Some notes, tools, and techniques for reverse engineering macOS binaries.
0xdevalias
/ reverse-engineering-macos.md
Last active
March 16, 2026 11:37
Some notes, tools, and techniques for reverse engineering macOS binaries
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # On Windows, within a VS developer prompt | |
| # Dump the exports of msvcrt.dll | |
| dumpbin.exe /exports C:\Windows\System32\msvcrt.dll > msvcrt.txt | |
| # Copy msvcrt.txt to a Linux box | |
| # Convert the file to Unix line endings | |
| dos2unix msvcrt.txt |
souhaiebtar
/ dbeaver.ini
Last active
February 21, 2025 13:35
[dbeaver config file] .ini file for dbeaver #dbeaver #linux
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # path on linux /usr/share/dbeaver/dbeaver.ini | |
| # path on macos /Applications/DBeaverEE.app/Contents/Eclipse/dbeaver.ini | |
| -vm | |
| /usr/bin/java | |
| -startup | |
| plugins/org.eclipse.equinox.launcher_1.5.600.v20191014-2022.jar | |
| --launcher.library | |
| plugins/org.eclipse.equinox.launcher.gtk.linux.x86_64_1.1.1100.v20190907-0426 | |
| -vmargs | |
| -javaagent:/home/tunknown/.apps/dbeaver/dbeaver-agent.jar |
eddiez9
/ feedly.opml
Last active
March 3, 2026 22:44
Collection of RSS feeds to keep up with cyber news.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <?xml version="1.0" encoding="UTF-8"?> | |
| <opml version="1.0"> | |
| <head> | |
| <title>OPML export</title> | |
| </head> | |
| <body> | |
| <outline text="Forums - IT Security" title="Forums - IT Security"> | |
| <outline text="/r/netsec - Information Security News & Discussion" title="/r/netsec - Information Security News & Discussion" type="rss" xmlUrl="http://www.reddit.com/r/netsec/.rss" htmlUrl="http://www.reddit.com/r/netsec/"/> | |
| <outline text="IT Security - Hot Weekly Questions" title="IT Security - Hot Weekly Questions" type="rss" xmlUrl="http://security.stackexchange.com/feeds/week" htmlUrl="http://security.stackexchange.com/questions"/> | |
| </outline> |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // Available variables which can be used inside of strings. | |
| // ${workspaceRoot}: the root folder of the team | |
| // ${file}: the current opened file | |
| // ${fileBasename}: the current opened file's basename | |
| // ${fileDirname}: the current opened file's dirname | |
| // ${fileExtname}: the current opened file's extension | |
| // ${cwd}: the current working directory of the spawned process | |
| { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| SPC | |
| SPC: find file | |
| , switch buffer | |
| . browse files | |
| : MX | |
| ; EX | |
| < switch buffer | |
| ` eval | |
| u universal arg | |
| x pop up scratch |
cmsj
/ iOS-File-System-Extraction.md
Created
July 31, 2017 12:04
Guide to extract the root file system and decompress the kernel cache for iOS.
Starting with iOS 10.0 Apple decrypted the file system and kernel cache. All you have to do is download an IPSW, change the extension to .zip, and unarchive it. The largest size disk image inside the unarchived zip will be the root file system. Simply mount it to see its contents.
Links to download all iOS IPSWs.
Originally from /u/RowRocka on Reddit. Gently edited for clarity.
xvitaly
/ remove_crw.cmd
Last active
March 18, 2026 18:47
Remove telemetry updates for Windows 7 and 8.1
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| @echo off | |
| echo Uninstalling KB3075249 (telemetry for Win7/8.1) | |
| start /w wusa.exe /uninstall /kb:3075249 /quiet /norestart | |
| echo Uninstalling KB3080149 (telemetry for Win7/8.1) | |
| start /w wusa.exe /uninstall /kb:3080149 /quiet /norestart | |
| echo Uninstalling KB3021917 (telemetry for Win7) | |
| start /w wusa.exe /uninstall /kb:3021917 /quiet /norestart | |
| echo Uninstalling KB3022345 (telemetry) | |
| start /w wusa.exe /uninstall /kb:3022345 /quiet /norestart | |
| echo Uninstalling KB3068708 (telemetry) |