#development
1 messages · Page 99 of 1
maybe bc of your blind mode
shut up

what r some like good "exersises" that can help me learn objc/oop ?
as long asu got the core lifts u good 💯
patched a
ive already found 3 issues fr
oh?
patched a_ios
killed
rip
binary probably malformed
its a dylib vs exec issue, fixing now
ah
alr
i expect you'll get 5/6
i included a trick one
not sure how you're gonna deal with that tbh
mf put the whole string in __DATA.__data lol
ok yeah idk, Emerald seems to just get me stuck in a respring loop
it does seem to work w/ "Xina x Dopamine" though
what other tweaks should I test
hm
patch rune ofc
hapticbuttons
PINAMINE
get me a deb
use postbox
and does it work via the "patcher tool"
oh i recompiled it for rootless and use it that way
^
"Xina x Dopamine"

deb
does it work via "Xina x Dopamine" though
good point
any tutorial on objc is good
objc 🔥
objc 🔛🔝
idiot
where the hell did you even put the strs smh
its not on packix anymore idiot
@native orbit
uhhhh
lmao
good
i think i messed something up
loool
oh yeah things like this shouldn't be patched
can dirs have question marks in their names
yes
how can i exclude things like this then though
since it technically could be a dir
no one makes directories on the root
u0's old /jb:
true true
also you could probably just get away with excluding ? to begin with
no one does that either
yeah
I think I'll do that
what the hell is going on here
??????
the hell???
lmao

fr
ok seems to segfault in get_all_machos_in_directory
hm
GEEZ
ok Orion sends me into a respring loop
interesting
Orion also has an app. It won't open, probably because of the dylib/exec issues that you were talking about, right, @native orbit?
oh yeah i should push that lol
😅
pushed
still though, from what I understand, the version of Orion from ***** seems to work for them with their patcher
respring loop still
hmm
app open?
now neither the prefs nor the app open 🤔
o
We're revealing details of an obscure debugging feature in the Apple A12-A16 SoC’s that bypasses all of the hard-to-hack hardware-based memory protections on new iPhones. Its not used by the firmware and we don't know how the attackers found out about it. https://securelist.com/operation-triangulation-the-last-hardware-mystery/111669/
Oh this is the article from before
We are almost done reverse-engineering every aspect of this attack chain, and we will be releasing a series of articles next year detailing each vulnerability and how it was exploited.
?
./shrug
wait so does this mean a16+ is not vulnerable?
I think A16 is but idk if we can find out if A17 is yet until a SPTM bypass is found but also I’m not a sec researcher so lol
I’m just a guy
A17 appears to be vulnerable too
A15 and above are blackboxes due to sptm though
Why does A17 appear vulnerable? How do you know?
I’d imagine this is testable with Corellium
No?
Yea idk maybe
the mitigation is there
Well atleast on 17
On 16 its just ppl and pac then we're set
So for ios 16.1 and 14 series phones, what would we need for a jailbreak besides KTTR?
I thought KTTR was stronger than a PAC bypass?
nothing is stronger than jade's respringing ability
This thread states it is stronger apparently
you don’t
rune's bricking ability
/j
that's not entirely correct
wait what
KTRR Bypass doesn’t need a PAC Bypass
on <=16.5.1 it needs nothing, on 16.6+ it needs a PPL/SPTM Bypass
Right, so theoretically we would just need proper testing on the <16.5.1 devices right?
to workaround the mitigation on 16.6, you will need a PPL bypass, which may itself need a PAC bypass
theoretically it needs a kernel exploit, yes
but that’s generally needed anyways
15.5-16.5 already have one
Yeah, so testing is all that is needed now?
wait i think fugu15 rootful did
XinaA15 1.x did
and 15.7 with a new sandbox escape
oh i thought that was mcbc?
works up to 15.5 as-is
it contains both but stripping weightbufs caused it to die

also explains why it doesn’t work in Corel
supposedly its success rate was quite good compared to Dopamine at the time
🤷♂️
I mean Fugu15 isn’t the most known for having the highest success rates in existence
true true
So if this is true, then would it be normal to expect a working normal (like u0/Taurine) jailbreak to come out relatively soon? (After proper testing)
For those arm64e devices on 15.5-16.5
I wouldn’t say relatively soon, but I would say within the near future it likely will happen
Gotcha
str_patcher built-in:
oh
here it explains rootless vs rootful
https://nightwinddev.github.io/Tweak-Tutorial/rootless.html
A tweak tutorial for beginners to the iOS jailbreak developer community!
(Turns on slow mode in here)
Nooo
no go away
(60 seconds
)
this is our ✨ safe place ✨

LMAO

WHO DID IT
WHO
#development is the shelter
bypass 🔥
me. im secretly the owner of r/jailbreak
HYD4ADM
My bestie hydrate should get a promotion
it was icraze fr
❌
censorship
to fund icraze's purcahse of a 14 pro on 16.5
I should buy rune using a stolen credit card 
$2.49 is $2.49
I should buy rune using someone’s virginity 
Let’s not junk up the channel pls
yes
should I buy rune using someone else’s virginity
need orange name only chat
staaatur

legit
what was i doing
i love being an eta kid dev
i forgot ngl
uh
you tried to fix exec (non dylib) stuff
except that made them just not work
frcoal

i see
Could make a thread for this
oh an Orion also causes a respring loop when patched but does work with the uh
***** version + "Xina x Dopamine"

and just ping whenever someone wants to be in
aint orion rootless bruh
I meant that as a question lol if yall want
meh I think we're good for now
maybe later if this channel also gets taken over by gen alpha
I’ll set up for now , iCraze invite who’s needed
bet 
oh im thinking of the swift theos shit lmao
Do anyone know how to find the offset of p_sigacts in proc?
I am trying to use recvfrom() for a UDP server I made with multicast. I get the mediaserverd data from the Music app and the SpringBoard but recvfrom fails inside Spotify. Would anyone know why?
i second this cant find it for shit
With absolutely no context, I'm going to say look at logs and see if you see anything about sandbox
Ahh why can't I play Trolls in 16.6?
nope nothing at all
😫
BASED
i was gonna write swiftui for a tweak rewrite but im a man and will use objc + constraints
💪
ok but like

😭
AHAHA
need a cgrectmake/oop emoji
on it

at least we get goated emotes from that
yeah he stopped being your shadow dev for an hour to make emojis
not if you use them right

what even is a shadow dev
[NSLayoutConstraint activateConstraints:@[
[button.centerXAnchor constraintEqualToAnchor:self.view.safeAreaLayoutGuide.trailingAnchor constant:-80],
[button.centerYAnchor constraintEqualToAnchor:self.view.safeAreaLayoutGuide.topAnchor constant:30],
[button.widthAnchor constraintEqualToConstant:130],
[button.heightAnchor constraintEqualToConstant:45]
]];
good constraints
sir this is objc
you say YES
what if i dont consent
.
You're checking the iphone logs through console right


What server has an emoji for CGRectmake
emoji
e

@acoustic imp
I’m in that server too

captchink
@grave sparrow new nickname
i should go sleep
14 pro!
CENSORSHIP
I’ve got a 14
oh my god
lol
Ikr
What are you lookin for

Yeah rip my 15.1 XR
kfd-vulnerable 14 pro mainly
what phone do i get ughhh
"phone searching"
2g
my sister has a 13 pro on 16.5.1 should i try to buy it off her

steal it instead
yeah true
^^
Theft is free
should I sell my 14 pro and try to get another 14 pro
shep has a sister
which firmware
true!
We pray for a ppl bypass (everyone on 16.5.1)
you
i could easily trade her my 12 mini for it cus she wants to trade in for a 15 pro but she owes 330$ on it to atnt
so id have to pay 330$ to pay it off then trade a 12 mini for it
for a 2 year old phone
Bro is Mormon he has like at least 5 siblings
you just need a kexploit
you dont need a ppl bypass
yeah i have 5 real
💀
by kexploit i mean something like kfd
oh shit yeah
pre 16.6

yessir
id kinda just rather get a s24
base OneSettings??
and ios isnt?
shut up
no
Ok well we pray for that then
Is that hard?
far easier than a PPL bypass
Is that mdc-like
Kfd
A13 for 150
make sure its really on that firmware
steal
Anyone want an 8 on 14.2
what currency is that
ask mike
he prob does
bad price
not for ios 16 testing

pretty good
eh
I’ve got some blobs
how do these get more and more unreadable
oh 110
Maybe
Lmao
zoom in
not in america
yea
so i cant judge your local market
triple tap the home button
im on mac
if that was the us market i guess it would be reasonable
it sucks balls
slightly on the higher end
im already finding the cheapest stuff i can
i zoomed in using the control key and mouse scrollbar
Make it bigger
real
need full res
man why do half of these mfs update to 17
fr
yeah but ass battery
hating myself every day for missing the 15.4.1 se
NPCs
fr
npcs that enjoy security
auto update is so forceful nowadays
shut up shep

@timid furnace this is the kind of shit that i have to scroll through just to find “normal” deals in other countries
apple's actually harming security because people intentionally stay on old versions
i would happily be on latest if i could sideload and disable shit like on m1 macs
fixvx
WHO BUYS SE2 FOR $200
real
someone under a reddit post said they went from 16.1.2 to 17.0
Oh cool
nooooo
what is this
se 2020
i will never forgive the dude who realised you could update to 17.0 and keep TS
made so many mfs update for no reason
😭
that was me
id rather be on 17.0 than 16.x
i work for apple
even 17.0 ran better than 16 ever did
i got $5 for every user that did that
ky
no we need to all blame dhinak for discovering the delay ota method in the first place
16.1 been goated stable for over a year
no lets go a step further
17 has done nothing to me
gir doesnt want people to be safe
blame apple for writing the code for it
true
fucked up orwellian nightmare
17 is basically just bait to make you update
for real
me on 15.2.1
17.0b1 on iphone 12 mini 
id say stop buying apple junk and get a pixel but tensor is fucking dogshit so dont
poor phone
just wait till they start making their own chip
12 mini enjoyers

13 mini is a lot better but such an incremental boost i dont want one
just downgrade using purplerestore frfr
its $115
its been booted once to install it back in june and has been off since then lol
i work in sales
i should sell my 15.4 xs max 256
ill give you 20 bucks
im sure you'd be able to bribe someone
server owner
fr
looool
iphone 13 mini but 4g ram
how much storage do you guys use on your phone
deal, shits cooked (literally)
poverty
i use like 50-55
aaron has the connections not me 
like 85-90
lets see
i dont get the 2tb phone mfs
64.8 GB
use a pc??
fr
i use a lot but then again i store isos on my phone so
real
ventoy for iPhone
but to be fair exporting photos on windows is ass for some reason
128GB is more than enough if you don't store movies, music on your phone
and u have 50GB iCloud
thats
(reason is "buy a mac")
awfully specific
fr
my mac got almost as much ram as my iphone does storage 
i use the android equivalent 
the apple brain cannot imagine this
96gb 
icloud+ trial 
chad
apple ram too
@timid furnace you wanna join the orange name only dev channel 
i make work pay 
oh based
his name aint orange.
HE HAS IT
IDC
where even less development talk will occur? 
ITS NOT ORANGE
yes
CENSORSHIP
it's mostly icraze sharing stupid stuff and me and statur working on str_patcher
this shit's gonna work till 2030 I swear

infinite free trials
(mostly me pestering him to work on it)
facts
guys which disorder do i want?
👍
it'll probably just be a hidey hole for when #development becomes cluttered
but sure add me
oh it is for sure
i will have very good contributions
the OOP in that thread is crazy

how do i get orange name?
i found one on 16.2 but the screen is scratched
mfs cant look after their phone for a year
develop something
like
I mean it does have scratches
screentimebegone beta 2
jade 1 (but good version)
100%
oh i used that before what’s wrong w the current b1
twas but a joke
true
Yep. Interestingly it appears to work for people on other jailbreaks though
r.i.p
I fairness 16.? could be inferred as “iOS 16?”
sure it sounds stupid
maybe they need to charge the device again
I’ll get mine soon enough
Could be 16.0.0
never
also its not a channel, it's a thread 🤓

No we have a channel without you


“developer”
imagine being obligated to help people

I like repeating can i be a genius
why did you never get genius back
hes asian
true


Do you use storyboard or SwiftUI?
You should feel at home when dealing with em cause you have the same level of intelligence
Neither
finally
¯_(ツ)_/¯
Why 😭
cause it is lame
the account just does that
worlds most intelligent jailbreaker
How to get fame using other people’s work
Exactly 😅
step 1 - jailbreak
Who pinged?
do these accounts actually make money
I hope not
So, I’m guessing if this is truly the case, doing memory stuff like patching spinlock panics and old abi wouldn’t be possible either? :/
If it’s the case, nothing changes, you can’t go beyond what we currently have with Dopamine
I see
is it not everything needed for a 16.5 arm64e jb
yeah with engagement twitter cuts them a check
For example, as Nightwind said, patching spinlock panics and oldABI stuff
that one account with the cydia pfp used to piss me tf off
I was about to write a rant against them last year publicly but I decided that wasn't the best course of action
but these accs need to do more than just reposting lol
which one
OH MY GOD
oh that's the one i was talking about
listen to one of his twitter spaces and your brain will fucking melt
toooooooo much yapping brah
I tuned in once and it was like hearing a 3rd grade science project presentation lol
oh i thought u meant assciated press
yeah i HATE him too
Worst one
Hey, I'm making a tweak and there is something I do not understand, I'm trying to hook those functions and to do that, I've made a simple tweak, here is the code : ```objc
%hook Status
-
(void)setCredits:(int)arg {
%orig(INT_MAX);
} -
(void)changeCredits:(int)arg {
%orig(INT_MAX);
} -
(int)getCredits {
return INT_MAX;
}
%end```
Sadly, it doesn't seem to work, can someone explain me what I did wrong
Oh, maybe this falls under the piracy rule, lmk if it does :c, I'll remove the post
Those are C++ funcs, you’re hooking them as if they were objc methods which they’re not
Oh thank you !
would hookf work in that case ?
Yeah
thanks !
No face is for me 😢😭, I was playing with the demo loop app and the Face ID one and I like got The Face ID one to like right before it scans ur face. And now I don’t have Face ID and passcode in settings anymore. Pleas help
🙏
is that snapper ?
snapper 2
@native dune
?
Also, there is one last thing I miss, what about the class named Status, how do I declare that the method is inside the Status class and not another ? Do I keep the %hook Status or there is another keyword I forgot about ?
Lol idk maybe don’t mess with demo stuff
I didn’t think it would disable Face ID
Buddy literally just go searching in ur preference plists
%hook is for objc stuff
I haven’t messed with c++ stuff so
Yeah I figured that out, i've also found the MSFindSymbol thing
not really sure
Thank u, this is y I asked
@gaunt stone when hooking c++ stuff, you don’t have to do that
In that case, how can I fix my code ? 🙏
I've made a new version
%hookf(int, getCredits, void) {
return INT_MAX;
}
%hookf(void, setCredits, int amount) {
return %orig(INT_MAX);
}
%hookf(void, changeCredits, int amount) {
return %orig(INT_MAX);
}
%ctor {
%init(
getCredits = MSFindSymbol(NULL, "__ZN6Status10getCreditsEv"),
setCredits = MSFindSymbol(NULL, "__ZN6Status10setCreditsEi"),
changeCredits = MSFindSymbol(NULL, "__ZN6Status13changeCreditsEi")
);
/*%init(setCredits = MSFindSymbol(NULL, "__ZN6Status10setCreditsEi"));
%init(changeCredits = MSFindSymbol(NULL, "__ZN6Status13changeCreditsEi"));*/
}``` but logos is complaining about it
What’s it saying
Tweak.x:27: error: fell off the face of the planet when we found a '}'
make[3]: *** [/Users/javaskid/theos/makefiles/instance/rules.mk:375: /Users/javaskid/Documents/dev/tweaks/gof2infinitemoney/.theos/obj/debug/arm64e/Tweak.x.m] Error 255
make[2]: *** [/Users/javaskid/theos/makefiles/instance/library.mk:52: /Users/javaskid/Documents/dev/tweaks/gof2infinitemoney/.theos/obj/debug/arm64e/GOF2InfiniteMoney.dylib] Error 2
make[2]: *** Waiting for unfinished jobs....
make[2]: *** [/Users/javaskid/theos/makefiles/instance/library.mk:52: /Users/javaskid/Documents/dev/tweaks/gof2infinitemoney/.theos/obj/debug/armv7/GOF2InfiniteMoney.dylib] Error 2
make[2]: *** [/Users/javaskid/theos/makefiles/instance/library.mk:52: /Users/javaskid/Documents/dev/tweaks/gof2infinitemoney/.theos/obj/debug/arm64/GOF2InfiniteMoney.dylib] Error 2
make[1]: *** [/Users/javaskid/theos/makefiles/instance/library.mk:37: internal-library-all_] Error 2
make: *** [/Users/javaskid/theos/makefiles/master/rules.mk:146: GOF2InfiniteMoney.all.tweak.variables] Error 2```
you maybe have an idea ?
well there's your answer
nvm
it was not this
I missed a */ at the top
it compiled no code 😭
Where might that be
logos: warnings being treated as errors
Tweak.x:24: warning: tried to set expression for unknown class or function getCredits in group _ungrouped
make[3]: *** [/Users/javaskid/theos/makefiles/instance/rules.mk:375: /Users/javaskid/Documents/dev/tweaks/gof2infinitemoney/.theos/obj/debug/arm64e/Tweak.x.m] Error 1```
( @proper reef )
use grep buddy
What do I search for
ok
Is Touch ID the oop
yeah alongside CGRect *rect = [[CGRect alloc] init];
Wooo
Idk grep it it like “grep passcode”?
is discord oop
grep -R 'string' dir/
thanks for pasting what I linked
you're better off searching for terms like biometrics @acoustic imp
I found that first 
K
Also do I need to be root ?
is K OOP?
idk abt being root but u spelled passcode wrong lol
Ofc I did
su -c ‘shit’ is my beloved
bplist 
try demo
??/
does this method not exist??
I swear to god it used to?
looks like it changed to _simulateHomeButtonPressWithCompletion
If it doesn’t use the like additive touch method or sm
Assistive*?
🤷♂️
Little more info
Dk what to do with it
try deleting these 2 lines
K
It’s gone but it didn’t fix it
mayne idk restart or whatever
Il do this ?
K
What does it mean when it says like “operation not permitted
your current user (mobile) isn't allowed to do whatever you're trying to do - and you need to elevate into another user like root
I am root tho
then it's not allowed for root or mobile
In case anyone needs to hook C++ functions here is how you can do it.
- First get a pointer to that function using MSFindSymbol(IMAGE, Name); (Image can be null)
- if that pointer exists you cna use MSHookFunction(pointer, trampoline, oldFunction)
(http://www.cydiasubstrate.com/api/c/MSHookFunction/, https://github.com/rllbe/FORCEDEXIT/blob/master/Tweak.xm)
@slender glade should I try factory reset my phone ?
yea
Why are you using shitty software
just use settings
💀
to reset your phone
i wana backup
use itunes ?
i think it will make me update
backuping no
fuck
yes
🥲
also when i resete deos it delete everything in var mobile documents?
what about restpring tho ?
restoring the back up...
this pircay>>>
bro used chinese spyware
move your finger

You can’t be sending free thumb pics
what r they gona do, see that im looking up oop 24/7
??
is the thumb the OOP? bc i can set one the finrges to hidden but its not chnaging the postiotns. OR is this a thing with the OOP and i didnt set the proporty stuff right so the HAnd deosnt chnage it (cant chnage it)?
correct
i didnt expect to be correct
never expect to be correct just be glad you are
yeah you shouldn’t
Bro got webbed fingers 💀
i need some daemon running as root to move folder to /var 🙏
/uj never seen webbed fingers before holy shit thats interesting
Nah that’s my thumb concaving
why not just move the file normally lol
- Root
- Sandbox
Wtf
How the fuck
Did it reply to that
_ _
this on TS?
It’s in jailed mode he’s talking about
No its to install ts
how you gonna have a daemon then lol
Something running as root has to move a folder to /var tho
Idk maybe trick some daemon running as root to move a folder
Find a path traversal vulnerability
@sonic totem are u familiar with apple demo stuff, like the demo face ID thing
or do you know where the plst file is for the settings app?
like where "faceID and passcode" would be disabled?
what did they rename restrictions to again
in what
in ios
like for screentime?
please
ok
thank u thank u thank u
(i know how to do it, that why i offered)
oop
@timid furnace
No idea, sorry
oml what is with people and demo apps
i was bored
delete dynamic island and then we'll talk
5 second load time

gime it idc
lmfao
nah hold on
force showed the touch id cell

Nuh uh
@acoustic imp dms
inject a dylid into it
smh not dropping the phone at the end like that guy on twitter
thx
run that back turbo
run that back turbo
run that back turbo
😭
@radiant idol it deosn work
L
🥲
can u dycrpt the dmeo app and see what it chnages ?
is it even encrypted to begin with
idk
the demo app probably deletes the cell so people dont enroll in face id in stores
send me this tweak
i'll test if it works
ok
@acoustic imp What are u making
oop
is there a way to repackage a .dylib file into a deb that injects into the same app?
its what im trying to fix
I thought u was making an oop ios 15 music player ting
theres no tweak version of that tweak, only one pre-packaged with the ipa
What are u fixing
@hexed knot i broke/disabled faceID
gave up on that
sideloadly, injects dylids into ipas
yes
...and if you delete the app?
you'll need to come up with a control file and add a filter plist, but yes
i want to do the opposite, extract the dylib (which i did) and make it into a deb
and rebooted
how
^
a deb file is just an archive format
So u downloaded the face id demo app and now it says u cant have face id if u have the demo app
well i DL it, ran it and did sm and it disbaled face iD or sm
idk
any useful links that show me how to do this? i'm not experienced at all in this. i got theos installed tho
did you install the face id app or did you install the whole demo stuff
Lol
or the demoloop app
demoloop and faceid app
w TS
this is why you dont install stuff you shouldnt
how was i supose to know i shouldnt
literally is a face id demo in store
just use OOP to fix it
nightwind you set the filter plist right
yes
ok yea it doesnt work
itms-services://?action=download-manifest&url=https://demoupdate.apple.com/install/4.8/demoupdate.plist
are you trying this on a touch id device
Maybe decrypt the binary and check the strings for plist paths?
oh yea good point
thats what i was trying to say but idk how






i dont think its gona connect