#development

1 messages · Page 267 of 1

lethal kayak
#

The beginning

half walrus
#

if you're good to do it

faint timber
#

Like I said

half walrus
#

or just do what i do and don't really announce it

faint timber
#

we need an adrp xor script

half walrus
#

nobody even knows i dropped watch securerom symbols lol

lethal kayak
#

I mean if you ask them id say you’re very likely to get a no since there’s a reason they went through the trouble of obfuscating with hikari

faint timber
#

I have 3,3 with no ibus so prob why I don't care

#

no point debobf hikari

half walrus
#

the main thing is that they can be used to bindiff and symb other roms around that release

faint timber
#

just go for string xor

#

again need adrp xor script

half walrus
#

not an issue for a few people but it's a much newer rom than most of the existing symbolicated ones i know of

faint timber
#

I won't put all my knowledge public but

#

I said this before

#

kpf is next to pongo when written from data to heap

#

super easy just to dump from data anyway

half walrus
#

imo people in the jailbreaking community assuming their projects are immune to the RE and unauthorized modifications/patches is silly

#

community was built and revolves around unauthorized modifications to purchased hardware/software

#

whad'ya expect

faint timber
#

Yah there is the entire stigma around checkra1n that it’s super obfuscated but really it’s super easy to RE

faint timber
#

Did you see my tweet

half walrus
#

Yah there is the entire stigma around checkra1n that it’s super obfuscated but really it’s super easy to RE
it is but I have more pressing things to waste my time on

faint timber
#

Just more proof checkra1n easy to RE

half walrus
#

thought i was following u

faint timber
#

Lol

#

Same

half walrus
#

yeah the ch1 obfus i'm assuming was to keep out script kiddies

faint timber
#

I wasn’t?

half walrus
#

ironic that a 13 year old patched the panic out

faint timber
#

Yah he’s retarded but that’s something I would do 6 years ago prob

half walrus
#

i would've done it a month ago had i not been told it was in SEPOS and not pongo

faint timber
#

I don’t blame them

half walrus
faint timber
#

I want to release a proper patch but will just wait for checkra1n team

half walrus
#

i'm not going to sit on a product useful for 10 people because 100 people are going to use it wrong, that's a waste
@half walrus

faint timber
#

That is probably why bootsy died

#

And cringe watching people have the same idea

half walrus
#

never heard of that

faint timber
#

And fail because of cringe mac gui

half walrus
#

what it do

faint timber
#

Arm64 sshrd

#

Was the og people to do it

half walrus
#

ah

faint timber
#

Now the cringe twitter noobs did it

half walrus
#

well the non-cringe-twitter-noobs didn't

#

whatd'ya expect

faint timber
#

I mean I helped them do it so that’s kinda my fault

half walrus
#

if you don't write a package manager for your jailbreak some 'cringe-twitter-noob' will do it and get the clout

#

how it goes here with anything

faint timber
#

lets take a walk down u0dark lane

half walrus
#

i personally like seeing the mentality of the newb devs not pulling the ladder up behind them

faint timber
#

that became odyssey which is well deserved

surreal mountain
#

no

#

odyssey is electra

#

i refuse to believe otherwise

faint timber
#

hayden: oh new jb not good enough?
heres custom community oss boostrap bitch

surreal mountain
#

literally so much odyssey code says electra

#

yeah but the difference is unc0ver is better

#

besides elu/proc

#

unc0ver is miles better

half walrus
#

they're both fine in my experience

surreal mountain
#

i would use uncursus if i wasnt using a checkm8 jb

lethal kayak
#

lets take a walk down u0dark lane
@faint timber

half walrus
#

literally have never noticed a difference between the two

surreal mountain
#

odyssey is just plain shit in my experience

#

idrk what else to say

half walrus
#

aside from UI

surreal mountain
#

odyssey's exploit is worse

lethal kayak
#

odyssey was always more stable than unc0ver for me

surreal mountain
#

libhooker panics all the time for the dumbest reasons

#

like

#

i pair my apple watch and panic

tepid olive
#

yo

#

libhooker is cs's thing lol

lethal kayak
#

the only complaint i have about libhooker is launchctl reboot userspace not working

surreal mountain
#

nptocompaniond just dies

#

and i was told thats an AW thing

#

i had 30+day uptime on u0 5.0.0

half walrus
#

libhooker not being """maintained""" by saurik is enough of a reason for me to use it when I can lmao

surreal mountain
#

libhooker was made bc substrate had a bus factor of 1

#

and libhooker didnt help that issue

half walrus
#

has the page leak issue but substrate code is just

surreal mountain
#

libhooker has a bus factor of 1

half walrus
#

cringe as fuck

surreal mountain
#

substitute more stable than libhooker from what ive observed

glass reef
surreal mountain
#

and a lot of people like to equate libhooker crashes to bad tweak code

faint timber
#

Hi guys my name is unc0vershill123 and I'm gonna post my daily uptime screenshot

lethal kayak
#

when substrate first got reintroduced to modern ios it had this vnode leak that made it just crash 4k devices

#

true

surreal mountain
#

hes talking about checkra1n

tepid olive
#

who still uses a 4k device

lethal kayak
#

at the time i did

half walrus
#

what is this subtweeting?
@glass reef it's in reference to the checkra1n patch released and opinions i've heard regarding it

tepid olive
#

iphone 5s... what else

lethal kayak
#

that was like

#

ios 11 days

#

iphone 6

surreal mountain
#

krit follow me right this second

half walrus
#

a lot of people are mad with the kid about it

#

@surreal mountain no

tepid olive
#

iphone 6 is 4k? O.o

lethal kayak
#

ye

glass reef
#

oh i see. i’ve been out of the loop

surreal mountain
lethal kayak
#

6s was first 16k

surreal mountain
#

at least look at my bio

tepid olive
#

oh

half walrus
#

i did

surreal mountain
#

ok

#

good

#

did u like it

half walrus
#

bingners is better

surreal mountain
#

swift sucks

#

wait

half walrus
#

oh did bingner change his github bio

tepid olive
#

virgin 4k page size vs chad 16k page size

half walrus
#

shame

surreal mountain
#

yeah tahts sam

#

i was talkng about tiwtter

#

not github

half walrus
#

same thing

surreal mountain
#

no

#

my github is wrose

#

my twitter is good

glass reef
#

idk seems like anyone that would need the patch would’ve done so on their own already

surreal mountain
#

idk seems like anyone that would need the patch would’ve done so on their own already
@glass reef thats exactly what exploit3d did

half walrus
#

idk seems like anyone that would need the patch would’ve done so on their own already
@glass reef i was told by a member of the team that the panic was in sepos and not pongo :)

surreal mountain
#

and he decided to make it public and gets shit on for it

half walrus
#

or i would've done it a month ago

#

and made it public

glass reef
#

what panic?

surreal mountain
#

the panic causing 14 c1 to not work

glass reef
#

the password one?

surreal mountain
#

yes

glass reef
#

of course

surreal mountain
#

they said it was sep panicking but pongo literally does it

glass reef
#

that’s why the exploit is needed

#

no?

surreal mountain
#

yes

half walrus
#

when you disable the passcode

surreal mountain
#

thats what the patch changes

glass reef
#

right...

half walrus
#

the device would still panic

surreal mountain
#

^ due to pongo manually triggering it

half walrus
#

that wasn't SEPOS panicking, it was pongo panicking to arbitrarily prevent A11 from working

#

which annoys me

#

even more so since I was told the opposite of that

glass reef
#

oh i see. i must’ve forgotten overriding that

surreal mountain
#

literally all the patch does is make that return 0 every time

glass reef
#

did it on a bender like a month ago lol

surreal mountain
#

or something close to that

half walrus
#

if they had disclosed that pongo was panicking I wouldn't have wasted a month and we wouldn't be here

lethal kayak
#

i mean they really could've just left ios 14 disabled like they did for every other unsupported version

half walrus
#

they support ios on a9

lethal kayak
#

i know

surreal mountain
#

siguza really said

lethal kayak
#

i mean for a10 and higher

surreal mountain
#

we shouldve just waited and did all of them

#

like bruhhhhhhhhhh

half walrus
#

they should've

lethal kayak
#

i mean

#

that's not a bad idea

#

lol

half walrus
#

^

surreal mountain
#

eh

half walrus
#

instead of forcing us to research your tool just share the research lmfao

#

or again, we wouldn't be here

surreal mountain
#

thats what i hate

#

when are they gonna os it

#

prob scrapping that cuz of blackbird

half walrus
#

"later in 2020"
-c1, 2019

glass reef
#

still q42020 no?

surreal mountain
#

thats what we assume

#

but

half walrus
#

i wouldn't be surprised if it never is

lethal kayak
#

hey they still have time

half walrus
#

dont mind either i get why not

glass reef
#

i be workin on checkra2n

lethal kayak
#

release it December 31st

half walrus
#

checkra1n dark

lethal kayak
#

checkra1n dark
@half walrus

surreal mountain
#

i been working on unc1ver

lethal kayak
#

uncheckra1nver

surreal mountain
#

1dyssey

#

i been workin on

#

redsn1w

glass reef
#

checkra2n runs p1ng1

half walrus
#

am I just imagining this or did bingner used to have a bio with a joke about reverse engineering it

glass reef
#

can’t remember the last time i’ve read a twitter bio lol

half walrus
#

"forwards, backwards, reverse engineer"

#

on github, not twitter

#

something like that

#

who had that bio i loved it

surreal mountain
#

holy shit

#

why does it look so SHIT

half walrus
#

the ui or performance

surreal mountain
#

the image

#

just the image

#

is so bad

#

the ui is good enough it was for a 10 dollar bounty

half walrus
#

oh yeah check out this image

#

a r t i f a c t s

glass reef
#

oh yeah check out this image

half walrus
#

kinda weird it looks fine on my right monitor actually

#

but on my left one it looks like someone deepfried it

surreal mountain
tepid olive
#

does anyone here

#

think that they are worthy

#

of teaching me (the dumbest person here)

#

assembly

surreal mountain
#

consider querying my assistant, @primal perch

tepid olive
#

innit

shut lantern
#

👎🏽

half walrus
#

i agree @shut lantern

primal perch
#

consider querying my assistant, @primal perch

#

and no

#

i only answer calls for @rapid lion

half walrus
#

assembly
@tepid olive just do RE

#

buy IDA Home

#

you'll get the hang of it after a while

primal perch
#

i teach x64 and arm64 at a fee of 69$ per hour

tepid olive
#

buy

#

broke moment

#

i teach x64 and arm64 at a fee of 69$ per hour
@primal perch refer to earlier message

primal perch
#

6.90$

half walrus
#

well

#

did i buy ida home?

shut lantern
#

No Car play

surreal mountain
#

@tepid olive are you on windows or mac

tepid olive
#

linux

surreal mountain
#

ok fuck you

primal perch
#

get a totally legitimate ida 7.0/7.2/7.3 exe and just wine it

shut lantern
#

Car bridge

surreal mountain
#

yea same

shut lantern
#

Not working what is this 

#

try and buy application for Apple radio

steady nest
#

Wrong channel

proud geyser
lime pivot
#

yeah see what happens in the next few months @grave sparrow I think, if you can hold out that long

#

if not, you can’t go wrong with Intel Mac right now

#

clearly it’s going to stick around for at least 8 years based on other Macs’ support lifecycles

#

inb4 Apple kills off the entire product line in barely 2 years like they did with PowerPC

half walrus
undone nest
#

why does it look so good

tepid olive
#

Gm

half walrus
tepid olive
#

:uhhhh:

#

for nginx, do i just point a A record to my webserver IP?

#

Nice microphone

#

@tepid olive yea

#

its slow in updating woeis

#

its still on my github pages

#

mfer

#

IT WORKING

#

pog

#

why isnt it updating on my browser?

#

cache

#

also u might have to flush dns not sure

#

Whatever it is, it’s the fault of cloud flares caching

#

pog

#

got da ssl too

#

if ur using cloudflare just purge cache on the cp

#

uhh idk what im using

#

im on a ovh with nginx

#

Wow it’s really snowing here wtf

#

mf few hours

#

woe

#

ive linked my domain to cloudflare

#

what do i do now dead

#

did you update the nameservers

#

yeah

#

its tsill my github pages for me dead

#

and i just purged all cache in cloudflare

#

ok

#

@tepid olive still says pog for me

#

yeah it does on my phone too

#

Intjsad

nocturne yacht
tepid olive
#

go ahead

#

enter the passcode

#

anything works currently

#

We’re getting there

#

towards a semi-working rough implementation

tardy narwhal
#

reimplementing passcode for the unofficial checkrain?

tepid olive
#

yes

#

shit i need to install frida on this

tardy narwhal
#

Not to sound like I’m threatening you but if this is released as paid I’m 100% making a free alt

tepid olive
#

noooo its not paid

#

imagine charging for sub-par security people can get for free by waiting for official checkra1n

tardy narwhal
#

kudos to you for not charging to bring back a stock feature 👍🏽

tepid olive
tardy narwhal
#

thing is you already know some greedy retarded “devs” will try to cop some cash from it

tepid olive
#

yes, dont worry, they'll just make the LS passcode present and call it a day

#

goal is to enable passcode system wide

tardy narwhal
#

can’t wait for iosthemedod to release a bullshit copy if he does at all for however much with a bootleg 3min rotato video

tepid olive
#

lmao

#

does frida not work with ios 14

#

guess not

#

0x0000000000000000 BRUH

#

F

#

passcode++ now for sale on twickd

#

pASScode--

west grove
#

[[passcode++]]

tepid olive
#

@west grove, Couldn't find anything matching that search query!

west grove
#

bruh

tepid olive
#

[[passcode]]

#
PasscodeActivator

Adds an Activator event that detects if a certain passcode is entered

Author

Alex Beals

Version

1.1.0-1

Repo
Bundle ID

com.hackingdartmouth.passcodeactivator

More Info
misty cradle
#

@tepid olive bro thought you said: “how retarded do you think I am? Ofcourse I’m not releasing this”

tepid olive
#

that was when i was just doing LS passcode

misty cradle
#

can’t wait for iosthemedod to release a bullshit copy if he does at all for however much with a bootleg 3min rotato video
@tardy narwhal

#

@iron trench

rapid lion
#

i only answer calls for @rapid lion
@primal perch true

half walrus
#

@tepid olive what route are you going for it

misty cradle
#

the highway

lapis vessel
#

lol the ios release notes say "Your app no longer quits unexpectedly if it uses ASIHTTPRequest"

#

love how apple are so afraid to say "crashes"

#

"quits unexpectedly" lmao

half walrus
#

my code isn't shit

#

it's just processed sustenance

half walrus
#
__unused static NSInteger (*_logos_orig$_ungrouped$"_SBUICurrentPasscodeStyleForUser")(); __unused static NSInteger _logos_function$_ungrouped$"_SBUICurrentPasscodeStyleForUser"(){
#

%hookf(NSInteger, "_SBUICurrentPasscodeStyleForUser")

#

what am I doing wrong

#

and what in gods name is logos doing

#

it's just

#

there are no args

tepid olive
#

@tepid olive what route are you going for it
@half walrus hooking the config manager that tells whether passcode is on

#

Then tryna intercept the call that would normally check hash with SEP

half walrus
#

which one @tepid olive

tepid olive
#

Uhh

#

Shit hold on

#

Im walking to class give me 2 mins

#

School is very snow today

half walrus
#

no prefixed underscore in hookf?
@grave sparrow it's interpreting the string as a symbol, contents dont matter

#
__unused static NSInteger (*_logos_orig$_ungrouped$"_SBUICurrentPasscodeStyleForUser")(); __unused static NSInteger _logos_function$_ungrouped$"_SBUICurrentPasscodeStyleForUser"(){

@half walrus

%hookf(NSInteger, "_SBUICurrentPasscodeStyleForUser")
@half walrus
@glacial matrix hookf is interpreting a string as a symbol, any ideas?

glacial matrix
#

That was rolled back, sorry

tepid olive
#

@half walrus Mobile Configuration framework, MCPasscodeManager is one component. That tricks things like settings page. Doesn't work for iphone unlock, testing with keychain

#

more is needed

half walrus
#

here you go have fun

tepid olive
#

lmao

#

bruh

#

wtf is your high school a college or some shit
@grave sparrow yes

glacial matrix
#

@half walrus I had to axe that feature to be able to use pointers in %init

half walrus
#

ah

#

going to have to toss logos for this then

#

cant link sbui 😛

glacial matrix
#

Another dev was going to try and re-add it tho, I gotta ask how that’s going

tepid olive
#

@half walrus fr thank

#

did you like

#

already finish this

half walrus
#

not really

glacial matrix
#

Well, you can do

%hookf(NSInteger, fun) {
}
%ctor {
void * handle = dlopen(...);
%init(fun=dlsym(handle, "_SBUICurrentPasscodeStyleForUser"));
}
tepid olive
#

ok i do tweak now

glacial matrix
#

@half walrus would that work for you?

half walrus
#

going to give it a shot

#

got it woo

tepid olive
#

yes

shut lantern
#

Fake

#

I’ll buy the application they pull me this fucking page

half walrus
#

have you tried contacting anyone related to that package

#

or did you just hop in a random channel on a loosely related server and expect, i'm not sure what

#

what do you want us to do lol

shut lantern
#

I buy that shit and that’s it

half walrus
#

have you tried opening the repo in the app you use to open repos

shut lantern
#

I’ll try and buy some app for my car radio

grim sparrow
half walrus
#

iOS 14

#

native behavior, presentation, etc

#

notification privacy, etc, all behaves normally

shut lantern
#

What is the mean

surreal mountain
#

@half walrus progress

#

wait

#

you are faking the fact that it has a passcode

#

what if you try entering it

half walrus
#

fails

#

that’s the last step

surreal mountain
#

just says its wrong or safemodes or what

half walrus
#

acts like you put the wrong one in

surreal mountain
#

ahh ok

#

i think easiest way to fix that is middleman returning yes

shut lantern
#

I’m going to leave the fucking app

surreal mountain
#

sir

half walrus
#

that’s cool bro

surreal mountain
half walrus
#

@surreal mountain oh also there’s the bug of “everything on homescreen disappears

surreal mountain
#

bruh

half walrus
#

likely a side effect of doing this via hook instead of object replacement

#

as if this is bypassed lazily it behaves much in the same way normal iOS does

tepid olive
#

acts like you put the wrong one in
@half walrus yep

#

I’ll be working on that later on

#

Cause class rn

#

Idk

tepid olive
#

if he work for bank why he taking my money

tepid olive
half walrus
#

i mean it’s not done and that’s just what i’ve done overnight

tepid olive
#

Ok cause I do want the opportunity to work with someone better than me and learn

#

be careful with the release

#

bunch of idiots will update bc of it

half walrus
#

probably won’t release it

tepid olive
#

^

#

for fun

#

and personal use'

half walrus
#

especially not in an easily compiled way

#

might end up as a blog post or something similar

tepid olive
#

github gist detailing what to hook

tepid olive
#

good morning i have fucked with nginx

#

@narrow mason babe???

#

bro stfu, stop pinging @narrow mason
@grave sparrow fine

#

jules has to give me drugs

#

he didnt play gta with me

#

@half walrus got passcode fully working

gloomy knoll
#

Is this a known theos bug?
So
$ make install
==> Installing…
dpkg: error: requested operation requires superuser privilege
make: *** [/var/mobile/theos/makefiles/install/deb_local.mk:2: internal-install] Error 2
//give sudo privileges
$sudo make install
Makefile:12: /tool.mk: No such file or directory
make: *** No rule to make target '/tool.mk'. Stop.
i have tried exporting $THEOS for the root user as well as mobile.
Thanks

lethal kayak
#

why not just make package and then su and dpkg -i

#

if you're having trouble with install

gloomy knoll
#

Well it is odyssey ®
Also I believe procursus uses bsd su.

lethal ice
#

@tepid olive checkra1n in 14?

#

i thought sep was ded

#

@gloomy knoll your $THEOS variable isn't set

#

it's on the wiki

twilit jungle
#

It is, thats SEP-less passcode

lethal ice
tepid olive
#

how to decrypt an app?

lethal ice
tepid olive
#

?

lethal ice
#

you don't anymore

gaunt mesa
tepid olive
#

i need help

lethal ice
#

you don't tho

#

apps aren't encrypted

#

just copy the file lol

tepid olive
#

i mean ipa

lethal ice
#

decrypting doesn't have anything to do with creating an ipa

tepid olive
#

i mean how to decrypt an ipa

lethal ice
#

you can't

gloomy knoll
#

@lethal ice I've set $THEOS for both root and mobile,
It also compiles fine, its an issue with theos I think.

lethal ice
#

if the binary is encrypted from pre ios 13 you can't decrypt it unless you have the device it was originally installed on @tepid olive

tepid olive
#

Fuck

#

i promised some guy that id decrypt an ipa

gaunt mesa
#

@tepid olive with apt-ftparchive is it possible to somehow reference off of a local remote
like say im using a content management system and the deb is stored there (its retrievable through https://cms.atale.me/blahblahblah/whatever)
should i just download all the debs and generate the repo using apt-ftparchive?

lethal ice
#

is he on ios 13 @tepid olive

#

or is the ipa older

tepid olive
#

older

gaunt mesa
#

shep

#

why are u fring me

lethal ice
#

then yeah not really possible

tepid olive
#

The ipa is on archive dot org

lethal ice
#

are you sure it's encrypted though?

tepid olive
#

Idk

#

yes sir @lethal ice

#

tweak implementation

#

Some guy asked to decrypt it

lethal ice
#

nice dude

#

that's cool

tepid olive
lethal ice
#

use ida at all?

tepid olive
#

no

gaunt mesa
#

now time to wait for lord hayden to awake intjallah

tepid olive
lethal ice
#

how then u just fuck around with methods?

tepid olive
#

FLEX

primal perch
#

%hook

tepid olive
#

yeah not bouta load up springboard

lethal ice
#

f

#

is 14 good

tepid olive
#

i do know disassemblers cause ida has f5

primal perch
#

No one uses disassemblers here

tepid olive
primal perch
#

Load file and hit f5 fr

lethal ice
#

true

primal perch
#

Decompiler

lethal ice
#

unless assembly patch

gaunt mesa
#
%hook Shepgoba
- (instancetype)initWithCock:(Cock *)cock {
  return nil;
}
%end
tepid olive
primal perch
#

True

twilit jungle
primal perch
#

Nfr

gaunt mesa
#

frn

lethal ice
#

wtf

tepid olive
#

look

primal perch
#

File command

lethal ice
#

lipo -info

gaunt mesa
#

open in ida sofuckingfunny

#

yeah lipo

lethal ice
#

apps don't need

gaunt mesa
#

apps are weird

primal perch
#

Dylib needs slice for the process type and system apps are arm64e

tepid olive
#

ok now need set custom passcode

lethal ice
#

tweaks need if they are loading in arm64e process

#

@gaunt mesa why

tepid olive
gaunt mesa
#

i am kidding

lethal ice
#

arm64e can run in arm64 mode just fine

misty cradle
#

apps do not need an arm64e slice right
@grave sparrow not yet

lethal ice
#

just the whole process has to

gaunt mesa
#

well some things don't

misty cradle
#

Prolly when iOS 15/16

gaunt mesa
#

like preferenceloader

misty cradle
#

They will start require

gaunt mesa
#

:shepfr:

primal perch
lethal ice
#

for tweaks it only matters what arch the process it's loading into runs

gaunt mesa
#

ah

primal perch
#

Yea or just patch the cpu subtype

lethal ice
#

settings and springboard run arm64e

gaunt mesa
tepid olive
#

lmao

primal perch
lethal ice
#

Yea or just patch the cpu subtype
@primal perch true

#

tweaks are literal parasites

primal perch
#

Cum

lethal ice
#

@primal perch ok but starlight

primal perch
lethal ice
#

our hopes and expectations

primal perch
#

Ok but knights of cydonia

lethal ice
#

true

primal perch
#

Cum cum cum

lethal ice
#

literally look at dm

primal perch
#

Ye

lethal ice
primal perch
#

Intjcum

#

As in integer jules is cumming

surreal mountain
#

yeah true

lethal ice
#

everybody died

misty cradle
primal perch
#

@everyone rip

misty cradle
#

Always clean your cpu before attaching to motherboard

primal perch
lethal ice
#

@misty cradle wtf

surreal mountain
#

@lethal ice

#

what if @grave sparrow wants a tweak to work on 13 and 14 on arm64 and arm64e

primal perch
#

You compile for both and do version checks in there fr

surreal mountain
#

but it wont run....?????

#

so

#

use postinst

gaunt mesa
#

sus

lethal ice
#

why won't it run?

primal perch
gaunt mesa
#

because it's lazy

#

and lazy people don't run

primal perch
#

You need to pray to Steve Jobs 8 times now on ios 14

#

Have you done that yet

lethal ice
#

i'm lazy and i run all the time

gaunt mesa
#

apparently comiling with clang11 can only run on ios 13 and earlier, not 14. and clang12 can only run on ios 14+, not 13
@grave sparrow are u sure about this?

misty cradle
#

sus

lethal ice
#

@grave sparrow ok but there are workarounds u just gonna fuck around with it

#

also wasn't the bug fixed

surreal mountain
#

its the abi

misty cradle
#

It’s not a bug

lethal ice
misty cradle
#

New arm64e abi

lethal ice
#

ye rip

surreal mountain
#

the ABI fucks with it

misty cradle
#

Because memory tagging

lethal ice
#

new cpu subtype

misty cradle
#

I think

lethal ice
#

no

surreal mountain
#

and arm64e dylibs compiled with old abi wont work

lethal ice
#

it's just the subtype lol

misty cradle
#

That’s why they make new subtype

gaunt mesa
#

ABI: always beat shepgoba

misty cradle
#

Bro why they make

#

Slam

gaunt mesa
#

because shepgoba starts with an i

primal perch
#

Imagine just being like ok guys new abi

misty cradle
#

Literal no one asked

primal perch
#

Windows doing that

misty cradle
#

Fr

surreal mountain
misty cradle
#

Just make loader, and dlopen ez

#

Based on version

surreal mountain
#

yes

#

thats easy

primal perch
#

Ok go ahea

surreal mountain
#

but then you have to ship two dylibs intjbruh

lethal ice
#

or imagine using the word abi when u don't know what it means

surreal mountain
#

three

#

@lethal ice

gaunt mesa
#

but then you have to ship two dylibs intjbruh
@surreal mountain 3

primal perch
gaunt mesa
#

i need one to dlopen too

surreal mountain
#

i corrected myself

misty cradle
#

but then you have to ship two dylibs :intjbruh:
@surreal mountain

gaunt mesa
#

god no

#

please no

lethal ice
#

no

#

nothing is gonna change

primal perch
#

Literal just wait

#

fr nobody uses arm64e so it will take some time probably

lethal ice
#

nothing is gonna change for the tweak developer

misty cradle
#

Just buy arm64e phone

#

And make jailbreak

surreal mountain
#

nothing is gonna change for the tweak developer
@lethal ice how

lethal ice
#

smart people will solve the problems and then devs will use it

primal perch
#

samb or something will fix

#

Ye

surreal mountain
#

true

primal perch
#

Like arm64e

#

Linux

misty cradle
#

maybe, maybe not

#

We pray

#

Otherwise just makin loader frcoal

lethal ice
#

it's always how it happens otherwise it won't happen at all

primal perch
surreal mountain
#

loader is not that difficult

lethal ice
#

go ahead write one then

surreal mountain
#

ok

#

where is @available thing for linux

lethal ice
#

eta

surreal mountain
#

someone link it

lethal ice
#

bruh

#

why u using that in a loader

surreal mountain
#

wait

#

i dont need @available

#

ignore

lethal ice
#

loader won't use objc...

tardy narwhal
#

can i opt out of using your loader

surreal mountain
#

why not

primal perch
#

It’s pinned anyway @surreal mountain

lethal ice
#

can i opt out of using your loader
@tardy narwhal

surreal mountain
#

It’s pinned anyway @surreal mountain
@primal perch true

#

@tardy narwhal
@lethal ice

lethal ice
#

objc is not needed for that

#

it's basically all C

primal perch
#

Why make loader the demand isn’t there

surreal mountain
#

yea but i can use objc

#

if i want

primal perch
#

No one jalbreaks 14 except devs rn

misty cradle
#

And 6s users

primal perch
#

Just wait and the proper fix will come

misty cradle
#

can i opt out of using your loader
@tardy narwhal no

#

U will be forced

#

Otherwise 👻 will haunt u

#

D Spooky

surreal mountain
#

d g host

#

what does the d in d ghost stand for

#

dick ghost

misty cradle
#

For his first name

primal perch
#

True

misty cradle
#

Probably

primal perch
#

Yea

misty cradle
#

Yes

surreal mountain
#

dee ghost

misty cradle
#

Indeed

primal perch
#

Check his GitHub

misty cradle
#

Richard Ghost

tardy narwhal
#

shame on you, it’s Null and not zero

surreal mountain
#

deep patel

misty cradle
#

My name is Saadat Johnson

surreal mountain
tardy narwhal
#

see, looks much more irish

primal perch
#

Massive cum

surreal mountain
#

massive error 1, aborting

#

return cock

misty cradle
#

under what circumstances do i have to sign pointers for pac
@grave sparrow under arm64e circumstances

#

I am right

primal perch
#

That’s literally the answer

tepid olive
#

@gaunt mesa download the debs

misty cradle
#

HAYDEN

#

WTF

#

@tepid olive GM LOVE U BRO

primal perch
#

It’s enabled in the hardware on boot

tepid olive
#

gm

surreal mountain
#

@tepid olive when compiling

tepid olive
#

ly2

tardy narwhal
#

@grave sparrow i mean tr1 gave you the answer, pac was introduced with the new hw

primal perch
#

And from there any functions in arm64e mode must be signed

grim sparrow
#

Hayden do you love me awkwardflushed

tepid olive
#

yea

grim sparrow
gaunt mesa
#

@tepid olive here's the issue tho if i download the debs won't the Packages file have the wrong location for the debs

#

since im serving them off my CMS

royal oak
#

question so i am running frida and i am trying to find a the following dylib. Frida gave me the path /usr/lib/system/libsystem_notify.dylib but when i go to find that file its not there is ios hiding it from me even though i am root??

gaunt mesa
#

unless i download them and serve them from the download

tepid olive
#

serve them off the same server or use redirects

gaunt mesa
#

i would need to edit control files anyways

#

so ig ill just serve them

surreal mountain
#

why would you need to edit control files

gaunt mesa
#

Depiction, SileoDepiction, and Icon key

#

im not adding them locally that's too much work

surreal mountain
#

you can do that in the packages file though

#

just have it write it to it after

gaunt mesa
#

yeah but then if i remove the repo

#

no depiction

surreal mountain
#

sucks to suck then

#

are you really concerned about the people who will look at your package after theyve removed the repo they get it from

gaunt mesa
surreal mountain
#

time to make notatio loader

gaunt mesa
#

first make notatio

surreal mountain
#

notatio is release ready the upload just doesnt work if the site is slow

grim sparrow
#

Anyway I have compiled new deb

#

Just confirming arch’s now

gaunt mesa
#

are you really concerned about the people who will look at your package after theyve removed the repo they get it from
@surreal mountain should i not be concerned?

misty cradle
#

@grim sparrow that is cool and all but where is my NFC Fuckery alpha

gaunt mesa
surreal mountain
#

@gaunt mesa i dont think you should

gaunt mesa
#

all the repos do it

surreal mountain
#

1.) who removes repos for tweaks they are using

#

yeah that sit

gaunt mesa
#

1.) who removes repos for tweaks they are using
@surreal mountain 0.) who even removes repos, i swear i see people with 100000 repos they never use

grim sparrow
#

@grim sparrow that is cool and all but where is my NFC Fuckery alpha
@misty cradle dude

surreal mountain
#

@surreal mountain 0.) who even removes repos, i swear i see people with 100000 repos they never use
@gaunt mesa factual

misty cradle
#

@misty cradle dude
@grim sparrow dude

gaunt mesa
#

dude

grim sparrow
#

My week has been fucked and I’ve done nothing on pretty much anything

surreal mountain
#

@grim sparrow did u compile

gaunt mesa
#

false

grim sparrow
#

Yeah uploading now

surreal mountain
#

ok

grim sparrow
#

lol

gaunt mesa
#

charlie ur week has been great obviously /s

surreal mountain
#

did u change control

grim sparrow
#

No cba

surreal mountain
#

ok

grim sparrow
#

And I’m not compiling again

surreal mountain
#

ok

grim sparrow
#

That shit takes forever

surreal mountain
#

does it take THAT long

#

LMAO

grim sparrow
#

10 minutes

#

lol

misty cradle
#

My week has been fucked and I’ve done nothing on pretty much anything
@grim sparrow F

surreal mountain
#

BRUH

misty cradle
#

Hope it gets better for u

grim sparrow
#

I had to restart it at some point because my delegate was for Xcode 12

misty cradle
#

I am from now on an eta kid.

surreal mountain
#

I had to restart it at some point because my delegate was for Xcode 12
@grim sparrow lol

#

@misty cradle when eta for WTF widget

misty cradle
primal perch
#

:blah blah blah: when this channel is basically #jailbreak

grim sparrow
#

Hope it gets better for u
@misty cradle I do try

primal perch
#

Pray

royal oak
#

question I am trying the dylibs for an app to reverse engineer some stuff. I have the name and path of the dylib but its not in the directory shown. Can Jtool2 or frida pull those dylibs from the phone memory?

#

Well i just figured out that all the dylibs are put into the dyld_shared_cache_arm64 file but how does one extract from that

surreal mountain
#

dump the app

#

decrypt and class dump

#

i think

proud geyser
surreal mountain
proud geyser
#

Am i gonna get rich wit it

primal perch
#

Yea

#

I’d pay 10$ for that

proud geyser
#

Ightt bet bet

#

How do i call data from api doe thats the question

gaunt mesa
narrow mason
#

uhh
@gaunt mesa

gaunt mesa
#

@gaunt mesa
@narrow mason

narrow mason
royal oak
#

Jtool2 -e doesn't seem to work 😦

#

i can get that raw text disassembly but not the bin why!!!

#

also thanks cock that was somewhat useful

tepid olive
#

@gaunt mesa bruh

royal oak
#

Jtool original works huh

#

so weird

gaunt mesa
#

moment

restive ether
#

bruh

tepid olive
#

can springboard just pretend it can communicate with sep please?

surreal mountain
#

are you making open gate drm

grim sparrow
#

How do i call data from api doe thats the question
@proud geyser are you doing it in Swift

tepid olive
#

are you making open gate drm
@surreal mountain do you realize how stupid you sound

#

its already been made

#

dumbass

surreal mountain
#

ok give me a dylib with it

tepid olive
#

there is no dylib with it alone

#

thats dumb

lethal ice
#

go ahead crack sex

tepid olive
#

ah yes i did crack sex

lethal ice
#

by getting it gifted to u

tepid olive
#

my ass

#

its literally just springboard binaries

#

@lethal ice turns out using ida is a big brain move so now i am doing so

lethal ice
#

turns out?

tepid olive
#

yes

#

i just obtained some idas

#

good job windows

lethal ice
#

tru

#

windows is so alienated to file types

tepid olive
#

HAHA NO WAY IT WORKED

proud geyser
#

@grim sparrow yes it’s swift n Swift ui

lethal ice
#

no way the powerful software ida worked...

tepid olive
#

no im saying no way i correctly extracted the dyld first try

grim sparrow
#

Do you want a hand with network stuff?

lethal ice
#

ok

tepid olive
lethal ice
#

tru

tepid olive
#

uhhh

#

sure i did it correctly

lethal ice
tepid olive
#

lmao

#

i clicked it like 5 times

#

before realize

lethal ice
proud geyser
#

@grim sparrow yes sure

primal perch
#

:skoop:

lethal ice
grim sparrow
#

Ok in a sec I’ll find my class for it

#

I have a pog class that makes networking ez

primal perch
#

:skuup:

grim sparrow
#

Because fuck dependencies

tepid olive
#

my pc after opening springboard in ida

gaunt mesa
#

@surreal mountain do you realize how stupid you sound
@tepid olive

#

what?

tepid olive
#

__cstring:00000001A3600ACC aDeviceDoesNotS DCB "Device does not support stylus.",0

#

what?
@gaunt mesa do you realize how stupid you sound

#

it was a joke

gaunt mesa
#

yeah

#

totally

proud geyser
#

I need to learn how to do multiple screens

twilit jungle
#

Take one screen, then take another screen, and boom you got multiple screens

tepid olive
#

totally
@gaunt mesa what's your issue?

gaunt mesa
#

@gaunt mesa what's your issue?
@tepid olive ?

tepid olive
#

ios 13 dont look like this

#

wtf

surreal mountain
#

cum

tepid olive
#

sus

#

ida thinks its ok

grim sparrow
#

I need to learn how to do multiple screens
@proud geyser how are you doing UI

proud geyser
#

Swift ui

tepid olive
#

what the hell did i do this wrong

#

or is this how it should be

#

someone who has experience please enlighten me

twilit jungle
#

You are doing it all wrong

#

/s

#

Thats normal, it just means that memory/symbol is in a separate library/binary that this binary depends on.

faint timber
#

Tf your bitch as reversing

primal perch
#

or just get the simulator frameworks and enjoy

tepid olive
#

Lmao

#

Tf your bitch as reversing
@faint timber springboard

#

I need to learn to use IDA, and it’s helpful in this case

#

So win win

surreal mountain
#

no

tepid olive
#

@surreal mountain ok if youre so experienced tell me what f5 in Ida does and why it’s useful (hint it’s literally the first thing you should know how to do)

surreal mountain
#

pseudocode

tepid olive
#

My man is googling

#

Smh

surreal mountain
#

bitch im adding dns records

tepid olive
primal perch
#

go argue in dms

tepid olive
#

Imagine

misty cradle
#

literally stfu

surreal mountain
#

literally stfu
@misty cradle

tepid olive
#

@surreal mountain you know I love you and I’m only kidding

#

NO HOMO

misty cradle
#

muirey alive fr2

#

hi

tepid olive
#

Hi

lapis vessel
#

@tepid olive springboard as in the tiny binary in CoreServices, springboard as in from the shared cache, or springboard from like ios 11 before it was put in the shared cache?

surreal mountain
#

shared cache pretty sure

tepid olive
#

Springboard shared cache

#

Yes

lapis vessel
#

yeah that'll be it

primal perch
#

shared cache have fun with that

proud geyser
#

@proud geyser how are you doing UI
@grim sparrow
Swift ui
@proud geyser

tepid olive
#

So can I load the dependencies into Ida at the same time or something

primal perch
#

try that

grim sparrow
tepid olive
lapis vessel
#

extracting from shared cache will lead to those annoying MEMORY things

primal perch
#

full objc runtime info and shit

tepid olive
#

try that
@primal perch what iOS version is that

primal perch
#

13.3

#

but u can get the 14

#

with sim frameworks

tepid olive
#

Yeah

#

Ok

#

Thanks

primal perch
#

its just x64 but same thing for the most part

lapis vessel
#

so yes, loading dependencies will fix it, but take like 12 hours and IDA will be unusably slow

tepid olive
#

Just So I know, how would I do that?

surreal mountain
#

cool

lapis vessel
#

we need a good dsc extractor but I'm too dumb to make it

twilit jungle
primal perch
#

there are good ones but lets just say they arent public

tepid olive
gaunt mesa
#

we need a good dsc extractor but I'm too dumb to make it
@lapis vessel doesnn't 7.5 have really good tools for this

#

IDA* oop

primal perch
#

7.2 and above

proud geyser
#

:uhhhh:
@grim sparrow is something wrong with it??

lapis vessel
#

I think maybe

grim sparrow
#

I just don’t like it tis all

gaunt mesa
#

someone said it was overhauled in 7.5

lapis vessel
#

I'm almost surprised @nimble parcel hasn't released anything

primal perch
#

probably

lapis vessel
#

right up his alley

misty cradle
#

we need a good dsc extractor but I'm too dumb to make it
@lapis vessel yes thats why @twilit jungle and i are making one, when i learn C, so approximately it will be released in 2023

twilit jungle
primal perch
#

2024*

#

with delays included

proud geyser
#

@grim sparrow then what do you use old spring board or native react?

primal perch
#

and cum breaks

misty cradle
#

no bro

#

some of these days dgh0st will force me to work on it

#

so less delays

lapis vessel
#

ghost prolly remembers I tried to make one and it was so scuffed I quickly gave up

grim sparrow
#

@grim sparrow then what do you use old spring board or native react?
@proud geyser old springboard???

primal perch
#

ghost has a fully working one just dm him if you need one

misty cradle
#

yes u have to try over and over, until u succeed @lapis vessel

primal perch
#

extracted

misty cradle
#

TRUE

twilit jungle
#

lmao

proud geyser
#

Yk then drag n drop design thing @grim sparrow

grim sparrow
#

Storyboard?

proud geyser
#

Yee

#

That

gaunt mesa
#

storyboard

grim sparrow
#

That’s what I use most

gaunt mesa
#

im surprised u haven't hopped onto the swiftui chain

proud geyser
#

Swift ui seems way more easier

misty cradle
gaunt mesa
#

nor programmatic non storyboard view

surreal mountain
#

tale (renai)

gaunt mesa
#

using a window in appdelegate or whatever the fuck