development

[lime pivot]

this is not three separate products!

[tardy narwhal]

It’s Windows Mobile!

[wicked summit]

“iPhone”
“I peed, had only nine erections”

[lime pivot]

this is one product, and we’re calling it… Windows Phone 7

Zune is such a depressing story

Microsoft rushed it out the door… they literally didn’t even produce anything

the original was a rebranded Toshiba MP3 player

[restive ether]

windows phones were trash

[tardy narwhal]

my inner NT fanboy is crying

[lime pivot]

how do you kick off a brand you’re already late to the trend with and not think maybe it’s a disaster from the beginning if you don’t even have time to make your own product

it’s funny to think of a Toshiba MP3 player when they’ve basically entirely gotten out of the consumer market now

can you imagine if Microsoft went into partnership with Toshiba for Windows Phones and bought and subsequently ruined their phones division

[lime pivot]

don’t you want to have a Windows 2000 Pentium III computer in your living room?

[valid venture]

remember windows games live?

[lime pivot]

big OG Xbox moment

[valid venture]

cause I don’t

[lime pivot]

all I remember is wasting time on Microsoft Hearts online

not that I was any good at it

but it was better than playing against the CPU for the 747364582th time

yeah still conflicted 😬 I feel like if it could have a few more features it would be an easy yes, but I don’t think it’s right to force a product direction on you just to get it on Chariz

[tepid olive]

yeah, i don’t really have any ideas on how to expand it further tbh. probably just gonna be something i’ll put on my personal repo

[restive ether]

oh i saw you did that tweak bounty @tepid olive

thanks for reminding me about something i liked and forgot about

[tepid olive]

yes

looked easy, it was

also looks nice

gonna put the image here again for no reason

oh damn i thought i changed my pfp back before i made that screenshot

oh well

idc

[restive ether]

exposed as a catgirl on r/TweakBounty

sick

[tepid olive]

wow this app kills itself

it has good jb detection

[AMBypass]: Opening file at path /etc/passwd why are they opening this

IS THIS HOW THEY

wtf

oh boy

[AMBypass]: Opening file at path default.profraw

AHHHH

[tardy narwhal]

I will purchase whenever I spot one

the windows love is real

[tepid olive]

yeah it knows im hooking it

smart app

"hooking an app"

[lime pivot]

eh testing presence of files doesn’t feel like “good” jb detection

[tepid olive]

its not, im just wondering why they are opening /etc/passwd

they definitely do more, otherwise the other 2 people who tried would've done it already

[lime pivot]

check if root pw or shell has changed I guess

[faint timber]

@tepid olive what app

[lime pivot]

I really wonder why few apps seem to check for presence of HBPreferences

few or no

[tepid olive]

amazon music

[lime pivot]

I’ve never seen anyone have to write a hack to hide classes/methods from runtime lookup

[tepid olive]

[AMBypass]: Opening file at path /bin/bash

ayy

thats sus

[faint timber]

@lime pivot snapchat

[restive ether]

amazon music’s jb detection is cancer

[valid venture]

Maybe checking if the password hash is still alpine, mobile can read it I guess

[lime pivot]

funny because /bin/bash existed on tvOS 10 or something

god knows why

[faint timber]

I'm currently reversing snapchat successfull so far although the goal is not drm

[tepid olive]

[AMBypass]: Opening file at path default.profraw isn't this some dyld shit?

[lime pivot]

replacing it = brick

[tepid olive]

i dont remember tbh

[faint timber]

@tepid olive just use xnuspy?

[tepid olive]

never heard of that

[lime pivot]

I recognise that name like it’s something that shows when I debug apps from Xcode or some shit like that

[restive ether]

pongo extension.

[tardy narwhal]

https://github.com/jsherman212/xnuspy

enhance thyself

[faint timber]

how do you think I bypassed pogo each and everytime @tepid olive

logging all syscalls

xnuspy

[lime pivot]

it checked for HBPreferences?

[tepid olive]

ooh this looks useful

[faint timber]

@lime pivot no but needed hacks to hide classes

look at snaphide

[restive ether]

cephei makes you get banned on snapchat confirmed

[lime pivot]

I guess they tried literally everything since cokepokes was fucking good at fighting back every time

[faint timber]

@lime pivot now I'm going to be the snapchat guy

don't care for drm rn

[tepid olive]

i cant wait to get that iphone 7 so i can finally have a device that properly works with checkra1n on 14

[faint timber]

because the stuff Im working on can use older snap

my ida history be like

[lime pivot]

that just made me realise I can update my 7 to 14 now

I left it on 12 cause I didn’t have another phone for it

[gentle grove]

Why is that so small

The ida

[faint timber]

its not?

[lime pivot]

now I repurposed my crunchy 5s for 12

[faint timber]

oh

cuz

[gentle grove]

It looks tiny

[faint timber]

4k monitor

[gentle grove]

I thought macOS was good at dealing with high dpi

[faint timber]

dpi?

[gentle grove]

dogs per inch

[faint timber]

btw this is wine

[gentle grove]

dots*

Oh

[faint timber]

but discord is pretty small too

[gentle grove]

It should still work but whatever

[tepid olive]

yoo the app started

and didnt crash itself

[faint timber]

@tepid olive do fatego next

requires codesign/.text sig bypass tho

never got around to it

[tepid olive]

fatego?

[faint timber]

thats what its called

[tepid olive]

LOLLL

why is it checking for itself in dynamic libraries

[faint timber]

its not

oh wait

tf?

make sure your logging is correct

[tepid olive]

uhh it is im pretty sure

    NSLog(@"[AMBypass]: Checking for file at path %@", path);```

idk how this would fuck up xD

[AMBypass]: Checking for file at path /Applications/Cydia.app

BRUH

are apps normally allowed to access /System/Library/CoreServices/SystemVersion.plist?

[AMBypass]: Checking for file at path /usr/sbin/sshd interesting

[faint timber]

@tepid olive every app reads that on launchd afaik

iOS libs not manually

[tepid olive]

ah i see

On launchd

[AMBypass]: Checking for file at path /Library/MobileSubstrate/DynamicLibraries/AMBypass.dylib, orig is 1

WTF

they know my dylib and are checking for it

what is this shit

LOL

[faint timber]

for file in dir

noob

[tepid olive]

nah nah

none of the other dylibs

are checked

[wicked summit]

/**

[tepid olive]

Maybe they check every library loaded?

ok i fixed the app freezing

That's why they are checking Foundation, libobjc, AmazonCloudPlayer, UIKitCore

oooh

trueeee

that makes sense

[wicked summit]

@grave sparrow if I hook a binary, can I get the arguments passed to it?

how

[tepid olive]

Well

[tepid olive]

env

argv

Damn. Must suck

nsprocess env

[wicked summit]

ahhh ok

pog

thanks

[tepid olive]

oh args not env

LOL

my b

Amazon music really thinks its hot shit to put a jb check huh

[wicked summit]

now a tweak to hook apt

[tepid olive]

i have a start

[wicked summit]

and stop running if captinc string found in args

[tepid olive]

this is good

@wicked summit don't you fucking dare hook apt

[wicked summit]

I will

[tepid olive]

libhooker won't hook it anyway

[wicked summit]

pog

ok? I’ll hook libhooker

😐

[tepid olive]

ObjC Is A Virus(YulkyTulky)Today at 10:30 PM
ok? I’ll hook libhooker
😐

Impossible

[wicked summit]

ok

[tepid olive]

it is possible

I said it's impossible, so it's impossible

[wicked summit]

East coast pog

[tepid olive]

Simple as that

[tepid olive]

it is possible

[wicked summit]

@tepid olive where do you live

like your address

[tepid olive]

alabama

[wicked summit]

Raiding rn

Alabama isn’t even east coast

L

[tepid olive]

same but i’m not jailbroken

i just cancelled it

¯_(ツ)_/¯

[wicked summit]

“Well” same

[gentle grove]

New Washington

Pencilvania

[wicked summit]

Ummm

Guys

Umm

[tepid olive]

discord logged me out

[wicked summit]

I just found something out guys

Jailbreaking your iPhone is against Apple TOS...

Fuck

[tepid olive]

[AMBypass]: Checking for file at path /Library/MobileSubstrate/MobileSubstrate.dylib, orig is 0

LOLLL

Damn you really showed amazon

Guys iOS 14 jb, scan qr for download

MobileSubstrate.dylib

where can i get

[tepid olive]

XD

[faint timber]

@tepid olive its not fun unless you are hooking syscalls + pattern scanning

[tepid olive]

true true

i am new to this shit so just figuring stuff out

Someone please scan the qr

[faint timber]

the syscall gang: scoob, cryptic, shmoo, jacob

[tepid olive]

Who's jacob

[wicked summit]

call

[faint timber]

jcx

@tepid olive

[tepid olive]

who dat

[faint timber]

@lean ridge

[tepid olive]

Oh

[faint timber]

lol the top 5 pins in this channel

[tepid olive]

how hook syscalls

[faint timber]

look at my github

fate

[tepid olive]

ok

[faint timber]

damn wtf

I did that 4 months ago

????

where did this year go

wtf

https://github.com/cryptiiiic/fate

I can't believe how much of a mess this project is lol @tepid olive

[tepid olive]

%hookf(const char *, _dyld_get_image_name, uint32_t image_index) {

im already doing that

[faint timber]

yeh

you can also copy the snaphide stuff

at the time snaphide was not public

but I was doing that already

[tepid olive]

https://github.com/Cryptiiiic/fate/blob/d72c59a72498fa1617b879d59ac07c03004873e5/Tweak.mm#L109 __builtin_bswap my guy

Or maybe that's a gcc specific thing

I had the displeasure of compiling with gcc for my operating systems class

And using gnu tools in general

holy shit asm nooooo my brain

[lean ridge]

kek

[faint timber]

the macros made it readable tho

@tepid olive thanks

[tepid olive]

Np

[lime pivot]

checking for Sileo.app 2 times, just in case it decides to show up the 2nd time

[tepid olive]

😳

Haunted file system

[tepid olive]

and zebra

and flex

[faint timber]

@lime pivot I never implemented the codesign bypass so this was never working to begin with it was sort of hacked together

[tepid olive]

Why are you slandering gnu tools? do you prefer BSD tools? you monster, BSD tools suck ass

codesign bypass

No I just meant gcc and gdb lol

ah

[faint timber]

@tepid olive check snaphide for what I mean

[tepid olive]

I was worried you were talking about coreutils

[faint timber]

CS_VALID

[tepid olive]

nah coreutils pretty legit

Even with gnu's coding standards and their repulsive macro abuse

[faint timber]

bsd makes me want to delete my computer

[lime pivot]

coreutils finally got copyfile support recently

[tepid olive]

https://github.com/AeonLucid/SnapHide/blob/master/Tweak/Detections/codesign.xm this?

[faint timber]

yes

[lime pivot]

cp can now do an APFS COW copy if you specify some obscure flag

[faint timber]

cs_ops

CS_VALD etc

[lean ridge]

@faint timber did you ever manage to finish your fate bypass

[faint timber]

@lean ridge no

[lean ridge]

F

[faint timber]

now Im doing api reversing

[tepid olive]

Oh geez this afternoon my computer would not boot for 45 mins

[faint timber]

drm not needed

[lime pivot]

aka all it has to do is create the filesystem entries pointing at the original files' inodes

[tepid olive]

And then it just fixed itself and booted

and I sat there like "😀okay"

[lime pivot]

reminds me of that jailbreak that wouldn't boot in the dark

[faint timber]

@tepid olive got my iphone into a glitched state, booted for 35 mins

even after reboot

[tepid olive]

https://github.com/AeonLucid/SnapHide/blob/master/Tweak/Detections/codesign.xm#L21 what format are these thingies even in, i have no idea lmaooo

[lime pivot]

accidentally was relying on the value of the ambient light sensor, somehow

[tepid olive]

ugh i need to learn more low level stuff

https://cdn.discordapp.com/emojis/758224836547051521.png?v=1

Weird stuff like that never really happened to me

[faint timber]

thats armv8 asm @tepid olive

[tepid olive]

What jb lol

[lean ridge]

I'm still stuck on some bug with one of Frida's components when using it in my bypass. I tried to hone in on what the cause was a couple months ago with Frida's dev, but Frida's so ridiculously complex that everything went right over my head and I had no idea what I was looking at/for.

[tepid olive]

is there a coreutils mailing list archive?

nvm

im blind

[lime pivot]

I think it was evasi0n ios 7 or something

[faint timber]

@tepid olive evasion

[lime pivot]

or pangu 8.something

[tepid olive]

wtf lol

[faint timber]

tihmstar of all people fixed it...

[tepid olive]

I remember using evasion on my ipod 5 new years 2014 or something

Or maybe I am remembering wrong

[faint timber]

@tepid olive I've replaced my ipod 5 at least 5 times

[lime pivot]

legit people were like this jb makes my phone bootloop???? and someone figured out that if it's bootlooping, put it under a lamp and it'll magically boot

[faint timber]

I eventually learned that ipod batteries were purposely designed badly

but then again I was 11

[gentle grove]

guh knew

[tepid olive]

I did rm -rf on / on my ipod 4

Was a magical experience like almost a decade ago

@lime pivot you got the change log for that? or the mailing list thread for the patch?

[gentle grove]

did it remove all the malware

[lime pivot]

ah the good ole days where you had to make sure to not tear the extremely short ribbon cable connecting the digitiser, or spend half an hour trying to carefully reattach the extremely short display connector without breaking the pins on either side

not really

[faint timber]

@lime pivot the next exploit mystery is figuring out why an exploit won't work despite having an identicle kernel(offsets too) /cc @tepid olive

[pearl sail]

is google down for anyone else or is it just tripping for me

[faint timber]

works fine

[lean ridge]

@faint timber tfw someone who's not at all familiar with iOS naively suggests 'better' ways of syscall hooking than vm_write

[lime pivot]

iPods also had a pretty bad design flaw where any warping of the rear case would cause the home button and the contacts to become out of alignment

[faint timber]

works

[pearl sail]

my vpn maybe tripping then

[lime pivot]

"breaking" your home button

[faint timber]

who remembers the iPhone 5 deathgrip

celluar

[lime pivot]

4*

5 was fine

[faint timber]

4*

typo

[tepid olive]

my ipod touch got its home button fucked

[gentle grove]

google is never down

[lean ridge]

4 was the one you don't hold right

[gentle grove]

except for when it's down

[lime pivot]

Apple was so galaxy brain about it

look at how smart we are using the case as the antenna!!!

[lean ridge]

steve's ego got hurt

[faint timber]

@lean ridge its not even linux tho lol its bsd smh

[gentle grove]

YOU'RE HOLDING IT WRONG

[faint timber]

what an idiot

[lean ridge]

legit

[lime pivot]

oh um don't grip between the 3 pieces of antenna it kinda makes you lose signal

[tepid olive]

Lol that's a gigantic display of ignorance and it's my new favorite screenshot

[faint timber]

inb4 someone says iOS, linux, and bsd are the same thing despite having vastly different kernels/drivers

[pearl sail]

not even my VPN just firefox

[gentle grove]

bsd is literally linux

linus torvalds was secretly paid

[tepid olive]

iOS linux hurd and bsd are all the same

[gentle grove]

HURD

[faint timber]

yes but no

[gentle grove]

GNU/Hurd is the future

[lime pivot]

and then the special press conference with the Jonathan Mann song intro ("if you don't like it don't buy it!" which is obviously exactly what your shareholders want to hear!) and then Steve comparing iPhone dropped calls to other brands showing they're clearly superior

[lean ridge]

thankfully they took my word for it when I informed them of the differences, mitigations like KTTTR, KPP, etc. They're smart, just not so well informed about iOS :P

[lean ridge]

steve's words not mine

[tepid olive]

I know

[lean ridge]

lmao

[gentle grove]

ok why tf does holding the windows key while clicking on a channel in discord crash it

apparently this has been a bug for over 2 years when i asked someone

[lime pivot]

I think the missed calls was based on surveys of 3GS users, not real-world data from 4 users

so it was literally a meaningless statistic put in there to waste time

oh, almost forgot

they said the signal bar algorithm was always wrong since iPhone OS 1.0

[restive ether]

bars > dots

[burnt niche]

man fuck cheif keef

[wicked summit]

@grave sparrow can I blacklist bundle IDs in my .plist?

that should be a thing

yea

[twilit jungle]

If thats all your ctor then you should use the plist.

Unless that blacklist is dynamic

[wicked summit]

???

[lime pivot]

filter is whitelist not blacklist

[twilit jungle]

Ah right

[lime pivot]

you can't use it to negate loading into something or other (which I very much dislike)

[twilit jungle]

What would be a case where you would do blacklist?

[lime pivot]

powerloghelperd could have been one, given that links UIKit but isn't a UIKit app, and had an extremely low memory limit

but that's more of a hooking platform-level issue saurik refused to handle himself

[half walrus]

very much like to see someone do a 'stop crashing' tweak the 'right' way

[half walrus]

regarding loading into this

[burnt niche]

mr ghost..

it turns out that the gesture only worked because the view was 250 long

and the view was coming out from the reachability

if i make it 50 wide and 50 long so its only in the reachability. the gesture doesnt work @twilit jungle

so it turns out that i am going to be using the pointinside thing that i was doing

and i am not looking back this time

[twilit jungle]

Its probably being clipped

[burnt niche]

Fuck it

Idrc

I am just going to get the money and no refunds

[lime pivot]

"tweak" contradicts what I said that it should be the hooking platform's responsibility

[burnt niche]

Yo kirb i got a question

Jk

My bad im in a trolling mood

[lime pivot]

the "proper" fix would be to hijack dyld3 closures so memory usage is blamed against dyldd, not the process itself, also causing startup performance issues

well by performance issue I mean making process startup as slow as it was before dyld3

[burnt niche]

Right i get that. But when are we going to have storyboards for tweak development so i can drag a button to add on my tweak

[lime pivot]

no

[burnt niche]

Ight my bad im a quit trolling😂

[lime pivot]

failing that since it's all undocumented implementation details of dyld and potential of breakage is high (completely reasonable to keep doing things the old way because of that), make sure processes are only loading dylibs that are meant to be in and work in that process

[burnt niche]

[lime pivot]

congrats

[burnt niche]

Man i just posted a picture

I can’t have a picture with the n word on it apparently

[lime pivot]

I mean, don't do that anyway

[burnt niche]

Big facts

Ur right

[burnt niche]

Lmaooo

@tepid olive learning cpp?

Good luck

Im learning cpp rn

[tepid olive]

oh

[burnt niche]

For college

[tepid olive]

fucking neovim disc integration

why did I enable that

[burnt niche]

😂

[restive ether]

.

[tepid olive]

It's a plugin to coc

Neovim doesn't have disc integration built in

[burnt niche]

https://tenor.com/view/smiling-smiling-cat-cat-cute-kitty-gif-15081434

[tepid olive]

https://github.com/neoclide/coc.nvim

[tepid olive]

noob

bruh

gif

gir

tell me

want points

warn

#bot-commands message

[burnt niche]

Soon we ll be out of here @tepid olive

[tepid olive]

true

[restive ether]

nfr

[faint timber]

how do you hook a method that has a name that begins with numbers

theos doesn't like hooking it

[surreal mountain]

i know how to do this but i dont remember

[restive ether]

L

[surreal mountain]

%hook CockAndBalls

%end

%ctor {
%init(CockAndBalls=1CockAndBalls)
}```

i think its something like that

[faint timber]

thats for numbered class

what about if the method has numbers

[surreal mountain]

oh shit u right

[faint timber]

@glacial matrix your expertise is needed

[surreal mountain]

@lime pivot are you alive

https://pastebin.com/yTJhPuTB

compiling library for macOS

compiling for iOS works fine

[faint timber]

🙂

[tepid olive]

256

Wtf

[surreal mountain]

true

alias make=gmake

[tepid olive]

But why 256 wtf

[surreal mountain]

wasnt me

[faint timber]

@tepid olive stated many times because I can

[tepid olive]

But its stupid

[faint timber]

but mega lol

I can placebo 256 cores into existence

so why no compilo dad?

this is a prefix.pch issue

kirb talked about it before

but I don't remember lol

@tepid olive

[pearl sail]

@surreal mountain you have a server doing your compiling?

Oh wait that was @faint timber

Sorry quip

[faint timber]

no?

its my mac

[surreal mountain]

not in this but i do actually lol

[pearl sail]

Wouldn’t a server cpu give you worst performance than a desktop cou?

Since the clock speed is lower

But I guess with compiling code it is most numbers of cores and thread?

[faint timber]

fixed

ignore us

[lime pivot]

it’s debatable

nah this isn’t prefix.pch, this is packaging

go to theos/makefiles/package/pkg.mk and remove $(FAKEROOT) @surreal mountain

omg your name is q

does that make you q anon

[surreal mountain]

yes

yes exactly

[pearl sail]

Nice Mac btw

[faint timber]

well pc but mac

[pearl sail]

Hackintosh or VM Mac?

[faint timber]

hack

ryzentosh

gensmbios

please don't be annoying

ik ty

[burnt niche]

128gb ram

[robust radish]

upgrade your gpu

[faint timber]

I would if I could

[robust radish]

Those won’t work anyways

[faint timber]

I don't need a better gpu for mac

lol

[faint timber]

why would I need a better gpu

[robust radish]

one of my ram sticks died

[faint timber]

just a waste of money

amd drivers are so bad

500 crashes on cyberpunk

and not the game

drivers crashing

causing game to crash

gj amd

[surreal mountain]

arent amd driver OSS tho

[faint timber]

no idea

still trash af

[surreal mountain]

go ahead make them better

[faint timber]

I only need amd gpu for mac

so no point

will have a 3080 by next year

[pearl sail]

Is your CPU a hyperthreaded 3990x?

[surreal mountain]

result=input(Fore.MAGENTA + "\nDo you want to convert another word? [y/n] > ")
if result=='y':
     os.system('python "text2ascii.py"')```

thoughts?

[restive ether]

can i have your serial number

i need it

for uh

research

[surreal mountain]

running itself instead of calling a method

[robust radish]

find one on eBay

[pearl sail]

And you converted some of the CPUs thread into VCPUs

[robust radish]

I can scrape ghostbin for serial numbers if you really need one lol

[surreal mountain]

#development message

@faint timber

[elfin heath]

GenSMBIOS?

[faint timber]

@pearl sail 5950x no overclock

[pearl sail]

Interesting

[restive ether]

no i was kidding thanks for the unironic generosity though lol

[faint timber]

bash: -r: command not found

[surreal mountain]

make it just

true

instead of fakeroot

so itll return 0 but not do anything

[faint timber]

I just commented out

[pearl sail]

Having half your threads converted to VCPUs leaves less threads for pcie stuff right?

[faint timber]

no idea

@lime pivot if uro doesn't respond can you answer as well if u don't mind

#development message

[tacit spade]

sooner than you think — sorry, family emergency kinda interrupted things

[surreal mountain]

6 total entries

[tacit spade]

iMessage RE is fun

[robust radish]

if %hook doesnt work for some methods you could manually write the MSHookMessageEx call it generates

[tacit spade]

@robust radish wth

how

are you me

[robust radish]

yes

[upbeat wyvern]

@faint timber this seems to work: ```diff
diff --git a/bin/lib/Logos/Generator/Base/Method.pm b/bin/lib/Logos/Generator/Base/Method.pm
index 58f4f49..d4fd06e 100644
--- a/bin/lib/Logos/Generator/Base/Method.pm
+++ b/bin/lib/Logos/Generator/Base/Method.pm
@@ -37,7 +37,7 @@ sub selectorRef {
if ($selector eq "dealloc") {
return "sel_registerName("".$selector."")";
}

•   return "\@selector(".$selector.")";
  

•   return "NSSelectorFromString(@\"".$selector."\")";
  

}

sub selfTypeForMethod {

[faint timber]

yum patches

[upbeat wyvern]

but that's not a valid selector? it won't compile a class like that

Tweak.xm:79:6: error: expected selector for Objective-C method
-(id)1object;

what did you find that uses a number at the start of a selector?

[surreal mountain]

what the fuck????????

[upbeat wyvern]

oh some obfuscation thing

[faint timber]

yes

snapchat

[upbeat wyvern]

I doubt if it'll be the same on two different versions will it?

[surreal mountain]

sounds like a bounty then

[faint timber]

its not

[upbeat wyvern]

you may need to get the selector name at runtime

[faint timber]

thats fine

[upbeat wyvern]

then register the hook with MSHookMessage + NSSelectorFromString

[faint timber]

what I tried crashes

[upbeat wyvern]

I doubt if theos will know how to do it

you probably need to do the hook yourself

MSHookMessageEx(UUIDClass, NSSelectorFromString(@"foo"), (IMP)&UUIDMethodHook, (IMP*)&_UUIDMethodHook); or something

[livid wolf]

Does anyone have flirt signatures for system functions?

[faint timber]

still crashes

@livid wolf wym system

iOS? mac?

@upbeat wyvern

[upbeat wyvern]

@faint timber check the values frkm hour objc getclass and nsselectorfromstring - if they’re returning nil you need to figure something else out

[livid wolf]

Basically all syscalls and Mach ports signatures calls into the kernel space.
If possible all architectures. Please correct me if I’m wrong

[faint timber]

@livid wolf do you have symbolized libs with such

@upbeat wyvern yah rip

wait maybe my app autoupdated...

[upbeat wyvern]

Can you hook something it gets passed to that you can identify? Then you could call [object class] on an object

Cycript could be useful for figuring something out

[faint timber]

bruh

that was it

lmao

appstore autoupdate

what a facepalm

sorry for wasting time

method isn't called hmm

[upbeat wyvern]

🤣

[lime pivot]

hah that’s an interesting one. yes Logos won’t support this sadly

[upbeat wyvern]

Yeah I don’t think it should

[faint timber]

do it now

or I will kill u

slacker

[upbeat wyvern]

It’s not accepted by @selector so heh

[lime pivot]

I’m ok with death honestly

[faint timber]

found a better way

hookf god

not objc method

nested call to c

[upbeat wyvern]

That works, you can also use hookf on an objc selector implementation

[faint timber]

yeh

Im only hooking for info gathering

[upbeat wyvern]

lldb?

Seems easier

[faint timber]

its snapchat tho

[upbeat wyvern]

So?

[faint timber]

doubt Ill be able to attach

[upbeat wyvern]

Just use lldb on device and I don’t see why not

[faint timber]

bigbrain moment *((__unsafe_unretained NSString **)

wtf is a dusttoken

[upbeat wyvern]

@faint timber Distant Universe Stardust Token

[faint timber]

@upbeat wyvern even in a login auth context?

not sure why snapchat would use that given that name

if I hook the function that uses the dust token it never returns

just infinite loops

other threads continue to run

[upbeat wyvern]

I don’t actually have any idea I just googled it and that was amusing

[faint timber]

wtf is this antihook?

it loops itself

[tepid olive]

LGariv is typing...

[unkempt seal]

I just tried and couldn’t get it to work... I’m probably missing something.

My process was:

1. Archive project in Xcode, export .ipa
2. Unzipped .ipa
3. Did ldid -S to each of the binaries (app, widget, and intents) without .xml entitlements.
4. Unpacked the original .deb file, replaced .app with the ldid signed Xcode generated .app, and and repacked the .deb file.
5. Installed on my device, and did uicache -r.

Now the widget still loads but can’t change any of the preferences, just like before.

[grim sparrow]

without .xml entitlements.
Well that's the issue

If you take the archive from Xcode, run ldid -e on each of the binaries, you need to sign with those entitlements + the no container ones

[tepid olive]

man ldid needs ur xml

else it does nothing

¯_(ツ)_/¯

[grim sparrow]

well

it'll sign but just without entitlements

You can't run unsigned stuff on iOS

[unkempt seal]

Trying again

[grim sparrow]

because the app sits in /Applications you'll need a few fancy entitlements as well as the ones given by Xcode

[pure dust]

where would I find the file that handles the blur on the ios springboard?

[grim sparrow]

Can you be more specific as to what blur?

[pure dust]

The blur in the app drawer control centre and today view

[grim sparrow]

Use Flex

[[FLEXing]]

[tepid olive]

FLEXing

Open FLEX anywhere!

Author

Tanner Bennett

Version

1.3.1

Repo

NSCake 🧁

Bundle ID

com.pantsthief.flexing

More Info

View on Parcility

NSCake 🧁 - Page 1/1 · Jan 24, 2021, 1:41 PM

[pure dust]

which version of flex?

im on ios 12 on 1 phone and 14 on the other

[grim sparrow]

Theres a difference between Flex and Flex

You need Flex

https://nscake.github.io/ add this repo

and install FLEXing

[tepid olive]

Flex and FLEX*

[grim sparrow]

lol

[tepid olive]

or even better, Flex 3 and FLEX

[grim sparrow]

lol

[pure dust]

i installed flexing but it is not in settings or anywhere on my home screen

[grim sparrow]

you need to hold the status bar

and it'll popup

Hold status bar or 3 fingers anyway

[pure dust]

and what should I look for in flex

[grim sparrow]

You can use it to figure out what views you're looking at, consequently what to hook for changing things

[unkempt seal]

Still can’t get it to work

[grim sparrow]

That's different to what I was getting

It wouldn't get my location but I could edit it and stuff

[unkempt seal]

It still doesn’t get the location, I just changed the code a little bit for debugging to check if it is related to app-groups (which does work)

[grim sparrow]

Intents are weird

wait

i might of fucked up something

i think i signed with the wrong app group ffs

[tepid olive]

“might”

relatable

[misty cradle]

@grim sparrow FLEXall better

[grim sparrow]

[misty cradle]

no shrug

it is factually better

[grim sparrow]

how

I've only ever used flexing

[misty cradle]

well flexing still has the lockscreen issue

and some others, that gh0st has fixed

[grim sparrow]

what lockscreen issue

[misty cradle]

where it turns off while using

[grim sparrow]

oh that

[misty cradle]

[[FLEXall]]

[tepid olive]

FLEXall

Load FLEX loader dynamically.

Author

DGh0st

Version

0.0.1-20

Repo

DGh0st's repo

Bundle ID

com.dgh0st.flexall

More Info

View on Parcility

DGh0st's repo - Page 1/1 · Jan 24, 2021, 2:15 PM

[misty cradle]

it requires nscake's repo

but is very good

try it out

[grim sparrow]

ctrl f will search in the current channel

[misty cradle]

yes?

did u not know

[grim sparrow]

i just discovered the shortcut menu

[peak quartz]

how can i assign 2 different actions to the same tweak? in activator loader i registered like this, and added the needed folders, it has different descriptions as it should but those 2 different actions call the same method even tho i registered to a different one of each. any examples of how to make it work?

both calling test1 for some reason

[tepid olive]

Developers

[wicked summit]

FLEXivator better

[misty cradle]

@peak quartz or is test1 being called twice

jk idk, never used activator listeners before

[peak quartz]

lol weird dunno what im missing

i do have 2 listeners in the activator

but both do the same

[tepid olive]

false

FLEXall on top

[unkempt seal]

Wait so did you manage to get it to work on your device? I’m confused lol

[gaunt mesa]

Developers

[nimble parcel]

https://github.com/theos/theos/pull/570

[wicked summit]

FLEXivator is a FLEXall fork 😐

[tepid olive]

ok?

FLEXall still better

[wicked summit]

cringe

[tepid olive]

just posted my discord token in a public server

cant wait to get someone using my auth

ok ima sign out

[tepid olive]

fuck it’s sunday

guess i’ll release the tweak with the semi shit code

discord qr code goes brrr

[peak quartz]

solution is to implement 2 different listeners, one for each action. solved!

[brittle lantern]

anyone know how to dump headers for apps on tvOS

[tepid olive]

Same as you would for iOS

[brittle lantern]

I use frida-ios-decrypt to get the ipa off the device, does frida work on tvOS

[wicked summit]

that was only when it was first uploaded really

[half walrus]

name a folder .DS_Store and its impossible to view it in Finder

[tepid olive]

LOL

[half walrus]

even w/ cmd+shift+> it still stays hidden

good os apple

[tepid olive]

Lol it is impossible

[half walrus]

oh neat

you cant even open it normally

i’ve been using this for a few months, just thought i’d share

[tepid olive]

.DS_Store exploit confirmed

easy way to hide folder

thanks now i can hide this folder with 0 risk

mv

open .DS_Store

Does that not work?

mv .DS_Store COCK```

or that

i dont think

[half walrus]

they don’t

i’ve been using it for like four months

[tepid olive]

frida-ios-dump worked fine when I used it

I just had to modify it a bit to use a network connection for my Apple TV 4K instead of USB

[brittle lantern]

ok thanks for letting me know. did you just install the frida server package from build.frida.re onto your apple tv

[tepid olive]

yeah

pretty sure I did

(it's not jailbroken rn because I updated to tvOS 14 and I don't have the cables for it)

I used Frida on 13.4.5

[brittle lantern]

thanks!

[tepid olive]

It depends

On the file system that is

By default macOS is case insensitive, but if it's case sensitive you can have two as long as the casing is different

case sensitive

case sensitive FS are superior

apfs can be case sensitive or case insensitive but you can't change which after the fact

[tepid olive]

what is an enc file

wtf

[wicked summit]

If my memory serves me well, I believe an ENC file is a generic encoded file that may use one of several different types of proprietary or standard encodings. It is encoded to help protect the file from unauthorized use, or to help set up the file for a particular use, such as Internet transfer.

[tepid olive]

BRUHH

hopefully i can open this

ill have to see

[half walrus]

boo

fuck case sensitive

screw ur case sensitiveness

[lime pivot]

you can thank Adobe and Steam and co for macOS being stuck as case insensitive

[tepid olive]

Steam requires case insensitivity?

[lime pivot]

may have been fixed

[tepid olive]

Steam works on my case sensitive Linux

[lime pivot]

for a long time yes, or maybe it was just a number of games assumed case insensitive (due to Windows also being case insensitive??)

[tepid olive]

But that is definitely something Adobe would do

[lime pivot]

there used to be a crazy workaround to install Adobe on a case sensitive boot volume, but it hasn’t worked since like 2015.1

you run the installer with a dylib injected that masks your boot volume as case insensitive, install to a case insensitive dmg, then move the apps manually to /Applications

[tepid olive]

[misty cradle]

who tf unpinned the learn objc in 24 days link

[tepid olive]

https://youtu.be/Rf5puZhkqKA

[tepid olive]

who tf

What's the deal with CS close sourcing their projects.
Anemone was open source
Electra was open source
Jailbreakd was open source
Sileo was open source
Odyssey was open source

[pearl sail]

How many times can you copy and paste this in jailbreak related servers?

[tepid olive]

I just wrote that

[pearl sail]

[tepid olive]

I've talked about how I want odyssey and jailbreakd to be open sourced before

[pearl sail]

Similar message I guess

not the same

my bad

[tepid olive]

That was my prediction for jailbreakd 4 to be open source

[pearl sail]

[gentle grove]

they're projects

[tardy narwhal]

The problem is the stupidity or rather high level of obliviousness present in the community if you’re going by the users or the (kind of) pointless disputes arising from personal differences between developers failing to realize other people can have different opinions and that’s perfectly fine.

Previous one would be more applicable, else I cannot really explain the demand for those bootleg jailbreaks

like th0r

[robust radish]

coolio likes using the code as leverage to get other developers to do what he wants with the project (ie, not open sourcing until checkra1n adds this, etc)

imo its gross

[pearl sail]

Everyone does that lol

[robust radish]

not really - maybe in the jb community

but not widely

[tepid olive]

I think the problem is people in the jb community don't open source to provide freedom, they do it for clout and bragging

[pearl sail]

Ehh I guess it depends on what you call leverage

[robust radish]

ill open source x when jailbreak does y is what I mean

just open source stuff! 😄

[tepid olive]

Then when someone exercises their freedom the dev will get pissy and close source

[pearl sail]

Yeah I am not disagreeing with that

it is shitty behavior

They should definitely open source stuff

[tepid olive]

why was that deleted

[tardy narwhal]

spice

[robust radish]

nothing sensitive in it, but technically from a private dm so i deleted it after makiing my point

[pearl sail]

I guess there is just too much bad blood with open source and accusation of stealing in this community hence why everyone is hesitant to do it

[robust radish]

imo ppl are too concerned about stealing. once you release/OS it, we know its yours... dont get pissy when another proejct reuses some of it. I think its good to re-use, but some devs get offended at the idea

see it as clout when other projects re-use your logic/research

[tardy narwhal]

I mean that gets problematic with things like th0r though

[pearl sail]

The problem is some people resuse and don't give credit where credit is due

[tardy narwhal]

where people claim the entire research as theirs

[tepid olive]

Th0r was also breaking copyright on libhooker and jailbreakd

[robust radish]

expecting the other teenagers to follow the minutia of copyright license you selected is kind of optimistic, but i get it. its not too shitty to dmca clear violations, but still... just let the projects be is my position. the end result is more ppl jailbreaking

[gentle grove]

i love open source

[tepid olive]

One thing I think is very important in the jailbreak community is the ability to audit the code you are running, we are actively lessening the security of our devices and one rogue dev could add malicious stuff to their jailbreak. In the mc modding community a user pissed of a mod dev who then made the game crash whenever they tried to use the mod, something like this could happen with a tweak or a jailbreak but with much worse consequences then a crashed Minecraft

[tardy narwhal]

understandable, well i guess if the people would be more diligent it wouldn’t be a problem to leave stuff as oss and not worry

[twilit jungle]

Open source isn't going to stop rogue devs

[robust radish]

dhowet open sourced ghostbin, shut ghostbin down, then threatened me with copyright shit when I re-hosted it

[tardy narwhal]

wot

[pearl sail]

I guess as long security doesn't actively control what or restrict users use it would be cool to have that layer

[tepid olive]

I host my own spectre/ghostbin

[tepid olive]

just send a counter notice problem solved

[robust radish]

same ghostbin.co

just ignore the pissy devs is the solution

[tepid olive]

https://spectre.cameronkatri.com

once you open source something under an OSI/FSF approved license, you cannot revoke that license

the most you can do is make future versions closed source

[robust radish]

unrelated, but you wouldnt believe the traffic a paste site gets

[misty cradle]

ghostbin got closed bc of people scraping lmao

[tepid olive]

Nobody uses mine except me

[pearl sail]

[robust radish]

a bunch of ppl found mine

[pearl sail]

nice must be good then

[misty cradle]

https://spectre.cameronkatri.com/paste/ja58b

i made a ghostbin scraper once

was fun to find some shit

[tepid olive]

I have one server running my mailserver, paste, APT repo, website, and as a proxy for mc.procurs.us

[robust radish]

the ultimate scraper

ls

[tepid olive]

for https://iconthemer.app/ I get about 150000 requests per day from the shortcut

and about 4000 unique IPs daily

[robust radish]

517k pastes...

[robust radish]

add ads

[tepid olive]

I modified my ghostbin instance to not allow pastes that don't expire

[tepid olive]

hmmm

[robust radish]

$

[gentle grove]

https://spectre.cameronkatri.com/paste/xygfm

[tepid olive]

Does ghostbin.co have ads?

I could maybe add some on the installation page which the shortcut opens in a browser

idk if I want to but I may consider it

[gentle grove]

i need a nice paste website

[robust radish]

no - ppl would probably stop using it if it had ads

lol

[tepid olive]

Mine works (hopefully)

yeah that's what I was worried about

[gentle grove]

where can i get it to self host

[tepid olive]

but even if I considered something like that it would never be like those annoying popup ads

[robust radish]

dustins github

[tepid olive]

It's also on procursus

With a launchd daemon

[robust radish]

use older commiits for the fancy ghostbin logos

[gentle grove]

it's ghostbin?

[robust radish]

but beware, dustin will be pissy and might threaten to sue

he renamed it to spectre

[gentle grove]

what the hell

back to awesome-selfhosted then

[tepid olive]

the front page of the website itself (not the shortcut landing page) gets like 400-500 unique visitors per day

[robust radish]

people upload horrible shit to paste sites

[tepid olive]

would probably be more if I had the domain already when I released the first version

[gentle grove]

mine would be one that i'd be the only uploader

[tepid olive]

Write your own paste server

[misty cradle]

@robust radish wait u own ghostbin.co?

[robust radish]

yeah

[misty cradle]

nice

[tepid olive]

https://paste.bingner.com

[gentle grove]

i just dont know about the best way to design the page so it's not garbage

[misty cradle]

i used it for a bit

after ghostbin.com got shutdown

[gentle grove]

i mean i guess i could just do like imgupload and just have an api

[robust radish]

🔥

[gentle grove]

i should write an upload page for imgupload

[tepid olive]

Does ghostbin.co have users?

For some reason upstream disabled them but they're super easy to re-enable

[robust radish]

yeah

its the same version that dustin hosted forever

i tried to get all the pastes from the OG one but he was not cooperative

[tepid olive]

sed -i '/account creation has been disabled/,+3d' auth.go go brrrr

[twilit jungle]

all as in all your pastes or all the ones ever made on the site?

[misty cradle]

think he means 2nd

[twilit jungle]

[misty cradle]

[robust radish]

i wanted all pastes, so that they were somewhat preserved (switch old ghostbin.com links for ghostbin.co and it'd "just work") -- after runnig the site for some time, the reason he didn't agree to that is the amoount of illegal content that gets uploaded

it probably would have been a liability for him to transfer it to me

[wicked summit]

@robust radish my nemesis

[twilit jungle]

I mean yeah... thats a massive security concern if he had transferred it over

[tardy narwhal]

bruh

[tepid olive]

b9wuz9

brb

[robust radish]

i deleted them before uploading

but shady shit

[restive ether]

#690046526755831869 message hmmm

[tepid olive]

?

[wicked summit]

Shit be like

_TtGC10MobiusCore10MobiusLoopV24CarModeEngineFeatureImpl18CarModeEngineModelOS1_18CarModeEngineEventOS1_19CarModeEngineEffect_

_TtGC10MobiusCore12SynchronizedOGCS_26AsyncStartStopStateMachineVGCS_16MobiusControllerV25PodcastQuoteUIFeatureImpl21NowPlayingModuleModelOS3_21NowPlayingModuleEventOS3_22NowPlayingModuleEffect_P10$103ebf6dc12StoppedStateVGS2_S4_S5_S6__P10$103ebf68812RunningState_P10$103ebeb0c8RawState_

ok, Spotify

[robust radish]

swift is a virus

does the second one even demangle ??

[tardy narwhal]

it’s demangled with the swift additions™️

[tepid olive]

swift-demangle

[burnt niche]

if i want to run root commands from a springboard class. do i need entitlements?

and in odyssey do you just setuid(0); ?

using nstask

[twilit jungle]

[burnt niche]

-(void)runRootCommand:(NSString *)cmd {
    setuid(0);
    NSTask *task=[[NSTask alloc] init];
    task.launchPath = @"/bin/bash";
    task.currentDirectoryPath = @"/";
    task.arguments = @[@"-c", cmd];
    [task launch];
}
``` i was just wondering why this wont work ![fr](https://cdn.discordapp.com/emojis/712506651520925698.webp?size=128 "fr")

it works with "sbreload" but not ldrestart

[tepid olive]

Cause ldrestart needs root

[burnt niche]

yea i thought you just set root by setuid(0);

[tepid olive]

No

[burnt niche]

is it different for odyssey?

you can setuid on checkra1n for root

[grim sparrow]

don't do that

don't set your tweak/app as root, it's the big dumb

[burnt niche]

but how would i run root commands

[grim sparrow]

eeeeeerrrrrrrrrrrrrrrrr

[burnt niche]

i know i have to make a helper daemon

[grim sparrow]

Yes

[tepid olive]

Don't use a daemon

[grim sparrow]

^

[burnt niche]

[grim sparrow]

A tool

[burnt niche]

wot

yes

[tepid olive]

Use creaturewhwtever crux

If you want to be lazy

[grim sparrow]

true

@burnt niche https://www.reddit.com/r/jailbreakdevelopers/comments/j22pg4/tutorial_get_root_and_run_commands_as_root_using/

[burnt niche]

so will this install that tool as a depend to my tweak right ?

[tepid olive]

No

Put it in the tweak

[burnt niche]

okay

got it

[tepid olive]

And please install it to /usr/libexex/tweakname/binary

bin is not the correct location for support binaries like these

[burnt niche]

alright

@grim sparrow so after installing this on my device. I will need to change perms?

[faint timber]

haha cringe

[grim sparrow]

Yeah you'll need to put it in the postinst, I was confused for 3 days as to why the one in Signal was broken, until I realised Packix rebundling the tweak nuked perms

[burnt niche]

Lmao

Okay got it

[tepid olive]

No

Wtf don't do that

WTF

[grim sparrow]

what?

[tepid olive]

Don't have your postinst change perms

Just package it with the correct perms

[faint timber]

is this unix pad practices 101

[tepid olive]

It's common sense

[grim sparrow]

I was doing this

[faint timber]

yet still people fail to understand

[tepid olive]

i hate people who set perms with postinst

same with ldiding

[grim sparrow]

but when packix repackage the deb to add their control stuff, it was wiping the perms

[tepid olive]

then complain to packix

[grim sparrow]

I did

[burnt niche]

Lmao

[grim sparrow]

It's not a priority fix

[burnt niche]

Filtered

[grim sparrow]

[faint timber]

@tepid olive how else do you avoid copyright

[tepid olive]

<@&355145545242902548> <@&355174844205367317> fix your shitty filter

People be like "hur dur dpkg messes with my perms", no dumbass you just don't understand how to package shit

[faint timber]

homie probably said the R word

[eternal crater]

That was on purpose

[tepid olive]

I did

and I'll say it again

I hope it pings y'all

[eternal crater]

It doesn’t

[tepid olive]

Stupid filter

[eternal crater]

Working great it seems

[faint timber]

why was someone warned for it then @eternal crater

if it doesnt ping

[grim sparrow]

it's not my fault 😠

[eternal crater]

Don’t ask me ask them

I can’t read minds

[twilit jungle]

if we are filtering r word why not filter stupid?

[tepid olive]

Yell at Andy

[grim sparrow]

[faint timber]

because r is degrading from the liberal standpoint and is canceled