development

[misty cradle]

@lime pivot .

what is the E.

[lime pivot]

every time I make an assumption in my code I always think of how such assumptions destroyed people’s lives 😬

not that I can affect your life much

[lime pivot]

[misty cradle]

well imagine cephei causing a kernel panic during an important call or right before it, so you miss it

[lime pivot]

eee

see that’s why I don’t like this crazy code injection shit sometimes lmao

[misty cradle]

yeah i always worry i might get a kernel panic during something important lol

[lime pivot]

letting code be injected into random background shit like CommCenter is so scary but that’s another rant

I mean I just reinstalled macOS cause I finally got so sick of performance issues

and ended up just noticing that Catalyst is broken as fuck, when I’m literally on an almost bone stock install

no hacky shit installed, SIP is fully on

why does the text messaging app which is the one that’s on my phone that never crashes, have so many issues on macOS

MobileSMS on the desktop was a mistake

[gaunt mesa]

what does E stand for

[manic forum]

It stands for 14

[gaunt mesa]

ok

[nimble parcel]

@gaunt mesa did you sleep

[gaunt mesa]

yes

2 hours

[nimble parcel]

good I’m proud of you

[gaunt mesa]

thank you

[manic forum]

Who can help me pirate macOS
@tepid olive

[tepid olive]

@tepid olive
@manic forum

[manic forum]

@manic forum
@tepid olive

did you somehow get discord quoting back or are you manually typing it

[misty cradle]

@manic forum downgrade discord to v44

and youll have quotes back

v45 introduced replies

[manic forum]

but then i can't see replies

[misty cradle]

yes u can

it has support for replies but not sending them

[manic forum]

wait really

that's dumb

[misty cradle]

no

this is good

fuck replies

[manic forum]

i mean, it's good but wtf

[tepid olive]

Old discord build, but now I am on pc

So this is new discord now

If I switch to iOS I can use quote again

[misty cradle]

[tepid olive]

Ok

[misty cradle]

u are literally

https://cdn.discordapp.com/emojis/712506651520925698.png?v=1

https://cdn.discordapp.com/attachments/688124600269144162/785874911234359377/unknown.png

:frmask:

[tepid olive]

Check my status

[misty cradle]

true

[tepid olive]

balls/nuts

[manic forum]

are those your pronouns

[gaunt mesa]

[tepid olive]

Yes bro

How did you know

[half walrus]

careful someone'll call u transphobic

got called transphobic for saying my prounouns were bean/beans

[lethal ice]

absolute disrespect

[half walrus]

be cool to know what they are appcode

[lethal ice]

[half walrus]

i'd check in xcode except it has different errors

[lethal ice]

"yea theres an error good luck bro"

is it the @available shit

[half walrus]

it's likely a symbol collision between two exploits

gonna just disable one for now till i can properly fix/rewrite one of them

[tepid olive]

now they are "idc/idc"

according to twitter

[half walrus]

that is indeed on my twitter you are correct

[tepid olive]

[lethal ice]

c++

[half walrus]

this is the code causing that

in xcode anyways

in the other IDE it gives an entirely different error

despite being the exact same project

mm finally

kernel panic time

[tepid olive]

Self new

New

[marble tiger]

These look like c++ errors?

[tepid olive]

c++

[half walrus]

jfc

the zecops exploit is nuts

[marble tiger]

Anyone have an idea why I can see some symbols in nm, but I can’t get them with dlsym?

[lethal kayak]

which one

[grim sparrow]

I’d respect that

[surreal mountain]

FTS i assume

[lapis vessel]

@marble tiger nm lists exported and non-exported symbols, dlsym only finds exported symbols

[half walrus]

god its so

wonderful

[lapis vessel]

MSFindSymbol can find unexported symbols tho

[half walrus]

15 successful tfp0's in a row w/o a reboot

how far back does this vuln span?

[marble tiger]

Sweet, thanks

[lethal kayak]

what's the exploit called again

[half walrus]

FreeTheSandbox_LPE_POC_13.7

post exp is broken in the POC app

[surreal mountain]

12.0 iirc

might be 13.0

[tepid olive]

i have a question 👉👈 😳
how to install gcc/clang?

@tepid olive what platform

iphone7

https://cdn.discordapp.com/attachments/664531448665210880/785935145786015785/unknown.png

'-'

Please tell me you didn’t copy gcc from your pc to your phone

no

[surreal mountain]

what jailbreka are you usoing'

[tepid olive]

i tried iphone-gcc

[surreal mountain]

what jailbreak

are you using

[tepid olive]

checkra1n

[surreal mountain]

bruh

ok

[tepid olive]

Install from the repo of the bootstrap you are using

[surreal mountain]

go to cydia

and search for clang

[[clang]

[tepid olive]

i tried

[surreal mountain]

fuck

[[clang]]

[tepid olive]

clang

C, C++ and Objective-C compiler

Author

Sam Bingner

Version

10.0.0~svn-20191106+dcaf932-1

Repo

Bingner/Elucubratus

Bundle ID

clang

More Info

View on Parcility

Bingner/Elucubratus - Page 1/11 · Dec 8, 2020, 6:38 PM

[surreal mountain]

that one

[tepid olive]

but it say "i don't found stdio.h"

[surreal mountain]

get that

then you dont have stdio.h

[tepid olive]

ok but why

[surreal mountain]

you need to get an entire toolchain and sdk

[wicked hatch]

oof

[tepid olive]

;-;

i copied my includes form my pc

x)

it say gngngn i can't link "System"

[twilit jungle]

Follow the official theos setup tutorial

[tepid olive]

what's the link?

[twilit jungle]

Its on the wiki page of the github repo that you should have cloned

[misty cradle]

google dot com slash search question mark equal sign github theos setup

[tepid olive]

thanks

[grim sparrow]

True

[lean ridge]

who pinged

[surreal mountain]

me

[lean ridge]

woe

[tepid olive]

@lean ridge mov x16, #0x25 ; me

[lean ridge]

woe

[tepid olive]

halp i'm noob ;-;

i ;'c

i have the sdks

i'll see the interminable help ;'c

[primal perch]

@tepid olive use the sdk in the arguments

-isysroot/path/to/sdk/root

[tepid olive]

ok

[primal perch]

Then link frameworks / libraries as necessary

[tepid olive]

'-'

[surreal mountain]

what are you trying to accomplish

[tepid olive]

to fuckin compile a hello world ;-;

[surreal mountain]

do you have a mac

[tepid olive]

no

[surreal mountain]

L

[tepid olive]

well i installed

[surreal mountain]

get the linux toolchain

[surreal mountain]

https://archive.quiprr.dev/developer/toolchains/linux-ios-arm64e-toolchain.tar.lzma

fuck

[primal perch]

My man he’s just compiling it standalone

[surreal mountain]

bad link

@primal perch ok

and

[primal perch]

Just use sdkroot like that and you can compile

Clearly a tool chain isn’t required here because he already using arm64 clang

[tepid olive]

how

[primal perch]

Scroll up

[tepid olive]

no

i added the arm clang to the PATH

[primal perch]

Frcoal

[tepid olive]

from the toolchain

[primal perch]

Well you can either do that all manually or use theos tool preset

[tepid olive]

it's frustrating feeling as dumbass '-'

i installed from the wiki

there is no

._.

gimf

wait

i'm dumbas

i put 11.3 instead 11.2

it work :3 \o/

[twilit jungle]

Thats included in SDK

Its a c++ file so you have to specify which std lib to use

[tepid olive]

'-'

i'm cursed with my stupidity

?

[surreal mountain]

nah

i doubt

@tepid olive show code

#include <stdio.h>
int main() {
  printf("Hello World!");
}```

is all the code needed

[misty cradle]

sir that code wouldn't work

int main(), but return

[surreal mountain]

worked for me

[misty cradle]

[twilit jungle]

It does cause main is special

[surreal mountain]

not as good as it could be but poc

[misty cradle]

it is bad practice and main is not special

[misty cradle]

[surreal mountain]

remove the void

[twilit jungle]

master is not special but main is special

[surreal mountain]

[misty cradle]

@surreal mountain thats irrelevant

[surreal mountain]

o

[tepid olive]

remove void '-'

[misty cradle]

the voids means it doesn't take any args

[tepid olive]

why

and

[misty cradle]

@tepid olive keep it

[surreal mountain]

or just ()

[tepid olive]

ok

[misty cradle]

fr2

[tepid olive]

this guys emoticon faces are pain

[surreal mountain]

idk why yours doesnt work

nice

[tepid olive]

'-'

@misty cradle true

[surreal mountain]

#include <stdio.h>

int main() {
  puts("Hello World!");
  return 0;
}```

this works fine for me

put that in main.c

clang main.c

[tepid olive]

ok

[surreal mountain]

./a.out

[tepid olive]

it's the same code

just you replied "lol" by "hello world!" '-'

[twilit jungle]

[tepid olive]

what's "9"

maybe the signal

[twilit jungle]

SIGKILL

[tepid olive]

'-'

You need to give a couple entitlements to run outside of the sandbox

[tepid olive]

are you signing your a.out executable with ldid?

oh

[surreal mountain]

wait

[tepid olive]

no

[surreal mountain]

are you running this on ios

[tepid olive]

yes

[surreal mountain]

stop

dont do that

oh

[tepid olive]

'-'

[surreal mountain]

oops

[tepid olive]

i compile on my pc and i run on my iphone '-'

[surreal mountain]

ldid -s a.out i believe

[tepid olive]

I think that's the most inefficient way to learn programmi g lol

[surreal mountain]

idk the ldid shit

[tepid olive]

oh ok

[surreal mountain]

@tepid olive true

[tepid olive]

why not just run it on your computer?

[surreal mountain]

@tepid olive ldid -sa.out

[tepid olive]

ok

[surreal mountain]

@grave sparrow thanks 🙂

ur right

mine just worked

i didnt do entitilements

ill scp and test

[tepid olive]

he needs ldid -S<entitlement file> -P ./a.out

[surreal mountain]

bad cpu type

[tepid olive]

where the entitlement file is an xml of entitlements

same

it's killed

Just run it on your computer

[twilit jungle]

[tepid olive]

Not worth the trouble of fighting with ios

[surreal mountain]

yeah tbh run on pc

[tepid olive]

but ;'c

and that way you can easily debug your code and stuff

but i wanted to make a

[surreal mountain]

u can do it on ios

but testing isnt worth

[tepid olive]

i wanted to try to make backdoor '-'

for fun ;'c

[surreal mountain]

bruh

[twilit jungle]

backdoor

[tepid olive]

bro

[wicked hatch]

hum

[tepid olive]

i'm bored idk what to do

[twilit jungle]

Thats not how backdoors work

[wicked hatch]

if i get the right tool i can compile my code for ios without change it ?

[misty cradle]

backdoor

[tepid olive]

;'c

stop mocking me

Wtf are these emotes

[surreal mountain]

IM SAYING

nice pfp

[misty cradle]

@tepid olive the tutorial to backdoor is in here

[twilit jungle]

[tepid olive]

if you want to make a "backdoor" you should learn programming first

[misty cradle]

@tepid olive u look like a 8 year old in pfp bro

[tepid olive]

And fighting with ios will be the most painful journey lol

[wicked hatch]

ahah

[misty cradle]

waiting for christmas

[surreal mountain]

ios is aids

[tepid olive]

Ok

[surreal mountain]

just use some like js or something for reverse shell

[misty cradle]

@tepid olive u look cute bro

[tepid olive]

no

[misty cradle]

not in bad way

[surreal mountain]

procursus has node

[misty cradle]

[tepid olive]

i wanted to make a programe that run in background and sans sms '-'

[surreal mountain]

ok

[tepid olive]

by reading sms sqlite database

oh

[surreal mountain]

learn c/objc

then make daemon

uroboro's github has examples for both

🙂

[tepid olive]

yea first you need to have a solid foundation of programming you cant go from hello world to that in one day

[twilit jungle]

Or in a few weeks

[surreal mountain]

i made a tweak with no prior knowledge

dont recommend it

[misty cradle]

well if you change the definition of one day for yourself, you can do everything in 1 day

[surreal mountain]

fr

[twilit jungle]

Never sleep

[surreal mountain]

i mean

[misty cradle]

true

[surreal mountain]

oke

[misty cradle]

@ krit

[wicked hatch]

with macos its more easy or not to compile for ios 12 ?

[grim sparrow]

I mean

[twilit jungle]

What are you trying to compile?

[grim sparrow]

It depends lol

[wicked hatch]

it depend of what '-'

[grim sparrow]

what you're compiling

etc

[wicked hatch]

c++ '-'

[twilit jungle]

But for what? to make app, game, tool, or OS?

[wicked hatch]

to test

i already made a normal app with xcode

[twilit jungle]

So tool, in that case its going to be the same on any platform with Theos.

[grim sparrow]

Once you've setup it's just as "easy"

all that differs is the setup

[twilit jungle]

With the exception of working directly on device, you have to be a little crazy to do that.

[wicked hatch]

:(

i have already made a hackintosh it cant be more difficult no ?

[grim sparrow]

lol

[tepid olive]

Shouldn't be harder

[grim sparrow]

true

[wicked hatch]

i know mdr

[tepid olive]

But I dont understand why you insist trying to run on device

It would be so much easier to develop/run on a computer

[wicked hatch]

there is no fun to run on windows

[tepid olive]

oh

fair lol

wait is this the same person o.o

[wicked hatch]

no '-'

[twilit jungle]

[grim sparrow]

why do you always end with '-'

[tepid olive]

mdr

[wicked hatch]

yes

[tepid olive]

je suis mort

Yeah you switched accts lol

wtf is happening

[wicked hatch]

no

[tepid olive]

Lol

[grim sparrow]

...

[tepid olive]

or not?

no

[grim sparrow]

i am confused

[tepid olive]

he's my friend

oh

[wicked hatch]

yeah

[nocturne yacht]

[tepid olive]

quoi

oops

[twilit jungle]

Its the same person on different computers, why is that so confusing?

[grim sparrow]

understandable

[wicked hatch]

no ._.

[tepid olive]

not allowed to don't speak in french

[late ridge]

[grim sparrow]

lol

[tepid olive]

ta mère

[twilit jungle]

[nocturne yacht]

Mdr

[late ridge]

not allowed to don't speak in french

[twilit jungle]

damare

[wicked hatch]

jte jure si ils vont dire oui oui baguette je les tue

[tepid olive]

j'ai pas compris la ref

[grim sparrow]

lmao

[tepid olive]

copy and paste this into a file called ent.xml in /var/mobile

[grim sparrow]

NO

[tepid olive]

<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>platform-application</key><true/><key>com.apple.private.skip-library-validation</key><true/><key>com.apple.private.security.no-container</key><true/></dict></plist>

@tepid olive

[nocturne yacht]

[grim sparrow]

wtf is this layout

[tepid olive]

And then do ldid -Sent.xml -P ./a.out

[tepid olive]

because it came from my notes app lol

[wicked hatch]

why its so slow :(

[grim sparrow]

oh understandable

[nocturne yacht]

Lol F

[grim sparrow]

nah that's still scuffed

<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>platform-application</key>
    <true/>
    <key>com.apple.private.skip-library-validation</key>
    <true/>
    <key>com.apple.private.security.no-container</key>
    <true/>
</dict>
</plist>

[wicked hatch]

ubuntu servers are not slow normalement

[misty cradle]

hi confused, i am tr1

[grim sparrow]

not funny

[misty cradle]

hi not funny, i am confused

[grim sparrow]

lmao

[grim sparrow]

pls stop

[misty cradle]

hi pls stop, i am not funny

[grim sparrow]

....

[wicked hatch]

i hate ubuntu

[twilit jungle]

[elder dust]

hey, are there an easy way to delete all files related to an app?
as even after deleting from Settings->Storage something still remains, only rebooting helps to clean everything

😦

[misty cradle]

bool kernel_ipc_port_lookup(uint64_t task, mach_port_name_t port_name,
        uint64_t *ipc_port, uint64_t *ipc_entry) {
    // Get the task's ipc_space.
    uint64_t itk_space = kernel_read64(task + OFFSET(task, itk_space));
    // Get the size of the table.
    uint32_t is_table_size = kernel_read32(itk_space + OFFSET(ipc_space, is_table_size));
    // Get the index of the port and check that it is in-bounds.
    uint32_t port_index = MACH_PORT_INDEX(port_name);
    if (port_index >= is_table_size) {
        return false;
    }
    // Get the space's is_table and compute the address of this port's entry.
    uint64_t is_table = kernel_read64(itk_space + OFFSET(ipc_space, is_table));
    uint64_t entry = is_table + port_index * SIZE(ipc_entry);
    if (ipc_entry != NULL) {
        *ipc_entry = entry;
    }
    // Get the address of the port if requested.
    if (ipc_port != NULL) {
        *ipc_port = kernel_read64(entry + OFFSET(ipc_entry, ie_object));
    }
    return true;
}```

[tepid olive]

Use app manager

"Apps Manager" I think it's called

[elder dust]

I don't think it will help, but I will check it. thanks.
there is something except of Data folders which hold memory

[twilit jungle]

RAM?

[tepid olive]

wdym by that

[elder dust]

swapped to disk?

[lethal ice]

ok

wtf

[misty cradle]

?

[lethal ice]

im glad they made the reply thing not copy the whole message

[misty cradle]

it is part of: https://github.com/Tr1Fecta-7/some-stuff/blob/master/Injector/kernel_call/kernel_memory.c

[lethal ice]

so much wasted space

[twilit jungle]

I don't think iOS has swapping

[tepid olive]

oh idk for me apps manager gets rid of all traces of the app so it's like a clean install

[misty cradle]

@lethal ice i hax kernel memory in my freetime

[twilit jungle]

But if reboot is what fixes it than it might still be in RAM.

[misty cradle]

fr2

[lethal ice]

@misty cradle u are literally schmu

[misty cradle]

@tepid olive i request cat picture.

[lethal ice]

wtf

[twilit jungle]

You have to be in [redacted] for that

Also ban all the leakers

[wicked hatch]

;-;

[lethal ice]

request advanced dev from nullpixel first

[misty cradle]

he will send... do not worry

fr

[lethal ice]

WTF

u leaked

[twilit jungle]

👀

[misty cradle]

leaked what bro

i leak pwn20wnd source code only

[lethal ice]

who

are u

[tepid olive]

We have a ✨special arrangement ✨

[wicked hatch]

http://security.ubuntu.com

[lethal ice]

tr1 has a ✨special arrangement ✨ with his uncle

[misty cradle]

[lethal ice]

@grave sparrow what does it do

[misty cradle]

shmoo my uncle

i thought this was supposed to be secret???

[lethal ice]

wtf

do only americans joke about getting raped by their uncle?

[tepid olive]

you are literally american lol

[lethal ice]

um

yea?

[tepid olive]

gcc main.c -S

[lethal ice]

emit asm is for losers

[tepid olive]

``asm

[surreal mountain]

gcc bad

[tepid olive]

fuck

[surreal mountain]

clang good

[lethal ice]

oh

thats easy

[nocturne yacht]

gcc

[tepid olive]

    .file    "main.c"
    .text
    .section    .rodata
.LC0:
    .string    "lol"
    .text
    .globl    main
    .type    main, @function
main:
.LFB0:
    .cfi_startproc
    endbr64
    pushq    %rbp
    .cfi_def_cfa_offset 16
    .cfi_offset 6, -16
    movq    %rsp, %rbp
    .cfi_def_cfa_register 6
    subq    $16, %rsp
    movl    %edi, -4(%rbp)
    movq    %rsi, -16(%rbp)
    leaq    .LC0(%rip), %rdi
    call    puts@PLT
    movl    $0, %eax
    leave
    .cfi_def_cfa 7, 8
    ret
    .cfi_endproc
.LFE0:
    .size    main, .-main
    .ident    "GCC: (Ubuntu 9.3.0-17ubuntu1~20.04) 9.3.0"
    .section    .note.GNU-stack,"",@progbits
    .section    .note.gnu.property,"a"
    .align 8
    .long     1f - 0f
    .long     4f - 1f
    .long     5
0:
    .string     "GNU"
1:
    .align 8
    .long     0xc0000002
    .long     3f - 2f
2:
    .long     0x3
3:
    .align 8
4:

[lethal ice]

just a syscall

[surreal mountain]

tf

[misty cradle]

yes i think so

[lethal ice]

lol

ok capt

[half walrus]

if i wanna have something emit asm i just bonk mass1ve

[misty cradle]

@lethal ice is that why ur birth certificate says Alabama

[lethal ice]

i will guide u thru this

[misty cradle]

[lethal ice]

@misty cradle

so kill is a syscall

[wicked hatch]

'-'

[lethal ice]

do u know how to perform syscalls in assembly

wait is this x64 or arm

[wicked hatch]

how you say "la flemme" in english '-'

[lethal ice]

idk x64

[twilit jungle]

arm64e

[lethal ice]

true

https://opensource.apple.com/source/xnu/xnu-2782.20.48/bsd/kern/syscalls.master

heres a list of all the ios syscalls

so searching for kill, you see it's defined like so: int kill(int pid, int signum, int posix);

yes

and see the 37 before?

thats the syscall number

idk u dont have to worry about that

x16

[half walrus]

arch specific but ^

[lethal ice]

you put the syscall number in there, then the args are like a regular asm function

@half walrus this is ios

[primal perch]

rax in x64

[lethal ice]

yup 37

decimal not hex

[primal perch]

As in

3 * 10

• 7 * 1

[lethal ice]

true

[primal perch]

True

[misty cradle]

as in 37 * 1

[primal perch]

True

[half walrus]

i mean you can but why

[primal perch]

If you want

[misty cradle]

as in 74/2

[primal perch]

A number is a number

[lethal ice]

you can if you want, the assembler will do it anywqays lol

[half walrus]

just type ‘#37’

with the pound sign

[lethal ice]

yes

[primal perch]

Or 0b00100011

[half walrus]

yes

[primal perch]

Same cause

[lethal ice]

but use # for immediates

[primal perch]

Value

[misty cradle]

@half walrus does that mean csharp is cpound

[lethal ice]

without it so ugly

[half walrus]

use the first one

readable

[misty cradle]

C# C-Pound

[primal perch]

Balls

Nut 7

[misty cradle]

C-- literal when

[half walrus]

otherwise you’ll open the syscall sheet and get confused about your code

[lethal ice]

set up your arguments then svc #any number really it doesnt do anything

syscalls are super straight forward i love

[primal perch]

Svc #69

The only way

[lethal ice]

yea tru

yep

supervisor call

aka kernel takes over

no

[primal perch]

No

[tepid olive]

The immediate is ignored by the hardware

[half walrus]

that goes in x0 right?

[primal perch]

Black fr

[lethal ice]

svc #X X is ignored by hardware

[tepid olive]

It does not matter

[misty cradle]

to whoever made this

https://github.com/char/akamai-deobfuscator/

i love u

[surreal mountain]

char

[primal perch]

Mellon

Meleon

[lethal ice]

yup

[primal perch]

True

[lethal ice]

but now you need the arguments

int kill(int pid, int signum, int posix)

pid in x0, ...

80

[primal perch]

Keep in mind there’s nothing special about x16 in hardware it’s just what the kernel interprets as “yea we using this”

[misty cradle]

she said i drove her away with my emotions

[lethal ice]

but also C doesn't use syscalls

[half walrus]

just use svc #80

[misty cradle]

wtf capt depressed too

he knows this song

[half walrus]

and don’t worry about it ever beyond that

[misty cradle]

this is a sad hours song bro

not normal

[lethal ice]

yes

[primal perch]

Libc uses syscalls

[half walrus]

args go on x0, then x1, then x2

and so on

[lethal ice]

[tepid olive]

x0-x7 then the stack

[primal perch]

x0-x7 yea

Balls

[lethal ice]

stack

[tepid olive]

Push them onto the stack

[half walrus]

use C

[lethal ice]

no

[primal perch]

Subtract stack pointer, str

[lethal ice]

stack

why do you want more than 8 args tho

[primal perch]

Objc

[lethal ice]

also you can use other registers however you want

[misty cradle]

wtf there are ads in npm

[lethal ice]

C standard is just that, a standard

[half walrus]

if ur writing assembly using anything with 8+ args u shouldn’t be writing ur program in assembly

[misty cradle]

this is why js and nodejs bad

[lethal ice]

you dont have to follow it

[primal perch]

Use x0 however you want, abi is for nerds

[late ridge]

LOL

[primal perch]

There’s 8 of them because electron

[surreal mountain]

alias cat=bat

cuz bat is better

[lethal ice]

lol u gotta recompile every time to change the pid

[primal perch]

Christmascoop

[lethal ice]

Christmascoop

[half walrus]

someone should write an assembly interpreter

[primal perch]

You might need to ldr if that doesn’t fit

But it should

[lethal ice]

@half walrus its called emulation

[primal perch]

True

[half walrus]

like on device

[lethal ice]

probably

[misty cradle]

why do people do this

https://i.imgur.com/2355pbm.png

[tepid olive]

That's called execution lol

[misty cradle]

obfuscated js

[lethal ice]

waot

[primal perch]

how many bits per immediate arm64 @tepid olive

[half walrus]

im actually retarded wow

[lethal ice]

immediates change size

[tepid olive]

For what

[primal perch]

Wait I think it’s 19

[grim sparrow]

no you're amazing

[primal perch]

Mov

[tepid olive]

which mov

[lethal ice]

ye

[primal perch]

The orr alias mov

[lethal ice]

theres like 500 movs and only half of them are actually mov instructions

[tepid olive]

I dunno lol

[lethal ice]

the rest are aliases lol

aliai?

[tepid olive]

you're talking about movz then i'd jave to look it up

[primal perch]

Thought you’d know because of big brain

10/10 memorization

[tepid olive]

I only know the branches because they stick out so much

[lethal ice]

i know b/bl uses a 26 bit immediate

• 4 tho

[primal perch]

True

No jank

[half walrus]

it’s neat how many people here know asm now

[lethal ice]

"now"

[primal perch]

X86 just jump to the middle of an immediate

[twilit jungle]

Still not enough

[lethal ice]

yes

[tepid olive]

yes

[half walrus]

used to be just mass1ve

[primal perch]

[lethal ice]

wtf i learned assembly last year

[primal perch]

Same

We wrote zoomboi bro

[tepid olive]

x86 is insane you can literally encode the entire destination in the opcode because of variable length instrs

[primal perch]

Intjcum

X64 can have 15 byte long instructions

Well it’s for return

[tardy narwhal]

trust in x86

[primal perch]

You don’t syscall everything

[twilit jungle]

[tepid olive]

kernel will ERET back to EL0

you do not need a ret

[lethal ice]

ret

[primal perch]

br x30

[tepid olive]

ret

[primal perch]

True

[lethal ice]

br x30

[half walrus]

this is gibberish to me and i kinda like to think i know what i’m doing

[primal perch]

True

Arm and x64 are both cum

[lethal ice]

lol arm64 manual speak

[misty cradle]

ok time to hit up old dead friend

[tepid olive]

Lol it's just the result of going down rabbit holes

[misty cradle]

he had an akamai bypass

tor browser here i come

[primal perch]

True

[misty cradle]

true

[primal perch]

Beans

[half walrus]

[primal perch]

Not false

[misty cradle]

a nightmare is trying to solve recaptcha while in tor

[tepid olive]

krit exploit dev now??

[half walrus]

Leviathan 13.7 eta now

[half walrus]

no not yet

[misty cradle]

[half walrus]

which is why i can’t flex this on twitter despite it taking like 6 hours

[tepid olive]

6 hours for what?

[half walrus]

implementing it in this jb

[primal perch]

When tr1 assembly

[tepid olive]

oh well it took me 4 months to pop 13.1.2 so you're not alone

[half walrus]

main thing was i hadn’t touched the code for this jb or this exploit before tonight so

all of the post exploit code in the zecops POC is borked

and it’s also all interwoven in like 2-3k line files

and the post exploit for the jb is also borked since it was written for 12.x

[primal perch]

So hyped to get the Witcher 2 tomorrow

[misty cradle]

fr2 after exam

[primal perch]

Finally new cdpr game

[misty cradle]

i promise ok

[primal perch]

[half walrus]

feels like ive done everything else so at this point im ready

[primal perch]

Join the club

And I still dont get anywhere

[half walrus]

kinda feels like the process of writing a jb doesn’t take much skill tho

but there’s not really any opportunity for me to write my own exploit rn

[misty cradle]

u forgot mach port stuff

[tepid olive]

There's a lot of public bugs

and you can make your own bugs with pongo modules, patch the kernel inside pongoOS

Like nop out an instruction that zeroes a pointer field that is freed

[grim sparrow]

big oof fuc

k

[primal perch]

It means you need libtinfo

[grim sparrow]

Damn I'm gonna change all my fatalErrors to "big oof fuck"

[primal perch]

Are you on arch @tepid olive

Obtain ncurses5-compat-libs from the AUR

[half walrus]

aye

[grim sparrow]

[primal perch]

you think its a coincidence that the person who spends significantly less time on (this) discord has more success

therefore discord = shit

[grim sparrow]

shush

[primal perch]

deleting account rn

bye

[grim sparrow]

cringe

[primal perch]

true

[grim sparrow]

fr

[primal perch]

optionals are kinda cringe ngl

[twilit jungle]

[tepid olive]

FACTS

D 🌲

🎄

[faint timber]

about damn time

[twilit jungle]

[grim sparrow]

still gonna use light mode

[lethal ice]

ive had that for months

[tepid olive]

github nfr mode

*frcoal mode

[tepid olive]

[faint timber]

@lethal ice same I just deleted the extension

[tepid olive]

POV you use github light mode:

[primal perch]

i didnt even know that existed noice

dark mode time

pepe 10 leave

[tepid olive]

ldid (CoolStar Standalone Fork)

fork of ldid for CoolStar's tweaks (deployed to device because AGPL requires it)

Author

CoolStar

Version

2.1.2

Repo

Packix

Bundle ID

org.coolstar.ldid

More Info

View on Parcility

Packix - Page 1/1 · Dec 8, 2020, 9:08 PM

[[balls]]

PageDots - PokeMyBalls

PageDots - PokeMyBalls will mod the pagedots of your BuufJuiced homescreen

Author

BuufJuiced

Version

2019-03-26

Repo

YouRepo

Bundle ID

com.yourepo.buufjuiced.pagedots-pokemyballs

More Info

View on Parcility

YouRepo - Page 1/7 · Dec 8, 2020, 9:08 PM

[twilit jungle]

And you didn't tell us...

[half walrus]

why do we put prefs in Settings.app

[primal perch]

why not

[misty cradle]

fr

[half walrus]

because when you change a preference option that causes the device to enter safe mode, you have to entirely uninstall the tweak to fix it

jfc

[misty cradle]

<@&355174844205367317>

fix

[restive ether]

L

[primal perch]

retard

[restive ether]

hold

[inner quail]

penis

[eternal crater]

[primal perch]

gm

[misty cradle]

bro i dont wanna watch juventus vs barca

fr2

[half walrus]

bump

[primal perch]

gm le @eternal crater and le @restive ether

[restive ether]

gm

[eternal crater]

Gm

[restive ether]

https://tenor.com/view/stormworks-borann-boys-le-fishe-elite-dangerous-nanhat-gif-18989741

[primal perch]

and le @ Administrators

true

[half walrus]

why no Tweaks.app

[primal perch]

true but then it's all in one place and we don't have to use some shittily made tweaksettings.app

[twilit jungle]

Why do prefs need to be in separate process?

[primal perch]

true

why do prefs exist

[half walrus]

^

[primal perch]

ios should read my mind and change to my will

balls

[half walrus]

ok but this unironically

why do ppl make tweaks for apps then put the settings in a different app

u don’t go to settings to change the regular app settings

[twilit jungle]

[primal perch]

bottom text

[twilit jungle]

copy pasta not available

[primal perch]

read x0 after a syscall to get result code or output

odds are it just returns some predefined value that means error

[half walrus]

@vivid dew did something of very little actual value

implemented the FTS zecops 13.x exploit

[primal perch]

[misty cradle]

Leviathan.ipa

25.65mb

[half walrus]

post exp is borked as fuck though

[primal perch]

com.tr1fecta.sentro.0.7beta.deb

[twilit jungle]

1 GB

[primal perch]

true

too much furry porn in it

[misty cradle]

true]

[primal perch]

it needs balls

maybe nuts even

[half walrus]

u can use hikari to make a 50MB bin from a 1 line .c

[misty cradle]

https://cdn.discordapp.com/emojis/775867984123527178.png?v=1

[primal perch]

for 64 bit things yes, i think 128 bit its shared between x0 and x1

[half walrus]

it’s wherever the assembly wants

[primal perch]

and anything larger like a struct idk

[misty cradle]

i see an emoji

[primal perch]

i see that cringe anime screech

[misty cradle]

u used to send here

yes that one

[primal perch]

[misty cradle]

yes

that

[lethal ice]

why do i keep getting ghost pinged here

fuck u whoever it is

ok

shep

[misty cradle]

no one wants to ping u @lethal ice

wym

[primal perch]

true but it wasnt me last time

or i forgot

[misty cradle]

/s

[primal perch]

@lethal ice @misty cradle pinging

[half walrus]

compiled C is gonna shove it on x0, doesn’t matter where you put it in your own asm

[primal perch]

lmao

[misty cradle]

[tepid olive]

ping

[inner quail]

Who pinged

[primal perch]

arguments and return values dont exist its just a standard of reading certain things in certain places

[half walrus]

when u realise this while learning asm

[primal perch]

true

[half walrus]

i mean im retarded but it was a mindfuck

[primal perch]

its mind blowing

you cant look at any programming language the same way

there are no variables

only number

only logic gate

[twilit jungle]

[primal perch]

true

[tepid olive]

ping

[primal perch]

pong

[misty cradle]

pong

[twilit jungle]

@misty cradle One of these days the ghost ping will actually work

[misty cradle]

[primal perch]

[restive ether]

die

[inner quail]

Blocked

[misty cradle]

@restive ether ok

@inner quail nooo

:(((

[primal perch]

GG

[inner quail]

Demoted

Banned

[misty cradle]

[half walrus]

there are 32 int variables and a fuckload of fancy words that do things to then

[misty cradle]

ok rev

[inner quail]

Shunned

[misty cradle]

[inner quail]

[restive ether]

https://youtu.be/DtL_giO-EB8

[inner quail]

Never

[restive ether]

enjoy

[twilit jungle]

No it doesn't, literally get a notification on phone and Discord Inbox shows it as well if I am not on the screen already. If I am on the screen then I can already see it. Literally never works.

[primal perch]

not even words just program that takes words to more number nfr

[inner quail]

Vibes

[primal perch]

[misty cradle]

@twilit jungle true

well dnd mode on desktop

fr2

[primal perch]

true

[tepid olive]

k

[lethal ice]

yea good job whoever is being a retard notifications are off now

[grim sparrow]

gg

[primal perch]

true

@here

@everyone

one day

@ Geniuses

[misty cradle]

true

we need to exploit the bot into pinging /s

[primal perch]

it worked wtf

ultra here

[misty cradle]

who ping

[lethal kayak]

same

[primal perch]

[misty cradle]

[primal perch]

balls

true

lmao

[lethal kayak]

True

Fr lego

[primal perch]

frleg

[misty cradle]

:body:

[primal perch]

o

⭕

[misty cradle]

:body:

[twilit jungle]

:body:

[half walrus]

so half the channel knows asm now what’s next

[primal perch]

🦵⭕

[misty cradle]

[half walrus]

who’s gonna write a tweak in logic gates first

[lethal kayak]

True

[twilit jungle]

[primal perch]

using f5 in ida doesnt count though @half walrus

so more like 1/20

[lethal kayak]

Ok

Invite

[primal perch]

pls join leviathan dev channel

[lethal kayak]

[pearl sail]

[primal perch]

true

[misty cradle]

https://i.imgur.com/nKam0uq.png

waiting.

[lethal kayak]

[primal perch]

trollkillher wtf

[half walrus]

forgot how old leviathan is lol

voucher_swap moment

[tepid olive]

Who ping

[half walrus]

pung

[late ridge]

this is cringe

[primal perch]

and any self respecting person will buy it anyway

you dont want to look like a brokeass do you ?

[late ridge]

[half walrus]

tbf

first airpods that don’t look dorky as shit

[late ridge]

[primal perch]

ive spent like 500 on headphones in the past few months and still got more value than whatever airpods max will give

[late ridge]

they're not awful

[tepid olive]

Who ping

[half walrus]

only reason people don’t say current airpods look dorky is because they were immediately associated with being “rich”

[tepid olive]

Tr1

[late ridge]

llol tru

[tepid olive]

@misty cradle

[half walrus]

it’s such a wack design for earbuds

[heavy kernel]

who pinged

[tepid olive]

No bro it’s very cool statement

[half walrus]

there was a spambot

[tepid olive]

Stayin alive

Indeed

[heavy kernel]

oh sorry that was me

[tepid olive]

Oh

[tepid olive]

The pros definitely dont look dorky and the ogs still look dorky

Lmao

[heavy kernel]

what was it spamming

[half walrus]

facebook video link

[misty cradle]

ok

gn

[heavy kernel]

ok

gn

[half walrus]

the pros look better, but it’s still just objectively weird design

[late ridge]

ya

sure

[heavy kernel]

when are they releasing the airpod subwoofer

[late ridge]

[half walrus]

like q-tips sticking out of your ears

[heavy kernel]

😩

[tepid olive]

They’re pretty subtle tbh

[half walrus]

that deadass only looks good bc of the mask

[tepid olive]

How

[late ridge]

LOL

[primal perch]

this is what airpods will look like in 2024

[late ridge]

for the rich

[half walrus]

r/vinyls

in a nutshell

[primal perch]

even though any modern press is just the digital one

[heavy kernel]

personally i hook up the electrical current of my headphones directly into my brain