KEXT loads without LaunchDaemon and injects earlier

ParasiteTeam · Apr 12, 2016 · 3c982ec · 3c982ec
1 parent 2f5088a
commit 3c982ec
Show file tree

Hide file tree

Showing 15 changed files with 275 additions and 335 deletions.
diff --git a/Parasite/Parasite.xcodeproj/project.pbxproj b/Parasite/Parasite.xcodeproj/project.pbxproj
diff --git a/...deproj/project.xcworkspace/xcuserdata/parasite.xcuserdatad/UserInterfaceState.xcuserstate b/...deproj/project.xcworkspace/xcuserdata/parasite.xcuserdatad/UserInterfaceState.xcuserstate
diff --git a/...odeproj/project.xcworkspace/xcuserdata/shinvou.xcuserdatad/UserInterfaceState.xcuserstate b/...odeproj/project.xcworkspace/xcuserdata/shinvou.xcuserdatad/UserInterfaceState.xcuserstate
diff --git a/Parasite/Parasite.xcodeproj/xcuserdata/parasite.xcuserdatad/xcschemes/Parasite.xcscheme b/Parasite/Parasite.xcodeproj/xcuserdata/parasite.xcuserdatad/xcschemes/Parasite.xcscheme
diff --git a/...ite/Parasite.xcodeproj/xcuserdata/parasite.xcuserdatad/xcschemes/xcschememanagement.plist b/...ite/Parasite.xcodeproj/xcuserdata/parasite.xcuserdatad/xcschemes/xcschememanagement.plist
diff --git a/Parasite/Parasite.xcodeproj/xcuserdata/shinvou.xcuserdatad/xcschemes/Parasite.xcscheme b/Parasite/Parasite.xcodeproj/xcuserdata/shinvou.xcuserdatad/xcschemes/Parasite.xcscheme
@@ -14,7 +14,7 @@
             buildForAnalyzing = "YES">
             <BuildableReference
                BuildableIdentifier = "primary"
-               BlueprintIdentifier = "1C8855EC1C85B93B0089A8A4"
+               BlueprintIdentifier = "1C906F871CBB01FA00B47299"
                BuildableName = "Parasite.kext"
                BlueprintName = "Parasite"
                ReferencedContainer = "container:Parasite.xcodeproj">
@@ -45,7 +45,7 @@
       <MacroExpansion>
          <BuildableReference
             BuildableIdentifier = "primary"
-            BlueprintIdentifier = "1C8855EC1C85B93B0089A8A4"
+            BlueprintIdentifier = "1C906F871CBB01FA00B47299"
             BuildableName = "Parasite.kext"
             BlueprintName = "Parasite"
             ReferencedContainer = "container:Parasite.xcodeproj">
@@ -63,7 +63,7 @@
       <MacroExpansion>
          <BuildableReference
             BuildableIdentifier = "primary"
-            BlueprintIdentifier = "1C8855EC1C85B93B0089A8A4"
+            BlueprintIdentifier = "1C906F871CBB01FA00B47299"
             BuildableName = "Parasite.kext"
             BlueprintName = "Parasite"
             ReferencedContainer = "container:Parasite.xcodeproj">

diff --git a/...site/Parasite.xcodeproj/xcuserdata/shinvou.xcuserdatad/xcschemes/xcschememanagement.plist b/...site/Parasite.xcodeproj/xcuserdata/shinvou.xcuserdatad/xcschemes/xcschememanagement.plist
@@ -12,7 +12,7 @@
 	</dict>
 	<key>SuppressBuildableAutocreation</key>
 	<dict>
-		<key>1C8855EC1C85B93B0089A8A4</key>
+		<key>1C906F871CBB01FA00B47299</key>
 		<dict>
 			<key>primary</key>
 			<true/>

diff --git a/Parasite/Parasite/Infector.c b/Parasite/Parasite/Infector.c
diff --git a/Parasite/Parasite/Infector.h b/Parasite/Parasite/Infector.h
diff --git a/Parasite/Parasite/Info.plist b/Parasite/Parasite/Info.plist
@@ -7,7 +7,7 @@
 	<key>CFBundleExecutable</key>
 	<string>$(EXECUTABLE_NAME)</string>
 	<key>CFBundleIdentifier</key>
-	<string>com.shinvou.parasite</string>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
 	<key>CFBundleInfoDictionaryVersion</key>
 	<string>6.0</string>
 	<key>CFBundleName</key>
@@ -20,16 +20,40 @@
 	<string>????</string>
 	<key>CFBundleVersion</key>
 	<string>1</string>
+	<key>IOKitPersonalities</key>
+	<dict>
+		<key>PARASITE</key>
+		<dict>
+			<key>CFBundleIdentifier</key>
+			<string>com.shinvou.driver.$(PRODUCT_NAME:rfc1034identifier)</string>
+			<key>IOClass</key>
+			<string>com_shinvou_driver_Parasite</string>
+			<key>IOKitDebug</key>
+			<integer>0</integer>
+			<key>IOMatchCategory</key>
+			<string>com_shinvou_driver_Parasite</string>
+			<key>IOProviderClass</key>
+			<string>IOResources</string>
+			<key>IOResourceMatch</key>
+			<string>IOBSD</string>
+		</dict>
+	</dict>
 	<key>NSHumanReadableCopyright</key>
 	<string>Copyright © 2016 Timm Kandziora. All rights reserved.</string>
 	<key>OSBundleLibraries</key>
 	<dict>
 		<key>com.apple.kpi.bsd</key>
-		<string>10.0.0</string>
+		<string>14.0</string>
+		<key>com.apple.kpi.dsep</key>
+		<string>14.0</string>
+		<key>com.apple.kpi.iokit</key>
+		<string>14.0</string>
 		<key>com.apple.kpi.libkern</key>
-		<string>10.0.0</string>
+		<string>14.0</string>
 		<key>com.apple.kpi.mach</key>
-		<string>10.0.0</string>
+		<string>14.0</string>
+		<key>com.apple.kpi.unsupported</key>
+		<string>14.0</string>
 	</dict>
 	<key>OSBundleRequired</key>
 	<string>Root</string>

diff --git a/Parasite/Parasite/Parasite.c b/Parasite/Parasite/Parasite.c