FreedomCoder » macosx

strip binary executables in OSX

FreedomCoder — Fri, 09 Jul 2010 19:24:27 +0000

While doing some vulnerability research on some of the default OSX binary files, I run into the issue that a lot of the binaries are universal and contain i386, x86_64 and/or ppc.

For example, let us take the default installed app bash

So I wanted to debug an application in order to see where it was overflowing, but I only wanted to concentrate on the 32 bit architecture. So I started wondering how could I force the application to run in 32 bit mode. After some googleing and looking through the osx documentation. I found that there are a few commands just for that.

ARCH
This command will let you run an application on on one or more specific architectures.

For example if we want to run bash in 32bit:
$ arch -i386 /bin/bash

Now, what if we want to always use a binary in 386 mode. arch is not really helpful or what if we want another executable that only contained the i386 architecture code. Here is when lipo comes into play.

LIPO

This command will allow us to create a binary file containing only the desired architectures.
$ lipo -thin i386 /bin/bash -output /bin/bash.i386

Now if we we check the bash.i386 file it will only contain the 386 architecture binary information.

I guess this might be common knowledge to a lot of people, but It was really helpful for me and hopefully to anyone who was not yet aware of this two helpful commands.

Enjoy.

Bugmenot CLI script

FreedomCoder — Mon, 14 Sep 2009 17:35:05 +0000

Little script to help while surfing the web. So far it gets the username and password. I will be adding the success percentage and the possibility of limiting the search results.
Otherwise, enjoy as it is.

First stable beta of ESearchy is out!

FreedomCoder — Mon, 13 Jul 2009 18:15:37 +0000

Finally, after weeks of work, the first stable Beta of ESearchy is up and running in github’s gem repository.
Esearchy is a small library capable of searching the internet for email addresses. Currently, the supported search methods are engines such as Google, Bing, Yahoo, PGP servers, GoogleGroups, Linkedin, etc , but I intend to add many more.

Also, the library searches inside .pdf, .docx, .xlsx, .pptx, asn and .txt files for emails addresses and adds them to the list of found accounts. Finally, we have support for .docs files but for now only in Windows Platforms. (For more information visit: Github .

In order to install it you simple add the repository and then install the gem, as shown below.
> gem sources -a http://gems.github.com > gem install FreedomCoder-esearchy
Once the gem is installed, you can create a new search opening and/or use the “esearchy” CLI tool but it’s really basic so far and it does not has all of the plugins.
require 'esearchy'

ESearchy::LOG.level = ESearchy::APP #Output to the stdout.

ESearchy.create "domain.com" do |d| d.yahoo_key = "yourAPIkeygoeshere" d.bing_key = "yourAPIkeygoeshere" # if you want to also look in LinkedIn d.company_name "Company Name" #A user is needed in order to search within Linkedin d.linkedin_credentials "myuser@linkedin.com", "mypwd" d.maxhits = 50 d.search d.save_to_file "company_emails.txt" end
If you have any comments, issues or want to submit a bug please do so on
http://github.com/FreedomCoder/esearchy/issues

Hopefully it will be useful to you.

Random User Agents

FreedomCoder — Sat, 11 Jul 2009 00:35:02 +0000

While programming Esearchy I had to create a simple class to retrieve random user agents. You may say but why you would want something like this, and the answer is simple:
“Try to trick the search engines, so they would not block me”.

Yeah, I know this might not even works, but it’s still cool. =D

Well here it goes

Use it at your own discretion and listen to your ghost …

I’m back with some Code …

FreedomCoder — Mon, 06 Jul 2009 01:46:17 +0000

Well, hello again, long time since the last post. I went on vacations, work a lot and did some programming. Let’s talk abount the programming part, since it is the most interesting one.

I created a small library called “Esearchy” capable of searching the internet for email addresses. Currently, we the supported search methods are engines such as Google, Bing, Yahoo, PGP servers, GoogleGroups, etc , but I intend to add many more.
Also, the library searches inside .pdf and .txt files for emails addresses and adds them to the list of found accounts.

For now, there are two main ways of performing a search, “the ruby way”
Esearchy.create "domain.com" do |domain| domain.maxhits = 500 domain.search domain.clean {|e| e =~ /<|>/ } domain.save_to_file "~/emails.txt" end

and the more classic way in which users can create an Esearchy objetc and work on it

domain = Esearchy.new :query => "domain.com", :maxhits => 500 domain.search domain.save_to_file "~/emails.txt"

For now , that’s it for now , but keep on tuned for more shitty code ajjajaa

Hash.map is not working ?

FreedomCoder — Thu, 19 Mar 2009 15:59:00 +0000

While coding a new lib i’m doing I was trying to do something with a Hash and I came across this.

irb(main):002:0> {:a => 1, :b => 2}.map do |k,v| v+2 end => [3, 4]

When I try to map a Hash I get in return an Array. Shoulnd’t I get a Hash??? It’s that the idea of “mapping” ? I tried in both 1.8 and 1.9.1 and both returned the same. I guess I’m either missing something or map is not implemented as it should be.
Help please!!, Anyone ?

UPDATE:
Well, I think this is an explanation (extracted from the RDoc) :

enum.collect {| obj | block } => array
enum.map {| obj | block } => array

Returns a new array with the results of running block once for every element in enum.

(1..4).collect {|i| i*i } #=> [1, 4, 9, 16] (1..4).collect { "cat" } #=> ["cat", "cat", "cat", "cat"]

WEBrick Transparent Proxy + code injection.

FreedomCoder — Sat, 28 Feb 2009 17:00:17 +0000

I’ve search and search, asked Google, yahoo, sarasa search, and pretty much everyone else I know. Everything was incomplete, not well explain or not in subject at all. After many days of looking I found a japanese site, which I did not understood much of it but after I google translated I was able to check some code and learn how to capture the response body messages.

NOTE: As a word of advice, it is worth mentioning that this situation where only the Japanese have ruby code, has happened several times before with weird and undocumented methods or libraries. So it’s always good to look in google.jp for ruby code

You may say why to even bother to do a Transparent proxy in ruby which is able to inject code, well maybe the answer is just because I want to see if I can do it.

I decided to do my PoC with the native library WEBrick, a simple and light HTTPserver among other things.

Simple Proxy :
The first thing I usually do is check the official site and Rdoc for the lib. Unluckily, I was only able to find how to do a normal proxy. and work with the request.

require 'webrick' require 'webrick/httproxy'


WEBrick::HTTPProxyServer.new  ort 8080,

                     :BindAddress => '0.0.0.0',

                     :ServerType => Thread,

                     :RequestCallback => Proc.new {|req,res|  puts "#{req.unparsed_uri}" }

a.startSimple Proxy server.

Fixing the URI :
With this we can setup Firefox, safari or any other web browser to use the proxy on localhost:8080 and Eureka, we have a proxy that will printout the unparsed_uri for our request.
This in theory works like a charm , but wait. If you see the request Firefox is doing the following
GET http://www.sarasa.com/ HTTP/1.1 ...Browser request using a proxy server.

Normal the brower when requesting a page , will use HTTP/1.1 and use the header “Host” to specified the url and just connect using a:

GET / HTTP/1.1 Host: www.sarasa.comBrowser request.

Having said this, here is the first wall I encounter. This is something that was undocumented: how do we turn our proxy into a transparent proxy?
The answer is simple. let’s modified our code and change the request. All the information is there we just have to re-write it to fit our need.
Before, we start we should know that our req is of type WEBrick::HTTPRequest. Knowing this we will do a little monkey patching to add a new method to the class and

require 'webrick' require 'webrick/httproxy'


class WEBrick::HTTPRequest

  def  update_uri(uri)

    @unparsed_uri = uri

    @request_uri = parse_uri(uri)

  end

end
req_call = Proc.new do |req,res|

  req.update_uri()

  puts "#{req.unparsed_uri}" }

end
WEBrick::HTTPProxyServer.new  ort 8080,

                     :BindAddress => '0.0.0.0',

                     :ServerType => Thread,

                     :RequestCallback => req_call

a.startTransparent Proxy Server.

Injecting:
Well, a transparent proxy is cool , but we could do the same with squid or some other product. Let’s take it a little further and make it more interesting by adding an inject_payload to our response class.

require 'webrick' require 'webrick/httproxy'


class WEBrick::HTTPRequest

  def  update_uri(uri)

    @unparsed_uri = uri

    @request_uri = parse_uri(uri)

  end

end
class WEBrick::HTTPResponse

  def  inject_payload(string)

    if @content_type =~ /html/

      @body.gsub!( /<\/body>/ ,  "")  # this is just

    end

  end

end
req_call = Proc.new do |req,res|

  req.update_uri()

  puts "#{req.unparsed_uri}" }

end
res_call = Proc.new do |req,res|

  res.inject_payload("alert(\"P0wned\");")

end
WEBrick::HTTPProxyServer.new  ort 8080,

                     :BindAddress => '0.0.0.0',

                     :ServerType => Thread,

                     :RequestCallback => req_call

                      roxyContentHandler => res_call

a.startInjectable Transparent Proxy server.

Last but not least :
Well, there is one more thing , but this is more at an operating system level we know want to reroute everything that is coming from the port 80 to port 8080 where our transparent proxy is listening. The following example shows a possible way to redirect HTTP traffic assuming that is coming from the interface eth0 and the proxy is listening on port 8080.

iptables -t nat -A PREROUTING -i eth0 -p tcp –dport 80 -j REDIRECT –to-port 8080

Now we have a transparent proxy in our hands capable of injecting code into their request.

Enjoy.

Nmaports 0.3: Now with pdf support

FreedomCoder — Mon, 16 Feb 2009 18:53:43 +0000

Luego de un par ajustes al c?digo Nmaports sigue creciendo y agregando features.
Ahora , Nmaports tiene soporte para generar la tabla en formato PDF.

def create_pdf(list,name=nil) require 'prawn' require 'prawn/layout' Prawn::Document.generate(name || "output.pdf") do


    data = []

    list.each do |k,v|

      data << [k,(v.map { |k| k + "\n" }.to_s).strip]

    end

table data, :position => :center, :headers => ["Port", "IP Adresses"], :header_color => "0046f9", :row_colors => :pdf_writer, #["ffffff","ffff00"], :font_size => 10, :vertical_padding => 2, :horizontal_padding => 5 end end

Para bajar la ultima versi?n del repositorio Git :

http://github.com/FreedomCoder/nmapports/tree/master

zsh + git branchs and status

FreedomCoder — Sat, 06 Dec 2008 18:11:30 +0000

Siendo que uso mucho git para todos mis projectos, Cada tanto quiero saber el status y en que branch estoy (mas aun cuando hay varios branches). Buscando en internet encontr? un par de tips como crear funciones y agregarlas al PS1 o PROMPT en bash o zsh seg?n corresponda.

Primero tenemos que agregar un par de funciones a nuestro .zsh o .bashrc

Funciones:
function parse_git_status { [[ $(git status 2> /dev/null | tail -n1) != "nothing to commit (working directory clean)" ]] && echo "*" } function parse_git_branch { git branch --no-color 2> /dev/null | sed -e '/^[^*]/d' -e "s/* $.*$/[\1$(parse_git_status)]/" }

Una vez que tengamos estas funciones tenes que agregar la funci?n a nuestro shell PROMPT para que cada vez que estemos en algun dir que sea un repositorio de git nos agregue el branch donde estamos y el status. Para esto necesitamos agregar el llamado a nuestra funci?n:
Llamado a Funcion:
$(parse_git_branch)%
Antes:
PROMPT='[$PR_BLUE%n$PR_WHITE@$PR_GREEN%m] $PR_WHITE%d $PR_NO_COLOR%% '
Despu?s:
PROMPT='[$PR_BLUE%n$PR_WHITE@$PR_GREEN%m] $PR_WHITE%d $PR_NO_COLOR% %{$fg_bold[yellow]%}$(parse_git_branch)%{$reset_color%}%% '

O si preferimos que este a la derecha solito podemos hacerlo de la siguiente manera:
Prompt Derecha:
PROMPT='[$PR_BLUE%n$PR_WHITE@$PR_GREEN%m] $PR_WHITE%d $PR_NO_COLOR%% ' RPROMPT='%{$fg_bold[yellow]%}$(parse_git_branch)%{$reset_color%}'

Bueno, espero que les sirva tanto como a mi.

CLI Clipboard

FreedomCoder — Tue, 18 Nov 2008 02:12:55 +0000

Hace un tiempo ya que uso macosx como mi plataforma en mi desktop y laptop. Dentro de las cosas que me gustan mucho, existen un par de comandos como open, pbcopy, pbpaste que me atraen muuuchoo. Estos dos ultimos como se daran cuenta son para interactuar con el clipboard lo cual es bastante grosso cuando estas haciendo cosas y queres copiar los resultados de la terminal simplemente con | a pbcopy lo copias.

Siempre me dije, loco que mal que linux no tenga esto. Hoy haciendo uso de utility_belt me di cuenta que Giles, no habia implementado la plataforma :linux en su gem y fue eso lo que me hizo preguntar: existira o no una tool para manejar el clipboard desde la consola?, no puede ser que osx lo tenga pero linux no.

Luego de preguntarle al Oraculo de la Matrix AKA Google, encontre un paquete que se llama xsel.

Instalacion

> emerge xsel # en Gentoo
> sudo apt-get install xsel # Ubuntu o Debian
> sudo yum install xsel #centos, fedora, RHE, etc…

Uso

> ls | xsel -i #Copia el resultado de ls al clipboard.
> xsel #Muestra lo que sea que este en el clipboard.

Bueno, espero que les sirva para algo como me sirve a mi y ademas les cuento que mande un diff a Giles (autor de utility_belt) para que patchee utility_belt y habilite toda las tools que hacen uso de clipboard (ie. pastie) en linux.
CODE:

clipboard.rb
diff --git a/lib/utility_belt/clipboard.rb b/lib/utility_belt/clipboard.rb index 67bcf7e..1525d56 100644 --- a/lib/utility_belt/clipboard.rb +++ b/lib/utility_belt/clipboard.rb @@ -22,7 +22,27 @@ module UtilityBelt IO.popen('pbcopy', 'w+') {|clipboard| clipboard.write(stuff)} end @@implemented = true - + + when :linux + + if File.exist?('/usr/bin/xsel') + || File.exist?('/usr/local/bin/xsel') + || File.exist?('/usr/X11/bin/xsel') + + def self.read + IO.popen('xsel') {|clipboard| clipboard.read} + end + + def self.write(stuff) + IO.popen('xsel -i', 'w+') {|clipboard| clipboard.write(stuff)} + end + @@implemented = true + else + raise "You need to install package xsel\n + ubuntu,debian: sudo apt-get install\n + Gentoo: sudo emerge xsel\n + fedora,centos,opensuse: yum install xsel\n" + end when :mswin

begin

UPDATE: Google search linux support and pastie now opens up in default browser. I also decided to fork the github project to share all my changes so far. Github link

google.rb
diff --git a/lib/utility_belt/google.rb b/lib/utility_belt/google.rb index 04d419f..11d0180 100644 --- a/lib/utility_belt/google.rb +++ b/lib/utility_belt/google.rb @@ -19,7 +19,8 @@ module UtilityBelt Kernel.system("open #{url}") when :windows Kernel.system("start #{url}") - #when :linux + when :linux + Kernel.system("xdg-open #{url}") else puts "Sorry, don't know how to open an URL from the command line on your platform" end
pastie.rb
diff --git a/lib/utility_belt/pastie.rb b/lib/utility_belt/pastie.rb index 0756f4b..99e6100 100644 --- a/lib/utility_belt/pastie.rb +++ b/lib/utility_belt/pastie.rb @@ -20,6 +20,8 @@ module UtilityBelt Kernel.system("open #{pastie_url}") when :mswin Kernel.system("start #{pastie_url}") + when :linux + kernel.system("xdg-open #{pastie_url}") end

return pastie_url

Colorize on Github

FreedomCoder — Thu, 28 Aug 2008 22:26:22 +0000

Aqui les dejo una peque?a y muy simple gema, Colorize,que nos permite colorear en la terminal de linux, osx o *nix como podemos observar en el siguiente ejemplo.

Test.rb Code:

require "Colorize"


class Klass

  include Colors

  def initialize

    system("echo #{red("hola")} This is a #{blue("test")}")

    system("echo #{red on_white("Hola1")}")

    puts "#{red on_blue("Hola2")}"

  end

end
Klass.new
html = "





  the first term


  its definition

  
the second term


  its definition

  
the third term


  \"its definition\"


  





"

c = Colorize.new( :red => /<.*html>|<.*body>/, :blue => /".*"/, :cyan => /src/) puts c.paint(html)

Por ultimo, se aprecian mucho comentarios, ideas y/o preguntas sobre cosas que les gustar?a ver en Colorize, etc …

Jornadas Regionales de Software Libre

FreedomCoder — Mon, 25 Aug 2008 21:29:42 +0000

Las CaFeConf y JRSL son peque?os espacios de encuentro con amigos que no suelo ver durante el an~o pero que comparto dia a dia proyectos, ideas, ideales, etc.

Luego Tres (3) dias de mucho Ruby, Software Libre, amigos, cerveza, charlas, keynotes de astronautas e intercambio de ideas en los pasillos, logre –en los tiempos libres– dar un par de charlas.
Aca les dejo los slides de las presentaciones:

* RubyCocoa:

http://www.freedomcoder.com.ar/files/JRSL08/ruby-cocoa.pdf

* Ruby Metraprogramming:

http://www.freedomcoder.com.ar/files/JRSL08/ruby-meta.pdf

* Photos :

http://www.flickr.com/photos/freedomcoder/sets/72157606962173346/

Remover items del Menubar en Leopard

FreedomCoder — Sun, 18 May 2008 04:56:57 +0000

Ayer al abrir la Macbook Pro me apareci?, por alg?n motivo que desconozco, un nuevo icono en el menubar. Quise eliminarlo de las maneras que conoc?a y no pude. A pesar de que solo era un iconito, ocupaba un lugar y me molestaba. Decidi buscar en Google una solucion y encontr? una muy practica que solo involucra una combinaci?n de teclas y un movimiento con el mouse.

La acci?n es la siguiente:
Mantenemos presionada la tecla "command (?)" mientras arrastramos el icono fuera del menubar.

Bueno, queria compartirlo con ustedes por si se cruzan con el mismo problema.

RGTE – Ruby Email filter

FreedomCoder — Tue, 22 Apr 2008 00:16:11 +0000

According to the developer, RGTE is a small, opinionated email filter which processes and filters incoming email into Maildirs. The current version is 0.0.3. This project looks like it has a lot of potential, but it is still to young to be sure.
If you want to try it you will need to install it with gem but providing a source:
$ [sudo] gem install --source http://rubyi.st/gems/ rgte
The developers reminds us not to forget that we need Tmail
and we need to trail slashes, otherwise it won’t work.

Try it and tell me what you think.
Project’s site : http://rubyi.st/rgte/

MaximSoft vende productos usados/abiertos/refurbish ?

FreedomCoder — Mon, 21 Apr 2008 23:33:53 +0000

Hola , hoy queria comprarme un Apple Mighty Mouse wireless, busque un poco y vi que el mas economico ( no por mucho ) era el de MaximiSoft.com.ar. Los llame y no enviaban a domicilio. ( Resulto que tenia suerte). Bueno al salir del trabajo decidi ir a comprarlo personalmente, cuando llego le digo:

Yo: Hola, Llame pare comprar el Apple Mighty Mouse Wireless
Vendedor: Si pera que voy a traer a buscar uno.
Luego de unos minutos
Vendedor: Aca esta .
Yo: eh… pero porque no esta en una caja cerrada de Apple
Vendedor: no ahora para importarlos vienen asi.
Yo: mira vos… , lo quiero prender y no tenia pilas
Yo: No tiene pilas ?
Vendedor: No no tiene pilas ya no viene mas con pilas
Yo pensando ( mmmm … esto esta usado , tiene la mugre que se acumula de los dedos) y claramente Apple nunca enviaria algo asi, deben ser los usados o los que vienen con las Apple iMac que no los venden y me quieren vender eso como nuevo.
Vendedor: y lo queres o no ?
Yo: No gracias no compro cosas abiertas/usadas como nuevos y menos a precio de algo nuevo. Ciao

RECOMENDACION: NO les compren nada a MaximSoft, Ademas de esto un amigo, Martin, tuvo problemas con una Macbook Pro.
Mi solucion y no es para hacer propaganda ni nada fue ir a otra casa, Alfa Uno Macstore y lo tenian 5 dolares mas caro pero claramente como corresponde con caja sellada, con las pilas de lithium y con manuales. Lo mismo creo que es Macstation pero no tienen stock y es unos 30 USD mas caros.

NO SE DEJEN CAGAR POR LOS LADRONES QUE PIENSAN QUE PORQUE ESTAMOS EN ARGENTINA SOMOS TODOS INDIOS Y NO SABEMOS NADA. !!! ESPERO QUE APPLE USA SE ENTERE Y LES SAQUEN LA AUTHORIZATION PARA SER RESELLERS.

Slds.
Digg it : http://digg.com/apple/MaximSoft_com_ar_vende_productos_usados_abiertos_refurbish

Fluid + Google Gears = awesome apps

FreedomCoder — Tue, 15 Apr 2008 17:21:56 +0000

Yesterday I found an application called Fluid that lets the users create Stand Alone Browser applications for any site. For example, GMail, Google Reader, BaseCamp, Facebook, etc …. In order to be a stand alone application we need to be able to work offline. For example, in Google reader will be great to be able to download the feeds and then be able to read them offline. But wait, this sounds familiar, Google Gear does that. Sadly according to the side it does not work on safari. Well, NOT COMPLETELY TRUE I just downloaded the code today and I was able to get it working with Fluid(webkit based app) and now I have a truly independent online/offline application to read my feeds.
Steps:
1. Check out the sources
svn checkout http://google-gears.googlecode.com/svn/trunk/ google-gears-read-only
2. Open the project in Xcode ( On the docmentation on the Google Gears Code project is out of date)
open gears/tools/osx/gears.xcodeproj
3. Build the code in Xcode
4. Drag and drop files
Gears.plugin to ~/Library/Internet Plug-Ins. GearsEnabler.blundle ~/Library/InputManagers ( The directory might not be created).

Digg it http://digg.com/apple/Fluid_Google_Gears_awesome_apps

TwitterGrapher

FreedomCoder — Mon, 14 Apr 2008 20:11:07 +0000

As part of my research for my thesis and other security related implications, I decided to create a program to create a graph of different type of degrees of relationships in twitter. As of now I only being able to grasp a small amount of the total research but so far so good. So I decided to share some of the first graphs and some of my problems.

1. The first graph worth talking about is, The friends of my friends. As shown below the graph is nice, but it does not show any interesting data, besides the fact that almost all share friends in common that I do not have in my list.

2. When I decided to move to higher degrees the application was able to retrieve the data but the library (graphviz) was unable to generate a jpg or png. In the case of a SVG I was able to create the file but, neither Linux nor Linux64 nor OSX where able to load the image. When I tried to generate a png or jpg the gd or the application gave me a core dump. Thanks Juan, for lending me your Linux64 computation time .

3. I decided to try with GraphML format instead of the graphviz’s dot format. It is worth noting that the degree 2 graph were generated much faster, but again we run into trouble when rendering the huge load of node and edges when I came down to 3 or more degrees. This time was not a matter of not being able to render the images but instead the program I was using Yed, I guess is using an algorithm that does not take into account the fact that I want to see something instead of a huge ball of edges and nodes .

4. Again more problems, but this time with the application not handling the loads. Now I decided I was a good time to redesign the application for more scalability and this is what I’m doing so far. So I will post the code as soon as I have that.
Cheers and hopefully someone likes or can use this post for something. Ohh.. and this is not finished by far hopefully from here a lot of thing will be created and some new functions will be added to the app. And of course all this is written in RUBY !

Finally mod_rails !

FreedomCoder — Sun, 13 Apr 2008 15:06:38 +0000

Extrated from mod_rails Homepage:
“Phusion Passenger ? a.k.a. mod_rails ? makes deployment of applications built on the revolutionary Ruby on Rails web framework a breeze. It follows the usual Ruby on Rails conventions, such as ?Don?t-Repeat-Yourself?.”

The most important thing, installation:

1. Open a terminal, and type:
gem install passenger
2. Type:
passenger-install-apache2-module
And follow the instructions.

Well, enjoy and let the party begin with Apache and Rails. Hopefully, my provider Dreamhost will be deploying this soon to production.

Tim Burks’ Bridges and beyond …

FreedomCoder — Thu, 27 Mar 2008 16:57:12 +0000

Tim Burks wasn?t content merely documenting RubyCocoa with comprehensive, well-written articles or building a better bridge between Ruby and Objective-C. He created Nu, where Lisp meets Objective-C with a splash of Ruby.

Leopard y SSH

FreedomCoder — Fri, 07 Mar 2008 16:15:12 +0000

Desde que instale leopard he tenido un par de problemas con svn usando svn+ssh:// , siendo que mi svn server usa esto no podia sincronizar mi laburo y me estaba sacando de quisio. Luedo de incursionar un poco mas en el tema encontre lo siguiente:

Si tu svn te tirando un error parecido a este:
percent_expand: NULL replacement svn: Connection closed unexpectedly
Al parecer Leopard expande una variable de SSH a NULL. Buscando por internex encontre que agregando la siguiente linea a nuestro ~/.ssh/config solucionamos el problema
IdentityFile ~/.ssh/id_rsa
Esto lo que hace es sobreescribir la busqueda por default de nuestra private key y por ende no obtenemos el error, no estoy tan seguro de que buena sea la solucion pero si alguien tiene una mejor explicacion por favor comenten en el blog asi podemos tener una mejor idea de lo que pasa.