development

[brisk light]

Looks like I'd have to use frida or iridium (I don't know much about these yet)

[hasty ruin]

Don’t think palera1n works right with app decryption tools yet (bc of broken injection into sandboxed apps)

But flexdecrypt might work?

once fugu15’s exploits are bundled into a full jb, the tools will work like normal

[faint stag]

frida requires working injection into apps
Iridium is static but seemingly broken
the best option is probably fouldecrypt-tfp0

[brisk light]

I'd need to find an ios14 device for that then I guess

[unkempt raft]

how do I determine if an app has the default icon? I'm calling _applicationIconImage class method on UIImage

[brisk light]

Thanks I'll try it. Something will work even if not frida!

[ocean raptor]

Wdym default?

[unkempt raft]

it doesn't return nil, but this icon

wouldn't sunst0rm break these features?

[ocean raptor]

Why do you have so many apps without icons...

[tepid olive]

i know a fix for that

[restive ether]

system apps

trolley

[unkempt raft]

these aren't apps, Filza also has this bug

[restive ether]

well the ones that are apps but aren’t home screen apps

[restive ether]

i don’t see a bug

[unkempt raft]

he just knows it

[ocean raptor]

@unkempt raft so you just want to filter so that you only see real apps?

[unkempt raft]

yeah

exactly

[ocean raptor]

Use this https://git.cameronkatri.com/tweaks/tree/QuickActions/QuickActionsPrefs/LSApplicationProxy+AltList.m#n46

[unkempt raft]

dope

[ocean raptor]

Filtering by app icon is the wrong way

[ocean raptor]

Note: this is stolen from AltList

https://github.com/opa334/AltList/blob/main/LSApplicationProxy%2BAltList.m

Use that instead

[unkempt raft]

atl_isHidden, correct?

[ocean raptor]

It has tons of convenience methods for LSApplicationProxy

[ocean raptor]

Yeah, just filter based on [proxy atl_isHidden];

[unkempt raft]

Appreciate your help!

[tepid olive]

its a like completely different method that sunstorm uses

well

not completely different

[unkempt raft]

👌

checked for hidden tag in both appTags and SBAppTags, isRestricted and isLaunchProhibited

[hasty ruin]

Siri icon

[unkempt raft]

I don't care

[hasty ruin]

[indigo peak]

@naive kraken if i install an app using trollstore, would the app have permissions to make in app purchases from the appstore

[naive kraken]

probably not, but idk for sure

[indigo peak]

hmmm

[naive kraken]

yeah probably not because SEP is involved probably

[indigo peak]

def not piracy: but im forcing an apps isPremium method to be true and i dont want it to you know, buy the product after whatever the billing period is is up

[brisk light]

regarding downgrading, I understand I could use futurerestore.. According to the bot message

Unsigned firmwares
If you're trying to downgrade to an unsigned version of iOS, you will need to meet specific requirements in order to downgrade.

These requirements include having a Jailbroken device, Blobs, and being in the sep/bb range of downgrading. (If you're on A11 or below the jailbreak requirement isn't needed).

My iphone 7 is A10 right. So I could downgrade to 14.x

ah, no, I'm wrong, i dont have a valid .shsh2 blob from when it was signed

I think the easiest option will be to buy an iphone 5

ah, damn yeah

sunstorm is tethered right, so I'd have to sunstorm, then jailbreak, and keep it on

I'm starting to see why the people who had IPA device farms are starting to look into new options!

[brisk light]

Thats one thing I do have! Time is my main constraint here !

[rain falcon]

@grave sparrow listen fucker

[hasty ruin]

They cannot

[indigo peak]

Ty

[glacial matrix]

Finally caught up since this (:

[main apex]

@ocean raptor Is there a windows build of your ldid? https://github.com/ProcursusTeam/ldid

[restive ether]

look at actions

[ocean raptor]

https://github.com/ProcursusTeam/ldid/actions/runs/3011705957

[indigo peak]

@ocean raptor you seem like youd know

how do i reboot programatically on ios 15

w/o special entitlements

[restive ether]

you don’t TROLL

[glacial matrix]

gatekeeping knowledge, eh?

[faint timber]

“I’m able to tell you, but just wont be telling you Capeesh?”

[indigo peak]

i know you can

i did it before

but i lost the project

yeah

before trollstore was released

App_PRIVATE_FRAMEWORKS = FrontBoardServices

#include <FrontBoardServices/FBSSystemService.h>

@interface FBSSystemService ()
+ (id)sharedService;
- (void)reboot;
@end

// ...

[[FBSSystemService sharedService] reboot];

doesnt work

what does shutDownAndRebootNow belong to

[grim sparrow]

You just need to find a funny bug to panic the kernel, launchd, etc

[indigo peak]

i remember there was one

but i just dont know hwere it was

[grim sparrow]

I only know one to crash backboardd off the top of my head

[zenith hatch]

ofc you do

[indigo peak]

[grim sparrow]

https://github.com/elihwyma/Respring

[next wadi]

does that still work

[zenith hatch]

yes

[gentle grove]

https://twitter.com/IanColdwater/status/1586476542414446592?s=19

Ian Coldwater 👻🌿 (@IanColdwater)

work with SQL? JOIN a UNION

Likes

872

Retweets

165

Twitter · Oct 29, 2022, 9:54 PM

[zenith hatch]

gm biba

[faint stag]

i get that it's a sql joke but sql is complicated enough

to the point where i don't fully get it

[gentle grove]

I think the joke is something about workers' unions

[faint stag]

yeah i'd join a union too if i had to work with databases

[gentle grove]

bobashare uses no databases

[calm comet]

PLZ JB IPHONE 12 IOS 14.6

[faint stag]

we don't have one

[calm comet]

Eplain..plz

Its been 2 years

GOING FOR THE THIRD

And no jb yet

[celest quiver]

[hasty ruin]

17 months isn’t nearly 3 years lad

[calm comet]

…

You saying?

[hasty ruin]

I saying 17 months isn’t nearly 3 years lad

[native dune]

nor 2 years

[hasty ruin]

fr

Closer to 1

[native dune]

good we don’t need any more jbs

[calm comet]

????

[native dune]

????

did i stutter

[calm comet]

What do you meannn

[native dune]

wdym what do i mean

[calm comet]

Forget it

[hasty ruin]

Consider it forgotten 👍

[indigo peak]

@grave sparrow so if i want to get the addr of the vinfo struct in the memory, technically, could i make a "bruteforce" that loops through all memory values that checks if the current value at that memory addr is the width and the next is the height since PE_Video has 2 properties for that
https://github.com/apple/darwin-xnu/blob/main/pexpert/pexpert/pexpert.h#L275-L276

would that be inefficient, a bad idea, shit code

hm yeah

do you think that i could compare the v_rowBytes, v_width, & v_height values

bc those are like, the only 3 i think i could get

and since they are all next to each other

idk how i should loop through it tho

true

thank you copilot

[ocean raptor]

Oh my god

You could not be more wrong

[indigo peak]

??

how

[olive bloom]

anyone have the name of the package that includes lipo for installing to ios?

[ocean raptor]

odcctools

[olive bloom]

fml thanks

[indigo peak]

do you have any idea of loosly how id do that

do i iterate byte by byte?

since obv from the slide to the struct addr there are all different data types

so the sizes will be different

i want it to work on all devices

yeah

i highly doubt its not stripped

how do you even view symbols on ida

is it just under strings?

[olive bloom]

i'm familiar with arm64 compiling, but i kinda stop effing around when there was a seachange with arm64e

even though i'm on iphone 11

is compiling for arm64e (on device) as simple as ARCH = arm64e on the makefile?

[indigo peak]

idk how

yeah i have no clue

[ocean raptor]

Theos does that automatically, don't manually set ARCHS

[indigo peak]

i always manyally set archs

to lower compilation time

im very impatient

[olive bloom]

kk

[hasty ruin]

[olive bloom]

arch shows arm64 on my ip11 14.8

sorry for the noob ?s i'm trying to get back up to speed

[hasty ruin]

It does 👍

Idk how recent it is

But I did a fresh install two days ago and it did

[olive bloom]

when i ran nic, it did not put archs into the makefile

[indigo peak]

@grave sparrow is there a max possible value thast the slide can go up to

wait

that made 0 sense

like

in the range id be searching

the lower bounds is the slide

what could the upper bounds be

damn

whats like

the end to the kernel

fuck

okay

a while loop it is

😄

while(trye)

i have absilutely 0 idea how to do that

i do monkey code

monkey brain

monkee

@grave sparrow could i just write to 0x0 to force a reboot

just force a kernel panic

[hasty ruin]

(Using a randomised nstimer)

[indigo peak]

why are they all 0x0

[gentle grove]

null

[hasty ruin]

Always have been

[olive bloom]

sorry again if i'm not hip with the cool kids, but what's with so many names having *goba at the end?

[indigo peak]

shepgoba was banned

so r/jb monke brains activate

person ban

change name

ooga booga

[olive bloom]

i think i follow, but not much

on the other chans here, there's e.g., puggoba

and bobagoba?

and amygoba and jazzgoba

maybe i just don't understand how discord works. (and as proof, i offer the serious question: why is it preferred over IRC?)

[slim bramble]

While decrypting calls

[olive bloom]

i'm mid 30s. not too old for me

any idea what's been the absolute peak online user count on this discord?

[indigo peak]

oh shit

[olive bloom]

wow

[native dune]

right now 10k are on

[olive bloom]

yeah that's a lot

[native dune]

so yea probably about 30k

[olive bloom]

i guess that count would be trivial considering it's so easy to "be online" thru the phone apps

lurkers

in truth, i've learned a good deal just by lurking on different IRC chans

you're probably right. at least until user base needs exceed discrod's ability or willingness to implement

[gentle grove]

except slack is several years older than discord

Would you call AIX a rip off of linux

[tepid olive]

so discord is a rip-off slack?

[gentle grove]

It literally came first

[gentle grove]

.

[olive bloom]

LOL

[gentle grove]

Unix is a ripoff of linux

confirmed

[olive bloom]

zing

[gentle grove]

tr

slack is for businesses

imagine a company using discord

[tepid olive]

wouldn't at all surprise me

[olive bloom]

yeah i was about to say, slack isn't going anywhere anytime soon it's too popular with large companies

[tepid olive]

and too popular as a vector for those companies getting hacked

[gentle grove]

Your kind would never become a boss

boss of jailbreak

fr

[olive bloom]

from the outside looking in, it is hard not to see slack as yet another way companies control employee time

[gentle grove]

you do realize you have to not have any morals to be a CEO right

and no computer literacy

trol

And be 70 years old

Many companies use teams anyways

[olive bloom]

and then there's that...

[tepid olive]

this is also true about slack

[gentle grove]

That's what most the companies I know use

bobachat

[olive bloom]

the univ i have a postdoc at requires us to use outlook. it's been a little over a year, and i am hating every second of it. there is a crapton of builtin surveillance. completely off topic

[gentle grove]

outlook is normal

[restive ether]

dumbass it is on there

[ocean raptor]

https://man.cameronkatri.com/ldid

I want to...

[tepid olive]

i remember way back in mid 2016, when i joined discord was a bit slower

didnt know it was cuz of that

[brisk light]

Got hold of an iPhone 7 running 13.5 today, woop! I'll be able to upgrade and JB this to be able to decrypt IPA's

[indigo peak]

https://github.com/pinauten/KernelPatchfinder

[gentle grove]

when you code in arial

[hasty ruin]

I have seen much worse

(handwritten fonts)

[cloud yacht]

Comic sans

Although might be nice for dyslesic people

[tardy narwhal]

you should code in ms paint or paint.net

it's fun drawing next to your code

[cloud yacht]

Comment is just you drawing

[tardy narwhal]

no, i need more artistic freedom

only in ms paint

[cloud yacht]

Paint3D

[faint stag]

this isn't even that bad lol

[faint stag]

i think this isn't cursed
more like.. problematic

[wicked summit]

Oh fuck oh shit

It's happening

Stay calm

[naive sedge]

I wonder if it would be possible to emulate Hi-Five and lightning communication on a RPi Pico with the PIO?

[native dune]

gm

ight i’m out

/s

[shut stag]

lemme ping everyone in this channel

[crisp frost]

always funny when #general becomes #general

anyway

[torn oriole]

other channels got this level of intelligence on god

[crisp frost]

i love having catalina

and not being able to compile fugu

[torn oriole]

Snapchat tweaks get you banned so

Good luck

[crisp frost]

yes

[native dune]

who deleted it

[tidal jungle]

I’m a developer, high key

[native dune]

i would but i’m on arm64

[crisp frost]

yep

[native dune]

i’m assuming mineek is on arm64 too

yeah

[crisp frost]

nah

[native dune]

A11 took an L again

[crisp frost]

i have something called my moms phone

[torn oriole]

I fucking hate A11

[tepid olive]

my moms iphone 13 is on 15.4.1

[torn oriole]

Nothing good

[crisp frost]

or better said: my moms old phone

[torn oriole]

Apart from checkm8

[native dune]

oh right my moms phone and ipad are on 15.3.1

[tepid olive]

heres the catch

[tepid olive]

its her work phone

[crisp frost]

trolley

why are we all in #development rn actually

[native dune]

i want to ping linus and ask if the kernel exploit works on 14 but i don’t want to get warned

[native dune]

because #jailbreak is crazy rn

[crisp frost]

whitename spam moment

[tepid olive]

ask in sileo

[crisp frost]

anyway imma do some fugu15 funny rn

[native dune]

kpf

[crisp frost]

try to see if i can get atleast SOMETHING on arm64

[native dune]

maybe the exploit?

kernel

again A11 taking an L

[crisp frost]

checkm8 = semi-tethered

[native dune]

i like sep

[tepid olive]

@crisp frost do you see my dms

[crisp frost]

good point

[crisp frost]

yes

but i am officially dumb

[native dune]

cya

[tepid olive]

why occur

[crisp frost]

💯

[crisp frost]

idk ill take a look tmrw or smth

[tepid olive]

why does it get offset completely off

and wrong bytes too

l,mfao

[native dune]

banana

[high citrus]

requires password disable right?

[tepid olive]

no

not that

[native dune]

on A11 (and A10 without using blackbird)

[tepid olive]

@crisp frost plz look

[torn oriole]

Surely YouTube gets sued for false advertising they have the dislike counter visible in the App Store screenshots

[gentle grove]

I know but its cursed

[gentle grove]

Why is there a class named Double

why are inlay hints always on

[cloud yacht]

wait until you hear aboud double double

[tepid olive]

My UID is 0
My GID is 0
Status: Launching oobPCI
CP: 0x1b7c8
GE: 0x15590
[SpawnDrv] Patches set-up
[SpawnDrv] Resuming!
[SpawnDrv] Received exception message!
Exception occured @ 0x1003bb7c8 [0x1b7c8]
LR: 0x9f0a7881003bb77c [0x9f0a78800001b77c]
[SpawnDrv] Received exception message!
Exception occured @ 0x1003b5590 [0x15590]
LR: 0x1003bb7fc [0x1b7fc]
Status: Gaining r/w
[SpawnDrv] Received exception message!
Exception occured @ 0x4142434400 [0x4042094400]
LR: 0x10022caf4 [0xffffffffffe8caf4]
Initializing DriverKit...
Checking in...
Creating root dispatch queue...
Registering...
Waiting for start message...
Opening PCI Device...
Opened PCI Device!
Found boot-args!
Virt base @ 0xFFFFFFF0161AC000
Phys base @ 0x8021AC000
Offset in physmap: 0x4198000
Low25 Bits are: 0x1500000
PCIMemory @ 0xFFFFFFEB53500000
VTBL @ 0xFFFFFFF01A0E5058
Kernel base @ 0xFFFFFFF01997C000
Status: Patchfinding
[SpawnDrv] Received exception message!
Exception occured @ 0x4841585800 [0x47411e5800]
LR: 0x10022be34 [0xffffffffffe8be34]
Loading kernel...
Loading took 0 second(s)!
Patchfinding...
Pos 0: 0x12978000
Pos 1: 0xfffffff009ca5a88
Pos 2: 0x308
Pos 3: 0xfffffff00773c010
Pos 4: 0xfffffff007c7713c
Pos 5: 0xfffffff008289918
Pos 6: 0xfffffff0082898cc
Pos 7: 0xfffffff008280660
Pos 8: 0xfffffff008280a58
Pos 9: 0xfffffff0098edd08
Pos 10: 0xfffffff008280aa8
Pos 11: 0xfffffff008280ac0
Pos 12: 0xfffffff007c9ce50
Pos 13: 0xfffffff008205e10
Pos 14: 0xfffffff007b140b8
Pos 15: 0xfffffff007c77e00
Pos 16: 0xfffffff007c76c5c
Pos 17: 0xfffffff007b14268
Pos 18: 0xfffffff007c76a40
Pos 19: 0xfffffff008289a3c
Pos 20: 0x8
Pos 21: 0x378
Pos 22: 0xf0
Pos 23: 0xa8
Pos 24: 0x158
Pos 25: 0x48
Pos 26: 0x40
Pos 27: 0x88
Patchfinding took 1 second(s)!
[DBG] resolveKernelOffsets: gOffsets.slide @ 0x12978000
[DBG] resolveKernelOffsets: ourProc @ 0xFFFFFFE21B35A4F8
[DBG] resolveKernelOffsets: kernelProc @ 0xFFFFFFF01C577A00
[DBG] resolveKernelOffsets: ourTask @ 0xFFFFFFE3E5D75B00
[DBG] resolveKernelOffsets: kernelTask @ 0xFFFFFFE3E6908680
[DBG] resolveKernelOffsets: itk_space @ 0xFFFFFFE133651080
[DBG] resolveKernelOffsets: is_table @ 0xFFFFFFE133727C00
[DBG] resolveKernelOffsets: vmMap @ 0xFFFFFFE2FF3CE1C0
[DBG] resolveKernelOffsets: ourPmap @ 0xFFFFFFF02EAC3640
[DBG] resolveKernelOffsets: kernelVmMap @ 0xFFFFFFF188EB00A0
[DBG] resolveKernelOffsets: kernelPmap @ 0xFFFFFFF01C54C0F8
[SpawnDrv] Received exception message!
Exception occured @ 0x4841585814 [0x47411e5814]
LR: 0x10022b6d4 [0xffffffffffe8b6d4]
Attempting to copy out DK ports...
Copied out DK ports!
Status: Spinning...```

In case anyone is interested in seeing what happens when jailbreaking fails

[steady nest]

it fails then, nice

[faint stag]

not a class?

[gentle grove]

what is it them

a non primitive data type

Look at loan lol

capitalized Double

so its not the primitive type

wtf is that

[faint stag]

yep
still can be defined with an uppercase d

[gentle grove]

why does that exist

[faint stag]

the compiler does not care

[gentle grove]

that's just stupid

and also syntax highlighting fail

its not italic for some reason

[faint stag]

if it was something else, it wouldn’t be blue lol

[gentle grove]

What would it be then

MerchantAccount is blue too

[unkempt raft]

hi, trying to compile fugu15, get this error after pulling latest changes

[faint stag]

well you can have static variables

[gentle grove]

how's that related

[faint stag]

i just don’t see the issue

[unkempt raft]

redownloaded repo seems to work now /shrug

[gentle grove]

capitalized should be for classes

lowercase for primitive type

[faint stag]

The Double class wraps a value of the primitive type double in an object. An object of type Double contains a single field whose type is double.

i didn’t write that part so it’s either a typo or there’s a reason

@gentle grove

[gentle grove]

Where is this

And why

[faint stag]

stackoverflow

[gentle grove]

link?

[faint stag]

https://stackoverflow.com/questions/20437003/what-is-the-difference-between-double-and-double-in-java

[gentle grove]

why would you use Double though

[high citrus]

Double has an use in places where you need a class, e.g HashMap<String, Double>

[faint stag]

also, Double can be null

[high citrus]

also it is mutable

[faint stag]

not really a failure since it’s a wrapper and not the primitive type alone

[gentle grove]

I said fail because you said it was the same as the primitive typr

but its not

[faint stag]

i stand corrected then

i’m no java expert lol

anyway, another thing to note is that you should use equals() when comparing the value of a Double since == checks memory references for objects

[gentle grove]

oh yeah another java L

[tepid olive]

So uh

Does anything at all work?

From Sileo

Something that stays in /var/ maybe lol

[zenith hatch]

silly people innit

[tepid olive]

i am attracted to adult anime women

[cloud yacht]

Doing apt update over Bluetooth hotspot is pain

Actually I don't even know if this is working

Fugu crashes with wifi on

[tepid olive]

get fugu'd

[indigo peak]

@grave sparrow i still have 0 idea what im doing

[cloud yacht]

It turns out it wasn't even working had to restart my phone

[ocean raptor]

Why would you install it...

It's literally useless

[restive ether]

these people will install anything if you tell them it’s a jailbreak

even if they have 0 idea what they’re doing

[ocean raptor]

🙄

[indigo peak]

@restive ether do i have permission to make a fake jailbreak w a token logger to see how many people run it

[ocean raptor]

lol

[tardy narwhal]

you should do it

[ocean raptor]

How tf are you gonna token log with sandbox

[indigo peak]

i have my ways

[tardy narwhal]

taking away the trust built up my clout chasers is the key

[indigo peak]

so i never heard a no

[tardy narwhal]

tbf either you'll do it or someone pls get iMokholes to make malware again

[indigo peak]

ill just have an alt acc do it

so they cant prove it to be me or not

[ocean raptor]

Be sure to delete this conversation

[indigo peak]

no bc what if its some random kid who does it

then they are just staging me

[tardy narwhal]

that's the spirit, some devs here have alts as well which they use to rant on or ask questions they're afraid to ask on their main account - for some unexplainable reason

[tepid olive]

https://media.discordapp.net/attachments/688122301975363591/1035797886518181929/activation_lock.gif

[tardy narwhal]

so using it for bs is fair game

[indigo peak]

i used to do that

until i accidentally respoded to an answer on my main

when it was supposed to be the alt

[tardy narwhal]

honestly, never feel ashamed for a question if the answer requires more than 3 stackoverflow threads

[naive kraken]

no, Fugu15 doesn't neuter amfi, you still have to upload your own trustcaches to get anything at all to run

[indigo peak]

i just dont care anymore

aand people know how stupid i am

so i dont have to hiude anything

[tardy narwhal]

you're a smart goof, dw. there's some legitimately incredible stupid people out there though

[indigo peak]

i just compare myself to other people and it makes me feel stupid

especially other people my age

[tepid olive]

but have you compared yourself to people in high school

[indigo peak]

im in highschool

[tepid olive]

comparably youre probably a genius

[indigo peak]

my best friend is like extremely smart, applying to mit, 5 on every ap exam

does calc 3 as a self study in his free time

and then theres me

[tepid olive]

and

he's the exception not the rule

the average joe in high school is a dumbass

[indigo peak]

true

that is one way to look at it

[tepid olive]

theres always an asian kid better than you thats just how life is

[indigo peak]

hes not even asian 😭

hes polish

[tepid olive]

sure but some kid in the eastern hemisphere is better than your friend

and someone else is better than him

ad infinitum

comparisons are delusions meant to keep you weak

and no im not smoking weed right now

[tardy narwhal]

tbf it's not bad to compare yourself but remember to accept you're moving at your own pace and it's probably still better than 80% of the kids in terms of compsci exclusively

[tepid olive]

https://tenor.com/view/420-bag-of-weed-dance-dancing-stage-gif-16683566

[tardy narwhal]

based grindset

[tepid olive]

sigma male grindset

https://tenor.com/view/gigachad-chad-gif-20773266

even then i wont lie i struggle with the same thing @indigo peak

its a hard grind but keep your head up king

👑

5 line tweaks are the most effective

the amount of reverse engineering that goes into a well crafted 5 line tweak cannot be understated

of course i know you meant like layoutsubviews bullshit

[tardy narwhal]

the problem solving part is probably still the same - familiarize with the frameworks & tools at hand and move from there - it's probably just the average joe would much rather bang chicks and do drugs in that demographic

[tepid olive]

the alpha chad move: do both

"hold up babe i gotta hook this class real quick"

[tardy narwhal]

the rare blessing of having the bitches and having them type out code for you

[tepid olive]

https://media.discordapp.net/attachments/688122301975363591/1035797886518181929/activation_lock.gif

[tardy narwhal]

honestly the stereotype about having someone feed you ice cream is 100% accurate

that's valid for you as well g

[tepid olive]

(not paid for by nike)

[tardy narwhal]

my harem's full, cannot incorporate more

it's okay, just take a cold shower to repay for the sins you have committed

no body lotion tho

[tepid olive]

true

[tardy narwhal]

they'd rather suck a d or molest

run for your lives

[tepid olive]

[indigo peak]

thanks man

giga chad

[tepid olive]

https://tenor.com/view/hmm-agreed-yes-nodding-indeed-gif-5468678

[ocean raptor]

Chicks don't talk to me, and I don't know where to get drugs

[indigo peak]

fugu15 aint doin shit for me

[ocean raptor]

I will not touch fugu15

Tbh, I feel like linus should not have released it with procursus and sileo being installed

[indigo peak]

bro it doesnt even install sileo for me

[ocean raptor]

Makes people think it's a user jailbreak

[zenith hatch]

“gm” developers

[hasty ruin]

gm true

[zenith hatch]

sleep

[tardy narwhal]

I gotchu, drop by Germany sometime

[hasty ruin]

tbf i prob should

jet lag + didnt sleep much

[zenith hatch]

fr

[tepid olive]

I see

[ocean raptor]

Next person to ask how to install something on fugu15 owes me $5

[restive ether]

touching down

[hasty ruin]

kid named down:

Britta

kjc took her

[ocean raptor]

Your mom

When I sexed her last night

[ocean raptor]

Are you offering a minor drugs on Halloween?! Fox News warned me about you liberals! 😡🤬

[restive ether]

rainbow fentanyl out to kill

[pearl sail]

You know I am def going out giving kids $250 worth of fentanyl in their candy for free

[brazen timber]

Why not both?

RE and banging chicks are not mutually exclusive

[naive kraken]

xpc services = mach services = sandbox_extension_issue_mach (or something)

It's a bit harder to use though

I can send you an example call in a sec

using fugu15?

that's what libhooker does afaik

I see

For Fugu15 I have some interesting idea on how to get past the trustcache uploading requirement

(just use dispatch sources to listen for added / removed / changed files in /var/jb, check if they're a macho binary and if so add / remove them to / from trustcache automatically)

launchd execs launchd

so you can hook exec and add the dylib to env vars I think

char* machToken = sandbox_extension_issue_mach("com.apple.security.exception.mach-lookup.global-name", "com.opa334.jailbreakd", 0);

yea

env vars are the best way to do it

uh

I'm talking about intercepting the posix_spawn call

parent:

• abandon child

child:

• consume drugs

idk lol

might be macOS specific

what path is the dylib in?

hm idk

i mean, less work for you I guess

there is probably a function you can call

launchctl invokes launchd api

hm

idk

I feel like there is logic in launchd to load all plists in a dir

and jailbreaks just patch that to apply to a different dir too

no clue

probably not

[tardy narwhal]

I didn't say that tho

[tardy narwhal]

[ocean raptor]

@indigo peak is it possible to create an Apple Watch app with theos?

[sly knoll]

How can I fix this?

I’m building Procursus

But I can’t find deb file

[ocean raptor]

You can't target macOS from Linux

[gentle grove]

rust

[naive sedge]

How can I test where I can use JIT in a certain situation?

Like I’m going to implement something using it later but I want to test if my method for enabling JIT works or not

I’m trying to figure out if you can run JIT in swift playgrounds just for context

Which is why it’s annoying to write + test literally anything and I want to know if it works

[ocean raptor]

Are Apple Watches still arm64_32?

Series 8 specifically

[ocean raptor]

we use codesign for macOS targets, so it won't work without modification

[tepid olive]

hi, i have the code for trying to list apps on the device:

    print(Dynamic.LSApplicationWorkspace.defaultWorkspace().allInstalledApplications())
    return false
}```
for some reason, when i try clicking the button, it returns:
```<LSApplicationWorkspace: 0x281b3c9c0>```

[high citrus]

seems alright, it returned an LSApplicationWorkspace instance. What did you expect?

[tepid olive]

how do i make it print a list of installed apps then?

[high citrus]

to get a list of strings, you would probably need to add .installedApplications looking at the headers

so print(Dynamic.LSApplicationWorkspace.defaultWorkspace().allInstalledApplications().installedApplications)

[tepid olive]

thanks! now it prints:

)

is it normal on a non-jailbroken device?

[high citrus]

uhm not sure, could also be the wrong method to get the list

[high citrus]

print(Dynamic.LSApplicationWorkspace.defaultWorkspace().allApplications()) is this different?

[tepid olive]

yep, <LSApplicationWorkspace: 0x282890ae0>

[high citrus]

what do you want? bundle ids or app names?

[tepid olive]

bundle ids

well, doesnt matter but bundle ids is better

[high citrus]

This is weird because I would expect this to be an instance of NSArray <LSApplicationProxy *> *)

[tepid olive]

im confused too

[high citrus]

I don’t know swift well enough, but does the output change if you remove the last ()

[tepid olive]

<LSApplicationWorkspace: 0x2837fcee0>

[unkempt raft]

Because with Dynamic you need to add .asArray to return an array, because currently it returns a Dynamic object

@high citrus you might also find this interesting

[tepid olive]

oh. ill try that

[high citrus]

ah interesting, didn't know what the dynamic object did, looks pretty useful (https://github.com/mhdhejazi/Dynamic , and in Orion)

[zenith hatch]

where watchos headers

[ocean raptor]

WatchOS.sdk

[zenith hatch]

where private framework headers

i need to check something in pepperuicore

i remember ethan sending me a url to a gh repo

@tacit spade whar

[indigo peak]

hmmm im not sure ab this one

ive tried in the past, but i think with a free acc it wont work, so it would either have to be with a paid dev acc or trollstore

[tepid olive]

yes

the S8 cpu is the S7 cpu is the S6 cpu

which is 2 A13 e cores (forgot the uarch name)

codenamed thunder

[indigo peak]

i dont see why it wouldnt be possible, im trying rn but my toolchain doesnt have WatchKit

[main apex]

Is the ida pro crack still available here?

[indigo peak]

windows or macos

[zenith hatch]

macos

pls gib

[indigo peak]

yeah no clue on that one

sorry

[zenith hatch]

w

[main apex]

Windows

[zenith hatch]

oh i have ida crack in my downloads

windows

lillie you want it?

[zenith hatch]

watchkit sucks also how would you make shit with it

[main apex]

Fiore already gave it to me

[zenith hatch]

you cant do programmatic w/ watchkit you have to use interface builder

[zenith hatch]

fr

[main apex]

Slow llsc 🐢

[zenith hatch]

wrong you didnt read it in time

[indigo peak]

could you make a watch app without watchkit??

[zenith hatch]

with swiftui

yes

[indigo peak]

[zenith hatch]

you could make it with uikit tho

[indigo peak]

does the default xcode watch extension use watchkit

[zenith hatch]

idk how tho but it involves adding uikit headers yourself

[zenith hatch]

xcode14 no longer lets you use watchkit at all but swiftui was default on 13 iirc

watchkit works though

xcode14 begs you to use swiftui when editing a wk project

i can send you blank projects of both if you want

and also blank projects of watch-only with both ui frameworks too

[tacit spade]

@zenith hatch u pinged?

sorry was in class

[zenith hatch]

can you send link to watchos headers

all good dw

[tacit spade]

oh

[zenith hatch]

idk where they are

[tacit spade]

uh I usually check leonatan’s stash

[zenith hatch]

who that

[tacit spade]

https://GitHub.com/leonatan/apple-runtime-headers

[zenith hatch]

ty fren

[tacit spade]

np

they’re out of date though

just

be aware

[zenith hatch]

all good

[tacit spade]

watchOS headers are kind of hard to come by

[zenith hatch]

makes sense

[restive ether]

noooo the LNpopupcontroller guy

[indigo peak]

sideloadly sucks dick

what type of error is this

[unkempt raft]

helpful af

[hasty ruin]

i wonder how

[zenith hatch]

cheese ida 7.7.zip

[hasty ruin]

so true

[merry glade]

Hiii is there any way to make LongPressGestures last forever? Right now the gesture is over after ~ 1 second, what I'm trying to do is having two behaviours firing when the long press starts and when it ends

Text("Click me!")
                .gesture(
                    LongPressGesture()
                        .onChanged { status in
                            print(status)
                        }
                        .onEnded { status in
                            print("Over! \(status)")
                        }
                )

This was code I was fucking with a bit to explore gestures and it just fires .onEnded after a second, but if I change the minimum duration I don't know if the behaviour is the one I'd expect

[nimble parcel]

try chaining a DragGesture after the LongPressGesture

LongPressGesture().sequenced(before: DragGesture())

[merry glade]

Thank you! I will try; for now having an onLongPressGesture + onPressingChanged which runs the behaviours depending on the boolean seems to do the trick

but I will 100% want a better solution eventually

[tacit spade]

eh?

lnpopup was a thing before sheet presentation

[lime pivot]

it’s the github repo owner

[tacit spade]

o did he do something

[sly knoll]

How about on iOS

I have jailbroken Air2 with Taurine

[faint stag]

yeah that's not going to work either lol

[sly knoll]

[ocean raptor]

Why are you trying to build for macOS?

[faint stag]

just read the code? man

[ocean raptor]

Just read the header

Do you not have private headers for every single macOS private framework and library?

LOL

So cringe

||someone, please send me private framework headers||

That's only objc

Idiot

@grave sparrow -1 and sets errno on failure

Returns handle for sandbox_extension_release() on success

Wow, not even a thanks?

I had to call in some serious favors to get you that information

Smh

Because that's the handle!

Idiot

I am correct

[faint stag]

true

[ocean raptor]

I'd cite my sources but Tim Cook's parties are the best

[sly knoll]

Because I was wondering what would happen if I built it.

[naive kraken]

that's the whole reason I sent my call, the app-sandbox thing would never work for me

it would consume but still not have access to the mach service

maybe that's a macOS / iOS difference though

[elder scaffold]

I now need substitute for rootless path

My iPhone 7 and iPad Pro 9.7 only have 32GB

Also air 2 is 16GB...

[vivid dew]

wtf

madoka pfp

[runic mason]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[hasty ruin]

[runic mason]

One message removed from a suspended account.

[glacial matrix]

Here’s a decorated Christmas tree

from typing import Any
from typing import Callable


def christmas(*args: Any, **kwargs: Any) -> Callable[[Callable], Callable]:
    def christmas_tree() -> None:
        print("🎄")

    def inner(function: Callable) -> Callable:
        return christmas_tree

    return inner


@christmas()
def tree() -> None:
    print("🌲")


if __name__ == "__main__":
    tree()

[runic mason]

One message removed from a suspended account.

One message removed from a suspended account.

[glacial matrix]

(*profession)

[runic mason]

One message removed from a suspended account.

[hasty ruin]

https://tenor.com/view/minor-spelling-mistake-gif-21179057

[runic mason]

One message removed from a suspended account.

[glacial matrix]

Some teachers/professors just shouldn’t be allowed to be in front of a class

[runic mason]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[turbid fjord]

Yeah it’s always the students fault

Just do your homework and study harder

Ez 🙄

[runic mason]

One message removed from a suspended account.

[turbid fjord]

Yeah no worries 🙄

[runic mason]

One message removed from a suspended account.

[turbid fjord]

Your welcome 🙄

[runic mason]

One message removed from a suspended account.

[ocean raptor]

https://tenor.com/view/spelling-mistake-minor-spelling-mistake-meme-gif-23650588

*you're

[runic mason]

One message removed from a suspended account.

[hasty ruin]

Smh beat me to it

[turbid fjord]

Sorry 🙄

[hasty ruin]

I’m supposed to be the one to bully hugo

[turbid fjord]

[runic mason]

One message removed from a suspended account.

One message removed from a suspended account.

[faint stag]

when what you're trying to do is harder than it seems:

it's really dumb but i have a loop that depends on the amount of arguments given
i'm trying to do something with the next argument, or next two arguments (which would be the value of i+1 and i+2)

of course, in *sh you use $N to get the value of the nth argument
problem is that N is also a variable and you reference variables with $var or ${var} depending on the situation

the most logical thing one would try is ${$N} except that's a bad substitution (which is also what generates the indirection warning)

[ocean raptor]

eval

Or, if you're using bash, not POSIX shell, ${!N}

[faint stag]

but that doesn't work

for ((i = 1; i <= $#; i++)); do

val=$(( i+2 ))
echo "${!val}"
done

of course it works when i use i but if i tried to use arithmetic for the variable, it outputs nothing

(yes i'm providing at least two arguments)

wait no i'm dumb, i forgot that this was i+2 and not i+1

💀

[runic mason]

One message removed from a suspended account.

One message removed from a suspended account.

[primal perch]

ios 16

[rose wren]

Hey guys can someone make a tweak that’ll make the pain stop

[primal perch]

https://tenor.com/view/suffering-minion-minion-suffering-despicable-me-gif-25527046

600

nice

yeah little bit

[primal perch]

or might it just be empty because its a simulator binary

feel like ive seen that before

[primal perch]

@grave sparrow

true

https://media.discordapp.net/attachments/540406445967933481/709509933971800264/when.gif

no i didnt negotiate very well like a dumbass

all good though

we have safe twerk

https://cdn.discordapp.com/emojis/965133139175436320.gif?size=240&quality=lossless

https://cdn.discordapp.com/emojis/965133139175436320.gif?size=240&quality=lossless

LOSSLESS

[main apex]

Embed fail

[primal perch]

https://tenor.com/view/epic-embed-fail-ryan-gosling-cereal-embed-failure-laugh-at-this-user-gif-20627924

[runic mason]

One message removed from a suspended account.

One message removed from a suspended account.

[primal perch]

DrawChristmastree(Number+2)

[runic mason]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[primal perch]

how's alex doing

[runic mason]

One message removed from a suspended account.

[runic mason]

One message removed from a suspended account.

[vivid dew]

wtf

shep back

[runic mason]

One message removed from a suspended account.

[runic mason]

One message removed from a suspended account.

[hasty ruin]

🗿

[runic mason]

One message removed from a suspended account.

[primal perch]

tree

[glacial matrix]

for loop?

[runic mason]

One message removed from a suspended account.

One message removed from a suspended account.

[glacial matrix]

Use a for loop

Or a while loop

[runic mason]

One message removed from a suspended account.

One message removed from a suspended account.

One message removed from a suspended account.

[primal perch]

among

[ocean raptor]

Why?

[primal perch]

i dont see why that wouldnt be 'fine' it just is

[rancid ledge]

Hi, how do i a person with unjailbroken phone develop jailed tweaks? I remember i used some tool when i develop tweaks back then and i could see all the views

I have theos-jailed ready for ios15, but i have no idea what to hook

Oh yes, flex explorer

[lyric timber]

Any data hoarder here who still has Xcode 14.0 betas in their download folder? >.>

Apple deleted them

https://data.nicolas17.xyz/xcode-torrents/Xcode_14_beta_2.xip.torrent thru _6

[rancid ledge]

Thanks, i was just trying to inject some tweak which would allow me to use flex like "flex loader", but ill try this

Any other tips?

[rancid ledge]

@weary heath Hey, how do you dump all classes to a file? Im having quite time figuring it out even with the github

[unkempt raft]

Hi, why does the author say they use SFBrowserCreate()and then uses TDKSFBrowserCreate? What does TDK stand for? (Sharing.framework private API)

In Sharing.tbd it's named _SFBrowserCreate

[lyric timber]

Might be their own wrapper?

[unkempt raft]

Probably. Taken from https://i.blackhat.com/USA-19/Thursday/us-19-Zheng-All-Your-Apple-Are-Belong-To-Us-Unique-Identification-And-Cross-Device-Tracking-Of-Apple-Devices.pdf Slide 32-33

Also, is it possible to find these symbols inside some header? Can't seem to find any, are they "hidden"?

[lyric timber]

They're C functions so classdump-like tools won't know about them

C functions don't have metadata about their arguments and their types

[unkempt raft]

But how does one discover them?

Using export symbols inside .tbd files?

[lyric timber]

For the function names yes

For the argument types, you have to try to figure it out by decompiling the function and its callers, there's no reliable automated way

[unkempt raft]

thanks, very helpful, was always interested in how these types of apis are getting discovered

[primal perch]

[rancid ledge]

Oh ok, i was using the dsdump

[ocean raptor]

Check out netctl's airdrop command

The codes not great but it works

I haven't had time to clean it up

Or a device to test it with

And I may be able to get you function definitions, if you ask nicely

[ocean raptor]

https://github.com/ProcursusTeam/netctl/tree/main/airdrop

[unkempt raft]

found it, thanks!

[ocean raptor]

https://github.com/ProcursusTeam/netctl/blob/main/Frameworks/Sharing.framework/Headers/Sharing.h

[unkempt raft]

seems very helpful

[unkempt raft]

oh wow, that's even more helpful haha

[slim bramble]

How can I build a .dylib to work on both Mac and iOS ?

[ocean raptor]

try vtool -remove-build-version

probably won't work though

[ocean raptor]

Is there a good MachO viewer for non-macOS?

[lyric timber]

ktool?

[ocean raptor]

😡

[primal perch]

[faint stag]

true

[faint stag]

https://github.com/horsicq/XMachOViewer

well shit, this appeared recently

[tepid olive]

make a privileged helper

[tepid olive]

ida?

does fork work

aaron is trolling you in #jailbreak

lmao

i thought it worked

[faint stag]

WINDOWS XP RELEASE

[zenith hatch]

lol

[tepid olive]

that’s why the ui is so bad

[faint stag]

no

it's qt

it's gonna look like breeze

[gentle grove]

wtf anime software

[tepid olive]

look at screenshots

it doesn’t look good

[gentle grove]

wtf why is it black on black

[faint stag]

it looks like [insert dark qt application here]

like fr

[zenith hatch]

lol

[tepid olive]

it doesn’t

ida looks better

[faint stag]

example: cutter

[zenith hatch]

ida mac where

[tepid olive]

cutter is also garbage

[gentle grove]

well it does use qt

[tepid olive]

why do you use this

[faint stag]

i don't

[tepid olive]

skull

ida64 is the only good re tool

[gentle grove]

what are yousupposed to use instead of cutter and ida

[tepid olive]

it’s all u need

[faint stag]

someone's gonna just list everything fr

[tepid olive]

worth the money ngl

[gentle grove]

isnt it like $10k

or something

[tepid olive]

i have a home arm64 mac license

that i didn’t pay for but if u pay it’s worth ir

i have good friends

it’s not pirated?

it’s legit

that’s why it’s max

mac

[gentle grove]

how tf can a single program for home use be worth $1975

[tepid olive]

ida 8.2 🙏🙏🙏

[gentle grove]

wait no

$2765

[tepid olive]

it’s like 365$

[gentle grove]

or $4145

[tepid olive]

???

[gentle grove]

im looking at hex-rays.com

so idk

[tepid olive]

yes

it’s 365

[gentle grove]

oh wait

that was under windows

[tepid olive]

yeah still

anyway

buy ida

it’s worth it just to be able to open binaries in 5 seconds

[gentle grove]

bruh discord crashed

[restive ether]

shut up virgin

[gentle grove]

what can you use to not spend $400 or $4000 or whatever

[tepid olive]

trolled

[faint stag]

i mean i know it isn't v1 yet
but translations trol

[zenith hatch]

https://cdn.discordapp.com/attachments/935659065839849494/1037505384149168198/IMG_4652.jpg

[gentle grove]

thats a lot of money to spend

[tepid olive]

go ahead

[gentle grove]

wait

[tepid olive]

make fork 2

[gentle grove]

the $365 doesnt include a decompiler?

[tepid olive]

it does

if u send src i’ll like it

[gentle grove]

youll like bobashare

unsafe

[tepid olive]

trolled

"rust has unsafe memory? but- but- i thought it had safe memory"

[ocean raptor]

no

wine broke

and I'm too lazy to figure out why

[gentle grove]

python has unsafe memory

[tepid olive]

every lang has unsafe memory if you try hard enough

[lyric timber]

Bump

[primal perch]

binja gives ida a run for its money on value

but i still have a vm with ida for when i need the big guns

[gentle grove]

what is this

[primal perch]

binary ninja

no this is not a paid ad by krit

[gentle grove]

oh

oh my goodness

one sec

[primal perch]

for the $75 i paid it’s pretty damn good

gotta use the student discount

[gentle grove]

dm

[primal perch]

[gentle grove]

are there any free

[faint stag]

i only have beta 1

[lyric timber]

@faint stag the one I do have

[gentle grove]

WHY FR

i dont wanna invest $400 on something that i may rarely use

[ocean raptor]

wtf? cameron code?!

https://github.com/ProcursusTeam/ldid/commit/f0b3af5

[tepid olive]

bc piracy

[gentle grove]

where did i say piracy

[tepid olive]

piracy is paid thing for free

[gentle grove]

and where did i say that

[rose wren]

Oh no

[gentle grove]

well at that point you might asd well just buy ida

[rose wren]

Not unless you’re a student

Actually idk ida prices

[gentle grove]

its like $365

for ida

[rose wren]

Is there a student discount

[gentle grove]

idk

mayber

[prisma grove]

I was trying to work on Fugu15 just for fun, I was able to spawn amfidebilitate (taken from Taurine), but I'm not able to grab the task_for_pid-allow entitlement for it the way Electra did. Does anyone know what I am missing

[gentle grove]

gir moment

[tepid olive]

just use the demo

i got binja personal

for $75 w/ student discount

(yes it covers high schools)

@gentle grove https://binary.ninja/demo/

pretty solid platform

much better then it was a few years ago, the API is amazing comparing to ghidra

[tepid olive]

also that pricing is for ida home. ida pro is like $1300 and probably more with more decompilers you add

[gentle grove]

whats the difreence

for people who dont use it commercially

[tepid olive]

like between the binja personal and commercial or ida one?

[gentle grove]

ida

[tepid olive]

one your job buys for you

the other you buy

@gentle grove

mind you these people i asked are real security researchers

justin wrote a kernel exploit for iOS like a year ago

for 14.7.1

[gentle grove]

what do you need pro for

[tepid olive]

see https://hex-rays.com/ida-pro/

[past sun]

I might be annoying you fine people and if that’s the case I’m sorry.
I’m running 15.2
Any idea what sorts of checks frontboard does when launching an app?
I’m trying to change the CFBundleDisplayName plist string to empty text which does work and does remove the app’s and widget’s label but makes the app in question not launch, even if the original value is replaced with the same number of characters and even if the original text is changed back to what it originally was. I also checked the file’s ownership and it stayed the same so that’s not the issue.

[main apex]

Modifying the info.plist of any appstore app will make the app crash, thats just how it is, you can’t touch the info.plist.

[naive kraken]

not really

[naive kraken]

you don't need to grab any entitlements, you got the coretrust bug and you're able to load any hash into trustcache

so… just give amfidelibrate the entitlements you need with an adhoc signature, then use tcload command to load the hash of it into trustcache

(besides that, I feel like I should mention you don't even really need to touch amfid on Fugu15, you really only need to figure out how to load all binaries dynamically into trustcache and that'd be a much better solution)

[tepid olive]

ida home is fine

idk why ur looking for pro

me when the

[unkempt raft]

Xcodes isn’t able to download it?

[crisp frost]

imagine buying ida

[tepid olive]

who said i bought it

it’s not pirated

[faint stag]

yeah we know that. appsync seems to avoid that however

[faint stag]

no, because apple removed them

[lyric timber]

Try it and send me the file 😛

[unkempt raft]

Why do you need it though

It has some private stuff in it?

[faint stag]

you’re asking the wrong person

[unkempt raft]

@lyric timber

[lyric timber]

Maybe it does and that's why Apple deleted them?

I don't know, I can't really compare it with the final 14.0 to see if there's something private leaked 😛

[gentle grove]

https://demoshare.boba.best/

currently functional as far as I can tell

[lyric timber]

What's this

[zenith hatch]

wow

good job boba

[cloud yacht]

Time to upload a massive file

Nah on the bobashare

I have nitro I can upload big files

Though I migt've used bot channel in the past for big files

Nice error message

[gentle grove]

yeah because its not polished yet

I can't guarantee yet that that endpoint is json

[cloud yacht]

You can do a funny try catch on the json parse