@codecolorist@infosec.exchange

codecolorist @codecolorist@infosec.exchange

· 6mo ago

Getting serious ADHD and building software nobody asked.

checksec for Mach-O
https://github.com/ChiChou/macchk

⚠️ Warning: vibe coded

GitHub - ChiChou/macchk: 🎤 mic check! checksec for Mach-O executables

🎤 mic check! checksec for Mach-O executables. Contribute to ChiChou/macchk development by creating an account on GitHub.

27

1

9

0

codecolorist @codecolorist@infosec.exchange

· 6mo ago

frida recently shipped strace, so I piped it to Wireshark again

8

0

2

0

codecolorist @codecolorist@infosec.exchange

· 5mo ago

Did a bit of follow-up to my 0x41con talk to download another industrial standard non linear editing solution.

Just incredible. It runs some 2000-ish java server code as root on desktop version, and easily popped an preauth rce (root) from network.

Can't believe this full of bugs solution edited so many Oscar winners

5

0

codecolorist @codecolorist@infosec.exchange

· 6mo ago

Replying to

@pancake hermes is done

6

16

1

0

codecolorist @codecolorist@infosec.exchange

· 6mo ago

Replying to

@pancake :-> reinventing goes too far

5

2

0

codecolorist @codecolorist@infosec.exchange

· 7mo ago

Replying to

@pancake I'd digg the rabbit hole to put hermes plugin first

5

23

1

0

codecolorist @codecolorist@infosec.exchange

· 5mo ago

Another ADHD:
Added file history and diff view to entitlement database

https://codecolor.ist/entdb/

codecolor.ist

3

0

codecolorist @codecolorist@infosec.exchange

· 6mo ago

Replying to

@AbhiTheModder https://github.com/ChiChou/grapefruit/blob/b4013b7009efae8521c39d0fc715e60481ad3381/gui/src/components/shared/CFGView.tsx dagre and you need to replace agfm with agfj https://github.com/ChiChou/grapefruit/commit/08ff575d42360e1a097ac38a0e8fbce8985ad9cb#diff-f159b0ab752795015d7b392012e6e895d4a8e6e2d071ac592ec3f151d3b6a9f8R18-R92

GitHub

grapefruit/gui/src/components/shared/CFGView.tsx at b4013b7009efae8521c39d0fc715e60481ad3381 · ChiChou/grapefruit

Open-source mobile security testing suite for iOS and Android. Previously Passionfruit - ChiChou/grapefruit

3

1

0

codecolorist @codecolorist@infosec.exchange

· 6mo ago

Replying to

@pancake with xref and control flow now

2

1

2

0

codecolorist @codecolorist@infosec.exchange

· 6mo ago

Replying to

@Viss this thing should be easy to learn, especially with llm. You might have some problem with RASP for real world apps because all of them try to hide the binary from reverser now

2

0

codecolorist @codecolorist@infosec.exchange

· 6mo ago

Double tap on iOS is for zooming in and out. Any app that maps this gesture to like should be taken down if App Store review ever makes sense

2

0

codecolorist @codecolorist@infosec.exchange

· 7mo ago

Replying to

@pancake Mobile Pentester IDE wannabe

2

25

0

codecolorist @codecolorist@infosec.exchange

· 5mo ago

I pity for whoever makes the decision to dump Launchpad for the jitter Spotlight. He or she must have suffer a lot from life, terrible married life, childhood trauma and brain issue.

1

2

0