development

[grim sparrow]

@grave sparrow JBHookFunction could be a funky define in theos tbf

[tepid olive]

Yall lets add another insanely ugly fucking prefix

Again

I vote for CPHookFunction

Capt Hook Function

PRHookFunction (Procursus Hook Function)

[grim sparrow]

capt give me iokit entitlement

[tepid olive]

AMHookFunction (Amy hook function / Apple Music Hook Function)

[grim sparrow]

i dont know

ur the wizard

[tepid olive]

How to load your jailbreak tweak library functions:

• Generate a list of all combinations of 2 characters from AA to ZZ
• Try to load every symbol with that prefix
• Find the first valid one
• Profit

[grim sparrow]

TRUE

[tepid olive]

i'm implementing all the apis

[grim sparrow]

capt

why niot

HookFunction

nah

life would be so much fucking easier if prefix wasn't a thing

and everyone just adopted it

[tepid olive]

My bad

Typo

[grim sparrow]

I offered him the sexual favour first!

[tepid olive]

idc

i’m a minor for the next 2 years sadly

yes?

[pearl sail]

Why did I read flavor instead of favor

[tepid olive]

I'll do you first

where do i get iphoneos-arm64 tweaks

[grim sparrow]

if you ask nicely I'll build aemulo in iphoneos-arm64 for you

[pearl sail]

https://tenor.com/view/hindi-ikaw-ikaw-hindi-you-dont-stop-quit-gif-14296606

[tepid olive]

Please do it

[grim sparrow]

gimme a bit

[pearl sail]

🙈

[tepid olive]

send discord link for it

pls

i got it

@grave sparrow

Wym

It uses that on rootless

On rootfull it does that

Anyways rootless tweaks work now

Any chance there could be a utility to repack debs for arm64 rootless

Idrc

When zero tweaks are packed for rootless but many support xina rootless, it should be fine

[fathom snow]

idk how to use ellekit with swift

the github doesn't explain very well

[tepid olive]

Add the Swift package and use the hookMessage or hook methods

[fathom snow]

Oh ok thank you

[shy reef]

This is the wrong discord and/or channel, but does anyone have any experience with running MacOS in a VM? if so is VBox or VMWare best for it? I tried VBox but XCode previews cause kernel panic's lol

[tepid olive]

what's your config

if you have M1 use VMApple

[shy reef]

i5

[grim sparrow]

this seems to be a bug in Xcode 14

I used to have it

well

I say bug

[tepid olive]

[grim sparrow]

its more

it probably needs acceleration now

[tepid olive]

that's not abnormal

[grim sparrow]

why not virtual box?

[shy reef]

So I should prob use XCode 13 then for the time being lol

[grim sparrow]

that worked for me

virtualbox 7 uses the apple vm frameworks now

[shy reef]

VBox is a pain in the fucking ass

So I'm trying VMWare on Linux

[fathom snow]

is there a specific xcode template that I should use for tweaks?

And is there a general purpose document on how tweaks work?

[shy reef]

To see if there' a performance increase and less Kernel panics on XCode 14 lol

[tepid olive]

VMApple is the technology

Not an app

[tepid olive]

I can show you some example code

class Rebinds {
    
    static var shared = Rebinds()
    
    typealias SpawnBody = @convention(c) (
        UnsafeMutablePointer<pid_t>,
        UnsafePointer<CChar>,
        UnsafePointer<posix_spawn_file_actions_t>,
        UnsafePointer<posix_spawnattr_t>,
        UnsafePointer<UnsafeMutablePointer<CChar>?>?,
        UnsafePointer<UnsafeMutablePointer<CChar>?>?
    ) -> Int32
    
    var posix_spawn = dlsym(dlopen(nil, RTLD_NOW), "posix_spawn")!
    var posix_spawnp = dlsym(dlopen(nil, RTLD_NOW), "posix_spawnp")!
    
    var posix_spawn_replacement = dlsym(dlopen(nil, RTLD_NOW), "posix_spawn_replacement")!
    var posix_spawnp_replacement = dlsym(dlopen(nil, RTLD_NOW), "posix_spawnp_replacement")!

    var posix_spawn_orig_ptr: UnsafeMutableRawPointer? = nil
    var posix_spawn_orig: SpawnBody {
        unsafeBitCast(posix_spawn_orig_ptr!, to: SpawnBody.self)
    }
    var posix_spawnp_orig_ptr: UnsafeMutableRawPointer? = nil
    var posix_spawnp_orig: SpawnBody {
        unsafeBitCast(posix_spawnp_orig_ptr!, to: SpawnBody.self)
    }
    
    func performHooks() {
        self.posix_spawn_orig_ptr = hook(self.posix_spawn, self.posix_spawn_replacement)
        self.posix_spawnp_orig_ptr = hook(self.posix_spawnp, self.posix_spawnp_replacement)
        if let orig = self.posix_spawn_orig_ptr, let porig = self.posix_spawnp_orig_ptr {
            TextLog.shared.write("orig is not nil now \(orig) \(porig)")
        }
    }
}

[grim sparrow]

wait what the fuck

hold the fucking phone

[fathom snow]

phone is held

[tepid olive]

this is a posix_spawn and posix_spawnp hook

[shy reef]

Lmao

[fathom snow]

Is that used for forking a process?

[tepid olive]

it's used in the ellekit core

for loading tweaks through launchd

It shows how to hook C functions

[fathom snow]

sorry I meant like this

[tepid olive]

There isn't, at least not yet

[fathom snow]

Should I just click empty in the Other tab and just start from scratch?

[tepid olive]

You can use a Orion package with ElleKit

Just don't use Orion methods

To get your tweak to load from Orion, add an assembly file with this code:

.mod_init_func
.quad _tweak_entry

and put a function somewhere:

@_cdecl("tweak_entry") 
func tweak_entry() {} // the start of your tweak loading, where you do the hooks

You should try making tweaks in Objective-C, because ElleKit isn't that user friendly at the moment

[gilded laurel]

is it possible to programatically disable and enable clamshell mode / force the builtin display to turn on, while the lid is closed?

(m1 mba)

[fathom snow]

fine, it seems I need to rip off the bandaid for that 😔

[grim sparrow]

learning objc isnt that hard

[faint stag]

pmset should work

[fathom snow]

the syntax is kinda funky coming from rust

[grim sparrow]

basically

[fathom snow]

i never learned C so this is a new experience

[grim sparrow]

think of the objc runtime as an ask kindly type of deal

when you ask it to execute a selector

it asks the runtime very nicely to find said selector

[fathom snow]

define selector please

[grim sparrow]

an objc method

the runtime is very open and prone to trolling

[fathom snow]

I see

[fathom snow]

from the apple docs, this allows for dynamic binding right?

[turbid fjord]

Which you have abused more times than anyone can count

[faint stag]

i know that sudo pmset -a disablesleep 1 will disable sleep entirely, not sure if that's the greatest idea however
-a sets it for all modes (battery, wall power) (there's also a ups one but that's for servers ofc)

this will still turn the display off due to the sensor but it will not sleep

you can use -b instead of -a to set it for battery power only which is probably what you want

[gilded laurel]

yea the issue is not with it sleeping unfortunately but with the display being off

[indigo peak]

@shy reef i still cant get USB pass through working

no matter what i do, i hear the disconnect sound twice and then the connect sound

and nothing on the vm

[naive kraken]

why do you call dlopen with nil? does that... actually work???

I mean, if this works then only because dlopen returns NULL and dlsym interprets that as "search everything"

[shy reef]

Stupid question but you're using USB 3.0 yes? and you have your VBox configured to use USB 3.0

[indigo peak]

yeah

i tried 2.0 & 3.0

[naive kraken]

btw, if you want to do some real world testing, I can provide you with rootless builds of Crane and all of it's dependencies (at least once theos supports compiling for rootless) @tepid olive

[shy reef]

Have you installed VMWare Tools?

[indigo peak]

no

[shy reef]

Install them then try, It better allows passthrough between the Host and Guest OS's

[indigo peak]

how tho

im using vbox

[shy reef]

VMWare Tools works with VMWare and VBox

you install them to the guest os

Its a compilation of drivers and kexts

If you want to install them officially, you need to download VMWare Workstation Player (Free Version) then take the 'darwin.iso' out of the install directory, and load it into the VBox OS

Or I can send you it if you like but it is up to you

[shy reef]

However, Because you are definitely not using a MacOS VM on Non-Mac Hardware, I'd recommend switching to VMWare. It runs a lot better.

[indigo peak]

hm

okay

[tepid olive]

that would be awesome

[tepid olive]

Yes

That’s how you get the current handle in Swift

RTLD_DEFAULT is not a thing

[nocturne perch]

Can any one pls help me with swiftui? Why does @app#9627Storage(“LIST_KEY”) var list: [String] = [“test”] give a error no exact matches in call to initialize

[naive kraken]

well uh that's slow af though

you should just put the path of the lib that has the symbol into the first dlopen arg

[tepid olive]

Okay so what should I use

That’s gonna be finicky

[naive kraken]

tbh idk how swift works but for non private symbols that are already loaded into your process you don't even need to do any dlopen stuff

[tepid olive]

in swift you kinda do

[naive kraken]

like in C you can just pass &posix_spawn as the first arg of the hooking function

[tepid olive]

Yes but that’s not a Swift feature

You can do something funny but it makes the code ugly

[naive kraken]

I hate swift

[tepid olive]

let fn: @convention (c) () -> Int32 = fork
let ptr = unsafeBitCast(ptr, to: UnsafeMutableRawPointer.self)

@naive kraken

this works but it’s so ugly

[naive kraken]

looks like any other swift code to me so it's probably fine

[tepid olive]

[nocturne perch]

can someone help pls?

[primal perch]

fr

[zenith hatch]

what the fuck is app#9627Storage

[tepid olive]

its @dire archStorage, they accidentally pinged @dire arch

(sorry app)

[zenith hatch]

o

lmao

[tepid olive]

yea they posted in #jailbreak earlier without code formatting

[zenith hatch]

@nocturne perch you cant store string array with appstorage iirc

[ocean raptor]

Couldn't do quickactions? Smh

Pro hooker? That's so sweet, naming it after your mom

[tepid olive]

lmao

[tepid olive]

Send the deb

[ocean raptor]

Oh wait, it needs preference loader

So you would have to configure it using defaults write lol

[tepid olive]

I doubt defaults is on the rootless repo

[ocean raptor]

10 minutes 🧌

[naive kraken]

well, crane does too so

but preferenceloader is open source

[timid furnace]

I can send a rootless build of PreferenceLoader in a bit

[tepid olive]

would be awesome

[primal perch]

purchasing ida pro on my credit card

now i will get a bug bounty and pay it off same month

[timid furnace]

Yea I built it a while ago I should push sources

[tepid olive]

What

Real?

[timid furnace]

Gl on your investment

[primal perch]

not real

[tepid olive]

Lol

I need to write my exploit

[primal perch]

not the worst idea ever tbf

but not great

[tepid olive]

apple takes half a year to pay

sometimes more

[tepid olive]

tysm

[primal perch]

i would just sell to china or putin

[timid furnace]

Thank you for writing ellekit lmao

Half reviving our existence

[tepid olive]

did you test on rootless

[timid furnace]

The PreferenceLoader build? Yea I tested on 13 rootless

[tepid olive]

no like ellekit

[primal perch]

cumeos

[indigo peak]

@lime pivot respond

Important chariz merch question

[timid furnace]

I mean, I can test it on iOS 13 rootless with ellekit if you want, but I haven't tested it with ellekit (not home yet)
And I don't want to jinx my palera1n iOS 15 rootful setup

[ocean raptor]

Sorry, more than 10 minutes. I had to take a shower cause I just played 18 holes

[indigo peak]

@ocean raptor ok help me

do I do this design

or make the flame right side up

and keep the text sideways

or make the entire thing right side up across the boobs

[ocean raptor]

Why are you designing chariz merch?

[indigo peak]

because

[ocean raptor]

Is kirb paying you?

[indigo peak]

long time in the making

[ocean raptor]

Do you even have a tweak on chariz?

[indigo peak]

answer my question

[turbid fjord]

You all secretly work for chariz. That’s why dev role is orange

[indigo peak]

@grim sparrow I need your input

help

[grim sparrow]

What is it

[ocean raptor]

Nah, if I actually worked for chariz then rootless would be supported 🙄

[indigo peak]

Hoodie design

help

[indigo peak]

.

[grim sparrow]

You have asked the queen of hoodies

[indigo peak]

Yes

I know

That’s why I asked

[grim sparrow]

Is that just a really bad photoshop?

[indigo peak]

Yes

[grim sparrow]

Can you put something on the back too?

[indigo peak]

probably

what do you want

[grim sparrow]

I’m just thinking rn

[tepid olive]

holy

holy shit they invented male birth control

chariz merch

[indigo peak]

@tepid olive what’s your opinion on the hoodie

what do I pick

[tepid olive]

it’s not my kind of thing

i wouldn’t give good advice

sorry

it’s nice

[indigo peak]

frick

I need some input

I thinking the right side up logo

w the sideways ext

[timid furnace]

that text too big to read sideways imo

warning: i am certified not a designer

[indigo peak]

I might just say fuck it and do right side up

like regular text

[grim sparrow]

honsetly

right way up

so its readable

[indigo peak]

across the boob text

[grim sparrow]

with a logo

across the boob

[indigo peak]

@grim sparrow

so the first one

but black on orange

not orange on black

[grim sparrow]

pretty much

and then if possible stick a flame on the back

[indigo peak]

I mean I could, but that’s effort

I’ll just do regular across the boobs

[gentle grove]

what

[ocean raptor]

@tepid olive defaults is now on repo, please also switch to dist 1800 instead of iphoneos-arm64/1800

[primal perch]

suddenly joins development at the discussion of boobs

least horny discord user

[gentle grove]

bruh I'm not horny

I'm always wholesome

[primal perch]

[pearl sail]

simps a fake virtual shark yet still says not horny

[timid furnace]

wtf is the difference between /usr/lib/TweakInject and /Library/MobileSubstrate/DynamicLibraries

[indigo peak]

it has been made

[grim sparrow]

wait omg

[ocean raptor]

Real?!

[grim sparrow]

you actually just straight up went and printed it

[ocean raptor]

Bro has knock off chariz merch

[indigo peak]

it’s not knockoff if there’s no real merch

[grim sparrow]

now send me one

[indigo peak]

[indigo peak]

yeah i have a press at my house

i can press whatever i want lmfao

[grim sparrow]

can you press aemulo??

[indigo peak]

yeah?

[grim sparrow]

pls

[pearl sail]

international shipping be like aite $30 for S&H on the $5 shirt

[grim sparrow]

i hate dealing with international shipping

sending a brand new sealed phone from uk to us was so much effort at the post office

[ocean raptor]

Buy me procursus merch

The real one

[indigo peak]

im not made of money

[pearl sail]

shut up mr moneybags

[indigo peak]

https://procursus.creator-spring.com/

[tepid olive]

chariz enthusiast

[tepid olive]

there actually is

though

[indigo peak]

sus

[tepid olive]

i’m fr

[grim sparrow]

omg i have one of these!

[tepid olive]

chariz merch so good

[ocean raptor]

Really?! I still don't 💀

[indigo peak]

yeah im wearing a hoodie rn

[grim sparrow]

yeah I have a procursus shirt

im getting my repos confused!

[tepid olive]

@indigo peak

wait

how are you

who*

i feel like i know you

[pearl sail]

buy one you loser

[tepid olive]

but my brain is so FUCKED

[indigo peak]

who am i?

[tepid olive]

i can’t remember anything g

for real?

[indigo peak]

no for real

[tepid olive]

😲

[indigo peak]

im just really dumb

uh

[grim sparrow]

gamepigeon hacks fella

[indigo peak]

i made gameseagull & calculatorhistory

yeah

[ocean raptor]

Waiting for a patreon sponsor so I can finally buy one

[indigo peak]

only 2 tweaks people would know me for

[tepid olive]

that makes two of us so it’s ok

[ocean raptor]

Once hayden finishes setting up the procursus patreon hopefully people will actually subscribe

[tepid olive]

1 for me and also for being an alcoholic

[indigo peak]

thats also me

[grim sparrow]

if you give me an address I'll send you one

[ocean raptor]

Dox myself?

[indigo peak]

yeah rn

[grim sparrow]

pretty much yeah

[tepid olive]

(reply to my message 💀)

[indigo peak]

ill send my address

[grim sparrow]

stop being an alcoholic!

[tepid olive]

i’m not anymore

[grim sparrow]

https://tenor.com/view/mercy-drinking-gif-15459241

me when something doesnt go my way

[indigo peak]

@tepid olive
https://www.reddit.com/r/jailbreak/comments/p9co8y/free_release_gameseagull_gamepigeon_hacks_have/
https://www.reddit.com/r/jailbreak/comments/rdpu0d/free_release_calculatorhistory_adds_history_to/
only 2 tweaks people would know from me

i mean, we've talked before

[tepid olive]

what is a calculator history!!

[indigo peak]

but idk how else youd know me

[tepid olive]

math has HISTORY now??? i hate history!!

[zenith hatch]

gm

[zenith hatch]

gm capt

[indigo peak]

made the calculator app less dumb

[indigo peak]

but w dumb code

[zenith hatch]

that is a fat w

[indigo peak]

i gotta update that shit

[grim sparrow]

JESUS CAME INSIDE ME

[tepid olive]

fr

[indigo peak]

nil

[zenith hatch]

my condolences

[indigo peak]

divide by 0 error

[zenith hatch]

did you use nsattributedstring

[indigo peak]

at some point?

no idea

maybe

[zenith hatch]

me too

[indigo peak]

i think i should just update it

like

[zenith hatch]

idk how to use attributes strings

[indigo peak]

completely remake the UI

[zenith hatch]

never bothered to like

google it

[tepid olive]

@indigo peak is it foss i didn’t look

[zenith hatch]

^

[indigo peak]

idk what that means

[zenith hatch]

open source

[tepid olive]

free open source

[indigo peak]

yes

[pearl sail]

https://tenor.com/view/oh-jesus-oh-lord-jesus-regina-hall-imdb-gif-13402726

[tepid olive]

(software)

[zenith hatch]

send source

[indigo peak]

https://github.com/donato-fiore/calculatorhistory

[zenith hatch]

is that a thing

[tepid olive]

+1 point good job

[indigo peak]

i made it in a day

[zenith hatch]

oh

[indigo peak]

2 technically

[grim sparrow]

ooooooo hold on let me find my favourite apple sdk

[indigo peak]

but i had covid when i made it

[zenith hatch]

true

[pearl sail]

stop being political outside of #politics

[indigo peak]

i will dm you racial slurs neither of us can say

[tepid olive]

@indigo peak 😭

[grim sparrow]

https://developer.apple.com/documentation/contacts/cnlabelcontactrelationauntparentseldersister?language=objc

[tepid olive]

i wouldn’t have written anything better but still

[indigo peak]

shhh

dont scroll down that far

[tepid olive]

i literally don’t get it though wtf is goin on here bruh

☠️

[zenith hatch]

cock

[tepid olive]

my only piece of actually good advice i will give is add comments both for yourself and others

[zenith hatch]

lmao

[tepid olive]

and also

do the opposite of whatever i do

[zenith hatch]

imma make some swiftui views in objective c

brb

[tepid olive]

that’ll help make you better

[grim sparrow]

sometimes I wonder why I do things

[zenith hatch]

learn swiftui

[indigo peak]

neither do i

dw

[grim sparrow]

too busy implementing low level stuff!

[zenith hatch]

i wonder if apple would be able to detect dynamic

[grim sparrow]

im migrating aemulo to directly interface with the hardware instead of interfacing with nfcd

[grim sparrow]

not really

so many apps do it

you'd be surprised

[zenith hatch]

fair

@turbid fjord

[grim sparrow]

telegram is full of it

thats the highest user of it off the top of my head

[zenith hatch]

what does telegram do

[grim sparrow]

idek

I just know they use a lot of it

yep

[zenith hatch]

understandable

[grim sparrow]

IOKit and unix sockets

my favourite

[zenith hatch]

ioCock

[tepid olive]

ha!

[indigo peak]

so IOKit bug will be cool

[tepid olive]

you put cock after io

amusing

[indigo peak]

i chuckled

[grim sparrow]

yeah

[zenith hatch]

thanks

[grim sparrow]

basically I need 2 things

that I know of

[tepid olive]

my funny bone has been tickled!!

[indigo peak]

ill tickle another bone for you

[tepid olive]

thank you llsc

[grim sparrow]

1: being able to call sysctl with the namespace { CTL_KERN, KERN_PROC, KERN_PROC_ALL};
2: being able to access the iokit user client AppleStockholmControlUserClient

[tepid olive]

so much developing going on

[indigo peak]

and why cant you do that in stock ios 😠

[grim sparrow]

the kernel just shouts at me 😔

[grim sparrow]

ask daddy apple

yep

thats why it doesnt exist yet

[indigo peak]

i dont wanna finish this sentence

[grim sparrow]

basically

funny story

only one process can be connected to the chip at once

so I have to kill nfcd and then in the time before it reloads, make my connection

and then while aemulo is open nfcd just sorta sits there

trying to reconnect every 10 seconds

[zenith hatch]

amy

how do i get framework headers from apple watch dsc

[grim sparrow]

https://github.com/blacktop/ipsw

i havent tested it but odds are you can use that

might be able to throw the simulator runtime at it

[tepid olive]

😭

[zenith hatch]

i tried and failed

[tepid olive]

my beaun

brain

[zenith hatch]

it doesn’t seem to like

uhh

[indigo peak]

ok

[zenith hatch]

i forgot the error but it cant get the right dmg from the watch ipsw

[indigo peak]

time to remake calculator history

[grim sparrow]

lemme try it

[indigo peak]

😄

[zenith hatch]

gl

i did manage to get the dsc from it but it was like

split into 23 ish files

no clue how tf to reassemble it or what tools i need or how to get headers out of it

[grim sparrow]

found what I was looking for

sheesh

[zenith hatch]

cum runtime

[grim sparrow]

ok so

I forgo

the

watch runtime

doesnt have a dyld shared cache

it just contains all the raw binaries

so you can just stick a classdump of your choice at it

[zenith hatch]

oh

[spice egret]

someone tell me how to set up an apt repo with github/github pages

ples

[indigo peak]

@tepid olive i think i managed to get more function support for calculatorhistory

more switch statement

[spice egret]

why is no one helping

[tepid olive]

evil

[tepid olive]

i’m gonna kms

[nocturne perch]

this is the real hak5 right? https://shop.hak5.org

[indigo peak]

you promise?

ill add more

[tepid olive]

how about you message some bitches instead of some objects

yep

what i said

OMG

[sour fractal]

seen

[tepid olive]

I’m joking

We’re even then

[tidal orbit]

How do i jailbreak my phone?😮‍💨

[indigo peak]

alcohol poisoning != suicide

[tepid olive]

??

@lime pivot wake up babe new chariz release

that’ll ping him twice (the selfbot pings him)

[faint stag]

you asked this already and i told you about the repo script lol

[faint stag]

yes

[nocturne perch]

Is O.MG the best badusb for consumers

[coral gazelle]

Does anyone know of a proper way to dump the root filesystem from a jailbroken iOS device (i.e. via the terminal)? I'd like to use something like that to dump RootFS's of preinstalled-only builds for archival purposes.

[indigo peak]

@tepid olive this is so bad 😭

[faint stag]

not really something i would know

[faint stag]

i guess you could just rsync it to a directory

but like, you would basically ignore /var/mobile and /private/var/mobile

(/var is a symlink to /private/var to just align with *NIX convention)

[faint stag]

wtf is that, i don't even know the lang and i know that's bad

[indigo peak]

its objc

calculatorhistory tweak

[faint stag]

as in, i don't know how to make anything in objc

lel

[faint stag]

couldn't you just make a function for the [one] thing

[indigo peak]

nah

too lazy

[timid furnace]

@tepid olive i am unable to test this atm

installs to /var/jb/Library/MobileSubstrate/DynamicLibraries

[faint stag]

response: 204
channel: empty

thanks discord

[faint stag]

tested hook elsewhere and it works

(channel doesn't matter)

[lime pivot]

logging is bad for the environment

🏡 Please consider the environment before logging this server.

[primal perch]

čum

[shy veldt]

Hey

I’m trying to find out if app was launched

Through springboard

Disclaimer: I’m very new to tweak development

I found out the method launchfromlocation under SBLeafIcon

Can someone help me how can I do it from here?

[lime pivot]

turns out a jb drop leads to clicks

[steady nest]

ssh root@127.0.0.1 "tar --exclude /dev --exclude .DS_Store -cf - /" | xz -z -9e > iDevice#,#_major.minor_build.tar.xz

[tepid olive]

really makes me wonder if there’s a better way to do it

😴

[indigo peak]

there 100% is

but this is the “if it works it works”

kinda solutions

@lime pivot

[lime pivot]

hi

[indigo peak]

@lime pivot 1 year later

[lime pivot]

OH SHIII

looking hot mr emoji face

you actually did it? how did the print go

[indigo peak]

it was pretty smooth actually lmao

[lime pivot]

wow yeah I'm amazed from the pic, it looks kinda perfect

[indigo peak]

didn’t take too long after I actually decided to sit down and do it

[lime pivot]

what kinda dimensions did you use for the logo @indigo peak

[indigo peak]

I think it ended up being 11x4.000001 or something

I had the dimensions locked

[lime pivot]

ah easy

[indigo peak]

so whatever the Y becomes after changing the X to 11

[lime pivot]

cm?

[indigo peak]

Inches

My b

[lime pivot]

oh ya that unit

the wrong one

[indigo peak]

Forgot ab conversions

27.94 CM

And then I just eyeballed the location on the hoodie

There was no set location lmao

[tepid olive]

ty

[lime pivot]

yeah makes sense

I'm sure the merch manufacturers have a whole jig for aligning it exactly

[indigo peak]

yeah

after all, it’s my house, not a Nike sweatshop

[lime pivot]

why can't it become a Nike sweatshop

[indigo peak]

I mean I already have the kids in the basement, all I need is the equipment

[lime pivot]

.

I mean I used to have the shed for that but it's gone now

[indigo peak]

I have a shed

[glacial matrix]

You seem to have a bit of duplicate code

[indigo peak]

it’s full of crap tho

[indigo peak]

just a tad bit

when I was making it I was just registering a new button without looking at what repeated code

so I wasn’t making it non-repeating

I’ll probably fix it when I get home

[lime pivot]

brainfarted trying to remember the name of the merch provider with the orange hoodie and apparently just googled "shirt printer"

some of those look like actual laser printers ngl

WTF mom why did you print out your email now I just wasted a perfectly good shirt

[indigo peak]

[lime pivot]

matching it up to the old merch logo I managed to download from my original merch order

new logo who dis

[lime pivot]

I remember now @indigo peak the hard part is finding someone who has hoodies in any color other than black, white, grey, and different grey

I did find one that looked like I could actually trust the print to not look like ass, but I'd have no clue where I wrote down that name if at all

[coral gazelle]

Is it possible that dumping the entire /dev/disk0 partition would allow you to create a more complete dump? Also, is it possible to dump just the system partition (dev/disk0s1s1)? I haven’t been able to do it on my own device because it says “resource busy”. Does dumping just the system partition give you the whole root filesystem or is there other stuff that needs to be dumped as well?

[tepid olive]

Anyone could do me a huge favour and make a script to repackage debs as iphoneos-arm64 with the prefix

[steady nest]

You asked for a rootfs dump, that's the way to make a rootfs dump. If you want to also dump the boot partition, or not dump var, you can change the command accordingly.

[tepid olive]

Wym

i’d just add the prefix

lovely

That’s fine

wtf

https://github.com/evelyneee/ellekit/blob/2b65d670217dd238bcb030fef4606a3c14c281b8/loader/patch.s this used to be my method

gonna have to bring it back for arm64e

[shy veldt]

Hey

I’m using palera1n on iOS 15.7.1

I want to show logs, but when I try to use oslog it says it killed it as soon as I hit enter

I tried ondevvicecosole but it’s says no command was found

[grim sparrow]

TIL

[primal perch]

fr

[pearl sail]

Making my fatass want some pizza now smh

[faint stag]

if it’s killed 9 then it’s codesigning

[restive ether]

if you're going to use oslog at least use the procursus one

[undone nest]

that's based

[indigo peak]

how would i hook this? CalculatorModel.isUsingRadians.getter()

%hook CalculatorModel
-(bool)isUsingRadians {
  return %orig;
}
%end

%ctor {
  %init(CalculatorModel = objc_getClass("Calculator.CalculatorModel"));
}
``` i think should work but its not

and im all out of ideas

[zenith hatch]

“gm” “developers”

[tepid olive]

mshookivar?

[indigo peak]

i dont even need to hook it

[tepid olive]

u should hook it manually

use the runtime

[indigo peak]

i just need to be able to get the value

[tepid olive]

do perform selector then

objc msgSend

[indigo peak]

no

[tepid olive]

tweak development is lowkey goated when modifying code at runtime is the vibe

[tepid olive]

banger

[indigo peak]

thats under strings

in ida

shut the fuck up

[tepid olive]

LIDA

LDA

old ui moment

[indigo peak]

yes

i can prob get one

i have no idea

prob instance

__int64 CalculatorModel.isUsingRadians.getter()
{
  return CalculatorModel.isAllClearActive.getter(&OBJC_IVAR____TtC10Calculator15CalculatorModel_isUsingRadians);
}

soits using OBJC_IVAR

so id assume since is an ivar its an instance

bet

thanks

and yeah im able to get an instance

@grave sparrow
trust

CalculatorModel *model;
%hook CalculatorModel
-(CalculatorModel *)init {
    model = %orig;
    return model;
}
%end

bool isUsingRadians(CalculatorModel *model) {
    Ivar ivar = class_getInstanceVariable(objc_getClass("Calculator.CalculatorModel"), "isUsingRadians");
    ptrdiff_t offset = ivar_getOffset(ivar);
    uintptr_t address = (uintptr_t)model + offset;
    return *(bool *)address;
}

[tepid olive]

just get the symbol

[indigo peak]

def not

is there not an easier way of doing it 😭

[tepid olive]

my bad

i accidentally typed that

only for zefram code

[indigo peak]

shhhhh

do not comment on this

at all

[tepid olive]

LMAO

[indigo peak]

what?

no

im just making my own version

lmaoooo

i said no comments

i know how to make it better

im just lazy

yeah

its 2 different buttons

when its deg its id is different from rad

wait

i have an idea

no

i have an idea

10000000 iq

so

theres a NSUserDefaults key for rads or not

but it only gets updated when its closed

like when the app quits

so

what i do

is when the app loads

i get the state from defaults

and then

when i press the button

i change it

ez

it doesnt get set when the button is pressed

yes

%hook CalculatorKeypadButton
-(void)touchesEnded:(id)arg1 withEvent:(id)arg2 {
  NSInteger buttonID = [self accessibilityCalculatorButtonID];
  switch(buttonID) {
    case whatever_the_fuck_the_id_is:
      // code
      %orig;
      break;
    default:
      %orig;
}
%end

only thing is

like i said before

the ID is different per button

it is 53 when the button label is DEG
and 45 when the button is RAD

its constant

[twilit jungle]

Is it actually multi-threaded?

Why would you need to store the state across app restarts?

Why would you try to figure out the state from button press instead of the underlying data?

[tepid olive]

@serene ridge battery assembly here works

[primal perch]

we need to revert to single threaded cpus

[ocean raptor]

Why did you write a tweak in asm?

[restive ether]

because it takes like 2 seconds to write

[ocean raptor]

My battery percent tweak took 2 seconds to write, not that

[fathom snow]

looking at said battery tweak, is that all you need to do to interact with the battery?

[restive ether]

true story

[indigo peak]

so is this like final

or like

@grave sparrow what ab this
kTrigonometricModeKey.unsafeMutableAddressor __text 000000010003E524 0000000C R . . . . . . .

void *kTrigonometricModeKey.unsafeMutableAddressor()
{
  return &kTrigonometricModeKey;
}

idk how id call it

or get &kTrigonometricModeKey

Calculator.kTrigonometricModeKey

[ocean raptor]

https://git.ckatri.com/tweaks/tree/BatteryPercent

[fathom snow]

Dw i found the git instance and saw that. Does this tweak work on 15+?

[ocean raptor]

🤷‍♂️

[tepid olive]

Can I just jb with fugu15 and use Filza to install ellekit

[indigo peak]

@grave sparrow genius idea, i just check if the button ID is hidden or not

or something like that

[indigo peak]

@grave sparrow i dont need to get rad/deg anymore, i realized i forgot to call %orig;

which wasnt making it store the result of the equation

top without, bottom with

and using %orig i dont have to do bs math

yeah it works 😭

[tepid olive]

dont

please

it’s stupid

MSHookFunction is the standard

LHHookFunctions is the batch hook standard

[coral gazelle]

From what I've seen, disk1 is the partition containing iBoot; is there anything else on the disk1 partition besides iBoot?

[faint stag]

you know you can just run mount

to see what is mounted where

[ocean raptor]

Not like anybody uses your tweaks anyways lol

[tepid olive]

who’s the rootless nerd that still hasn’t compiled quickactions for rootless

💔

[ocean raptor]

Did I forget to send it to you? 💀

No clue if it works

[tepid olive]

slay

@ocean raptor does it work on iPhone 6s

[ocean raptor]

On 14, yes

It adds the buttons

[tepid olive]

What about 15

[ocean raptor]

Idk

Never tested it

My only 15 jailbroken device is rootless lol

That build may be completely broken too

I have no idea

[tepid olive]

dude

i have an injector for u

it works

[ocean raptor]

It wasn't ready until recently

And I've been away from my jailbroken phone for a week

[tepid olive]

[ocean raptor]

I literally just sent it to you for your to test

[tepid olive]

it does nothing

it isn't configured though

no pref loader

[ocean raptor]

iOS 15 may have changed the Lock Screen stuff

I can take a look soon

Soon™️

[tepid olive]

okay

ill get a working prefs loader

[ocean raptor]

You can config it with defaults probably

[primal perch]

accepting donations for flexall 2

development is slow

[ocean raptor]

I'm accepting donations for all of my work

[primal perch]

sending 20 dollars

(zimbabwean)

it was all lost in fees

[ocean raptor]

Procursus, quickactions, launchctl, netctl, paying capts mom (she's a hooker)

[primal perch]

you pay for her?

she pays me to service her

[ocean raptor]

to keep her off the streets

Cause she has a deadbeat son who does nothing to help her

[primal perch]

[tepid olive]

Am I wrong?

[fathom snow]

so does capt and launch have beef or is it all jokes?

[ocean raptor]

launch

It's "Mr. launchctl" to you

Put some respect on my name

[pearl sail]

yeah all beef no pork

[fathom snow]

i love pork

[restive ether]

please something that doesn't suck

[tepid olive]

what

[tepid olive]

@naive kraken if i were to run a executable on stock iOS signed with my cert, would it run?

wait what

all bins are signed like that?

is there any binary executed as root that i could hijack

use the dirty cow bug to override a system binary with mine and get root code exec

or just escape the sandbox

wym

how could i do that

i don’t have code execution

there’s a bug that allows you to replace any file on the fs

until reboot

[naive kraken]

yeah no because of platform-application

any binary that uses or gets spawned by posix_spawn needs that afaik

only stuff launched directly from launchd may not need it I think

Idk about launch daemons though

they probably need it

[tepid olive]

So not xpcproxy

<key>com.apple.private.xpc.is.xpcproxy</key>
<true/>

these are cool ents wtf

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.private.coreservices.canmanagebackgroundtasks</key>
<true/>
<key>com.apple.private.security.storage.driverkitd</key>
<true/>
<key>com.apple.private.spawn-driver</key>
<true/>
<key>com.apple.private.spawn-panic-crash-behavior</key>
<true/>
<key>com.apple.private.spawn-subsystem-root</key>
<true/>
<key>com.apple.private.xpc.is.xpcproxy</key>
<true/>
</dict>
</plist>

spawn-panic-crash-behaviour

[naive kraken]

even tho it doesn't have platform-application, I'd assume the is.xpcproxy one is checked for lol

[tepid olive]

yep

[ocean raptor]

what is a launchangel?!

[faint stag]

in an ideal world it would be the opposite of a launchdaemon

[ocean raptor]

send me iOS 16 launchd

I want to figure out what it is

[faint stag]

i'm on 15 lol

references found in xcode simulator real

i guess it wouldn't hurt to look at launchctl or launchd in ventura

[ocean raptor]

send me ventura launchd then

I'm already looking at 16.1 sim's launchctl

they just add angel = 1 to the msg that is sent to launchd

[faint stag]

i'm still on monterey but if it really wanted to i could use yaa on the update payloads

[ocean raptor]

@tepid olive you got jailbroken iOS 16?

[tepid olive]

yes

[ocean raptor]

using iOS 16 simulator launchctl I assume?

[tepid olive]

i used to be one of the only ones with it but then when palera1n ios 16 got released everyone had it

[ocean raptor]

idc

can you compile this https://github.com/ProcursusTeam/launchctl/blob/main/tools/xpchook.c

[primal perch]

cameron get a mac challenge

[tepid olive]

on-device?

[tepid olive]

i use ios cross compiler

[ocean raptor]

then run DYLD_INSERT_LIBRARIES=/usr/local/lib/xpchook.dylib launchctl bootstrap

[ocean raptor]

➜ sw_vers
ProductName:    macOS
ProductVersion: 12.6
BuildVersion:   21G115

[primal perch]

no way he did it

[ocean raptor]

I don't want to install ventura

[tepid olive]

just compile it on your mac fr

[primal perch]

based

[ocean raptor]

➜ hostname            
build.procurs.us

[primal perch]

he didnt do it

[tepid olive]

[ocean raptor]

? I need to see how iOS 16's launchctl works

[tepid olive]

k

can't you just send the dylib

fr

[ocean raptor]

ok lol

[tepid olive]

i don't wanna install clang on my ipad

frcoal

[ocean raptor]

figured you would want to validate the code that runs on your device

[tepid olive]

i honestly don't care

[primal perch]

mullvad VPN

[tepid olive]

i'm just gonna disconnect wifi

ong

[ocean raptor]

me when I steal adam's mullvad and hes still paying for it yet he never uses

[ocean raptor]

mac stadium literally gave us this computer for free

[ocean raptor]

oh lol

launchctl bootstrap system

bro said sudo wget into ~

[tepid olive]

i meant to do it in /usr/local/lib but i accidentally hit enter

frcoal

cba to cancel it

[ocean raptor]

????

I'm confused

can you try launchctl load with that DYLD_INSERT_LIBRARIES too?

[tepid olive]

wtf do i load

frcoal

[ocean raptor]

idk

/Library/LaunchDaemons/us.diatr.shshd.plist?

[tepid olive]

com.epicgames.fortnite??

[ocean raptor]

istg the palera1n people are the worst

[tepid olive]

me being a palera1n team member:

[ocean raptor]

this is iOS 16 simulator launchctl, right???

[tepid olive]

yes

[ocean raptor]

I am well aware

[tepid olive]

should i stop shshd then load it

[ocean raptor]

sure

[ocean raptor]

how is launchctl broken then??

the messages are literally identical to what I send

[tepid olive]

idfk

[ocean raptor]

wait

maybe it was broken for the same reason it was broken on iOS 15

[tepid olive]

whar

[ocean raptor]

try procursus' launchctl

[tepid olive]

send deb

i don't wanna uninstall palepa1n strap

[ocean raptor]

https://github.com/ProcursusTeam/launchctl/releases/tag/v0.1beta2

it's not on the repo yet

[tepid olive]

it's probably the 15 thing

what do i test on

sshd?

com.openssh.sshd

[primal perch]

https://cdn.discordapp.com/emojis/827054006186278916.gif?size=96&quality=lossless

[ocean raptor]

whose got iOS 13 and 14?

[ocean raptor]

make sure launchctl unload and launchctl load work

[tepid olive]

funny (works)

when it was unloaded ssh didn't work from my phone

when i reloaded it worked

palecursus moment

rn

[ocean raptor]

does launchctl bootstrap system /Library/LaunchDaemons work?

I'm getting conflicting reports

[primal perch]

vkCreateInstance

[tepid olive]

vkCube

[ocean raptor]

now do simulator launchctl

[tepid olive]

moment moment

[ocean raptor]

who has iOS 13 and 14?

[ocean raptor]

I only need 13 now

cause I need to test launchctl on it before I push it

not that deep bro

[cloud yacht]

I got a 12 somewhere

[ocean raptor]

I already tested 12

I need 13

[cloud yacht]

Yeah don't got 13

[ocean raptor]

then whyd you respond

[cloud yacht]

Why not

[primal perch]

yeah you could get your own device instead of relying on others

[ocean raptor]

want me to pay for the corel?

[primal perch]

i guess yeah

[ocean raptor]

https://tenor.com/view/goofy-goofys-trial-mickey-mouse-gif-24945790

[timid furnace]

i have 13

[primal perch]

probably worth it

[ocean raptor]

thank god

[timid furnace]

what u need

[ocean raptor]

can you download the artifact from https://github.com/ProcursusTeam/launchctl/releases/tag/v0.1beta2 then run launchctl unload /Library/LaunchDaemons/us.diatr.shshd.plist then launchctl load /Library/LaunchDaemons/us.diatr.shshd.plist

and just make sure that they work

[timid furnace]

ok

thank god removing rootless is just rm -r /var/jb/

[ocean raptor]

why do you need to remove rootless

this is just a binary, not a deb

[primal perch]

love it when cpu bottleneck gone

[timid furnace]

i'm 90% i don't have shshd or it's half broken

[ocean raptor]

ok

pick another daemon then

[timid furnace]

works

[ocean raptor]

W

Mucho gracias

[timid furnace]

np

[wicked summit]

gm

[faint stag]

@ocean raptor that's 16.2 launchd

[lime pivot]

16.2 launchd has launched?!?!

[onyx ember]

lol

This has to be run on macOS?

I'll give it a go

Would try this in dash (that's the default with this bootstrap, I could've changed MTerminal over to bash for Fugu15, but I was like let's keep Hayden's legacy alive, forcing everyone over to dash )

I thought you had left for some time 😂

True

[onyx ember]

Seems like it needs otool and asking me to install fakeroot...

I'm on rootless (Fugu15), Procursus don't have that yet on rootless (1800)

Yea, I fixed it

Nice

I'll try on macOS once I get home

[lime pivot]

I like the i_n_t stuff

I knew it wouldn't be a walk in the park of course but I'm so glad most of the problem is just making sure dependency paths are right

exec/fork/etc problems aside

hey if it works it works

how is everything in general with it? like, how much is broken / how much of a dealbreaker is it?

of course rootless seems to run great on my A11 but, that's because it's A11

and I haven't exactly explored using it that much yet

[naive kraken]

I feel like that's missing /var/jb/usr/local/lib in rpath?

[lime pivot]

yeah, that aside I guess lmao

[naive kraken]

well, I do have a library there

or wait maybe not

I feel like /usr/local/lib was broken on most jailbreaks anyways

so I had to move it to /usr/lib

[tepid olive]

Me to just wish it worked on arm64e

[coral gazelle]

I did that and I'm not seeing the iBoot partition.

[tepid olive]

does anybody know the path to this lock image or whatever it is?

[restive ether]

nothing anyone can do about that besides said jailbreak dev

tweak devs should definitely be using posix_spawn though

[ocean raptor]

I don't think a tweak has ever used fork

[restive ether]

I'm sure I could find one or two

[ocean raptor]

I found some 😭

[restive ether]

who are the guilty parties