development

[visual meadow]

what website is this lol

[unborn skiff]

corellium

[visual meadow]

oh ok

same here

too poor nvm

[hasty ruin]

[torn oriole]

you release it and i give it to you 13 seconds after

[unborn skiff]

omg i cant unzip this shit

[hasty ruin]

aaron could pull the money from his personal bank

[native dune]

aaron buying corellium with the twitter money

[torn oriole]

yeah he making twitter bank

aaron you should pay your staff with it

[hasty ruin]

nuh uh

this mf wouldn't even kick my old account

[torn oriole]

(isnt an old acc)

[hasty ruin]

proof?

[torn oriole]

give me nexus src and i might

[hasty ruin]

worth it tbh

zefram first

then the car is yours

[torn oriole]

release zefram and the 2024 lamborghini aventador without cutting corners is yours

[native dune]

https://github.com/captinc/Zefram

[hasty ruin]

https://tenor.com/view/malware-spyware-ransomware-faxalot-gif-23230130

[torn oriole]

zefram first broski

[hasty ruin]

flex your mod perms

[native dune]

https://github.com/bigballs24/NexusSrc

[hasty ruin]

https://tenor.com/view/mod-moderator-moderation-role-discord-role-gif-27546705

[torn oriole]

https://tenor.com/view/mod-moderator-moderation-role-discord-role-gif-27546705

https://tenor.com/view/mod-moderator-moderation-role-discord-role-gif-27546705

https://tenor.com/view/mod-moderator-moderation-role-discord-role-gif-27546705

https://tenor.com/view/mod-moderator-moderation-role-discord-role-gif-27546705

[native dune]

spam ban

[hasty ruin]

spam :/

[torn oriole]

(i am immune to gir spam detectors)

mod role flexed

@grave sparrow give me contributor access to github.com/captinc/Zefram

for no reason whatsoever

just make me sign an nda, if i leak it i legally have to give you a car

official windows insider anniversary wallpapers

no it isnt

[native dune]

Text Text

[torn oriole]

Title

Navigation Title

[torn oriole]

@grave sparrow

corellium!

[primal perch]

fr

it is not faster

[torn oriole]

nor is it more intuitive 💀

inb4 denied

[wicked summit]

good morning

[hasty ruin]

gm

[wicked summit]

corellium

why no internships 🙄

[torn oriole]

capts fat ass took all the spots

[wicked summit]

Perfect he can refer me

[primal perch]

capts fat ass took all the spots :trolley:

[hasty ruin]

@pearl sail what did you say

[primal perch]

no

pray tell

[pearl sail]

That you and @grave sparrow are gay for each other

[primal perch]

they are

[wind ravine]

i figured out how to get FLEXing working on jailed

idk how useful that would be tho since u cant really run tweaks

also it doesnt work on the lock screen/notification center

actually it may be able to and maybe i made an oopsie somewhere

[radiant idol]

wait what

[wind ravine]

u know

that thing where u hold on the status bar and u can see the views on the screen

[main apex]

There is already a way to load flex via a dylib in jailed ipas.

[wind ravine]

no

this works on the springboard

and in every app without needing to sideload that app

[radiant idol]

:0

how

[wind ravine]

unfortunately

it requires a ct bug

[radiant idol]

that's still pretty cool though

[wind ravine]

i didnt make it fully i just figured out how to dump the views on screen

and plus i already figured out how to overlay views on the springboard

so in theory someone can recreate it or it might not be that hard to port possibly

[lime pivot]

Text

[shell sphinx]

just tried on rootful, same issue

[granite frigate]

you're not gonna say it

[slender glade]

sorry I just remembered that convo and found it too funny lol

the 2 other dickriders too saying "make something better"

[gaunt helm]

you have one now

go ahead

[slender glade]

Froggy did it so I don't need to

[gaunt helm]

oh

[slender glade]

https://github.com/CoocooFroggy/FutureRestore-GUI

[cursive rampart]

how jailbreak ios 17 iphone 13 pro max

[hasty ruin]

[primal perch]

scoop

[shell sphinx]

just tried google and gta car tracker, looks like every app is crashing

[shell sphinx]

15.7.9

i robbed mf

[primal perch]

gorn

gm capt chi

[hasty ruin]

https://tenor.com/view/letter-n-gif-9063758

[primal perch]

gm nicraze

[hasty ruin]

Gm

the three horsemen of swiftui slander active in #dev

balance has been restored

[shell sphinx]

[primal perch]

fr

[hasty ruin]

I was spelling the last part of shep’s word

🙏🙏🙏🙏

@grave sparrow shep has been using php.

[primal perch]

its for work its all good

im forgiven

i wouldnt willingly use it

[hasty ruin]

partially

[primal perch]

i like money tho

[hasty ruin]

should’ve just quit imo

[hasty ruin]

true

[primal perch]

garbage ass 2019 macbook air

[hasty ruin]

that’s reason enough to quit

[primal perch]

ok fr

[hasty ruin]

🙏🙏

[primal perch]

naturally

i expect the same treatment for all 3 of us

💯

[hasty ruin]

glad we can expect to be held accountable for such actions

[primal perch]

python would be acceptable too depending on context

even substantial though

if i had to write a web backend itd be python

[radiant idol]

isn’t swift also technically in the C family

[primal perch]

[radiant idol]

mk

[hasty ruin]

facts

[hasty ruin]

they removed ++ and --

[primal perch]

like its actually jut flat out good

[hasty ruin]

fake ass language

[primal perch]

they keep speeding it up with each update too

3.11 was like 25-40% faster than 3.10 on avg and 3.12 is 5% faster on avg

[hasty ruin]

Faster cpython project 🙏

[primal perch]

🙏

like at this point im convinced apps could be run smoothly in python

swiftUI is probably worse

[hasty ruin]

yeah legit

[primal perch]

python+uikit bindings would be smoother than native swift+swiftui

syntax is also not regarded

php not use $ or ? challenge

[hasty ruin]

I don’t understand why people hate python’s indentation so much

Like just write good code

[primal perch]

its dumb but

[hasty ruin]

And it’s never a problem

[primal perch]

theres no good alternative

ill take indenting over js or php all day

joe

[hasty ruin]

js devs use actual functions challenge

[primal perch]

fr

[hasty ruin]

(they think => () is nice syntax)

[primal perch]

javascript itself has very good overhead on modern JIT compilers

but, >js

when packaged with the DOM though it becomes dogshit

in terms of memory and performance

nah

v8 is good too

💯

not sure how good firefox's js engine is but its behind v8

also true

my first car was a v8

timing belt died within a year though

[native orbit]

skill issue

[cloud yacht]

(its () => {})

[hasty ruin]

Shut up

[cloud yacht]

honestly yeah

[hasty ruin]

[native orbit]

i just added all the C and C++ post/prefix unary operators myself

[radiant idol]

JS's syntax is nice for those arrow funcions though

[timid furnace]

really?

[hasty ruin]

well realistically it’s either python or js

[native orbit]

wasm

[cloud yacht]

honestly I only use () => {} because function () {} is long

if it was like func it would be nice

[primal perch]

tea

yea

typescript is ok

and plain js to be fair its just very lazy with typing so it requires strict development otherwise it quickly falls into gross paradigms

like returning a variable with different types depending on conditions in the same function

mfs do that

vanilla js is too lax

[cloud yacht]

ts it too much work to setup, js with jsdocs and vscode set to type check it is great, but also a bit of work compared to just using a compiled language

[hasty ruin]

Capital punishment

[primal perch]

honestly maybe ive never even used it lmfao

[primal perch]

although python is the same so

[cloud yacht]

method overloadin

[primal perch]

i cant really use that as leverage

[native orbit]

lemme just return this const char* on a float type

[radiant idol]

I would say it's nice for quick projects

[hasty ruin]

even if you add types to the function?

[primal perch]

maybe? i thought it was just hinting

[hasty ruin]

idk if it errors or if they’re just hints

[primal perch]

not enforced

[hasty ruin]

no idea

i write good code

[primal perch]

python with strong typing would be basically perfect

[hasty ruin]

real

[native orbit]

just return everything as void*

[hasty ruin]

i made python with c syntax a few months ago

[native orbit]

cursed

[primal perch]

based

int x = input("gorn: ")
for (int a in shit):

[radiant idol]

how and why

[radiant idol]

I hate it

[timid furnace]

you can kind of enforce it

if you annotate everything, you can have something checking the return values vs the annotations

[primal perch]

gas

actually fi

re

i love f strings

[hasty ruin]

true

they’re even better in 3.12

🔥

[timid furnace]

match case is also nice

[timid furnace]

@ashen birch why is asn1 parsing so incredibly stupid

[cloud yacht]

Python being actually good?

[harsh junco]

icream name leak

[hasty ruin]

Please return to #jailbreak you pink name

[unborn skiff]

@hasty ruin Hey, got a moment?

Struggling to flash my ipa onto Corellium, I fakesigned it with ldid but now I get this:

Failed to install app from opal.ipa: Code signature verification failed (No code signature found.)

It's decrypted

[hasty ruin]

No idea tbh, I haven’t used corellium in 3 years

[unborn skiff]

I uploaded it as a .zip to /Applications because corellium doesnt let you upload folder

How can I unzip it? I tried unzip name.zip but it didnt owkr

[hasty ruin]

What folder

[unborn skiff]

Opal.app folder

I put it into a zip

and put it into /Applications

someone told me to put it there and uicache it

but im struggling to unzip it

[hasty ruin]

How did you make the ipa

After signing

[unborn skiff]

I downloaded it decrypted, fakesigned it and zipped it into opal.ipa

@hasty ruin

[primal perch]

ntrol

[hasty ruin]

ntrol

[ashen birch]

pyimg4 semi-does

and also agreed asn1 sucks

[ashen birch]

too bad it’ll never be a real img4 parser bc it’s not “proper” like img4lib is

[misty cradle]

what is the latest crash log tool

i dont think cr4shed works anymore??

and how to make my tweaks support rootless

@ashen birch u must know this fr

[[crashcop]]

[faint lion]

KrashKop

Lightweight crash reporter

Author

foxfortmobile

Version

1.0.2

Price

Free

Repo

Havoc

Bundle ID

com.foxfort.krashkop

Powered by Canister · Oct 20, 2023, 10:34 PM

[native dune]

wtf

[wind ravine]

how do i include images in a theos app with makefile?

[torn oriole]

[desired_bundleid]_INSTALL_PATH = /Library/Application Support/
include $(THEOS)/makefiles/bundle.mk

i guess

place stuff in folder called Resources in root

[wind ravine]

bundle?

[misty cradle]

[[FlexAll]]

[faint lion]

FLEXall

Load FLEX loader dynamically.

Author

DGh0st

Version

0.0.1-24

Price

Free

Repo

DGh0st

Bundle ID

com.dgh0st.flexall

Powered by Canister · Oct 21, 2023, 1:05 AM

[torn oriole]

just creates a folder at the given path more or less

[wind ravine]

the app is crashing on launch and i cant figure out why ae

[torn oriole]

specifying rootless packaging scheme translates that to /var/jb/Library btw so

[wind ravine]

this isnt jailbroken

this is a trollstore app

[torn oriole]

[wind ravine]

bruh

it crashes on palera1n devices

wait a minute is it because its an ios 16 device and im using ios 15 sdk

[wicked summit]

good morning

[sand pecan]

can you spoof iPhone location without jb?

[wicked summit]

no

[granite frigate]

its joever

oh sorry i pinged you

[primal perch]

capt inc porn

corn

[hasty ruin]

hbd!

[ashen birch]

bro i've literally never gotten into tweak dev

and haven't even messed with proc stuff in over a year tro

[turbid fjord]

@vivid dew happy birthday big man!!!!

[radiant idol]

This can be a help: https://github.com/NightwindDev/Tweak-Tutorial/blob/main/p10_rootless.md

[misty cradle]

why could I not find this /var/jb folder and only /private/preboot/jb-randomnumbers/

[radiant idol]

are you on palera1n or another rootless jb

[misty cradle]

dopamine

[radiant idol]

uhh it should be there then

Regardless from what I understand /var/jb/ is just a symlink to that folder so it doesn’t really matter

[misty cradle]

I got my tweak mostly working with ROOT_PATH_NS and some other changes but that folder was nowhere to be found

ah ok

[radiant idol]

also make sure you’re compiling with a mac if you have one, and with Xcode 12 tool chain or above

[misty cradle]

Just some other prefs shit that has to be changed now, and commands that need to be switched

[misty cradle]

Yeah I had to get Xcode 14.3.1 cuz 15 wasn’t working

[radiant idol]

weird

[misty cradle]

It would complain about the platform being null in some private framework tbd’s

[radiant idol]

Oh yeah that

[misty cradle]

Which it was, but had no idea how to fix so I just downloaded 14

[radiant idol]

that’s cuz they (Apple) changed iphoneos to ios for some reason

which broke everything

[misty cradle]

ah

so what would I have to change to get 15 working

just the target to be ios?

[radiant idol]

not exactly sure, I use Xcode 13 myself

oh one more thing

you have a flex loader installed, right? just to make sure

if not I can tell you where to get it

[misty cradle]

u mean like flex on device?

[radiant idol]

yea

[misty cradle]

I downloaded poomsmart’s version for rootless

[radiant idol]

ah ok cool

that’s what I was gonna mention

[misty cradle]

didn’t find any others that supported

[radiant idol]

yeah it’s only that one that seems to work

[misty cradle]

And for some reason sileo wouldn’t load packages from nscake or dgh0st’s repo

Not sure if that’s bc it checks for rootless supported packages

[radiant idol]

is there a DPKGArchitectures error

[misty cradle]

I think so

it would say that and that releases couldn’t be loaded or something

[radiant idol]

If so, yes you’re right, it’s because those repos don’t work on rootless

[misty cradle]

ah ok thanks

[radiant idol]

yeah

mhm np

[misty cradle]

I was using xina before this, only switched last night to dopamine

that phone been off for months

[radiant idol]

yeah it’s quite a transition lol

[misty cradle]

Now I feel like back in 2019 where I had no idea how to do anything

[radiant idol]

oh yeah haven’t you not “tweak devved” for a long time now as well

I just realized that

[misty cradle]

yeah it’s been a long time

someone put a tweak bounty out for Akara to be updated so I thought why not

[radiant idol]

oh nice

yeh I made my own cc tweak as well

[misty cradle]

cool what’d u make

[radiant idol]

[[Jade]]

[faint lion]

Jade

Your control center, brought anew.

Author

Nightwind and thetimeloop

Version

1.0.1

Price

$2.49

Repo

Chariz

Bundle ID

com.nightwind.jade

Powered by Canister · Oct 21, 2023, 12:49 PM

[radiant idol]

worked with Timeloop (his design, my code) and I developed the tweak itself

[misty cradle]

oh nice

wait isn’t this the old LQ tweak

It looks like that

[radiant idol]

yeah Timeloop also worked with LQ on Prysm

back in 2019

but well

[misty cradle]

Ahh yeah reminded me of that

[radiant idol]

yeah

hi kirb

[lime pivot]

interesting how the timing worked out on Jade huh...

hi

[radiant idol]

yeah the timing was very unfortunate

RIP LQ 🕊️

[lime pivot]

hey I mean at least his legacy lives on in a way

[tepid olive]

“This course is hard. Like, really hard. Even if you've done all these things before, there is so much brain power to get through these exercises. Make sure you're practicing self-care by giving yourself the mental space necessary to learn these concepts.” I’m in for a treat 😂

[lime pivot]

gets to live a second life

[radiant idol]

haha

I worked on it far before those news, couldn’t’ve predicted it even if I wanted to

so sad

[misty cradle]

Some of these animations in Akara are horrible

[radiant idol]

show us the first sneak peek into akara rootless

[misty cradle]

@radiant idol are u making use of the cc or fully replacing it

[lime pivot]

still hurts to think about it

[radiant idol]

replacing it because my goodness the stock cc’s class structure is annoying to use

[radiant idol]

my condolences :(

[radiant idol]

looks good lol

[misty cradle]

yeah I uh modify the existing design

it’s hell

[radiant idol]

make sure to check if the focus module is working

[tepid olive]

Computer science is necessary for reverse engineering iOS right?

[radiant idol]

that one is a pain in the rear end

[tepid olive]

I think iirc Linus was/is a cs student

[misty cradle]

thanking myself for adding comments to shit bc there’s a few hooks to fix the cc’s normal behavior

[radiant idol]

it would help A LOT but I guess it’s not necessary

[misty cradle]

Hmmm I’ll have to check, but it should work as the backend of the cc should be the same

But I might have to take it out of support for the smaller buttons lol

[radiant idol]

yeah

[misty cradle]

that shit will not fit in there I think

[radiant idol]

I just make all of the toggles small

(This is the focus mode toggle)

[misty cradle]

yeah that’s possible too

[radiant idol]

harder when you’re modifying the original cc tho

[tepid olive]

Interesting, I may take a dive into here 😂 https://btholt.github.io/complete-intro-to-computer-science/

[misty cradle]

there’s one slight issue with the original cc, when closing the cc

[radiant idol]

good luck

[radiant idol]

what is it

[misty cradle]

For a small second the border of one of the views stays behind

And then closes

Lemme see if I have a video of it

[radiant idol]

wait I think ik what you’re talking about

i have the same issue, possibly

(if we’re having the same issue, that is)

[radiant idol]

oh nvm

that’s weird

different issue

[misty cradle]

what’s your issue

[radiant idol]

well I mitigated it by fading out when the cc is closing, but on the last frame of the cc closing, the menu just jumps up to the very top before disappearing

it’s supposed to animate going down

it does that, but then at the very end just jumps up

[misty cradle]

Oh yeah I think I’ve had that too

[radiant idol]

any fixes?

[misty cradle]

if I remember and if I uh commented on it in my code possibly

[radiant idol]

lmao oke

[misty cradle]

I’ll hit u up when I get home from gym, then I can look

might have to do with some of the cc hooks

[radiant idol]

sounds good man

appreciate it

[velvet path]

I love banging my head into the wall that is "kfd for M1 14.x"

[radiant idol]

lmfao

[velvet path]

like somehow the way kfd is normally setup runs out of memory on it... despite this device having the most amount of memory an iOS device has ever had

and then when you reduce that kfd starts having extreme amounts of pain and suffering

(thanks opa for at least helping me get farther than where it was at but this is still the most annoying thing in existence)

[burnt perch]

Does someone know how to compile a build of dopamine? Do i need to do some extra steps as dopamine use extra entitlements?

[elder scaffold]

4141414141414141

[visual meadow]

Couldn't you give taurine those entitlements that give you more memory

Or whatever

Have you tried that

[misty cradle]

@lapis vessel hi could u update the latest version of libimagepicker on github

not sure if the one on havoc has rootless support

[radiant idol]

(it does, at least according to Sileo)

[lapis vessel]

the version on havoc is just a deb that @fading cave sent me actually haha, he might be able to make a PR for me to merge

[misty cradle]

ahh ok

classic dave

libimagepicker mfs who ever's gonna use it on their rootless tweaks:

Put the dylib from either Muirey's github (if its updated by the time u read this) or from your device on Havoc in $THEOS/lib/iphone/rootless/

[tepid olive]

Can we test these ellekit versions

Please

[timid furnace]

uhhh

why?

[tepid olive]

@timid furnace I'm evelyn

On an alt

This is 1.1 RC (like the 9th RC I made)

[velvet path]

I would except I'm currently banging my head into the wall of "14.x M1 kfd"

[tepid olive]

Well test them when you can

I wanna release this weekend so bad

[velvet path]

because guess who decided to buy a 2TB M1 iPad Pro for $900 (brand new)

[tepid olive]

Lol

[velvet path]

thanks microcenter

[tepid olive]

Why does KFD not work

Increase the number of pages by a lot

To compensate for the extra RAM

[timid furnace]

rootless palera1n seems to work fine

anything specific you're looking for?

[tepid olive]

Not really

Do you have BioProtect

If not it's fine

@velvet path Is kfd just slow or is it broken?

[velvet path]

so issue 1 is that for some unknown reason M1 14.x only let's us have 4096 IOSurface's (for reference: it normally has 16384) - this craters success rate by at least 75%

issue 2 is that we need to increase the pages a fuck ton - both to account for increased RAM and also to mitigate the success rate penalty introduced to solve the first issue

how many pages do we need? 131k pages... which both results in over 4GB of RAM usage and an over 3 minute exploitation time

[tepid olive]

Does that really matter

If it works

[velvet path]

how do you tell it not to use this shit codepath on non-M1

[tepid olive]

Wdym?

Like this was predictable

more RAM = slow data exploits

that's how PUAF works

I wonder how it is on 16, since there's vm swap enabled

[velvet path]

problem here is trying to do 131k pages on other devices will likely fail miserably

and also, due to the weird M1 14.x quirk, we're facing an over 75% exploit success rate penalty (for equivalent page counts) compared to if we don't do that

[tepid olive]

Add M1 checks then

[granite frigate]

i don’t see the issue rebooting takes like 30 seconds on m1

just spam

[tepid olive]

Sorry if this is dumb but why is there files like DriverKit.c and DriverKit.h where DriverKit.h includes DriverKit.c is this just for convenience?

Like why is it all not in one is what I’m trying to ask

[timid furnace]

https://stackoverflow.com/a/3482966

[tepid olive]

That makes sense, thank you.

[naive kraken]

you reimplemented the changes you lost?

also why the alt lol, I don't feel confident installing some random deb that some random account sent lol

[timid furnace]

#general message

[tepid olive]

Yes

[tepid olive]

I deleted my main

I also put them on twitter

If you trust that more

[hasty ruin]

Good so far

msgSend hook too 💪

[velvet path]

ok so update:
opa kfd app

• 131k pages worked 100% of the time
• 65.5k pages worked 0% of the time

Taurine app

• smith consistently panics
• physpuppet consistently is just stuck

(compiled with Xcode 14.2 on macOS 12.7)

[tepid olive]

Compile Taurine with it?

[velvet path]

yes I compiled Taurine with the applicable changes

[drifting dust]

I need to inject FLEX on a Mac, I am running an iOS app via catalyst and I want to dig around in it. Please don't suggest "just use your phone" - I wouldn't be fucking with this if I didn't need to. Is there like a pre-made dylib that I can inject into an app and have FLEX be displayed? I already tried FLEXing but it didn't do anything. Does anyone know anything?

[hasty ruin]

inject these into the ipa with sideloadly or whatever

[restive ether]

ballin

[tepid olive]

@naive kraken Do Enterprise-signed IPAs not work with Dopamine and AppSync because you don't hook amfid/installd or what?

I'm confused

[drifting dust]

Done, but doesn't seem to be doing anything unfortunately, app just opens

[hasty ruin]

Must be a skill issue, works for me

[drifting dust]

im trying to do something with the chatgpt app

https://f.igerman.cc/u/Ed8g2g.jpg but it just opens

not doing anything wrong am i?

[velvet path]

looks right

[naive kraken]

your main still shows as deactivated though, not as "deleted user #69420" lol

[naive kraken]

No they don't work because Dopamine does not add non adhoc signed binaries to trustcache by design

[tepid olive]

Well it's gonna take 2 more weeks for that

[tepid olive]

Yeah okay

Not fixable right?

[naive kraken]

not really

[tepid olive]

Yeah it makes sense on second thought

[naive kraken]

you can add those to trustcache and that would work

but then app store apps and whatever else would also be added to trustcache

and that can cause unwanted side effects

[tepid olive]

Mhm

Would it be that bad?

It's just TL7 right

[naive kraken]

there was an entire presentation at 0x41con where someone used frida to debug an app crash

[hasty ruin]

the hider of root is gonna cry when his 600 app store apps get added to tc

[tepid olive]

lol true

[naive kraken]

and the whole conclusion was it happened because NSPredicate behaves differently when the app has platformization

[tepid olive]

Wtf???

Does it allow evaluating more stuff or what

[naive kraken]

yeah it was an attempt to mitigate recent NSPredicate exploits while not affecting apps too much

no, less stuff

[tepid olive]

Ic

Who even uses NSPredicate

[naive kraken]

some apps do

[tepid olive]

Weird

[naive kraken]

although it's a local check that consists of the framework running csops on the app itself

so the person that did the presentation was able to patch that to fix it

[tepid olive]

Well you /can/ hook csops

But that's another issue

[naive kraken]

that's what I meant though lol

The problem is since iOS 15 you cannot run unsigned apps without platformization anymore because the only method left for bypassing code signing is the trustcache

CoreTrust bugs do allow this however

[dreamy mason]

opa for how long are you reading or reverse engineering Apple's OSes? To know all this information

[drifting dust]

Potentially is there any way to, like, include missing frameworks (iOS 16+ stuff like RegexBuilder and AppIntents) into an app that doesn't support anything lower?

[naive kraken]

I mean, all the reversing I did before 2022 was just to get my tweaks to work

it was only 2022 where I actually got into kernel stuff

also kernel has source code for a lot of stuff

[acoustic imp]

Where? On apples website ?

[dreamy mason]

Which is decompiled? I don't think it's opensource :p

[naive kraken]

https://github.com/apple-oss-distributions/xnu

[dreamy mason]

What.. It IS opensource 😄

[naive kraken]

@tepid olive ellekit build seems fine so far but I also don't have a lot of tweaks installed

[tepid olive]

https://tenor.com/view/the-universe-tim-and-eric-mind-blown-mind-blown-meme-mind-explosion-mind-explosion-meme-gif-18002878

[pearl sail]

Yeah legally they cannot close source the kernel

[dreamy mason]

Hm

Why does it take ages to look into the source of the kernel? Pages load soo slow

[tepid olive]

yeah that's it

i always ask cyp*n to test

these idiots have like 100 tweaks

[hasty marsh]

cause they can get virtually any tweak for free

💀

[naive kraken]

well at least it didn't break crane

[tepid olive]

Yeah I have that on my test device

[hasty marsh]

inb4 someone complains of a broken crane

[tepid olive]

I was getting rusty with arm64 asm and forgot that branches need to get the instruction offset added when rebinding

[dreamy mason]

@naive kraken how did you start learning C & other programming languages that you use?

[naive kraken]

learn-c.org

school

and well assembly I avoided by using decomp

only during my cellebrite internship I re-learned how to write assembly

[dreamy mason]

So assembly is not really a must to be able to find some exploits?

[tepid olive]

tfw i learned assembly by making ellekit

by writing an assembler....

[naive kraken]

not at all

but it is good to know

[pearl sail]

Assembly really doesn’t need to be used by most exploits from what I know

It helps

[naive kraken]

you really only need it when the decomp fucks up

[dreamy mason]

And how DO you find exploits? For example you know C, then what? Where do you look for an exploit? Could it be literally anywhere in the kernel source? Or are there certain maps where you'd have a higher chance on finding an exploit.

[naive kraken]

I never found an exploit

[dreamy mason]

Oh okay, you used an exploit I guess.

[naive kraken]

and even if I did, no one would know

[dreamy mason]

Used CoreTrust exploit for TrollStore

[pearl sail]

Well essentially you are looking for code bugs

[naive kraken]

the most exploit related thing I did was replace oobPCI with kfd in Dopamime

For the rest I just used exploits that were already public

[pearl sail]

That may or may not be exploited for memory leaks

It is not a very glamorous job

It is tedious

[dreamy mason]

Hm

[tepid olive]

spill

never seen a glamourous programmer

[dreamy mason]

Can I see what you've changed? I cannot see it on GitHub.

[tepid olive]

the private techniques are interesting

[dreamy mason]

Oh it's private... Okay nvm

[naive kraken]

no it's public

[pearl sail]

I don’t have a job in that profession so I can’t spill anything

[naive kraken]

I replaced the private techniques with the ones from Fugu15_Rootful

But evelyne has access to the original ones which I guess she was referring to

[tepid olive]

lol

[dreamy mason]

Coolstar has different exploits right?

[naive kraken]

https://github.com/opa334/Dopamine/commit/b1dfa5c79eaf9a8a4e136d74c9684db80b24cf09

[dreamy mason]

Which was supposed to be used in Cheyote

[naive kraken]

no there weren't any PAC or PPL bypasses for cheyote

[restive ether]

1984 pac brute force

[tepid olive]

CoolStar should have considered hardware breakpoint hooking.......

6 per process is fineeeee

[naive kraken]

naah

[tepid olive]

At the time it would have been cool

[dreamy mason]

So CoolStar would've been using fugu15 too?

[naive kraken]

also it breaks a lot of apps and stuff like that

[naive kraken]

no just mcbc

[tepid olive]

mhm

[dreamy mason]

What's mcbc?

[naive kraken]

15.0 - 15.1.1 do not need PAC/PPL bypasses to jailbreak

[tepid olive]

the good old days of struct proc containing the ucred

no proc_ro

[tepid olive]

well....

[naive kraken]

multicast_bytecopy

[hasty ruin]

need

[tepid olive]

page signing

[dreamy mason]

Oh I remember that one, also used in TS or something with nonce setter.

[naive kraken]

I figured that out btw

[tepid olive]

that's crap

Huh

How

[naive kraken]

you can mmap an executable segment of a dylib over any address you want

[tepid olive]

Really

That's funny

[naive kraken]

the magic is you have to use fcntl right before to load the code signature and you have to map the entire segment in

If you don't do either of those things, it will cause the page to be mapped as non execute

[tepid olive]

Do you have a poc of that

[naive kraken]

you essentially need to reimplement what dyld does

yeah but essentially you have to make a dylib with custom segments and stuff like that which I don't have anything for

[tepid olive]

Omw to make a JIT compiler that signs pages with a dev cert on the fly

You just need a fast wifi

[naive kraken]

coolstar wanted to do that at some point

but never materialized afaik

[tepid olive]

Sounds crazy

[naive kraken]

well it is being done in Taurines oldABI solution

I kinda wanna make sure at some point that even page signing still causes spinlocks

[tepid olive]

What does that do

Where is it

[naive kraken]

sign a dylib that has a modified executable segment of like libobjc in it and then map it on top of the original one

or something like that

spinlocks can be fixed most likely by wiring down the original page using krw before mapping on top of it btw I just haven't been able to figure out how to find the correct vm_page struct in kmem yet

because dsc vm map is fucked somehow

[tepid olive]

where's the taurine oldabi code @naive kraken

What dylib

[naive kraken]

I don't think that's open source

[tepid olive]

https://gist.github.com/evelyneee/fc7c8caac3d353e030f8e308d4e2735e

@naive kraken

It's vm_remap and mmap

[topaz yew]

lord

[naive kraken]

that's iOS 14 though I'm fairly sure that doesn't work on 15

again there is strong boundary and code signature checks in mmap now

you can't partially map an executable segment

[tepid olive]

well yeah

but it was tested on 15 I guess

[naive kraken]

no

[tepid olive]

Since Cheyote exists

[naive kraken]

I don't think it was

I can give you my POC code if you want

[tepid olive]

A guy on twitter posted that ellekit 1.1 safe modes and in his account I saw he retweeted this

https://twitter.com/bambkb/status/1712844798351073330?s=20

Come on discord

[restive ether]

twitter links don’t embed

you have to use fx

also that link doesn’t even load

[granite frigate]

it does for me

[misty cradle]

K buddies whats the new way of showing an alert after respring

i see the springboard lockstate notif doesnt work anymore on ios 15

[acoustic imp]

@hasty ruin

[misty cradle]

@hasty ruin

[acoustic imp]

Like how nexus does it, also might want to work something out with them abijt the like 2 tweaks doing an alert respring loop bug

[granite frigate]

@naive kraken how did you go from making tweaks to learning jailbreak dev? any particular resources you used or..? i feel like there's a pretty big gap between those 2 things

[naive kraken]

a modern jailbreak is just a system wide tweak and a daemon that can run stuff with kernel primitives for it, Crane is more similar to a jailbreak than you might think actually

[granite frigate]

huh wack

oh system wide tweaks yeah

[granite frigate]

having to go from bypassing whatever mitigations to getting tweak injection is not really a common topic, there isn;t much documentation on it other than viewing past jailbreak source code

[misty cradle]

nobody feels like documenting on it either so its just gonna stay like that

you gotta figure it out on your own

[granite frigate]

[naive kraken]

1. bypass dyld checks
2. hook posix_spawn in launchd to add DYLD_INSERT_LIBRARIES to every process spawned from it
3. in that library hook posix_spawn again to do the same thing
4. dlopen a tweak loader
5. profit

at least if you didn't have to add everything to TrustCache aswell to bypass codesigning

[granite frigate]

is that an issue with dopamine given you have the coretrust bug

[naive kraken]

CoreTrust bug doesn't allow tweak injection though

stuff signed with it cannot inject into system processes

only trustcached shit can

[granite frigate]

oh i see

[naive kraken]

and for writing to trustcache you need a PPL bypass

[tepid olive]

That is what Linus bypassed right?

I wish I looked into this sooner I feel like I’m too old to start learning now 😂

[naive kraken]

Indeed Fugu15 has a PPL bypass

[tepid olive]

Yeah I’ve spent most of the day looking through the code, pretty fucking crazy to be honest

[granite frigate]

^

[tepid olive]

@naive kraken Always wondered, can you platformize by setting the trustlevel to 7 in the vnode?

[naive kraken]

trustlevel and platformization are two different things

I don't know, I tried messing with the trust level before but it didn't do what I wanted it to do

so I'm unsure where this check is even enforced

[tepid olive]

So the vnode has a platformization field? Where is TF_PLATFORM inherited from (unless its checked on every process launch)

[naive kraken]

Yeah I think it's from vnode

[acoustic imp]

is this how you do this ?

no qoutes?

@radiant idol ?^

and yes the VM can ssh into the device

[radiant idol]

no quotes

[acoustic imp]

and it should install the deb to?

bc it doesnt

[radiant idol]

make do THEOS_DEVICE_IP=192.168.1.124

[acoustic imp]

uhh how do i specify a user in it

[cloud yacht]

It just uses root

[acoustic imp]

it wount take rootpassword tho

i changed it

[cloud yacht]

Did you set the password first?

For root

[acoustic imp]

yea

oh

wait

did i do it right?

[cloud yacht]

That should be right

Can you just ssh in manually?

[acoustic imp]

nope

do i need to enable root login?

how tho

where ssh config

welp

how do i retsrat open ssh?

killall sshd doesnt work

or systemctl

nvm

needed sudo

🎉🎉🎉

@radiant idol will it auto respring?

[hasty ruin]

depends

[radiant idol]

add INSTALL_TARGET_PROCESSES = SpringBoard to the makefile and it will respring

depends if you're targetting for springboard or another app tho

[acoustic imp]

its music nd springborad

messing around with artfull

[radiant idol]

ok so you have to find the process name

idk what that is

so

[acoustic imp]

it had Muis claready

so just ad springboard

[radiant idol]

what is muis

[hasty ruin]

just Music

[acoustic imp]

Music**

[radiant idol]

oh

[restive ether]

music

[radiant idol]

yeah no need to add the second one

you dont need to respring every time

[acoustic imp]

no, it does

[hasty ruin]

you dont need DEBUG=0 if you have finalpackage enabled

[acoustic imp]

bc it does music and SB stuff

[radiant idol]

ok well do both then

INSTALL_TARGET_PROCESSES = Music SpringBoard

ig

[hollow mango]

i haven’t saw this channel in days

[hasty ruin]

remove the second line
and change Music to Music SpringBoard

[radiant idol]

hi jez

[acoustic imp]

yep

[hollow mango]

days i mean years

[misty cradle]

What could cause this to happen:

While building module 'std' imported from /Users/jalilfaquiri/theos/sdks/iPhoneOS14.0.sdk/System/Library/Frameworks/CoreFoundation.framework/Headers/CoreFoundation.h:19:
In file included from <module-includes>:2:
/Users/jalilfaquiri/theos/toolchain/MyToolchain.xctoolchain/usr/bin/../include/c++/v1/ctype.h:38:15: fatal error: could not build module 'Darwin'
#include_next <ctype.h>```

[hollow mango]

shitty sdk

[radiant idol]

are you usng cephei

possibly

[hasty ruin]

shit tc i think

or sdk idk

one of them

[hollow mango]

guys does simject still work

on m2 macs

because

idk

[misty cradle]

no

[radiant idol]

ok idk then

toolchain or sdk is bad ig

[hasty ruin]

https://github.com/akemin-dayo/simject/commit/ba93757863e3460f25a100b030a94a7bb6c4d64c seems like it

[acoustic imp]

@radiant idol how do i make it so i dont have to type my login every time

[hollow mango]

i have no other way to make tweaks unless i steal my brothers iphone x

[radiant idol]

.

[hollow mango]

that i bought 6 years ago in year 7

[hasty ruin]

or just go through https://iphonedev.wiki/SSH_Over_USB

wtf

that page changed so much

[radiant idol]

fr

[acoustic imp]

like this ?

[radiant idol]

yes

[hasty ruin]

nice ip

[acoustic imp]

then what it gave me some image thing and a key

do i copy it to my phone?

[acoustic imp]

its a local one

[hasty ruin]

moyai

[vivid dew]

no you fucked it up

[acoustic imp]

oh

[vivid dew]

do it again, ut don't run the second one until the first is finished

[acoustic imp]

for the file name one does it matter what i put?

[vivid dew]

leave it blank

[hasty ruin]

no password either

just click enter

[acoustic imp]

and passphrase is the pwasword for my root login on my phonr

oh ok

then wha

[acoustic imp]

?

[vivid dew]

run the ssh-copy-id command like before

[acoustic imp]

on my phone or mac?

[vivid dew]

mac

[acoustic imp]

with the SHA...thing after it

this^

[vivid dew]

no just with root@phone ip

exactly like before

[acoustic imp]

k

good?

anything i need to do to my phone/mac now?

[vivid dew]

youre done

it should let you ssh without password now

[acoustic imp]

do i need to restart term?

@vivid dew

[vivid dew]

um

someone tag hayden

[acoustic imp]

whos that?

[vivid dew]

my bro

[acoustic imp]

cryptic? capt? hydrate?

[vivid dew]

@grave sparrow

[acoustic imp]

also i didnt run the ssh-copy-id on the mac itself i did it thru ssh, would that cnage anything?

(its a mac VM btw)

[hollow mango]

hate simject

die

[acoustic imp]

just get like an old cheap iphone 6 or 7 or smth

[misty cradle]

Anyone here that got hikari to work with building rootless tweaks on iOS 15 for arm64e?

[radiant idol]

@hasty ruin

[hasty ruin]

i don't use hikari on rootless

[radiant idol]

dont you do obfuscation

[hasty ruin]

some

but it's all custom

and cursed

[radiant idol]

lol ok

[turbid fjord]

Mild understatement

[hasty ruin]

you write swiftui

there is nothing more cursed than that

[turbid fjord]

Not even captware

?

[hasty ruin]

nope

[native orbit]

i can confirm

[hasty ruin]

how long did it take until your decomp crashed

[native orbit]

like 4 minutes

[hasty ruin]

🔥

[hasty ruin]

this has the side effect of obfuscating your source code though

[brazen timber]

fr

[native orbit]

swift symbols 💀

[brazen timber]

rust syntax 💀

[hexed knot]

its really not bad

i mean maybe the go button is a little too green

but other than that its literally just a normal windows program

i dont expect anything more for a jailbreaking tool

[vivid dew]

WTF

who let him cook

[brazen timber]

FR

[acoustic imp]

@radiant idol would this work? (chaning the alpha thing (maxValueImageView.alpha = 0.45;
minValueImageView.alpha = 0.45;)

    UIView *visualElement = MSHookIvar<UIView *>(self, "_visualElement");
    UIView *minValueImageView = MSHookIvar<UIView *>(visualElement, "_minValueImageView");
    UIView *maxValueImageView = MSHookIvar<UIView *>(visualElement, "_maxValueImageView");
    [UIView animateWithDuration:0.5 delay:0 usingSpringWithDamping:0.7 initialSpringVelocity:0.2 options:nil animations:^{
        minValueImageView.transform = CGAffineTransformScale(CGAffineTransformIdentity, 1.0, 0.7);
        maxValueImageView.transform = CGAffineTransformScale(CGAffineTransformIdentity, 1.0, 0.7);
        maxValueImageView.alpha = 0.45;
        minValueImageView.alpha = 0.45;
        visualElement.transform = CGAffineTransformScale(CGAffineTransformIdentity, 1.0, 1.5);
    } completion:nil];
}

[radiant idol]

you dont need to ping every time

it could work

try it idk

[acoustic imp]

ok, ok

it does not work 😥

is there another way i can chagne the alpha

[native orbit]

edit the float in memory

[acoustic imp]

me no know how

but how can i like chnage the color of it

its an image

can i add like a filter or or somthing like in css

[acoustic imp]

Anyone have an explanation for this ? (skip to 00:12)

    UIView *visualElement = MSHookIvar<UIView *>(self, "_visualElement");
    UIView *m = MSHookIvar<UIView *>(visualElement, "_minValueImageView");
    UIView *t = MSHookIvar<UIView *>(visualElement, "_maxValueImageView");
        self.tintColor = nil;
        visualElement.backgroundColor = [[UIColor whiteColor] colorWithAlphaComponent:0];
    [UIView animateWithDuration:0.5 delay:0 usingSpringWithDamping:0.7 initialSpringVelocity:0.2 options:nil animations:^{
       // m.hidden = YES;
       // t.hidden = YES;
        m.transform = CGAffineTransformScale(CGAffineTransformIdentity, 1.0, 0.7);
        t.transform = CGAffineTransformScale(CGAffineTransformIdentity, 1.0, 0.7);
        visualElement.backgroundColor = [[UIColor whiteColor] colorWithAlphaComponent:0];
         UIColor *whiteColor = [UIColor whiteColor];
     t.tintColor = whiteColor;
     m.tintColor = whiteColor;
        visualElement.tintColor = nil;
        visualElement.transform = CGAffineTransformScale(CGAffineTransformIdentity, 1.0, 1.5);
    } completion:nil];
}

[fading cave]

I think I still have the version on my laptop, I can send it to you or @lapis vessel if it is still needed?

[misty cradle]

Could u do a merge request on the GitHub so it gets updated there

[silver rampart]

its for some reason one of the more popular ones so i tried to clean it up a bit

n then sig introduced me to the wonder of inetcat

[hasty ruin]

yeah I had a brief look at it last night

looks good

rip iphonetunnel

[dawn rapids]

why cant i compile

make[2]: *** [/Users/brurmonemt/test/.theos/obj/iphone_simulator/debug/Test.dylib] Error 1
rm /Users/brurmonemt/test/.theos/obj/iphone_simulator/debug/Test.dylib.9f8f30ac.unsigned
make[1]: *** [internal-library-all_] Error 2
make: *** [test.all.tweak.variables] Error 2```

mike finish your sentence

[velvet path]

@plain python sorry for the ping, but do you happen to know how Taurine selects the number of pages that kfd uses (does it use the max pages that are defined within kfd itself, or is there a thing somewhere that tells it to use a specific number of pages?)

Reason is that I’m currently trying to compile Taurine with the relevant changes that were made that allow opa’s kfd app to work on M1 14.x, which requires both:

• reducing the number of IOSurface’s created from 16384 to 4096 (change already made)
• increasing the number of pages from 2048 to 131072 (I’ve changed the max number of pages, but can’t find if Taurine just uses the max number of pages or uses a specific number - opa’s kfd app just defaulted to the 2048 option for instance but had a toggle in-app)

And right now, Taurine still doesn’t work when compiled with those changes (smith panics, physpuppet just leads to a hang of sorts), so this is the only potential lead I have

[naive kraken]

https://github.com/Odyssey-Team/Taurine/blob/b4824a0893717fb221f1215db8e805816a2e1214/Taurine/app/ViewController.swift#L265

the first 0x800 is the number of pages

[velvet path]

oh

thanks

[velvet path]

I love Xcode

apparently my Apple ID got revoked or something

[worthy rune]

just use a diff one

[steady nest]

is the reduction from 16384 really necessary, doesn't that hinder success rate

[velvet path]

yes and yes - that's why we need 131072 pages

this appears in logs, and trying to go over 4096 throws some iokit out of memory error or something like that

[steady nest]

how does that not happen for iphones though

[velvet path]

nobody knows why this happens on literally no other device

first run success

[velvet path]

oh and did I mention that increasing the number of pages to 131072 also increases:

• RAM usage to over 4GB
• exploitation time to around 2-3 minutes

[crisp frost]

hello developers

[velvet path]

ok new problem: exploit now succeeds but post-exploit fucking dies

wonderful

how amazing

so it's dying on amfi

[manic dust]

any devs that can help with an extremely rudimentary question

[steady nest]

build as release

instead of debug

[velvet path]

is the run action in xcode release or debug

[steady nest]

debug

[velvet path]

how do I build for release in a way that actually wants to install

[granite frigate]

does using command k then making the .app to .ipa work

[manic dust]

i have a metapackage that installs multiple tweaks; is it possible to make this metapackage edit the preferences for these tweaks prior to respring or can the preferences only be changed manually through settings.app?

[granite frigate]

postinst can edit the plist files of the tweaks? not sure

[manic dust]

exactly what i was thinking, but how exactly would i make postinst edit those files

[tepid olive]

@velvet path In the Taurine scheme, you can build for release

[velvet path]

well I just left home and won't be back for a few hours so

[manic dust]

can i use defaults like on macos?

[tepid olive]

Someone pleaseeeee test ElleKit 1.1 and get me a safe mode crash

Pleaseeeee

[granite frigate]

rename the default plist and copy over an edited one you want bundled with your metapackage

idk thats prolly a bad idea

[manic dust]

if the defaults command works on ios then there’s the solution

or plutil

[faint stag]

does it have to be a real one or does segfaulting springboard count

[tepid olive]

A real one

[faint stag]

darn

now i have to actually write code to crash springboard

[tepid olive]

....

Not the point

[manic dust]

ok defaults works

[naive kraken]

___CFNotificationCenterGetDistributedCenter_block_invoke
__text:0000000180432C98
__text:0000000180432C98 var_s0          =  0
__text:0000000180432C98
__text:0000000180432C98                 PACIBSP
__text:0000000180432C9C                 STP             X29, X30, [SP,#-0x10+var_s0]!
__text:0000000180432CA0                 MOV             X29, SP
__text:0000000180432CA4                 ADRL            X8, _kCFAllocatorSystemDefault
__text:0000000180432CAC                 LDR             X0, [X8] ; ___kCFAllocatorSystemDefault
__text:0000000180432CB0                 ADRL            X1, __kCFXNotificationConfigurationStandardDistributedConfiguration
__text:0000000180432CB8                 BL              __CFXNotificationCenterCreate
__text:0000000180432CBC                 ADRP            X8, #___hostCenter@PAGE
__text:0000000180432CC0                 STR             X0, [X8,#___hostCenter@PAGEOFF]
__text:0000000180432CC4                 LDP             X29, X30, [SP+var_s0],#0x10
__text:0000000180432CC8                 RETAB

@tepid olive

+36 is 0x0000000180432CBC

so hooking __CFXNotificationCenterCreate is probably what's broken

I don't see anything bad in that function however

000000018040D8C4 __CFXNotificationCenterCreate           ; CODE XREF: ___CFNotificationCenterGetLocalCenter_block_invoke+20↓p
__text:000000018040D8C4                                         ; ___CFNotificationCenterGetDistributedCenter_block_invoke+20↓p ...
__text:000000018040D8C4
__text:000000018040D8C4 var_60          = -0x60
__text:000000018040D8C4 var_58          = -0x58
__text:000000018040D8C4 var_50          = -0x50
__text:000000018040D8C4 var_40          = -0x40
__text:000000018040D8C4 var_38          = -0x38
__text:000000018040D8C4 var_30          = -0x30
__text:000000018040D8C4 var_20          = -0x20
__text:000000018040D8C4 var_10          = -0x10
__text:000000018040D8C4 var_s0          =  0
__text:000000018040D8C4
__text:000000018040D8C4                 PACIBSP
__text:000000018040D8C8                 SUB             SP, SP, #0x70
__text:000000018040D8CC                 STP             X24, X23, [SP,#0x60+var_30]
__text:000000018040D8D0                 STP             X22, X21, [SP,#0x60+var_20]
__text:000000018040D8D4                 STP             X20, X19, [SP,#0x60+var_10]
__text:000000018040D8D8                 STP             X29, X30, [SP,#0x60+var_s0]
__text:000000018040D8DC                 ADD             X29, SP, #0x60
__text:000000018040D8E0                 MOV             X20, X1
__text:000000018040D8E4                 MOV             X19, X0

[tepid olive]

yeah wtf

[sacred orbit]

anyone knows how to do a userspace reboot with mdc?

or kfd, maybe

[tepid olive]

Impossible @sacred orbit

Not without a PPL bypass

@naive kraken Without many tweaks, this is the log

https://pastebin.com/WvYNZJ4y

A bad syscall it seems

[naive kraken]

wtf

[tepid olive]

Genuinely no idea now

Does EXC_CRASH (SIGSEGV) point to a segmentation fault?👀

So something tried to access a memory location but was denied access?

Or am I on the completely wrong page 😂

[manic dust]

is there any way to include additional files in a deb package that i can move to the correct location with postinst

[sacred orbit]

i still wonder if replacing dyld shared cache is possible, i even the found the value i was searching for, replaced the file with it with mdc with the changed value (the value deals with springboard) and tried to respring. but it was expected that a respring wont work. so im wondering how i can “reload” springboard or anything that will trigger the reload.

evelyn told me that a userspace reboot should work but how

[radiant idol]

that is evelyn

[upbeat willow]

Does anyone know if hypothetically someone wanted to enable some of the InternalUI stuff on ios 14, what additional changes need to be made as well as the ones requierd on ios 13?

It seems like adding the Internal keys to the SystemVersion.plist isn't enough on ios 14 for anything to happen

[tepid olive]

it is not gonna work

Correcting myself

Idk why I said that

The cache is never reloaded until reboot, unless you somehow get the vm system to reload it with krw

@naive kraken Maybe you know something about that

@naive kraken It's Choicy

LMAO

Just disabling a tweak safe modes

[naive kraken]

wtf

[tepid olive]

Nope

@naive kraken Nvm

[naive kraken]

yeah it works for me too

[tepid olive]

Just found a Choicy bug ig...

Let's see if anyone hooks CFX

@naive kraken No tweak hooks it

Unless it's obfuscated

this is complete nonsense....

[cinder pivot]

Can someone help me

With coding

[cedar stag]

What lang?

[cinder pivot]

I need help with my code

[pearl sail]

@cinder pivot I fuck with your nickname

[cinder pivot]

I just need to decompile it and make it to a dylib

[cinder pivot]

😂😂😂😭😭😭

[cinder pivot]

U got a Mac book tho

[cedar stag]

You need to decompile a code?

[cinder pivot]

I need help really bad

[cedar stag]

How

[cinder pivot]

I don’t have a MacBook

It’s for iOS

That’s why

@cedar stag @pearl sail so can y’all help

[cedar stag]

Don’t have my mac rn

[cinder pivot]

It’s

Igh

[pearl sail]

Sorry mate I’m not near mine

[cinder pivot]

Igh

It’s just a gui tho

[dawn rapids]

idk how to use simject

how to use simjec i want to test me ios tweak 😭

[acoustic imp]

@tepid olive i think i have a sb crash for u

in anlytics an imporment i says springboardd

@ me if u want me to dm crash log thing

also i have alot of jetsamEvent crashes ig

[dawn rapids]

please

[dreamy mason]

Hello guys is it a good idea to buy a 13 Pro on 15.6.1 I know it has no bugs atm but are there any exploits for this specific version?

I’m asking here because the devs probably know better about the exploits/bugs (sorry not sorry)

[pale sleet]

it has KFD and MDC but idk about the next coretrust bug

[dreamy mason]

But I could update to iOS 17.0 which has the bug right? With delay ota

[pale sleet]

it does have the coretrust bug, however it doesn't have KFD

it does have new MDC but i don't know if we can use it for a new trollstore

[dreamy mason]

So what would you do on 15.6.1

[wind ravine]

i spent a while trying to figure out why it crashed on launch just to realize i was compiling for arm64e instead of arm64

and then i used the wrong build command and kept using the old build with the wrong arch so it was still crashing

[main apex]

Theos? If yes just define ARCHS= arm64 arm64e in the makefile.

[wind ravine]

i did in the end

it just took longer to compile and i was testing stuff