development

[slender glade]

usually you shouldn't

[olive peak]

I want to try it tho

[slender glade]

Are you using Xcode or is this manual?

[olive peak]

Im using install name tool, its not my app, just to see if the app detects dylibs inside the frameworks folder instead of loaded ones

[slender glade]

oh uh

yeah if ur not in the compilation process then idk i've never done it manually

maybe someone smart like capt would know

[timid furnace]

Where exactly are you putting it

Note that there are certain restrictions on where you can put signed code

[olive peak]

In the .app folder

[timid furnace]

in the .app folder where

bare?

inside resources?

etc

iOS or macOS?

[olive peak]

Inside the .app folder ios

In the painload, then in the .app

[olive peak]

To what exactly?

[topaz yew]

without blocking the thread?

[olive peak]

The thread of the app?

What do you mean by blocking the thread

Does it stop then?

[olive peak]

I did, im trying to call a function from an app without hooking anything from the app.

From my tweak

It gets loaded by the binary, should i make it get loaded from the dylib where the function is inisde?

[radiant idol]

the pings 💀

[olive peak]

I dont really understand what your asking me

[radiant idol]

He's asking you where your tweak injects, what process

You're saying it doesn't inject into the app

So where does it inject

[olive peak]

It injects into the app

So a process you mean the entire app running right

I tried calling the function using a pointer, but it crashes except when i call it from a hook of the app

But it works inside of the hook

One minute

I will try to call it again from where i declared the pointer

Theres no header

Idk how to explain it

How do i do backticks on mobile

[hexed knot]

https://tenor.com/view/trump-donald-gif-21985721

[olive peak]

After didFinishLaunching i call pointers. This_ is a valid instance of the class too, i just didnt include the pointer chain to it as its too long. Yes i am sure that its valid and works because i changed field offsets of the class and it showed.

void(*msg)(void *this_, monoString *msg, bool boolOne, monoString *string);

void pointer() {
    msg = (void(*)(void *, monoString *, bool, monoString *))getASLR(0x40CB570);
    msg(this_, createMonoString("Hi"), false, createMonoString(""));
}

The back ticks didnt even work…

[tardy sky]

hello, for the devs here, how long was it until you made your first tweak

or project

[slender glade]

After didFinishLaunching i call pointers. This is a valid instance of the class too, i just didnt include the pointer chain to it as its too long. Yes i am sure that its valid and works because i changed field offsets of the class and it showed.*

void(*msg)(void *this_, monoString *msg, bool boolOne, monoString *string);

void pointer() {
    msg = (void(*)(void *, monoString *, bool, monoString *))getASLR(0x40CB570);
    msg(this_, createMonoString("Hi"), false, createMonoString(""));
}

WTF

Why doesn’t it work

@olive peak fixed it

[slender glade]

Hm

2 months to start making something serious

[radiant idol]

wdym

[slender glade]

I think they meant like

after u learned how to do iOS dev or tweak dev

[radiant idol]

oh

[hexed knot]

technically 2 years

but thats cuz i had a 2 year break

bc ios dev is 💩

[slender glade]

It’s fire

But u use Linux

[hexed knot]

yeah

its fire on macs

[slender glade]

get a mac bro

[hexed knot]

inshallah the joe money will get me a mac

[slender glade]

you’ll need 2k mfs to buy joe for u get one

[olive peak]

I got my mac for 500, it works i guess

[hexed knot]

m1 512gb 16gb ram

[slender glade]

But it doesn’t here

[hexed knot]

mac mini

[olive peak]

M2

256 gb

I dont need that much space

[hexed knot]

me neither

8gb ram 256gb is really cheap

well

for a new mac

Hi

[olive peak]

Header?

Theres no .h file for the function

Yes i am 100% sure

App store

Uhh i dont have one currently, i will need to update the offsets and all and then test again, i will ping you when i did it, okay?

It will take some time as i need to make a bypass for detections first.

The offset was right

But only in the older version

Yes i will ping you when i got it.

[tepid olive]

https://youtu.be/c33AZBnRHks

open source community moment

[timid briar]

That’s a lot of percents

[granite frigate]

does it get easier 💀

[slender glade]

Yeah

It does

It’s not that it gets easier but u get more accustomed to it

[granite frigate]

depression

[tardy sky]

ok that will be my timeline when I start, i need projects so my resume can look cool, and so i can secure an

i will make something, so basic

[indigo peak]

it’s different for everyone, my first 1-2 projects were ass, but then with basically 0 knowledge I decided to make a tweak that was less ass and I just kept working at it for months learning along the way

[granite frigate]

why is Odyssey refusing to build? it has 2 broken headers

[steady nest]

gonna lean on

the symlink is broken

[granite frigate]

ohh

[slender glade]

Bro is trying to build an open source cs project after iOS 11 😭😭😭

[steady nest]

literally just makelol

it's just that the symlink is broken there

[wicked summit]

You can make your first dock transparency tweak in a day

To make your first "serious" project, it largely depends on your existing knowledge of programming and iOS development

I would not recommend to begin learning programming through jailbreak development

Nor iOS development

[radiant idol]

everyone has different experiences tbf

[granite frigate]

i just copy pasted kfd in it

https://cdn.discordapp.com/emojis/998222430923390986.webp?size=48&name=kekw~5&quality=lossless

[granite frigate]

i tried copying the xpc from iOS headers into my sdk and it's still erroring

[olive peak]

Is there any way i can know at which line my tweak crashes?

[steady nest]

my man

it's the symlink

[granite frigate]

i got it

thanks i was being stupid 💀

i copy pasted into macOS sdk instead of the iOS one

bruh

[slender glade]

😭

[steady nest]

you don't need to copy anything bruv

you just need to rename xcode to xcode.app

[granite frigate]

i checked the iOS sdk it didn't have any xpc folder

[steady nest]

so

the symlink points to the os x sdk

[granite frigate]

oh .... oops

aight i get it

ofc the offsets are broke 💀 damn

[visual meadow]

might as well stick here too

Hello,

I am trying to get the kfd Taurine fork to work on my arm64e iPad, on iOS 14.4, But when it tries to bypass amfi, it seemingly doesn't work, I know this because when it tries to run prep_bootstrap.sh, it fails with ERR_JAILBREAK, I tried spawning programs using Filza in TrollStore, but got this error (https://cdn.discordapp.com/attachments/1139719650549190667/1139719990942109847/image.png), I originally thought this offset was changed in the kernel, (https://github.com/Odyssey-Team/Taurine/blob/825424a24cb22da81644724067e3c2a2fea3a2d2/Taurine/post-exploit/utils/offsets.swift#L106). After spending 2 hours, and coming to realize it was the exact same as before, It was not changed. It's just weird how arm64 works just fine on 14.4, Would anyone know how this could be fixed? Because i'm lost, I also tried bindiffing 14.4 and 14.3 kernel in ida but it just errored.

[pine holly]

^^

[tepid olive]

@visual meadow look at task_flags

and bsdinfo

[visual meadow]

bsdinfo is the same

but idk about task_flags

@tepid olive is task_flags flags

let flags = isArm64e() ? UInt64(0x3F4) : UInt64(0x3D8) //0x54 diff on arm64e, 0x48 diff on arm64

if so

thats the same

[tepid olive]

yes

are you sure

[visual meadow]

yeah

they're the exact same

cryptic helped me find jop and he did the rest

(those 2)

so

im lost

so annoying

Im thinking of going to 16.5

because I hate u0 with a passion

[pine holly]

No

Push through bruh

You gonna figure this out

[visual meadow]

brooooo 😭 😭 😭

[pine holly]

Also being on 16.5 is still worse

14 jb’s are probably gonna be the last true jb

Why would you pass on that opportunity

Also who knows, someone else may figure out arm64e shit

Doesn’t have to be you 🤷‍♀️

Also you could try re messaging CS

You never know

[visual meadow]

@tepid olive ..

could uh

this be uh it

i think they pac'd it

and that could prob be why it works on 14.4 lol

[tepid olive]

is this touched by amfi

[visual meadow]

I think?

I mean it probably could be why it works on arm64 but not arm64e

@frank fossil pointed me to file in xnu and i found that

https://github.com/apple-oss-distributions/xnu/commit/ca32a94769198f2189fa4d06a9e25c0696aa1a29#diff-8d42e5f88e4356c47d9f1561969153b2125a0e4f8baac30236115b5f12a24c0a

[tepid olive]

well then ur screwed

taurine has no pac bypass

[visual meadow]

@tepid olive possible to implement fugu pac bypass into it?

[unkempt magnet]

but 14.4 has root:xnu-7195.80.35~2/RELEASE_ARM64

[visual meadow]

I know but it was prob changed there

[unkempt magnet]

no pac
https://github.com/apple-oss-distributions/xnu/blob/xnu-7195.81.3/bsd/sys/ubc_internal.h#L112

[visual meadow]

Ah

What coukd it be?

Could

[unkempt magnet]

And no csb_entitlements_blob_signature until 14.5

[visual meadow]

Ah

[pine holly]

wh1te do you have an arm64e test device?

[unkempt magnet]

No

[pine holly]

Damn

I’m confused then, originally what was the issue Nathan?

Like back to the beginning

[visual meadow]

Amfi

[pine holly]

And you have checked offsets and shit

[visual meadow]

ughhh

[pine holly]

Real

[visual meadow]

LoadLibrary(C:\Users\Nathan\Downloads\IDA7.7\plugins\idapython3_64.dll) error: The specified module could not be found.
C:\Users\Nathan\Downloads\IDA7.7\plugins\idapython3_64.dll: can't load file```

yea idk

its there

[faint timber]

then obviously it has a dep you are missing

windows will be cryptic with stuff like that you need to do some recon

[pine holly]

Run IDA as admin

I have had that issue before. I think I ended up finding a new IDA cause the one I had wasn’t the best

[visual meadow]

worked thanks

[pine holly]

Wait what

Did it actually

[primal perch]

letting the malware run as admin

🔥

[pine holly]

💀

[topaz yew]

ah this is pretty stinky

[primal perch]

its pretty based

more secure

[pine holly]

Wait so did you get the shit that wasn’t working before to work

On IDA

[visual meadow]

no\

[pine holly]

https://github.com/joxeankoret/diaphora/issues/173

[pine holly]

“$IDA77_DIR/idapyswitch”

In console

[visual meadow]

way too long

[pine holly]

🤷‍♂️ might as well let it run Idk

Keep it in background

[faint timber]

maybe don't use a corrupted ida

[pine holly]

Dead

[primal perch]

cryptic ida

thanks capt

[faint timber]

never was mine

[primal perch]

pensive

[pine holly]

_Cryptic is crazy

Didn’t you just have that shit being hosted on one of your servers for a lil 💀

[faint timber]

Don't know what you are talking about

[unkempt magnet]

Nice ida

[faint timber]

doesn't ring any bells

[pine holly]

This guy 🤣

[tepid olive]

imagine not having legit ida

🤣

[faint timber]

honestly never hosted anything on servers other than .a files

[pine holly]

Did you Fr pay for it

[faint timber]

one small payment of 1400

[pine holly]

I don’t care how financially free I am in life, I will never buy IDA

Same with winter

*winrar

[tepid olive]

No a friend gave it to me

[pine holly]

[tepid olive]

IDA 8.3 macOS :))))

[pine holly]

That’s actually crazy

Must be some person to be just called “a friend”

[tepid olive]

Well I can't name them

[pine holly]

Yeh

@visual meadow how is shit going

[hexed knot]

me neither i use 7zip

[faint timber]

if you go to a legit college binja is 74$

[tepid olive]

Many people forget IDA home has an arm64 decompiler for 365$

And it's way better than Binja

[faint timber]

what features does it lack

[tepid olive]

Tfw I got Binja for free from @grave sparrow, IDA for free from someone, and hopper for free for @grim sparrow

[faint timber]

two ida sources

[tepid olive]

Did I

Idgaf haven't used hopper in YEARS

It's garbage

[grim sparrow]

I bought it and then Andrew bought it 2 years after

[faint timber]

lets start off saying ida 7.2, 7.3, 7.6 are terribly broken only the docker 7.7 works

[tepid olive]

the charisma 🙏

[grim sparrow]

All I got was depression

[tepid olive]

7.7 is bad

[faint timber]

the original 7.7 had broken stuff

[tepid olive]

No Swift support

Lol

I can reverse taurine jbd so easily with IDA 8.3

[faint timber]

I ain't need swift stuff I reverse roms my friend

[tepid olive]

i see

[faint timber]

reversing a15 roms is really fun actually

[tepid olive]

that sounds bad

[faint timber]

how? its really easy

[tepid olive]

just get help

[faint timber]

I've been reversing since ~2015/16 started rom stuff in 2019

[tepid olive]

what's the point of it

what are u looking for

there are no bootrom bugs lol

you have better odds of finding CPU bugs

[faint timber]

I'm looking for hardware flaws not software @tepid olive

[tepid olive]

yeah ok

[faint timber]

I already spent my fuck you money I'm not gonna get ida home

[steady nest]

who the fuck needs to reverse swift

ida 7.0 supremacy

[faint timber]

I ain't using 7.0 I need long_night

[native orbit]

7.7 is king

[indigo peak]

ida7.7.zst from cryptics hosting service is great

[faint timber]

don't know what you mean

text files are pretty boring

[visual meadow]

@tepid olive so idk what to do

You know

I asked them what I should do

[faint timber]

get good thats what

[visual meadow]

they said to use chatgpt

[faint timber]

your ida is trash

they left discord for a long time I'm not sure if they are back yet

[visual meadow]

They are

[faint timber]

how would you know?

[visual meadow]

thats how

[faint timber]

oh

[indigo peak]

axi0mx [redacted] [redacted] [redacted] [redacted] [redacted]
axi0mx is fucking capt's whore mother

[faint timber]

can I put dm'ed xerub on my resume

[indigo peak]

can i put blocked my revulate on mine

or blocked by sbingner actually

💀

[faint timber]

sbingner saurik2™️

[indigo peak]

i think sbingner blocked me bc i made fun of elu as a joke 2 years ago 💀

i am not making vertical scrolling

[visual meadow]

wait wait

lemme guess

vertical scrolling

[native dune]

why is the filter here

[indigo peak]

he is filter

[visual meadow]

wait was geoballs filtered

W

[indigo peak]

geolocation - location

[native dune]

this mf

[indigo peak]

i have ideas

but im lazy

[indigo peak]

filter bypass

[elder scaffold]

[indigo peak]

@grave sparrow youre lucky, my jb phone was on 1%

so i can try vertical scroll

[native dune]

capt what's with you and the vertical scroll

[indigo peak]

[steady nest]

embraced the clickbait and the hate from everyone and made it 100x worse

[native dune]

bruh

[native dune]

classic geo

[visual meadow]

Whers macos 14 b6

[blazing warren]

clickbaitsnow

He has me blocked for calling him clickbaiter, and I challenged him not to monetize any of his videos if he was really looking to "help" the community

[indigo peak]

lemme see

show code

[pine holly]

Bro just be saying shit 😭

[night rover]

RootHide bypasses Jailbreak Detection In All Apps and Games With Amazing Results! iOS 14.0-17.0 and it's FREE and Open Source

[faint stag]

so many details missing there, true bait

[primal perch]

[torn oriole]

[night rover]

[vivid dew]

it's freeee

[hasty marsh]

very sex and good

[hexed knot]

this is not development

[topaz yew]

mfw unity

[hasty ruin]

did joe get delayed

[hexed knot]

nope cancelled

[hasty ruin]

[hexed knot]

nah jk

but dock icons really doesnt wanna be set to 1

safe mode if set to 1

i have a fix but its not good

[hasty ruin]

it set itself to one for me

[hexed knot]

wym

[hasty ruin]

bc the default value used to be 1

and it was conflicting with my atria dock

[hexed knot]

default value is not 1

its 4

[cloud yacht]

Question have you considered hooking whatever this is and just making it have all the apps in the order you want?

[granite frigate]

how does Starfish do the vertical scroll then

[indigo peak]

buggy as hell I heard

[faint timber]

A jailbreak tweak being buggy? Nah

Can’t believe that

[primal perch]

crazeware

[faint timber]

[hasty ruin]

To be fair, they always labelled starfish as beta

[olive peak]

Does mshook also work on all rootless jailbreaks? Or is it different for every rootless jailbreak?

[unkempt magnet]

Well, At times, I use Dobby which is developed by jmpews when Ellekit hooks don't work and cause crashes.

It works like charm in rootless environment.

https://github.com/jmpews/Dobby

I used to use Dobby hook framework when I made FlyJB.

[olive peak]

So it works for every jailbreak above ios 13 for example?

[tepid olive]

if you use it and 2 tweaks hook the same function everything breaks

don’t do this

[olive peak]

I dont have any other tweaks

Only mine

So what should i do instead?

I am never working with other people on a tweak ever again. My friend wants to put all my hooks, pointers, patches in a header

[unkempt magnet]

Thanks for feedback!

[tepid olive]

I’m saying that if you’re not the only one who hooks something it breaks

[olive peak]

If it hooks the same function?

[tepid olive]

yes

[olive peak]

That wont happen

[unkempt magnet]

Yes, works at least iOS 12
used to use dobby to hook SVC 80 for bypass jb detection.

[tepid olive]

if you want to hook svc 80 dobby is fine

don’t use it for function hooks

[olive peak]

What else should i use then?

Also to include dobby, i created a folder in the lib folder of the theos folder. Then added the header and the dylib, do i also add the .a and what do i need to do to use it in my tweak?

[olive peak]

I figured that the header goes into the includes folder of theos.

[olive peak]

I have both in the folder, but want to dynamically link it, not statically. Do i need to add anything else than to add dobby to the tweak libraries?

I did

Just want to make sure its dynamic, but incase i need it sometime how would i tell it to link statically?

[granite frigate]

hi so i can't figure out what this error means, do I just need correct offsets or is something else broken

[granite frigate]

kr = IOConnectCallMethod(conn, 6, 0,0, args, 0x20, NULL, NULL, output, &output_cnt);

guess this is br okd

[naive kraken]

fast path probably doesn't exist on iOS 13

[granite frigate]

oh

bummer

[naive kraken]

you just have to change it to create the object in a different way

[granite frigate]

ngl i have no idea how this iosurface thing works but i'll try

[granite frigate]

i thought changing the surface selector from 6 to 0 like here https://gist.github.com/jakeajames/e4d69abfb884faa97b6510f61b2adf12#file-iosurface_stuff-h-L20 would fix it but still broke

rip

[steady nest]

it’s there down to 8

even before

it’s been selector 6 since at least iOS 10

https://github.com/jakeajames/sock_port/blob/278a8808f42e32f59e95cc39a17be19d7063d8c3/sock_port/iosurface.c#L44

[naive kraken]

hmm then idk

[granite frigate]

conn seems to be a normal uint though 44581

[placid kraken]

is it possible to write to /private/var/containers/Bundle/Application/xxx-xxx/file with objc and without root or krw?

i want to write to the app container and overwrite some files from within the app itself

[indigo peak]

im 99% sure the files are codesigned

[placid kraken]

ah

[granite frigate]

i tried overwriting fonts in Discord it's codesigned

so that's L

[indigo peak]

you guys just dont know how to do fonts for discord properly

[granite frigate]

i copy pasted some fonts from twitter

it's dm sans.woff or smth idk

[placid kraken]

ive already gotten fonts to work but its done by modifiying the ipa not dynamically

the fonts need to be patched by modifying the meta name to be gg sans so that its recognized by wherever its imported from

[granite frigate]

rosiecord moment

[indigo peak]

i got dynamically 🥱

[placid kraken]

ok but what does it involve

[indigo peak]

idk that was last year LOL

[placid kraken]

because if it needs to take advantage of root or some exploit then i cant

it needs to be pure

i should probably inject flex back into the ipa for a little while so i can examine the bundle and stuff

[indigo peak]

no it doesnt

lemme test it out

[placid kraken]

if flex can read the bundle then doesnt that mean that the bundle is also writeable?

surely apple wouldnt make the bundle read only

[indigo peak]

uh

no idewa

i think you can

probabvly?

ino idea

where is enmity

[placid kraken]

/private/var/containers/Bundle/Application/ for bundle

/var/mobile/Containers/Data/Application/ for data

[indigo peak]

@placid kraken does enmity latest build work on latest discord

[placid kraken]

yeah

[indigo peak]

okay

brb

[placid kraken]

rosiecord 192

or enmity 190

[indigo peak]

okay

ty

@placid kraken depending on if i go out today or not i should have a somewhat working dynamic font build by the end of the day

[placid kraken]

ok lol

would it be possible to tell me your plan or like your mental mindmap of how it would work so i can try to implement it myself?

[indigo peak]

@placid kraken btw i was wrong, you can write to your apps bundle

i thought you meant writting to another bundle

the bundle you can write to

but you cant overwrite files i think?

[placid kraken]

ah i see

wait so still i dont know how you overwrote the font files because i need to do it from the js side

and its possible to write to files because theyre exporting a custom FileManager as a NativeModule in RN

but ofc if i try to write there it fails

[indigo peak]

@placid kraken hooray

its a little buggy

but

yeah

you get the idea

[placid kraken]

HOW

[granite frigate]

rosiecord eating good soon™️

[placid kraken]

not really

because i need to then make this work for android aswell

[granite frigate]

ah

[olive peak]

Is there any hooking method which works with jit only?

[olive peak]

Also theres an app where i want to bypass detection of loaded libs. But it only seems to detect libs that are codesigned

What could it use to detect that?

[native dune]

did someone like copy my tokyonight theme

lol

https://static.itsnebula.net/tokyonight.json

[hasty ruin]

Should’ve DRM’d it

[native dune]

always online drm hyperixa style

[hasty ruin]

And then shut down the server after a few months because some dude called icraze trolled you

[native dune]

sounds like a great idea

[hasty marsh]

is this real

[hasty ruin]

yes

[hasty marsh]

gimme link furry

:3

[hasty ruin]

https://reddit.com/r/jailbreak/comments/wuzfzr/discussion_psa_i_recommend_to_stay_away_from/

@hasty marsh discord reply fail

[hasty marsh]

skulley

[placid kraken]

bestie thats so old

i doubt it would even launch in enmity anymore

[native dune]

I've switched to vendetta since then

[placid kraken]

great

[safe laurel]

@placid kraken fixed the bug

lmao

I’m on my alt acc

[placid kraken]

what bug lmao

[indigo peak]

there was a bug where if you restarted the app with the theme + font applied the font wouldn’t be applied when it reopened

[tepid olive]

imagine using discord enough to need those

[indigo peak]

true

all I need is pure dark mode and I’m good

[native dune]

literally

[pine holly]

Fr, chronically online

[pine holly]

I mean... a surprise to absolutely no one. A good thing it’s been stated, but not surprising

[placid kraken]

amazing

but you still havent said how it works

:3

[placid kraken]

we know

[indigo peak]

it’s a test font

it was the first one on the font website, and also easy to tell if active

[indigo peak]

when I get back home I’ll dm code (I’m homeless)

[placid kraken]

ok ty

[hasty marsh]

damn my name looks fire in that font 🔥

[pine holly]

POV: Painting with chocolate outside u0

[primal perch]

captware 🔥

[primal perch]

yeah true

[gentle grove]

you know its bad when its barely readable

actually thats more to do with the choice of white text on white background

[lime pivot]

using a title font as a body font 👌

[placid kraken]

can someone tell me why objc syntax is so absolutely disgusting

void SwizzleFromDict(NSString *kind, Class class) {   
    NSDictionary *dict = getThemeMap(kind);

    for (NSString *colorName in dict) {
        NSString *originalMethodName = colorName;
        SEL originalSelector = NSSelectorFromString(originalMethodName);
        IMP originalImplementation = method_getImplementation(class_getClassMethod(class, originalSelector));

        // cast the IMP to return an id
        id (*getOriginalColor)(Class, SEL) = (id (*)(Class, SEL))originalImplementation;

        MSHookMessageEx(class, originalSelector, (IMP)imp_implementationWithBlock(^UIColor *(id self) {
            id color = getColor(colorName, kind);

            if (color) {
                return color;
            }

            return getOriginalColor(class, originalSelector);
        }), NULL);
    }
}

%ctor {
    SwizzleFromDict(@"semantic", object_getClass(NSClassFromString(@"DCDThemeColor")));
    SwizzleFromDict(@"raw", object_getClass(NSClassFromString(@"UIColor")));
}

some parts are fine but id (*getOriginalColor)(Class, SEL) = (id (*)(Class, SEL))originalImplementation; is insane

[pine holly]

Yeah I went from python to this

How do you think I feel

I was secluded in the perfect python world

[placid kraken]

objc syntax makes me think raw js with no static types is feasable to make websites with

[pine holly]

Then hit eith reality

[blazing warren]

Disc0rdver

[pine holly]

Disc0ver

[indigo peak]

better than having 100 %hook statements

[indigo peak]

that’s C that ain’t even objc

That’s just regular casting

with objc variables

[hasty ruin]

that's the first time i've ever seen someone use imp_implementationWithBlock

[placid kraken]

i really wish i couldve just nested a %hook in a for loop

wouldve made that 100x easier

[indigo peak]

technically you can

[severe stream]

so good fr

[ocean raptor]

Ever consider that this is just shit code?

[indigo peak]

so true

[primal perch]

alderis is malware

[faint timber]

devel ment

[primal perch]

based

[primal perch]

facts tho

[faint timber]

this is actually spyware ironically

[ocean raptor]

What is this from?

[hasty ruin]

@lime pivot are you aware of this?? it seems to be hosted on your repository

[indigo peak]

enmity

[lime pivot]

are you aware of deez nuts hosted in your mouth?

yeah I know

[placid kraken]

thank you

[hasty ruin]

[lime pivot]

hurry up and become 18 already

[hasty ruin]

kirb got too used to british laws when he was here

[lime pivot]

I feel like I shouldn't be joking about that any more after recent events

[hasty ruin]

what

[faint timber]

what's the requirements for voting in UK

[primal perch]

first kirb wants feet now this

slippery slope

[lime pivot]

bro

[hasty ruin]

first it was arms

[ocean raptor]

What has been going on?

[faint timber]

are you a teeth kinda guy?

[primal perch]

fingernails

[hasty ruin]

Couldn’t find the arms screenshot but found this

[faint timber]

1/10 chance one of us is being serious

[ocean raptor]

Is that a JoJo reference??

https://tenor.com/view/kira-anime-serious-look-up-gif-12447667

[pine holly]

That’s crZy 💀

[faint timber]

good dental practice is key

[indigo peak]

I’ll send you for loop later

Trust

[placid kraken]

lol okie

[indigo peak]

wait that was basically what i was gonna do LMAO, i didnt read it lol

[placid kraken]

[indigo peak]

@placid kraken are you like head dev for enmity now

[granite frigate]

she’s doing rosiecord innit

[hasty ruin]

init

[indigo peak]

same shit

[olive peak]

The message cant be seen anymore, so i replied to my 2 questions. If you know an answer please tell me it.

[vivid dew]

.

[lime pivot]

.

happy birthday big man!

[olive peak]

Ok so, i was trying to use dobby for hooks a few days ago, but just couldnt get it to work. In app it tells me „Unable to find load 248“, which i think is because of dobby.
What i did was:
1 add a dobby folder with the dylib to the lib folder of theos
2 add the header to the include folder of theos
3 add the ldflag -L$(THEOS)/lib/dobby
4 add dobby to the tweak libraries in the makefile
I didnt get any errors compiling and it seems to link to the right dylib. Just when launching the app it doesnt seem to work. Giving the said alert but not crashing.

[olive peak]

I think its best to use another hooking library in this case? Are there any others that work with rootless and rootful?

[placid kraken]

im doing v3, i did a lotttt of stuff for it

[placid kraken]

well im helping eternal but weve both made lots of progress ^^^

[indigo peak]

@placid kraken im pretty sure fonts are 100% working, ttf, otf and woff fonts work, ill dm you the code now

[granite frigate]

i got the offset from time_waste it was 0xdd0

now i have another error woe.

[tepid olive]

that error you’re getting is an iosurface related failure being passed as an argument

i think your ioconnect is wrong

[granite frigate]

the usecount selector is probably wrong

it's 16 on iOS 15/16

[slender glade]

You sure?

[granite frigate]

i checked time_waste it seems to be 15

[granite frigate]

idk

https://github.com/jakeajames/time_waste/blob/9d3923aaa7ca5943406f5ec5c4161f3cacf83aa0/time_waste/IOSurface_stuff.h#L24

[slender glade]

Try every number between 10 and 20

I’m joking.. half

[granite frigate]

😭

got damn

[slender glade]

Try it ig

[granite frigate]

i did

it just paniced with no error now

[slender glade]

[granite frigate]

oh it's another kfd panic

so it silently errored woohoo

[tepid olive]

why are u doing this odyssey is fine as it is

[slender glade]

When it panics right after printing the time and the green emoji shit makes me wanna kms

[tepid olive]

tardy0n is great

[granite frigate]

i am bored

https://cdn.discordapp.com/emojis/1039305974583930890.webp?size=48&name=trolley~1&quality=lossless

i might just try ios 12

[primal perch]

[tepid olive]

seek help

[granite frigate]

true

[granite frigate]

real

happened to me so many times

[slender glade]

Same

💔

Oh what I can delete and pin messages here now

[granite frigate]

developer role things

[granite frigate]

this is actually a viable idea

[slender glade]

Brother stop doing this

This is a new low of boredom

[granite frigate]

i have no school for 2 months

if i dont get odyssey working by today i'll just copy u0 source and add kfd to it

my 5s no longer has to suffer

[slender glade]

Donate an arm64 device to @tepid olive she really needs it

[granite frigate]

True .........

[hexed knot]

Donate an arm64e ios 15 device and iphone x to @hexed knot he really needs it

[slender glade]

Poor ass

[hexed knot]

I am not poor

[visual meadow]

@tepid olive what sb bypass did u find and hows it work

Maybe i shoulda stayed on 16.0.3

[granite frigate]

ok i checked every selector based off other exploits

it's probably another thing

and idk which

[hasty ruin]

blame capt

[granite frigate]

project zero writeup

[steady nest]

dude if you're doing it for 13 just check oob timestamp please lol

[granite frigate]

i am

i copied the code 😭

[steady nest]

[granite frigate]

real im a dumbass

https://cdn.discordapp.com/emojis/1039305974583930890.webp?size=48&name=trolley~1&quality=lossless

[slender glade]

self promo #showcase ‼️

[hasty ruin]

#1084320818231787552

[granite frigate]

https://cdn.discordapp.com/emojis/1085060228241969192.webp?size=48&name=sadge&quality=lossless

[slender glade]

Wtf

I don’t even check that

Lemme remove it

[hexed knot]

i leave the default because i dont give a fuck

[slender glade]

It’s cool sometimes

Also general is like 20x worse than jailbreak

[hexed knot]

tbh jb is pretty lax

capt when he realizes rjb is a support server

[slender glade]

They’re more bearable than some of the mfs in general

[pine holly]

Recent mentality:

Can’t even fit that shit

[hexed knot]

how this dude got staff channel

[slender glade]

Bro got the former pj drama channel

[pine holly]

Wym?

[slender glade]

#subreddit

[pine holly]

Oh I still have my view all channels thing on or whatever

[pine holly]

Ahh

[slender glade]

every week someone would get banned from the sub for the most minuscule shit and they’d complain in #subreddit and it was always pj who banned them lol

[pine holly]

Gonna be me

Speed run getting banned

[hexed knot]

everybody hated pj lol

[slender glade]

She instagram herself like bad bitch alert, he instagram himself like mad rich alert

[granite frigate]

omg pj

havent heard that name in years

the subreddit's no 1 enemy

i think i figured out why im panicing

[slender glade]

Aaron just be hiring anyone bruh idk how pj even got the role

[slender glade]

Why

[granite frigate]

fr

im dumb as hell

[slender glade]

What

Is this still the odyssey thing

[granite frigate]

yes

it is

[slender glade]

Okay well have some shame

[granite frigate]

ok

https://cdn.discordapp.com/emojis/1085060228241969192.webp?size=48&name=sadge&quality=lossless

wait its unrelated what am i even saying

[pine holly]

What are you trying lol

Not judging just curious

[naive kraken]

@granite frigate just put the kernel into IDA and find the offsets

[granite frigate]

doing that

[granite frigate]

use kfd for Odyssey jb

there's 0 point im just bored

[pine holly]

Just wanted a new exploit? Odyssey’s wasn’t that bad right

[slender glade]

Everybody is gangster till IDA don’t even recognize what ur searching for

[pine holly]

Couldn’t you bump version too? Odyssey was restricted by exploit I think

Lemme check GitHub hold

[granite frigate]

nah

odyssey supports 13.x

[pine holly]

Nvm I’m stupid

[granite frigate]

i should try using kfd on iOS 12 instead because chimera is ass

[pine holly]

Yeah do that, odyssey has 3 usable exploits 2 of which overlap all versions

[slender glade]

Chimera is ass because of the 50 different core animation functions being called every second

I’m joking that’s not why

But it’s still ass

[pine holly]

So kinda pointless, not stopping you, do it if you want lol

[slender glade]

The animation shit probably contributes

[granite frigate]

chimera is gorgeous

i want to recreate the ui to practice

[slender glade]

@granite frigate I have something to tell u brother

[pine holly]

Side question: you have an iOS 14 device rn?

[granite frigate]

yes

[slender glade]

Chimera isn’t open source

[granite frigate]

no

[slender glade]

For some reason

[granite frigate]

i know

[pine holly]

What is your devices looking like

[granite frigate]

i'm probably gonna yoink unc0ver source and replace the exploit

for kfd

[slender glade]

💀

[granite frigate]

15.6rc, 13.2.3, 10.3.3, 8.4.1

[pine holly]

Opa you still lurking here? I got a question

[slender glade]

Donate me bruh

[pine holly]

Try kfd on iOS 10

[granite frigate]

ooo

[pine holly]

Don’t think anyone has ngl

[granite frigate]

true

[pine holly]

And 8

Just for the fuck of it

It might be more fun that what you are trying

Prolly learn more too

[granite frigate]

Yeah

good idea

[pine holly]

More issues = more fun

[slender glade]

It’s not going to work

[pine holly]

Get a load of this guy

[slender glade]

It is not going to work

[pine holly]

Probably not

Be they will have fun trying

And if it does work, it would be very cool

[granite frigate]

Why would it not work

[pine holly]

Idk, lemme check kfd GitHub

[granite frigate]

https://github.com/felix-pb/kfd/blob/main/writeups/smith.md

[pine holly]

I actually have zero clue how far back it will go, it’s a kernel exploit so it’s like it’s easy to find when said but was introduced

[hexed knot]

Ok(())

[slender glade]

lol

[wicked summit]

O(k)

[primal perch]

Ok(k)

[visual meadow]

Ok(Ok(Ok))

[olive peak]

So what should i use for function hooking on rootless and rootful jailbreaks? Dobby doesnt seem to work

[ocean raptor]

Ellekit

[visual meadow]

https://twitter.com/eveiyneee/status/1692244043290280251?s=46&t=LUSNSGJyUZ15gupblBCd_Q

évelyne (@eveiyneee)

There’s also a 16.4 and lower sandbox bypass that can be done but I won’t look into it since my phone is on 16.6

Twitter · Aug 17, 2023, 6:36 PM

Give the sauce

Bro

Us, 16.4 and below Citizens want this

[primal perch]

https://media.discordapp.net/attachments/688122301975363591/1033962648494149632/3dgifmaker01679.gif

[tepid olive]

No

[visual meadow]

Why are you gatekeeping a sandbox bypass that you cant even use

☠️☠️☠️☠️☠️☠️☠️

[slender glade]

Just to u Nathan

[visual meadow]

Crazy

Like

Whats the point

[pine holly]

She on that CS shit 💀

[visual meadow]

Exactly

[pine holly]

☕️

[slender glade]

nah it’s not the same imo

[pine holly]

I’m just making a joke

[steady nest]

Why do you want a sandbox bypass that you don't even know how to use

[visual meadow]

Well I'd like to figure that out

[pine holly]

Bro is just curious and bored

[steady nest]

figure out what

[pine holly]

Let the mf have his fun 😭

[visual meadow]

What you can do with it, how you can use it, whats extra

What degrades when you tell me how it works

[steady nest]

how will you use a bug

lol

[visual meadow]

It's already patched so what money are you getting

[pine holly]

D1 Hater

#1 fs

[steady nest]

because it's not patched

it's just different on 16.5

[visual meadow]

It doesn'g make sense

Why wont they look at it

[tepid olive]

Coz idgaf

[visual meadow]

If it works on newer versions ☠️☠️☠️

[slender glade]

Nathan

what does the bzero function do

[steady nest]

yeah bro

if you want 14.4 arm64e

[tepid olive]

I don’t owe u anything 🤭😘

[steady nest]

what about you look for offsets and debug

[visual meadow]

Does it give the same result as the tccd patch

[steady nest]

instead of asking everyone for shit

[pine holly]

God damn 🤣

[tepid olive]

No

[visual meadow]

Bro I spent 2 hours looking

Im new

[pine holly]

This got heated for no reason

[steady nest]

yeah bro

[slender glade]

call me a vagina the way I be dripping

[visual meadow]

Then why not ude

Use

[steady nest]

and you think we spent how much

[slender glade]

We saw that…

[pine holly]

I know he gotta learn his own shit but damn. This community a little diff

[tepid olive]

no you didn’t

[pine holly]

It be hard to just “learn”

[visual meadow]

Lol why y'all have to be dicks

[steady nest]

was it run or rn

[visual meadow]

Im starting to see why cs left

[slender glade]

Both

[pine holly]

That’s what I’m saying Nathan

[steady nest]

that you wanted to say

[slender glade]

Your mf literally just made fun of them

🗿

[visual meadow]

Bro

Same same bro

[steady nest]

did you look yourself in the mirror

[slender glade]

Ok Nathan let me tell u something bro

Nvm I’m on 599wp

otherwise I’d have typed out the paragraph

[visual meadow]

Tell me in dms

[slender glade]

no

[steady nest]

"bro but i spent 2h breastfeed me plzzz"

[visual meadow]

Yes

[slender glade]

I want to be breastfeed for 2 hours tbh

[pine holly]

He is asking for help not full guidance

[steady nest]

m2

titsssssss

[indigo peak]

kills the data at the first location for second param bytes

[pine holly]

Hi Fiore how are you

[indigo peak]

hi iosrouter how are you

[tepid olive]

stand the fuck up be a lady

[pine holly]

I’m solid, how are you?

[tepid olive]

😭

[indigo peak]

good

[slender glade]

sorry

[pine holly]

That’s good. Life been treating you right?

[visual meadow]

I just would like to be as good as you guys but idk where I should start

[indigo peak]

suppose

[slender glade]

Ok Nathan here’s the issue

All of us here are at diff levels but we got to where we are bc we eventually would research the stuff ourselves

And then we’d figure out and learn

You have a habit of just asking for THE thing

[pine holly]

Alrighty, suppose is good enough.

[tepid olive]

tomorrow i’m deactivating my twitter, monday i’m deactivating discord btw

[slender glade]

I’m saying this to be helpful bc I don’t want anyone to be aggressive to u anymore

[slender glade]

Why

[pine holly]

She tries so hard to be different

[tepid olive]

school starts

[slender glade]

You can’t just do that rn bruh

[tepid olive]

dont u dare try to gag me

[indigo peak]

im at the bottom level

[tepid olive]

what are y’all gonna do

[slender glade]

Yeah me too

[steady nest]

we're at the bottom level

[tepid olive]

i did tcload and handoff

[pine holly]

We do a mini amount of bafoonary

[tepid olive]

it almost works just ask mineek to fix it up

[pine holly]

Shiiii put me on top 🫦

[steady nest]

go into ida, press f5

[slender glade]

Hold on let’s go to the thread cause I want clarification on a couple things

[steady nest]

try to patch stuff manually

[visual meadow]

Wheres a good place to research said stuff, google isnt a good place

[visual meadow]

I have before

[steady nest]

then check how that leads to a jailbreak

[steady nest]

palera1n is open source

check every patch

[visual meadow]

I worked on palera1n v1

[steady nest]

what's it for

[slender glade]

And there are many other open source jbs/tools

[indigo peak]

real

[pine holly]

Put me back on top of you

*of you

[steady nest]

yet you learned nothing

[slender glade]

capt is siguza level

[pine holly]

*of you

[slender glade]

nvm he’s not

[steady nest]

bruh capt is above me

20x

[visual meadow]

Adhd is hard

I remember nothing

[indigo peak]

nah capt should be switched with me

tbh

[steady nest]

I can't do half the shit he's able to

[indigo peak]

nah but heres the thing
everyone is more capable in different aspects of development

[pearl sail]

Brain deficiency *0 = 0

[pine holly]

😍 he has such a way with words

Ok sorry I’m done

[steady nest]

yeah true

[primal perch]

you already are

[pine holly]

@steady nest what was your starting place

[primal perch]

youve put yourself on the low ground for some reason

[slender glade]

Pointer to 0

[indigo peak]

like you understand things that capt doesnt vice versa

[pine holly]

Nah he just got degraded

He got gang degraded, just scroll up

[visual meadow]

I've spent ages trying to find this one ipv6 bug too

That was patched in like 16.6 i think

[steady nest]

i read every old jailbreak writeup

[pine holly]

Is that where you started?

[primal perch]

go read the holy trinity by levin

[steady nest]

starting in like 6

[visual meadow]

https://github.com/freebsd/freebsd-src/commit/ff3d1a3f9d71e706f320f51bae258e4e1a51b388

This

[pine holly]

Did you have an understanding of the iOS kernel before?

[steady nest]

focusing on userland bugs instead of kernel bugs because they were too hard

[pine holly]

ahh alright

[primal perch]

in the words of shia lebouf

just do it

[steady nest]

then i grabbed dora's work on pangu's untether stuff

read on the info online

[pine holly]

Last thing I read was tihmstars presentation and the one him and CS did

[steady nest]

and improved it

[visual meadow]

Its hard to diff the kernel when bindiff isnt working either

[pine holly]

Ahh, my issue is my device, not a ton of freedom and no dev device only main

Can’t afford to bootloop

[steady nest]

a 5 is the best dev device

[pine holly]

Like IPhone 5?

[steady nest]

yes

[primal perch]

[visual meadow]

I just want a jailbroken main phone again

[pine holly]

What’s latest signed

[steady nest]

10

8 signed too

has coolbooter

[pine holly]

Carry the iPad and figure taurine out

[steady nest]

vulnerable to checkm8

lightning

[pine holly]

Actually that is true, it’s a solid device but anything I learn would be old methods. By the time I figure my shot out everybody is scratching their heads at 17 and I’m still on 12

*iOS version

Meaning like figuring out new security features and such

[steady nest]

i made this without a device btw

[pine holly]

Howd you test?

[steady nest]

ida

[pine holly]

You have a Mac?

[steady nest]

very recently

[primal perch]

why are you doing it tho fr do you crave relevance or do you actually like hacking

you gotta want to do it

[pine holly]

Ahh, I only have windows and don’t wanna bite the bullet and buy a Mac

[pine holly]

I could care less about relevance, I have developer role and nobody knows me

And I have very little level here, I don’t care if I’m known

I do shit for me

No offense Nathan but same reason I’m invested in kfd taurine

So my main is more stable

[pearl sail]

But you get paid for recognition/relevance sadly

[pine holly]

Not here for the money

I’m legit in high school

Broke bitch era

[pearl sail]

Future investment kind of a thing

[pine holly]

No offense but I hope I’m not in the jb scene in 4 years

I know this shit “temporary”

Cause if my job after college is so boring I have time for this then I’m doing something wrong

Nothing is wrong with that it’s just not how I want my life to be

[steady nest]

[primal perch]

rjb dev not do computer science challenge

[pine holly]

Def going into CS just not anything iOS related

Not with a 10 foot pile

*pole

Obj c is homo

[slender glade]

I’m gonna major in government torture

[pine holly]

Swift is modernly gay

And yeah

[visual meadow]

I just want to learn but its just hard to focus

Always get sidetracked

[primal perch]

fix yourself then

meth lite/therapy

nothing more important than fixing yourself

[pine holly]

Nathan being dead serious how old are you

[visual meadow]

16

[slender glade]

Age doesn’t really matter in terms of dev tho

[tepid olive]

?

[primal perch]

yea theres chinese kids that are 14 that know more than everyone here

[indigo peak]

capt

[primal perch]

not capt

[visual meadow]

Isnt he like 20 or something

[primal perch]

yeah

[slender glade]

I’m turning 17 next month and my dms w Nathan are like 3k messages of him asking me on how to do dev stuff lol

[tepid olive]

14 mentally

[slender glade]

So it’s not abt age

[crisp frost]

WTF is happening here and why does my phone auto capitalise WTF

[slender glade]

Idk u just need to get urself off the foot ground or however u say it

[visual meadow]

Check replace shit

[primal perch]

that or go join another scene

[primal perch]

go find a 3ds userland vuln theres far less safeguards

ios is the most secure platform in the world ofc its hard to get into

[visual meadow]

I sold my 2ds xl

[pine holly]

Nah my point is that he is still young enough that not having the ability to sit down and put your mind to a task can be changed. It’s just like study habits and shit, you just need to learn. Just cause you can’t sit down rn and stare at the same screen for 12 hours doesn’t mean you can’t learn. Your brain just needs more stimulation than others. Because your 16... nothing wrong it’s just a fact

[pine holly]

My tiktok name is 3dsxl

[slender glade]

Yeah