Profile avatar
snoolie.gay
i remember you was conflicted
128 posts 59 followers 85 following
Regular Contributor
Active Commenter

libNeoAppleArchive aea support is coming... eventually

GitHub CodeQL experience: I could not get it to work and now it's stuck at "Setting up..." so I can't disable it, 10/10

github.com/0xilis/short... Direct signing is now available in shortcut-sign, cross compatible with macOS/Linux!

github.com/0xilis/sharingd Decompilation of sharingd has started, this is in hopes that a tool to fetch Apple ID certificates / private keys / validation record for airdrop and shortcut signing is developed from the knowledge gained from the project, join if you want it would be appreciated

I am partly considering trying to reverse sharingd and AuthKit so I can fetch SFAppleIDIdentity certificates and AppleIDValidationRecord over HTTPS. Right now I just have someone dump certificates and private keys by (without disabling amfi) inject a dylib into simulator and wait for...

shortcut-sign has just had a new pre-release with the brand new resign command! This allows you to resign shortcuts on Linux&macOS, and also even though sign isn't here yet you can "oversign" signed shortcuts with a different plist as a way to sign new shortcuts.

resign command has been to shortcut-sign, though be aware it is unstable ATM. While direct signing is not here yet, you can oversign a signed shortcut with an unsigned shortcut if you want by specifying -u for resign...

shortcut-sign has been updated with a cross-compat verify command! Be aware it currently only supports contact signed shortcuts...

I am making C signature validation code for a library I'm making It doesn't work for some reason I add in debugging functions to see whats wrong Then after I add the debugging printfs it works (????) My best guess is some memory corruption happening so after I figure it out, verify.c pushed

shortcut-sign has got v0.0.0 release for macosx-x86_64 and linux-x86_64

snoolie.gay/blog/shortcu... New Blog Post (shortcut-sign and the future of libshortcutsign)

libshortcutsign updated with a (currently) unstable xplat resign function

Friendly Reminder: Stop comparing yourself to others. The only person you should compare yourself against is you from four years ago, before you started security research and were still a productive and useful member of society.

support.apple.com/en-us/120903 This was back in January, and I didn't notice until now, but I am finally credited for CVE-2024-27821! Took a bit long but at least it did happen.

libNeoAppleArchive has been finally updated to have liblzfse as a submodule

Does anyone know why LetMePass is suddenly getting a bunch of attention again?

As a showcase for libshortcutsign, I want to make a tweak to patch CVE-2024-27821 that also replaces current shortcut extraction code with libshortcutsign to see how well it works, but I'm not sure if extract_signed_shortcut is stable enough yet since I still don't have an actual AEA parser in neoaa

I finally did something in forever (update libshortcutsign's xplat extract method to actually use libNeoAppleArchive rather than the hacky code I wrote before I wrote that library, so now should be more stable)

I thought these dog treats were cookies at first and almost grabbed and ate one

i was going to do a libshortcutsign update for december 25th but looks like I’ll need a bit more time 👍

For christmas, I am happy to announce that HRTime has been officially released! This is a project i've been working on for the past months and I'm really passionate about it and I really hope that it'll be useful for many people :) Check it out: github.com/ayukovt/HRTime

github.com/ayukovt/hrtime I worked on this project a little

www.defense.gov/News/News-St...

SRD Request was denied, expected though. Maybe next year hopefully. I want to reverse engineer some macOS kexts, I did try AppleEncryptedArchive.kext back in April 11 but gave up since I didn't think it was used for much so I still don't have an idea for much of the kext, plus was removed so lol

lets see if this goes terribly or not

My jailbroken iPhone 11 has better uptime than my unjailbroken iPhone 16, I keep hitting the same exclave assert somehow and kernel panicing, Secure Exclave really doesn’t like me

snoolie.gay/blog/rss.xml made an rss feed

Whenever I finally have time, should I make my Shortcuts CLI tool using libshortcutsign for macOS and Linux be named shortcut-sign or shortcuts-sign