plusreed/n0scope — pull request #1 by spawncpy (2014-06-16 17:11:40+00:00)
Title: Actual stuff

Removed the uselss stuff, I added some thing sthat might help you, remember if you want to path the kernel on iOS 6+ then you need to get around KASLR.
Also to find boot args, there is a much easier way.

the struct boot_args containes a param called *topOfKernelData* Boot_args is basically (4 * 2 * PAGE_SIZE) after the topofkerneldata. So you can calculate it in a few lines.

in ARM32 the page size is 4096

kdata = bootargs->topOfKernelData;
kdatloc = 4 * 2 * PAGE_SIZE
b_args = kdata + kdataloc;
printf("boot_args is at 0x%08x", b_args);