#development
1 messages · Page 27 of 1
still better than Fahrenheit
Fahrenheit gets too much heat (pun not intended)

does objc_retain_x19() mean it's retaining the objc thing in x19?
shut
up
can I get a real answer?
?
WELL DUHHHHHH

my guess is yes
thanks
reverse libobjc

not even trying to be sarcastic, that’s actually what I thought
can't even get debugserver to set a breakpoint at the addr smh
I, Ronald Dion Desantis, do solemnly swear that I will faithfully execute the Office of President of the United States, and will to the best of my ability, preserve, protect and defend the Constitution of the United States.
So Help Me God
Ok, I looked at https://github.com/apple-oss-distributions/objc4 and determined: yes
yeah that exists
le triangle
ramdisk part will become oss soon
Why would we use grains when measuring temperature?
Advanced sarcasm is indistinguishable from stupidity
You need to find better people :P

thats what i was gonna say
but im not sure if thats the best way
it most likely is
thanks
Trying to target iOS 12.3 with Swift + Storyboard, getting a black screen when I try to open my app.
What might cause this?
With iOS 12 
SwiftUI back ported to iOS 12
or maybe you didn't set a default storyboard
i think it should set one automatically though iirc when creating a new project in xcode
also, if you're using a newer xcode, https://programmingwithswift.com/xcode-11-run-app-on-ios-12-and-lower/
@onyx ember what has changed in your Fugu15 with 0.0.5? I went to your site and it appears to use the magnifier url scheme to auto open in TrollStore
you know that feeling when you type out a paragraph asking for dev help on something you've been stuck on for 2 or 3 days but you figure it out right after you're done typing 😐
isn't that rubber ducking?
pretty much
Fixes entries
faptain kink
which of you spent 393 hours writing tweaks last year
I'm trying to update Libellum for Xina but Thoes is giving me this error and I can't get around it. "error: duplicate interface definition for class 'PSControlTableCell'" as well as "error: definition of 'PSControlTableCell' must be imported from module 'Preferences.PSControlTableCell' before it is required"
what website is that
Found @boreal epoch
Guilty
not enough orion 😠
I wish I know of this tool a year ago lol

I know I did have vscode open like
24/7
how does one make his tweak supported on ios 15? I have been making my tweak on iOS 14.8.1 and I sent it to someone on 15.0 using xinaA15 and it sent him in safe mode, what are the first thing I should do to bring the compatibility up? (Palera1n works but the app doesn’t show up so I can’t test it on iOS 15 myself)
Debug the tweak with crashlogs and reading the syslog
I mean all it does is hide stuff on the springboard
My sdk is theos’s latest sdk so 14.5 I know where to get some more recent sdk but I also doubt it would change much
classes change
so probably you're calling a method that no longer exists in 15
it wouldn't
90% of it is the same
Let me check which is it
DidMoveToWindow
Is what I use almost everywhere
it's not about what you hook
if you hook something that no longer exists, it just wouldn't have any effect anymore but not crash
it's about what you call in these hooks
Yeah
It’s the method
- (void) DidMoveToWindow{etc etc etc}
%hook _UIStaticBatteryView
- (void)didMoveToWindow{
%orig;
self.hidden = YES;
}
%end```
don't see why that would crash
i also have some setting preference if that might be the issue
its just some toggles to decide what is hidden and what isn't hidden
actually the best way to go on and fix the issue is, what can cause something to go in safe mode (in general)
you crash SpringBoard
oh this is quite the vague
if you can get logs from your tester that would help
is there a website where i can see stuff just like flexing shows stuff? i can't jailbreak any devices on 15+
springboard crashes should be logged in analytics data right?
i wouldn't know i installed flexing for the first time yesterday
I have no clue i barely know anything of objective-c
useful as fuck
I mean i wouldn't be able to do shit without it either
ask your tester to go to uhhh
Settings > Privacy > Analytics > Analytics Data > find the springboard crash > share button > send it to you
(i have no clue if cr4shed or crashreporter work on xina so)
uh
dont believe so
wdym idk
get them to send you the crash log
from there we can see why it crashed
here or in dm?
up to you
(before everything, just wanna let you know its my first tweak/proejct using objective-c)
lets go in dm
ok
nothing works on xina
xina barely even works fr
facts
is there something else than this _UIStatusBarStringView so that it won't change both the carrier and the battery percentage?
No
how is it that springboard is crashing to safe mode and there is no log in analytics data nor cr4shed
I did 

And some people helped me make it so it only affects the one i want
Hook [UIView layoutSubviews]
by checking if the label has a %, and if it has : and if it doesn't then boom i just modified only the carrier
%hook _UIStatusBarStringView
- (void)setText:(NSString *)text {
if ([text containsString:@"%"]) {
if (changeBatteryText) {
%orig(batteryLabel);
}
} else{
if (![text containsString:@":"]){
if (changeCarrierText){
%orig(carrierLabel);
}
}
else{
%orig(text);
}
}
}
%end
``` i know the logic is kind of weird im not really uesd to obj-c and im pretty new so i do as best as i can with the insane help im being given in another discord server
Soooooooo true sis
gonna disable the layoutSubviews selector with ElleKit

Time to create a tweak that changes carrier text to include % and battery text to not include the %
southerngirlwhocode crying rn
or whatever alias they’re going by now
probably went through like 15 different ones since i last checked
hyperxia or something
or titand3v
or all of them
make a tweak that represents the battery percentage as a decimal instead of the percent
"oh yeah, my battery is on .61"
did she actually use it
idk but titand3v did and iirc they’re either the same person or have collaborated on tweaks
same person
My goal was to break this #development message
Only partially

Theres [[libflex]] and ( [[flexing]] or [[flexall]] )
A library for Flipboard Explorer.
please update flexall lord dghost

same but it only tracks actual hours you're writing code
I am confused what about FLEXall needs updating?
flexall 2
TRUE
must’ve been all the avoiding actual work
at least for me, it crashes on newer ios versions when looking at swift shit
ive only tested it on newer versions
bc thats when ive been looking at swift shit
So you are saying libFLEX crashes when looking at "swift shit"
they haven’t come back properly yet
though ik they’re still making tweaks
bro idfk
you should know this by now
i have literally 0 idea how to do anything
or what anythingis

I am so thankful that libFLEX exist
fr
flexall crashes when inspecting any view.. please fix mr dghost sir..

It tells you the reason...
hi I made a hello-world iOS app, all it does is create a UIViewController with yellow background
https://gist.github.com/nicolas17/966a03ce49f949dd17b0123415ef2e31
flexall ned update..
cr4shed says culrpti flexall i do not see anything else i cannot read anything els
still the best tweak ever
[(id)(void *)0x1090cce00 customSection];
real
wtf
thank god for dghost.. in his greatness he even blacklists snapchat by default as to not ban our accounts..
🙏

thank god for dghost.. in his greatness he even blacklists snapchat by default as to not ban our accounts..
🙏
lmao libFLEX changed it from customSection to customSections
Well don't really need that code anymore anyways. Don't have Theos installed atm so free PR for whoever wants to add customSection selector check.
instant bootloop

works fine
nobody appreciated my app code 😦
@grave sparrow
it was quite the read, although i forgot to reply
congratulations on your project, everyone starts somewhere! /j
should've been purple cause funny
Used to happen to me too
There’s some other flex loader that’s updated I forget the name
@indigo peak im updating downgrading to 16.1.1 so should a code sign bug happen, I could patch aemulo very quickly
thats what I did

went 16.2 -> 15.6 -> 16.1.1
o
how is this too much
less poggers
i tried 16.1.1 and my battery sucked and it resprings stock
instantly noped out

nop
Which language is this is?
.asm???
Oh god
Death
I didn’t even think apple allowed asm
They can't not allow it... clang compiles C code into asm and then assembles it basically
But it’s not documented tho
nerd

when has that ever stopped us before
I’m assuming jailbroken on palera1n?
How does one put an icon to his tweak? for example in sileo you look up my tweak, how can i make it have an icon
Icon:
in the control file
or you can have the icon installed locally and just use file in the icon key (I think sileo supports that)
@grim sparrow would know
this will only work when installed, no?
well yeah
but some devs do it
idk why
but it's an option
Karen has been doing that for at least 6 years
the guy who ran bigboss set that up for me once
made you guys a 'programming language'
do not do this!
it is cringe!
I agree
#define rn ;
#define real const
#define ongod auto
#define cap false
#define tru true
#define fr long
#define bout int
#define fucky unsigned
#define chief main
#define finna {
#define tho }
#define wit (
#define really )
#define amirite )
#define be ==
#define sussin ?
#define no !
#define simpin =
#define zoomin ++
#define vibin --
#define deadass return
#define yikes break
#define sussin ?
#define bussin :
#define sussy &
#define mf *
#define bro if
#define fam for
#define cappin ,
#define ayo switch
#define W case
#define L default
#define draggin [
#define maldin ]
#define lesgoo continue
if this at least hurt uroboro my time is used well.
sussin bussin sussy
how long did you spend on that
how will it work on a15 ❓
Go make one
I say all I need like that is an easy thing to do
lmaooo
@silver rampart god bless ktool and bn-dyldsharedcache ilysm
<3
god bless meth
where’s the gorn
should I make a Dylib injector in python
no
message proving i'm only pretending to understand zoomerese i have zero idea what you are saying
@primal perch
yes, and without using ctypes to just call dyld functions
why no ctypes
you'll need ctypes just dont take the easy road
kk
I’ll just use a class instead

class mach_header:
def init(self):
self.properties = fuck_me
it did
here I was minding my own business reading about writing tests in perl and seeing how to use pytest for perl instead
not sure if there's anything i can do to c++ syntax that can rival perl
not even perl can fight perl
I tried and it didn't work in sileo either
you did file://path/to/icon?
i had put it in the safe folder
i was told to use the url which also didn't work out
what is the url to the image
so this is my url to github
thats not a direct link
how do i make one tho
how do u replace a file in swift with the dirtycow exploit?
i thought macdirtycow couldnt be used for a jb?
it cannot
look at the code in zhuowei’s app
then why did geosnow say we can have hope for a jb
Cause he's an idiot
you did it wrong then
what the fuck
Some of them are cringe but others good
zoom++
u are part of the zoomers too wym
how do you think i wrote it
U didn’t, chatgpt did

chatgpt is my new goat assistant while coding
It be explaining anything fr
lol
ima try mineek's code instead since the file doesn't need to be broken up
turns out it wasnt the exploit that was causing the crash
its because i got the data of the file incorrectly and xcode decided to tell me it was fine
OMFG I HATE MACOS CASE INSENSITIVITY
but you installed the non case sensitive afps volume
whose fault is this really

fr
apple users learning that its possible to install the OS in the non default setup
@silver rampart so i should make the dylib inserter, but no ctypes?
am i allowed to use import struct
wait are you doing like, load command inserter, or runtime dylib inserter
ipsw macho patch add macho.bin LC_LOAD_DYLIB /install/name.dylib
i could not tell you the difference, im going to be real with you
like
one patches the file one modifies device memory
adds LC_LOAD_DYLIB @rpath/fuck/me/daddy to the binary
macholib might be helpful
Off the top of anyone's head, is there a method that detects the status bar being tapped?
SBStatusBarManager is the class
i dont remember the method
handleStatusBarTapWithEvent:
%hook SBStatusBarManager
-(void)handleStatusBarTapWithEvent:(id)arg0 {
NSLog(@“hello world”);
%orig;
}
%end
@shy reef
What if I don’t want to log anything
Will still work?
No your phone will brick
Actually yeah this won’t even compile 
why
“ not "
L
Can someone could make a tweak for videoringtone 🙈 with custom video for each contact plus a general one for unknow?
❤️
guys if im running linux 6.x.x can i delete all other linux x.x.x files in boot?
Hey something on github for a repo template, but its old and is only working for cydia apparently, or at least there is only a cydia button, is there a ressource somewhere that shows how to make a repo?
I mean, idk but it does sound risky?
I say this isn't the place to ask such a thing, ask this in your distro's discord server
look up how to make an apt repo
is only working for cydia apparently,
no such thing
or maybe but i highly doubt you came across a template like that
I am currently looking at this tutorial but i mean.... meh...
its only for cydia
soooo
a cydia repo doesnt exist
Well i didn't knew
could you just tell me if the tutorial is valid or not? some people in the comments were having issues
its redundant and definitely useless but it'll most likely work
gm
yulkytulky the best swift dev
not a high bar 
today i'm installing cygwin in wine 
no i am
youre right you are
<33
evelyn i was thinking and youre the only evelyn i know
any other guides then?
just use this dog
thsnkd
What am i supposed to do with this dude
oh ok u dont exist then
It would suprise me if i just had to run this in the terminal
is this from syns
idk who or what syns is
but amy sent it to me a long long time ago, i edited it a little for myself and boom
on jahweh
Actually this might be because FLEXall doesn’t load libreflex, which is apparently a new library that FLEX devs are now supporting.
can anyone actually tell me how to use it?
Im just being sent script but i don't think its as easy as running it in the terminal is it
Sorry I get my stupid people mixed up some times

thanks real nice
tf is goin on
@surreal mountain why did you take down your procursus mirror?
kirb in shambles
I'm about to start my own mirror at this point smh
the little server that could
It'd be nice if I had any income from procursus to pay for the server costs...
it’s quiprr
he lost all his money in crypto
he too busy doin nft scams 😭
ask hearse to host a mirror
^

true
been saying this
Didn't hearse do some sketchy stuff too
that's saurik
Use the ultimate repo script https://apt.procurs.us/update.sh
sketchy would be an understatement
dog went full schizo
fr
bro everybody telling me to do something else wtf
They're all idiots
they're all literally telling you the same thing
Any "developer" under the age of 18 has no idea what they're doing istg
they sent me 4 different scripts dude
lol
Good meme
@grim sparrow especially you
did everyone go schizo in a matter of like 5 months
especially
i didn’t
well he did especially
what about me
I've been schizo this whole time
The NSA is following me
so?
we know bsd and shit
it’s faster than libhooker
this is the 2nd time today
Because I write all my tweaks in Holy-C
@restive ether coolstar is so over
Alright, so i have the script, i just run it? does it need specific info, is there some thing or whatever the fuck im so fucking confused
agreed
I can't imagine thats difficult to achieve
fair enough
im still trying to get that holyc compiler working
what
rip libhooker api: 2018-2022 - no one used you
did it actually die
Poomsmart when he finds out that there are a ton of <18 developers that run the jailbreak scene
It's still alive in our hearts
you mean your heart
fr
ellekit has it
unironically
substitute api was better
nobody ever used it
sorry for your loss
i was thinking of writing joe in libhooker api
it's just one of those things you won't get someone to use unless it's the only option
i think cam u actually told me to
yeah good meme
Quickactions 2 won't use theos and thinking about making it use substitute api directly
doesnt help that parts of the docs are blatantly wrong either lol
cool
Classic CS
what the frick
cameron ur under 18!
I don't make the rules
Sorry, my immature brain doesn't know how to do basic math or computer
Hey i found the repo.me, it says to update this
FTPArchive {
Release {
Origin "ORIGIN_HERE";
Label "LABEL_HERE";
Suite stable;
Version 1.0;
Codename CODENAME_HERE;
Architectures iphoneos-arm;
Components main;
Description "DESCRIPTION_HERE";
};
};
};``` but idk what origin is, idk what to put in label, and ect for codename, and the github doesn't seem to show how it works either, anyone mind helping me out for this one
you can delete like half of those
half being?
USE APT-FTPARCHIVE
thanks
me when I don't listen
it aint difficult
😭😭
bigboss sucks
@ocean raptor
where should i go den
I mean
You can try it and tell me if it can be considered good, the code DEF isn't good, like defenetly isn't, its my first tweak/first time using objective-c
i couldn't fit it but uh there is a carrier label entry below the change the carrier text
Exactly
idek if bigboss will accept it
But still, i would say it is better than nothing
but they accept anything so who knows
and for a first tweak i'd say its better than nothing too
making joe doesnt teach you anything
what does joe mean?
Yessir
[[hidy]]
I mean the custom text did happen to be quite hard setting up because i kept screwing up the logic and it would hide stuff when it wasn't needed
[[joe]]
joe mama made a customization tweak
joe

Clipboard Sync for Linux/Mac/Windows
tf
alright then what do you guys recommend for a tweak that would potentially teach me more abt it
solve a problem you have with your phone
I honestly have no problems with my phone, even when its on stock
I just like it better with more tweaks
then make something that would make your phone better
even though im sure you have a problem with your phone
problem being, i don't know ngl, i'll think about it but i really don't have any problems with stock iOS
everything is fine to me
- its not my main phone, my main phone runs on iOS 15.6, this one is an iphone 7, i just don't use it
ok well ive done all i can
W rizz or sexual harassment?
Yeah thanks a lot for the help yall provided i guess i'll see what i will do
same thing
exodus 22:19
the latter
W

makefile dev = sexual harassment
I am not a makefile dev 
I'm a C dev
Cause that's better
source?
no
its easy just parse it
there's like 3 header fields that matter and then you just read a list of structs
boom parsed
Undefined symbols for architecture arm64:
"_bzero", referenced from:
_main in dyld-f56052.o
ld: symbol(s) not found for architecture arm64
clang: error: linker command failed with exit code 1 (use -v to see invocation)
gmake: *** [Makefile:7: dyld] Error 1
???????
I don't use bzero at all
stupid compiler
it was inserting it
Not for split caches?
4 header fields in that case
main one contains the map-what-fileoff-where for the rest of the caches, then you just load it normally
Is BigBoss not shipped with jailbreaks by default now?
Having people sharing screenshots like this
coolstar's jailbreaks ship a mirror
repodeclutter or something
that wouldn't stop people from seeing libmryipc though would it?
cs got rid of the mirror a while ago
odysseyra1n does not have it as well
no bigboss then 🤣
it's also worth noting that bigboss has been removed from canister so just searching for the package won't work

not like sileo looks at canister when resolving deps either
unc0ver still ships with it, cs jbs do not
as well as people using ios 15 jbs of course
since it's just a default sileo install at that point
ugh great...
I guess I could move it to havoc but I really don't see what was wrong with bigboss

32bit and abandonded packages
seemed like the most sensible place to put it as every jb shipped with it, but not any more I guess
cs was afraid of random noobs bricking from installing ancient packages
ah
cool
isn't bigboss+ still around
so the recommendation is what? move all your shit away from bigboss?
ginsu did it, opa already has his deps/libs on his repo
yeah I have not been active in the jailbreak scene in like 2 years
then optionally pr to canister
so users can just search and have it appear
the hecc is canister?
https://github.com/cnstr/manifests to be specific
Easy-to-use, RocketBootstrap-less iOS IPC — This is a support package for developers
yeahhhh
it also acts like an archive of sorts
no because it's a dist and dists are silly
oh I see, that's the old dynastic version
for bigboss it is
well, you could still use a dist with the correct url
damn how long ago did they scrap the advanced dev role here?
They didn't want to give it to me so they removed it

sometime ago cuz it was useless
tbf yeah nobody used it
never got to see cat photos 😔
lovely
my recommendation would be to do nothing and tell everyone to add BigBoss
at least that's what I do
yeah that's what I do atm
is there like a not encrypted ipsw
or do i gotta run something to decrypt the plist files
firmware files aren't encrypted any more
you can find decryption keys for older firmware files though if you need them
that's an iOS 6 ipsw
yes I saw
did iOS 6 even use dyld shared caches 
dsc started in 3.0 iirc?
idk
as of what version do yk
ios 10 was the first to not be encrypted
thank you
define parser
it’s ok i don’t need it
just wanted something to extract bundle ids from a mach-o
but i wrote a parser 5 days ago already
I already wrote that https://github.com/ProcursusTeam/ldid/blob/master/ldid.cpp#L3759
yea
so something that just reads the dyld_cache_header struct from the cache
yeah but i can do that already
One simple issue: split cache
L
FILE *fd = fopen(filename, "rb");
dyld_cache_header header;
fread(&header, sizeof(header), 1, fd);
// do shit
most complex C thing ive ever written
this is literally substitute code
u wrote that?
Dyldo
facts
What your girlfriend has to use because you can't satisfy her
Which girlfriend

I could be the one satisfying her .
i tried writing in python and 
The one you refuse to shoot your shot with cause she's "talking to some other dude"
I’m done with her dawg
No point living in the past
Enough girls in the world
not really
I’m living my best life since I told myself to let go
If I meet with her irl again sure I’ll shoot my shot, but for now time to move on
there is other bitches to explore
Congrats bro ❤️
I love this song so much

I be cryin on the inside and smilin when the cameras on
fd is always freed, no unsafe behavior with the pointers
congratulations you have earned the achievement: not needing rust

now get every symbol from the cache
bet
ok will do
this is annoying

just a tad
a lot
so what version should i try it on
it also could very well be just a code issue
but we'll burn that bridge when we get to it
15.x
@tepid olive did you change the ellekit xcode targets?
😭
No more injector
what are the targets?
launchd and ellekit?
you need to build loader as well
are those the targets still?
but yeah
on mac too
we don't have that
Okay cool
So that’s about it
Make sure to make the CydiaSubstrate.framework symlink
To the ellekit dylib
Also symlink libhooker
And libsubstrate
And make the TweakInject folder
Nope, it makes pspawn.dylib
No renaming needed now
I don’t think the build process will change much
Gn
question for the devs here: could you possibly be able to set nonce using the dirtycow exploit? just wondering.
No
nonce isn't stored as a file on the fs
it's in nvram
which requires kernel r/w to write to at the moment
StoreKit is my favourite tweak 
they want to make the button to legally buy things larger so they can press it more easily
nuking it as we speak
man
I don't think 24 hour mcdonalds have changed at all
T E S C O
Anyone know how I could check for a volume button press without UIKit/SpringBoard
(Inside launchd)
No
k
cc @tepid olive
you asked this before
I never figured out how lol
You can find it somehow with IOHIDEvent
Yeah
But that doesn’t work
Idk then
When this code is reached: NSRegularExpression(pattern: ";+(?=[^[\\(]*\\))")
I get this error: Error Domain=NSCocoaErrorDomain Code=2048 "The value “;+(?=[^[\\(]*\\))” is invalid."
What's wrong with my regex that would make it angry?
you might need to escape the second [
also you can use raw string literals in Swift to avoid the double backslashes
My tweak got accepted on bigboss :D
for reference:
why does this work
because otherwise it thinks the [ is the opening delimiter for a new character group
oh i think that was supposed to be a "(" anyways
just reverse substrate or something idk
uhhhh
that's a yes
I can tell you but i only know how with a soldering iron
Ion think u want that
I'm so smart
@restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether @restive ether
ym
yes I will
we are waiting
@grave sparrow
https://github.com/apple-oss-distributions/IOHIDFamily/tree/1ca71a23b43de09cb3968515586840eacf817445/HID should be where to look
can just nab the code from there if it's not already linked so you dont have to open a new bin
i figured it out (kinda)
it doesn’t work in launchd but it works in apps
@grave sparrow
but wasn't the goal to have something working while springboard is loading lol
just without hooking it
yeah
but it should qork
work
idgi
There seems to be a problem with your login session; this action has been canceled as a precaution against session hijacking. Please resubmit the form.
am i the only one who can't sign in to the iPhoneDevWiki
why don't you ask the guy who made crane
you're off to a great start
idk what that means
how do people view logs these days?
oslog
sure, but they don't show up, so what am I doing wrong?
This code always shows how to listen for event changes, but I just want the state
It sucks how my code doesn't work in only launchd
if you got the official one it doesn't work on anything newer than like 13 or something
There's probably no registered service
is there one that works for iOS 15?
i mean if you have a mac then oslog isn't required (launch console)
also idevicesyslog exists in libimobiledevice
idevicesyslog
true
Oh my reply didn't work lol
idevicesyslog
It’s completely different
so yes, IOHID
I know
That code works
But it fails to get the system event
simply get krw and just read the pin directly
I wish...
lol i was thinking krw too but that seems extra
wdym woah, didn't you do that exact same thing already
no?
i never did fancy interop stuff
if you mean the rust tweak thing (crabapple), that was just several macros held together by duct tape and unicorn
if you mean xenon, the rust bits communicate with the swift bits using unix sockets as they were in completely separate processes
does Xina still have the firmware package at 99 or is it corrected now
not had that issue since the 2nd public build
so I think it’s fixed at least
@hasty ruin icraze
on dog
dog on
Can I use persona-mgmt if I can't control the entitlements of the main app
Ie. I'm injecting into an unsandboxed app that I don't control, and I would like to do something as root
Right now I'm putting the setuid flag on my root helper and calling setuid(0) from it, and spawning the root helper from my tweak
Yea the thing is I'm asking because it's not working
It works when I run it from ssh as mobile
Yea that's what I'm doing
Except real task is just helper binary
🤓
I looked at sileo but sileo has persona-mgmt and doesn't have the middleman helper binary
Ig I'm just stuck with setuid?
MAO
Well I mean
It wouldn't work from ssh mobile in that case
It's all lowercase and stuff I copied and pasted it from sileo's entitlements
Maybe it's time to go the daemon route
Are there any limitations on xpc from an unsandboxed mobile app
Asking this for tmr, Im almost sure I'm just dumb but why isn't this working?
Just cloned this
there's no default target
you have to specify one
That's the command the repo says tho, how would I specify one?
the project name is wrong
https://github.com/msm8953-mainline/lk2nd/tree/master-sdm632/project
the project name has to be one of the filenames in this directory
it's not sdm632
yeah
Ik what it is but not off the top of my head lol
are there any jailbreak apps like that work on iOS 15 and are installed via .deb and not .ipa?
Santander from here https://github.com/SerenaKit/Santander will probably work
Go to actions there should be a deb
thanks
npnp
Ah
Which for anyone wondering is /var/jb/Applications/
If your app is compatible with TrollStore, I would rather recommend using that.
ellekit
whats persona for
entitlement to run binary as root
Hey @indigo peak, have a look at this!
You are not entitled to anything. If you think otherwise, please leave.
Zebra or NewTerm may also help as examples of apps that work on root and rootless
They work perfectly with TrollStore, mterminal don't 😦
No. The code signature is mostly PAC and PPL protected. The only thing you can do is, you can NULL it out and then use fcntl on the file descriptor of the binary to attach a new one. Yes VM pages also have something like this and because of that you always have to restart the process after updating the signature so it spreads to the memory mappings, that's about all I know about that however.
No, only some members where
But I think in iOS 15.2, this member is now either NULL protected or PPLed
don't remember exactly
Because it's not possible
you need a PAC bypass now I think
You really shouldn't use this technqiue when you have a PPL bypass however
I think it could still be used when you only have a PAC bypass
either writing to the vnode and memory mapping signatures directly or using trustcache injection
no
PPL bypass
phys rw is something entirely different and doesn't bypass anything by itself
for CS_DEBUGGED you probably also need a PPL bypass, but you can also do it in userland using ptrace if you have the entitlements
CS_DEBUGGED is not stored in the csflags
it's stored in the pmap struct
and thats ppl protected
iirc
phsyrw = read and write without MMU
like physical adress space
instead of virtual one
that's all I know about it lol






