#development

1 messages · Page 222 of 1

indigo peak
#

so just download the .tar
but the file in:
~/theos/templates/

run $THEOS/bin/nic.pl

chose number for tweak_sim

write code

make deploy

#

👍

wind ravine
#

i dont have a usb for the next month

acoustic imp
#
  • run $THEOS/bin/nic.pl
    alias>
indigo peak
#

bro is running of 20% battery for a month

acoustic imp
#

newtweak > troll

wind ravine
#

i just juice up with my dads charger

wind ravine
acoustic imp
wind ravine
#

se moment

#

got this for free so cant complain

acoustic imp
#

reminds me of my 12 mini Sadge

acoustic imp
#

my parents say i have to many devices

#

had to make a deal wit them to get my mac

wind ravine
#

i am in college now so i do whatever i want

acoustic imp
#

Sadge no yo tambien

wind ravine
#

also my parents just let me have my brother's old phone so thats a total of 5

#

had to rebuild back up from 1 this summer

acoustic imp
#

rip

#

if i may, i dont think u ever said what the cause was?

#

im jus curious

wind ravine
#

because its easy to find my house address if i say

acoustic imp
#

oh

#

ok

#

so if i find it i get to know troll

#

jk

wind ravine
#

maybe it got drowned out

#

but its like a somewhat unique cause

robust radish
#

did u get it working

pallid totem
#

@wind ravine give me a thing to do with sparserestore

#

im bored

#

i want dev role :/

hasty ruin
#

Mods please don’t give this user dev role

pallid totem
slim bramble
#

buy 16Player with that money

pallid totem
hasty ruin
#

?

#

Mods

acoustic imp
#

how to get ios 14 sim on Xcode 16 hm

#

how do i get older Xcode

severe stream
acoustic imp
severe stream
acoustic imp
acoustic imp
#

nvm

#

just had to launch the excutable ig

#

no ios 14 tho :/

wintry zenith
#

The only way I found was to downgrade Mac OS, but I hackintosh so that’s easy for me

radiant idol
#

i have Xcode 11.7 installed on mine

radiant idol
#

one-upped

acoustic imp
#

WHAT

#

14 crashes 😭

radiant idol
#

?

#

oh

acoustic imp
radiant idol
#

just open it through the cmd

#

idk

acoustic imp
#

i did

radiant idol
#

oh cry then

#

!

acoustic imp
#

maybe i need 14.3.1 not 14.0\

radiant idol
#

do Xcode 13 or Xcode 12 silly

#

so you have access to even more versions

acoustic imp
#

im DLing 13

acoustic imp
#

12 is ios15 ?

radiant idol
#

idk

#

maybe

acoustic imp
radiant idol
#

Xcode 12.0 is iOS 14

acoustic imp
#

13 doesnt downlaod woeis

#

there just nothing is DLing wth

radiant idol
#

L

acoustic imp
radiant idol
#

why

#

and why not just do Xcode 12

acoustic imp
#

got the space thishowitis

acoustic imp
#

i need 14

#

im stuoid

radiant idol
#

we've already established that fact

acoustic imp
#

Sadge so slow

hasty ruin
acoustic imp
#

@radiant idol how

#

u do it like this right?

fiery dragon
#

It's not even cross platform, even visual studio is cross platform

acoustic imp
#

14 doesnt have ios 14 vexedtomato

radiant idol
#

LMAO

acoustic imp
#

dont laugh at me

radiant idol
#

ALL THAT

#

LMAOOOO

indigo peak
#

I uninstalled when I was transferring my Mac tho

acoustic imp
#

Apple “it’s just works”

hollow oar
#

Interesting

radiant idol
#

I love how it doesn't load

acoustic imp
radiant idol
#

LOOǑOOOL

acoustic imp
acoustic imp
#

after everything

#

istg

radiant idol
#

its really funny how much you tried and ğot nowhere

acoustic imp
#

oops

#

how do i do vm

radiant idol
#

make a macOS tweak which hooks it and patches out the error or something 👍

acoustic imp
#

no conoce con MacOS

radiant idol
#

L

acoustic imp
#

nathan got injection for me so 🤷‍♂️

#

i jus dk if it the like same

vivid dew
#

wtf

#

13.3.99

wind ravine
# radiant idol boom

i want to downgrade xcode so bad but my friend insists on using the new version and for some reason if i use the old version i cant compile the app

acoustic imp
#

14 seams to work sorta on sequoia

#

Idk tho

opal ridge
#

@naive kraken would you have any idea about injecting into driverkit extensions? Probably need another system hook and tweak injection framework somehow

#

I need to inject into AppleBCMWLAN

#

And fakeSystemDriverKitusrlib probably

placid kraken
#

@manic forum its over

#

how it started

#

how it ended

#

🎉

manic forum
#

nice

#

@placid kraken did you get any points btw?

placid kraken
#

yes

#

i had some fast p2s

naive kraken
#

driverkit has it's own DSC with almost nothing in it or something idk

opal ridge
kind herald
#

intel dual band ac-3165 for ipados

acoustic imp
#

anyone know how to get a list of runable shortcuts programatically ?

reef trail
acoustic imp
reef trail
#

i swear it is

#

i looked at the source at some point

#

actually i might've REd it

#

icr

acoustic imp
#

il look, idk if it will rly help tho

reef trail
#

rip

acoustic imp
#

is this OBFed ?

#

the tweak squid gestures has a list

granite frigate
wooden yarrow
opal ridge
#

ipad 7 wifi is glorified ipad 6 plus wifi

slim bramble
#

Just calls a function

acoustic imp
wooden yarrow
#

go to that function

#

and show/interpret

acoustic imp
#

how do i find it

#

is there a like CALL

#

(im new to reversing ig)

wooden yarrow
#

so somehow that code puts the code to jump to in X8

indigo peak
#

powercut?

reef trail
indigo peak
#

ah

acoustic imp
indigo peak
#

no

#

ion think so

reef trail
#

i had the idea of making powercuts

#

until i realised powercuts existed

#

was gonna call it super cuts lmfao

indigo peak
#

nice

#

might find sum here

acoustic imp
#

k thx

#

it seams to mostly be ab signing tbh

#

in ida is there a way to like open the same file in another like instance without it opening the like libs u alr had open in it ?

indigo peak
#

what does that even mean

slim bramble
indigo peak
#

ah

slim bramble
#

I have that Tesla translator now

indigo peak
#

just rename the source file

slim bramble
#

Thanks 16Player

indigo peak
#

if you have

#

Tweak.dylib

#

open tweak.dylib in ida

#

and then

#

rename it to

slim bramble
indigo peak
#

tweak_2.dylib

indigo peak
#

so

left lantern
#

Hey guys, working on iOS 17.0 with TrollStore + RootHide's Bootstrap, yeah I'm aware its an outdated environment and obv its due to me being on A12 with iOS 17.0, but I actually need to get an ioreg dump, and unfortunately it looks like zsh/bash kills it for security reasons

#

any way to compile and run a copy of ioreg CLI for iOS?

#

or atleast, if anyone has some pointers on recomping ioreg in any way where it is usable, or if this is a known issue regardless of what JB env you are using, as I have IORegViewer.app already, but its cumbersome and I'm looking to get the raw XML out so I can work with it easier

misty cradle
#

ok ??

acoustic imp
lavish summit
#

register

wooden yarrow
#

I keep fucking up trying to write LC-3 asm because the registers aren't x but r

#

and x is also for hexadecimal

vernal rapids
#

Does anyone know if there’s a way to select/ hide UI elements in a app? I tried using FLEXing but couldn’t find what I needed

faint timber
#

just change the hidden property to true

grim sparrow
acoustic imp
#

@indigo peak (u sent me prefloader for sim right?) where does it load prefs from? like regular spot /var/jb/... ?

acoustic imp
#

nvm

#

but how do i fix this?

#

compiling for sim...

slim bramble
indigo peak
acoustic imp
#

k

#

me and leptos r working on it

indigo peak
acoustic imp
#

uh ok

grand barn
#

@crisp frost Will their be a write up on this?

indigo peak
acoustic imp
indigo peak
#

i cant send the file bc its too big, so i have to send a discord attachment link

#

and those expire

#

hopefully that works

acoustic imp
#

got it

indigo peak
#

dope

#

so thats 17.2

#

so just go into your makefile

#

and switch sdk version to 17.2

#

export TARGET := simulator:clang:17.2:14.0

acoustic imp
#

yep

#

also

indigo peak
#

and then here are the simject dirs:

PreferenceBundles: /opt/simject/Library/PreferenceBundles/
PreferenceLoader: /opt/simject/Library/PreferenceLoader/Preferences/

acoustic imp
#

how do i extract on mac

shrewd moth
#

someone know how the apps decryptor website works? I know you have to have jb device to decrypt apps, but they offer also iOS 18 only apps (that don't fit iPads)

indigo peak
#

wait

#

shouldn't the default macos extractor be able to open it

acoustic imp
#

oh yea

#

i DLed another and it jus didnt know

indigo peak
#

💀

acoustic imp
indigo peak
#

oh nah

#

mf got that winzip on macos

indigo peak
#

i got it from someone

acoustic imp
#

oh

indigo peak
#

@timid furnace could you enlighten this young padawan

acoustic imp
#

doesnt seam to work

kind herald
acoustic imp
indigo peak
acoustic imp
#

thoes paths are correct, right ?

indigo peak
#

tf is tht sysroot shit

acoustic imp
#

idk it wouldnt do it without, (idk y theres //, it doesnt change anything, oops)

#

could u send one of your prefs maybe? as a control

#

i mean shouldn't the like pref cell adleast show up ?

indigo peak
#

later tho

#

im work

#

👍

#
# main makefile
export TARGET := simulator:clang:17.2:14.0
export ARCHS = arm64 x86_64

INSTALL_TARGET_PROCESSES = SpringBoard

THEOS_DEVICE_IP = localhost
THEOS_DEVICE_PORT = 2222
THEOS_PACKAGE_SCHEME =# rootless

include $(THEOS)/makefiles/common.mk

TWEAK_NAME = TestTweak
TWEAK_PREFS = testtweakprefs

$(TWEAK_NAME)_FILES = Tweak.x
$(TWEAK_NAME)_CFLAGS = -fobjc-arc

include $(THEOS_MAKE_PATH)/tweak.mk
SUBPROJECTS += $(TWEAK_PREFS)
include $(THEOS_MAKE_PATH)/aggregate.mk

setup:: clean all package
    @echo "Copying files to simulator..."
    sudo mkdir -p /opt/simject/Library/PreferenceBundles
    sudo mkdir -p /opt/simject/Library/PreferenceLoader/Preferences

    sudo cp .theos/_/Library/MobileSubstrate/DynamicLibraries/$(TWEAK_NAME).dylib /opt/simject/Library/MobileSubstrate/DynamicLibraries/$(TWEAK_NAME).dylib
    sudo cp .theos/_/Library/MobileSubstrate/DynamicLibraries/$(TWEAK_NAME).plist /opt/simject/Library/MobileSubstrate/DynamicLibraries/$(TWEAK_NAME).plist
    sudo cp -r .theos/_/Library/PreferenceBundles/$(TWEAK_PREFS).bundle /opt/simject/Library/PreferenceBundles/$(TWEAK_PREFS).bundle
    sudo cp .theos/_/Library/PreferenceLoader/Preferences/$(TWEAK_PREFS).plist /opt/simject/Library/PreferenceLoader/Preferences/$(TWEAK_PREFS).plist
    @echo "Respringing simulator..."
    resim
# preferences makefile
include $(THEOS)/makefiles/common.mk

BUNDLE_NAME = testtweakprefs

testtweakprefs_FILES = ENSRootListController.m
testtweakprefs_FRAMEWORKS = UIKit
testtweakprefs_PRIVATE_FRAMEWORKS = Preferences
testtweakprefs_INSTALL_PATH = /Library/PreferenceBundles
testtweakprefs_CFLAGS = -fobjc-arc

include $(THEOS_MAKE_PATH)/bundle.mk
#

@acoustic imp

acoustic imp
#

k il try thx

indigo peak
#

then just run

#

make setup

acoustic imp
#

i manually copied everything bc .theos/_/ doesnt exist

indigo peak
#

uh run make clean package first

#

and then run make setup

#

Trust

acoustic imp
#

same thing

slim bramble
acoustic imp
timid furnace
acoustic imp
#

Wha?

#

are there any like OS multitasking tweaks ?

timid furnace
#

It has been sent to apple repair depot hell

acoustic imp
#

oh, rip

#

what happened ?

timid furnace
#

Funny story

#

When i was leaving I decided to test the demo macs

#

2/3 did the same shit

timid furnace
acoustic imp
#

ah

#

rip

#

this is only M2s tho right ?

timid furnace
torn oriole
olive peak
#

Is it possible to make Frida be able to attach to x86_64 apps on an arm64 mac? If so, how?

manic forum
#

clangd supported objective-c this whole time?

#

why did no one say anything???

radiant idol
#

yes???? 😭

#

logos not supported though

manic forum
#

i've been writing objective-c without linting or auto-completion for 4 years

radiant idol
#

its better that way fr

fading shell
#

No

tepid olive
#

TextEdit

fading shell
#

I need auto completion

#

And linting

tepid olive
#

soy

radiant idol
#

fr

manic forum
#

is there a way to use non-apple clangd with ios code

#

i'm currently running clangd through darling

#

it works but it's slow

tepid olive
#

Ever wondered how iOS jailbreaks work or what it’s like to dive deep into the world of security research? In this video, we sit down with Siguza, a well-known iOS hacker and jailbreak developer, to chat about everything from his early days in tech to his beginnings in iOS jailbreaking.

We cover all kinds of topics:
💡 What jailbreaking is and wh...

▶ Play video
acoustic imp
manic forum
#

Has anyone used theos-jailed recently?

#

I can't get it to work for whatever reason

#

Theos behaves as if theos-jailed isn't installed

slim bramble
#

so I don't use logos anymore

#

👍

manic forum
hasty ruin
#

people just drag a deb file into sideloadly or whatever 🧌

slim bramble
#

🧌

cedar stag
radiant idol
#

it's really not that bad

hasty ruin
#

Fr

fading shell
#

Mfs be writing full sentences for their method names

indigo peak
indigo peak
cedar stag
#

like ain't no way I'm writing this manually

radiant idol
#

that is the only method that I cannot memorize for the life of me

fading shell
#

Just use swift

radiant idol
#

ok

#
"aabbcdefghijklmnopqrstuvwxyz".replacingOccurrences(of: "abc", with: "xyz")

ok nvm i thought it was gonna be nonsensically long here too

fading shell
#

typing Nightwind 🇦🇲 is typing

cedar stag
#

Nightwind 🇦🇲 is typing :typing:

#

😭

radiant idol
#

F

fading shell
radiant idol
#

shush

fading shell
#

Objc is how I'd be writing if I were trying to get the word count up

radiant idol
#

so true

manic forum
cedar stag
#

well the code completion only works in swift but whatever

#

still long ahh uikit modifier

acoustic imp
#

is it just me or is MacOS sort of inconsitant with its UX at some times

#

Ex: inactive windows, most times u must click to start interacting but some u dont

radiant idol
#

yeah modern macOS has gotten kind of strange in that regard

acoustic imp
acoustic imp
#

happened to me on sequia iirc

radiant idol
#

that's... modern macOS

velvet path
#

Sequoia is latest

#

I’m very confused

acoustic imp
#

reading skills failed again

acoustic imp
acoustic imp
radiant idol
#

better

#

but yes fix the clipping

acoustic imp
#

how 😭

#

alos wtf, why is the dock not on the main display

#

i aint doing allis for a free tweak, i like the other animation better to

radiant idol
lusty jacinth
#

calling all devs, someone please fix gir 🥺

cloud yacht
#

No

edgy bluff
#

It's been a long time we have no gir

wintry zenith
lime slate
wintry zenith
#

No.

lime slate
#

It’s not real useful but ya never know

wintry zenith
#

Gir is more important

lime slate
#

What’s wrong with gir

wintry zenith
#

[[snowboard]]

#

That’s what’s wrong

lime slate
#

This makes it even better 😅

acoustic imp
#

@indigo peak were u ever able to get a like working pref bundle for me to try on my sim?

indigo peak
#

@acoustic imp

acoustic imp
#

thx

acoustic imp
indigo peak
#

idk man 😭

acoustic imp
#

whats ur simject folder look like ?

#

mines kinda jus

indigo peak
acoustic imp
#

oh hm

#

well ik its being injected into

acoustic imp
indigo peak
acoustic imp
#

like it jus goes in regular folder?

#

also doesnt work :/

#

treid recompilng pref loader

#

still no

acoustic imp
#

doesnt seam like its injecting

radiant idol
#

SEEM

#

not SEAM

acoustic imp
#

jeez

#

ok

acoustic imp
#

istg

acoustic imp
#

jus /opt/simject/

indigo peak
#

dylid

#

💀

indigo peak
acoustic imp
#

i got it

indigo peak
#

im so proud of you

acoustic imp
#

i cloned the pref loader repo and make setup and ig it worked its magic

#

i did have to change the like runtime thing tho

radiant idol
#

so specific

#

wow

acoustic imp
radiant idol
#

the hell is that

#

oh

#

okay

acoustic imp
#

idk it works now thishowitis

#

it only works in that runtime hm

#

ys there no 16 runtime ?

indigo peak
#

bc you didnt download it?

acoustic imp
#

oh ?

#

but like

radiant idol
#

what

indigo peak
#

oh wait

#

they moved the iOS 16 runtimes

#

iirc

acoustic imp
#

oh :/

indigo peak
#

/Library/Developer/CoreSimulator/Volumes/iOS_21F79/Library/Developer/CoreSimulator/Profiles/Runtimes/iOS 17.5.simruntime/Contents/Resources/RuntimeRoot/Developer

#

thats where my iOS 17.5 sim was

#

maybe 16 is there

acoustic imp
#

k

#

haha the shared caches r in here

#

yk

#

this is my mac

#

who tf is apple to say what i can and cant write to

#

how do i remount to write ?

#

if i mess with it could i lose data ?

kind herald
#

ssv

acoustic imp
#

on mac os ?

#

BRO

harsh junco
#

Can I target arm64/x64 macos in theos? (Im making something very cursed)

torn oriole
#

Not a folder/directory

acoustic imp
#

yea figured that one out now

#

anything i can do

#

@indigo peak do u have tweak prefs on ios 16+ sims ?

indigo peak
#

what

#

huh?

acoustic imp
# indigo peak huh?

Are you able to use tweaks preferances in the settings app of the iphone simulatore which are running ios 16 or higher

indigo peak
#

yes

#

mine is 17.5

acoustic imp
acoustic imp
#

Could you send me your Libprefs and preferencesLoader dylibs ?

cold hare
#

wtf is this shit. who tf is measuring in 1/300ths of a m?

indigo peak
#

trust

torn oriole
cold hare
#

how the fuck did i post that in this channel

#

eh whatever

acoustic imp
hoary spruce
acoustic imp
#

Bros on the alt 💀💀

hoary spruce
pine holly
#

@acoustic maple pretty sure spring cuts is broken on iOS 14

#

*springcuts activator integration

faint valve
#

Hello lads, I've just made a tweak (.deb) for an app but would like to convert to a .dylib so i can inject to the app's Frameworks folder, how can i proceed? Thank you

hasty ruin
#

Extract the deb and follow the directory structure until you find the dylib file

#

or find it in .theos/ if you’re using theos

faint valve
#

yes, i found it then copied the .dylib to Framrworks folder but it's not applying the tweak

hasty ruin
#

you don’t just throw it in the folder

#

need to add a load command to the main binary

#

sideloadly will do this for you if you just drag the ipa and deb into it

#

Then select the export ipa option

#

Instead of actually sideloading

faint valve
#

ohhh, that explains why sslkillswitch2 isn't working while jailed too

#

Sweet, working now!

hasty ruin
#

Awesome

clear current
#

anyone know how use mount_bindfs on Dopamine 2 iOS 16?

trail nimbus
#

would it be possible to spoof the local time only for one specific app without having to change it globally and all that stuff for a tweak?

fossil geyser
#

I'm working on my first tweak after jailbreaking for over a decade. Right now my app isn't popping up after installing the tweak with Sileo.
My test device is iOS 14.7.1/Taurine. I was using checkra1n for the longest but uninstalled and setup Taurine.

  1. One thing I noticed is that it isn't using Substitue. I have HookKit Module installed. Is this by design?

I am using chatgpt for help as well

#

Is there somewhere I could screenshare or something? It's a very basic tweak app to send messages to phone contacts

fossil geyser
velvet path
#

that's fine

gray scaffold
#

could i use frida to hook into an app when using trollstore 17.0 and bootstrap or would it need a proper jailbreak for that?

granite frigate
gray scaffold
#

alright good, gonna do that then

sonic totem
#

Has anyone used IOSurface IOConnect methods on recent iOS? Trying to use them on iOS 18.0.1 and I can't seem to get a valid surface or something? I had to fix the IOSurface lock result size and I get KERN_SUCCESS with create_surface_fast_path, but when I try to release the surface I get a kIOReturnBadArgument error... unless it no longer takes a surface ID, I'm not sure

#

I've checked the method numbers against my kernelcache and they do seem correct, so I really don't know what else could be the issue (the surface IDs are printed and also seem fine)

faint timber
#

you actually have to analyze the surface userclient method handler and the method itself retvals

sonic totem
#

Well I will do that next

#

I was only asking if anyone else had first

faint timber
#

good idea\

naive kraken
#

the code fault-in that causes the spinlock panic often seems to be in either

  • HMFoundation.framework
  • GeoServices.framework
  • SystemConfiguration.framework
  • BackBoardServices.framework

I'm thinking of just wiring them down, that should probably reduce spinlock panics by a considerable amount

#

oh fuck wrong channel

#

😄

fading shell
#

I was about to say

#

Seemed odd

acoustic imp
#

@radiant idol should i add support for ios 18/17 with my tweak using the sim or jus do 16? bc apple changed stuff and its kinda broken on ios 18 sim

acoustic imp
#

this poor mac

radiant idol
#

W

acoustic imp
#

bc they r stuck at white :/

radiant idol
#

idk 🔥

light owl
acoustic imp
#

i was charging up my real ipad

#

somthing keeps crashing, causing it to panic smh

indigo peak
# acoustic imp

I do not give bro consent to remake jellyfish 🙅‍♂️

radiant idol
#

jellyfish reborn 2

acoustic imp
severe stream
#

where am I supposed to get the simulator branch for Ellekit

#

as it doesn't seem to exist

lean ermine
#

Anyone have a way to download individual macos versions (for x86)

#

I need 13.3

lean ermine
#

I got it actually

#

Ty tho

#

Yea recovery

lean ermine
#

yea lol

placid kraken
#

does anyone know a lot about allocators

#

structs are pointers so there needs to be a double allocation here but im trying to write an arena allocator

fn ArenaAllocator::alloc(ArenaAllocator *self, i32 _size) {
    let size = align8(_size);

    if size > self.chunk_size {
        let arena = Arena::new(size);
        arena.next = self.current;
        self.current = arena;
        self.current.used = size;
        return self.current.buffer;
    }

    if self.current.used + size > self.current.size {
        Arena *arena = Arena::new(self.chunk_size);
        arena.next = self.current.next;
        self.current.next = arena;
        self.current = arena;
    }

    let offset = align8(self.current.used);
    let ptr = (void *)self.current.buffer + offset;
    self.current.used = offset + size;
    return ptr;
}

fn ArenaAllocator::realloc(ArenaAllocator *self, void *ptr, i32 _new_size) {
    if ptr == nil {
        return self.alloc(_new_size);
    }

    let new_size = align8(_new_size);

    void *new_ptr = self.alloc(new_size);
    if ptr != nil {
        memcpy(new_ptr, ptr, _new_size);
    }
    return new_ptr;
}

fn ArenaAllocator::free_self(ArenaAllocator *self) {
    Arena *current = self.current;
    Arena *next;

    while ((void *)current != nil) {
        next = (*current).next;
        mem::free((*current).buffer);
        mem::free((void *)(*current));
        mem::free(current);
        current = next;
    }

    mem::free((void *)(*self));
    mem::free(self);
}
#

my implementation for realloc is quite naive atm: just alloc and memcpy

#

but for some reason when freeing it all, it ends up failing to free a lot of them specifically when there are a lot of reallocations

slim bramble
placid kraken
#

i figured out the issue

#

in alloc, my pointer indirection for the linked list was wrong

if self.current.used + size > self.current.size {
    Arena *arena = Arena::new(self.chunk_size);
    arena.next = self.current.next;
    self.current.next = arena;
    self.current = arena;
}
#

when it should be

if self.current.used + size > self.current.size {
    let arena = Arena::new(self.chunk_size);
    arena.next = self.current;
    self.current = arena;
}
#

this was causing the free function to fail traversing the arenas and only ever end up freeing 1

#

when there were about 800

#

and bonus this allocator is much faster than using straight up malloc so yey

lean ermine
#

Any way to bypass newer fw requirement on migration assistant? Downgraded my hack to ventura from sonoma by making a new partition and was too lazy to set up time machine for it

#

But it doesn't let me use migration assistant on it

#

I'll just manually copy everything over if I have to tbh

true orbit
#

hi guys;my querstions going back. so what is best way ssl pinning for jailbreak iphone 7 ios 15.8.3 for setup mobile pentest lab ios.
the jailbreak dopamine

true orbit
#

that is to old

steady nest
#

works perfectly fine

true orbit
#

with dopamine jailbreak ?

steady nest
true orbit
#

I tried it is working with some app but not all

#

maybe need something more

steady nest
#

It works fine

#

I've used it

true orbit
#

or apps tracking the phone jailbreak

steady nest
#

maybe

true orbit
#

how u solve the issue ? u are using any more apps?

#

what is your setup for ios pentest

steady nest
#

that tweak and then you can mitm, frida, etc

true orbit
severe stream
#

I can't seem to create folders like /Library/PreferenceBundles inside the simulator volume

#

it just says operation not permitted

acoustic imp
#

Just delete what u have and use that

severe stream
#

but I don't see a setting for the tweak because that folder in the simulator won't create

acoustic imp
severe stream
#

inside the Library folder, I don't see these folders (PreferenceLoader, etc) unless I'm wrong

#

although I didn't see FLEX get loaded anyhow, only the sample tweak loads

severe stream
#

actually nvm it is loaded

trail nimbus
#

is there a way to find out what elements im seeing on the screen (names and attributes and that) on iOS 17.0 Bootstrap? (Directly in an app not springboard)

trail nimbus
# acoustic imp Flex!

do u have an tutorial for that or something? I have Flex 3 beta92 installed but theres no real description and no tweaksettings and nightwinds tutorial just said it should be in the description

acoustic imp
acoustic imp
#

do i need another SDK?

timid furnace
reef trail
#

i swear i said that earlier to you hm

acoustic imp
reef trail
acoustic imp
#

added a sysroot

#

didnt fix

#

@radiant idol new SDK did not fix btw

#

idk

#

using this ```TARGET := iphone:clang:16.5:13.0

native orbit
#

15.400000

indigo peak
#

you have to use the actual sdk version

#

bc latest will default to the latest version installed by Xcode or the latest version provided by theos, whoever is newer

acoustic imp
indigo peak
#

@acoustic imp typo in your tweaks control file

#

in the description

#

independantly -> independently

severe stream
#

i don't understand this error

==> Signing ExampleTweak…
error: The specified item could not be found in the keychain.
make[2]: *** [/Users/hg13/Desktop/theos/makefiles/instance/library.mk:51: /Users/hg13/Downloads/ExampleTweak/.theos/obj/iphone_simulator/ExampleTweak.dylib] Error 1
rm /Users/hg13/Downloads/ExampleTweak/.theos/obj/iphone_simulator/ExampleTweak.dylib.9f8f30ac.unsigned
make[1]: *** [/Users/hg13/Desktop/theos/makefiles/instance/library.mk:37: internal-library-all_] Error 2
  make: *** [/Users/hg13/Desktop/theos/makefiles/master/rules.mk:146: ExampleTweak.all.tweak.variables] Error 2
#

it worked before, but it broke after i updated theos

#

is it like trying to access an invalid/expired keychain cert?

acoustic imp
#

or try fiores example makefile

acoustic imp
acoustic imp
#

@radiant idol u up for 2 rq tweak reviews ?

radiant idol
#

no sorry I'm going to be going soon, new years celebrations

#

maybe after like 1 AM 👍

acoustic imp
#

dw then

#

il jus OS them tmro or sm

tepid olive
#

Anyone know of a google review bot

#

My work fucked me over for the last time

tepid olive
#

Drunk asf rn hope yall have a have a good new years live it up you only live once

pallid totem
#

day 1 of making something very simple in xcode even tho i have 0 experience:
worked pretty well

pallid totem
acoustic imp
pallid totem
#

=! is crazy

radiant idol
#

What

#

Is

#

That

#

Do you not know how math works

acoustic imp
#

oops

radiant idol
#

Bro

#

if (self.subviews .count < 1) return;

acoustic imp
#

right

hexed knot
#

glad to see teslaman is still at it

acoustic imp
#

u left?

#

hm (casues safemode otherwise)

radiant idol
#

Bro

#

Read

#

😭

acoustic imp
#

shit

radiant idol
#

This is BASIC math bud

hexed knot
#

=!

#

bros over here making faces in his programs

acoustic imp
radiant idol
#

How

#

You’re not even drunk

#

Why would you be confused

#

Alfie is drunk

#

He has a right to be confused

acoustic imp
#

not a surprise

#

uhm

#

teslaman confusion 💯

radiant idol
#

I’d be concerned what a drunk teslaman would be like

#

I don’t even wanna know

acoustic imp
radiant idol
#

Yeah so what

acoustic imp
#

now wth do i do ab this

native dune
radiant idol
#

You give up

acoustic imp
#

safe mode woeis

radiant idol
#

Go do something with your family for New Years instead of doing this

acoustic imp
#

they r jus watching tv

radiant idol
#

Join them

#

More important

acoustic imp
#

is boring

radiant idol
#

Yeah so

acoustic imp
#

ig

radiant idol
#

Go

acoustic imp
#

i have

#

my brothers are watching tv in basemeant thishowitis

radiant idol
#

Yeah

acoustic imp
#

it is 11:00

radiant idol
#

Go watch with them

acoustic imp
#

k

cloud yacht
#

Bring your laptop down with you

acoustic imp
#

Id need my iPad which’s to much tbh

acoustic imp
#

ios 13 clock is an image ?

#

or wait

pallid totem
#

uhh ?

acoustic imp
#

its got a UILabel behind it

#

addSubview hook hm

indigo peak
#

@acoustic imp i reversed your whole codebase for colorclock

#

i wil release the source

acoustic imp
indigo peak
acoustic imp
#

nu uh

pallid totem
indigo peak
#

its 146 lines 💀

pallid totem
#

the fat ass fucking text

indigo peak
#

oh thats just the preview text

#

on the sidebar

acoustic imp
#

its VScode

pallid totem
acoustic imp
#

minimap <<

indigo peak
acoustic imp
#

i should use it tho tbh

indigo peak
acoustic imp
#

is objectForKey not on NSObject ?

pallid totem
#

it leaked my address

indigo peak
pallid totem
#

luckily i was in a vc with a friend

pallid totem
acoustic imp
indigo peak
#

did u declare @interface SBUILegibilityLabel?

acoustic imp
#

ye

indigo peak
#

how

acoustic imp
#

should i jus add it

#

it might be privat idk

#

i dont think

indigo peak
#

n youre trying to read _lookassideLabel?

#

the ivar?

acoustic imp
#

ye

#

its a UILabel

pallid totem
#

wtf tesla man corrected himself

acoustic imp
pallid totem
#

his cant be

#

this

indigo peak
#

im 99% sure

#

its valueForKey

#

not object for key

#

and use

@interface NSObject (Private)
- (id)safeValueForKey:(NSString *)key;
@end
#

instead

acoustic imp
#

ik but there is an object

#

ofc

indigo peak
#

still

acoustic imp
#

nights offline smh

pallid totem
#

objc does NOT seem beginner friendly 😭

indigo peak
#

brother

#

im right

#

its not objectForKey

acoustic imp
#

i know but wth

pallid totem
#

this just seems like complex gibberish that u have to know off the top of ur head

#

what

indigo peak
acoustic imp
indigo peak
#

so yah

#

where your headers are

acoustic imp
indigo peak
#

and then in your code

#

use safeValueForKey

acoustic imp
#

yea yea

#

im not that dumb

#

its not _safeValueForKey ?

indigo peak
indigo peak
acoustic imp
acoustic imp
indigo peak
#

no its not

pallid totem
pallid totem
acoustic imp
pallid totem
#

if tesla man got a dollar for every time hed do a typo he’ll be a billionaire

indigo peak
#
@interface NSObject (Private)
- (id)safeValueForKey:(NSString *)key;
@end

%hook Class
- (void)someMethod {
  NSObject *someObject = [self safeValueForKey:@"key"];
  if (!someObject) {
    // TODO: implement error handling
  }
  
  // rest of hook
}
%end
indigo peak
#

as long as the () are there to some degree its fine

#

you dont need a category name

#

mf bouta put Privat as the category name

acoustic imp
#

still works

indigo peak
#

yah

#

ik it would still work

acoustic imp
#
%hook SBUILegibilityLabel
- (UIColor*)textColor{
    if([self.superview isKindOfClass:%c(SBFLockScreenDateView)]) return [GcColorPickerUtils colorFromDefaults:PREF_BUNDLE withKey:@"timeColor" fallback:@"FFFFFF"];
    if([self.superview isKindOfClass:%c(SBFLockScreenDateSubtitleDateView)]) return [GcColorPickerUtils colorFromDefaults:PREF_BUNDLE withKey:@"dateColor" fallback:@"FFFFFF"];
    return %orig;
}

- (void)addSubview:(UIView*)view{
    if([self.superview isKindOfClass:%c(SBFLockScreenDateView)] || [self.superview isKindOfClass:%c(SBFLockScreenDateSubtitleDateView)]){
        if([view isKindOfClass:%c(UILabel)]){
            %orig;
            view.alpha = 1;
            view.hidden = NO;
        }
    }else{
        %orig;
    }
}

- (void)didMoveToWindow{
    %orig;

    UILabel *timeLable = [self safeValueForKey:@"_lookasideLabel"];
    if(!timeLable) return;

    timeLable.alpha = 1;
    timeLable.hidden = NO;
}
%end```
idk if didmovetowindow is needed
indigo peak
#

are you telling me that valueForKey and safeValueForKey are 2 different things

acoustic imp
#

huh

indigo peak
acoustic imp
#

i mean ones jus got a if(objc is no) return nil; other doesnt

indigo peak
#

yah

#

so if its not found

#

it wont crash

#

@acoustic imp im not bouta take shit from the mf who spells timeLabel as timeLable

acoustic imp
#

now

#

lets see if this works on ios 13

indigo peak
#

@acoustic imp youve said english is your first language before right

acoustic imp
#

uhm

#

no comment

indigo peak
#

thats actually crazy

#

how old are you

acoustic imp
#

16>

#

school tried somthing new with my class

indigo peak
#

like are you up to par in your academy levels?

acoustic imp
#

as u can see it didnt work...

indigo peak
#

or are you behind?

indigo peak
acoustic imp
indigo peak
#

no hate to you at all, i was just curious 😭

acoustic imp
#

everything else is normal

acoustic imp
#

i got like As & Bs

#

english is my lowest not a surprise

indigo peak
#

swapping el -> le etc

acoustic imp
#

i dont have dyslexia

#

its jus the way i check my spelling

#

they r to close

indigo peak
#

js odd

acoustic imp
indigo peak
#

you used the wrong too

#

its too not to

acoustic imp
#

ye, i jus dk ab too usally

indigo peak
#

again

#

dk instead of dw

acoustic imp
#

too - too much, to - go to, two - 2

#

frick, dc **

indigo peak
#

also spelt usually wrong lmao

#

ok ill stop now

#

😭

acoustic imp
#

usally

#

its bc it plays like that in my head 🤷‍♂️

#

usually

#

looks odd

indigo peak
#

ODD

#

ODD

acoustic imp
#

ik ik

indigo peak
#

IK IK

#

GOD DAMN

acoustic imp
#

😭

#

works on ios 13 🎉

indigo peak
#

hooray

acoustic imp
#

ok time to upload

indigo peak
acoustic imp
#

sure

#

proly doodoo

#

wait

#

i fg

#

i gota add no support 💣

indigo peak
#

huh

acoustic imp
#

oh and un comment prefs

hasty ruin
#

bro speaking in riddles

indigo peak
#

"i gota add no support 💣" - The Riddler to Batman

indigo peak
acoustic imp
#

thats actully what it is

indigo peak
#

oh no way

acoustic imp
#

no

#

its in ctor

#

it wount init other hooks if unsupported...

indigo peak
#
NSString *alertTitle = [NSString stringWithFormat:@"Your iOS version(%f) is unsupported by ColorClock", [[[UIDevice currentDevice] systemVersion] floatValue]];
NSString *alertMessage = @"Please uninstall ColorClock.";
acoustic imp
indigo peak
#

it tells the message what title to give

acoustic imp
#

oh my codes not like what

indigo peak
#

but you still never limited the stringWithFormat float specificer to a specific number of digits

acoustic imp
#

i jus stringWithFormat

indigo peak
#

so like that?

acoustic imp
#

oh, yea

#

i like actully cant read without highlighting

#

wow spelled highlighting right first try

indigo peak
#

spelt

acoustic imp
#

🪄

#

uhm

indigo peak
#
%group UnsupportedGroup
%hook SBHomeScreenViewController
- (void)viewDidAppear:(BOOL)animated {
    %orig;

    NSString *alertTitle = [NSString stringWithFormat:@"Your iOS version(%f) is unsupported by ColorClock", [[[UIDevice currentDevice] systemVersion] floatValue]];
    UIAlertController *alertController = [UIAlertController alertControllerWithTitle:alertTitle message:@"Please uninstall ColorClock." preferredStyle:UIAlertControllerStyleAlert];
    UIAlertAction *closeAction = [UIAlertAction actionWithTitle:@"Close" style:UIAlertActionStyleDefault handler:nil];
    [alertController addAction:closeAction];
    [self presentViewController:alertController animated:YES completion:nil];
}

%end
%end```
acoustic imp
#

no spacing

#

close

#

teslaman spacing **

indigo peak
#
%hook BSUIVibrancyEffectView

- (void)didAddSubview:(UIView *)subview {
    %orig;

    // what the fuck
    if ([subview isKindOfClass:%c(UIView)]) {
        [subview setAlpha:1];
    }
}

- (void)_updateSubviewsIfNeeded {
    %orig;

    [[self.subviews firstObject] setAlpha:1];
}

%end
#

is this right

#

like idek what this is doing

acoustic imp
#

NSClassFromString ur odd

#

jus use %c(class)

indigo peak
#

you are NOT about to tell me how to write code 😭

acoustic imp
#

// what the fuck

hasty ruin
indigo peak
#

exactly

#

NSClassFromString superiority

#

except for the strings left behind showing the class name as an argument

acoustic imp
#

wha

indigo peak
#

@hasty ruin do u have any good resources for learning about obfuscation

radiant idol
acoustic imp
#

ngl

#

thats never getting fixed

acoustic imp
hasty ruin
indigo peak
#

how

acoustic imp
#

hes gate keeping

hasty ruin
radiant idol
#

just try different stuff and see how it goes

#

learn about different ciphers and how to implement them in code

acoustic imp
#

ask chat gpt thishowitis

radiant idol
#

Go to bed

#

it's too late for you

acoustic imp
acoustic imp
#

night

#

code review

#

in 3 min

#

jk

#

i fg to impl sm

hasty ruin
radiant idol
#

bro go to bed

hasty ruin
#

not tired

radiant idol
#

not you

hasty ruin
#

maybe he's not

acoustic imp
#

not what

hasty ruin
#

tired

radiant idol
#

he's tired of spelling correctly

acoustic imp
hasty ruin
radiant idol
#

no wait

acoustic imp
#

time for %property

radiant idol
#

that message makes sense when you say it out loud

#

a rarity for a teslaman message

acoustic imp
#

wait wha

radiant idol
#

nothing

#

ignore

acoustic imp
#

🤦‍♂️

#

i lwk do need to go to bed, mind is going like 5mph instead of 20

indigo peak
#

why are you giving this to me like im jailbroken

acoustic imp
#

thought u were reing it

indigo peak
#

not anymore

#

that was a one time thing

#

ill re your next obfuscated project

radiant idol
#

the obfuscations will be misspelling every thing

torn oriole
#

mfw discord rootful

acoustic imp
#

gn

indigo peak
#

you gotta add libcguniversal to dependencies

indigo leaf
#

!!!

severe stream
#

"Apple Development" cert expired and so I generated a new one from Xcode settings and works now

noble siren
#

I just remembered that I have one, but for the status bar

#

Don't know if it works on 14 and 16

gaunt mesa
#

what was the point of replying to me

acoustic imp
faint timber
acoustic imp
#

having problems with getting ssh root keys working on dopa, i put my pu key in /var/jb/var/root/.ssh/authorized_keys but it doesnt seam to work

#

for mobile user it works fine

#

do i need to change ssh_config to point to that ?

#

ig i do, works now

#

i cant put it in /var/authorized_keys :/

#

none work

#

@radiant idol for ur 18CC u hook CALayer right ?

radiant idol
#

(MagmaEvo does that)

acoustic imp
#

k, im trying to not but im ripping my hair out rn

#

did u ever have issue with sliders?

radiant idol
#

dunno

#

cant remember

acoustic imp
#

my uh volume one keeps dissapearing hm

radiant idol
#

skill issue

acoustic imp
#

its stock issue

#

vexedtomato 🔫

#

with mice

acoustic imp
indigo peak
#

I reversed coolcc and that’s how it was done

acoustic imp
#

oh.

acoustic imp
#

having an issue with a class

#

ur GH popedup

#

my property like wount appear

indigo peak
#

popedup?

acoustic imp
#

i just googled the class

indigo peak
#

popped up?

#

makes sense

acoustic imp
#

popped up on google ?