Jevin Sweval

substrate. C++

mDNSResponder. C

emusca. Power trace simulator using Unicorn Engine for side channel analysis attack testing

xnu-trace. Tracing of iOS/macOS binaries using HW single step and Frida DBI

dylibify. Transform any ARM macho executable to a dynamic library

amd-lm32-smu-exploit. Generic exploit for all version 7 (maybe others) LM32-based AMD SMU's used in APUs (and probably works on GPUs too)

pypcode-emu. Ghidra P-Code emulation and static LLVM lifting in Python

jevmachopp. Modern C++, range-based Mach-O parser designed for embedded use. Uses stack allocations only.

fusee-launcher. work-in-progress launcher for one of the Tegra X1 bootROM exploits with branches to support T132, T30, and (WIP) T20

aes-over-pcie. A VHDL implementation of 128 bit AES encryption with a PCIe interface.

riscv-smol-linux-kernel. Patched sources/configs for RISC-V Linux with musl-based toolchain targeting 8 MB RAM

m1n1-xnu-boot. A bootloader and experimentation playground for Apple Silicon. Modified to boot XNU/macOS kernels.

litespih4x. SPI flash MITM and emulation (QSPI is a WIP)

pcie-mitm. LiteX-based PCIe MITM, sniffing, fuzzing, device emulation

jevxpctrace. Hopefully an insightful XPC tracer that helps vulerability research by tracing server and client call stacks

ghidra-lm32. LM32 processor module for Ghidra. Useful for AMD SMU reverse engineering.

ps3mfw-ng. PS3 Modified Firmware Builder - Next Generation

psgroove. PSGroove with PL3 payloads

liteluna. LiteX LUNA USB stack integration

dagger. A decompilation framework based on LLVM

bus-pirate. Bus Pirate

bin-of-theseus. Binary rewriting and delinking (reifying static relocations lost during link) based on a "float and anchor" approach.

tegra-bootrom-utils. Utility for interacting with Tegra SoC bootroms

General-Slow-DDR3-Interface. A general slow DDR3 interface. Very little resource consumption. Suits for all FPGAs with 1.5V IO voltage.

llvm-qemu. Automatically exported from code.google.com/p/llvm-qemu

presentations. Some presentations I’ve done

surf. Surf - A digital waveform viewer for macOS

fpudump. A simple, header only library to dump x87 FPU state

frida-ptrace-hide. ptrace hider based on frida-gum injectable shared library and a JavaScript version

jevutils. Various utilities I wrote for my use. My favorite so far is a find(1) alternative that searches using libmagic

old-github-feed. Brings back GitHub's old feed

mips--. A dual core MIPS subset CPU written in behavioral, synthesizable VHDL

Limon. Limón is the world's first Nintendo 3DS emulator for iPad and iPhone built on top of Citra making use of the experimental Vulkan renderer by GPUcode through MoltenVK, written in Objective-C and Swift

kernelcache-patcher. Library for reading and patching xnu KernelCaches and a tool to disable loading of AppleSerialShim for m1n1 UART debugging over USB-C aux lines.

litelitedram. Minimal DRAM controllers for LiteX

Bootrom-Dumper. Utility to Dump iPhone Bootrom

xfinity-stream-allow-airplay. Tweak that unlocks AirPlay functionality in the iOS Xfinity Stream app

ps3-decr-stuff. Stuff related to the PS3 DECR development TOOLs.

droid-wrapper. Android toolchain wrapper script

switch-bootrom-dumper. Switch (and other Tegra devices) bootrom dumper

fishhook. A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.

undefined-behavior-crimes. Various experiments/hacks that language lawyers would shoot me for writing

proxytap. Tunnel all connections from a TAP interface though a SOCKS proxy

es-injector. EndpointSecurity process injector

pdf-unwm. Remove watermarks from PDFs

redirect-to-os-log. Command line utility to run a program and redirect its stdout and stderr to XNU's os_log facilities. Also includes an injectable dylib for the same purpose.

FruitSU. Python library for Apple CDN formats

instruction-decoding-optimization-research. Investigations into speeding up instruction decoding in software and hardware

frida-panic-ventura-beta-7. This panics macOS Ventura beta 7 because why not?

litescope. Small footprint and configurable embedded FPGA logic analyzer

musl-libc-aarch64-baremetal. musl libc for AArch64 baremetal applications

ShowTouchesTweak. A UIKit tweak to show touches on iOS. Useful for screen recording demos.

applespi. Apple SPI interfaces/headers and convenience wrappers for them

ProcessMonitor. Process Monitor Library (based on Apple's new Endpoint Security Framework). Fork with regex filter.

AArch64-SHA-Crypto-Extensions. Implementations of SHA(s) digests using AArch64 Cryptography Extensions