#development

1 messages · Page 569 of 1

snow python
#

Perhaps Im stupid hold on

#

Ok I'm not, it needs the file descriptor

ocean raptor
#

Looks like zebra doesn't support finish:

snow python
#

It doesnt, I'm working on it right now

ocean raptor
snow python
#

Can you expand that for me

ocean raptor
#

and finish:(return|reopen|restart|reload|reboot)

snow python
#

oh and all of them run uicache

#

k

ocean raptor
#

bro there are a lot

#

just do a case insentitve check for yes or 1

vivid dew
#

(1|[E-y]{3})

grim sparrow
#

Alternative solution, just do sbreload in postinst and hope you don’t break anything

#

Read the second part

vivid dew
#

you can do ( sleep 5; sbreload ) &

grim sparrow
#

That is very true

vivid dew
#

hopefully that 5 seconds is enough for whatever needs to happen

ocean raptor
#

finish:return - nothing
finish:reopen - reopen cydia/zebra/sileo
finish:restart - respring
finish:reload - sbreload
finish:reboot - ldrestart(?)

ocean raptor
grim sparrow
#

Oh btw Cameron

ocean raptor
#

now I wanna burn my eyes out

ocean raptor
grim sparrow
#

I find it very funny how you made a funny remark about me taking an hour longer than I said to make a PR and now it’s been sat open for over a week

vivid dew
#

mobile cydia implies the existence of desktop cydia

grim sparrow
ocean raptor
grim sparrow
#

I copied the logic from libhooker

#

Literally every jb that runs Procursus supports userspace reboot

vivid dew
#

i will make a truly free version of libhooker

grim sparrow
#

Why does the old logic need to exist

vivid dew
#

librehooker

ocean raptor
grim sparrow
#

If you call reboot3 and userspace reboot isn’t available nothing happens

ocean raptor
#

oh fr?

grim sparrow
#

So it will fall back to the previous logic

#

Making the if check slightly redundant looking back

restive ether
#

so you can just remove the plist part i guess

grim sparrow
#

It does appear that way

ocean raptor
#

is that true all the way back to iOS 11?

grim sparrow
#

I have no idea about 11

#

Do those 3 users care?

restive ether
#

no user space on 11

ocean raptor
#

ok, well 12 is the lowest target I care about actually

restive ether
#

no jailbreak supports that and pro doesn’t either

grim sparrow
#

So surely it’ll do nothing then

ocean raptor
restive ether
#

did you test every bin on 11 dog

ocean raptor
#

uikittools-ng is bootstrap agnostic after all

restive ether
#

does electra use ng on 11

ocean raptor
restive ether
#

pre-procursus ng obviously

ocean raptor
grim sparrow
ocean raptor
grim sparrow
#

Nice

ocean raptor
#

can I be added to beta.anamy.gay? I'll merge your uikittools-ng PR tonight after I finish some physics hw

#

which I should be doing rn KEKW

grim sparrow
#

If you remove that if check it should work fine

#

I tested it on checkra1n ora1n and taurine

ocean raptor
grim sparrow
#

But I know it works on latest chimera and odyssey

#

And it should be fine on older versions

ocean raptor
restive ether
#

rootless ?

#

does that count

grim sparrow
#

No

restive ether
#

then no

ocean raptor
#

my only device is running 14.8 woeis

restive ether
#

still waiting for check to fix their user space reboot bug

ocean raptor
#

gonna patch pongoOS to not enable it trol

ocean raptor
restive ether
#

it mounts something every time you run it

grim sparrow
#

Apparently ur UDID is now added

restive ether
#

forget what it was

#

maybe it was binpack

ocean raptor
#

is reboot3 in xnu source?

grim sparrow
#

actually

#

lemme check something

#

which could simplify my code a lot

grim sparrow
#

see I'm just thinking now

#

could you check the return value of it

#

and then use that to see if it worked

#

yes

#

if ret != 0

#

something went wrong

ocean raptor
#

I mean, if it succeeds execution will end...

grim sparrow
#

not entirely

#

theres a slight delay

#

because it runs async

tepid olive
ocean raptor
#

I can't believe they implemented reboot 3 times

tepid olive
#

best

grim sparrow
#

the internal implementation is just

#

if (ret) {
throw
}

ocean raptor
#

what's the difference between reboot, reboot2, and reboot3

restive ether
tepid olive
tepid olive
ocean raptor
#

reboot(2):

RETURN VALUES

If successful, this call never returns. Otherwise, a -1 is returned and an error is returned in the global variable errno.
#

not sure about reboot2...

#

or reboot3

tepid olive
#

true

restive ether
#

malware pages

tepid olive
#

“never negative”

#

it’s always better practice smh

grim sparrow
tepid olive
#

i wish swift could have functions that exit a closure or something

#

i’m not sure how to say it

ocean raptor
#

reboot2() returns itself...

void *
reboot2(uint64_t flags)
{
    mach_port_t rootbs = MACH_PORT_NULL;
    (void)bootstrap_get_root(bootstrap_port, &rootbs);
    if (vproc_mig_reboot2(rootbs, flags) == 0) {
        (void)mach_port_deallocate(mach_task_self(), rootbs);
        return NULL;
    }

    return reboot2;
}
grim sparrow
#

return

tepid olive
#

func something() {}
guard true else { something() }

tepid olive
#

and something does the return implicitly

grim sparrow
#

its not that bad

ocean raptor
#

thats why you use exit()

grim sparrow
#

which would do what you asked

tepid olive
grim sparrow
#

just not the best way

#

just show a warning asking the user to restart the app

ocean raptor
#

ok, is reboot3() a syscall or a function?

grim sparrow
#

it exists

ocean raptor
#

I'm gonna throw it into ida ghidra

#

to see what it's actually doing

#

and what it returns

tepid olive
#

@grim sparrow if it was a thing reimplementing fatalError 1:1 would be possible to use a custom logging system

#

idk

ocean raptor
#

I'm on FreeBSD

grim sparrow
#

but like

#

avoid fatalErrors anyway

ocean raptor
#

bye

tepid olive
#

overriding fatalError like i do print trol

restive ether
#

nerd

grim sparrow
ocean raptor
#

be back in like an hour or two

grim sparrow
#

reboot3 is only ever positive

#

or 0

restive ether
#

nerd

tepid olive
#

ok but what if you are a reboot 2 user

restive ether
#

what are you on ios 3?

tepid olive
#

@nonreturning func piss() { fatalError(“anal”) }

#

would be fun

grim sparrow
#
int ret = reboot3(RB_HALT);
if (ret)
  INFO_LOG("Failed to shutdown");
#

why

#

lol

#

true

#

thats taken from powermanagement

#

source

tepid olive
#

nfr

grim sparrow
#

somewhere theres probably a list of defines

tepid olive
#

was keychain source published intentionally in the end

restive ether
#

putting pmset on procursus

grim sparrow
#

as to what the error is

#

it is currently 2:38am

#

is it in my best interest to sleep or keep studying

tepid olive
#

Seek therapy

#

Should i finish this

#

?

#

that’s the real version

#

i really have no idea what i’m doing if you can’t tell

tepid olive
ocean raptor
grim sparrow
ocean raptor
# grim sparrow reboot3

no, like which ones? all of them? and you want the defines for reboot3(flag)'s flag, right?

grim sparrow
#

no

#

the return value

#

I have all the flags

ocean raptor
#

oh, not sure if I have that

grim sparrow
#

int ret = reboot3(poo);

#

list of defines for ret

ocean raptor
#

I'll let you know when I get to my computer

grim sparrow
#

i.e. what error they are associated with

ocean raptor
#

I have one question than 4 pages to read, than I get them for you (if they exist)

ocean raptor
#

@grim sparrow

@result
NULL if the operation began successfully, non-NULL if there was a failure.
In the event of a failure, errno will be set to an error code describing the
failure
grim sparrow
#

That’s cool

ocean raptor
#

wait no

#

that's reboot2

#
@result
Zero if the reboot operation began successfully, otherwise an error 
describing the failure.

this is reboot3()

#

oh weird, it has va_args...

#

ah, some types of reboots have args

primal perch
grim sparrow
#

Meaning it could run async

#

However

#

hmm

#

yeah it may be worth just doing a check ngl

silver rampart
#

m yess reboot0-9

grim sparrow
#

I wonder who has the job of deciding when to make a new one

#

Person just woke up and chose violence by making reboot4

vivid dew
#

i'll skip 4

restive ether
#

thank you for your contribution, can’t wait for reboot5

ocean raptor
#

@grim sparrow your PR looks fine and I want to merge it but testing it is a huge pain, cause 1. I have to figure out how to force it to fail to make sure the ldrestart continues like it should and 2. if it fails and does a full reboot I can't rejailbreak unless I boot into odysseyn1x

#

and merging something without testing is very unlike me

#

ooh, new sileo icons

primal perch
#

merge without test is the way

ocean raptor
#

nah, that is very unlike me

ocean raptor
#

smh

restive ether
restive ether
#

if you don’t have the devices make keto do it

#

troll

ocean raptor
#

my only device is on 14.8 KEKW

hardy glen
#

This is why you steal ur family members old phones

ocean raptor
#

I did

restive ether
#

not enough apparently

ocean raptor
#

but they got taken from me when I was grounded and this is the only one I got back

restive ether
#

sometimes i be forgetting not all of you are as boomer as i

analog echo
#

if ( (*(_DWORD *)((_BYTE *)&_vm_region_recurse_64 ) & 0xFFFFFC1F) == 0xD61F0000 )

Can someone tell me what's going on here. This is decomp output from a function used for jailbreak detection (I think?) It's getting the address of vm_region_recurse_64and dereferencing it? but why

#

that's used as a guard clause to break out of the function but i don't get why

restive ether
#

nice profile picture dog

analog echo
#

hm this is IDAs decomp

hollow harbor
#

Can you make a tweak in

#

Swift?

exotic spire
#

Considering this JSON:

            "user1": {
                name = 'John',
                surname = 'Doe'
            }
            "user2": {
                name = 'Michael'
            }
        }

How would you retrieve the list of usernames in Python?

I need this output:

user1
user2
#

I tried this approach, but it just prints the whole list of data:

for user in user_data:
  print(user_data[user])
#

lemme try

untold river
#

there's ten ways to do anything in python

#

only one pythonic way thoufh

primal perch
#

the real python way would be importing a library

untold river
#

🚀

primal perch
#

fast 🚀 safe 🚀 maintainable 🚀

exotic spire
#

This worked, I had no idea this existed

untold river
exotic spire
#

Yeah I only needed the actual key, to replace the value I can do it other ways

vivid dew
#

d61f deez nuts

exotic spire
#

@grave sparrow wanna see me screw up code live

#

imagine having classes in january

untold river
#

you can upload to app store connect too

#

assuming 15.2+

exotic spire
vivid dew
#

d61f0000 is br x0

primal perch
#

brx0

vivid dew
#

no idea why that would appear as the first instruction of anything

#

trolley

primal perch
#
void trolling(void (*gaming)(void)) {
       gaming();
   }```
#

that

vivid dew
#

inlined

primal perch
#

you asked

analog echo
#

yep it's checking against br x0

vivid dew
#

me trolling tweak developers by putting in fake checks

analog echo
#

but why vm_region_recurse_64

primal perch
#

me hiding racial slurs in tweak binaries

#

theres one in settingswidgets at offset 0xb0??

#

do you need to write that like an essay

primal perch
#

hoes

analog echo
#

ugh

vivid dew
#

it would be really funny if apple allowed appstore apps to modify pages

primal perch
#

it would

#

theres no jit so yeah

vivid dew
#

everything would have custom encryption like on android

primal perch
#

ill just go buy an android and stop getting updates in 30 days

analog echo
#

and that function is called from __mod_init_func

vivid dew
primal perch
#

mod innit func

#

briish

vivid dew
primal perch
#

oi do you have a loicense for that bu'er knife there

vivid dew
#

i only have a porn license

primal perch
#

f#Q4fa

primal perch
#

IDA Pro 7.7 SP 1 Crack 2022 Full No Survey No Virus

#

dm for link

west raft
#

you so guys making code for tweaks whilst i’m out here doing blocks for the micro:bit

torn oriole
#

An arduino aimed at education more or less

rapid arrow
#

Hi, I have this problem. I run openvpn connect (iOS 14.7.1, u0), but not all traffic is routed over the VPN, this affects mainly Apple services (apns, iMessage). I figured out this is due to the ContentFilterExclusionList in the Info.plist of the NetworkExtension.framework (/S/L/Frameworks/NetworkExtension.framework). Would it be safe/even possible to just edit the plist and remove the entry, or would it be better to develop a theos tweak to hook the plist reading to not return the values (problem is I have no experience with theos and objc). Thanks for your help.

lime pivot
#

I believe this exclusion list has been super cut down in iOS 15 by the way, there were complaints about it being so broad

#
    0 => "/System/Library/Frameworks/NetworkExtension.framework/PlugIns/NEIKEv2Provider.appex"
    1 => "/usr/libexec/nesessionmanager"
    2 => "/usr/libexec/neagent"
    3 => "/usr/sbin/racoon"
    4 => "/usr/sbin/pppd"
    5 => "/System/Library/PreferencePanes/Network.prefPane/Contents/XPCServices/com.apple.preference.network.remoteservice.xpc/Contents/MacOS/com.apple.preference.network.remoteservice"
    6 => "/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/Helpers/SCHelper"
  ]```this is what I have on macOS 12.1
#

so if you want to cut it down, I'd recommend filtering it down to just those (#5 wouldn't exist on iOS, not sure what the equivalent would be)

rapid arrow
#

Yeah people complained about it on sur so Apple removed it in the later versions, there were a lot of news articles about it

#

Thanks btw I’ll look into it

ocean raptor
#

Updating cydia to use libapt-pkg6 is surprisingly difficult 😭 @restive ether @lime pivot

ocean raptor
#

Cydia uses like every single deprecated method

#

But deprecated to the point of removal

#

Not just compiler time warning

untold river
#

thanks person with manage messages perms

#

idk im being non-specific by default

primal perch
restive ether
indigo peak
merry glade
#

gm

ocean raptor
#

😭

ocean raptor
ocean raptor
#

BoomerInstaller.app moment

rapid arrow
#

so I experimented with the NetworkExtension framework, but it's not behaving as I expected, I removed the exclusionlist entries, but nothing changed, so I decided to add another app there, I put in the bundle id of the Speedtest app (com.ookla.speedtest) and expected it to show my original ip and not the vpns, but it was still being routed thru the vpn. I did a ldrestart and launchctl reboot userspace. could it be that I need a full reboot (which will unjailbreak) or is it more likely that I'm just hacking at the wrong file?

vivid dew
restive ether
#

my dad is in jail

celest quiver
rapid arrow
#

i might be approaching this wrong, this is a statement from some vpn company from when the problem was in big sur, the routing issue is probably not related to the content filter exclusion list as a vpn is not like a firewall/blocker/something

karmic dirge
#

can I "simulate" collecting daily tasks in a mobile game via requests from my PC?
example: collect hourly coins in Soccer Stars via API request from PC

warped hawk
#

where is actual exploit development discussed? are there any open forums where people collaboratively develop jailbreak exploits?

ocean raptor
#

hackdifferent

#

but most vulnerabilities used in jailbreaks are found individually

warped hawk
#

@ocean raptor thanks

faint timber
ocean raptor
#

@faint timber did you ever get to test ldid with that one commit reverted on your A15?

faint timber
#

@ocean raptor I can now I just charged all my devices if you want me to test on all of them lol

ocean raptor
#

Yes please

#

Or you can just checkout the fix-15.1 branch

faint timber
#

none of my devices have ever touched 15.1 tho

#

thats no the problem I've been having

ocean raptor
#

I know

#

I named it that cause I reverted the patch I did for 15.1 which according to git bisect is what caused the issue

faint timber
#

that if sha1 line broke passwordless somehow?

ocean raptor
#

Technically it should be called fix-authority but I'm lazy

ocean raptor
#

On M1

#

Both worked

faint timber
#

iPod 5: 7.1.1
5s: 7.1.2
iPhone 6s: 14.8
iPhone X: 14.5.1
iPhone 13 Pro: 15.0

#

are these fine for testing?

ocean raptor
#

Yep

#

Perfect

#

What hashes does iOS actually support? Just sha256 and sha1? Or do they also support sha512 etc

grim sparrow
restive ether
#

more like Crypto Cringe am i right

ocean raptor
grim sparrow
#

see

#

the thing is

#

to use sha1

#

you have to accept a warning will forever be in your code

#

as its like

#

thats not allowed

restive ether
#

SHA-1 more like mega cringe ha!

grim sparrow
#

its even marked as part of insecure

faint timber
#

@ocean raptor

#

passwordless no work

ocean raptor
#

Ummm

faint timber
#

my p12 doesn't have a password

ocean raptor
#

Is this the artifacts?

faint timber
#

yes

ocean raptor
#

M1? x86?

faint timber
#

x86_64

#

I'm on a ryzentosh

woeful scaffold
faint timber
#

the literal package id...

#

eg:

#

net.angelxwind.appsyncunified

woeful scaffold
#

I meant how is the function in the answer reading the packageid

faint timber
#

its user input

#

-I means info not install

#

-i is install

#

and install would be a file path to the deb

#

-I info is for the package id already installed

woeful scaffold
#

Really all I want to know is just how to run commands with obj-c

#

because no answer is direct

#

it's either in swift or just says "use x header"

faint timber
#

nstask is correct but objective c is a boomer language

woeful scaffold
#

Go ahead then, explain how to hook swift

faint timber
#

orion

woeful scaffold
#

those bastards lied to me

faint timber
#

oh

#

yah idk

#

its probably pinned tho

ocean raptor
faint timber
ocean raptor
#

So it fixed the issue that you opened the issue for

#

But it GH actions' x86_64 macOS build is not working correctly

faint timber
#

it still can't validate the codesignature when I install it tho

ocean raptor
#

Oh...

#

Does codesign -dvvv show the authority?

faint timber
#

that was the original problem too

#

also it doesn't install on my X either

#

not just an iOS 15 issue

ocean raptor
#

Ok, so the authority is getting set now

#

But it still doesn't work?

faint timber
#

yep

#

codesign still works with the same app

ocean raptor
#

Would you be able to run a git bisect for me?

faint timber
#

maybe I'm using ldid wrong for valid codesigning?

#

tried these two formats

ocean raptor
#

Try just ldid -Kkey.p12 -Sents.plist whatever.app

ocean raptor
faint timber
#

still failed lol

tepid olive
#

???

#

You’re trying to run commands

faint timber
#

lmfao

#

braindead moment

ocean raptor
# faint timber

@tepid olive what's the proper way to legit sign an app with ldid?

tepid olive
#

bending down and praying

ocean raptor
#

True

ocean raptor
grim sparrow
#

@snow python

snow python
#

Lmao

primal perch
#

ayoo kermit getting laid

grim sparrow
indigo peak
#

🤞 🤞

tepid olive
primal perch
primal perch
hardy glen
#

this is pretty informative

primal perch
#

yes

weary heath
hardy glen
#

N check the requests being sent

#

Then just make a python script or use httpie to send the request

weary heath
#

And as long as there's no token that's generated for each request by the app

hardy glen
#

Unless they change their auth key lmao

#

Yea

#

Yup mitmproxy gives you the option to export to curl

weary heath
#

User-Agent: python3.9 tr

hardy glen
#

Its handy asf

#

I still haven’t finished mine fr

#

I am in calculus 2 and we are reviewing on calc 1 since we are going to be using everything we learned in calc 1

#

It sucks

karmic dirge
hardy glen
#

Uh idek what year, i am in community college rn finishing general ed so i can transfer to a another college. I am 3rd year but i barely took classes the 1st year since i was working full time

#

No i am completing my general ed before going to a 4 year lmao

#

Saving money

#

Its the smarter way, alot of people that were way smarter than me in HS ended up doing that, you would think they went straight to a ivy league or a good college or something

tepid olive
#

@grave sparrow

#

last

#

last

primal perch
tepid olive
#

im still last

primal perch
#

just like 99% of us

tepid olive
#

@grave sparrow

#

give me zefram

hardy glen
#

Exactly, idek what college i wanna go to. Right now i am completing all required courses for UC schools

#

Since i live in cali

primal perch
#

hell even if i did have 100 grand i wouldn’t go an ivy league

hardy glen
#

Yes

tepid olive
#

r word

#

im in quebec

hardy glen
#

Starting my lemonade stand

primal perch
tepid olive
#

n

#

erd

#

i forgot to finish my word mb

indigo peak
#

dont you live somewhere on the east coast

#

like fucking vermont or something

restive ether
#

your mom and i got a summer home in vermont

vivid dew
lime pivot
#

lmaooo

lime pivot
#

I mean, in Australia a CS degree is like $35k

#

so if you gave me 100k for that you’re crazy but I’ll take it as a gift for my startup 🙃

rain falcon
#

nfr

indigo peak
#

idk man

#

i dont think anyone lives in vermont

#

tbh

glacial matrix
indigo peak
#

I don’t wanna go all the way to Argentina, europe smells bad

misty cradle
#

americans.

indigo peak
#

American geography moment

#

Okay I’m not that dumb, I know that Argentina is in Asia

#

Not Europe

#

🙄

misty cradle
#

argentina

#

asia.

indigo peak
misty cradle
#

dumbass fiore.

#

didn't expect anything different though.

indigo peak
#

ok but fr though

#

I’m not that dumb

#

It’s in Antarctic

#

See the A’s match up

#

So it’s the capitol

#

And since it’s freezing there, no one wants to go to school there

#

That’s why tuition is free

#

Obviously

misty cradle
#

shut the fuck up.

indigo peak
ocean raptor
#

who wants to jailbreak their iOS 12 device with chimera 1.5.x for me?

indigo peak
#

bro I have a 5s but idk the password on it

#

it’s a long story

ocean raptor
#

then do a icloud bypass TrollFront

indigo peak
#

Checkra1n doesn’t work on a7 Linux

#

Because devs are shit

lime pivot
glacial matrix
glacial matrix
lime pivot
#

on principle I just don't want them to have it, even though it is my real family on there not my friends

indigo peak
lime pivot
restive ether
restive ether
#

sucks to suck

lime pivot
#

I don't know how they even can

#

what if I travel for a month, will spotify yell at me that I don't live at my home address any more

#

well "have to provide" --> if you sign up fresh for family plan or make any changes to an existing family plan

restive ether
#

probably would

lime pivot
#

dad ended up making a 2nd spotify login because idfk how, and I can't even change his email on the family plan cause I have to give address first

#

I prolly should have showed him songshift now I think of it, oops

restive ether
#

i haven’t gotten song shift to work properly since apple changed their API

#

what a shame

ocean raptor
#

I have a family plan

#

they probably have my address

ocean raptor
vivid dew
#

doesn't work on windows

ocean raptor
#

thanks guys, very helpful

weary heath
#

When you join the family you just have to provide the address, don’t need to be there at that time

#

Unless they changed that since

ocean raptor
sour halo
#

Ok so what do you want me to do with this

ocean raptor
#

sudo ./ldrestart

glacial matrix
#

Or su -c ./ldrestart?

ocean raptor
#

or that, yeah

weary heath
#

Or su -c sudo ./ldrestart

tepid olive
sour halo
#

Like real ldrestard

ocean raptor
#

it will userspace reboot, but if that fails than it will ldrestart

#

ldrestart -luv 👀 @restive ether

#

@grim sparrow how do you feel about adding options to ldrestart to

  1. skip userspace reboot
  2. print the error message from reboot3() (fprintf(stderr, "Warning: userspace reboot failed: %s\n", xpc_strerror(userspaceError)))
  3. don't ldrestart if userspace fails
snow python
vivid dew
faint timber
snow python
#

ah yes version f365fe, a good vintage

hardy glen
#

If i found a vulnerability in a service’s network api that allows me to change crucial information about my profile that should only be changed by an admin. What should i do

#

Should i report it, or just keep my mouth shut lmao

indigo peak
#

chariz 😄

untold river
#

pickax 😁

glacial matrix
ocean raptor
#

but we still need a way to detect if userspace reboot is supported

#

It was also brought to my attention that checking the return of reboot3() will not work as a gauge for whether userspace reboots work. For example, on versions of Odyssey before 1.3.0, reboot3() will work but jailbreakd will not persist, losing the jailbreak. This will also not work on Checkra1n, where a userspace reboot will appear to work fine but actually cause issues.

lime pivot
#

is the answer possibly that loaderd doesn't survive the restart? considering it lives in the dmg, which I have a feeling could become unmounted due to the restart

#

loaderd or payload, can't remember what the process name is now

restive ether
lime pivot
#

🥰

primal perch
#

innit

restive ether
#

so you can have like 60 instances if you try hard enough

lime pivot
#

oops

#

has, uh

primal perch
#

release a semi untether that doesn’t ruin ios core services challenge

#

(impossible)

lime pivot
#

has someone actually reported this to the checkrain bugs repo

restive ether
#

probably not i don’t think anyones noticed because they take up such a minimal amount of memory no one would notice it unless they were looking real hard

lime pivot
#

sounds like at least you know and should have reported it 😬

restive ether
#

someone showed me it, i’ve never used a checkm8 based jailbreak before i assumed they would’ve reported it

lime pivot
#

aha fair

#

just would have been nice to fix, like, long ago, hah

#

considering that code has only changed minimally since initial release

restive ether
#

judging by my quick issue searching it doesn’t look like they did and i’m forgetting who showed me it

#

you can probably easily check to confirm it’s still an issue and someone hasn’t accidentally fixed it, but i doubt there’s been a new release since i last heard about the issue

lime pivot
#

only time that code has changed as far as I remember is because some iOS release (14? a point release? idk) broke it very subtly

#

so either we fixed it by luck then, or it's still broken, I guess

primal perch
#

14 brought in the sep so they had to work around that

#

for a7-a10 it wasn’t too big of an issue

lime pivot
#

not talking about that

#

it was specifically that dmg mount broke

primal perch
#

o

restive ether
#

ah i found who showed me

#

it was nick

#

very nice

#

it seems like a rather inconsistent issue though

lime pivot
#

lmao

#

oh well

restive ether
#

yeah i just read that

#

better late than never i suppose

#

i hope someone can reproduce it at a minimum and it’s not nick being bored and breaking it somehow like he usually does

lime pivot
#

heh, well it’s an edge case for sure but still one that should be fixed

ocean raptor
#

Not an edge case, it happens every single time I userspace reboot

primal perch
#

anyone have any tricks to like

#

do stuff

crimson plover
#

I exported a React Native project into a payload folder, sent to zip, changed the zip file type to .ipa. I'm getting this error when I try installing the .ipa to a jailbroken device. Anyone know how to fix this?

indigo peak
#

maaaannnnn

#

fuck react native

indigo peak
primal perch
#

wut

crimson plover
#

Is Theos better? For app development

primal perch
#

my brain cells

primal perch
#

make do

#

repeat

crimson plover
#

Is there a way to use react native at all for this? Because I have a strong web dev background so react native is much easier to use than theos

primal perch
#

yes

indigo peak
# primal perch wut

Just when you don’t do something, don’t do that, but since you wanna do something, don’t not do the not-ing

primal perch
#

import react frameworks

primal perch
#

@crimson plover you’ll want to setup theos via the guide

#

then make a new app project

#

then add the react frameworks

indigo peak
primal perch
#

and then you can build it however you would in xcode

indigo peak
primal perch
#

i mean it’s a public sdk

#

so

indigo peak
#

So is it just TWEAKNAME_FRAMEWORKS

#

and what would the name be

#

react-native

#

?

primal perch
#

you have to add them manually i think

#

an then do that

#

yea whatever the name is

indigo peak
#

Idk the name, was asking if you knew it

primal perch
#

no

crimson plover
#

I have theos installed already. On win 10

primal perch
#

i don’t use shit frameworks

indigo peak
crimson plover
#

wsl linux

indigo peak
#

I swear by the time I finish tweaking discord, they’re gonna switch to a native app

#

professional developer

#

sexy theme 100/10

crimson plover
#

Do you guys think it's smart to program an ios app on visual code using theos?

indigo peak
#

that’s what I do

crimson plover
#

Without xcode

indigo peak
#

wsl Linux theos and use vscode

crimson plover
#

Sweet that's my setup

#

I have a lot of confusion with theos tho

high citrus
indigo peak
#

It’s not that hard

crimson plover
#

It's just cuz I've never used it

indigo peak
#

@lime pivot react native theos template wen?

#

fair enough

#

It’s pretty straightforward

#

I think

crimson plover
#

I tested exporting the template of swift_app (option 4) using make. Works great

#

But

#

I have no idea where to start with my code 😂

#

I see the table thing they have going

indigo peak
#

start your code in one of the .swift files

#

Duh

#

🗿

primal perch
crimson plover
#

Ik ik

primal perch
#

git pull

indigo peak
#

I want to make a theos template

#

And then I get a contribute on the repo

#

???

#

And then I get advanced dev

#

profit.

restive ether
indigo peak
#

If I get advanced dev for it

primal perch
#

yea dawg

#

you will

indigo peak
#

fo sho

crimson plover
#

What's the easiest way to install libs to a theos project?

#

Can you do it from the command line?

#

Or do you have to install from git and place in a lib folder?

primal perch
#

most people add it to $THEOS/lib and then just add a line in male file

#

makefile

#

or just add a lib or framework folder to project root and add -L./lib to ldflags

indigo peak
#

It’s how iOS caches your emales

ocean raptor
indigo peak
primal perch
#

same

ocean raptor
primal perch
#

lmao true tho

ocean raptor
primal perch
#

every linux user be like

crimson plover
#

@primal perch Okay cool. First option sounds the easiest. So I'd add a line like this: 'demo2_FRAMEWORKS = UIKit CoreGraphics', but where would I reference the library file location?

#

To the makefile ^

primal perch
#

tweak_LDFLAGS = -L./liblocation

#

or something else for frameworks i haven’t used clang in a while

woeful scaffold
crimson plover
#

I'm trying to export a theos project using the SwiftUI framework, but every time I open the app on a jailbroken device, it crashes instantly.

indigo peak
#

Do you have a crash reporter installed?

#

[[cr4shed]]

faint lionBOT
#
Cr4shed

A modern crash reporter for iOS

Author

Muirey03

Version

4.2.2

Price

Free

Repo
Bundle ID

com.muirey03.cr4shed

crimson plover
#

Let me install it

#

It's ios 13.3.1

#

iphone 7

#

As I suspected, it was from trying to load the SwiftUI framework

#

Does anyone know where the sourcecode is for SwiftUI?

#

This is the log

ocean raptor
woeful scaffold
#

what am I forgetting

crimson plover
#

@grave sparrow I created a new swift app and only have a view with Text("Hello World"). I'm still getting the same error. Also, I have support in the make file for ios 7.0-14.5

#

The default for new projects is 7.0 so I just kept it as is

#

And no, it's as basic as possible

#

Where is armv7?

#

So change

#

TARGET = iphone:clang:latest:7.0

#

to

#

TARGET = iphone:clang:latest:11.0

primal perch
#

no keep armv7

#

what about the 2 people using iphone 5

crimson plover
#

Lol

#

I changed to 11.0 and compiled

#

Same error w/ the symbol

#

I installed on an iphone 8 with ios 13.6.1 and same error

#

I am literally only trying to make SwiftUI work on a jailbroken app. Idk why this is so difficult. Thus why I wanted to code this app in react

primal perch
#

ghost blah blah blah

crimson plover
#

I only have SDK 14.5 installed

#

Could that have something to do with it?

primal perch
#

it should’ve thrown a compile time warning if it was 14 only

#

and asked you to wrap it in @available

crimson plover
#

Note that I am doing this on linux

primal perch
#

no wonder

#

/s

crimson plover
#

It doesn't compile the same as xcode

#

I may need to

#

lmao I feel like a noob with theos. I appreciate your efforts capt

#

I may need to reverse engineer an IPA

#

You may be able to help me read assembly

ocean raptor
#

@grave sparrow can zefram hook swift?

#

cool

#

zefram is for macOS right?

#

SIP needs to be disabled, I assume

restive ether
indigo peak
#

fr

primal perch
indigo peak
#

parker-stephens 🙏

#

no way

#

capt face reveal

tepid olive
#

it’s called Process now

#

no

#

no he won’t

indigo peak
#

ok add me

tepid olive
#

there’s enough people

indigo peak
#

im not a person

#

im an italian

#

i dont think he needs anymore context, right

#

[image]
your mom thinks it will be a good idea to add me to the gc

crimson plover
#

@tepid olive Using theos, is there a way to have swiftUI applications on ios 13?

tepid olive
#

Yes

misty cradle
#

shutup capt

#

i am 18 now

#

i am mature now.

#

@wild hatch

#

?

restive ether
#

joe

indigo peak
#

too much work

crimson plover
#

Is there any reference code for doing that?

misty cradle
indigo peak
#

if i was in le group i would

#

but im not

misty cradle
#

L

#

@grave sparrow add me into group.

#

in a group everyone can add

crimson plover
#

Oooof

misty cradle
#

scammer 😔

#

@balmy mantle

#

.

#

which slurs do i call him to add me

#

he not even asian.

indigo peak
#

ill call him italian slurs

misty cradle
#

@grave sparrow what is the name of the group chat called

grim sparrow
#

@misty cradle L

misty cradle
#

ok everyone agree please

#

thank you

#

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

grim sparrow
#

buy me a new macbook

#

and I'll add you

misty cradle
#

i am broke.

#

i have less than 36 euro on my bank account

#

😔

grim sparrow
#

just make akara 2

misty cradle
#

these mfs are broke @grim sparrow

#

we need new hype

#

when ios 15 jb

grim sparrow
#

omw to release

indigo peak
#

thakn you 🙏

misty cradle
#

@grave sparrow how many have agreed yet??????????????

#

read.

restive ether
#

there was a tweet in response to tanner by an apple engineer lemme find it

ocean raptor
misty cradle
#

yeah he is

ocean raptor
#

Then he is Asian

restive ether
#

one would not typically call that asian

misty cradle
#

^

tepid olive
#

working on it

misty cradle
#

ok

ocean raptor
#

There's a whole thread, but that's the important part

#

Basically injecting into every process stops the closures from being used

rapid arrow
#

Hi, I'm really sorry that I'm bothering you again, but I'm really confused by this. To recap the issue:

iOS does not tunnel all traffic through NE Packet Tunnel Provider VPNs (I don't know how it is with native ipsec). A lot of Apple services seem to be exempt ( I noticed APNS, iMessage and Facetime mainly) This is also mentioned on the OpenVPN (app uses ne packet tunnel provider, I checked that) website: Apple services such as Push Notifications and FaceTime never route through a VPN tunnel, per Apple policy..

  • I went and found that there used to be an issue in Big Sur, regarding firewalls not blocking certain Apple services. It was an entry in the Info.plist of the NE framework containing a list of executables/bundle IDs etc. called ContentFIlterExclusionList. Editing it in macOS supposedly fixed the issue and it was later removed altogether in Monterey due to public backlash (probably) - https://tinyapps.org/blog/202010210700_whose_computer_is_it.html

  • As per suggestion from this Discord I tried editing the plist and removing the entries. This however caused no change even after a ldrestart or userspace reboot. I also tried adding in a bundle ID of another app to test whether it would get routed outside the VPN but again, nothing. I even tried a full reboot and rejailbreak (at that point I was on a different device and just adding the new bundle, not removing the og ones, but still, nothing)

  • I read some more and got confused whether the ContentFilterExclusionList affected only like content blockers/firewalls or also VPNs and got some conflicting information, but it does seem it should also affect VPNs

#
  • After this confusion I went and examined other frameworks (running strings on the executable) and plists related to networking, but couldn't find any trace of a similar list. Besides, NetworkExtension is the framework related to the VPN stuff, it should be there. It also doesn't seem to be enforced on the app side (nothing in strings on OpenVPN binaries, or Passepartout (oss openvpn reimplementation for ios/macos) code on github)

  • Checking the route table also yielded nothing, no strange routes everything seemed to be set to go thru the utun device when VPN was connected

  • Another interesting thing is that the ExclusionList while removed in Monterey is still present in iOS 15

  • To add insult to injury when wireshark sniffing the traffic from my iPhone (14.7.1, u0), all sorts of crap was running outside the VPN, well mainly APNS and I was trying iMessage so also that. But when trying on iPad (12.5something last supported, u0) there wasn't a single TCP packet that didn't go thru the VPN even though the NE plist looked the same

So my questions at this point are:

  • Am I looking in the wrong place? Cause I really have no idea where else it should be located and this seems pretty obvious.
  • Is there something I have to do to the framework to make the changes visible? Like signing it or reloading it in some special way or I don't know.
  • Should I approach fixing it by force routing the 17.0.0.0 subnet for example to the utun interface (that's where APNS is, you can read about the IPs and ports for different Apple services on their website). This seems like a stupid idea

Many thanks If you find some time to read this and answer.

indigo peak
#


iOS

naive kraken
#

I'm not sure what dylib you're looking at but the solution you're describing is already a thing minus the dlclose because it caused some issues iirc (check substrate changelog). SubstrateLoader.dylib does the deciding in what to load (written in barebones C for extra performance), tweaks then link against libsubstrate which is the dylib the handles the hooking. SubstrateInserter.dylib also exists but I'm not totally sure what that does.

restive ether
#

i don’t think substrate ever addressed those kinds of issues

#

substitute / libhooker to some degree did

#

but not fully

naive kraken
#

I have no idea about dyld3 closures but Substrate, substitute and libhooker all have a dylib that injects system wide but depends on nothing and I think for Substrate and substitute at least they're written in pure C. I think that guy on twitter is implying that a single non apple dylib injecting into a process is destroying dyld3, but not sure.

#

I think a possible solution could be to handle all tweak injection from a separate process and not by a dylib that injects, but then again I have no actual idea how the injection is working in the first place and whether something like this would even be possible (like instead of injecting SubstrateLoader, whatever injects that would parse the filter plists by itself and inject the matching tweaks instead).

#

fair point, that's definitely an issue

vivid dew
#

tldr

lime pivot
tepid olive
#

some people do it all the time

#

there will always be someone on r/jailbreak that does a really weird thing for no reason

restive ether
#

some might still be using ldrestart but at least with procursus that’s going to change so

lime pivot
#

yeah, but it’s still very infrequently used

restive ether
#

oh yeah you won’t end up with 60 mounted dmgs like nick did

#

but you’ll have a handful probably if your uptime is more than a few weeks

lime pivot
#

yep

#

so should be fixed for sure

tepid olive
#

wen eta capt inject

rapid arrow
# rapid arrow - After this confusion I went and examined other frameworks (running strings on ...

I just found out there is something called the dyld cache where the frameworks and dylibs are stored all in one file and I managed to extract the binary of the framework along with some NE dylibs from there but as far as I understand there shouldn't also be another copy of the info.plist there, even though I did find occurences of the strings from the contentfilter in a strings dump of the entire dyld cache but I assume they are there for a different reason as there is stuff related to everything in that file, they weren't actually in the framework bin/dylib

tepid olive
#

and i don’t have it

#

can you fix that

#

i gave u my private repo access

#

now give me yours

vivid dew
#

i think apple hired pwn

#

got my first panic on unjailbroken 15.3 today

torn oriole
#

Epic panic time

sour halo
#

gaming

crimson plover
#

@evulate Every time I export my theos project, if I import SwiftUI anywhere, my app crashes on load with the error 'Symbol not found.' I've been at this all day. I even used UIKit's UIHostingController to avoid using SwiftUI's 'App'.

#

I'm told you are the swift professional. Is there anything you know that could point me in the right direction?

tepid olive
#

Anyone got an update to date/working Theos Windows install guide?

#

I thought that was old

crimson plover
#

theos.dev

tepid olive
#

thx

#

Already failed at step 2:
Package 'libtinfo5' has no installation candidate

vivid dew
#

gj

tepid olive
#

I'm probably being dumb lmao

crimson plover
#

@tepid olive Are you running it on WSL?

tepid olive
#

Yeah WSL 2

crimson plover
#

Install the dependencies one at a time.

vivid dew
#

make sure you ran apt update first

tepid olive
#

Will do, thanks so much 😄

restive ether
ocean raptor
#

Oh no

#

You're the guy who just forked EggNotch

restive ether
#

lmao

next wadi
#

Cope

vivid dew
#

hate to break it to you man but you're not getting that memory back

ocean raptor
#

On my Twitter search for substrate stuff I noticed people saying that dlclose is basically a noop in dyld

indigo peak
#

chariz 😄

vivid dew
#

now you know how jailbreak developers feel

primal perch
indigo peak
#

me when the when you at the when you you when the: chariz 😄

vivid dew
#

when they kalloc 8 bytes but every kalloc actually allocates a minimum of 16k

#

trollage

untold river
sour halo
#

who even owns packix

indigo peak
#

@lime pivot does

sour halo
#

Makes sense.

tepid olive
#

slavery was abolished 200 years ago btw

sour halo
#

does anyone know apple's exploit release policy

tepid olive
#

yes

#

they release every monday

vivid dew
primal perch
#

abraham lincoln signed the emancipation proclamation and racism was finally gone

restive ether
#

wholesome

lime pivot
#

good work guys we fixed racism

primal perch
#

do i get 64gb of ddr4 for 180$

#

3200cl16 ballistix 2x16 is on sale for 90$

tepid olive
primal perch
#

mac users explaining why 8gb is a good option in 2022

tepid olive
#

i have 8gb @primal perch

primal perch
#

rip

tepid olive
#

when are u buying me some ram

#

i’m gonna solder it myself

primal perch
#

have fun getting full size ddr4 dimms on that

tepid olive
#

i’m good at microsoldering

#

it’ll be fine

snow python
lime pivot
#

how can you even "close" code that very likely has memory references from other parts of the program

ocean raptor
#

if you are loading into anything you don't need than the optimizations that substrate is killing is being killed by your loader too

primal perch
ocean raptor
#

does having a daemon monitor for new processes not work?

surreal mountain
#

gm

lime pivot
#

that's the big issue SIMBL/now rebranded to MacForge for whatever reason had/still has

#

gm

primal perch
#

gm

surreal mountain
#

how are we

lime pivot
#

we are all good on this fine day

surreal mountain
#

thats good

lime pivot
#

so any hooks you needed early were just impossible

primal perch
#

hee hee hee haw

vivid dew
primal perch
#

what is the n for

silver rampart
#

would anyone happen to have a library/binary with a lot of swift metadata?

primal perch
#

wdym metadata

#

just like functions and shit

silver rampart
#

yeah

primal perch
#

trole

silver rampart
#

just an average swift bin

#

ty

wicked summit
#

gm

silver rampart
#

have been very slowly for a bit

#

i'm going off of the dsdump writeup (or trying, anyways, its missing details at some bits but its helpful)

#
  • just doing the usual fucking around in IDA & REing it without help bc that's a lot more enjoyable to do
silver rampart
#

cant wait to get to demangling

primal perch
#

objc keeping that information is an anomaly

#

every other compiled language strips 99% of the symbols

silver rampart
#

register all of your classnames + method selectors + properties at runtime

primal perch
#

thatd be cool

silver rampart
#

with procedurally generated strings

primal perch
#

although thats basically just C++ with extra steps / syntax

#

virtual functions can do a lot in cpp

silver rampart
#

does it point to selname in memory or something

primal perch
#

but the con of that is: using C++

silver rampart
#

i admittedly have almost no idea about what goes on at actual runtime vs what's static on disk

#

oo that's nice

primal perch
#

it does

#

but its also really good

silver rampart
#

^

primal perch
#

once a project gets beyond a couple thousand lines its time to pack it up into OOP for me

#

and theres no other compiled language that gives you control like C++ does

#

theres rust but its still immature and lame

#

yea but who wanna be doing that

#
struct View {
    Rect frame;
};

void View_init(View *view) {
    view->frame = RectMake(PointZero, SizeZero);
}```
#

fun

#

and theres no way to get inheritance with that

#

gotta implement it and vtables yourself

#

at that point just use C++

#

31 c0 90 c3

#

1f 20 03 d5

silver rampart
#

yeah seems (i think?) like this shouldn't be too hard to add in

#

i will read it when i give up on the less efficient approach

#

2 days off of work i have basically infinite time

#

c++ has use cases

#

writing a program in it bc it's the only language that properly suits what i need