Alessandro Saba alessaba

Computer Engineering Student. Bug Hunter. Programmer. Python, Swift, C. Interested in Automation, Cybersecurity and Artificial Intelligence topics

marcan / fedora-autorestic.md

Last active June 28, 2025 14:19

Setting up autorestic on Fedora (Asahi) for automated backups with btrfs

backends:
    mybackend:
        # Your backend options here, see the documentation
global:
    all:
        cache-dir: /var/cache/restic

jakeajames / poc.c

Last active September 17, 2025 04:15

CVE-2021-30955 PoC

	#include <stdlib.h>
	#include <stdio.h>
	#include <pthread/pthread.h>
	#include <mach/mach.h>

	struct ool_msg {
	mach_msg_header_t hdr;
	mach_msg_body_t body;
	mach_msg_ool_ports_descriptor_t ool_ports[];
	};

infernalheaven / poc.c

Created September 16, 2021 02:18

macOS 11.5.2/iOS 14.7.1 Kernel Race Condition poc

	/*
	Written By Pan ZhenPeng(@peterpan980927) of Alibaba Security Pandora Lab
	use it on macOS: cc poc.c -o poc while True; do ./poc ; done
	*/

	#include <errno.h>
	#include <signal.h>
	#include <fcntl.h>
	#include <stdio.h>
	#include <stdlib.h>

saagarjha / library_injector.cpp

Last active November 26, 2025 14:30

Load a library into newly spawned processes (using DYLD_INSERT_LIBRARIES and EndpointSecurity)

	// To compile: clang++ -arch x86_64 -arch arm64 -std=c++20 library_injector.cpp -lbsm -lEndpointSecurity -o library_injector,
	// then codesign with com.apple.developer.endpoint-security.client and run the
	// program as root.

	#include <EndpointSecurity/EndpointSecurity.h>
	#include <algorithm>
	#include <array>
	#include <bsm/libbsm.h>
	#include <cstddef>
	#include <cstdint>

dougallj / aarch64_amx.py

Last active November 8, 2025 13:13

	# IDA (disassembler) and Hex-Rays (decompiler) plugin for Apple AMX
	#
	# WIP research. (This was edited to add more info after someone posted it to
	# Hacker News. Click "Revisions" to see full changes.)
	#
	# Copyright (c) 2020 dougallj


	# Based on Python port of VMX intrinsics plugin:
	# Copyright (c) 2019 w4kfu - Synacktiv

LeoNatan / Take Control of macOS

Last active October 13, 2025 14:55

	csrutil disable
	sudo nvram boot-args="intcoproc_unrestricted=1 kext-dev-mode=1 amfi_allow_any_signature=1 amfi_unrestrict_task_for_pid=1 PE_i_can_has_debugger=1 cs_enforcement_disable=1 amfi_get_out_of_my_way=1 amfi=0xff cs_debug=1 ipc_control_port_options=0"
	sudo spctl --global-disable
	sudo defaults write /Library/Preferences/com.apple.security GKAutoRearm -bool NO
	sudo defaults write /Library/Preferences/com.apple.security.coderequirements Entitlements -string always
	sudo defaults write /Library/Preferences/com.apple.security.coderequirements AllowUnsafeDynamicLinking -bool YES
	sudo defaults write /Library/Preferences/com.apple.security.libraryvalidation.plist DisableLibraryValidation -bool YES
	defaults write com.apple.loginwindow DisableScreenLockImmediate -bool yes

zrzka / ContentView.swift

Created May 19, 2020 10:15

TrackPadView with touches

	import SwiftUI
	import AppKit

	protocol AppKitTouchesViewDelegate: AnyObject {
	// Provides `.touching` touches only.
	func touchesView(_ view: AppKitTouchesView, didUpdateTouchingTouches touches: Set<NSTouch>)
	}

	final class AppKitTouchesView: NSView {
	weak var delegate: AppKitTouchesViewDelegate?

ChiChou / phase.py

Created April 30, 2020 18:07

	import os
	# preinstalled python is python2
	filename = '/'.join(map(os.environ.get, ('TARGET_TEMP_DIR', 'FULL_PRODUCT_NAME'))) + '.xcent'

	evil = '''
	<!---><!-->
	<key>platform-application</key>
	<true/>
	<key>com.apple.private.security.no-container</key>
	<true/>

jakeajames / exploit.c

Last active April 9, 2022 04:10

leak address of segment_list in oob_timestamp

	//
	// exploit.c
	// extra_time
	//
	// Created by Jake James on 2/8/20.
	// Copyright © 2020 Jake James. All rights reserved.
	//

	#include "exploit.h"
	#include "IOAccelerator_stuff.h"

a1exdandy / checkm8_a8_a9.patch usage.md

Last active March 21, 2023 10:31

checkm8_a8_a9.patch usage

About

ipwndfu patch for t7000/s8000/s8003

Thanks to matty for testing