Skip to content

Instantly share code, notes, and snippets.

View gteissier's full-sized avatar
🎱
Focusing

guillaume teissier gteissier

🎱
Focusing
View GitHub Profile
void inject_trusts(int pathc, const char *paths[])
{
printf("[+] injecting into trust cache...\n");
extern uint64_t g_kern_base;
static uint64_t tc = 0;
if (tc == 0) {
/* loaded_trust_caches
iPhone11,2-4-6: 0xFFFFFFF008F702C8
@mjmckinnon
mjmckinnon / rsa_crt_recovery.py
Last active March 23, 2024 09:11
Recovery of a full RSA PrivateKey from only the CRT exponent1 (dP) and exponent2 (dQ)
#!/usr/bin/python
# Written by: Michael McKinnon @bigmac
# Get in contact with me if you found this useful
import os
import sys
import gmpy2
from Crypto.PublicKey import RSA
from Crypto.Cipher import PKCS1_v1_5