Add support for iOS 11.2.5 on the iPhone 8

sferrini commented 6 years ago

This PR adds support to the iPhone 8 on iOS 11.2.5.

I created a modified version of the call strategy 5 because this kernelcache misses MOV_X21_X4__BLR_X8, MOV_X22_X12__BLR_X8 and MOV_X23_X5__BR_X8 gadgets.

This is what I modified to make it work:

Replaced MOV_X21_X4__BLR_X8 with MOV_X21_X4__BR_X8
Replaced MOV_X22_X12__BLR_X8 with MOV_X21_X12__BR_X8 + MOV_X22_X21__BR_X8
Replaced MOV_X23_X5__BR_X8 with MOV_X21_X5__BR_X8 + MOV_X23_X21__BR_X8

Proof:

memctl> kc _current_task
setting up kernel function call...
0xffffffe00032d038
memctl> kc _get_bsdtask_info 0xffffffe00032d038
0xffffffe001378410

bazad commented 6 years ago

Thanks for the contribution! I can't test it on 11.2.5 myself, but it looks correct to me.

I added some stylistic changes and updated the README with the additional device support. If those changes look good to you, go ahead and squash those commits (to clean up the PR) and I'll merge.

sferrini commented 6 years ago

@bazad everything looks good to me, I squashed the commits. Thanks!

bazad / memctl

Add support for iOS 11.2.5 on the iPhone 8 #7