development

[faint stag]

i made a short post about this, one sec

ah nvm, not completely relevant

in short, whatever you build as a deb file will have the contents installed with rootfs being the initial dir by default

so if you want files in /var/jb, then make the same folders alongside the DEBIAN one

to build a deb, use dpkg-deb -b directory

[acoustic imp]

@naive kraken (just for a little background, i have never made/devolved anything for iOS, so pleas excuse my unknowing of how it all works, and my not knowing of how apps are launched) but would it be possible to create a tweak that locks app w face id lik bioprotect, that even in safe mode/jailed mode still either locks that or just make it crash when trying to launch it? or bioprotect could be updated. Also like you could select which apps get this like feature applied to them. Also would this be possible on TS?

[naive kraken]

definitely not possible with trollstore, no idea about the rest

[acoustic imp]

oh ok, thx

[fossil zodiac]

dyld being open source is very useful. Many file formats have a published specification, RFC, ISO/IEC, etc in addition to a reference implementation. Was wondering if there was an official or unofficial file format specification for Mach-O?

Okay thanks

[indigo peak]

ok

[hasty ruin]

ask @grave sparrow to update it

if he doesnt reply, just keep pinging him

👍

[tepid olive]

Make a jailbreak tweak and inject the deb in the app you want ig?

[acoustic imp]

Like modify the way it launches so that Inorder to launch the app like sm verification has to happen w a tweak like bio protect and if the verification fails the app would just crash when trying to open or just not open completely

[grim sparrow]

@ocean raptor is anyone going to do the fork stuff?

[ocean raptor]

Didn't you ask this a few days ago

[grim sparrow]

well I asked for progress and you said nothing has been done

and now im asking if anything ever will be done

[ocean raptor]

Nothing will be done

It's literally impossible

[naive kraken]

it's very possible

[ocean raptor]

go ahead

patch bash

do it

[naive kraken]

either by replicating what fork does in userspace or doing the implementing the xina solution of converting the binary to a dylib in a more broad way

[ocean raptor]

neither of those are something that procursus can do

that is part of the jailbreak

amy is asking me to replace fork() with posix_spawn()

[naive kraken]

hm I see

[faint stag]

i mean sure, it could be possible to intercept an app launch with a biometric prompt
but you'd have to sideload (and decrypt) every app you'd want that for

which is both tedious and quite annoying because setting up apps again is no fun and when they have updates it's even worse

[ocean raptor]

Exactly, that's why I say it's not possible

[naive kraken]

the issue is not some API

the issue is that dyld or whatever does not allow dlopening binaries anymore I think

Or something along the lines of that, idk for sure

[primal perch]

based

[hasty ruin]

https://tenor.com/view/based-uh-hello-based-department-based-department-american-psycho-patrick-bateman-gif-22458382

[primal perch]

Zefram v1.0 @hasty ruin @grave sparrow

(now in AMD drivers)

[hasty ruin]

https://media.discordapp.net/attachments/933428639620542474/1067152949211574332/caption.gif

[primal perch]

fr

https://media.discordapp.net/attachments/933428639620542474/1067152949211574332/caption.gif

[velvet path]

Isn't the only way you're fully fixing fork to have a PPL Bypass

[ocean raptor]

Why? fork should happen purely in the kernel, no?

[naive kraken]

idk

why would it work on trust level 7 then

and not on 6

[ocean raptor]

Is trustlevel stuff in open source xnu?

[naive kraken]

I think it must be something subtle that broke, probably not even intended by apple

[naive kraken]

good one

[ocean raptor]

[naive kraken]

It's "Open Source" in the KDK

[primal perch]

in fairness the kdk has a shitload of debug info so you put that in ida freeware and its basically source

[naive kraken]

the issue is that the forked process can load anything but the main binary I think

So when you call fork and it's expected to jump to inside the main binary in the child it fails

but if the main binary is just something that dlopens the dylibfied real binary and that then calls fork, it works

[timid furnace]

my plans have been foiled

[primal perch]

also every modern OS but yea

[timid furnace]

and removing MH_PIE doesn't work (at least on arm64e Mac)

but removing MH_PIE isn't an option anyway

[ocean raptor]

It's not default on FreeBSD yet

[primal perch]

[ocean raptor]

It will be on 14

[primal perch]

modern

[ocean raptor]

Or x86_64 at least

[primal perch]

freebsd is for people stuck in the 90s

like it or not linux won

[ocean raptor]

So if I want to debug fork not working, how would I do that?

[ocean raptor]

I need to make $500 quick

Sadly pimping out @grave sparrow's mom is not profitable since nobody wants to pay for that

[primal perch]

get some silicone implants

give bjs for a day

problem solved

[ocean raptor]

I am a minor 😐

[hasty ruin]

dont tell him that

[primal perch]

[primal perch]

move to japan

then repeat steps above

[hasty ruin]

philipines

[primal perch]

(there are many pedophiles there)

[ocean raptor]

that costs $

[primal perch]

gotta spend money to make money!!

[hasty ruin]

which you'll make back

fr

[primal perch]

fr

[hasty ruin]

fr

[ocean raptor]

[primal perch]

other alternatives include: springboard tweaks

mcdonalds for a week

[ocean raptor]

I thought about making snapchat hacks

[primal perch]

at 15$/hr

[ocean raptor]

I already have a job

[primal perch]

not 2?

this is bidens america

everyone has 2 jobs

[ocean raptor]

[hasty ruin]

buy TWTR

[ocean raptor]

I wan to make $500, not lose $500

maybe I should make a crypto scam

[hasty ruin]

procursus miner wen

[ocean raptor]

I wonder what the most profitable tweak is...

[hasty ruin]

^

[ocean raptor]

really?

thats such a boring tweak though

[ocean raptor]

bro was able to buy packix with carbridge money though

[primal perch]

facts

[ocean raptor]

can't imagine packix cost much though

gonna make bridgecar

and sell it on chariz

then eventually buy chariz

[hasty ruin]

50% of carbridge owners dont know what a jailbreak is

[ocean raptor]

so I need a tweak that people who don't know what jailbreaking is will look for

hmmm

I don't care about piracy

I used to pirate tweaks

me when I pirated instalauncher from HYI

before I knew what piracy was

[hasty ruin]

first tweak i bought was bioprotect XS

[ocean raptor]

HYI and bite my apple

[hasty ruin]

shit aint work

copypog*

[ocean raptor]

I wonder what the first tweak I bought was...

Springtomize I think

[hasty ruin]

used the money from my piracy app store to stop pirating tweaks

[ocean raptor]

very based

[hasty ruin]

remember when someone bought xarold for 2k and just shut it down

[ocean raptor]

I need altstore money

[hasty ruin]

you dont even get anything for it i swear

the altstore beta ipa is on his github

[ocean raptor]

bro is getting $10k/m for writing a wrapper around ldid

[hasty ruin]

which doesnt even work*

[ocean raptor]

I should steal kabir's supercharge and sell it on patreon

kabir, I promise I will not do that

this is a joke

[hasty ruin]

@nimble parcel

[primal perch]

intjtroll

[primal perch]

and the wrapper around open source emulator cores

dont forget that part

[ocean raptor]

so I need to write a gui 😭

[hasty ruin]

porting zoomb0i to ios for $10/month

[ocean raptor]

ok so I'm going to ask some people the one thing that they wish their phone could do and then write a tweak to do that so I can capitalize on stupid people

[primal perch]

fr

[hasty ruin]

don’t forget to @available it for iOS 13.0!!!

[primal perch]

fr

unsafe

[indigo peak]

i need to make a paid tweak

fr

[primal perch]

std::vector

cummers

[hasty ruin]

[ocean raptor]

nobody will pay for quickactions 2 (and I really hate it) so I need to find a new tweak idea

[indigo peak]

i legit have 0 source of income

[ocean raptor]

or anything

[hasty ruin]

[ocean raptor]

to milk all the stupid jailbreak people dry

[indigo peak]

^^^

fr

[ocean raptor]

I have a source of income

[primal perch]

https://cdn.discordapp.com/emojis/912021126304116806.webp?size=96&quality=lossless

[indigo peak]

average #development

[hasty ruin]

(prostitution)

[indigo peak]

thats all @marble perch

[ocean raptor]

no, I have a job

[hasty ruin]

(prostitution)

[primal perch]

job? in a discord called r/jb? no way

[hasty ruin]

[primal perch]

Intel i5-2415M (4) @ 2.900GHz

[hasty ruin]

r/Jailbreak*

[primal perch]

🤓

[ocean raptor]

kirb, if you give me $1000 I will fix chariz for you

add iphoneos-arm64 support

[indigo peak]

@primal perch didnt you say youd give me money if i maintained birdpoop for you

[hasty ruin]

kirb, if you give me $1000 I will do literally nothing for you I just want money

[primal perch]

the opposite

[hasty ruin]

actually

[primal perch]

pay me like 500$ and you can have all rights and ownership to it

[hasty ruin]

i will acknowledge Australia existence

[primal perch]

update it, resell it, etc

[indigo peak]

[primal perch]

same thing as buying a broken down cheap car

put in the labor and youll profit

[ocean raptor]

thats what I want

[hasty ruin]

make sure to host on Pluto repo for maximum profit

[ocean raptor]

a car

[hasty ruin]

(They don’t pay tax)

[primal perch]

you dont

you simply dont include drm

[hasty ruin]

nah you spend like a day on basic drm to protect week 1 sales

[primal perch]

or you do what IDA does and make it so expensive that anyone who buys it wouldnt dare share their binaries

so all the leaks cant be trusted in terms of malware

[hasty ruin]

Cydia up auto shares them

[primal perch]

cydia up

[hasty ruin]

oh real

[ocean raptor]

fr the only reason I want $500 is so I can buy a lego set and not feel guilty about not spending the money I get from my job on a car

[hasty ruin]

🗿

[primal perch]

ida?

[hasty ruin]

true

[primal perch]

where is cydia up ida

[hasty ruin]

Like actually we have the best role colour

[primal perch]

me especially

[hasty ruin]

True

[primal perch]

simply open source zefram

i wouldnt pay for captware

:p

[ocean raptor]

why would you care about piracy?

[primal perch]

fr

[ocean raptor]

anybody who pirates would not buy it

[hasty ruin]

zefram cycake edition wen

[ocean raptor]

a pirated copy is not a lost sale

[primal perch]

it does restrict the amount of people that use it, as some percentage of people are paranoid about malware

probably not a lot

but some

fr

the us government is so terrible with financial planning

[hasty ruin]

if you’re that paranoid about malware, you shouldn’t jailbreak

[primal perch]

is paranoid
uses ios

4head

[hasty ruin]

Fr

[primal perch]

aka the apple data farm

[ocean raptor]

why hasn't someone made a pdf editor that's better than acrobat

[primal perch]

eta never

lets make one

capt lets make one in fermiui

sell it for 50$ one time

people will happily pay that if it means no adobe bullshit

actually $69

nicer number

[ocean raptor]

can I get in on that action

[primal perch]

yeah first we just need to finish fermiui

on the plus side when its done it will support freebsd

(it's os agnostic)

abstracting away the events to a second layer

so all the rendering code can just be dropped in

but its the same binary

simply (ab)use virtual methods

fr

[ocean raptor]

FreeBSD uses X

[primal perch]

great rn the event and windowing is just SDL2

which supports wayland and X

so it would work

everytime i go to work on it i remember i need to write the hardware accelerated backend and that requires learning opengl

so then i go to learn opengl and get bored/confused and do something else

repeat

[hasty ruin]

Just support one OS

And spin up a VM for each view on incompatible OSes

👍

[primal perch]

docker

[hasty ruin]

dicker

[primal perch]

lock.shield.fill
lock.circle.fill
lock.square.fill
lock.rectangle.on.rectangle.fill

void AppDelegate::ApplicationWillFinishLaunchingWithOptions(FermiUI::Application *application, void *launchOptions) {
    // fr
}

void AppDelegate::ApplicationDidFinishLaunchingWithOptions(FermiUI::Application *application, void *launchOptions) {
    const Rect mainFrame = RectMake(0, 0, WINDOW_WIDTH, WINDOW_HEIGHT);
    
    #if DEBUG_UI_FRAMEWORK
    Fermi::DebugUIStartViewController *vc = new Fermi::DebugUIStartViewController(mainFrame);
    #else
    Fermi::StartViewController *vc = new Fermi::StartViewController(mainFrame);
    #endif

    FermiUI::Window *window = new FermiUI::Window("Fermi", vc, mainFrame);
    window->Show();

    vc->Release();
    window->Release();
}```

fr

scoob

fr

we just have a shitty checkbox cus we're lazy

we'll pay you $0/hr to add them

4.00 MB of binary code though including all the libraries

not bad

electron: best i can do is 150

and its only half dead

the last commit was

2 weeks ago

[sturdy chasm]

where can I find libiconv.2.dylib for armv7?

just the dylib

I can't find it in the default pangu packages

[restive ether]

probably doesn't exist lol

saurik's bootstrap sucked balls

dork nerd

didn't ask

[sturdy chasm]

yeah tbh

so how can I get tar working? in an ssh ramdisk

[faint stag]

make a better ramdisk

[sturdy chasm]

nah

but in all seriousness, if I don't have the file, how am I supposed to make it better?

I already added a bunch of missing stuff, but I still need this lib

[faint stag]

by shipping a bootstrap with the ramdisk

duh

[sturdy chasm]

like what bootstrap

substrate?

that doesn't include much either

[faint stag]

use whatever morpheus has
binbag has tar and should support armv7

[sturdy chasm]

yet the file exists somehow and is in one of the packages downloaded by cydia on a fresh install afaik

[faint stag]

skull

or just grab the entire binpack
it has fat binaries

cause you probably need more than just tar

[sturdy chasm]

nope just tar lol

I mean the dependencies are all there already

since I put them in the ramdisk

I put binbag in my ramdisk, will see if it works

[ocean raptor]

libiconv.2.dylib is part of the dyld_shared_cache

the dsc in ramdisks is missing some libraries to make it smaller

[sturdy chasm]

I could probably just copy the one from retail ios then

nevermind haha I had a brainfart

in fact dsc doesn't seem to be present at all lol

any way to extract just libiconv.2.dylib?

[faint stag]

i still advocate for statically linked binaries

[sturdy chasm]

helps with whatever this headache is

[faint stag]

yeah but relying on dsc in a ramdisk?

💀

[sturdy chasm]

what do you propose I do

[faint stag]

i already told you what to do

[sturdy chasm]

does binbag rely on any bins?

[faint stag]

no

[sturdy chasm]

or dsc?

[faint stag]

it's like busybox

[sturdy chasm]

alright

where can I get the 32 bit version?

I don't think it's on the original website

unless i'm meant to use the applewatch version lol

[faint stag]

uhh, i don't even know if arrmv7k will run but apparently that's just 32-bit armv7

so it wouldn't hurt to try

[sturdy chasm]

well it doesn't run, just tested

[faint stag]

damn

[sturdy chasm]

bad architecture

is there a tool to extract dylibs from the dsc?

[next wadi]

does anyone know how i might go about making a deb archive without ar or dpkg

[faint stag]

look at dm.pl

[faint stag]

good news, it's archived
https://web.archive.org/web/20171207111110/http://newosxbook.com/tools/iosbinpack.tgz (well, the binpack is)

[sturdy chasm]

nice for 32 bit?

[next wadi]

all my homies hate perl

[sturdy chasm]

actually has to be if it's from 2015

[faint stag]

should be

[sturdy chasm]

k

this doesn't really help since there's no tar 💀

binbag would have been nice since it was nice and contained

let me take a look at how ssh _rd handles things

[faint stag]

bro where are you looking

it's in usr/bin

a symlink to bsdtar in the same dir

[sturdy chasm]

oh yeah

i'm tired tbh

how does ssh_rd work anyways? doesn't have any built-in patchers

[faint stag]

well it's a script, other binaries do the patching

[sturdy chasm]

obviously

i'm talking about like packed in generic patche like iboot32patcher

[next wadi]

"not a Debian archive" my ass

[faint stag]

it calls it

lol

[sturdy chasm]

oh alright

what source file is this

[faint stag]

that's nathan's sshrd script

the 64bit checkm8 one

[sturdy chasm]

oh

not talking about that

talking about og sh-rd by msftguy

i'm getting desperate, might just bust out the windows 7 laptop

[faint stag]

ah i'm looking over it

it uses xpwn i think
syringe is used for loading it

[sturdy chasm]

sounds about right

[faint stag]

and i guess a lot of patches are just done manually with fuzzy_patcher

yeah, fuzzy patcher is used for the syringe stuff

since they made a java gui there's a sort of bridge

[faint stag]

debian package format is clearly explained lel

i even made my own explanation for someone else

just make sure you aren't missing DEBIAN or anything in it

[next wadi]

yea i know i have the actual format down

im just struggling with compressing it into the actual archive

right now i have packing working by compressing the data and control archives and then using ar to make the deb

but i wanna remove the ar dependency

[faint stag]

don't tell me you're going to make a basic version of tar/ar

[next wadi]

maybe i will maybe i wont

[faint stag]

see, dpkg depends on libs for compression but tar itself is just called since there's no lib (officially)

[next wadi]

right

ideally i was trying to find a way to create a deb archive using only tar

from scratch

[gentle grove]

you need ar as well

[next wadi]

ugh

thats annoying

[gentle grove]

because that's what the deb format is

[next wadi]

i can extract a deb with tar

just not make it

[faint stag]

bsdtar is fine too

but ye

[gentle grove]

bsdtar can make an ar?

I thought tar only did tar and ar only did ar

[faint stag]

dpkg depends on tar

[gentle grove]

yeah but that might just be for the stuff inside?

The .deb itself is ar format

[faint stag]

skull

i like how tar can unarchive ar too though

[next wadi]

yea thats what had me hopeful

[faint stag]

yeah i don't think there's a way around ar

[next wadi]

i can unarchive but not archive

thats so stupid

[faint stag]

i mean, if ar isn't on your system already then there's a problem

it's so basic by now

[next wadi]

yeah thats true

but i hate dependencies

thats why i made this whole deb unpacker / packer in the first place

[faint stag]

it's a depend you're expected to have just about everywhere

except windows

[next wadi]

realistically dpkg's manipulation features are available on most systems but i still dont like it

[gentle grove]

figure out how GCC uses ar

because that's the format of objects

apparently

[next wadi]

i dont think anything about this project would work on windows anyway

[gentle grove]

To create an archive from files class1.o, class2.o, class3.o, the following command would be used:

ar rcs libclass.a class1.o class2.o class3.o

Unix linkers, usually invoked through the C compiler cc, can read ar files and extract object files from them, so if libclass.a is an archive containing class1.o, class2.o and class3.o, then

cc main.c libclass.a

or (if libclass.a is placed in standard library path, like /usr/local/lib)

[next wadi]

unless u used WSL

[faint stag]

yeah but that's read

not creation

[gentle grove]

yeah butnsee if there's aibrary they have

A library

and if there is then make some c bindings

and then have fun maintaining that

and habign cross platform support

[faint stag]

there's probably nothing to maintain after it's done

it's simple af

it's archaic software for a reason

[gentle grove]

I mean for if there's an ar C library

you would need to make some c bindings

and then that's a big floodgate

[next wadi]

yea im probably just gonna stick to using ar tbh

[faint stag]

it's reinventing the wheel

fr

[gentle grove]

what

[faint stag]

to implement ar in such a way

pointless

[next wadi]

looking at theos' docs it needs WSL or gsc anyway

so realistically if i use ar it will be instantly cross compatible with any machine that can compile with theos

[gentle grove]

oh also what's wrong with like https://pypi.org/project/unix-ar/ or something

[next wadi]

im cool with that

[gentle grove]

I mean its the proper way to do stuff technically

[next wadi]

2019

[gentle grove]

?

[faint stag]

i understand using a lib for something like python
but ar is probably as basic as having a shell

if you don't have it, wyd

[next wadi]

last updated in 2019

[gentle grove]

so?

[next wadi]

does anyone know if dm.pl just calls ar too

i can look but im not at my pc rn

[gentle grove]

what's DM.pl

[next wadi]

theos' version of what im making

[gentle grove]

send link

[next wadi]

semi-port of dpkg in perl

https://github.com/theos/dm.pl

vs https://github.com/luzproject/pydeb

granted dm.pl is a command and pydeb is a library but its the same concept

[gentle grove]

oh its perl

[next wadi]

🤮

[gentle grove]

I'm pretty sure Perl is just gonna use all commands

[next wadi]

i dislike perl idk why

[gentle grove]

https://github.com/theos/dm.pl/blob/4d3e455f632f77bbf500e03c3670b7cd951f546f/dm.pl#L113

[next wadi]

ok cool

what about making the tar archives

Is that anywhere there

like control.tar.whatever

oh its literally right there

my bad

so it uses a library for tar compression and just calls ar

ohhhh

i get it now

Apk

ok

ik what im gonna do

[gentle grove]

no that's moy it

not

@next wadi pretty sure they just literally implemented the ar format manually or something?

I recognize the header

from earlier today

[faint stag]

looks like it

[gentle grove]

look at print_ar_record

cpt

[next wadi]

common lzma L

xz better

i'd make zstd the default comp

but

its not installed by default yet

plus its new

[gentle grove]

@next wadi hey read the comment here trol

maybe zstd isn't in spec

:trol;

nvm

[faint stag]

yeah good luck with that

[gentle grove]

That comment is out of dats

ignore that

[next wadi]

no it is

i tested with procursus dpkg

on my mac

[gentle grove]

zstd (with .zst extension, supported since dpkg 1.21.18),

when was that dokg version

[next wadi]

you mean

[gentle grove]

1.21.17

[next wadi]

with .zs extension

[gentle grove]

1.21.18

[gentle grove]

lmao

Darwin file moment

no

it said zst in the deb(5)

sooooo

same with bz2

no just zst

its zstd

why

nfr

what's that got to do with anything

[next wadi]

what about lzma and lz4

both cant be lz

[gentle grove]

simple

it can't just be 2/)35634#

2 letters

therefore Darwin file command is wrong

shut up

no one cares

and no one is naming it .zstd either

[next wadi]

yea regardless that was a dumb ass bug

and a pretty big one too boba

I cant believe they hadnt noticed

[gentle grove]

that is a very minor bug

[next wadi]

you're a minor bug

[gentle grove]

I'm not a bug

[next wadi]

says who

[gentle grove]

@next wadi @grave sparrow @faint stag gn

[faint stag]

gn

[ocean raptor]

@gentle grove @next wadi @faint stag

1. ar and tar are super simple formats
2. bsdtar is just uses libarchive which supports every format you can imagine
   https://manpagehub.com/FreeBSD-13.0/libarchive-formats.5

[ocean raptor]

https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=ebc2c3def335ac391b010323ab65a302648f3ec7

January 10th

Speaking of which, I need to update dpkg on pro again

[next wadi]

gn

[primal perch]

gorn gorn gorn gorn gorn

[naive kraken]

I'm guessing you would call fork from a CoreTrust signed binary on either xina, Fugu15 or just with TrollStore and Filza (note that the fork issue only affects arm64e)

[slate yoke]

is anyone able to compile this in xcode so I can side load the ipa onto my phone (and on my watch)? only the "watchOS" branch has the app that I want but unfortunately I don't have a computer to compile it rn. tysm! https://github.com/brandonplank/flappybird/tree/watchOS

[lime moat]

How can i make my tweaks complatible with palera1n

[tepid olive]

anyone knows here how to compress an image by maximum without losing much quality? i have this code but it compresses it to 2kb or either 3kb but not 1kb which i really need due to MacDirtyCow limitations

        let targetSize: Int = 1024
        
        // Determining the best compression algorithm using binary search
        var minQuality: Float = 0.0
        var maxQuality: Float = 1.0
        var midQuality = (minQuality + maxQuality) / 2
        
        // Variables to store the compressed data and the size of the compressed data
        var compressedData: Data?
        var compressedSize: Int = Int.max
        
        while minQuality < maxQuality && compressedSize > targetSize {
            midQuality = (minQuality + maxQuality) / 2
            compressedData = UIImage(data: data)?.jpegData(compressionQuality: CGFloat(midQuality))
            compressedSize = compressedData?.count ?? 0
            
            // Check if the current compression is lossless or lossy
            if compressedSize > targetSize {
                maxQuality = midQuality
            } else {
                minQuality = midQuality
            }
        }
        
        // Saving the compressed data to the specified path
        do {
            try compressedData?.write(to: URL(fileURLWithPath: path))
        } catch {
            UIApplication.shared.alert(title: "Error", body: "Failed to compress image!", withButton: true)
        }
    }```

[lime pivot]

webp or heic might work. webp compresses better than png or jpeg and can do lossless or lossy with transparency, while heic is lossy only ie a replacement for jpeg

you may need to use external libraries (libwebp, not sure what exists for heic) to encode to them, though

iOS 15+ can decode both though

[tepid olive]

ok ill try with webp

[hollow turtle]

Have palera1n installed. Phone died. Do I have to reset back to factory and redo the whole jailbreak again?

[indigo peak]

no

ask in #jailbreak next time

[hasty ruin]

or #palera1n

[weary heath]

hi, i'm trying to sideload a tweak that uses mshookmemory, how do i make it work

do i have to enable jit or is there a better way

[indigo peak]

you can’t I think

I think you have to have JIT

[weary heath]

would altjit make it work?

[indigo peak]

no idea

[weary heath]

If you sideload normally, you will need to enable JIT in some way. The most common method is to attach a debug server to the application while it's running - JITStreamer, AltStore, and Jitterbug all use this with their Jit enabling functions. The only downside to this method is that you are required to be connected to a WiFi network in order to enable JIT.
from pojav

not convenient

[tepid olive]

what kind of memory are you hooking

[fossil zodiac]

Do you absolutely need to runtime patch the executables pages? You can't patch the binary and then sideload it?

Got my category parser working

Integrating target class lookup with dyld info bindings was a pain

[weary heath]

ah well

[weary heath]

i want to patch an instruction to branch to a function in my tweak file

[weary heath]

app's __text segment

[fossil zodiac]

I'm not sure about the sideloading pipeline you're using, but that sounds like sounds like a static patch you could do to the binary before you sideload it

[weary heath]

yeah it does, i'm just unsure what the address of my function would be

[fossil zodiac]

How do you get its address when you want to use mshookmemory?

[weary heath]

if i patch it into the ipa i should be able to locate it then patch the binary right?

i just pass the address

[fossil zodiac]

yeah that's what I mean, you can patch the IPA

well if you have the address your disassembler should show you the file offset and you can patch it on-disk

[weary heath]

i'll give it a shot, thanks

[fossil zodiac]

You're welcome 👍🏼

[primal perch]

that sounds legitimate and convincing

@lament mica

[indigo peak]

who tf is named gilbert 💀

[hasty ruin]

[tepid olive]

@hasty ruin Nexus took too long to release

(iOS 15)

[pearl sail]

palera1n user 🤮

/s

[hasty ruin]

https://tenor.com/view/see-you-soon-gif-18010036

[primal perch]

never

like fermi

[wind ravine]

i need help

                guard let subtypeData = try? JSONSerialization.jsonObject(with: data, options: []) else {
                    print("Couldn't decode json data")
                    return
                }

works on some devices but not all

like it works on iphone 8 but not on iphone 6s plus on simulator

the data is there it just cant decode the json data

[tepid olive]

West Nevada

Yeah

@_cdecl("tweak_entry")
public func tweak_entry() {
    
    NSLog("[COCHA] Hello world!")
    
    // MARK: - Load hooking library
    
    loadSubstrate()
    
    // MARK: - Start hooks
    
    initialize()
}

trolly

[tepid olive]

how tf

this is crazy

thank you!!

<3

how

tell me

so?

what is it

t’es

yes

[gentle grove]

has anyone ever gotten gdb working on macos

WAIT I GOT IT WORKING

i just had to keep trying to run it

and it eventually stopped hanging

finally 2 years later i got it working

fr

[tepid olive]

use the llvm debugger

[gentle grove]

no

because gdb

idk i just want both

im trying to make sure i know the commands in both though

wtf lldb has color in disassemble on macos

wait no i ran gdb im stupid

gdb backtrace is shitty on macos for some reason

fr

but on linux theyre both equal

actually lldb gives more lines of code context

and has better commands

@grave sparrow you are right

ok now to actually debug this bug

thought it was because i wasnt initializing code but i guess not

OH YEAH the other thing

error: summary string parsing error

meanwhile gdb doesnt have that issue

i need to add -fstandalone-debug for lldb to like it

guess ill just have to do that

[gentle grove]

oh yeah i forgot that im not even returning anything from this method

[gentle grove]

oh i gugess its clang not lldb that was messing it up

[gentle grove]

i am aware of this but funny how gcc doesnt warn about

[primal perch]

i dont

i just like gdb more + it pisses you off

fr

yes

[hasty ruin]

[gentle grove]

why like gdb more

oh also remember me complaining about lldb not supporting up arrow, it turns out 2 days ago that got fixed on the arch package

https://github.com/archlinux/svntogit-packages/commit/fe4e5430f16f77fed6c73a1c101bfc1b7abea28b

funny

[indigo peak]

why do people do this

i literally do not understand

[gentle grove]

Where

[indigo peak]

gameseagull

https://github.com/donato-fiore/GameSeagull/issues

[faint stag]

it is nearly 12am and i'm watching videos about things i already know about @grave sparrow
i should just skip to the assessment fr

[next wadi]

What's an operating system?

WHO LET HIM COOK 🔥 🔥 🔥 🔥 🔥 🔥

[ocean raptor]

Bro thinks he's smart

[faint stag]

a kernel and a userspace

[ocean raptor]

0x7C 0x20 0x7C 0x7C 0x20 0x7C 0x7C 0x20 0x7C 0x5F

Go ahead, explain that joke

[pearl sail]

Does that just say that capt is a mentally slow being?

The virgin caps on the virgin

Friendly fire right there

[tepid olive]

[ocean raptor]

Sounds to me like you're just too stupid to understand it

[primal perch]

cus it was my first introduction to debuggers

i am biased

just like i was raised on macos and then windows so i dont like linux

[ocean raptor]

I like gdb's tui

[primal perch]

its also the most common debugger in the industry

sorry apple folks but once again your standard is irrelevant outside of *OS

got in to 3ds cfw and guess what? supported debugger was gdb

that is an option

one that is generally met with distaste once you have assignments for <some other OS>

[ocean raptor]

LLVM is the default on every BSD

[primal perch]

see: capt complaining here

[gentle grove]

wholesome

lldb is pretty nice though

I've been using it on linux

[ocean raptor]

(Except some strange architectures that gcc 4 has to be used on with openBSD)

[primal perch]

youve certainly done the most of it

[gentle grove]

especially now that it has libedit so I can use arrow keys and tab complete

[primal perch]

real OS

mac

Windows 10 dawg

💪

[ocean raptor]

CentOS is great...

Debian is the best Linux distro hands down though

[gentle grove]

does lldb work fine on windows too

[primal perch]

https://tenor.com/view/facts-brother-true-smoke-gif-23157983

i am once again watching gorn

[ocean raptor]

fun fact: openBSD includes llvm, gcc 3.3.6 and 4.2.1

[gentle grove]

as opposed to foot-writing it?

[ocean raptor]

Because llvm doesn't support some weird architectures

[primal perch]

llvm bad

[gentle grove]

Wtf I have GCC 12 on my macbook

[primal perch]

gcc good

[ocean raptor]

And some architecture got dropped in gcc 4

And anything after gcc 4.2.1 is GPLv3

[primal perch]

risc-v is better

[gentle grove]

x86 is better

[ocean raptor]

risc-v with cheri >>>>>

[primal perch]

if ur gonna ditch x86 might as well get a open license

arm is only slightly better

[ocean raptor]

I want a Cheri computer

[primal perch]

in terms of licensing

[gentle grove]

bobacpu

[primal perch]

its capt so

[gentle grove]

is RISC the same as risc-v

[primal perch]

i would take the opinions with a healthy dose of salt

/j

partially

[gentle grove]

that makes a lot more sense

[ocean raptor]

Capt is allergic to good opinions

[gentle grove]

wtf is that

Ceduced insutrction set

wait what even is the C at the end

[primal perch]

dated terminology grouping ISAs into complex instruction sets (CISC) and reduced instruction sets (RISC)

in practice arm is borderline cisc now

[gentle grove]

oh complex

that's a word

[ocean raptor]

Should I buy the alibab Roma

It's the first risc-v laptop

[primal perch]

only if you feel like beta testing

[primal perch]

https://media.discordapp.net/attachments/688121419980341282/1068800942692122644/image0.gif

https://media.discordapp.net/attachments/933428639620542474/1067152949211574332/caption.gif

[primal perch]

i agree

[sturdy chasm]

is there a way to extract a specific dylib from a 32 bit dyld_shared_cache?

I need it for a ramdisk, which obviously can't fit the whole cache

[timid furnace]

there aren't any dyld extractors that produce fully reusable binaries yet

[sturdy chasm]

any way to trim the dsc?

or just use the tar command without dsc 😆

because that's all I really need

otherwise, I need libiconv.2.dylib

[primal perch]

kumtool

@old geyser kum

[sturdy chasm]

is there a way to use the dyld cache from the main system in the ramdisk?

[ocean raptor]

BRO

JUST COMPILE TAR WITHOUT ICONV

[sturdy chasm]

that works!?

[ocean raptor]

[sturdy chasm]

I mean out of the two dylib dependencies it has I would expect them to be useful

[ocean raptor]

https://github.com/libarchive/libarchive

Hell if you just need to extract a ustar uncompressed tarball all you need is https://github.com/libarchive/libarchive/blob/master/contrib/untar.c

Which has 0 dependencies

[sturdy chasm]

alright

this tool doesn't have symbols for armv7

it's tar bro I don't get why it has to be so complicated

[ocean raptor]

What does that mean

Make sure you're using a sdk that has armv7

[sturdy chasm]

or rather it can't compile for armv7

[ocean raptor]

Wrong

[sturdy chasm]

what sdk are you talking about?

[ocean raptor]

iOS sdk

[sturdy chasm]

iphoneos is not good?

[ocean raptor]

You need an older sdk

One that supports armv7 still

[sturdy chasm]

will the one from theos work?

for 9.3?

[ocean raptor]

Should yes

-isysroot path/to/iPhoneOS9.3.sdk

[sturdy chasm]

with xcrun? or what tool

[ocean raptor]

Use your brain please

[sturdy chasm]

you know what, after looking through the source of the tool, I don't even think it does what I want it to

[faint stag]

so we went from just using an existing static tar to building it without the lib you've been searching for

bro make up your mind

[grim sparrow]

@ocean raptor

[warped thicket]

How do you obtain root with palera1n?

[steady nest]

setuid

[spare current]

Bruh capt was that really funny? So sad to hear something like this from you

[ocean raptor]

🤷‍♂️

[spare current]

Is this sarcasm or what?

Do you guys have heart? put yourself in these people's situation

Do you think this is also funny?

This?

This?

@shut stag this is not freedom of speech some peoples shouldnt exist here because they have knowledge about jailbreak or because they’re old… I’m so upset to see this discord like this….

[grim sparrow]

Aight

[spare current]

@turbid osprey kasmerlere bak

[turbid osprey]

Yes I am aware of what’s happening

[spare current]

Sen neredeydin kral iyi misin

[turbid osprey]

I am 500km away

[spare current]

vefat edenler var akrabalardan canı yanıyor insanın

[restive ether]

Bruh capt was that really funny? So sad to hear something like this from you

[spare current]

Wow I hope you guys won’t live the same situation with hurricanes

[zenith hatch]

Bruh capt was that really funny? So sad to hear something like this from you

[ocean raptor]

as a native floridian I can assure you that hurricanes are funny

[spare current]

Lol

Still toxic scene

I just only asked for help to retweet but it’s the payback thanks heartless human beings

Internet will save you all, by repeating after me piece of humans

@turbid osprey kasmer kalktaklara gel ya hahahaah

[ocean raptor]

@grave sparrow @primal perch I finally found a good profitable idea

on-device local song manager

for unjailbroken

I know how to do it too

[turbid osprey]

I don’t give a fuck

[blazing vault]

This is absolutely stupid but I wonder if you can have custom shortcut actions with CoreTrust vuln + MacDirtyCow

You could probably make a modified ActionKit binary to have a custom shortcuts action, and modify WFActions.plist in WorkflowKit to use your custom class, and CoreTrust ActionKit so it's signed

Replacing system files isn't the best but since changes to rootFS disappear on reboot with SSV, it should fix itself anyway

[faint stag]

mimport jailed?

[ocean raptor]

yes

[faint stag]

don't forget the tag editor

album artist is the bane of my existence

[pearl sail]

fr tagging shit so that it is properly recognized by macOS or iOS is such a pain in the ass

[gentle grove]

I'm about to just store a date as a string

[restive ether]

what has 2 legs and is underwater?

[faint stag]

i mean i pirated metadatics on mac

[faint stag]

use epoch

ez

[pearl sail]

oooh I gotta check that out now

thanks for the suggestion

[ocean raptor]

what?

[restive ether]

Florida man after a hurricane

[pearl sail]

accurate

[gentle grove]

without losing any precision though, its microsecond accuracy because I guess that's what rust chrono does

and parsing the string is the issue not the actual data type

[unkempt raft]

I wonder if you can edit this file to privilege escalate

[gentle grove]

std::chrono::parse doesn't even exist for some reason, even on cpp20

[unkempt raft]

ghidra

lied oops

forgot

I'm disassembling a lot of binaries inside libexec

ill search

1 sec

@grave sparrow pipelined

/usr/libexec/pipelined

[faint stag]

but that's where it was introduced

cpp20

https://en.cppreference.com/w/cpp/chrono/parse

lol

[gentle grove]

yeah apparently the stdlib just isn't up to date with standard

[faint stag]

ofc it's out of date lol

lmao

[faint stag]

💀

2020

what the fuck

[faint stag]

https://github.com/gcc-mirror/gcc/blob/master/libstdc%2B%2B-v3/include/std/chrono

parse isn't even there bruhhh

nor is it there for llvm17

[unkempt raft]

Is it possible to crash locationd using xpc?

Ian Beer's method doesn't work with identifier com.apple.locationd

am I missing something obvious here?

if so, I have a working method of deleting folders owned by root

works with mdc

[gentle grove]

I can probably just wrap the date.h dependency tbh

using meson

[exotic saffron]

Can someone explain what this is?

[ocean raptor]

It's a private framework

Completely unrelated to the pegasus malware

[tepid olive]

thats what the government wants you to think

[primal perch]

:3

[hasty ruin]

peg sus malware

[primal perch]

90

[hasty ruin]

C0 03 5F D6 ard

[primal perch]

addard

[next wadi]

wtf joe back

[faint stag]

the real joe

[next wadi]

joe

[tepid olive]

biden

[primal perch]

joe

[next wadi]

HOLY MOLY

[next wadi]

gm joe

[primal perch]

now get M2 and get 0.4 seconds

[next wadi]

true

unironically

it probably could

threading ez dubs any%

[primal perch]

std::thread

[tepid olive]

haiii

[next wadi]

[primal perch]

accepting donations for my contributions to the jailbreaking community

main contributions include: trolling, shitposting, and the source of many groans from memes

[ocean raptor]

nobody donates

procursus only gets $10 from patreon

all of which goes to our mastodon server

[faint stag]

it's funny

you have people with thousand dollar phones

but they don't spare a dime

[tepid olive]

i stole my phone

[faint stag]

same

[indigo peak]

@grave sparrow i dont think i can overwrite the load path

all the strings i CAN overwrite in ida have "__csstring:...." before it

the paths have HEADER:....

which makes sense

because its in the header of the file

i mean

that makes sense

right

wait

[primal perch]

look up c strings

[indigo peak]

__cstring:000000010005D8B6 0000004A C /System/Library/PrivateFrameworks/UserManagement.framework/UserManagement

i just found that

dude

theres

a few dlopen calls

/System/Library/PrivateFrameworks/AppConduit.framework/AppConduit
/System/Library/PrivateFrameworks/NanoRegistry.framework/NanoRegistry
/System/Library/PrivateFrameworks/CompanionSync.framework/CompanionSync
/System/Library/PrivateFrameworks/UserManagement.framework/UserManagement
/System/Library/Frameworks/WatchKit.framework/WatchKit```

all of those

are dlopen

which one tho

[hollow breach]

one of them

[indigo peak]

yeah

they all follow this format

id initNRDevicePropertyName()
{
  void *v0; // x0
  id *v1; // x0

  v0 = (void *)NanoRegistryLibrary_frameworkLibrary;
  if ( !NanoRegistryLibrary_frameworkLibrary )
  {
    v0 = dlopen("/System/Library/PrivateFrameworks/NanoRegistry.framework/NanoRegistry", 2);
    NanoRegistryLibrary_frameworkLibrary = (__int64)v0;
  }
  v1 = (id *)dlsym(v0, "NRDevicePropertyName");
  objc_storeStrong((id *)&constantNRDevicePropertyName, *v1);
  _MergedGlobals = NRDevicePropertyNameFunction;
  return objc_retainAutoreleaseReturnValue((id)constantNRDevicePropertyName);
}

__int64 __fastcall initNSStringfromPSYSyncSessionType(__int64 a1)
{
  void *v2; // x0

  v2 = (void *)PairedSyncLibrary_frameworkLibrary;
  if ( !PairedSyncLibrary_frameworkLibrary )
  {
    v2 = dlopen("/System/Library/PrivateFrameworks/PairedSync.framework/PairedSync", 2);
    PairedSyncLibrary_frameworkLibrary = (__int64)v2;
  }
  off_10008E608 = (__int64 (__fastcall *)())dlsym(v2, "NSStringfromPSYSyncSessionType");
  return ((__int64 (__fastcall *)(__int64))off_10008E608)(a1);
}

@grave sparrow can you redo the dylib

:)

[next wadi]

@grave sparrow added submodules

# meta
meta:
  # zstd compression
  compression: zstd

# control info
control:
  # package name
  name: TrolleyTools
  # package bundle id
  id: com.jaidan.trolleytools
  # package architecture
  architecture: all
  # package description
  description: TROLLEY BUS DEMO
  # author
  author: Jaidan
  # section
  section: Tweaks
  # version
  version: 1.0.0
  
submodules:
  - C/
  - Swift/

[tepid olive]

go off

[next wadi]

im so based

[primal perch]

C/

[next wadi]

SO TRUE

[primal perch]

ITS JUST THE JOEVAGINA

JOEGINNING

[tepid olive]

someone w photoshop remake this meme in hd pls

[gentle grove]

I should make a branch of bobaclient using luz

[tepid olive]

or gimp if you use l*nux i dont judge

[faint stag]

why would text on an image need photoshop lol

[tepid olive]

what do you use then

[primal perch]

https://cdn.7tv.app/emote/63b4d02347bfcac158d528cd/4x.webp

[faint stag]

sketch

not good enough imo

[tepid olive]

did you just downscale it

[primal perch]

no

i found the original

[tepid olive]

ill remake it then thats awful

[indigo peak]

@grave sparrow I’m gonna work on this tm
But what I have is a start I think
The code does execute fully with no errors, but I’m getting no output from the dylib

[primal perch]

its a twitch emote originally so thats why

[indigo peak]

so 1 of 3 things is happening

[primal perch]

who up needing a steam deck

[tepid olive]

who up steaming they deck

[primal perch]

i will donate 399$ (ZWL)

to someone's deck

[indigo peak]

1. dylib is unsigned so it isn’t run
2. the dlopen I replaced isn’t being launched
3. some other 3rd option

[blazing vault]

Who up decking they steam

[primal perch]

🙋‍♂️

[next wadi]

im the GOAT

[faint stag]

close enough

[indigo peak]

I’ll check the syslogs

what should I search for

“Sandbox”?

“permission”

the dylib name?

[faint stag]

ofc

impact

[indigo peak]

@grave sparrow I couldn’t find anything relating to not being able to load

so

it’s prob not being executed

like the string I chose doesn’t get dlopened when I patch

yeah I’ll do that tm

what I’m gonna do tm is on my jb phone make a tweak that nslogs dlopen calls that injects into tccd and I’m gonna kill the process and see what’s being dlopened when it reopens

[tepid olive]

none of those words are in the bible

[ocean raptor]

what set of manpages should manpagehub.com default to?

[faint stag]

coreutils and shells?

[ocean raptor]

no like right now it defaults to macOS

should it default to Debian?

POSIX?

[faint stag]

oh you're defaulting to bsd

Debian makes sense ig

[primal perch]

big slimy dick

[ocean raptor]

no, I'm defaulting to macOS

[faint stag]

where

[restive ether]

macos

[ocean raptor]

When I saw someone respond macOS I thought it was capt

anyways

Debian will be the default

sorry liberals

[restive ether]

fr

[tepid olive]

i want to fuck the openbsd pufferfish

[gentle grove]

Linux

[tepid olive]

https://media.tenor.com/MFVmqvq6jr4AAAAC/openbsd-puffer-fish.gif

[gentle grove]

man.archlinux.org is my reference