0x7ff / golb Goto Github PK

Darwin iPhone 18.2.0 Darwin Kernel Version 18.2.0: Mon Nov 12 20:32:02 PST 2018; root:xnu-4903.232.2~1/RELEASE_ARM64_T8015 iPhone10,2 arm64 D21AP Darwin

arm_pgshift: 14
pmgr_base_off: 0x32000000
aes_ap_base_off: 0x2e008000
pmgr_aes0_ps_off: 0x0
host: 0xe07
tfp0: 0x2903
kbase: 0xfffffff020204000
kslide: 0x19200000
sec_cstring_start: 0xfffffff02022d574, sec_cstring_sz: 0x4881e
sec_text_start: 0xfffffff0202d4000, sec_text_sz: 0x557490
allproc: 0xfffffff0208d2b28
csblob_get_cdhash: 0xfffffff02064a45c
pmap_find_phys: 0xfffffff0203f88ac
pv_head_table_ptr: 0xfffffff0202b94e0
const_boot_args: 0xfffffff0202b9548
flush_mmu_tlb: 0xfffffff0202e89e4
serv: 0xe0f
g_conn: 0x2807
our_task: 0xffffffe005a4e1c0
ipc_port: 0xffffffe0028e68b0
user_client: 0xffffffe004426e40
orig_vtab: 0xfffffff02013ff68
fake_vtab: 0xffffffe11c730000
csblob_get_cdhash(USER_CLIENT_TRAP_OFF): 0x80
pv_head_table: 0xfffffff0399a96a0
virt_base: 0xfffffff01c000000
phys_base: 0x800000000
mem_size: 0xbad34000
our_task: 0xffffffe005a4e1c0
our_map: 0xffffffe002354af0
flags: 0x00000090
our_pmap: 0xffffffe005b19e00
aes_ap_virt_base: 0x100188000
vphys: 0x8b0e78000
pv_h: 0xc7fffff0bd150312
ptep: 0xfffffff0bd150310
orig_pte: 0x600008b0e78e43
pmgr_virt_base: 0x100a70000
vphys: 0x8a1480000
pv_h: 0xc7fffff0bd1514e2
ptep: 0xfffffff0bd1514e0
orig_pte: 0x600008a1480e43
vphys: 0x82bcb8000
pv_h: 0xc7fffff0bd1514ea
ptep: 0xfffffff0bd1514e8
orig_pte: 0x6000082bcb8e43
vphys: 0x8308bc000
pv_h: 0xc7fffff0bd1514f2
ptep: 0xfffffff0bd1514f0
orig_pte: 0x600008308bce43
vphys: 0x8506c0000
pv_h: 0xc7fffff0bd1514fa
ptep: 0xfffffff0bd1514f8
orig_pte: 0x600008506c0e43
vphys: 0x880044000
pv_h: 0xc7fffff0bd151502
ptep: 0xfffffff0bd151500
orig_pte: 0x60000880044e43
vphys: 0x8319fc000
pv_h: 0xc7fffff0bd15150a
ptep: 0xfffffff0bd151508
orig_pte: 0x600008319fce43
vphys: 0x894300000
pv_h: 0xc7fffff0bd151512
ptep: 0xfffffff0bd151510
orig_pte: 0x60000894300e43
vphys: 0x808284000
pv_h: 0xc7fffff0bd15151a
ptep: 0xfffffff0bd151518
orig_pte: 0x60000808284e43
vphys: 0x855818000
pv_h: 0xc7fffff0bd151522
ptep: 0xfffffff0bd151520
orig_pte: 0x60000855818e43
vphys: 0x85ac08000
pv_h: 0xc7fffff0bd15152a
ptep: 0xfffffff0bd151528
orig_pte: 0x6000085ac08e43
vphys: 0x8a299c000
pv_h: 0xc7fffff0bd151532
ptep: 0xfffffff0bd151530
orig_pte: 0x600008a299ce43
vphys: 0x870ac8000
pv_h: 0xc7fffff0bd15153a
ptep: 0xfffffff0bd151538
orig_pte: 0x60000870ac8e43
vphys: 0x8685cc000
pv_h: 0xc7fffff0bd151542
ptep: 0xfffffff0bd151540
orig_pte: 0x600008685cce43
vphys: 0x8a3920000
pv_h: 0xc7fffff0bd15154a
ptep: 0xfffffff0bd151548
orig_pte: 0x600008a3920e43
vphys: 0x870424000
pv_h: 0xc7fffff0bd151552
ptep: 0xfffffff0bd151550
orig_pte: 0x60000870424e43
vphys: 0x838728000
pv_h: 0xc7fffff0bd15155a
ptep: 0xfffffff0bd151558
orig_pte: 0x60000838728e43
vphys: 0x89822c000
pv_h: 0xc7fffff0bd151562
ptep: 0xfffffff0bd151560
orig_pte: 0x6000089822ce43
vphys: 0x84c130000
pv_h: 0xc7fffff0bd15156a
ptep: 0xfffffff0bd151568
orig_pte: 0x6000084c130e43
vphys: 0x83f2b4000
pv_h: 0xc7fffff0bd151572
ptep: 0xfffffff0bd151570
orig_pte: 0x6000083f2b4e43
vphys: 0x83d088000
pv_h: 0xc7fffff0bd15157a
ptep: 0xfffffff0bd151578
orig_pte: 0x6000083d088e43
vphys: 0x8276b8000
pv_h: 0xc7fffff0bd151582
ptep: 0xfffffff0bd151580
orig_pte: 0x600008276b8e43
vphys: 0x877c0c000
pv_h: 0xc7fffff0bd15158a
ptep: 0xfffffff0bd151588
orig_pte: 0x60000877c0ce43
vphys: 0x85060c000
pv_h: 0xc7fffff0bd151592
ptep: 0xfffffff0bd151590
orig_pte: 0x6000085060ce43
vphys: 0x8a0710000
pv_h: 0xc7fffff0bd15159a
ptep: 0xfffffff0bd151598
orig_pte: 0x600008a0710e43
vphys: 0x824b90000
pv_h: 0xc7fffff0bd1515a2
ptep: 0xfffffff0bd1515a0
orig_pte: 0x60000824b90e43
vphys: 0x868d14000
pv_h: 0xc7fffff0bd1515aa
ptep: 0xfffffff0bd1515a8
orig_pte: 0x60000868d14e43
vphys: 0x8a0498000
pv_h: 0xc7fffff0bd1515b2
ptep: 0xfffffff0bd1515b0
orig_pte: 0x600008a0498e43
vphys: 0x85151c000
pv_h: 0xc7fffff0bd1515ba
ptep: 0xfffffff0bd1515b8
orig_pte: 0x6000085151ce43
vphys: 0x83503c000
pv_h: 0xc7fffff0bd1515c2
ptep: 0xfffffff0bd1515c0
orig_pte: 0x6000083503ce43
vphys: 0x87d420000
pv_h: 0xc7fffff0bd1515ca
ptep: 0xfffffff0bd1515c8
orig_pte: 0x6000087d420e43
vphys: 0x848ca4000
pv_h: 0xc7fffff0bd1515d2
ptep: 0xfffffff0bd1515d0
orig_pte: 0x60000848ca4e43
vphys: 0x8b29a8000
pv_h: 0xc7fffff0bd1515da
ptep: 0xfffffff0bd1515d8
orig_pte: 0x600008b29a8e43
vphys: 0x891214000
pv_h: 0xc7fffff0bd1515e2
ptep: 0xfffffff0bd1515e0
orig_pte: 0x60000891214e43
vphys: 0x877518000
pv_h: 0xc7fffff0bd1515ea
ptep: 0xfffffff0bd1515e8
orig_pte: 0x60000877518e43
vphys: 0x8ad52c000
pv_h: 0xc7fffff0bd1515f2
ptep: 0xfffffff0bd1515f0
orig_pte: 0x600008ad52ce43
vphys: 0x87f950000
pv_h: 0xc7fffff0bd1515fa
ptep: 0xfffffff0bd1515f8
orig_pte: 0x6000087f950e43
vphys: 0x89509c000
pv_h: 0xc7fffff0bd151602
ptep: 0xfffffff0bd151600
orig_pte: 0x6000089509ce43
vphys: 0x888aa0000
pv_h: 0xc7fffff0bd15160a
ptep: 0xfffffff0bd151608
orig_pte: 0x60000888aa0e43
vphys: 0x8b0fa4000
pv_h: 0xc7fffff0bd151612
ptep: 0xfffffff0bd151610
orig_pte: 0x600008b0fa4e43
vphys: 0x89a8a8000
pv_h: 0xc7fffff0bd15161a
ptep: 0xfffffff0bd151618
orig_pte: 0x6000089a8a8e43
vphys: 0x80e72c000
pv_h: 0xc7fffff0bd151622
ptep: 0xfffffff0bd151620
orig_pte: 0x6000080e72ce43
vphys: 0x8b05b0000
pv_h: 0xc7fffff0bd15162a
ptep: 0xfffffff0bd151628
orig_pte: 0x600008b05b0e43
vphys: 0x85fa34000
pv_h: 0xc7fffff0bd151632
ptep: 0xfffffff0bd151630
orig_pte: 0x6000085fa34e43
vphys: 0x8427b8000
pv_h: 0xc7fffff0bd15163a
ptep: 0xfffffff0bd151638
orig_pte: 0x600008427b8e43
vphys: 0x8815bc000
pv_h: 0xc7fffff0bd151642
ptep: 0xfffffff0bd151640
orig_pte: 0x600008815bce43
vphys: 0x8398c0000
pv_h: 0xc7fffff0bd15164a
ptep: 0xfffffff0bd151648
orig_pte: 0x600008398c0e43
vphys: 0x857130000
pv_h: 0xc7fffff0bd151652
ptep: 0xfffffff0bd151650
orig_pte: 0x60000857130e43
vphys: 0x807c34000
pv_h: 0xc7fffff0bd15165a
ptep: 0xfffffff0bd151658
orig_pte: 0x60000807c34e43
vphys: 0x83e738000
pv_h: 0xc7fffff0bd151662
ptep: 0xfffffff0bd151660
orig_pte: 0x6000083e738e43
vphys: 0x8838c4000
pv_h: 0xc7fffff0bd15166a
ptep: 0xfffffff0bd151668
orig_pte: 0x600008838c4e43
vphys: 0x887f54000
pv_h: 0xc7fffff0bd151672
ptep: 0xfffffff0bd151670
orig_pte: 0x60000887f54e43
vphys: 0x809658000
pv_h: 0xc7fffff0bd15167a
ptep: 0xfffffff0bd151678
orig_pte: 0x60000809658e43
vphys: 0x89bfdc000
pv_h: 0xc7fffff0bd151682
ptep: 0xfffffff0bd151680
orig_pte: 0x6000089bfdce43
vphys: 0x89c560000
pv_h: 0xc7fffff0bd15168a
ptep: 0xfffffff0bd151688
orig_pte: 0x6000089c560e43
vphys: 0x8429e4000
pv_h: 0xc7fffff0bd151692
ptep: 0xfffffff0bd151690
orig_pte: 0x600008429e4e43
vphys: 0x863f68000
pv_h: 0xc7fffff0bd15169a
ptep: 0xfffffff0bd151698
orig_pte: 0x60000863f68e43
vphys: 0x88c36c000
pv_h: 0xc7fffff0bd1516a2
ptep: 0xfffffff0bd1516a0
orig_pte: 0x6000088c36ce43
vphys: 0x8786f0000
pv_h: 0xc7fffff0bd1516aa
ptep: 0xfffffff0bd1516a8
orig_pte: 0x600008786f0e43
vphys: 0x8916c8000
pv_h: 0xc7fffff0bd1516b2
ptep: 0xfffffff0bd1516b0
orig_pte: 0x600008916c8e43
vphys: 0x814574000
pv_h: 0xc7fffff0bd1516ba
ptep: 0xfffffff0bd1516b8
orig_pte: 0x60000814574e43
vphys: 0x86d940000
pv_h: 0xc7fffff0bd1516c2
ptep: 0xfffffff0bd1516c0
orig_pte: 0x6000086d940e43
vphys: 0x867f44000
pv_h: 0xc7fffff0bd1516ca
ptep: 0xfffffff0bd1516c8
orig_pte: 0x60000867f44e43
vphys: 0x895f48000
pv_h: 0xc7fffff0bd1516d2
ptep: 0xfffffff0bd1516d0
orig_pte: 0x60000895f48e43
vphys: 0x8a3d4c000
pv_h: 0xc7fffff0bd1516da
ptep: 0xfffffff0bd1516d8
orig_pte: 0x600008a3d4ce43
phys_src: 0x849a3c11c
phys_dst: 0x849a3c12c
key: 0x839, val: 0x00000000000000000000000000000000
phys_src: 0x849a3c140
phys_dst: 0x849a3c150
key: 0x83a, val: 0x00000000000000000000000000000000
phys_src: 0x849a3c164
phys_dst: 0x849a3c174
key: 0x83b, val: 0x00000000000000000000000000000000
phys_src: 0x849a3c188
phys_dst: 0x849a3c198
key: 0x83c, val: 0x00000000000000000000000000000000
phys_src: 0x849a3c1ac
phys_dst: 0x849a3c1bc
key: 0x899, val: 0x00000000000000000000000000000000
phys_src: 0x849a3c1d0
phys_dst: 0x849a3c1e0
key: 0x89b, val: 0x00000000000000000000000000000000
phys_src: 0x849a3c1f4
phys_dst: 0x849a3c204
key: 0x89c, val: 0x00000000000000000000000000000000
phys_src: 0x849a3c218
phys_dst: 0x849a3c228
key: 0x89d, val: 0x00000000000000000000000000000000
phys_src: 0x849a3c23c
phys_dst: 0x849a3c24c
key: 0x8a0, val: 0x00000000000000000000000000000000
phys_src: 0x849a3c260
phys_dst: 0x849a3c270
key: 0x8a3, val: 0x00000000000000000000000000000000
phys_src: 0x849a3c284
phys_dst: 0x849a3c294
key: 0x8a4, val: 0x00000000000000000000000000000000

Hey,

I'm wondering if with or aes_ap or key_dumper it is possible to grab firmware keys for bootloaders.

Also when running aes_ap I don't get what has to be the input or the output. Does it have to be a file ? What type of file ?

Could you please explain the purpose of these tools please ?

Thank you.