development

[acoustic imp]

bassically, i want to somehow move the UILabel on the music player on the LS to the side of the like bar instead of uder

it

one sec il send a ss

[proper reef]

ok so is that uilabel a special subclass of the uilabel class?

[acoustic imp]

i think jus regular UILabel

[proper reef]

ok so get the bundle id of the widget or whatever

[acoustic imp]

not widget

its the music player on the ls

[proper reef]

ohhh ok

[acoustic imp]

ios 15

[proper reef]

well get the bundle id either way

[acoustic imp]

com.apple.springboard

[proper reef]

ok

then hook UILabel.

[acoustic imp]

im using/modify tinywidget14 to look like ios 16 MP

[acoustic imp]

how exaclty

like i have the super view hooked

[harsh junco]

More like springboard.apple.com

[radiant idol]

poor guy

[proper reef]

the superview of the uilabel?

[acoustic imp]

yea

[proper reef]

ohhh ok this is much easier then

[harsh junco]

Who

[proper reef]

so hook addSubview to listen for it to add the UILabel subview

[acoustic imp]

like -(void)addSubview { }

[proper reef]

yes

but do the actual method def

[radiant idol]

are you trolling

[proper reef]

with arguments

[proper reef]

is there a better way

[radiant idol]

he's just trying to move a ui label

[acoustic imp]

cant i do like a UIView *ellapsedtim = (some alloc objc magic)

[radiant idol]

no need to hook -[UILabel addSubview:]

[proper reef]

actually

yeah you probably can

but not any alloc stuff that'll make a new one

[acoustic imp]

but i was told i need to hoo the setFrame bc ios updates the thing like every milli second

fo the time chnage

[acoustic imp]

ok

its an ivar, do i do that thing

like in ArtFull?

UIView *elapsedTimeLabel = MSHookIvar<UIView *>(self, "_elapsedTimeLabel");

[radiant idol]

this is the correct way, but you don't seem to understand how OOP works yet so that's why I keep telling you to learn OOP first...

[proper reef]

no no

you aren't trying to change what the variable refers to

just move it

[radiant idol]

what

[acoustic imp]

ios doenst "update it every milisecond?"

[radiant idol]

no

it only updates when it needs to

[acoustic imp]

it sets the text

then why does it move itself back when i move it with flex?

NSLayout thing?

[radiant idol]

probably

LEARN. O. O. P. 😭

its like talking to a brick wall

[acoustic imp]

make a github to teach me 🙏

[radiant idol]

hell just write some object oriented python or something i dont know

[harsh junco]

Ask hyd to warn him for not knowing oop

1 point for 1 oop question

[radiant idol]

yes

[acoustic imp]

i like games

[proper reef]

so you're going to want a reference to the uilabel probably

[acoustic imp]

yes

but idk how

then i was also told i need to to CGRectMake(x,y,h,w)

[radiant idol]

and we all know how that went

#development message

[acoustic imp]

but i was also told i shouldt hard code my like positioning so i should use NSLayout stuff

[acoustic imp]

its pinned...

[proper reef]

also no CGRectMake is not the OOP

it is coregraphics which is non OOP

[acoustic imp]

thats not what i meant

to late now

but how do i like "select" the UILabel then chnage its attributes

yea i should just stop

[radiant idol]

L
E
A
R
N

O
B
J
E
C
T

O
R
I
E
N
T
E
D

P
R
O
G
R
A
M
M
I
N
G

[acoustic imp]

donde

[proper reef]

can you get the tag for the uilabel

[acoustic imp]

elapsedTimeLabel

its like UILabel *elapsedTimeLabel

right?

[proper reef]

no no, the tag, its a number

[acoustic imp]

oh like the ##x##### thing?

[radiant idol]

bruh just hook the superview (or the superview's controller) and then get a reference to the label using the ivar or property. then do what you want with it

whats so difficult about this

[acoustic imp]

it doesnt work

[proper reef]

omg i was being stupid, yeah that would be so much easier probably

[acoustic imp]

thats what ArtFull does and i tried it

[radiant idol]

ur doing it wrong

idk

[acoustic imp]

I COPPIED ARTFULL

[radiant idol]

idc

ur doing it wrong

[acoustic imp]

its the mshook ivar thing right

[proper reef]

try uh

[acoustic imp]

like i said, i can set it to hidden in my giberish oop mesgae but CGRect thing dont work

[proper reef]

UIView *elapsedTimeLabel = [self _elapsedTimeLabel];

[acoustic imp]

ok

[proper reef]

try that

[proper reef]

wait

so you do have a reference to it

[acoustic imp]

did

i jsu deleted it

[radiant idol]

im getting a headache reading this

[proper reef]

does this let you hide it

[acoustic imp]

i will try it, one sec

[proper reef]

also can you NSLog stuff

[acoustic imp]

no, i dont have a mac

well

a mac i can connect my phone to

[gaunt stone]

@acoustic imp can you check dms

[radiant idol]

uh oh

[proper reef]

you can't get debug output???

[acoustic imp]

how elts would i get it?

anotine?

antoine*

dam they go fast

i could also use Chinese piracy/spyware?

[proper reef]

yes, Long Live Chairman Mao!

[acoustic imp]

@proper reef

@interface MRUNowPlayingControlsView : UIView
    @property (strong, nonatomic) UIView *volumeControlsView;
    @property (strong, nonatomic) MRUNowPlayingHeaderView *headerView;
    @property (nonatomic) UIView *_elapsedTrack;
    @property (nonatomic) UIView *_remainingTrack;
@end ```

[harsh junco]

Do you need libimobiledevice?

[acoustic imp]

this is how ArtFull did it

[harsh junco]

Static?

[acoustic imp]

i have it but its anoying to use

[harsh junco]

Better than spyware

[acoustic imp]

🤷‍♂️

[harsh junco]

😭

I believe in cli supremacy

[acoustic imp]

i like buttons

an guis

[harsh junco]

Fuck buttons, stdin

[proper reef]

ok so go back to what you were doing before

[acoustic imp]

ok

now what?

[proper reef]

so you can disable it right?

[acoustic imp]

respringing*

ope safemode

[proper reef]

wait do you still have the dealloc thing

[acoustic imp]

yes

no

[proper reef]

ok ok good

[acoustic imp]

i just have so manu tweak my phone just die sm times

its normal

so what now

elapsedTimeLabel.frame =  CGRectMake(20, 30, 200, 50);```

?

[naive kraken]

ofc not

[harsh junco]

a wild opa appears

[indigo peak]

what do you use

official Ida, hopper?

[harsh junco]

ghidra

[crisp frost]

I pirated binja

[acoustic imp]

does not work

[proper reef]

it probably uses uilayout constraints which means i dont know how to figure this out without debug info

[native orbit]

windows ida on mac 🤝

[acoustic imp]

ok, how do i get debug info?

[indigo peak]

isn’t hopper paid

[proper reef]

that's a good question. i forgot how to do that.

[radiant idol]

the font gives it away ✅

[harsh junco]

ghidra

[acoustic imp]

@radiant idol how do i get debug stuff again without a mac

[native orbit]

that crispy windows 98 ass font

[crisp frost]

Ida users when they cannot load iOS bootrom 240 but binja can do it no problem

[proper reef]

wait it can?

[radiant idol]

use
oop

nah idk use antoine or something

[acoustic imp]

ok thats what i said

[indigo peak]

me when I don’t need to load iOS bottom 240 so Ida works just fine 💀

[acoustic imp]

but like dont i have to search for sm

out of the like 69000 logs

[native orbit]

ios bottom

[harsh junco]

ios bottom

[indigo peak]

@grave sparrow hopper crack where 🤭🤭

but I didn’t buy it 🤯🤯

[crisp frost]

I’ve never used hopper

[indigo peak]

ok where’s macOS ida crack

[proper reef]

i use ida in CLI mode

[primal perch]

binary ninja 🔥

[crisp frost]

I have native macOS binary ninja 3.4 crack

no wine

[primal perch]

no i don’t

[indigo peak]

so do I

I have ida 7.7 windows

[proper reef]

i have a native macOS IDA Pro crack but its old

[indigo peak]

and wine sucks balls

[acoustic imp]

@proper reef so what do i do now, what debuging do u need?

[primal perch]

i have native binary ninja 3.5 for everything because it’s cheap

[proper reef]

ok so now that you have the uilabel

[primal perch]

75$ once then 38$/yr for updates

[crisp frost]

I have Ida pro 8.3 crack

[primal perch]

just be a student

[crisp frost]

Although I never use it because IDA sucks

[primal perch]

easily worth that price

[indigo peak]

windows or mac

[crisp frost]

windows

[indigo peak]

😖

[proper reef]

NSLog([[theVariableName constraints] description]);

[gaunt stone]

OmG pIrAcY

[primal perch]

just buy home for arm poors

[indigo peak]

is there anyway to make wine ida look better

[timid furnace]

no ida macos crack since 7.0

[primal perch]

365/yr

[proper reef]

yeah thats the old one im talking about

[gaunt stone]

There is 8.3 IDA crack

But either way binja is just better

[harsh junco]

No Mac

[timid furnace]

$30 a month 💀

[acoustic imp]

good?

[gaunt stone]

Windows crack

[primal perch]

dollar a day for ida home

kinda steep so i don’t

[proper reef]

i just wanna be able to buy my software once and use it forever

[primal perch]

binja way better deal and permanent license

[timid furnace]

i just use windows ida on macos

or well

i usually use ida free

and i use windows ida if i need arm64

[primal perch]

its getting better quickly

[crisp frost]

can I legally send the binja crack here if it’s in a encrypted archive so it’s technically not directly distributing cracks (jk)

[indigo peak]

see I don’t got money

so

[proper reef]

just tell us all where to find it

[primal perch]

i don’t think the decompiler beats hexrays quite yet but the api and niceties around it are already very good

[crisp frost]

I got it from someone

It’s 3.4

It has native for macOS windows and Linux

binja so good

[acoustic imp]

@proper reef

Tweak.xm:127:11: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
                                NSLog([[elapsedTimeLabel constraints] description]);
                                      ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Tweak.xm:127:11: note: treat the string as an argument to avoid this
                                NSLog([[elapsedTimeLabel constraints] description]);
                                      ^
                                      @"%@", 
1 error generated.```

[proper reef]

ok fine

[naive kraken]

official ida

[indigo peak]

mhm

how does official ida even work

[proper reef]

NSLog(@"%@", [[theVariableName constraints] description]);

[indigo peak]

like how do you download it

[proper reef]

you sell your soul

[indigo peak]

like do you enter a license key once you download it

or do you provide the license key in order to download it

[proper reef]

the latter

if it was the former we'd already have ida 8 cracks for mac

the reason we don't is nobody has put an ida 8 for mac binary out there

[harsh junco]

Ask opa

[acoustic imp]

@proper reef what do i search for in logs?

[proper reef]

uh wait

NSLog(@"tweak %@", [[theVariableName constraints] description]);

[primal perch]

can’t imagine why, it’s not like it’s thousands of dollars

[harsh junco]

Get

Rekt

[acoustic imp]

😡

can u get libmobile device to lgo to a file?

bc 3 u keeps crashing

[harsh junco]

Yes

[acoustic imp]

how

[harsh junco]

idevicewhatever >> log.txt

[acoustic imp]

but like where does it go

the file?

[harsh junco]

Your current working directory

[acoustic imp]

will i got in my Cdrive

[harsh junco]

pwd

[harsh junco]

Whatever directory you are currently in

[acoustic imp]

um

[gaunt stone]

OneDrive 😭

[acoustic imp]

my 1tb that my mom pays for 👍

[gaunt stone]

😭

[acoustic imp]

its probly that lol

[gaunt stone]

How useless is that

[acoustic imp]

photo backup

and

yep

[gaunt stone]

FR easy backup

[proper reef]

hey its better than sharepoint

[gaunt stone]

I might buy iCloud + just to have an online backup

[acoustic imp]

and nice file sync

[acoustic imp]

i pay for the 1$ one bc i have 64gb phone

but its 48/50 rn

[fluid lintel]

Hi guys, but is there a poc for ktrr by-pass that is talked about so much?

[radiant idol]

no

[primal perch]

skibide

[radiant idol]

filter bypass :/

@torn oriole ban this user

[acoustic imp]

@proper reef

[proper reef]

just

search 'tweak'

[proper reef]

ohhhhhh

ok

wait

[acoustic imp]

everything has tweak in it

[proper reef]

whats with the indentation

[acoustic imp]

its vscode

on windows

👍

[proper reef]

do you really have to do os_log

i think you do

[acoustic imp]

its

idk if its os logs

[proper reef]

it is

[acoustic imp]

then thats this

well

[harsh junco]

You forgot >>

It’s important

[acoustic imp]

doenst work either way

🤷‍♂️

[timid furnace]

does the help option work

[acoustic imp]

what option '>>' ?

[hexed knot]

btw description wont give you anything

and if it does, nothing useful

[acoustic imp]

^

[hexed knot]

why dont you just connect ur phone with usb and do idevicesyslog

without the udid

[acoustic imp]

it does the same thing

maybe 3 u like fircked it or sm

[hexed knot]

yeah he told you what to do to be able to seach for ur logs

[timid furnace]

-h ...

[acoustic imp]

no one told me that, and doesnt work even on its own so

[harsh junco]

Is your libimobiledevice up to date

[acoustic imp]

it worked 5 min ago

[timid furnace]

you are missing DLLs

or you have somehow broken idevicesyslog very badly

[acoustic imp]

of its just the .exe ina folder

nothing elts

oops

🙈

[faint lion]

libimobiledevice

Up to date libimobiledevice builds:

• Windows: https://github.com/L1ghtmann/libimobiledevice/releases/download/suite-exe-074b320/libimobile-suite-latest_x86_64-mingw64.tar.xz
• macOS: brew install libimobiledevice libirecovery
• Linux: https://cadoth.net/~nyuszika7h/ios-builds/libimobiledevice-static-linux.tar.gz

Added by nyuszika7h#0001 | Used 312 times · Apr 6, 2021, 11:27 PM

[ashen birch]

actual recent limd builds for windows? wild

pymobiledevice3 on top

[acoustic imp]

working now

[hexed knot]

i think theyre recent since 2021

[hasty ruin]

Power of oop fixed it

[acoustic imp]

@timid furnace like this? .\idevicesyslog.exe -u 00008101-001C213902F0001E >> 12minilog.text

?

[hexed knot]

yesss

[acoustic imp]

yes

[harsh junco]

Is windows build static

[hexed knot]

yes

[harsh junco]

W

[timid furnace]

idk what you are trying to do but sure

[acoustic imp]

@proper reef Dec 28 18:46:30 SpringBoard(TinyWidget14.dylib)[3666] <Notice>: comardekewls ( )

nothing

[proper reef]

Ok huh

[hexed knot]

like i said

[proper reef]

(I haven’t done this in forever so uh I’m trying)

[acoustic imp]

no worries

@hexed knot how could one like see the NSLayout/constraints thing of a UILabel

[hexed knot]

print the nsarray of the constraints

but the easiest way

is learn how to do constraints yourself

[acoustic imp]

@proper reef how would i do this?

[hexed knot]

https://stackoverflow.com/questions/8402772/how-to-print-nsarray-objects-via-for-statement-or-enumeration

@faint stag i recommend googling your questions once in a while

oops

@acoustic imp

[acoustic imp]

got it

would this work? NSLog(@"elapsedTimeLabel.constraint.count %lu ",elapsedTimeLabel.constraints.count);

from github

[primal perch]

Binary Ninja 3.6

developed by @silver rampart

[acoustic imp]

bc it says 0 @proper reef

Dec 28 19:09:34 SpringBoard(TinyWidget14.dylib)[750] <Notice>: elapsedTimeLabel super self.constraint.count 0

[faint stag]

smh

[indigo peak]

@sonic totem not real

[sonic totem]

lol

None of Reddit is real

[acoustic imp]

SpringBoard?

screen shots ?

with oop knowledge?

[radiant idol]

are constraints oop

[radiant idol]

how did you butcher that spelling so bad

i cant

[acoustic imp]

i sounded it out👍

userspacereoot to the resuce?

[hasty ruin]

oop copypasta has better spelling tbh

[acoustic imp]

isnt it jus like, ur this # under this object/element, then ur this # ontop of this element?

[native orbit]

its 2023 and some people still cant use header guards correctly

[radiant idol]

ur messages get more and more cryptic every time i read them

[acoustic imp]

probably

[acoustic imp]

say them outloud and they will make sense

[radiant idol]

it makes even less sense

[wicked summit]

gm

[hasty ruin]

go away objc hater

did you not read the pins :/

[wicked summit]

Objective-C is increasingly irrelevant

Write Swift or C smh my head

[hasty ruin]

You’re increasingly irrelevant

ugh

[timid furnace]

no

that title goes to MIPS

[hasty ruin]

I hate agreeing with capt

[timid furnace]

[hasty ruin]

But I have to

🤝

[timid furnace]

all my homies hate AT&T syntax

[sonic totem]

@timid furnace please help me out in palera1n server

The guy is now asking how easy it is to “hack the verifier” in the BootROM

And load a custom OS

[acoustic imp]

do constraints overide CGRect stuff?

[native orbit]

i just wasted 15 minutes debugging just for the issue to be /System/Library/LaunchDaemon/

[hasty ruin]

go to the other thread rq

[radiant idol]

@hasty ruin lol i think that Emerald15 dylib is literally just your ComplicationsFix word for word

[hasty ruin]

yeah lmao

maybe just the whole dylib

[radiant idol]

probably

@hasty ruin

lol

that's funny

[native orbit]

this makes me never wanna touch a computer again

[hasty ruin]

real

[hasty ruin]

dont use xcode

[radiant idol]

and when it fails at the end

its so fun

[elder scaffold]

Please note that for us this is a shit reply.

[radiant idol]

a what

[sonic totem]

[primal perch]

@grave sparrow joe

you shake em we bake em

[acoustic imp]

can u set constraints to place an object outside the superview?

like set the right attribute of the subview to be like less than the left of the super view? and the left attribute of the subview to the left of the parents parent view?

[minor cargo]

what doesn’t kill you doesn’t hurt you

[timid briar]

Lol sorry
I am learning Japanese actually but I don’t know enough now to write something that is much better

[elder scaffold]

I'm not talking about skills.

[timid briar]

Oh? I don’t understand

[elder scaffold]

If I get that reply I'll definitely block

[timid briar]

How come exactly? I’m sorry I just don’t understand why

Is the translation just rudely worded or something?

I just deleted it anyway

[elder scaffold]

I interpreted from that sentence that the person had no intention of giving access to the average user.

[timid briar]

Oh okay

[elder scaffold]

and sending a reply asking for public access there sounds like begging.

[timid briar]

Oh okay thanks for letting me know

[elder scaffold]

japanese twitter users are strange

basically

[timid briar]

Is it just something like cultural/social differences in a way, when compared to other countries like the US? Or is it mostly related to twitter and related social media

[elder scaffold]

honestly i don't know

[primal perch]

POV not poor

[elder scaffold]

I might be a little annoyed at the translated replies from English-speaking countries because of Elon lol

Since Elon has made it possible to monetize Twitter, some people are replying to popular tweets with translated Japanese in large numbers in order to get impressions :/

[timid briar]

Oh I see
Yeah, I understand that lol
People trying to engage in endless communities even if they don’t speak the language just to make money

[acoustic imp]

whats causing safemode?

[radiant idol]

your setFrame: hook in MRUNowPlayingLabelView

[hasty ruin]

constraint issue

[acoustic imp]

I kinda jus copy pasted from a guide so, that’s what I get

[acoustic imp]

Thx

Wait I’m dumb, I put the constraint code in the setFrame method hook

[granite frigate]

oh sorry

[primal perch]

"security.workspace.trust.enabled": false

https://tenor.com/view/mujikcboro-seriymujik-gif-24361533

[pearl sail]

always trust your haters they never lie

[gaunt stone]

https://www.reddit.com/r/jailbreak/s/dCoYsufYky

😭

[slender glade]

my sister pissing me tf off rn

so

[harsh junco]

@radiant idol

[unkempt magnet]

Too much mitigations fr:

[sonic totem]

How did you inject into the phone app?

Deplatformized?

[sonic totem]

Replacing launchd is always an option

[unkempt magnet]

1. Make bigger size to phoneapp (about 2mb),
   funVnodeRedirectFolder("/Applications/MobilePhone.app/MobilePhone", "/Applications/Setup.app/Setup"); (no fclose at all when getvnodeatpath)
2. use MDC bug to coretrust-signed MobilePhone binary.
3. run mobillephone and opainject that pid.

Sorry for my bad english.

will try to use and utilize fun_vnode_dump_entitlements if I can change some data.

No, it just panic at all

[sonic totem]

That’s really cool

Is that arm64e?

[unkempt magnet]

yes

[elder scaffold]

ios16 suck

[frank fossil]

funVnodeRedirect__Folder__ works on file?

[unkempt magnet]

yes, but unstable than folder.

[frank fossil]

interesting

[granite frigate]

if only it works across mount points

redirect preboot/patchedlaunchd -> /sbin/launchd

[frank fossil]

preboot is separate volume
also I thought of redirecting /tmp to /sbin before, as both are in same mount point and tmp is symlink, but apfs driver panicked instead

[fluid lintel]

Sorry for the ignorance. But why do you patch Launchd? What is the purpose?

[granite frigate]

launchd is the init of iOS

[frank fossil]

Hold on, if you must not close(), there won’t be a way to keep it survive over userspace reboot..

[acoustic imp]

Is that OOP

[gaunt stone]

pov : @acoustic imp when he sees OOP

[acoustic imp]

Real

Does this look like iOS 16+ (I used flex for the UILabels)

[harsh junco]

OOP..deb

OOPUntether.deb

UnOOP.deb

[wooden yarrow]

based

[minor cargo]

trollstore jailbreak

[noble zodiac]

It does, maybe make pause button smaller

[minor cargo]

wen eta

[hexed knot]

Is this oop..?

[granite frigate]

thin the music bar line

[cloud yacht]

What's up with the little music icon in the picture? Otherwise, it looks fine. Maybe recolour a bit of stuff.

[unkempt magnet]

Is it okay to remount /private/preboot as r/w and create new folder?
(Not modify/remove file)

I'm going to find way that replace and load another dylib for fun.

[sonic totem]

Should be

[timid furnace]

anything on the root besides the long UUID folder and active will eventually be deleted by a daemon

so you can make it, but it will eventually be deleted

[sonic totem]

It's writable by default on iOS 16+

[timid furnace]

you can make something inside the folder with no issues

[sonic totem]

But as long as you use the BMH folder

[unkempt magnet]

Thanks!

[proper reef]

How do I cease to be useless

[timid furnace]

idk

eventually

i think after a day or two

yes

no its a daemon that does it

this was discussed like

9 months ago

lmao

[proper reef]

Maybe just maybe once you change it it’ll solve the zefram bootloops

[young meteor]

impossible

[gaunt stone]

SEND THE TWEAK

N OW

I

want

It

[timid furnace]

AppleInternal (empty folder), private, System, usr

[gaunt stone]

😭

[timid furnace]

do you want like a tree or something

[gaunt stone]

Why empty AppleInternal 😭

[timid furnace]

[gaunt stone]

[proper reef]

real

[harsh junco]

[proper reef]

make it unempty

[harsh junco]

move diag.img4 here

[proper reef]

now can i get my xcode to work hmm

gonna attempt to downgrade it

[cloud yacht]

If it's a daemon just hook the bad boy and disable it. Or turn it off with launchctl

[timid furnace]

it is going to delete while unjailbroken

just leave it in the UUID folder lol

[hasty ruin]

solution: stay jailbroken

[timid furnace]

zefram

[hasty ruin]

Ah yeah my bad

[acoustic imp]

It’s like the worst tweak ever

I wanna make it work like iOS 16 at some point with like the large artwork on the LS

But I need learn Oop firs

[gaunt stone]

No ?

[slender glade]

is there a way to change numberOfLines for a PSSwitchCell

[acoustic imp]

Il send what I have so far, but I can’t promise like things will be aligned right bc I have it set for a 12 mini

Check dms

[gaunt stone]

Trying

[acoustic imp]

Yes but no work bc no oop

[gaunt stone]

Can you build it for rootful 🙏

[unkempt magnet]

🤔

[acoustic imp]

Oh yea one sec

[acoustic imp]

Silly cryptex

[radiant idol]

what does cryptex have to do with that

[torn oriole]

Why is it on cryptex

[elder scaffold]

ios16 suck (again)

[slender glade]

does anyone have an example of a tweak that presents a vc onto SB reliably

i'm in the trenches trying to make this reliable

[hexed knot]

mfs on that sub so unfunny

[sonic totem]

@indigo peak @radiant idol

[radiant idol]

LOL

[indigo peak]

[hexed knot]

its funny icraze staying serious

[radiant idol]

LMAO

[slender glade]

fr

[sonic totem]

It’s just like

[fluid lintel]

Yes I know this. But once it is patched there is no codesign that blocks it?

[sonic totem]

Why even bother

[radiant idol]

fr

at that point

[sonic totem]

CoreTrust bypass is the codesigning bypass

[radiant idol]

just like

disable codesigning

frfr

[sonic totem]

It’s embedded in the kernel lol

[fluid lintel]

A you sign it with fastpathsign. I didn't understand sorry. So you patch it to achieve what?

[sonic totem]

System injection

[kind herald]

delete the kernel then

[hasty ruin]

Same dude ripped a nexus deb and tried to upload to bigboss

[hexed knot]

lmaooo

[native orbit]

drm be like:

[native dune]

💀💀

Fuckin re

[radiant idol]

eta wen ntwerkdrm-crack

[hexed knot]

Icraze When will U be Selling Nexus DRM..?

[hasty ruin]

[native dune]

Fr how much is ntwerkdrm worth

[kind herald]

icraze when will you be selling nexus for free

[fluid lintel]

That is, how does it work? Is there an example I can see?

[sonic totem]

Not yet, it will be released at some point

(Hopefully)

[fluid lintel]

But do you do it by hijacking the process ports launched?

[sonic totem]

I’m not really sure what you mean by that

Do we do what?

The answer is probably not

[unkempt magnet]

"Library Validation failed: reason: mapping process is a platform binary, but mapped file is not."

Seems to be useless. Need to be platformize process first.

[fluid lintel]

Yes I was just curious, I wanted to see if you exploit something regarding the operation of mach ports or something else

[sonic totem]

It’s not to-do with Mach ports, no

[fluid lintel]

👍

[pearl sail]

More than your life

[native dune]

Yeah sounds about right

[pearl sail]

0 < ntwerkdrm worth

[west bloom]

bro just copied your text

[cursive rampart]

ok ntwerk addict

[indigo peak]

is it possible to hook an @protocol?

@protocol SomeDelegate <NSObject>
@optional
-(void)someMethod;
@end

%hook SomeDelegate

- (void)someMethod {
  %orig;
}
%end

[timid furnace]

no

have you written java

[gaunt stone]

java 🙏

java <3

[indigo peak]

i have, but never got too into it

[timid furnace]

protocol is basically just like an interface

[acoustic imp]

How do I remove this ? Or like find out how much it is ?

(The spacing)

[timid furnace]

(ignore the fact that you can have default methods, thats not a thing for objc protocols)

[gaunt stone]

answer my dms 🙏

[timid furnace]

you have to hook what implements the protocol

[indigo peak]

so

@interface SomeClass <SomeDelegate>
@end

and hook SomeClass

[timid furnace]

ye

[indigo peak]

ugh thats really annoying

[timid furnace]

you can get a list of what implements a protocol at runtime

[indigo peak]

really?

[timid furnace]

https://stackoverflow.com/a/20735457

[gaunt stone]

it works

[indigo peak]

oh shit

thank you

[gaunt stone]

Who can compile something for me on xcode ?

[hexed knot]

I cannot

[summer harbor]

Fellas

How can I make a tweak check if the app has jit enabled in obj-c ?

[summer harbor]

Lemee guess roothide bootstrap

[summer harbor]

@hexed knot 😫

[indigo peak]

int flags;
csops(getpid(), 0, &flags, sizeof(flags));
bool hasJIT = (flags & CS_DEBUGGED) != 0;

https://github.com/Rednick16/TrollStoreJitEnabler/blob/master/utils.m#L36-L38

Will this work? No idea

@summer harbor

[summer harbor]

I'll check it

Thanks @indigo peak

[left lantern]

https://github.com/RootHide/Bootstrap

yayayayaaa

finally public, gonna install in a few, hoping to see whats possible now that im on 17.0 as well :P

[indigo peak]

@radiant idol

camera spoof real

[harsh junco]

gpl it

[left lantern]

ayeeee

[radiant idol]

Sob emoji

[hexed knot]

now make someone on r/tweakbounty happy

[indigo peak]

real

[proper reef]

When will swift be deprecated

[acoustic imp]

is this oop

also fix game pigon

u boke it

[indigo peak]

laughing my ass off

[acoustic imp]

!

[indigo peak]

bro you have to tell me whats wrong with it

jerk off

[acoustic imp]

minigolf

like it doesnt go in the hole

it just vibrates and goes off

onsec i have video

Not jb *

@indigo peak

also no cheats for golf were active

[indigo peak]

whoops

i think the hook for it

is messed up

L

just get good

[acoustic imp]

opensource it

[indigo peak]

no

[acoustic imp]

🤷‍♂️

[indigo peak]

i know whats wrong

%hook GolfBall

- (bool)inside {
    return golfEnabled;
}

- (bool)hole {
    return golfEnabled;
}

%end

needs to be

%hook GolfBall

- (bool)inside {
    return golfEnabled ? true : %orig;
}

- (bool)hole {
    return golfEnabled ? true : %orig;
}

%end

[hasty ruin]

golfEnabled ?: %orig;

[acoustic imp]

is that y it crashes so much? and (is unstable)

[hasty ruin]

btw @indigo peak I enabled “show words” and the game screen went grey when I started playing (forgot name of the game, but it’s the one where you swipe letters to make words)

[hasty ruin]

No

[acoustic imp]

word hunt*

[harsh junco]

Who

1984

!!

[acoustic imp]

y does it crash so much?

[harsh junco]

This chat is so Oop

[left lantern]

you can make your own, i dumped the headers

[elder raven]

https://x.com/zhuowei/status/1685835987706847232?s=20

does anyone have a fix for the "unsupported pointer chain format: 0x000C" when patching arm64e to arm64

[wicked summit]

@indigo peak have you worked on making any word hunt tweaks?

[daring grail]

how to python

[indigo peak]

@grave sparrow is there a dir any app can access w a jb

bc i added a file to Application support, /var/mobile/Documents and [fileManager fileExistsAtPath:path] is false

even tho the file does exist

[native orbit]

do you have the right ents?

[indigo peak]

the tweak targets com.apple.UIKit and runs in any app

so no it shouldnt have special entitlements

[hexed knot]

capt do you have macos ida

cc @primal perch

[indigo peak]

now i cant fucking ssh

[hexed knot]

with m1 spport

[indigo peak]

what the actual fuck

[primal perch]

nobody does past 7.0

unless you buy it

[indigo peak]

kex_exchange_identification: read: Connection reset by peer
Connection reset by ::1 port 2222
make: *** [/Users/fiore/theos/makefiles/install/deb_remote.mk:2: internal-install] Error 255

[hexed knot]

https://tenor.com/view/kevin-hart-damn-woah-kevin-hart-gif-26425905

[indigo peak]

New connection for 2222->22, fd = 5
waiting for connection
Requesting connecion to USB device handle 1 (serial: sn), port 22
Error connecting to device: No such file or directory

[primal perch]

[indigo peak]

i did

i restarted iproxy

i restarted my mac

i userspace rebooted

well its not

ssh: connect to host 192.168.1.157 port 22: Connection refused

[native orbit]

just use windows one with wine tbh, works fine on m1

[indigo peak]

same thing happens with wireless connection

nop

exact same thing

even tho i rebooted

ssh: connect to host 192.168.1.157 port 22: Connection refused

[timid furnace]

yea check if sshd is running

well

check if the launch daemon is registered

[indigo peak]

hmmm

weird

i cant enable airdrop

wtf

[indigo peak]

how

palera1n dont work lmao

palera1n -> actions -> launch daemons and the button does nothing

i need it for a funny bypass

but i dont get it

i legit

was just working

earlier today

i go out for 2 hours and come back and its broken??????

[timid furnace]

connect iphone to computer

iproxy 2222 44

dropbear time

[hexed knot]

C’est la vie

[timid furnace]

launchctl list | grep ssh

[indigo peak]

nothing

[timid furnace]

ok

cd /var/jb/System/Library/LaunchDaemons

[indigo peak]

im rootful

[timid furnace]

bruh

[indigo peak]

is it just /System/Library/LaunchDaemons

[timid furnace]

i guess

check what the sshd plist is named and launchctl load it

[indigo peak]

yeah it is

[timid furnace]

ok then try sshing again

also make sure your ip is right

[hasty ruin]

bruh it's a checkm8 device
facing any issue? restore the device

[indigo peak]

is ssh in the name?

@timid furnace its /Library/LaunchDaemons/com.openssh.sshd.plist apparently

[timid furnace]

trol

[indigo peak]

according to sileo package contents of openssh-server

[timid furnace]

sounds right

i would check my device but its not jbed rn

[safe laurel]

@timid furnace

[indigo peak]

(alt acc)

[timid furnace]

uhhhhhhhhhh

your setup is broken

restore rootfs

[indigo peak]

💀

why was it working earlier tho 💀

[timid furnace]

idk

looks like something got chowned wrong

[cursive rampart]

have you guys developed any bitches

[indigo peak]

do i just install rootless

does that make it easier

BRUH

BRUH

I INSTALED PALERA1N AND IT STILL ERRORS

Requesting connecion to USB device handle 25 (serial: sn), port 22
Error connecting to device: No such file or directory

[lean ermine]

is uikit part of trustcache

[frail cedar]

@radiant idol i gotta ask, is there any news on if the CGRectMake is OOP or if uikit is part of trustcache

[radiant idol]

both are very much true

[frail cedar]

lets go

[granite frigate]

what does this mean

[lean ermine]

need kexploit to inject to uikit

[granite frigate]

wh

[slender glade]

What the fuck is he talking about

[pearl sail]

look at a mirror once in a while

[granite frigate]

do you just pick random words and join them together

[slender glade]

😭😭😭

[granite frigate]

its ok i do that too

[pearl sail]

Me on meth

[granite frigate]

Thank you methhead

[neat dock]

Do you think 17.0 will be compatible with a KFD/MDC-type exploit for using Misaka and the like?

[indigo peak]

@timid furnace
(root@localhost) Password for root@trapPhone:
(root@localhost) Password for root@trapPhone:
(root@localhost) Password for root@trapPhone:

more issues...

[hasty ruin]

login as mobile

then set the root password from there

(sudo passwd)

[indigo peak]

i just had to restart iproxy

bc i did that alr

but changes didnt show

so restart

ok now wheres mobilesubstrate 💀

its a video file

[native orbit]

ssh still cooked?

[indigo peak]

nope

just fixed

now i catn access files

lmao

[left lantern]

Mmm

[indigo peak]

ok i dont get it anymore
i used libsandy to allow for read at /
i set my path NSString to be "/Library/Application Support/tweak/file.txt"
i do [fm fileExistsAtPath:path] and its false

like what

NSArray* files = [[NSFileManager defaultManager] contentsOfDirectoryAtPath:@"/Library/Application Support/tweak" error:&error];
BUT THEN I DO THIS AND IT PRINTS OIUT ALL THE FILES IN THE DICRECOTRY

WHAT THE FUCK

im gonna fucking kill myself

my fm was null

https://media.discordapp.net/attachments/1092655250072154193/1092658385637359616/clap.gif

[slender glade]

literally how

[indigo peak]

i created it globally

[wooden yarrow]

always do error checking

[indigo peak]

but never defined

[wooden yarrow]

thumbsup

[slender glade]

literally why would you do that brah

[indigo peak]

monke brain

tahts why

[slender glade]

#define fm NSFileManager.defaultManager

[wooden yarrow]

isn't that basically treating it as a glob var

[slender glade]

unironically tho no reason to make a fm global

[slender glade]

yeah

but ig as like a compat thing so he doesn't change the 200 uses of fm

[indigo peak]

i changed it to not be global

💯

idk why i even made it global tbh

[frail cedar]

spartan has let fileManager = FileManager.default in SpareViews.swift (the random stuff file) because i got tired of putting it everywhere

but that's only because like 90% of the views use it

if only a few parts do, define it within that area (or two/three)

[drifting heron]

hey @snow python 👋 sorry to bother you but do you ever plan on updating RelocateMe to work on rootless JBs?

[primal perch]

inshallah midnightchips

[proper reef]

Something something face the wall

[olive peak]

Is it possible to modify the properties of all instances of a class, for example nsbundle

[hasty ruin]

Hook the setter method

of NSBundle

[olive peak]

is it on the apple documentation or how do i find it

[hasty ruin]

What’s the property called?

[olive peak]

BundleIdentifier

[hasty ruin]

bundleIdentifier?

or is it capital B

[olive peak]

yes that, no captial

[hasty ruin]

%hook NSBundle
-(NSString *)bundleIdentifier {
return @"balls";
}
%end

[olive peak]

does that work even if its readonly

[hasty ruin]

yes that’s the getter

autocorrect stfu

[olive peak]

oh right

thats why return right

because it gets nsstring

[hasty ruin]

If it had a setter (not readonly), it’d probably be something like this. Assuming they didn’t create a custom method for it

-(void)setBundleIdentifer:(NSString *)iden

[olive peak]

can i put that anywhere in the file

[proper reef]

no

it has to be in the %hook for the NSBundle

[olive peak]

i mean the %hook, can it be anywhere outside of a function

[proper reef]

it has to be outside a function yes

[olive peak]

so this would work

[proper reef]

most likely

btw is it possible to run an older xcode version on a newer macos?

the average xcode experience

[hasty ruin]

Try running the binary inside the .app, instead of the .app itself

[sonic totem]

Xcode.app/Contents/MacOS/Xcode

Should work

[fluid lintel]

1 ) Right click the app and select "Show Package Contents"
2 ) Navigate to Contents folder
3 ) Open the Info.plist file
4 ) Alter CFBundleVersion from 21815 to 22265
5 ) Save change
6) Right app and select "Open"

or as alfie said from terminal

[radiant idol]

Identifer

[hasty ruin]

jade

[radiant idol]

the person who made Emerald passed away in August :/

#announcements message :/

yep...

[hasty ruin]

emerald15 is a repackaged version of my complicationsfix tweak

because it also happens to fix emerald

made by pirates

[radiant idol]

by "fix" he means not crash

[hasty ruin]

time for jadefix

[radiant idol]

wonder if "PrysmFix" is possible

do it

trol

what iOS are you on lmao

oh I see

tbf I dont think Emerald was ever officially updated for iOS 14(?)

cuz

the guy left the community

hm

yea

let me see if there's anything about it on the waybackmachine

hm

I guess you're right(?)

source: https://web.archive.org/web/20210131154204/https://repo.packix.com/package/com.laughingquoll.emerald/

[gentle grove]

@lime pivot https://vxtwitter.com/lkarlslund/status/1740802159393034355?s=46

[faint stag]

one is affordability and the other is manageability
obviously with more people and systems you have a greater chance of weak links

[gentle grove]

🤓

[slender glade]

but he's right

[hasty ruin]

Imagine making fun of someone for spreading correct information

[gentle grove]

you

[timid furnace]

Anyone know of any processes that use FrontBoard

i want to see what entitlements i need

[cloud yacht]

This sounds like something you would do

[hasty ruin]

good idea

[hasty ruin]

My message was a reference

[olive peak]

what about getting the original value for logging

does self work

[hasty ruin]

log %orig if it’s a getter
log the first argument if it’s a setter

[olive peak]

like this? o is for objects right

[hasty ruin]

%@

[olive peak]

do i need to return or will it automatically return to the original function

[hasty ruin]

you need to return the value

NSString *orig = %orig;
NSLog(@"%@", orig);
return orig;

newValue 🤡

Just return @“” bozo

[pearl sail]

As always capt should be stripped of dev role

For fake jailbreak

[faint stag]

this is probably the only correct answer lol

[timid furnace]

yea got it already

thx

[hasty ruin]

Trollstore (but only your fork)

[timid furnace]

technically it's trollstorehelper

[faint stag]

something tells me springboard has them all

[olive peak]

how can i make a tweak not load substrate

idk why but it tried to load

[faint stag]

well i mean what tweak injection library doesn't provide mobilesubstrate at this point

but sure, you can modify the tweak to point to a different framework such as ellekit

[olive peak]

i mean my tweak

not some random one

i dont need substrate for %hook right

[hasty ruin]

yes

you do

[olive peak]

oh

ok

[hasty ruin]

you could switch to using objc apis to hook

But you’d still need substrate on the device to actually load your tweak into the process

[acoustic imp]

what app/site it this?

[sonic totem]

Jonathan Levin’s entitlements database

https://newosxbook.com/ent.jl

[visual meadow]

anyone have decompiled sandbox profiles from like ios 16

[radiant idol]

?

[olive peak]

how would i log the string of the instance here?

not the argument

[hasty ruin]

self

[olive peak]

just self?

[hasty ruin]

self is the value

log it like normal

[radiant idol]

yes

[native orbit]

imagine making tweaks in the time before theos and logos

[proper reef]

I’ve essentially done that (it was after those things but I didn’t use them because they have no c++ support)

It is absurdly annoying though

[hexed knot]

Its not that bad

[cloud yacht]

It's better than patching raw c binaries

[radiant idol]

some people still write tweaks with purely the substrate api without logos

i do not understand why

[proper reef]

I’m still waiting for proper c++ support in logos

[radiant idol]

what would that look like?

[proper reef]

It would look like being able to compile Objective-C++

Without imploding

[radiant idol]

.xm exists tho, no?

im confused

[proper reef]

It doesn’t work (at least not when I used it, they may have fixed it by now)

[radiant idol]

works for me

lol

if MSHookIvar works then your C++ should work

[timid furnace]

If obj-c++ didn't work my tweak wouldn't compile

i have templates in there

[proper reef]

I guess I just encountered some weird edge case

[timid furnace]

probably

[olive peak]

could i hook the nsstring itself

[proper reef]

Why would you want to hook NSString

[olive peak]

so i can modify the string if its one i need to modify

[proper reef]

Technically: you probably could do it
Should you: n o

[olive peak]

what do i do instead

[radiant idol]

what are you trying to accomplish

explain that first

[olive peak]

i think an app detects if the bundle id is different

so i want to modify

the string of the bundle d

[radiant idol]

%hook NSBundle

- (NSString *)bundleIdentifier {
    return @"your.new.bundle.identifier";
}

%end

[olive peak]

i did that

but it gets it differently

for some strings that works

but some dont

[radiant idol]

well you'd have to find out where it gets the bundle id

then overwrite that

[olive peak]

im trying but cant find anything

[proper reef]

wdym

[radiant idol]

hooking NSString is not a good solution

[olive peak]

if i search the memory of the app for strings it still sometimes has the modified bundle id

[proper reef]

Only hook NSString if you want to obliterate your device’s performance