#development
1 messages · Page 267 of 1
if you're good to do it
Like I said
or just do what i do and don't really announce it
we need an adrp xor script
nobody even knows i dropped watch securerom symbols lol
I mean if you ask them id say you’re very likely to get a no since there’s a reason they went through the trouble of obfuscating with hikari
the main thing is that they can be used to bindiff and symb other roms around that release
not an issue for a few people but it's a much newer rom than most of the existing symbolicated ones i know of
I won't put all my knowledge public but
I said this before
kpf is next to pongo when written from data to heap
super easy just to dump from data anyway
imo people in the jailbreaking community assuming their projects are immune to the RE and unauthorized modifications/patches is silly
community was built and revolves around unauthorized modifications to purchased hardware/software
whad'ya expect
Yah there is the entire stigma around checkra1n that it’s super obfuscated but really it’s super easy to RE
Did you see my tweet
Yah there is the entire stigma around checkra1n that it’s super obfuscated but really it’s super easy to RE
it is but I have more pressing things to waste my time on
thought i was following u
yeah the ch1 obfus i'm assuming was to keep out script kiddies
I wasn’t?
ironic that a 13 year old patched the panic out
Yah he’s retarded but that’s something I would do 6 years ago prob
i would've done it a month ago had i not been told it was in SEPOS and not pongo
I don’t blame them

I want to release a proper patch but will just wait for checkra1n team
i'm not going to sit on a product useful for 10 people because 100 people are going to use it wrong, that's a waste
@half walrus
never heard of that
And fail because of cringe mac gui
what it do
ah
Now the cringe twitter noobs did it
I mean I helped them do it so that’s kinda my fault
if you don't write a package manager for your jailbreak some 'cringe-twitter-noob' will do it and get the clout
how it goes here with anything
lets take a walk down u0dark lane
i personally like seeing the mentality of the newb devs not pulling the ladder up behind them
that became odyssey which is well deserved
hayden: oh new jb not good enough?
heres custom community oss boostrap bitch
literally so much odyssey code says electra
yeah but the difference is unc0ver is better
besides elu/proc
unc0ver is miles better
they're both fine in my experience
i would use uncursus if i wasnt using a checkm8 jb
lets take a walk down u0dark lane
@faint timber
literally have never noticed a difference between the two
aside from UI
odyssey's exploit is worse
odyssey was always more stable than unc0ver for me
libhooker panics all the time for the dumbest reasons
like
i pair my apple watch and panic
the only complaint i have about libhooker is launchctl reboot userspace not working
nptocompaniond just dies
and i was told thats an AW thing
i had 30+day uptime on u0 5.0.0
libhooker not being """maintained""" by saurik is enough of a reason for me to use it when I can lmao
libhooker was made bc substrate had a bus factor of 1
and libhooker didnt help that issue
has the page leak issue but substrate code is just
libhooker has a bus factor of 1
cringe as fuck
substitute more stable than libhooker from what ive observed
what is this subtweeting? https://twitter.com/arm64e/status/1322009886658600962?s=21
When arbitrarily limiting the capabilities of something (and not disclosing it), it shouldn't come as any surprise when those limitations are patched out.
I mean, we've been telling Apple and everyone else this for ages.
and a lot of people like to equate libhooker crashes to bad tweak code
Hi guys my name is unc0vershill123 and I'm gonna post my daily uptime screenshot
when substrate first got reintroduced to modern ios it had this vnode leak that made it just crash 4k devices
true
hes talking about checkra1n
who still uses a 4k device
at the time i did
what is this subtweeting?
@glass reef it's in reference to the checkra1n patch released and opinions i've heard regarding it
iphone 5s... what else
krit follow me right this second
iphone 6 is 4k? O.o
ye
oh i see. i’ve been out of the loop

6s was first 16k
at least look at my bio
oh
i did
bingners is better
oh did bingner change his github bio
virgin 4k page size vs chad 16k page size
shame
same thing
idk seems like anyone that would need the patch would’ve done so on their own already
idk seems like anyone that would need the patch would’ve done so on their own already
@glass reef thats exactly what exploit3d did
idk seems like anyone that would need the patch would’ve done so on their own already
@glass reef i was told by a member of the team that the panic was in sepos and not pongo :)
and he decided to make it public and gets shit on for it
what panic?
the panic causing 14 c1 to not work
the password one?
yes
of course
they said it was sep panicking but pongo literally does it
yes
when you disable the passcode
thats what the patch changes
right...
the device would still panic
^ due to pongo manually triggering it
that wasn't SEPOS panicking, it was pongo panicking to arbitrarily prevent A11 from working
which annoys me
even more so since I was told the opposite of that
oh i see. i must’ve forgotten overriding that
literally all the patch does is make that return 0 every time
did it on a bender like a month ago lol
or something close to that
if they had disclosed that pongo was panicking I wouldn't have wasted a month and we wouldn't be here
i mean they really could've just left ios 14 disabled like they did for every other unsupported version
they support ios on a9
i know
siguza really said
i mean for a10 and higher
they should've
^
eh
instead of forcing us to research your tool just share the research lmfao
or again, we wouldn't be here
thats what i hate
when are they gonna os it

prob scrapping that cuz of blackbird
"later in 2020"
-c1, 2019
still q42020 no?
i wouldn't be surprised if it never is
hey they still have time
dont mind either i get why not
i be workin on checkra2n
release it December 31st
checkra1n dark
checkra1n dark
@half walrus
i been working on unc1ver
uncheckra1nver
checkra2n runs p1ng1
am I just imagining this or did bingner used to have a bio with a joke about reverse engineering it
can’t remember the last time i’ve read a twitter bio lol
"forwards, backwards, reverse engineer"
on github, not twitter
something like that
who had that bio i loved it
the ui or performance
the image
just the image
is so bad
the ui is good enough it was for a 10 dollar bounty
kinda weird it looks fine on my right monitor actually
but on my left one it looks like someone deepfried it
does anyone here
think that they are worthy
of teaching me (the dumbest person here)
assembly
consider querying my assistant, @primal perch
innit
👎🏽
i agree @shut lantern
consider querying my assistant, @primal perch
and no
i only answer calls for @rapid lion
assembly
@tepid olive just do RE
buy IDA Home
you'll get the hang of it after a while
i teach x64 and arm64 at a fee of 69$ per hour
buy
broke moment
i teach x64 and arm64 at a fee of 69$ per hour
@primal perch refer to earlier message
6.90$
No Car play
@tepid olive are you on windows or mac
ok fuck you
get a totally legitimate ida 7.0/7.2/7.3 exe and just wine it
Car bridge
yea same
Does anyone know where litten moved this domain too https://litten.sh/OwO/tweakDevelopmentForBeginners.pdf
yeah see what happens in the next few months @grave sparrow I think, if you can hold out that long
if not, you can’t go wrong with Intel Mac right now
clearly it’s going to stick around for at least 8 years based on other Macs’ support lifecycles
inb4 Apple kills off the entire product line in barely 2 years like they did with PowerPC
why does it look so good

:uhhhh:
for nginx, do i just point a A record to my webserver IP?
Nice microphone
@tepid olive yea

its slow in updating 
its still on my github pages
mfer
https://browserling.com/ the goat
IT WORKING
pog
why isnt it updating on my browser?
cache
also u might have to flush dns not sure
Whatever it is, it’s the fault of cloud flares caching
pog
got da ssl too
if ur using cloudflare just purge cache on the cp
idk what im using

im on a ovh with nginx

Wow it’s really snowing here wtf
mf few hours
https://reeee.ee/smh50C @tepid olive whos this man
woe
ive linked my domain to cloudflare
This is useful
what do i do now 
did you update the nameservers
yeah
its tsill my github pages for me 
and i just purged all cache in cloudflare
ok
@tepid olive still says pog for me
yeah it does on my phone too
Intjsad

Cool
go ahead
enter the passcode
anything works currently


We’re getting there
towards a semi-working rough implementation
reimplementing passcode for the unofficial checkrain?
Not to sound like I’m threatening you but if this is released as paid I’m 100% making a free alt
noooo its not paid
imagine charging for sub-par security people can get for free by waiting for official checkra1n
kudos to you for not charging to bring back a stock feature 👍🏽
FRIDA
thing is you already know some greedy retarded “devs” will try to cop some cash from it
yes, dont worry, they'll just make the LS passcode present and call it a day

goal is to enable passcode system wide
can’t wait for iosthemedod to release a bullshit copy if he does at all for however much with a bootleg 3min rotato video
lmao
does frida not work with ios 14

guess not
0x0000000000000000 
F
passcode++ now for sale on twickd
pASScode--
[[passcode++]]
@west grove, Couldn't find anything matching that search query!
bruh
[[passcode]]
@tepid olive bro thought you said: “how retarded do you think I am? Ofcourse I’m not releasing this”

that was when i was just doing LS passcode

can’t wait for iosthemedod to release a bullshit copy if he does at all for however much with a bootleg 3min rotato video
@tardy narwhal
@iron trench
i only answer calls for @rapid lion
@primal perch true
@tepid olive what route are you going for it
the highway
lol the ios release notes say "Your app no longer quits unexpectedly if it uses ASIHTTPRequest"
love how apple are so afraid to say "crashes"
"quits unexpectedly" lmao
__unused static NSInteger (*_logos_orig$_ungrouped$"_SBUICurrentPasscodeStyleForUser")(); __unused static NSInteger _logos_function$_ungrouped$"_SBUICurrentPasscodeStyleForUser"(){
%hookf(NSInteger, "_SBUICurrentPasscodeStyleForUser")
what am I doing wrong
and what in gods name is logos doing
it's just
there are no args
@tepid olive what route are you going for it
@half walrus hooking the config manager that tells whether passcode is on
Then tryna intercept the call that would normally check hash with SEP
which one @tepid olive
no prefixed underscore in hookf?
@grave sparrow it's interpreting the string as a symbol, contents dont matter
__unused static NSInteger (*_logos_orig$_ungrouped$"_SBUICurrentPasscodeStyleForUser")(); __unused static NSInteger _logos_function$_ungrouped$"_SBUICurrentPasscodeStyleForUser"(){
@half walrus
%hookf(NSInteger, "_SBUICurrentPasscodeStyleForUser")
@half walrus
@glacial matrix hookf is interpreting a string as a symbol, any ideas?
That was rolled back, sorry
@half walrus Mobile Configuration framework, MCPasscodeManager is one component. That tricks things like settings page. Doesn't work for iphone unlock, testing with keychain
more is needed
@half walrus I had to axe that feature to be able to use pointers in %init
Another dev was going to try and re-add it tho, I gotta ask how that’s going
not really
Well, you can do
%hookf(NSInteger, fun) {
}
%ctor {
void * handle = dlopen(...);
%init(fun=dlsym(handle, "_SBUICurrentPasscodeStyleForUser"));
}
ok i do tweak now
@half walrus would that work for you?
yes
have you tried contacting anyone related to that package
or did you just hop in a random channel on a loosely related server and expect, i'm not sure what
what do you want us to do lol
I buy that shit and that’s it
have you tried opening the repo in the app you use to open repos
I’ll try and buy some app for my car radio

iOS 14
native behavior, presentation, etc
notification privacy, etc, all behaves normally
What is the mean
@half walrus progress
wait
you are faking the fact that it has a passcode
what if you try entering it
just says its wrong or safemodes or what
acts like you put the wrong one in
I’m going to leave the fucking app
sir
that’s cool bro
this is #development
@surreal mountain oh also there’s the bug of “everything on homescreen disappears
bruh
likely a side effect of doing this via hook instead of object replacement
as if this is bypassed lazily it behaves much in the same way normal iOS does
acts like you put the wrong one in
@half walrus yep
I’ll be working on that later on
Cause class rn
Idk
@half walrus https://twitter.com/arm64e/status/1322201409278935040?s=20
I thought we were gonna work on this together

i mean it’s not done and that’s just what i’ve done overnight
Ok cause I do want the opportunity to work with someone better than me and learn
be careful with the release
bunch of idiots will update bc of it
probably won’t release it
especially not in an easily compiled way
might end up as a blog post or something similar
good morning i have fucked with nginx
@narrow mason babe???
bro stfu, stop pinging @narrow mason
@grave sparrow fine
jules has to give me drugs
he didnt play gta with me
@half walrus got passcode fully working
Is this a known theos bug?
So
$ make install
==> Installing…
dpkg: error: requested operation requires superuser privilege
make: *** [/var/mobile/theos/makefiles/install/deb_local.mk:2: internal-install] Error 2
//give sudo privileges
$sudo make install
Makefile:12: /tool.mk: No such file or directory
make: *** No rule to make target '/tool.mk'. Stop.
i have tried exporting $THEOS for the root user as well as mobile.
Thanks
why not just make package and then su and dpkg -i
if you're having trouble with install
Well it is odyssey ®
Also I believe procursus uses bsd su.
@tepid olive checkra1n in 14?
i thought sep was ded
@gloomy knoll your $THEOS variable isn't set
it's on the wiki
It is, thats SEP-less passcode

how to decrypt an app?

?
you don't anymore

i need help
i mean ipa
decrypting doesn't have anything to do with creating an ipa
i mean how to decrypt an ipa
you can't
@lethal ice I've set $THEOS for both root and mobile,
It also compiles fine, its an issue with theos I think.
if the binary is encrypted from pre ios 13 you can't decrypt it unless you have the device it was originally installed on @tepid olive
@tepid olive with apt-ftparchive is it possible to somehow reference off of a local remote
like say im using a content management system and the deb is stored there (its retrievable through https://cms.atale.me/blahblahblah/whatever)
should i just download all the debs and generate the repo using apt-ftparchive?
older
then yeah not really possible
The ipa is on archive dot org
are you sure it's encrypted though?

use ida at all?
no
now time to wait for lord hayden to awake 

how then u just fuck around with methods?
FLEX
yeah not bouta load up springboard
i do know disassemblers cause ida has f5
No one uses disassemblers here

Load file and hit f5 
true
Decompiler
%hook Shepgoba
- (instancetype)initWithCock:(Cock *)cock {
return nil;
}
%end

True

Nfr
frn
look
File command
lipo -info
apps don't need
apps are weird
Dylib needs slice for the process type and system apps are arm64e
ok now need set custom passcode

i am kidding
arm64e can run in arm64 mode just fine
just the whole process has to
well some things don't
Prolly when iOS 15/16
like preferenceloader
They will start require
:shepfr:

for tweaks it only matters what arch the process it's loading into runs
ah
Yea or just patch the cpu subtype
settings and springboard run arm64e

lmao

Cum
@primal perch ok but starlight

our hopes and expectations
Ok but knights of cydonia
true
Cum cum cum
literally look at dm
Ye

yeah true
everybody died
@everyone rip
Always clean your cpu before attaching to motherboard

@misty cradle wtf
@lethal ice
what if @grave sparrow wants a tweak to work on 13 and 14 on arm64 and arm64e
You compile for both and do version checks in there 
sus
why won't it run?

i'm lazy and i run all the time

apparently comiling with clang11 can only run on ios 13 and earlier, not 14. and clang12 can only run on ios 14+, not 13
@grave sparrow are u sure about this?
sus
@grave sparrow ok but there are workarounds u just gonna fuck around with it
also wasn't the bug fixed
its the abi
It’s not a bug

New arm64e abi
ye rip
the ABI fucks with it
Because memory tagging
new cpu subtype
I think
no
and arm64e dylibs compiled with old abi wont work
it's just the subtype lol
That’s why they make new subtype
ABI: always beat shepgoba
because shepgoba starts with an i
Imagine just being like ok guys new abi
Literal no one asked
Fr

Ok go ahea
but then you have to ship two dylibs 
or imagine using the word abi when u don't know what it means
but then you have to ship two dylibs
@surreal mountain 3

i need one to dlopen too
i corrected myself
but then you have to ship two dylibs :intjbruh:
@surreal mountain
nothing is gonna change for the tweak developer
nothing is gonna change for the tweak developer
@lethal ice how
smart people will solve the problems and then devs will use it
true
it's always how it happens otherwise it won't happen at all

loader is not that difficult
eta
someone link it
loader won't use objc...
can i opt out of using your loader
why not
It’s pinned anyway @surreal mountain
can i opt out of using your loader
@tardy narwhal
It’s pinned anyway @surreal mountain
@primal perch true
@tardy narwhal
@lethal ice
Why make loader the demand isn’t there
No one jalbreaks 14 except devs rn
And 6s users
Just wait and the proper fix will come
can i opt out of using your loader
@tardy narwhal no
U will be forced
Otherwise 👻 will haunt u
D Spooky
True
Probably
Yea
Yes
dee ghost
Indeed
Richard Ghost
shame on you, it’s Null and not zero
deep patel
My name is Saadat Johnson
see, looks much more irish
Massive cum
under what circumstances do i have to sign pointers for pac
@grave sparrow under arm64e circumstances
I am right
That’s literally the answer
@gaunt mesa download the debs
It’s enabled in the hardware on boot
gm
@tepid olive when compiling
ly2
@grave sparrow i mean tr1 gave you the answer, pac was introduced with the new hw
And from there any functions in arm64e mode must be signed
Hayden do you love me 
yea

@tepid olive here's the issue tho if i download the debs won't the Packages file have the wrong location for the debs
since im serving them off my CMS
question so i am running frida and i am trying to find a the following dylib. Frida gave me the path /usr/lib/system/libsystem_notify.dylib but when i go to find that file its not there is ios hiding it from me even though i am root??
unless i download them and serve them from the download
serve them off the same server or use redirects
why would you need to edit control files
Depiction, SileoDepiction, and Icon key
im not adding them locally that's too much work
sucks to suck then
are you really concerned about the people who will look at your package after theyve removed the repo they get it from

time to make notatio loader
first make notatio
notatio is release ready the upload just doesnt work if the site is slow
are you really concerned about the people who will look at your package after theyve removed the repo they get it from
@surreal mountain should i not be concerned?

@gaunt mesa i dont think you should
1.) who removes repos for tweaks they are using
@surreal mountain 0.) who even removes repos, i swear i see people with 100000 repos they never use
@grim sparrow that is cool and all but where is my NFC Fuckery alpha
@misty cradle dude
@surreal mountain 0.) who even removes repos, i swear i see people with 100000 repos they never use
@gaunt mesa factual
@misty cradle dude
@grim sparrow dude
dude
@grim sparrow did u compile
false
Yeah uploading now
ok
lol
charlie ur week has been great obviously /s
did u change control
No cba
ok
And I’m not compiling again
ok
That shit takes forever
My week has been fucked and I’ve done nothing on pretty much anything
@grim sparrow F
BRUH
Hope it gets better for u
I had to restart it at some point because my delegate was for Xcode 12
I am from now on an eta kid.
I had to restart it at some point because my delegate was for Xcode 12
@grim sparrow lol
@misty cradle when eta for WTF widget

Pray
question I am trying the dylibs for an app to reverse engineer some stuff. I have the name and path of the dylib but its not in the directory shown. Can Jtool2 or frida pull those dylibs from the phone memory?
Well i just figured out that all the dylibs are put into the dyld_shared_cache_arm64 file but how does one extract from that
Is this good enough for to be a app

Am i gonna get rich wit it

@gaunt mesa
@gaunt mesa
@narrow mason

Jtool2 -e doesn't seem to work 😦
i can get that raw text disassembly but not the bin why!!!
also thanks cock that was somewhat useful
@gaunt mesa bruh
bruh
can springboard just pretend it can communicate with sep please?
How do i call data from api doe thats the question
@proud geyser are you doing it in Swift
are you making open gate drm
@surreal mountain do you realize how stupid you sound
its already been made
dumbass
ok give me a dylib with it
go ahead crack sex
ah yes i did crack sex
by getting it gifted to u

my ass
its literally just springboard binaries

@lethal ice turns out using ida is a big brain move so now i am doing so
turns out?
HAHA NO WAY IT WORKED
@grim sparrow yes it’s swift n Swift ui
no way the powerful software ida worked...
no im saying no way i correctly extracted the dyld first try
Do you want a hand with network stuff?
ok

tru

@grim sparrow yes sure
:skoop:

:skuup:
Because fuck dependencies
__cstring:00000001A3600ACC aDeviceDoesNotS DCB "Device does not support stylus.",0
what?
@gaunt mesa do you realize how stupid you sound
it was a joke
I need to learn how to do multiple screens
Take one screen, then take another screen, and boom you got multiple screens
@gaunt mesa what's your issue?
@tepid olive ?
I need to learn how to do multiple screens
@proud geyser how are you doing UI
Swift ui

what the hell did i do this wrong
or is this how it should be
someone who has experience please enlighten me
You are doing it all wrong
/s
Thats normal, it just means that memory/symbol is in a separate library/binary that this binary depends on.
Tf your bitch as reversing
Lmao
Tf your bitch as reversing
@faint timber springboard
I need to learn to use IDA, and it’s helpful in this case
So win win
no
@surreal mountain ok if youre so experienced tell me what f5 in Ida does and why it’s useful (hint it’s literally the first thing you should know how to do)
bitch im adding dns records

go argue in dms
Imagine
literally 
literally
@misty cradle
@tepid olive springboard as in the tiny binary in CoreServices, springboard as in from the shared cache, or springboard from like ios 11 before it was put in the shared cache?
shared cache pretty sure
yeah that'll be it
shared cache have fun with that
@proud geyser how are you doing UI
@grim sparrow
Swift ui
@proud geyser
So can I load the dependencies into Ida at the same time or something


extracting from shared cache will lead to those annoying MEMORY things
full objc runtime info and shit
try that
@primal perch what iOS version is that
its just x64 but same thing for the most part
so yes, loading dependencies will fix it, but take like 12 hours and IDA will be unusably slow
Just So I know, how would I do that?
we need a good dsc extractor but I'm too dumb to make it


we need a good dsc extractor but I'm too dumb to make it
@lapis vessel doesnn't 7.5 have really good tools for this
IDA* oop
7.2 and above
:uhhhh:
@grim sparrow is something wrong with it??
I think maybe
I just don’t like it tis all
someone said it was overhauled in 7.5
I'm almost surprised @nimble parcel hasn't released anything
probably
right up his alley
we need a good dsc extractor but I'm too dumb to make it
@lapis vessel yes thats why @twilit jungle and i are making one, when i learn C, so approximately it will be released in 2023

@grim sparrow then what do you use old spring board or native react?
and cum breaks
ghost prolly remembers I tried to make one and it was so scuffed I quickly gave up
@grim sparrow then what do you use old spring board or native react?
@proud geyser old springboard???
ghost has a fully working one just dm him if you need one
yes u have to try over and over, until u succeed @lapis vessel
extracted
TRUE
lmao
Yk then drag n drop design thing @grim sparrow
Storyboard?
im surprised u haven't hopped onto the swiftui chain
Swift ui seems way more easier

nor programmatic non storyboard view
tale (renai)
using a window in appdelegate or whatever the fuck




