development

[hardy glen]

yea mine gets killed

[indigo peak]

use like libnotification or something

[ocean raptor]

Just listen for it

[indigo peak]

i used to have some code somehwere

[weary heath]

Thx

[ocean raptor]

libnotification is for ui notifications

[indigo peak]

well does he want a ui or does he want a notificationcenter

[weary heath]

latter

https://developer.apple.com/documentation/foundation/nsnotificationcenter/1410608-postnotificationname this should work

That's what I'm looking for

[ocean raptor]

@lime pivot can you make logos use #!/usr/bin/env perl instead of #!/usr/bin/perl

[lime pivot]

yeah that's actually a really good point

as long as perl will always be a 5.x version I guess

[ocean raptor]

Gotta add FreeBSD support to theos before I can work on QuickActions again 😭

On

[restive ether]

for the whole 1 (you) BSD user that will use theos

[ocean raptor]

I lost the email that said what I was gonna add to QuickActions

[hardy glen]

truly looking like a master hacker

[vivid dew]

i don't see why they would, but then again this is apple

are there any console messages

[ocean raptor]

Ok I'll just

all: QuickActions.dylib

Tweak.x.m: Tweak.x
    perl ./logos/bin/logos.pl Tweak.x > Tweak.x.m

QuickActions.dylib: Tweak.x.m
    aarch64-apple-darwin-clang -isysroot /usr/home/cameron/Documents/iOS/SDK/iPhoneOS14.3.sdk -miphoneos-version-min=12.0 Tweak.x.m -shared -o QuickActions.dylib -fobjc-arc -Wall -lsubstrate -isystem include -isystem ../include -Xlinker -segalign -Xlinker 4000 -L.
    ldid -Cadhoc -S QuickActions.dylib

clean:
    rm -f QuickActions.dylib Tweak.x.m

[restive ether]

nerd

[ocean raptor]

Actually less lines than a theos makefile

[vivid dew]

[restive ether]

classic makefile dev

[indigo peak]

im just converting harmony assembly pseudo code into logos

[restive ether]

L

half of it doesn’t even work

[ocean raptor]

Why

Just write it yourself

[restive ether]

truly

[hardy glen]

W

[vivid dew]

https://tenor.com/view/drogon-dracarys-dragon-breaths-fire-got-game-of-thrones-gif-14128677

[vivid dew]

@grave sparrow figured it out, threads created by pthread_create can’t be killed by thread_terminate

[vivid dew]

[hardy glen]

task_t taskThread = get_threadtask(thread); kern_return_t retval = _thread_terminate_internal(thread); maybe these change taskThread or kernel task?

thats why it checks right after?

just throwing my unprofessional guess out there

apple stepping their game up

[vivid dew]

[vivid dew]

trolley

[ocean raptor]

am I doing this right?

%hook ClassName
-(void)layoutSubviews {
  /* whatever */
  %orig;
}
%end

[twilit jungle]

Nah need a while loop that traverses through big data

[azure sail]

hello #development

[indigo peak]

its actually:

%hook ClassName
-(void)layoutSubviews {
  %orig;
  /* whatever */
}
%end

[vivid dew]

did you know that yian garuga has a 50 water hzv on his back

(to put things in perspective, a 20 elemental hitzone is considered good)

[hardy glen]

make sure you write to files in the main thread update ui in the background thread for maximum vroom performance

[vivid dew]

idk bro

suspend the new thread, set its pc to pthread_detach and lr to pthread_exit, then when you're done resume it and it will kill itself automatically?

actually you can probably make a whole rop chain to call dlopen and exit

[tepid olive]

in theory tweaks are like mixins in fabric minecraft?

[gentle grove]

i know what a mixin is in ice cream

[grim sparrow]

[hardy glen]

What’s that for. His website bug?

Also, I am about to buy some books. Which one of his should I buy first

[grim sparrow]

The Bible

[hardy glen]

Yes okay

I will buy the Bible

[faint timber]

vol 2 and vol 3

[hardy glen]

And pray to Jesus Christ

To teach me iOS internals

[faint timber]

I’ve had vol 3 for years now I’m getting vol 2

[hardy glen]

Okay, v3 then v2

[faint timber]

That’s the correct order

[hardy glen]

I will put the Bible on hold for now

[steady nest]

mine are getting shipped tomorrow 👀

[indigo peak]

@lime pivot so I would hookf setBackgroundColor like “%hookf(void, setBackgroundColor, UIColor *color) { %orig; }”

and actually changing the color would be “color = [UIColor systemPinkColor]; %orig;”

[ocean raptor]

Bro, just

%hookf(void, setBackgroundColor, UIColor *color) {
    %orig([UIColor systemPinkColor]);
}

[misty cradle]

[tepid olive]

please don't

[ocean raptor]

What? Is that wrong?

[indigo peak]

So I was almost right

Okay

[tepid olive]

never take tweak dev advice from the freebsd user

worst mistake of my life

[indigo peak]

What did I do wrong

[grim sparrow]

tf are you doing

show code

@indigo peak

[native dune]

fiore moment

[indigo peak]

Trying to hook all calls to setBackgroundColor

No matter the class

%hookf(void, setBackgroundColor, UIColor *color) {
    %orig([UIColor systemPinkColor]);
}

That’s the code

[grim sparrow]

bitch tf you doing

show the rest

[indigo peak]

dw about it

[ocean raptor]

Wait

[indigo peak]

that’s it

[grim sparrow]

setBackgroundColor isnt a symbol

[indigo peak]

There’s no other code that should interfere with it

[grim sparrow]

lol

[ocean raptor]

Is setBackgrounColor a function or a method

[indigo peak]

Method

[grim sparrow]

its an objc method

[ocean raptor]

[grim sparrow]

so why tf you using hookf

[indigo peak]

idk that’s what cam said to do

[grim sparrow]

Cameron the fuck you on about

[indigo peak]

What should I do

[grim sparrow]

just do that but for UIView

%hook UIView

[ocean raptor]

I said that cause you were doing this

[grim sparrow]

[indigo peak]

¯_(ツ)_/¯

Don’t blame me

[indigo peak]

I want all classes tho

[ocean raptor]

I was just fixing your syntax

[indigo peak]

Not UIView

[grim sparrow]

it will inherit

RCView inherits from UIView

[indigo peak]

Not everything inherits from UIView though

[ocean raptor]

Try it

[grim sparrow]

then have fun

[indigo peak]

I tried yesterday

It didn’t hook everything

[ocean raptor]

Then give up

[grim sparrow]

then have fun

[indigo peak]

Having fun while giving up

!

[grim sparrow]

dude

thats like 4 views that didn't work

and they will have the same base class

[indigo peak]

There’s more though

Like member/server list

That wouldn’t get changed

[grim sparrow]

hmmmmmm

I have an idea

but its a bad one

[indigo peak]

shoot

I wanna hear it

[grim sparrow]

lemme try it

ok I was right

it doesn't work

you will probably just have to try and find the base classes

[indigo peak]

what was it

[grim sparrow]

actually

new idea

but its awful

but you could

[tepid olive]

fiore clearly you should create a custom dyld shared cache that sets the background color and load it only for discord

[grim sparrow]

iterate through all the classes in the app and see if it responds to setBackgroundColor

[tepid olive]

real

[grim sparrow]

@silver rampart you around?

[restive ether]

no sorry

[tepid olive]

this

this hurts

[ocean raptor]

What's the cheapest I can sell a tweak on chariz?

[restive ether]

.50

[ocean raptor]

What cut does chariz take?

[silver rampart]

e

[tepid olive]

90%

[restive ether]

https://docs.chariz.com/sellers/payments/pricing

[silver rampart]

115%

every time you sell a tweak they charge your paypal

if you can't pay, adam sends out his "User Agents" to your location to repossess your belongings

[grim sparrow]

Dumping tbd with ktool is broken

[silver rampart]

yeah kinda

what output does it give and what output were you expecting?

bc currently it's designed to spit out ones equivalent to the .tbds here: https://github.com/theos/sdks

never got around to implementing the 'actually accurate' tbd gen

[grim sparrow]

I can get it in a sec

[ocean raptor]

Just tapi stubify --filetype=tbd-v4

[grim sparrow]

That’s not the point

You’ve completely missed the point of a bug report

[ocean raptor]

Ok

[silver rampart]

could you run that on https://headers.krit.me/index.php?sdk=iOS14.8&fw=PrivateFrameworks/SpringBoardHome.framework&file=SpringBoardHome

i dont have a machine with tapi rn

[misty cradle]

You don't need college, no one needs college. College, Doctors, Engineers, Lawyers, etc will all be outdated in a few years. NFTS will replace all of them and change lives. My bored ape will perform surgery on people.

[gentle grove]

You don't need college, no one needs college. College, Doctors, Engineers, Lawyers, etc will all be outdated in a few years. NFTS will replace all of them and change lives. My bored ape will perform surgery on people.

[indigo peak]

You don't need college, no one needs college. College, Doctors, Engineers, Lawyers, etc will all be outdated in a few years. NFTS will replace all of them and change lives. My bored ape will perform surgery on people.

[vivid dew]

what is that

[indigo peak]

why on krits site for headers its -(BOOL)_removeJobWithInstance:(id)arg0 orJob:(id)arg1 error:(*id)arg2, but on limneos its -(BOOL)removeJobWithInstance:(id)arg1 error:(out id*)arg2, what should the type for error actually be

NSError*?

[misty cradle]

yes.

your mother

[indigo peak]

interesting

not sure

[misty cradle]

try CaptsMother *

[grim sparrow]

this or an int

[indigo peak]

idk why one takes in another param than the other

[misty cradle]

the _ one is private

and does the actual stuff i guess

[grim sparrow]

^

I use _ a lot

[tardy narwhal]

oi

[misty cradle]

hi

[tardy narwhal]

do you reckon if i ship you something tomorrow it'll arrive by christmas

[tepid olive]

I use your mom a lot

[misty cradle]

if u ship with DHL, there is a chance

that it will

[grim sparrow]

depends who you ship with

[misty cradle]

what are u shipping me

[tepid olive]

titanic

[tardy narwhal]

A Christmas present you goofball

[indigo peak]

okay, neither _removeJobWithInstance or removeJobWithInstance worked

[misty cradle]

true

[vivid dew]

send me some fentys too

[misty cradle]

my first christmas present ever

[indigo peak]

[indigo peak]

it just occurred to me that if im trying to NSLog in RBLaunchdJobManager, it will most likely not work, since the task is most likely killed and then restarted

so i wont be able to view the log

unless my logic is wrong, and the methods just aren't producing an output for whatever reason

[misty cradle]

wait @tardy narwhal do u have my addy

not sure if i've ever given it

[indigo peak]

nah but i can give it to him

[tardy narwhal]

No, I have a good guess doe

[indigo peak]

[misty cradle]

mf gonna be guessing my address

[indigo peak]

im scared for you bro

[misty cradle]

me too

[tardy narwhal]

😂

[indigo peak]

return !%orig;

:D

[misty cradle]

fiore.getBackToWork();

[indigo peak]

i dont want to

this is dumb

[tardy narwhal]

you can imessage me your address, that works too if approximation doesn't cut it

[indigo peak]

and stupid

and dumb

[misty cradle]

bro how will approximation ever cut it

ok dm me your guess

[indigo peak]

have you SEEN my code

[tardy narwhal]

them DHL Packstations

[misty cradle]

dhl stole my package once

we have a hate love relationship ever since

but that was a year ago

[tardy narwhal]

i don't trust Fedex i'm sorry

[misty cradle]

fedex always been fast but i dont use them ever

[indigo peak]

how can i tell if _removeJobWithInstance/removeJobWithInstance runs

[misty cradle]

unless a US company ships to me

[indigo peak]

because im not sure if NSLog will work

[misty cradle]

then try RLog

[indigo peak]

thats mureihs thing right

i dont care about spelling

[misty cradle]

reta- log

[indigo peak]

Muhhrey

[misty cradle]

@tardy narwhal you are in focus mode sir

[indigo peak]

yeah somethign liek that

[misty cradle]

u wont receive my message

[tardy narwhal]

oh yeah, that shit's still set to activate sleep mode past 10pm lmao

[faint timber]

@grave sparrow I honestly have no clue about mach threads

[misty cradle]

did u get that

"announce anyways"

i love that

u can still notify people

[silver rampart]

different methods

[indigo peak]

how are they different methods

when they belong to the same class

[silver rampart]

bc they have different selectors

what framework/class is it in

[indigo peak]

RBLaunchdJobManager, RunningBoardd

[twilit jungle]

bruh thats the same type

out just means it'll be filled in by method

[silver rampart]

my site has both

limneos' site appears to be missing one of the methods

[indigo peak]

wait if im hooking a runningboard private message, should i have the tweak targeting SpringBoard, or is there a bundle for runningboardd

[misty cradle]

r u remaking roadrunner

[indigo peak]

possibly

with 10% more viruses

[silver rampart]

without bothering to throw this into IDA, what's most likely here is that -(BOOL)removeJobWithInstance:(id)arg0 error:(*id)arg1 just calls -(BOOL)_removeJobWithInstance:(id)arg0 orJob:(id)arg1 error:(*id)arg2 ; with some extra handling

not sure why classdump-dyld would miss a method

[indigo peak]

idk, beats me

[indigo peak]

im currently looking at Gump in IDA rn trying to figure out all the hooks updated for iOS 14 first

[misty cradle]

it already works on ios 14

doesnt it

[ocean raptor]

also, the error:(*id)arg2 will most likely be a pointer to an NSError, you were confused about that before iirc

[indigo peak]

i dont think so

gump says explicitly in the depiction "for iOS 13 only"

not sure about roadrunner though

i also have gump and road runner dylibs, but gump seems easier to look through in ida

[misty cradle]

roadrunner works on 14

[indigo peak]

it only has one InitFunc where roadrunner has like

4

[indigo peak]

interesting

[ocean raptor]

Go ahead, write a logo deprocessor that converts the bin to the hooks

[indigo peak]

guys tweak.deb -> tweak.x soon™️

[ocean raptor]

Mods, fiore is pirating, ban him

[indigo peak]

ive been pirating for years

[tepid olive]

Arrrr

[silver rampart]

https://gist.github.com/KritantaDev/6b631006bf61e602a9366418011ca630

[misty cradle]

what is wrong with u

[silver rampart]

its been sitting on my lab server for like a month

[next wadi]

thats not possible doodyhead

😂😂😂😂😂😂😂😂😂😂😂😂😂

[indigo peak]

can you assign %orig to a value

like

%orig = 12;

[silver rampart]

no

[ocean raptor]

[weary heath]

%hook %orig
return 12;
%end

[silver rampart]

orig is syntax sugar to call a function

i dont think logos would support assignments to it

https://github.com/kritanta-ios-tweaks/Chapters/blob/master/Chapters.mm#L93 what it looks like without logos

then libsubstrate assigns the values to em

so while you could probably assign 12 to that name, it'd just break shit

[indigo peak]

what is selRef_rootIconListAtIndex_

rootIconListAtIndex is a method, but how would it look in actual code

[silver rampart]

it's detirmining which method on v4 to call

based on the if statement u cropped out

[indigo peak]

okay, thanks

[silver rampart]

it's checking which selector to use with whatever v4 is, and then calling that method

[indigo peak]

v4 is just a sharedInstance

[silver rampart]

selref is just a pointer (or pointer to a pointer) to a string

[indigo peak]

so is it what capt said @selector(rootIconListAtIndex)

[silver rampart]

yeah basically

[indigo peak]

but couldnt i just do

[v4 rootIconListAtIndex]

since v4 is an instance

[silver rampart]

yep

[indigo peak]

but wait

rootIconListAtIndex takes in a param

-(id)folderIconListAtIndex:(unsigned)arg1 ;

wrong method

but still

[silver rampart]

you cropped out the method call in that screenshot

[indigo peak]

-(id)rootIconListAtIndex:(int)arg1 ;

[silver rampart]

msgSend(v4, selector, 0LL)

0 is the arg

[indigo peak]

i see

okay

one last question

[silver rampart]

.

this script transforms ida objc decomp to more proper objc syntax

[indigo peak]

how to use

nvm

i see

so i would set it up like that

and then run python3 dec.py

[silver rampart]

then just run it

[silver rampart]

lmfao i think the specific line you're asking about broke it

[indigo peak]

oh boy

[silver rampart]

i use it in jupyter lab to make life easier

[indigo peak]

ive never used jupyter before

[silver rampart]

spits this out

[indigo peak]

oh thats like

really cool

tried it with a different block

didnt work either

[silver rampart]

lmfao

[indigo peak]

wait could it be the newline

[silver rampart]

only ever used it with springboardhome methods

[indigo peak]

i think it could be the newline

since windows handles newlines differently

\r\n

i could be completely wrong

but

nope

[silver rampart]

probably bc it uses selRefs and not sels

which i didnt write it for

[indigo peak]

im not using that anymore

im using another thing

[silver rampart]

unsure how differently ida handles relative/direct selectors

[indigo peak]

ive only been able to get it to output the InitFunc_0

none of the hooks

:c

let me try a different tweak

bc this ones from like

iOS 7

@silver rampart since this isnt working, im going to ask you one more question

and i should be done asking questions

so at the top of the view, v7 is declared with a type of char**

and in the code, it gets assigned with the address of rootIconListAtIndex or folderIconListAtIndex

should the type be char**

[silver rampart]

bc it's a pointer to a pointer to a string

[indigo peak]

or is it somethign that IDA just put together

[silver rampart]

.

[indigo peak]

so if later it does v8 = *v7

it only dereferences it once

so its still just a pointer to a string

[grim sparrow]

fiore learning re

!

[indigo peak]

not a pointer to a pointer

[silver rampart]

did v7 get reassigned

[indigo peak]

      v7 = &selRef_folderIconListAtIndex_;
    else
      v7 = &selRef_rootIconListAtIndex_;
    v8 = *v7;```

[silver rampart]

ida occasionally reuses var names in decomp

[grim sparrow]

fiore

top tip

rename it to a more readable variable name

[silver rampart]

press N to do that ^

on the variable name

[grim sparrow]

bonus points if you add comments around the code

[indigo peak]

i see

[silver rampart]

its getting dereferenced once bc that turns it into a char * which is a cstring

[indigo peak]

:D

[grim sparrow]

one of the best ways to understand something is to make the variables actual names that represent what they are and comment it

[silver rampart]

its doing that dereference once bc its originally a pointer to a pointer to a cstring, and we want it to be a pointer to a cstring instead, bc that's what msgSend wants

[indigo peak]

ah okay

that

makes sense

surprisingly

[indigo peak]

how to comment in ida

nvm

i foudnit

[grim sparrow]

it just sucks when you're comments are ever so slightly wrong and it fucks you over horribly

[indigo peak]

/

okay, thank you guys for the help

i should be good from here on out

but

who knows

i could forget all coding in a freak accident and ill need the link to the learn objc in 24 days guide

that i never actually read

[shell nova]

kek

[ocean raptor]

Ghidra makes like 2 variables that it uses over and over again, it's the worst

Also, anyone have a pirated ida for FreeBSD (or that works in linuxulator)

[ocean raptor]

Go ahead, learn objc https://github.com/apple-oss-distributions/objc4

[twilit jungle]

[silver rampart]

things to not ask in the r/jb discord server

[restive ether]

cameron moment

[ocean raptor]

True

[silver rampart]

cameren moment

[restive ether]

key difference

[silver rampart]

e

[restive ether]

e.

[lime pivot]

[ocean raptor]

E

[hardy glen]

https://www.zynamics.com/bindiff.html i wish this worked in wine

I end up having to run ida in vm to use this

[gentle grove]

o

[ocean raptor]

Wait, why are you using discord in light mode

[lime pivot]

why do I need to configure my computer to trick my brain into sleeping?

[ocean raptor]

You have narcolepsy that's triggered by dark mode or something?

[indigo peak]

@late ridge did you end up making your vertical scrolling tweak

[hardy glen]

@indigo peak what are you trying to dump

[indigo peak]

code to a method

from ios 7

[hardy glen]

https://github.com/arandomdev/DyldExtractor

@indigo peak ^

[indigo peak]

where do i ge the dyld cache from

[hardy glen]

The ipsw my friend

https://iphonedev.wiki/index.php/Dyld_shared_cache

[indigo peak]

i have the ipsw

where in the ipsw

[hardy glen]

The easiest method for getting a dyld_shared_cache is as such:
Download or locate an ipsw for the target version and device
Rename it to a .zip, extract, and locate the largest .dmg
Mount the dmg and navigate to /System/Library/Caches/com.apple.dyld/
Copy the dyld_shared_cache to your machine.

[indigo peak]

how do i mount the dmg

[hardy glen]

That is a question you need to ask mr google

i would do it but that would take forever

@indigo peak 7z x file.dmg

[indigo peak]

wtf

[twilit jungle]

[hardy glen]

Bruv

You could try to convert the dmg to iso @indigo peak

[indigo peak]

by renaming it

or just

[hardy glen]

..

[indigo peak]

do funny thing

[hardy glen]

magic iso

Dmg2img

http://vu1tur.eu.org/tools/

Or just pop a mac vm

[indigo peak]

bru

[grim sparrow]

is it just me

or is the dev wiki down

[indigo peak]

or am i dumb

yeah

it was upo for me

idk

[hardy glen]

F

I am on it fine

[grim sparrow]

ok

looks like its a me proble

as usual

[indigo peak]

its still not working

wtf

[grim sparrow]

now have working aemulo on my main device

[hardy glen]

Or just install opencore instead of using windows

Like i used to do

[next wadi]

ratio

[indigo peak]

why is this so dumb

:c

[next wadi]

:3

[hardy glen]

JUST USE A MAC

[indigo peak]

would the dmg be locked by a password or something

is that like

a thing

[hardy glen]

no

[indigo peak]

or no

[hardy glen]

If you’re on windows doing shit like that. I would recommend having a mac os VM

So you do shit like this on a vm

@indigo peak what type of laptop are you using

[indigo peak]

im on a pc

like a sane person

[hardy glen]

Try opencore

[next wadi]

does anyone wanna see some clean canister.py code

:3

[hardy glen]

@indigo peak

[indigo peak]

argentina

[hardy glen]

Monterey

I love opencore

[indigo peak]

@hardy glen

the ipsw was too old

lmfao

for it to work

i was doing 7, but 10.0.1 works fine

[hardy glen]

Yea ios 8+ is better

[indigo peak]

:D

[hardy glen]

Nice

[tepid olive]

@indigo peak the reason the dmg from 7 didnt work is bc

its encrypted

[indigo peak]

@hardy glen does dyldex_all have windows support

[tepid olive]

10 isnt

and above

[hardy glen]

No clue

I don’t use windows

[tepid olive]

you can decrypt with vfdecrypt and find key on theiphonewiki

[hardy glen]

If your computer can run it, install a old mac vm

Just in case if you run into windows limitations

[indigo peak]

@hardy glen would ktool work on the cache?

[restive ether]

it SUCKS

[hardy glen]

After you have dumped the binary

[indigo peak]

woe

[hardy glen]

You can dump headers

Ktool is early beta so idk if it will

It crashes on me sometimes. But i think you should be fine

Try it out

If not then you can use a macos vm and use dsdump. Or i can dump the binary for you if you upload it

@indigo peak throw the whole shared cache in ida

[indigo peak]

bet

[hardy glen]

It will take only 2 seconds

[indigo peak]

say less

[hardy glen]

Then leave it overnight

[tepid olive]

ida can’t do the new shared cache format iirc

[hardy glen]

He’s doing ios 10

[indigo peak]

can confirm

[tepid olive]

troll

[indigo peak]

that is what im doing

[tepid olive]

armv7

[indigo peak]

big brain

[tepid olive]

dyldo

[indigo peak]

:D

[next wadi]

what the fuck

[restive ether]

trolla

[twilit jungle]

what does it suck though?

[restive ether]

because he’s like 12

12 year olds can’t even read

[indigo peak]

anyone know why this is dumb

[indigo peak]

@hardy glen

i guess im going to use an ios 12 one

since the method is present up to 12

[graceful gate]

Instead of dealing with iOS 7 dmg you may try iOS 7 “standalone” OTA zip instead

https://www.theiphonewiki.com/wiki/OTA_Updates/iPhone/7.1.2

Ones without Prerequisite fields

[restive ether]

oh

you’re here

wild

[indigo peak]

@hardy glen its doing something

[vivid dew]

trolley

[hardy glen]

Yup i don’t expect it to be successful

[next wadi]

who made that prompt that you're using there?

[indigo peak]

me

[next wadi]

oh

[indigo peak]

GUYS

I GOT WHA TI WA LOOKIGN FRO

:D

id __cdecl -[SBIconController rootIconListAtIndex:](SBIconController *self, SEL a2, signed __int64 a3)
{
  id v3; // x0
  id v4; // x0

  if ( a3 == 10000 )
    v3 = -[SBIconController dockListView](self, "dockListView");
  else
    v3 = -[SBFolderController iconListViewAtIndex:](self->_rootFolderController, "iconListViewAtIndex:");
  v4 = objc_retainAutoreleasedReturnValue(v3);
  return objc_autoreleaseReturnValue(v4);
}

[hardy glen]

Nice

Cookie coming your way

[indigo peak]

i ended up just taking the springboard binary from /System/Library/CoreServices/SpringBoard.app/SpringBoard

and then putting that in ida

[hardy glen]

Yea and you can also dump the dyld shared cache from device

[indigo peak]

@hardy glen youre smart, -[SBFolderController iconListViewAtIndex:](self->_rootFolderController, "iconListViewAtIndex:"); what is that doing

whats the point of the shit in the ()

[vivid dew]

https://media.discordapp.net/stickers/892541670594322512.webp?size=320

[tepid olive]

stop pirating my stickers

[tepid olive]

Is that a vtuber

[vivid dew]

you are a vtuber

[hardy glen]

I would assume self is a class than has a instance variable called rootFolderController that is a SBFolderController object which is calling iconlistviewatindex?

@indigo peak look here my friend https://www.iphonedevwiki.net/index.php/SBFolderController

[indigo peak]

the iphonedevwiki has so many random things

like

i was not expecting that

[hardy glen]

Lmao yea iphone wiki is outdated but still clutch at times

So in your case, i am assuming self is sbiconcontroller

[indigo peak]

yeah

i think

i did this right

%hook SBIconController
%new
-(id)rootIconListAtIndex:(long long)index {
    id v3;
    if(index == 10000) {
        v3 = [self dockListView];
    } else {
        v3 = [self.currentFolderController iconListViewAtIndex:index];
    }
    return v3;
}
%end

yes, i took a method from iOS 12, and put it into iOS 14, i dont want to hear it

[hardy glen]

There is no such thing as deprecation

[indigo peak]

true!

yeah well, idk what else it uses

so

[twilit jungle]

Literally 1 minute of searching would have yielded you the method responsible for getting root index but here you are after wasting hours reverse engineering

[hardy glen]

Thank you dgh0st for teaching him a lesson

[indigo peak]

but i wanted the official code

[twilit jungle]

Yeah its still there

[indigo peak]

[twilit jungle]

Just moved to different class

[indigo peak]

wtf

[hardy glen]

Extracted dyld shared cache for nothing

L

[indigo peak]

it was a learning experience

[hardy glen]

True

At least now you know how

[indigo peak]

how to find this

[twilit jungle]

ctrl + f

[hardy glen]

Lmao dgh0st will not spoonfeed

F

[indigo peak]

ctrl f what though

[hardy glen]

Put all contents of all the headers in ios in one file

And ctrl F it

[indigo peak]

bruh

[twilit jungle]

Google search for that method with iOS version would even work

[indigo peak]

https://developer.limneos.net/?ios=14.4&framework=SpringBoardHome.framework&header=SBHIconManager.h

legit killing myself

[twilit jungle]

[hardy glen]

You would think to check a class called manager

[indigo peak]

dgh0st cancelled

[twilit jungle]

[tepid olive]

my school blocked this site for piracy bc i was on it

and they thought it was piracy

[twilit jungle]

F

[indigo peak]

F

[hardy glen]

G

[indigo peak]

just use krits website

[hardy glen]

H

[indigo peak]

ez

[grim sparrow]

Fiore

Ur dumb

[indigo peak]

yes amyt

thank you

[hardy glen]

[indigo peak]

youre a little late to the party

fucking brit

[grim sparrow]

Still happy I fixed apples engineering with a piece of paper

They said I would need to replace the whole housing

The fuckers

[indigo peak]

cash grab

worse than titan d3v

[restive ether]

troll

[indigo peak]

well now i know for next time

[grim sparrow]

I literally just put some card over a flex connector and then screwed down the cover

And that provided enough pressure to hold it in

[indigo peak]

thats a donato ™️ fix

i would def do that

[hardy glen]

I can’t stand using limneos site for headers. I’ve been been using HITC/krits headers forever now

[indigo peak]

i only use limneos when im searching for headers and for when i look it up on google

since its the first link

[hardy glen]

https://headers.saadat.dev/sdks

[indigo peak]

so i wasted the last 4 hours of my day

time to sleep

[hardy glen]

That and krits website

[late ridge]

no lol
I rly want it tho, just didn't care enough to finish it

[indigo peak]

woe

okay

did you get anything done?

[late ridge]

ya I can send you the source, I was just hard coding the frame values of each icon page, and some other stuff. Just seeing what methods did what

didn't rly get far

[indigo peak]

🙏

[hardy glen]

Infesting my new install

[vivid dew]

stream?

[hardy glen]

Its literally still stuck at installing

Does anyone know how to fucking disable the flash that blinds me in monterey for every button i press

whoever added this is a menace to society

i literally can't find how to turn it off

nvm you can't see it in a screen recording

it literally blinds me while i have it turned off

[hardy glen]

Ggs

[vivid dew]

this [redacted] doesn't initialize his stack variables

[vivid dew]

https://www.reddit.com/r/jailbreakdevelopers/comments/rk8dam/question_coretrust_mechanism_and_bypass/

3 years on people are still getting trolled by jamies blog post

[torpid crater]

would somebody here be willing to help me bypass the resource checks in unc0ver?

I've tried using a disassembler but I'm pretty much poking around blindly that way

I imagine if I could get frida to work in a jailed state, I could see what function is called and then NOP it, right?

it seems to verify the _CodeSignature/CodeResources file using the signature.bin file and then uses the hashes in that file to validate all the other files

[torpid crater]

I've tried injecting the Frida gadget dylib and it seems to successfully start (logging the listing port/address) but unc0ver remains on a black screen and eventually crashes

is that an error on my side or another check implemented into unc0ver?

[torpid crater]

this isn't for nefarious reasons btw, I simply want to load the procursus bootstrap

[vivid dew]

what no procursus does to a [redacted]

[torpid crater]

what?

[untold river]

>>> from modules.repo.debian import DebianRepo
>>> chariz_auth = {
...   "token": "[redacted]",
...   "udid": "[redacted]",
...   "device": "iPhone10,5"
... }
>>> chariz = DebianRepo('https://repo.chariz.com', authentication=chariz_auth)
 Release: 100%|███████████████████████████████████████| 1.16k/1.16k [00:00<00:00, 574kB/s]
 Packages.bz2: 100%|█████████████████████████████████| 40.7k/40.7k [00:00<00:00, 13.6MB/s]
>>> chariz.get_dl_link(271)
'https://chariz.nyc3.digitaloceanspaces.com/downloads/akara/com.tr1fecta.akara_1.0_iphoneos-arm.deb?[redacted]'

finally

paid packages

[indigo peak]

Wtf

[undone nest]

finally, i have achieved piracy

[lime pivot]

no pls privacy )))

[untold river]

is technically not piracy if you have to pay for it first

[lime pivot]

link is also valid for like 10 seconds or something lol

[undone nest]

oh then good job

[undone nest]

well yeah

[lime pivot]

just how S3 signed urls work really

some of the junk on the url is a signed payload to confirm yes Chariz really gave permission to access this file

[tepid olive]

can i save url blobs

[lime pivot]

save your chariz blobs and generators /s

[tepid olive]

who needs some iPhone10.6 chariz blobs

[untold river]

i have my chariz token saved for archival purposes

who wants my token i have like
akara

[tepid olive]

akara working challenge

[lime pivot]

is iPhone10.6 how model ids are written in European countries

[undone nest]

chariz shsh2 when

[undone nest]

no

[tepid olive]

It’s iPhone X (GSM)

[lime pivot]

coming soon: NOUTickets

[lime pivot]

in this house we use iPhone10,3

[tepid olive]

velox 1 was a mistake

[lime pivot]

hah ouch

[tepid olive]

lyricify was gifted by conor

and uh akara didn’t work correctly

but they were gifted so it’s chill

[lime pivot]

I recently figured out my iPhone X is actually a US model

model NQA62ZP/A

A = north america

would have expected X which for some reason is Australia

[tepid olive]

is the notch upside down in australia

[indigo peak]

I had to get Akara given to me by tr1

[lime pivot]

still the correct model for Australian networks so got lucky on that one

[indigo peak]

Because there was a link drop for a gift and I clicked it

It said i won

But SOMEONES REPO WAS BROKEN

and didn’t let me get it

[lime pivot]

lmao

was that when chariz broke for like half a day

[tepid olive]

i remember that

[lime pivot]

oops

[tepid olive]

lol

[indigo peak]

Yes it was

[tepid olive]

i claimed it from purchase page

[indigo peak]

Something similar happened with Amy gifting me AEMULO

Since she wanted me to test the drm

[tepid olive]

[indigo peak]

Or the piracy thing, same difference

[lime pivot]

I broke the chariz.gift links or something

idk what it was now

[indigo peak]

So I got AEMULO early + fully paid off

[tepid olive]

airdrop chariz gift 🎁 https://charzi.gift

[indigo peak]

@gentle crescent ban this user.

[torn oriole]

Yooo American phone gang

[gentle crescent]

she gets a pass and also im taking ur dev role for thinking python doesnt support ints

[indigo peak]

wtf

whore

[indigo peak]

you’re not just a whore

you’re aaron’s whore

[grim sparrow]

I remember this

[high citrus]

probably like this

[lime pivot]

🙃

[grim sparrow]

I was about to strip all drm because I thought it was too unreliable

Turns out the repo was just bad

[lime pivot]

😬 oopsie

[grim sparrow]

To my knowledge the drm has no never bugged

[indigo peak]

look I’m pink

I’m like anamy

[grim sparrow]

Other than people using the famous Cydia Down tweak so devices don’t link

[lime pivot]

soooo for some reason my 12 pro max is also /A

I bought it new from a legit physical store

[tepid olive]

my X is also /A but it's a GSM phone

[indigo peak]

Time to make a tweak that hides the notch on top and makes one on the bottom where the home bar is

[lime pivot]

I guess /A stands for 🅰️merica 🅰️nd 🅰️ustralia now

[torn oriole]

What’s your full model number 😳

[grim sparrow]

My 7 is /a and it’s GSM

[tepid olive]

NQAF2ZD/A

[grim sparrow]

MN912B/A

[lime pivot]

MD101LL/A

[indigo peak]

MQ722LL/A

I want to feel included

[lime pivot]

good job

[grim sparrow]

Still waiting for the api where a tweak can link a users device to Chariz

[torn oriole]

Where my MQAM2LL/A homies at

[lime pivot]

BrokePods to go with your BrokePhone

[grim sparrow]

Of yeah

Oh yeah

[indigo peak]

Stfu

[grim sparrow]

@indigo peak

I think you mentioned this

But

[lime pivot]

lollll gottem

[indigo peak]

:(

[grim sparrow]

Aemulo Skylanders support is happening

[indigo peak]

LMFAO

[lime pivot]

ah yes, the 3 carriers

[grim sparrow]

I mentioned it as a joke at a friends house and ended up leaving with a collection in my bag

[indigo peak]

I have verzion 3

[tepid olive]

Reincubate Lookup still says iOS 14.5 is the latest version

[lime pivot]

hahaha that's amazing

[tepid olive]

and yet they updated the device images to the iOS 15 wallpaper

[indigo peak]

I have a bunch of sky landers too if you want me to test

[grim sparrow]

Dude

I have like 4 from each game

[tepid olive]

i have too many skylanders

[lime pivot]

man I almost used their API but the data just seemed… not great

[torn oriole]

Go on. Blur where the notch was with the rest of the wallpaper

[grim sparrow]

I sold all of my mine a couple years ago

[indigo peak]

Sky landers was a fun game

I have the ones for the wii game

[lime pivot]

I instead spent half a day writing a swift playground to steal the device model info out of macOS CoreTypes.bundle

[tepid olive]

well it's completely useless starting from A15 (even some A14 devices like the purple iPhone 12)

randomized serial number moment

[torn oriole]

A14/A15 moment

[indigo peak]

Better than me spending a 6th of a day porting a method just for it to be under a new class

[grim sparrow]

I still need to write a GitHub action to automatically update remote translations

[lime pivot]

oh yeah, well we don't use serials of course, just the models

[indigo peak]

Still pissed abbot that

[lime pivot]

abbot

🤖

[torn oriole]

abbot

The ab bot

[lime pivot]

[torn oriole]

😳

[indigo peak]

shut up

I’m in the bus

[grim sparrow]

Time to downgrade this device from 15.2 to 14.8, again

[indigo peak]

And my brightness is down

[lime pivot]

like the engine?

[grim sparrow]

For the 9th time today

[lime pivot]

are you the engine?

[indigo peak]

Yes

[torn oriole]

Wtf fiore bus engine confirmed

[indigo peak]

Vroom vroom

[lime pivot]

story checks out

[torn oriole]

How many horse power

[tepid olive]

me irl

[indigo peak]

vroom vroom

[grim sparrow]

The downgrade itself works perfectly

[lime pivot]

1 donatopower

[grim sparrow]

I’m just dumb

[indigo peak]

vroom

[indigo peak]

I can relate

[lime pivot]

completely unrelated but I found a new feature in unifi controller

heatmap of download/upload usage

I was downloading Xcode at 2 PM

[grim sparrow]

That’s cool

I like the small spike at midnight

[lime pivot]

heh I have no clue what that is

my backups are supposed to kick off at 2 AM

according to this nothing happened at all

[grim sparrow]

That reminds me

I need to get a new switch that isn’t capped at 100Mbit

[lime pivot]

you should

they're like

$20

[torn oriole]

Get a new switch then

[lime pivot]

I just got a TP-Link 8 port for around that

from Amazon UK actually

there was a moment of fucking derp when I realised I could have spent $2 more and gotten one with an Australian power brick

[grim sparrow]

Tbh switch is the wrong word

[tepid olive]

https://twitter.com/leahlundqvist/status/1473263767899320329?s=21
this is what true developers have been doing. keeping features people wanted 15 years ago

treeah 🎄 lundqvist (@LeahLundqvist)

So, apparently Apple Music still has support for printing playlist CD covers.

Twitter · Dec 21, 2021, 12:07 PM

[grim sparrow]

You can do this in ITunes

I found it the other day and was very confused

[tepid olive]

stability? nah. printing covers? sign me up

[lime pivot]

or at least a US brick where I can do the very legal thing of bending the pins to fit in an AU power point

[tepid olive]

ik

[lime pivot]

the threat map tab is… slightly less useful

[grim sparrow]

Unironically iTunes windows is incredibly stable

[tepid olive]

JetUI windows eta wen

[grim sparrow]

But the problem is

[lime pivot]

considering it shows me only 4 threats and they're all from, supposedly, the city center of Adelaide

[grim sparrow]

If I was going to invest

I would get something really fancy

[lime pivot]

for a switch? nah

unless you mean a router

[grim sparrow]

It’s an old router repurposed as a switch but that eventually got repurposed back into a router

[lime pivot]

the jump from an unmanaged to managed switch is a few hundred dollars

not worth it for most people

[grim sparrow]

For a while it was just taking power line and then splitting that for a bunch of devices

But then I realised I could use the wireless

And then created my own subnet

[lime pivot]

oh yeah if you want a subnet that's totally blocked off from the parent subnet then yeah you need a router

or a managed switch but that's just not worth it when you could buy something that gives you faster wifi as well as plain ethernet

[untold river]

https://share.beerpsi.me/ze0rlzvi.png

It was going so well then some fuckers just have to put a colon in their version names

[grim sparrow]

What are you trying to do

[lime pivot]

the colon thing is kinda jank af

it's like a super version number override

[indigo peak]

do I have dev role bac

yooooo

[lime pivot]

who decided donato is a dev

wtf

[grim sparrow]

L

I have discovered a bug and have no idea what causes it

[indigo peak]

bro

: (

[grim sparrow]

Whenever I try and pipe a command from aemulocli nfcd crashes

But it doesn’t from the app

[untold river]

rewriting my repo archiver

in python

[indigo peak]

So in IDA v7 was a char ** , but @selector returns SEL, how does it assign a SEL to a char*

Okay mobile syntax

[grim sparrow]

This is what we call not perfect pseudocode generation

[indigo peak]

So would I just turn v7 into a SEL

[grim sparrow]

Well that would make sense

[indigo peak]

Makes sense

I figured it out

I’m also not at my pc

So

@grave sparrow can you tell me what’s happening on lines 26-27

Bc I think, 26 is [instance performSelector:balls withObject:0];

but then I don’t know what 27 is

And I don’t know why it’s returning length

when it’s a layoutSubviews hook

[quaint wigeon]

Any c++ devs

Are those usually bought together

[indigo peak]

Can you stop

Cross posting please

I’ve seen this 3 times in 3 different channels

[quaint wigeon]

wtf

Is that by 3 different people

Ok time for this picture to die

[indigo peak]

#jailbreak message

#general message

#development message

[untold river]

https://share.beerpsi.me/slq1va44.png
oopsie i did it again uwu

[indigo peak]

Okay, I’ll be able to describe my shit more when I get home too

I have screenshots of the IDA code that I’m looking at on my phone and chrome book at school

[quaint wigeon]

Are you downloading the entire chariz now

I wonder how large that is

[grim sparrow]

not that large

[quaint wigeon]

Oh chairz only has 93 packages on it

[native dune]

wtf

[grim sparrow]

very few themes too

[native dune]

yes like 3 themes

[quaint wigeon]

What would be the use case of this

[quaint wigeon]

Oh

[undone nest]

never saw this error until now

https://http.cat/429

[tepid olive]

haha i did that once

[indigo peak]

I know :)

[twilit jungle]

Why are you REing another tweak?

[indigo peak]

Pure boredom

[ocean raptor]

FreeBSD's diff is good, it even has color support in 14-CURRENT

[twilit jungle]

[indigo peak]

I will explain more when I get home

School service sucks + I don’t have actually code syntax or ida

[glacial matrix]

Back in my day I was doing tweaks with nano in MTerminal on an iPhone 3G while on bus rides. There were no decompilers, only class-dump-z and cycrypt. My tools were a patched gcc (not clang) and UIAlert because you can’t see the syslog while tweaking an app on the same device
/end old man rant

[tepid olive]

Thank you

[ocean raptor]

Real OGs used ed or cat <<< EOF >> file

[glacial matrix]

Nice

[glacial matrix]

cat /dev/random > file.x until it spits a valid source

[grim sparrow]

I need a 2nd lightning cable

or

a usb c port

Slightly odd question

is there a way with Theos to install to multiple devices at once

so make package install would install on two phones

[misty cradle]

i think someone created something for this

@grim sparrow

i remember someone doing it not sure who

maybe @silver rampart

[tepid olive]

THEOS_DEVICE_IP=192.168.1.10 make package install && THEOS_DEVICE_IP=192.168.1.11 make install

[hardy glen]

Yup just create an alias and boom

[grim sparrow]

@restive ether I have found a problem

[restive ether]

and you have found a solution

[grim sparrow]

I can't do developer™️ things in this channel

[restive ether]

ah yes

what do you need

[tepid olive]

this is why we need a "developer but pink" role

[grim sparrow]

^

[grim sparrow]

pretty sure I just get filter bypass and manage messages?

[high citrus]

where 'developer but gray'

[grim sparrow]

thats called adv dev

[high citrus]

wait since when am i member+