development

[buoyant apex]

Oh of course.

[untold river]

damn when it drop

does every modification need to be make open source even if you dont distribute it

[vivid dew]

no

that’s why the agpl was made

[pliant fossil]

oh god no

gpl already sucks already

[buoyant apex]

excuse me?

[high citrus]

Have you set $THEOS ?

[buoyant apex]

I did

Should I do it again?

[high citrus]

Probably

[pliant fossil]

restart ur terminal

it refreshes env's

[buoyant apex]

I did restart

[pliant fossil]

[buoyant apex]

I closed it in app switcher. Did I have to type exit to close it instead?

[pliant fossil]

no

[vivid dew]

well it’s more like

[pliant fossil]

well technically i meant restart the shell

but restarting the terminal doest he same

so

[vivid dew]

when you restarted the shell you lost the environment variable so you have to set it again

[buoyant apex]

Well fuck

Ok

[pliant fossil]

hang on

have you put it in zshrc

[buoyant apex]

No I haven’t

[pliant fossil]

might wanna do that

it'll set the environment variable every time you start the shell

[buoyant apex]

I’ve never touched zshrc. I’ve touched bashrc in Debian. I’m assuming they’re the same

[pliant fossil]

pretty much

[buoyant apex]

I used bashrc to get Linux gui apps in wsl1

[pliant fossil]

[pliant fossil]

i will

shoot my screen

[vivid dew]

this video goes hard, feel free to screen record

[pliant fossil]

i will record my screenshot of shooting the screen

[buoyant apex]

Yes

[tepid olive]

https://github.com/pwn0rz/fairplay_research

[livid ridge]

I was just wondering whether it's possible to access root dir via USB without 3rd party solutions like hacky fuse window drivers or ifunbox?
What's stopping people from showing the root folder rather than /var/mobile/media/DCIM?

[tepid olive]

apple doesn’t allow accessing those directories over usb

[livid ridge]

are there any opensource alternatives to ifunbox or any way I can learn how these applications can "interface" with afc2?

[untold river]

i think https://github.com/libimobiledevice/ifuse uses afc2

but it's not on windows

[lime pivot]

yep, take a look at ifuse for a good example of afc being put through its paces

https://docs.libimobiledevice.org/libimobiledevice/latest/afc_8h.html might also help, I'm assuming it should be close or identical to the equivalent MobileDevice.framework APIs

[nimble parcel]

afc doesn’t paint a complete picture of the iOS file access story btw

you can also access app containers (for those apps that allow it) using house_arrest_client — which vends a child AFC client to you

[misty cradle]

Development

[vale relic]

Okay I’ll leave at that

Thanks for the help/advice on it

My bad im kinda a dumbass so u know lols I do it all the time

[pearl sail]

Understandably most people don't know what a dev question is

[restive ether]

[pearl sail]

[solid condor]

Im trying to reverse engineer a function in hopper called someClass initWithCpp and it takes a shared_ptr<> but the address is way out of bounds of the program memory (0x16eb32280). and the address changes every boot for the same call but it doesnt appear to be related to the vmaddr.. any ideas?

[grim sparrow]

Have you attempted deez?

[solid condor]

😐

i figured it out its just nesting structs

int128

its this

struct Handle<std::__1::shared_ptrsnap::shims::DispatchTask, std::__1::shared_ptrsnap::shims::DispatchTask> {
struct shared_ptr<djinni::ProxyCachedjinni::CppProxyCacheTraits::Pimpl> m_cache;
shared_ptr_3431538a m_obj;
};

[grim sparrow]

that looks cringe

omw to use hopper to crack hopper

[solid condor]

good luck haha i tried

lmk if it works

[grim sparrow]

Are you using the demo?

[solid condor]

nope

[grim sparrow]

I updated to 5.0.0 on the last day of my subscription

still mad they moved from one time purchase to a subscription

[pearl sail]

Guess that mean the license file I have is pretty useless then

[grim sparrow]

I honestly don't remember who has my license file

its not just you

a lot more have it than just you

[pearl sail]

I don't have yours

[grim sparrow]

I doubt I'll renew it tbh

Having IDA from your local dealer is better a lot of the time

for new yeah

[restive ether]

i have it

[grim sparrow]

although its reduced if you're an existing customer

[pearl sail]

Yeah I am pretty sure this person moved on to having IDA

[grim sparrow]

damn

turns out I broke the Hopper License

by being a female

A Personal License is said to be «per user», and permits the user to install the software on his office workstation

[weary heath]

I used Hopper to crack IDA then used that cracked IDA to crack Hopper

[grim sparrow]

IDA 7.6 kinda hot

[weary heath]

It's alright

IDA in Wine is shit so stuck with 7.0

[grim sparrow]

IDA and Hopper are better at different things imo

[weary heath]

It's slow af

[grim sparrow]

thats why I use both

[grim sparrow]

I run IDA directly on my host

One benefit of having a vm I guess

[weary heath]

would disassembling on 7.0 then loading that db on 7.6 work

[high citrus]

You just shared your license code lol

[weary heath]

yeah, hers

[grim sparrow]

Damn, how will I ever cope you have that code

Take it

[weary heath]

hmm macOS vm? or windows vm on mac

[grim sparrow]

Its a windows host with a macOS vm

[misty cradle]

now put a vm on your macos vm with windows on it

[grim sparrow]

I've done that before

[misty cradle]

seek help

[grim sparrow]

ok

[pearl sail]

I like nested virtualization

[languid peak]

ghidra 😋

[solid condor]

ok now im having an issue with frida? im using the memory access monitor to see where calls are being made from but the offset is outside of the binary when i open it in hopper

is it a framework thats calling it

i dont get it

[torn oriole]

Aka, the only thing I can afford

[faint timber]

Use long night instead of that bad theme

[grim sparrow]

It is being called by god

[solid condor]

seems to be normal i think that was a callback or some kind of block

[upbeat wyvern]

@grim sparrow what is hopper better at for you?

[grim sparrow]

Some ObjC stuff

[upbeat wyvern]

aah yeah ida's objc is crap but it's not too hard to read objc_msgSend lol

[grim sparrow]

Generally I go to IDA first

but if something just doesn't look right I'll throw it in Hopper

because you dont have IDA Mac

since when

7.0?

[twilit jungle]

[grim sparrow]

did you update to 5.0.0?

cool

last update of my license

[upbeat wyvern]

huh isn't hopper perpetual updates?

I haven't even checked for an update in a couple years tho lol

[tepid olive]

not anymore

it’s absurd how people market lifetime licenses but eventually decide to make those license expire

[upbeat wyvern]

I kinda get it, I figured he would change it when hopper took off but it never really took off... maybe he needed more revenue to be able to work on it more

had 4.5.7 installed, updated to 5 lol

where does it say I'll stop getting updates?

[tepid olive]

in the about dialog box apparently

[upbeat wyvern]

“Updates plan expired 2021-10-30” yeah ok

[tepid olive]

lol

i mostly use IDA 7.6 in macOS or in Wine

lol

[torn oriole]

pov: you cope with ghidra

https://tenor.com/view/fade-away-oooooooooooo-aga-emoji-crumble-gif-20008708

[lime pivot]

short-sighted but honestly it was always insane that he released updates totally for free for so long. pretty sure I purchased v2 in 2013 and got all of v3 and v4 for free

he deserves way more than he was charging

[tepid olive]

i didn't think it was that old, dang

[lime pivot]

yeah I sure got my value for money huh

[tepid olive]

hopper giving 8 years of free updates for 100 bucks when ida gives a year (?) of updates for 4000 bucks looool

[grim sparrow]

4000 bucks
Depends on how many archs you want

[pearl sail]

I want them all

[tepid olive]

isn't every arch like 400

[tepid olive]

oh god

do all the HEX*********** include ida itself

[pearl sail]

probably not

[grim sparrow]

[lethal kayak]

jiang ying

[weary heath]

where's jiang ying for 7.6

[tepid olive]

i can't post it sadly

[vivid dew]

@restive ether

[indigo peak]

and you didnt ping me

wtf

[pearl sail]

[brave frost]

Its cracked for mac os?

[tepid olive]

no

not cracked

[pearl sail]

Does she need a war with another country to get their oil field for a company that she may or may not have stake in?

[restive ether]

that’s my girlfriend

[vivid dew]

[lime pivot]

that was definitely a dev question, no need to patronise

[restive ether]

[pearl sail]

context has been deleted should show when messages are deleted in discord

[lime pivot]

lmao, what

[lime pivot]

my bad

[pearl sail]

my bad for bad grammar

I am American

[grim sparrow]

a stack overflow comment I found

[lime pivot]

my sincere condolences

all is forgiven

[pearl sail]

Thank you kirb!

[restive ether]

i love war crimes

[gentle grove]

https://tenor.com/view/usada-pekora-hololive-usada-pekora-usada-pekora-pekora-despair-gif-21763654

this is you

pekora

[restive ether]

yes

[pearl sail]

$2 to ban @gentle grove for 2 months

[gentle grove]

$5

[pearl sail]

I will make it $1

[gentle grove]

my ban, my rules

[pearl sail]

for 3 months

[tepid olive]

https://stackoverflow.com/questions/25079380/swift-how-add-offset-to-memcpy/42180033#comment90353887_42180033 found it and omg it’s hilarious

[tepid olive]

nice embed bestie

[vivid dew]

it's a webm you dumbass fucking stupid apple user.

[tepid olive]

go to bed

[tepid olive]

blame discord not me

[pearl sail]

sounds like a you issue

since it worked for me

as well

[gentle grove]

its an Apple moment

[gentle grove]

they don't support webm or webp

[tepid olive]

anyone have any idea how to fix xcode installing for 3+ days

[hybrid walrus]

💀

@tepid olive are you on a 2012 or later Mac?

I tried installing Xcode on my 2010 MacBook Pro one time and that never completed

[tepid olive]

Mac Mini M1

[hybrid walrus]

💀

That’s not normal.. like at all

[tepid olive]

yesterday memory was absolutely pinned at 0KB left with installd hogging it all

[surreal mountain]

LMFAO

[tepid olive]

entire system was basically on swap

[surreal mountain]

thats ugly

did u restart

[tepid olive]

tried

installd restarted completely or picked up where it left off

now its the appstoreagent

hogging cpu

oh no nevermind its back to being installd

what the hell is it doing

[surreal mountain]

If someone writes a good looking app for the Etherscan API's (https://docs.etherscan.io) entire functionality and core features of the explorer and open sources it under MIT, I'll donate $1,000 to TeamSeas on your behalf

Consider this a bounty

[tepid olive]

no give it to me smh

has anyone looked into teamseas legitimacy

plenty of nonprofits give themselves insane salaries

[surreal mountain]

i havent but im confident itll be legit

[hybrid walrus]

the only nonprofit that i truly believed was a thing was team trees

bring back team trees

[surreal mountain]

team trees still exists

and its same ppl running it

[gentle grove]

same people as team seas

[hybrid walrus]

really

mrbeast moment?

[gentle grove]

yes

And mark Rover

Rober

[tepid olive]

hm

[restive ether]

you’ve spent too much time with crypto

to have that much to throw around

[tepid olive]

so the sileo repo has this maintainer that provides clang++ which i greatly appreciate

yet i cannot run binaries compiled from it

anyway to fix that?

(specifically the zsh: killed <process> error)

[restive ether]

what is the sileo repo dog

man i really like that Hayden Saey guy....

[tepid olive]

yes that guy's clang++

[restive ether]

are you using taurine or what

[tepid olive]

yes

[restive ether]

is the binary signed

[tepid olive]

no?

[restive ether]

and not in /var

then it won’t work

[tepid olive]

is there no way to get around it

if not is there some command line tool to quickly sign it

[restive ether]

ldid -S/path/to/binary

pretty sure that just signs it with the standard entitlements

as long as you don’t need anything special

[tepid olive]

ill try it out

which would be?

[restive ether]

which would be what

[tepid olive]

"anything special"

[restive ether]

i don’t know

whatever that would require some special entitlement

there is no set standard for that really

[tepid olive]

alright then

ldid -S /path/to/binary?

command doesn't exist

[restive ether]

well you have to install it...lol

[tepid olive]

just looked it up on sileo as you said that

[restive ether]

also no space between the flag and path

[tepid olive]

yea

yet

still doesn't let me run

is there more usage to it

[restive ether]

is that being run in /var i can’t tell

i’m assuming yes

[tepid olive]

oh

why is home dir in var

smh

[restive ether]

just throw it in /usr/bin

[tepid olive]

aight

[restive ether]

or anywhere in usr i don’t know it’s use case

[tepid olive]

since xcode refuses to install on my mac ill just have to do C++ development literally on my phone

[restive ether]

sounds like a blast

[tepid olive]

what are the chances apple support responds with something that works

[restive ether]

0

[tepid olive]

you dealt with them before?

[restive ether]

yeah they suck

always

[tepid olive]

i contacted them via developer portal or something

meant for developers

[restive ether]

most of them don’t even speak english properly so they don’t even understand your questions most of the time

so i hope their dev support is a little better

[tepid olive]

oh good

you went to the

consumer grade support

lol

[restive ether]

yeah

i got bumped to an engineer though

and he wasn’t much better

[tepid olive]

yikes

[restive ether]

their brains just couldn’t wrap their heads around the issue

and i was just like fuck it i don’t care enough

[tepid olive]

fortunately for apple they have a good team of core engineers to keep them afloat just enough

apparently they lift the entire program in installd

and use

llvm to compile for your specific cpu

probably why my mac mini had 0kb free...

[restive ether]

i just realized i did ldid usage wrong

ldid -Sent.xml -M /binary/path

[tepid olive]

so it requires another document?

can i steal that from xcode or something

i alr set up a self sign

[restive ether]

https://termbin.com/q8def

those are the usual entitlements

[tepid olive]

oh ok

gg

[restive ether]

if you wanna check usage just check the manpage, cam spent like two days trying to document it. twas a mess

[tepid olive]

nah this is great

thanks

[faint timber]

I love how user never read the usage or manual before using a tool

They always just blindly go in

[restive ether]

not like ldid had one until like last week

[faint timber]

[restive ether]

besides the mini help command which was kinda bleh

[faint timber]

Non space ent is kinda stupid

[restive ether]

not a fan of that

[tepid olive]

tell that to clang

and gcc

and every other gcc compliant compiler

where they do -Ldir

[twilit jungle]

fork it and add the space

[faint timber]

-Os

[tepid olive]

to add a dir to include path

[restive ether]

we already have a fork

[twilit jungle]

Okay then add the space to it

[restive ether]

your mom

[twilit jungle]

she is nice

[restive ether]

lemme talk to her

[faint timber]

My mom became the ldid dev

[restive ether]

mom became saurik 3

[twilit jungle]

I don't control who she speaks to

[faint timber]

Treky violin player lawyer all in one

[tepid olive]

is there a way to view some /proc on ios

a list of processes

htop is able to do it

[faint timber]

Sir that’s not how xnu or bsd works

This isn’t Linux at all

[tepid olive]

fine bro time to enter different search terms into google

ps -e

ok cool now how 2 do with syscalls

[restive ether]

yeah ios don’t have a /proc hombre

ps aux

[tepid olive]

C++...

[restive ether]

better familiarize yourself with xnu kernels real quick

[tepid olive]

cant shake a good search result out of google

time to pop ps into ida and see what makes the magic go

[restive ether]

xnu is open source

[tepid olive]

o

god dam

now half the battle is finding what i need

[restive ether]

https://github.com/apple/darwin-xnu

[faint timber]

https://github.com/D0m0/CocoaTop/blob/master/src/ProcArray.m#L15-%23L63

[restive ether]

when i someone going to make one that doesn’t suck

the search bar hasn’t worked in like four years lol

and you can’t see columns that are off screen / move them over

[tepid olive]

very nice.

[restive ether]

looks like they never added the entitlements to fix the bold text crash either

real entitlement trolling

[tepid olive]

this clang even has mach headers in default include

incredibly convenient

[restive ether]

i don’t know if the sdk we shipped was patched or not

i forget

[tepid olive]

why does this code

check for if the first malloc was null

and if it was proceed to try and allocate 2x

[tepid olive]

yooo doesn't crash

chad

[restive ether]

real

[tepid olive]

documentation has gravely lied

[lime pivot]

I gotta do that to NewTerm I just realised I totally forgot that

[restive ether]

oh yeah lol

i forgot we talked about that

[lime pivot]

I mean I also need to release the NewTerm 3 beta but hey

at least entitlements is just a quick repackaging thing

[tepid olive]

does it fix landscape crash

[restive ether]

i’ve never gotten that

[tepid olive]

rip

[lime pivot]

can't even remember if that's still broken in 2 or if it's just come back in 3

[restive ether]

my manpage crash is fun

[tepid olive]

i have the free 2

[lime pivot]

actually no I remember

[restive ether]

the sign of death

[lime pivot]

I fixed one bug but revealed another one, that on certain iPhones you can cause a weird overflow where it thinks you have an insane/impossible number of terminal columns

[restive ether]

oh that sounds like fun

[tepid olive]

lmao revealed

bug archaeology

[restive ether]

i don’t think i’ve ever gotten that

i just enjoy the random crashing from closing the last tab

[grim sparrow]

It’s too early the in the morning for me to understand this

[restive ether]

it’s like playing Russian roulette

[lime pivot]

it's down to specific config and phone res

the font/font size you have might or might not trigger it

[restive ether]

@grim sparrow tell coolstar they don’t gotta review your PRs dog

just trust the process and push to prod

[grim sparrow]

I have

.

[lime pivot]

speaking of coolstar and PRs I need a favor

[tepid olive]

14.2.1 12 pro taurine = landscape mode crash

[restive ether]

i am a favor

[lime pivot]

there's a commit I want cherry picked if someone can be so kind as to do so 🧡

[lime pivot]

hi favor I'm kirb

[restive ether]

huh i did a little canister bug and haven’t reproduced it yet

[grim sparrow]

Canister implementation is actually very bad

I realised why the other day

[restive ether]

it didn’t show any internal results

only external

[lime pivot]

https://github.com/kirb/Sileo/commit/5f7e4f9acaf4c1b5caded9f62b6eb9c7413d90d3
https://github.com/kirb/Sileo/commit/95fb7c1e923e661ac411fe27e4f9f9ce7c358819

[restive ether]

but if you clicked it, it opened the first internal result

[lime pivot]

these commits would be a blessing to get merged 🙏

[restive ether]

corner radius

real

[lime pivot]

<real></real>

[grim sparrow]

If no one else does I can do it in a couple hours

[restive ether]

make capt do it, get his commit game up

[lime pivot]

the size to fit specifically is useful because I just have to hardcode a width/height that works for all devices right now

[grim sparrow]

I did some testing

[lime pivot]

ie it's hardcoded to 288x162

which is baby sized

[grim sparrow]

And I noticed that with my new optimisations Sileo depictions load faster than native depictions. Reason being Sileo depictions sit on the main thread whereas native depictions are async

[lime pivot]

fine for SE, terrible for 12 pro max, offensively bad for iPad Pro 12"

[restive ether]

sileo looks fucked on ipads in general so just another thing to the list

mainly featured but not much to do

[grim sparrow]

Not having to worry about iPad was a blessing for Aemulo UI

[lime pivot]

hah interesting. yeah that can happen, GCD is known for adding some noticeable perf overhead

unfortunately GCD both made threading/queueing a bit too easy, and doesn't do as good a job at it as you'd assume

[grim sparrow]

It never used to be. I changed a few lines and made Sileo depictions not leak everything and they now load a heck of a lot faster

[restive ether]

leaky leaky depictions

[lime pivot]

definitely a lot that can be done to to clean up the current sileo depictions impl

without redoing the whole thing

[grim sparrow]

Oh yeah

For the repo featured banners Chariz’s had a physical memory footprint of about 120mb

[lime pivot]

I just don't have the energy to fix everything when I know HTML is working just fine in Cydia and Zebra

[restive ether]

sounds perfectly normal to me

[grim sparrow]

Because the banner images being returned were so large it would load them into memory really inefficiently. After calling prepareForDisplay on them all I got it down to about 4mb

[lime pivot]

yikes. yeah in fact doing a scale operation on the banner would be a good idea all around

[grim sparrow]

I do on every image now

It only didn’t in the first place because of depictions bugs

[lime pivot]

save RAM (you only need to hold the ginormous original image for a brief period) and save rendering power (doesn't need to continually re-run a scaling algo on the image)

[restive ether]

depictions are pretty seamless now, you only notice the weird pop in with the header

especially with the cache

[grim sparrow]

Mhm

[lime pivot]

oh sweet 👍

oh there's also a bunch of other goodies on this branch https://github.com/kirb/Sileo/commits/kirb/new-html-renderer-take-2

the ones related to the web view stuff which can't be merged should be obv, skip those

[grim sparrow]

Cameren I figured out how to fix blank depictions bug, I just silently replace the view controller entirely

[restive ether]

i need the third party mail commit

i completely forgot about that

[lime pivot]

it continues to be dumb that in-app mail composer completely ignores your mail app preference

and in-app browser

[restive ether]

god bless webkit 1

[lime pivot]

but Apple knows exactly what they're doing, they chose to leave it broken for 1.5 years now

[restive ether]

whatever will cydia do

the humanity!

[lime pivot]

heh, the reason why WebKit1 is still around as far as I can tell is because of Mail

emails are still rendered with old webkit

[restive ether]

what’s the point of that, i really don’t get it

[lime pivot]

thankfully in a remote view process, so at least it's roughly as secure as WebKit2

good for Apple that they get to use their platform-owner advantage to hack around a problem rather than fix it 🤪

[restive ether]

there’s no compatibility reasons to keep webkt1 is there

[grim sparrow]

Laziness

[lime pivot]

meanwhile everyone else was forced to get off WebKit1/UIWebView with a hard ban through the App Store static analysis scanner, despite the API still existing in the OS

it's not like UDID where they banned it for a year and then changed it to return a useless random string

[grim sparrow]

Ugh I forgot to charge my MacBook

[lime pivot]

laziness it seems

[lime pivot]

you forgot to charge your VM?

[restive ether]

always the right answer

[grim sparrow]

I have a 2015 Air

That I use at college

But I refuse to use it for dev anymore

[restive ether]

aemulo money going to da m1

[grim sparrow]

4gb ddr3 and dual core i5 is not ideal for large Xcode projects

[lime pivot]

it's the typical "Apple doesn't feel like putting resources on something that's not ideal and is a tech debt nightmare but works fine" thing they keep doing lately

[grim sparrow]

Hopefully I can finish my amiibo stuff in college today

[lime pivot]

oye, can confirm, but there wasn't a 4GB air past 2013?

i know this because I was an idiot who bought a 4GB/128GB base model Air in 2013 a few months prior to them releasing the 2014 with 8GB as base model

[grim sparrow]

2015 was last with 4gb

2017 is when they base modelled 8gb

[lime pivot]

unless it's school-issued maybe because they were also still selling the 11" to schools long after it was discontinued for retail

[grim sparrow]

At least it’s 256gb though so I can get my 4 Xcode installs happily on it

[lime pivot]

oh yikes I badly hope that's not true lmao

[tepid olive]

anyone know why e_ppid returns 1 for some processes but the actual process id for others

[grim sparrow]

It is

Xcode 13.whatever is latest right now
Xcode 12.5.1
Xcode 12.3
Xcode 11.7

[restive ether]

maybe you need some entitlements to see all of them

or your code is wrong idk dog

[grim sparrow]

That looks like entitlements to me

[vivid dew]

because launchd spawns most processes

therefore pid1 is the parent

[grim sparrow]

Oh that would be true

[tepid olive]

used the wrong one

works now

kproc.kp_proc.p_pid not kproc.kp_eproc.e_ppid

[restive ether]

real

[grim sparrow]

CommonCrypto is fucking awful to interface with

[restive ether]

that’s why you just don’t use it

ez

[grim sparrow]

I dislike functions with 11 parameters

[vivid dew]

just compile your own openssl bro

-- apple

[restive ether]

yes

make openssl

bam done

now you got openssl3

[grim sparrow]

Why don’t you openssl deez nuts

[restive ether]

i will

present them to me

[vivid dew]

i will chop your nuts off

[restive ether]

do it

[grim sparrow]

Please

[vivid dew]

that guy in germany who got arrested for castrating people wishes he were me

[tepid olive]

alright now

how to load dylib into process

[restive ether]

that wasn’t you?

[vivid dew]

maybe if he was a catgirl

[restive ether]

i am

[tepid olive]

proof?

[restive ether]

ask your mom

[vivid dew]

1. alloc space in remote process for stack and dylib name
2. spawn thread in remote process pointed at dlopen with correct arg registers
3. set mach exception handler to catch when your thread returns from dlopen and crashes
4. 

[restive ether]

true

[tepid olive]

what the Heck

[vivid dew]

you asked

[tepid olive]

shit

no easier way

no LdrLoadDll on macos/ios

[vivid dew]

just use the injector tool provided by the jailbreak

your jailbreak has one, right?

[tepid olive]

Idk how taurine provides one

[vivid dew]

it has one

it's somewhere

[restive ether]

libsyringe

[restive ether]

/usr/libexec/libhooker/libsyringe <pid> <dylib path>

[tepid olive]

oh pog

is that on unc0ver

[restive ether]

no

[tepid olive]

(eventually i have to deploy what i make to thousands of users)

oh rip

[restive ether]

this isn’t how you’d normally do this

[tepid olive]

can i steal libsyringe and just deploy it on users that have unc0ver

[restive ether]

since most people usually just let theos handle all the fun stuff

[restive ether]

if you wanna get sued sure

[tepid olive]

aight bet

is it open source

oh hm

[restive ether]

no

cynject <pid> <dylib> args

[tepid olive]

for unc0ver?

[restive ether]

both

[tepid olive]

oh bet

[restive ether]

cynject is just a symlink on libhooker

[tepid olive]

are there mach o tools like elf tools

[lethal ice]

scoopMachOTool™️

[restive ether]

to do what

[tepid olive]

view exports

[vivid dew]

cock tool

[lethal ice]

you just need nm for that

[tepid olive]

    char* args[] = {pid_str, "scriptware.dylib", NULL};
    char* env[] = {NULL};
    execve("/usr/bin/cynject", args, env);

nice

am i dumb or is this supposed to work

regardless using it from command line isn't working

tried writing a file and even crashing

it won't do either

assuming it isn't running at all

[gentle grove]

what editor is that

[high citrus]

probably vscode, but that theme kinda reminds me of atom

[snow python]

It’s called Atom one dark

At least that’s the one I use

[gentle grove]

it looks nord themed though

not one dark

[snow python]

Mayhaps, I was just replying to semvis

Does anyone have experience using AltList outside of a preference bundle?

[snow python]

Figured it out, endedup creating a face specifier

[tepid olive]

Sublime Text 3

[high citrus]

I meant the text editor Atom lol, but yeah it's also a theme for vscode

[gentle grove]

Atom one dark is the theme of atom

default

I think

[lethal ice]

first arg needs to be /usr/bin/libsyringe

[tepid olive]

oh shit

right

uh

[restive ether]

it’s fine

cyinject is just a symlink to libsyringe

[tepid olive]

it isn't working regardless

trying to exit(0) or force a crash with the command line isn't working either

dylib is signed

[lethal ice]

yes but to execute a command the first argument needs to be the path of the executable

[tepid olive]

im not talking about argv[0]

it is being run from the shell as a test

[lethal ice]

i was replying to cameren

[tepid olive]

o

[jolly sleet]

Can anyone help with a flex patch pls 🙏🏽

[torn oriole]

!t crosspost

[faint lion]

crosspost

dont

Added by SlimShadyIAm#9999 | Used 105 times · Aug 21, 2021, 9:00 PM

[indigo peak]

@lethal ice i remember you saying you no longer need to decrypt an apps binary to view it in ida after iOS 13, is this also true for dumping its headers?

Or do I still need to decrypt the binary for that

[tepid olive]

i popped stuff into ida just fine

no issues

ios 14.2.1

ida does have a warning that the app is encrypted but i can disassemble and decompile the entire app just fine

when ignoring the warning

[lethal ice]

no its not encrypted at all

[indigo peak]

Ah okay, thank you

[lethal ice]

no its not encrypted at all

[grim sparrow]

nyo its nyot encwypted at aww

[indigo peak]

how do I decrypt headers

On device

No computer

[grim sparrow]

never fear

there is a solution

https://github.com/dlevi309/classdank-dyld

or just use that

[weary heath]

there's a classdump-ios as well i found on github

[indigo peak]

Amy

It doesn’t work

I tried

And all it does

Is say

Done. Check outdir

I check outdir

And it’s empty

[grim sparrow]

well then u did it wrong

[weary heath]

https://github.com/DreamDevLost/classdumpios

[indigo peak]

THAI WORKED FOR ME

BEFORE

I NESD TO TRY AGIN

[weary heath]

worked for me on ios 12 before

[hardy glen]

@indigo peak which app do you need headers for

I use dsdump which usually works for most

[gentle grove]

http headers

[hardy glen]

Or just create your own

https://derekselander.github.io/dsdump/

Recommended read

[gentle grove]

oooo a nice blog

[indigo peak]

Discord

Dw I know what I’m doing

[gentle grove]

wait no

nevermid im dumb

[indigo peak]

Concord will be released before 2022

Everyone doubted me

[hardy glen]

Ill dump them rn hol up

[indigo peak]

Bc react native

But I am so depressed that I can make anything work

[hardy glen]

I am gonna dump the latest version if thats not a problem

[indigo peak]

Even better

^

I need 1.0

[hardy glen]

Yes sir

cumdump coming soon

[grim sparrow]

me with aemulo for 8 months

[indigo peak]

True

[grim sparrow]

there was a massive spike in my mood when things started working

@grave sparrow rate my xpc hax

[tepid olive]

oh no

[grim sparrow]

lol I spent so long on that solution

[indigo peak]

Is that a good spike?

[tepid olive]

thanks bestie that’ll help the zero users make packages

[indigo peak]

Or a bad spike

[grim sparrow]

I went from a synchronous notification wrapper to xpc hax

[grim sparrow]

yeah

[indigo peak]

A spike of happiness or a spike of depression

[grim sparrow]

when something you've worked on for so long starts working well

[indigo peak]

Because I got both from working on gameseagull for 4 months

[grim sparrow]

cant

the reason i chose that xpc route is because passbook has that entitlement

[tepid olive]

seek help

[faint timber]

I’m an suing your mother for my child support

@grave sparrow we do a little capt trolling

Ok capt go turn down easy 200$

[tepid olive]

passbook is an entitled bitch

[grim sparrow]

yes

[tepid olive]

[faint timber]

Go off jk9375

[indigo peak]

How tall?

[tepid olive]

do you want a dolphin with that

[hardy glen]

@indigo peak here u are pssy

i dumped the swift shit too if thats of any help

i like having all the shit in one file since you can just search through keywords easily

[indigo peak]

Thank

Sort of helps@me

[hardy glen]

: )

bruh ngl I love my new m1 air

[indigo peak]

I heard it’s amazing

[hardy glen]

Best purchase of my whole entire life, right next to my water flosser

It is bro, if you can get it then do it. I got it on installments for around 80 a month

For a year

On 0% apr

[indigo peak]

Idk I might get a Mac

Bc otherwise my only portable device is a chromebook

[hardy glen]

gameseagull2 for 1.99

[indigo peak]

Which I have to give back at the end of my highschool years

And then in college I won’t have anything

[hardy glen]

Find a way to get 80$ a month lmao

You need a Apple Card though, if someone in your family has one ask them

[indigo peak]

No one does

[hardy glen]

Mow some fucking lawns or some shit

L

Break into cars and hit a lick

[indigo peak]

I have no source of income

[hardy glen]

That’s what I used to do

[indigo peak]

Oh I hit an absolute devious lick today

I put tape over my computer science teachers mouse

[hardy glen]

lmaoo I hit a lick in my cs class in my ha

Ha

Hs*

Stole teachers blackberry phone

Sold it for like 400$

[gentle grove]

ha

ha

[native dune]

.

[gentle grove]

hs

[hardy glen]

Spent it all on weed

That was years ago

Stole a keyboard from my workplace fast food

[indigo peak]

[hardy glen]

Absolute amazing licks

Found beats in a car that was open, offer up

[gentle grove]

why is it called a lick

when it's theft

[native dune]

are you fr

[hardy glen]

It’s called borrowing for a greater good

yeah when i was like 16

In my childhood years

[native dune]

💀

[hardy glen]

I was down bad

[hardy glen]

Used to go around my neighborhood looking for open cars

Make sure you don’t fuck up the alarm

Because some cars have nice security

[native dune]

[hardy glen]

All beware of the red blinking light in the car

If you end up hitting one of those, get ready for the alarm going off and running for ur life

I believe in you fiore, go get urself a MacBook

[indigo peak]

I might just get one used

Bc who know what the state of laptops will be In 2023

[hardy glen]

Just sit on tweakbounty all day for a year

And save up

[indigo peak]

I know 3 devs who do that

[gentle grove]

time bomb

[hardy glen]

But do it 24/7 no sleep

[indigo peak]

Problem is

I lazy

[hardy glen]

Do it when they are asleep

steal all the clientele

if they say “I ll do it” reply under and say “No actually I got it”

[surreal mountain]

lmfao

[surreal mountain]

please someone

[brave frost]

Fuck teamseas i will take the 1000

[surreal mountain]

if u accept crypto

amd@make the app

and*

crypto being eth

not btc or shit

[torn oriole]

doge

[vivid dew]

是否有权允许二进制文件自动访问我的桌面/下载文件夹，而无需在系统偏好设置中授予权限

[lime pivot]

set com.apple.private.tcc.allow to an array of TCC constant strings (try strings on system binaries to find them)

of course

private
so you’d need to neuter amfi to use it

yeah unfortunately not because it’s effectively the same as codesign -s - (sign ad-hoc, ie with no particular private key)

[tepid olive]

does anyone know how to use libsyringe with a dylib you make

the command succeeds with correct pid and a valid dylib

yet not constructor or main are called

[upbeat wyvern]

No

Not that I know of anyway

[tepid olive]

when you reverse engineer something so well that the author open sourcing it adds nothing new to your knowledge

[west grove]

Damn does Capt inc actually know assembly?

@grave sparrow

Cuz I spent 4 hours trying to fix syscalls and failed

[livid ridge]

UUGH I'm so close to getting my daemon to work but it keeps getting terminated due to the 6mb memory limit

anyway I can raise that?

I know it must be possible since sshd exeeds this limit

[west grove]

Damn

If I knew how to fix syscalls

[untold river]

Probably exceeded jetsam limit, which can be changed
Check this out https://github.com/PoomSmart/BlockEmAll/blob/master/README.md#increasing-memory-limit

however daemons live here in this plist file

Either that or optimize your code for memory usage harder

[livid ridge]

should launchd automatically add my daemon here when I load it since it isn't appearing for me

as no other tweak deamons are either other than openssh, I assume I need to manually add it?

I feel like I shouldn't change the global override value since that's probably in place for a reason

[untold river]

you might need to add your daemon's name in there i think

[tepid olive]

just fix them

nerd

[west grove]

True

I wish

I at least figured out to how to compile the assembly

Cuz I couldn’t figure that out before

[tepid olive]

lmfao

[west grove]

All the examples I were given by a friend were for 32 bit

Not 64

[livid ridge]

seems a bit hacky on apple's side?

unless this change is part of the unc0ver jailbreak

[untold river]

lemme check mine

[livid ridge]

hell yeah! I manually added a key for my daemon (I set the memory limits to 30) and it works!

[untold river]

could be modified since my wifid has an ActiveSoftMemoryLimit of 17

InactiveHardMemoryLimit is 14

[livid ridge]

which jailbreak are you on?

[untold river]

odysseyra1n, 14.8, iPhone 8+

[livid ridge]

I'm on unc0ver, ios 14.4.1

¯_(ツ)_/¯

[west grove]

[devout fjord]

hey is there anyway I can autorun a command after respring?

without any on device input? asking as my device bootloops upon jailbreak, but killing springboard and backboardd via ssh fixes it

[native dune]

why don’t you remove bad tweak

[devout fjord]

ceebs identifying bad tweak, cr4shed not showing culprit

[native dune]

idk then

[late ridge]

bruh

just disable them all and troubleshoot until you find the issue

[restive ether]

make a wrapper

[devout fjord]

doesnt go past apple logo, screen shuts off and loops couple times, eventually shuts off and reboots into non jb state, i think thats a bootloop

can you educate me on the difference?

[restive ether]

your mom

[misty cradle]

Ratio

[faint timber]

@grave sparrow not as bad as me doing this in bootrom

I accidently remapped the page to RWX but thats not a allowed at the same time unless you set other bits too so it crashed epically

[snow python]

@twilit jungle when you were using WATodayAutoupdatingLocationModel did you ever have it give the error The operation couldn’t be completed. (com.apple.weather.errorDomain error 4.)?

[twilit jungle]

Nope

[snow python]

:/

[grim sparrow]

is that an NSError?

[snow python]

Im running it the same way as always, but the completion handler returns that error

yah

[grim sparrow]

are you doing it in Swift?

You can probably do something similar in objc but if you do String(describing: error) it will sometimes give you a lot more detail on it

[twilit jungle]

4 is usually not reachable or refused connection

[snow python]

Ok thats good to know

[twilit jungle]

Could be different in this case though

[indigo peak]

”// convert objective c to swift “ doesn’t always work

[snow python]

Thanks

[snow python]

I wrote this one my self

[indigo peak]

Smart

[snow python]

Ill try that, I may just do this part in objc

[grim sparrow]

It helped me with NearField stuff, it would return a placeholder error but then doing describing would give something quite detailed

[snow python]

Cheers

[grim sparrow]

it can

[snow python]

@grim sparrow lmao it made it worse

[grim sparrow]

Somewhat accurately

[snow python]

Error Domain=com.apple.weather.errorDomain Code=4 \"(null)\")"

[grim sparrow]

Yeah that does happen sometimes

Its always either amazing or useless

never inbetween

[snow python]

lmao

[faint timber]

I never looked into it further

[grim sparrow]

I'm guessing you've looked in the logs for potential warnings?

[faint timber]

@grave sparrow
https://github.com/apple/darwin-xnu/blob/main/osfmk/arm64/proc_reg.h#L1139-%23L1155
here's where my research lead me though

does that make sense to you

the link

[snow python]

Yes, not seeing any

[snow python]

That being said perhaps Im not looking in the right place, where should I look

[grim sparrow]

What you should do first is just filter to warnings and errors and you may get lucky

if that fails filter to just the process you're running as and or trying to communicate with

[faint timber]

disable bit 54 and 53

[grim sparrow]

I'm confused right now

I've found some code and I'm not sure what it technically does

[faint timber]

try it

[grim sparrow]

uint8_t * output;

output = memccpy(output, baseKeys->typeString, '\0', sizeof(baseKeys->typeString));

would this copy typeString into output but then set output to an empty unsigned char?

[faint timber]

@grim sparrow it returns a pointer to the location of c, n is the amount to search

its searching for null terminator in the entire size of the string

[grim sparrow]

yeah

the null terminator is at the end

[faint timber]

output is the pointer to the end of the string afaik

not the string itself

[grim sparrow]

If the character (unsigned char)c was found memccpy returns a pointer to the next character in dest after (unsigned char)c, otherwise returns null pointer.

[faint timber]

@grave sparrow I can test it real quick

@grave sparrow the first link

disabled XN and PXN

Disable interupts:
MSR DAIFSet, #0xF

Enable interupts:
MSR DAIFClr, #0xF

probably need to save the flags tho

MRS #FLAG_SAVE_ADDR, DAIF
MSR DAIFSet, #0xF
CODE HERE
MSR DAIFClr, #0xF
MSR DAIF, #FLAG_SAVE_ADDR

idk what the correct order is

@grave sparrow SCTLR_WXN_ENABLED would be bit 19

oh it says it there

im blind

heres my SCTLR_EL1 dump

bit 19 is enabled

true

heres the game plan

that only lets W code execute

you still need to mark text section writeable

unless you are aren't patching text mem

like I am

the funny thing is despite WXN being abled, trampoline still allows for RWX by default

I don't quite understand how that works

[snow python]

Are there times where you need to add entitlements to tweaks? I can't remember

[restive ether]

yes

there’s also those people who add extra entitlements to their projects for no reason at all...it’s great

[snow python]

Sounds like it

I have no idea why I cant update weather... I gave it all the ents the weather app has just for the heck of it, but still no dice

[grim sparrow]

The tweak has the entitlements of the process its injected in

[snow python]

Well SpringBoard definetly doesn't have weathers entitlements, but I really dont think it would be wise for me to inject ents into springboard

For the record, the error is there in objc as well, so at least we know its no #swiftthings

[grim sparrow]

Do you know what entitlement it is you need?

[snow python]

I have no idea as of right now, Im guessing its one of these, but I don't 100% know if it is an ent issue at all

[grim sparrow]

Assuming what Dgh0st said is correct and its a communication bug, is it an XPC entitlement perhaps?

[snow python]

<plist version="1.0">
    <dict>
        <key>com.apple.developer.ubiquity-kvstore-identifier</key>
        <string>com.apple.weather</string>
        <key>com.apple.locationd.effective_bundle</key>
        <true/>
        <key>com.apple.locationd.prompt_behavior</key>
        <true/>
        <key>com.apple.locationd.prompt_from_background</key>
        <true/>
        <key>com.apple.security.application-groups</key>
        <array>
            <string>group.com.apple.weather</string>
        </array>
        <key>com.apple.security.exception.shared-preference.read-write</key>
        <array>
            <string>com.apple.weather</string>
            <string>com.apple.weather.internal</string>
            <string>kCFPreferencesAnyApplication</string>
        </array>
        <key>com.apple.security.network.client</key>
        <true/>
    </dict>
</plist>```

Perhaps, these are the ents that the weather widget has, the ent I would think is most likely is either the locationd or the network

[twilit jungle]

Weather widget is hosted in SpringBoard

Atleast it was at one point not sure about newer iOS versions

[restive ether]

you’re a widget hosted in springboard

[snow python]

Does HSWidgets run on ios 14? I tested your weather model and it gives the same error that mine did

[twilit jungle]

It does not, because iOS 14 has native HS widgets

[grim sparrow]

I thought it ran as a separate process?

Similar to how something like a keyboard extension runs

[twilit jungle]

Yeah well you are remote view

[snow python]

Well, I could go WeatherGrounds route and hook the widget

[restive ether]

no me and springboard are like this is bro 🤞🏻

[snow python]

So just to make sure, there isn't a way to dynamically add ents, other than like manually signing a target process, which I already know is a terrible idea

[grim sparrow]

well

[twilit jungle]

I mean there is

[grim sparrow]

you could hook stuff if you wanted to go that route

[twilit jungle]

[grim sparrow]

e.g.

https://github.com/hbang/TypeStatus-Plus/blob/master/assertionhax/Tweak.x

[snow python]

tf

you know its good when its called "assertionhax"

[grim sparrow]

In Aemulo I was able to get lucky with my xpc stuff

and use a workaround that meant I didn't need to add entitlements to Passbook

[snow python]

So just return true on entitlements I need

What are the rammifications of using this

[grim sparrow]

that any process on the system can use that

[snow python]

oooh...

hm

[grim sparrow]

So its up to you how bad you see that

[snow python]

Let me see if this even fixes the issue before I descide lol

[grim sparrow]

Could you not just make an external tool that your tweak calls to get it?

that way you can entitle it how you want

[snow python]

That is a very good idea

Let me just go do that

[grim sparrow]

Its up to you if you want to only let your tweak call that

Only other tweaks would be able to use it so its not a huge deal?

[grim sparrow]

I saw lol

[tepid olive]

any follow ups on this?

[upbeat wyvern]

Figured it would be something like that

[snow python]

Yah I’ll try that route, it’s definitely a entitlement issue

[hardy glen]

L

[twilit jungle]

F

[tepid olive]

smh literally no one knows how libsyringe works and coolstar wont respond to pings

[pearl sail]

@plain python someone needs help with libsyringe

[pearl sail]

not surprised most of their pings for jailbreak related servers are off

[tepid olive]

(here)

attention all active users of development

@grave sparrow is a bitch

only if my issue isn't solved

[lethal ice]

dylibs don't have a main

[tepid olive]

that's not the issue

i tried making a main because constructor wasn't working

neither are running regardless

[lethal ice]

show ur code

[tepid olive]

if i remove the main will that somehow make a difference and make my constructor run

#include <cstdlib>
#include <cstring>
#include <string>
#include <filesystem>
#include <fstream>

__attribute__((constructor)) static void scriptware_main(void)
{
    printf("hello\n");
    std::ofstream F("test.txt", std::ios::binary | std::ios::trunc);
    F.write("hello", 5);
    F.close();
    *(int*)(0) = 'pepe';
    return;
}

int main(int argc, char* argv[])
{
    printf("hello\n");
    std::ofstream F("test.txt", std::ios::binary | std::ios::trunc);
    F.write("hello", 5);
    F.close();
    *(int*)(0) = 'pepe';
    exit(0);
    return 0;
}

tried exiting, crashing, writing a file

none runs

yes

just to indicate

my shit ran

none of the code is even called

./libsyringe pid dylib

dylib has entitlements

[lethal ice]

ents don't matter for dylibs it takes the parent processes

try it with a tweak injector to see if it works

[hardy glen]

Yea

[tepid olive]

its a part of libhooker i think

[hardy glen]

It is

[tepid olive]

if you can get it to work lol