development

[ocean raptor]

No

[proper reef]

to fit more assembly

[misty cradle]

Not within apps

There’s a way for tweaks

[lethal ice]

[ocean raptor]

This is cli

[lethal ice]

machine language is just a general term for assembly

[ocean raptor]

SBDisplayBrightnessController? @misty cradle

[proper reef]

assembly is machine code but still not machine readable yet

[misty cradle]

Let me check

@lethal ice can u check in sentro. Ode

Code

What we did for brightness

[lethal ice]

idk if i have old sentro

[restive ether]

rip sentro

[lethal ice]

yea rip

dead

[misty cradle]

It’s coming in 2022

Wtf

[restive ether]

yeah so is WTT2

[misty cradle]

yea

[lethal ice]

and dont stop the party

SBBrightnessController

[_controller _setBrightnessLevel:penis showHUD:cock];

[restive ether]

default pfp nerd

[ashen birch]

sen

[misty cradle]

@ashen birch please buy me M1 max mbp

You’re rich my brother

[lethal ice]

if you're writing a CLI tool to change brightness you cannot link directly to springboard you have to send a notification to the sb process and change it from there

[misty cradle]

[restive ether]

that is

depression

[ashen birch]

guarantee i have no more than like

$100 in my bank account rn

[ocean raptor]

Ok...

[misty cradle]

f

I got like 1k now but the same amount is open on cc, so I could either pay it off now

Or

wait till last say

Day

[misty cradle]

co-hoes

[restive ether]

wtf doxxed

[misty cradle]

More like 0 hoes

Apple

[ashen birch]

finding everywhere that has 9mph winds rn

kyle aint got shit on me im the real detective here

[misty cradle]

Fr

[tepid olive]

UWP

[restive ether]

kyle still mad about that baseball joke you made

[ashen birch]

what

[misty cradle]

@ashen birch @restive ether
ITS ABOUT DRIVE 😤
ITS ABOUT POWER 🔥
WE STAY HUNGRY😈
WE DEVOUR 👹
PUT IN THE WORK 💪
PUT IN THE HOURS ⌚
AND TAKE WHATS OURS🥶

[lethal ice]

springboard is an application you cant link to an application

[ashen birch]

THIS

[restive ether]

when you said showing up at kyle’s with the baseball bat

[lethal ice]

Image Source: /System/Library/CoreServices/SpringBoard.app/SpringBoard

[ashen birch]

he's mad about some shit i don't even remember saying

[lethal ice]

thats not the framework

[ashen birch]

and he has a fake message of me set as his banner

yall i think he got a crush on me fr

[restive ether]

something something double standard

[misty cradle]

So do I

Problem)?

[lethal ice]

yea but SBBrightnessController isnt in there

[ashen birch]

don't care didn't ask
⏯️ Now Playing - Feel The Love (feat. Pusha T) by Kids See Ghosts

[misty cradle]

don't care didn't ask
⏯️ Now Playing - Feel The Love (feat. Pusha T) by Kids See Ghosts

I would like to post my cute brother Rick

[ashen birch]

brotha rick

[ocean raptor]

Can I dlopen it?

[restive ether]

some ldrestart levels of cursed

[ocean raptor]

Ok

[misty cradle]

Fr

[proper reef]

you can but it won't do anything

[lethal ice]

dlopen is just linking at runtime

[ocean raptor]

@restive ether uibright is abandoned

[restive ether]

rip uibright

[lethal ice]

bro NSNotification not that hard

[restive ether]

it’s ok

we got some others

[proper reef]

so what is arm64 page size

[misty cradle]

hmm you replied to my message…not just any message but MY message. With all these people messaging tonight, you replied to MINE while scrolling through the chat. what was it that intrigued you? i need to know more. i need to know what you’re thinking.

Shut the fuck up capt

[lethal ice]

i thought it was 12 bits

[indigo peak]

its a lot of work

[proper reef]

yeah i tried that but when i expand it by that amount I get out of address space

[misty cradle]

adrp this adrp that, how about you get some bitches

[lethal ice]

im pretty sure its 4k

[misty cradle]

I talk to god every day

That’s my bestie

[ocean raptor]

I'm literally writing a tool for iOS while not having any jailbroken iOS devices my workflow
build -> send to cameren -> try and figure out why it didn't work -> repeat

[tepid olive]

i really needed the extra 384. thanks for letting me know

[lethal ice]

[proper reef]

also a big issue was instruction size since I had to align the instructions so that they'd be in the right spot

[ashen birch]

they playin soccer in my backyard

I THINK I SEE MESSI

[tepid olive]

drugs

[lethal ice]

CFNotificationCenterPostNotification(CFNotificationCenterGetDarwinNotifyCenter(), CFSTR("NotificationName"), NULL, NULL, YES);

[ashen birch]

love them

why

[lethal ice]

literally so easy

[pearl sail]

more like
build -> send to cameren -> something breaks on cameren's end -> a new bug report gets made -> repeat.

[proper reef]

on x86_64 i just put 0x90 for everything and it worked fine

but on arm64 all instructions are 4 bytes so you can't just start it anywhere

if you didn't realize i am horrible at explaining this

not when nops are 4 byte

[lethal ice]

whats the problem with alignment

everything in .text needs to be aligned by 4

[proper reef]

but i think i fixed that issue maybe now, i just have to deal with the out of address size

[lethal ice]

there is no reason it should ever get unaligned though

[proper reef]

there is - it's called me trying to extend it

[lethal ice]

yea anything that is ever executed must be aligned

the 4 byte size is built into the instruction set

[lethal ice]

why is it not a multiple of 4

no its physically impossible

the encoded instruction divides the address by 4

im not kidding mf

[brazen timber]

:D

[proper reef]

so how do i fix out of address space

[lethal ice]

if you try to b #x where x is not a multiple of 4 it will literally not assemble

[tepid olive]

oh

[brazen timber]

i mean there's really not any other options for proper crossplatform building for c

[proper reef]

so uhhh

[lethal ice]

fuck cmake

useless ass software

literally just write portable code

not that hard

[proper reef]

so how do i fix the error out of address space.

[lethal ice]

nobody knows

[proper reef]

oh no

do i have to go to

stack overflow

[lethal ice]

u probably wont even find the answer there since this is such a niche thing you are trying to do

[brazen timber]

the stack has a reverse tumor, deal with it

[proper reef]

exactly - when i asked about extending segment on there everyone just told me to use dyld_insert_libraries

or to find empty space in the binary

[lethal ice]

are you sure you need to extend it by 16k and not 4k

[proper reef]

i tried 4k

out of alignment

[lethal ice]

what was the issue there

page size is 4096 on arm64 so idk why it says that

[proper reef]

because mach thinks it's 16384

[lethal ice]

its literally built into the architecture just like the 4 byte instruction size

adrp addresses a page and masks off the bottom 12 bits

i dont get it

[proper reef]

sadly i can't test it again

but i do have the error text

dlopen(/var/root/bine2, 1): no suitable image found. Did find:
/var/root/bine2: can't map segments into 16KB pages
/private/var/root/bine2: can't map segments into 16KB pages still

[lethal ice]

wack

[gentle grove]

use hugo

to generate your code

[proper reef]

calling dlopen myself because it's the only way to get info on why the binary won't launch

it's either that or Killed: 9

[sour halo]

development

[proper reef]

would that cause an out of address space error?

i can deal with that when that's the issue

[lethal ice]

it's possible

[proper reef]

i did that tho

and that's when i got

out of address space

i think so

i can send binary if that'll help

[restive ether]

bad way to handle things

why don’t you just put it in usr like a normal person i don’t get it

or library

somewhere that’s not var.

[proper reef]

because i dont want to recompile it rn

[restive ether]

man

[proper reef]

so

what about out of address space

[lethal ice]

.

[twilit jungle]

someone knows

[pearl sail]

you know

[twilit jungle]

in the future yes

in the past no

[pearl sail]

I will ask in a hour

when the future becomes the present

[twilit jungle]

But by the time I answer, it'll be the past

[pearl sail]

[ashen birch]

@gentle crescent @tepid olive i want ur opinions on py shit

[tepid olive]

wat

dpy?

[ashen birch]

n

for my beta API im using concurrent.futures.ProcessPoolExecutor to run both the scraper for the wiki and the flask API

but i think its fucking with the scraper

should i just have the scraper and flask API be separate scripts

https://github.com/m1stadev/ios-beta-api/blob/master/ios-beta-api.py#L154-L193 this is what i mean

cc @polar marsh on this too ^

[twilit jungle]

[twilit jungle]

[pearl sail]

fat ass

[restive ether]

name?

[gusty pelican]

When you set up fortune to run each terminal session, this script will allow you to save ones you like to a file

[wheat grotto]

im an idiot. anyone knows what ++a does in c#?

[twilit jungle]

someone knows

[pearl sail]

consult the prophet named google they have a lot of answers and even more questions

[vivid dew]

me

[twilit jungle]

Hi me, I am you

[vivid dew]

I'll have two number 9s, a number 9 large, a number 6 with extra dip, a number 7, two number 45s, one with cheese, and a large soda

[tepid olive]

I'll have two number 9s, a number 9 large, a number 6 with extra dip, a number 7, two number 45s, one with cheese, and a large soda

[pearl sail]

$150 at the window @vivid dew @tepid olive

Anymore fatasses in the car with y'all

[twilit jungle]

Can you bring the window to us?

[tepid olive]

Ok just charge it on my not stolen (legally acquired) (it's my card) credit card

[pearl sail]

Proprietary software

[pearl sail]

This is a Applebee's giftcard

[tepid olive]

No it's not you're high

Im not high

I didn't do meth why would you think that I can read your mind

Where is my wife

[pearl sail]

I am heroin user sir and I can tell you for sure this is a Chile's gift card

[gentle grove]

https://tenor.com/view/nenechi-gif-23050766

[vivid dew]

wtf

i found a pic of @twilit jungle

[twilit jungle]

felt cute might delete later moment

[lethal ice]

why does mr patel have such large badonkadonks

[gentle crescent]

idk enough about parallelism in python to give you an answer sorry

i actively avoid it lmao

[vivid dew]

that's not what futures are for

you can have both components share the event loop for networking in a single process, but don't do that, it's stupid

run each as its own script

[next wadi]

neat

[ashen birch]

did that, thank you squid games

[ocean raptor]

AVCaptureScreenInput doesn't exist on iOS

[ocean raptor]

ok

[tepid olive]

you need to manually specify buildmanifest

ipsw.me API doesn't have betas usually

you can scrape ipsw.dev or theiphonewiki

[ashen birch]

@grave sparrow https://api.m1sta.xyz/betas/<device identifier>

no

device identifier

it’ll return all betas for that device

[proper reef]

@lethal ice wait i have an idea - maybe i have to swap the bytes around

and maybe i should also codesign it

[proper reef]

Ok now I think I might have figured it out

[lethal ice]

what was the issue

[tepid olive]

very cool

Now where is type century reborn

[hardy glen]

capt smoking on tsssaver pack

[tepid olive]

[hardy glen]

bro i forgot i bought typecentury

[tepid olive]

i used it for like a week then went to 14 lol

[next wadi]

i wanna write code

@grave sparrow when we finna collab

jaidan on zefram team when

[hardy glen]

just made a write syscall and wrote hello world to stdout wassup

[next wadi]

is it all assembly

no c or anything

[hardy glen]

pure asm

[twilit jungle]

[hardy glen]

and no libraries either

no cstdlib

[proper reef]

collab?

[proper reef]

Ok now do it without syscalls

[hardy glen]

printf okay

[proper reef]

No syscalls and no libraries

[hardy glen]

i ll do you one better, i will write it all in binary code

[proper reef]

But also it has to be no syscalls and no libraries

[proper reef]

It’s not like the kernel won’t let you do that

[proper reef]

Ok one moment

[hardy glen]

go ahead and throw it in a disasm

[proper reef]

On phone, don’t have disassembler on here

[hardy glen]

text editor will work even better

[proper reef]

What executable format is this

[hardy glen]

just find out

[hardy glen]

stripped the binary are you having a hard time

and obfuscated it

ggz

[proper reef]

I’m on phone

I can’t open it

[hardy glen]

thats hello world binary

[proper reef]

Ok

[hardy glen]

decrypt the bytes

real hello world

[lethal ice]

just get fermi mobile smh

[proper reef]

How much does it cost

[lethal ice]

i was so excited to flex fermi mobile then realized the hello world binary isn't actually a binary

free if you are scoop

[proper reef]

lol

[lethal ice]

send actual hello world binary

[proper reef]

Fermi mobile have decompile?

[lethal ice]

no

i've tried so many times to write a decompiler and every time i just end in pain

[proper reef]

Assembly code editor?

[lethal ice]

it's just a disassembler

[hardy glen]

[proper reef]

Class dump?

[lethal ice]

i could add it in since i wrote a class dump for real fermi

[proper reef]

Segment extender?

UIKit version dumper???

[lethal ice]

na no malware

just asm

[proper reef]

No UIKit version dumper?

[lethal ice]

no green dildo x-ray imager??? wtf??!!

[proper reef]

lol

[lethal ice]

fucking useless

[proper reef]

I have no idea why that is in ldid

Apparently it is for some reason

An argument that dumps the version of UIKit

[lethal ice]

probably just because they can

[proper reef]

Add untethered iOS 16 a15x^2 jailbreak

[lethal ice]

ok coming right up

[proper reef]

the actual code is probably under 100 bytes

[lethal ice]

bruh

really sent an elf executable

[hardy glen]

[low zephyr]

proof?

[vivid dew]

this is the real hello world

[lethal ice]

27 bytes

[twilit jungle]

I ran that on my iphone and now I am seeing the windows blue screen of death

[tepid olive]

i can't tell if you're serious since taurine does that

[twilit jungle]

[indigo peak]

What jailbreak does mr Patel use

H3lix?

Electra?

redsn0w?

[tepid olive]

Electra

[tepid olive]

is that dgh0st

[indigo peak]

si

[tepid olive]

yalu

[indigo peak]

why didnt i think of that

[twilit jungle]

[tepid olive]

[indigo peak]

Yes - H3lix
No - Electra
Maybe - Redsn0w
Probably Not - Electra
Probably - Yalu

good to know

[twilit jungle]

[indigo peak]

im impressed you got h3lix and yalu working on the same device

more power to you i guess

[twilit jungle]

you just press 1 button... how can you fk that up?

[tepid olive]

yalu works on 32bit?

[indigo peak]

thats how im impressed

[tepid olive]

you can't run h3lix (for 32bit) and yalu (for 64bit) on the same phone

hoe

scam

[twilit jungle]

You just need doubleh3lix

[indigo peak]

but you said yes to h3lix, not doubleh3lix

shouldve been more specific

[twilit jungle]

Sounds like a you problem

[indigo peak]

[restive ether]

sock helix 🙄🙄

[tepid olive]

Not With That Fuckin Attitude

[pearl sail]

just add 32 more bits motherfuckers make this shit soo hard 🙄

[tepid olive]

talk to keto if u need 32bit expertise

[late ridge]

what's a good way to log stuff like %orig values without hitting the NSLog byte limit

[twilit jungle]

there is no limit

[late ridge]

I was referring to this

https://chr1s.dev/sharex/files/FDB6Ndv.png

[twilit jungle]

Thats probably because it temporarily stores the string into a 1024 byte array on the stack

Not much you can do about that except write your own function

[late ridge]

welp lul thx

[glad grotto]

https://github.com/DragonBuild/dragon is this good

[indigo peak]

depends what you need it for

[glad grotto]

To make tweaks

[indigo peak]

i, and a good portion of developers use a traditional Makefile

we use the makefile that was generated from theos

[glad grotto]

Show me your GitHub j wanna see what tweaks you have

[tepid olive]

don't start out with dragon

[indigo peak]

https://github.com/donato-fiore

[tepid olive]

wtf why did u tell nobody u made cac3d

cahc3d

hoe

[indigo peak]

cach3d

[tepid olive]

i can't type

[indigo peak]

it was the most inefficient thing possible

please dont look at it

[tepid olive]

make a repo bro

[indigo peak]

i have a repo

[tepid olive]

oh

[indigo peak]

https://donato-fiore.github.io/repo

iirc

yeah

[gentle grove]

I should make a repo generator in hugo

[late ridge]

tru

[glad grotto]

@indigo peak make a tweak that reads all Instagram stories at once

[tepid olive]

true

[tepid olive]

i don’t think he wants to hook react

[indigo peak]

its funny bc im making an instagram tweak rn

[tepid olive]

uh oh

[glad grotto]

What does it do

[indigo peak]

i wish i knew

[glad grotto]

:kekwait:

Bruh

[indigo peak]

i might do that 👀

no promises though

[gusty pelican]

make a tweak that deletes all social media from your phone

[glad grotto]

Discord crying rn

Here is an easy one

On Apple Music if you want to delete a song from a playlist clicking the multifunction button won’t do that

You have to scroll to the top and click edit playlist and then scroll back fo remove the playlist

Add a button to remove a song from playlist directly from multifunction menu

[gusty pelican]

Better yet, just swipe to delete in the first place

You don’t even need to click edit or delete from a menu, a constant swipe to delete would be nice

[glad grotto]

Yea

[gusty pelican]

I’m suggesting it

[lime pivot]

professional dumbass
can confirm

[pearl sail]

I’m just a casual dumbass

[lime pivot]

according to my roles on this server I'm an Advanced Dumbass

[glad grotto]

https://github.com/jengel3/InstaBetter/commit/5399f3f24ba58c5b21036e5fb74d4f98198651e6

Hope this helps a bit

[warm cipher]

Active Noise Cancellation is technically possible on any Bluetooth earphones with a microphone right? So there might be a tweak that makes it happen. If there isn’t, guess I just dropped an idea here lol.

Due to Bluetooth being shit, 300+ ms of delay will be guaranteed lol

It could happen like this:
Request microphone audio > process the audio waves on the iDevice > add to current playback > send to earphones

[faint timber]

@grave sparrow

state machine is basic enough, now I just need to decode IMM/rd etc

as an example

yeh

it doesn't patch anything

its one of the goals

sneak peak

I did pure c with no stdlib

and loaded it as shellcode

I have 3 enums and 2 string arrays

I should do that but not right away

the funniest shit ever

so many instructions use this mask

so it has a long ass name

I denote the names via these 2 len codes:
im = immediate
wi = wide immediate
ex = extended register
re = register
sh = shifted register

kinda like region codes

I have an idea tell me what you think

so I have instruction type enum

what if we did pattern based on the enum numbers

example function is:
SUB
STP
ADD
SUB

then we pattern match using the decoded instruction type enum result with a mask to skip some instructions
example:
07080007
XXXX

or is this a stupid idea

yeh

and if you want to skip some eg mask:
XXX???X?X?XX

easier than byte matching directly

ugh now I gotta implement that signextend bs for decoding

im not looking forward to it lol

the easy part was instruction types

your's is more object oriented state machine than mine

legend

apple police enters the chat
wait thats illegal

50 yards, codesign violation

My ambitions are not really hooking its more of a bootchain patcher
SecureROM, iBoot, ASR, and kernel

it would be cool to have a rom patcher at runtime with nothing hardcoded

[lethal ice]

@gentle crescent ban this clown pls

ty

[faint timber]

@grave sparrow a start, but ADD imm 🙂

[lethal ice]

writing a disassembler?

[faint timber]

@lethal ice

yep

les go XD/XN

[lethal ice]

fun

are you using the arm manual

[faint timber]

yeh

[lethal ice]

lol have fun with atomic memory operations

[faint timber]

[lethal ice]

take a look at the group it's in loads/stores

[royal owl]

nice, capNproto uses atomic memory operations for cereal comunication

[lethal ice]

i still haven't implemented atomic mem ops in my disassembler and still have yet to find an executable that actually uses them

[royal owl]

I'm new to computing on the Iphone, I just installed NewTerm, but it doesn't have Vim or Nano , nor have I tested gcc , gdb. I tried to install and I'm not succeeding. How should I proceed?

[faint timber]

install vimproved via sileo

install clang via sileo

[royal owl]

tks!!

[lethal ice]

boa sorte

[faint timber]

https://tenor.com/view/door-disassembly-door-breakdown-breaking-door-door-gif-20313531

ida be like

[lethal ice]

true need fermi instead

[faint timber]

that is your wallet after ida

[weary heath]

not if jiang ying buys it for you

[indigo peak]

[royal owl]

obrigado 🙏🏻! hehe

[weary heath]

cd Hacker/

[pliant fossil]

you need an ios sdk

[gentle grove]

good luck

[tepid olive]

hello

what languege should i know for make shell files

[tepid olive]

sounds good

ok

@grave sparrow bro are you there

can i ask something

my friend gave my friend and crashed his device

with a deb

and my other friend looked inside deb

and find that

will his device be alright

if he

reset

or

something

what is the point of fucking with hosts if youre just gonna destroy all permissions

first of all im not cheating

ok

i dont know what game is it

i dont even know

look

This is what happens when you trust Notepad++ users

true

nvm time waste

to proof it

life_waste

[weary heath]

Yo it’s @tepid olive I love your signing store bro

[tepid olive]

ha?

ha?

[next wadi]

ha?

[next wadi]

mine is superior

[tepid olive]

Can you please add unc0ver ios 15

Please

I need jailbreak to hide my location from my mom

[next wadi]

I Am Adding It As We Speak.

First Please DM Me Your Credit Card Number And Those Wacky Numbers On The Back

[weary heath]

It doesn’t have free Spotify so no

[tepid olive]

My credit card doesn't have numbers on it

[next wadi]

[gentle grove]

is it iuikjkekekk,eidaiowadkkkedkej]

[tepid olive]

[gentle grove]

ill guess again

"IUUEJNEI(IWKQMJKEQISIJEJEJEJ"

[tepid olive]

it says my name

and apple logo

[native dune]

:sofuckingnotfunny:

[gentle grove]

[upbeat wyvern]

it's 867-53-0911

[gentle grove]

[tepid olive]

b4ebd70a2eb21986bfed476878f685b042270eff

enjoy

[native dune]

is that your fucking minecraft uuid

[gentle grove]

2d05eb39d2609ecd066588e0897678cec5ec205a29736f55c3a5f45c2bc6e199cbc1eafcb5e064d60fb478d100b85c718c192847c11757f54d460d7f7df0a033

[native dune]

oh

[upbeat wyvern]

iX-150:~ root# sha1sum ssn.txt 
547bfcd35aa5ab576a032ec8b2a4a714c119ac8d  ssn.txt

[gentle grove]

thanks

cracking that hash

[upbeat wyvern]

let me know how it goes 😛

[tepid olive]

see you in 40 years

[upbeat wyvern]

well knowing it's an ssn would make it faster

[gentle grove]

i'll be old and have kids by then probably

[gentle grove]

yeah

[tepid olive]

casual 15.0 flex

[gentle grove]

what's 15.0

[tepid olive]

[native dune]

how do you have ssh on 15.0

[restive ether]

🗿

[gentle grove]

what

[gentle grove]

what's that

[native dune]

ios 15.0 right?

[weary heath]

99E4F5B9E5272CC0B5FF5F29909FD508CD49E5F2

[gentle grove]

oh

[upbeat wyvern]

looking at ways to make checra1n work on it - it's annoying though

[restive ether]

stan SSV

[native dune]

just add procursus rootless

anyway is your strap still going to use bindfs or whatever?

or is it going to be rootless

because how is it going to work for u0

a semi untether can’t use bindfs iirc

[upbeat wyvern]

we'll see

[native dune]

i personally think it should be rootless

if you do it how procursus is going to

it makes basically no change to the end user

also there’d probably have to be a rootless version anyway because semi-untethered jbs

[tepid olive]

do you know anything about updating typecentury for ios 14

[indigo peak]

do you know anything?

[pearl sail]

do you know?

[indigo peak]

do you?

[restive ether]

do?

[pearl sail]

?

[gentle grove]

https://tenor.com/view/แมว-ซ่อน-แอบ-หนี-หลบ-gif-20087543

[indigo peak]

_ _

[tepid olive]

_ _

[indigo peak]

see its funny because hex

[restive ether]

where’s type century 2 and type status 3

[pearl sail]

You did tweaks?

You did?

[tepid olive]

Too busy tweaking to make tweaks?

[pearl sail]

More like figuring out what the fuck is broken in macOS

[gentle grove]

https://tenor.com/view/gawr-gura-gura-vtuber-shark-gawr-gif-23374857

[indigo peak]

when you install a tweak (without prefs), does it automatically create a plist file in /var/mobile/Library/Preferences/?

because i want to create some sort of persistent storage, not for prefs

but idk what the best way to do it is

yes

like without the persistent storage i would be using a NSMutableArray

so would i need to manually create the folder/the plist file?

if i use that

i just need a way to store something like a bunch of names

like i said without persistent/without a plist, i would just use a NSMutableArray

[faint timber]

Objective-Chit

[indigo peak]

so true

[faint timber]

@grave sparrow I used to but I straight up forgot

[indigo peak]

yeah

[faint timber]

subtype obviously but yah idk how to get that from an external call

[lethal ice]

@grave sparrow why not just use ifdefs

yes

if it's running arm64 it's not going to magically change to x64 at runtime

[indigo peak]

it might

you never know

[lethal ice]

possible

https://cdn.discordapp.com/emojis/699366483763134494.png?size=96

wouldnt the architecture be the same across proceses

[indigo peak]

sir would you like a month of nitro

[lethal ice]

yes

[indigo peak]

broke ass

[faint timber]

The only way I can think of is macho header

[lethal ice]

i had to search dgh0st in this channel to find that image

bro _dyld_get_image_header(0) cast to mach_header_64 and read cputype

[faint timber]

If it’s fat it’s also to possible

@lethal ice

[tepid olive]

so true

[lethal ice]

_dyld_get_image_header returns the address of the mach_header_64 in whatever binary it is called from

i still dont know why u dont just #ifdef __aarch64__

[indigo peak]

says the c# dev

[lethal ice]

just seems unnecessary

[tepid olive]

at least stuff in c# doesnt start with "NS" for no reason

[lethal ice]

just check cputype and cpusubtype in the mach header then

struct mach_header_64 {
    uint32_t magic;
    cpu_type_t cputype;
    cpu_subtype_t cpusubtype;
    uint32_t filetype;
    uint32_t ncmds;
    uint32_t sizeofcmds;
    uint32_t flags;
    uint32_t reserved;
};```

[haughty tulip]

NSCock

[lethal ice]

#define CPU_ARCH_ABI64 0x01000000
#define CPU_TYPE_ARM ((cpu_type_t) 12)
#define CPU_TYPE_ARM64 (CPU_TYPE_ARM | CPU_ARCH_ABI64)
#define CPU_SUBTYPE_ARM64_ALL ((cpu_subtype_t) 0)
#define CPU_SUBTYPE_ARM64E ((cpu_subtype_t) 2)```those should be all you need

[lethal ice]

it stands for NextStep

[tepid olive]

ik but still, why

[lethal ice]

naming convention

if writing 2 extra letters turns you off from a language idk what to tell you

[indigo peak]

im with scoop on this one

for once he has a good point

[lethal ice]

[indigo peak]

pepega momento numero dos

[tepid olive]

itd be like java having everything start with "SM"

[indigo peak]

do you like c++?

[lethal ice]

at this point you can argue that semicolons are useless

fuck it get rid of all the whitespace too

[tepid olive]

no fuck c++

[indigo peak]

why bc you have to do namespace::?

i prefer to think that ns stands for namespace

but of course its not

[tepid olive]

i like c#

[indigo peak]

dont get me wrong, i like c#

but

fuck c#

[gentle grove]

203.....

[tepid olive]

it's my favourite language

[indigo peak]

i could tell

[faint timber]

c++ is actually amazing

[tepid olive]

L

[tepid olive]

"L"?

you heard me

[pearl sail]

only L here is the one in your's and mine name

[tepid olive]

gateway when

[misty cradle]

mfs be using iOS 15, imagine not being on 15^2

[torn oriole]

Imagine not being on iOS 16 internal beta’s

[tepid olive]

yes

now

no

[tepid olive]

no to gateway thing

[quaint wigeon]

@late hemlock happy birthday rebel

[late hemlock]

Thx

[lethal ice]

CPU_SUBTYPE_ARM64_V8 = 1

CPU_SUBTYPE_ARM64_ALL = 0

ALL includes all subtypes of 64bit arm but V8 is just armv8

arm64e = armv8.3

armv8.0 = arm64

if it's arm64 then the subtype will be CPU_SUBTYPE_ARM64_ALL not CPU_SUBTYPE_ARM64_V8

nah it just executes it as arm64

otherwise it would crash due to invalid pacs

if an arm64e processor encounters an arm64e instruction while running in arm64 mode, it treats it as a nop

[lethal ice]

[tepid olive]

:captspeaking;

[ocean raptor]

Ever heard of docs smh https://man.cameronkatri.com/MacOSX12b1/sysctl.3

[lethal ice]

is this running on an arm64e phone

[tepid olive]

manpage nerd

[lethal ice]

then lipo is wrong

use -detailed_info

try detailed_info

[ocean raptor]

Blame apple for being stupid and not updating manpages

[lethal ice]

send me the binary

lipo is trash

[ocean raptor]

Are you compiling with -arch arm64 or -arch arm64e

Xcode defaults to arm64 cause arm64e isn't stable

[lethal ice]

nah its fine

so the one called arm64?

im reading 0 as the subtype

what does the bin do

[faint timber]

THIS IS A PITA

Im refactoring my code into intructionset namespace classes

[lethal ice]

the subtype wont change when its loaded into memory

that would break the execution

[faint timber]

yay or nay @grave sparrow

[twilit jungle]

nah

[misty cradle]

Tr1 arch will be coming soon

it will be based on arm64

but better

it will be 128 bit

[faint timber]

decided to make it universal

[lethal ice]

if only it was that simple

some have like 4 simd registers

[faint timber]

@grave sparrow if -1 then the instruction doesn't use it

[lethal ice]

it's different for every instruction

[faint timber]

why does that matter

[lethal ice]

it can either be xzr/wzr or sp/wsp

[faint timber]

its a state machine

thats what variants are for

[lethal ice]

idk

[faint timber]

see

variantOther is eg if its ADD vs ADDS since they are the same page entry in manual

[misty cradle]

@twilit jungle ghost

[lethal ice]

how do you plan to implement an instruction like fcsel d0, d1, d2, eq

[faint timber]

boom ez

[lethal ice]

use a union for that

[misty cradle]

use an 🧅

[faint timber]

I've never once used a union before in my life, time for google

I know the concept

[misty cradle]

its like that other thing in c

but works a bit differently

[faint timber]

just rusty on it

[lethal ice]

union {
  uint64_t _imm;
  int64_t _immSigned;
} imm;```

it will only take up 8 bytes tho

[faint timber]

I've heard c++ unions are better than it's c counter part

[snow python]

How do I extract a private framework from the dyld_shared_cache? Like the actual executable

[lethal ice]

jynx

[snow python]

If thats possible? I want to pop one into ghidra

[lethal ice]

i think jtool can do it

but extracting shit from the cache is hard and most tools have wrong offsets when you do

[twilit jungle]

Just be upside down then its not the bottom of your heart

[snow python]

Thanks

[lethal ice]

np im pretty sure you need jtool2 btw

[twilit jungle]

Or just load the entire thing

[snow python]

cheers

[misty cradle]

now im tired from the top of my heart, how to fix

[misty cradle]

which ones do u need and from which ios

[lethal ice]

oh yea you can use the simulator binaries

you dont even need to extract

they are just there

[snow python]

Weather iOS 14

I didnt think of checking the sim, thats a good idea

[misty cradle]

sim doesnt have it i think

[lethal ice]

it should

[snow python]

ah well, it was still a good idea

[misty cradle]

i checked last time for weatherground

krit has a site

[proper reef]

what's the best tool for "cracking" iOS binaries in the 21st century? all the ones I know of are super old and probably don't work anymore.

[misty cradle]

for all extracted binaries

from all ios 14 versions dsc

one sec let me find

[lethal ice]

i forgot the path

[misty cradle]

https://headers.krit.me/

was it this

[lethal ice]

i thought you dont need to do that anymore as of ios 13

[proper reef]

oh you don't?

[lethal ice]

@snow python /Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Library/Developer/CoreSimulator/Profiles/Runtimes/iOS.simruntime/Contents/Resources/RuntimeRoot/System/

you will find everything you need there

[lethal ice]

nah shit's not encrypted anymore

[snow python]

Cheers

[lethal ice]

ida will still complain but it loads fine

[misty cradle]

r u rewriting asteroid for 14

[proper reef]

nice, that's cool

[lethal ice]

eta asteroid and meteorite combine into one tweak

[snow python]

I already have

[misty cradle]

if so, gj i don't wanna maintain weatherground anymore

nice

[misty cradle]

meteorite is asteroid

[lethal ice]

F

[snow python]

I just want to figure out why the icon loader doesnt work all the time

If you are making one as well, you can still release yours

Dont let me stop you

[lethal ice]

i remember when i first tried to write meteorite it was literally dog shit

[misty cradle]

no no i made mine already for the background only and status bar @snow python

was for ios 13 and 14

i think

i never tried it on 14

[lethal ice]

meteorite still is dog shit

abandoned project

[misty cradle]

weatherground too

[indigo peak]

really?

[misty cradle]

https://github.com/Tr1Fecta-7/WeatherGround

somehow its my most popular repo

i think

[indigo peak]

so i can just open the binary file straight from filza into ida and it will work?>

[lethal ice]

ye it says something like "this is ios encrypted, do you want to load it anyways"

[indigo peak]

i want to test now

[lethal ice]

but im guessing thats just because the encryption LC is present in the binary

[misty cradle]

read shitty tr1 code

[snow python]

Oh gotcha

[lethal ice]

didnt you copy half of it from a twitter coding guide too

[misty cradle]

no

[lethal ice]

the background shit

[misty cradle]

it was just flex guy showing all the view names in flex

i wrote down the name of the bg

[indigo peak]

how do you think i got gameseagull to work

[misty cradle]

then figured out the rest

[lethal ice]

oh

[misty cradle]

was simple

[indigo peak]

i had to decrypt birdshit

[misty cradle]

u are too washed

[lethal ice]

its not encrypted

[indigo peak]

highly obfuscated

[misty cradle]

to do that

sorry

[indigo peak]

i think

[tepid olive]

what

[indigo peak]

i didnt

[misty cradle]

wait

[lethal ice]

wtf tr1 bird poop dev?

[misty cradle]

[tepid olive]

wtf

[indigo peak]

no its dgh0st

[misty cradle]

this just changes the class to hook

[indigo peak]

he told me in dms

no scam

[tepid olive]

ik but

SYSTEM_VERSION_GREATER_THAN_OR_EQUAL_TO

why not @ available

[indigo peak]

@fallow rocklibale?

[misty cradle]

oh yeah i used that bc @ available not work on wsl back then

[lethal ice]

@fallow rockilable sucks balls

[indigo peak]

rip ava

[lethal ice]

it only works building on mac

[tepid olive]

ah

[misty cradle]

akara update will be released on sunday

i wonder why

[tepid olive]

akara when

when it actually opens

(rare)

[misty cradle]

one feature left

[tepid olive]

@misty cradle bottomcontrolx works better than akara smh

[misty cradle]

and 2 bugs

[tepid olive]

man should i update my phone

[misty cradle]

wtf

what does it do

[tepid olive]

opens control center from bottom right

and it actually opens

unlike akara

[next wadi]

[misty cradle]

just dont be washed and open it in the right area

dumbass evelyn

[next wadi]

troll

gm mr tr1

[tepid olive]

@misty cradle https://github.com/KpwnZ/BottomControlX/blob/master/Tweak.xm
please copy paste this in akara

[misty cradle]

gm mr jaidan

[tepid olive]

i usually would not say this

but please

fix the gesture

[misty cradle]

[next wadi]

trolling

[tepid olive]

man

[next wadi]

cope

[misty cradle]

blame dgh0st, its his code he wrote all of akara

[lethal ice]

gm mr jaidan :smil:

[tepid olive]

ah

[misty cradle]

i just market it

[next wadi]

GM SCOOP.

[lethal ice]

.

[misty cradle]

@twilit jungle good luck with all the bug reports

[next wadi]

rip bozo

ghost will move to a foreign country and go by dbruv for the rest of his lif

[tepid olive]

u market it well

bc it don't work well

[next wadi]

[tepid olive]

[misty cradle]

indeed

[next wadi]

[lethal ice]

he already did that

mans indian

[next wadi]

true

i didnt know he lived in india troll

[lethal ice]

i think he did

[misty cradle]

i am buying pictures of gangster cartoon kids for 400$

[next wadi]

[next wadi]

we should

no cap

make like

[next wadi]

physical nfts bro

[lethal ice]

its dgh0st

[misty cradle]

bro im serious, we make FR nft pack

pack of 420 fr emotes

[next wadi]

WTF CHEEKLINES BRO

[misty cradle]

shit will sell easy

[next wadi]

i have never seen

such defined cheeks

[misty cradle]

its dbruv

[lethal ice]

dbruv patel

[pearl sail]

If he lives in India. Then goddamn his sleep schedule is as fucked as the ISPs are in India.

[snow python]

No weather :/

[lethal ice]

RIP

[tepid olive]

bottom control x is so smooth

godly tweak

[next wadi]

[misty cradle]

never gifting u anything ever anymore

[next wadi]

real

[misty cradle]

only jaidan getting all tweaks free

:all:

[next wadi]

eve

TRUE

[tepid olive]

bro cmon

[next wadi]

[tepid olive]

i love to complain about gestures

[lethal ice]

gift me your cock @misty cradle

ill park it in my ass

[next wadi]

complain about dn

[next wadi]

dm

[tepid olive]

i will gift anyone my cock

when and where

[misty cradle]

?

[next wadi]

?

[lethal ice]

?

[tepid olive]

?

[misty cradle]

@rain falcon SCOOP GAY

CONFIREMD

FINALLY

[next wadi]

@rain falcon SCOOP GAY

CONFIREMD

FINALLY

[misty cradle]

this why he [redacted] get [redacted] [redacted]

[tepid olive]

FINALLY

CONFIRMED

[next wadi]

this why he [redacted] get [redacted] [redacted]

[next wadi]

CONFIREMD*

[tepid olive]

omg autocorrect

🙄

[next wadi]

on jah

[twilit jungle]

@misty cradle wtf use class check

[tepid olive]

[misty cradle]

this was old code

[tepid olive]

[misty cradle]

midnight chip is doing asteroid ios 14 now

[tepid olive]

!ghostcock

[misty cradle]

weatherground is deprecated now

[tepid olive]

[next wadi]

gm mr dbruv

[next wadi]

[twilit jungle]

[tepid olive]

gm mr jaiden

[tepid olive]

wtf they turned ur mom into a fr

rip bozo gc innit

[next wadi]

gm add me to gc innit

[tepid olive]

no

[next wadi]

bro wtf why wont this work

[tepid olive]

stop being british

first and only warning

i’m french canadian

how did you get past the gates

[next wadi]

you told me to leave and i did 🧐👹👹❌😹

[tepid olive]

unironically

ban this user immediately

[pearl sail]

even worse

[tepid olive]

ok?

L

[next wadi]

[tepid olive]

[next wadi]

[tepid olive]

@next wadi unfortunate

unlucky even

@next wadi

true

[misty cradle]