BlueFalconHD BlueFalconHD

Getting to the core of the eligibility system on *OS.

I have been really interested in Apple internals recently, and I have been really into debugging/reverse engineering. I got the tools from Apple’s open source dyld project building (there were many missing components), and decided to play around with it a bit. I extracted the shared cache, and also got a map of all of the symbols and things like that.

Each executable, or ‘file’ inside the shared cache is called an image, and every image has “fix-ups” Apple applies to it before adding it to the shared cache (or after). Originally, the entire purpose of the DYLD shared cache was performance, and it probably partially still is, but in my personal opinion, there is an aspect of secrecy to bundling every library on the system into one file.

The fix-ups that are applied to the binaries are incredibly hard to work around. For example, some references into other parts of the shared cache are transformed into static addresses in memory, and since the share

info

all information about syscalls listed here was obtained from [1] and various other sites. Some information might be out-of-date or incorrect. if this is found to be the case i will update the gist accordingly. both a markdown version and a plain-text version have been attached. Refer to the notes section under the table for more information.

[1] https://github.com/apple-oss-distributions/xnu/blob/main/bsd/kern/syscalls.master

	// ==UserScript==
	// @name Quill.org Enhanced Interaction Script
	// @namespace https://www.quill.org/
	// @version 1.5
	// @description Pressing Enter clicks "Next Question", "Submit", or "Recheck Work" buttons on quill.org. Adds a progress bar on completion and auto-focuses on input fields.
	// @author
	// @match ://.quill.org/*
	// @grant none
	// ==/UserScript==

	import idc
	import idaapi
	import idautils
	import ida_auto
	import re
	import random

	# CFString structure offsets
	OFFSET_ISA = 0x0 # pointer to isa
	OFFSET_INFO = 0x8 # info pointer

	# CFBundleName: <class 'str'>
	# DTXcodeBuild: <class 'str'>
	# CFBundleDisplayName: <class 'str'>
	# CFBundleInfoDictionaryVersion: <class 'str'>
	# DTXcode: <class 'str'>
	# NullAudioDriverConfiguration: <class 'dict'>
	# CFBundleIdentifier: <class 'str'>
	# Adam ID: <class 'str'>
	# CFBundleExecutable: <class 'str'>
	# UIDeviceFamily: <class 'list'>

	import fs from "fs/promises"

	class Item {
	constructor (name, letterme, wins, loses, points) {
	this.name = name
	this.l = letterme
	this.wins = wins
	this.loses = loses
	this.points = points
	}

	/**
	* @name Catppuccin Mocha
	* @author winston#0001
	* @authorId 505490445468696576
	* @version 0.2.0
	* @description 🎮 Soothing pastel theme for Discord
	* @website https://github.com/catppuccin/discord
	* @invite r6Mdz5dpFc
	* **/
	\:root,

	const canvas = document.getElementById('myCanvas');

	// make the canvas the size of the window
	canvas.width = window.innerWidth;
	canvas.height = window.innerHeight;


	const context = canvas.getContext('2d');
	const centerX = canvas.width / 2;
	const centerY = canvas.height / 2;

	// Variables used by Scriptable.
	// These must be at the very top of the file. Do not edit.
	// icon-color: teal; icon-glyph: list-alt;
	function resolveAfter2Seconds() {
	return new Promise((resolve, reject) => {
	setTimeout(() => {
	resolve('resolved')
	}, 2000);
	});
	}