time looking at kernel memory dumps. github.com/Billy-Ellis/kobje…
4
42
174
I have updated xnuspy for iOS 15 over on my GitHub fork, and of course have opened a PR to @jsherma100. Please check it out and let me know if you run into any bugs/issues -- it's a brilliant tool! github.com/psychotea/xnuspy github.com/jsherman212/xnusp…
3
17
1
84
I needed a macOS code injector, so I wrote a simple one: gist.github.com/saagarjha/a7…. It's sort of like mach_inject, except it uses DYLD_INSERT_LIBRARIES and watches for new processes using EndpointSecurity. Disclaimer: currently only tested on Monterey+Apple silicon.
3
7
1
36
current status: fail to implement exp. :(
checkm8-A12: never thought memory leaks is so important to exploitation. :(
8
10
73
Every DES encryption key in 80 hours. As in, all of them. teapaw.org/hashcat/status/7706493…
hashcat now supports raw DES cracking (KPA), doing 20Gk/s per GTX1080. IOW: Cracks every DES key in 80 hours average on a $5000 PC.
1
22
13