search

jsherman212 / xnuspy

an iOS kernel function hooking framework for checkra1n'able devices
MIT License
542 stars 99 forks source link

How to determine an offset for a kernel method? #11

Open YiYiZheng opened 2 years ago

YiYiZheng commented 2 years ago

  1. Is there a doc showing how to determine?

For example, iPhone X 14.4.2, open1 method

  1. Not sure if the code snippet below will hook open1 method? ret = syscall(SYS_xnuspy_ctl, XNUSPY_INSTALL_HOOK, 0xfffffff007d574f4, open1, &open1_orig);

Just do not understand the difference between sysctlbyname and syscall...

  1. Could you help me to find offset of necp_send_network_denied_event method in iPhone X 14.4.2
gr3atest commented 2 years ago

Take a look at this: https://github.com/jsherman212/xnuspy/issues/3