#development

1 messages · Page 581 of 1

dreamy flame
#

where would i get started?

tacit spade
#

hire a samurai

dreamy flame
#

good to know

#

will do

#

thank you

untold river
primal perch
#

@restive ether if you warn me for useless pinging you, you’re gay

somber kettle
#

what ru doing with launchd

lime pivot
#

what are you linking that’s got the wrong version?

#

often it’s not safe to ignore because there are mach-o layout changes between releases

grim sparrow
#

It’s fine unless it crashes blush

lament mica
#

woe.

#

life is woe.

lime pivot
#

I believe nothing really changed between iOS 6 - 8

#

binaries built for 9 do work back to 6 or so if you pass a specific undocumented ldflag (Theos does this because Apple broke deploying to iOS 5-8)

grim sparrow
#

I know if you build without a certain flag binaries built in Xcode 13 don’t work on 12-

lime pivot
#

ugh not again

grim sparrow
#

Because of new dyld format

#

If you set minimum deployment target your fine

lime pivot
#

yeah the ABI breakage in the past few years has been coming on pretty heavy

grim sparrow
#

But you if you don’t a set a target you’ll need the flag I don’t remember right now

lime pivot
#

good for them that they've realised Swift isn't getting any faster so they should probably look to dyld, mach-o, and objc for optimisation opportunities, I suppose

grim sparrow
#

Swift may see an improvement in v6 when they introduce the new ownership changes

lime pivot
#

like how NSNumber is just straight up faster when the binary is built for … I think it's iOS 14+? can't remember now

grim sparrow
#
lime pivot
#

because they redid it to basically use isa as NSNumber's storage

#

whatever simplicity objc had, it's definitely gone now. all the core types do tricky things involving compiler magic to be faster

hardy glen
#

question, if i need to get text input from user if they want to specify a udid(the application is based on iproxy written in python). What would be the best way, using a gui library like pyqt, pysimplegui, tk or telling the user to specify udid as a env var

lime pivot
#

would a config file make more sense?

grim sparrow
#

Can’t wait for tweaks to start having to depend on libSwift6 for 15- support

untold river
#

^

lime pivot
#

sounds like this is a tool that you want always running, in which case you prolly just want a .conf or .yaml or whatever you can throw whatever in to have it be remembered

untold river
grim sparrow
hardy glen
grim sparrow
#

So cringe

hardy glen
#

ik

#

trying to make a mac tunnel or whatever tf it was called for all 3 platforms

vivid dew
#

what the fuck is an applet

ocean raptor
#

@lime pivot can you send me a payload build that has the sign checks patched out so I can upload a custom checkra1n.dmg 🥺

lime pivot
ocean raptor
#

😭

restive ether
#

that’s what they want you to think

indigo peak
#

does anyone know how the ios discord app handles requests with the token, like is there a method that automatically has the token as a header, or would i need to manually put the header in myself

ocean raptor
#

My C++ class prof in shambles after I use copilot for all my assignments

#

modify /etc/rc.shutdown /etc/rc.boot trol

#

don't nfr me

#

😭

indigo peak
#

@grave sparrow i looked in userdefaults and didnt see anything, and theres a lot of DCD*Managers

#

neither am i

#

see, im trying to make it so it works with and without that

#

this^

#

thank you

#

if you could that would be great

#

thanks so much

#

yeah no problem

#

take all the time you need

#

tyty

#

ive been tweaking discord for almost a year now

#

i feel your pain

#

i think i might have the most public discord tweaks

#

besides zoey

#

i was gonna make somethign like that

#

like the bd plugin

#

fr

#

just iterate through all the servers

#

ong

harsh needle
#

@ashen birch grats

ashen birch
harsh needle
#

cryptic surely will tell ya

faint timber
#

who's that shitdev?

harsh needle
#

LMFAOOO

#

he also works on VTIL

pearl sail
#

Yes?

indigo peak
#

anyone know if theres a discord api endpoint that is safe for users to get/post to that returns the color for a role from its id

unkempt ore
#

does anyone have an idea why suddenly oslog doesn't work anymore on my device? Package is installed from BigBoss as usual, but when running it in the terminal, I get a segmentation fault after a random amount of time (usually a few seconds).

pearl sail
#

[[oslog]]

faint lionBOT
#
oslog

os_log implementation for iOS 10

Author

Elias Limneos

Version

0.0.1-8

Price

Free

Repo
Bundle ID

net.limneos.oslog

restive ether
unkempt ore
#

@restive ether thanks, just tried that. while it definitely looks better with colors and such, the problem remains the same, still crashes with segmentation fault after a few seconds :/

restive ether
#

interesting maybe @indigo kraken would know more about that

unkempt ore
#

searching for "oslog" in this channel gives a few results where people had the same issue, but no solution was found. someone suggested it could be a iOS 14.5+ issue, which would fit, since this issue wasn't present when I was still on 14.4. huh.

any other easy way to get logs on a windows or linux machine, preferably over ssh?

unkempt ore
harsh needle
#

arent we all

indigo peak
#

@stuck wyvern this shouuld work, right? modules[622].publicModule.exports.ThemeColorMap.BACKGROUND_PRIMARY = ['#00bcd4', '#00bcd4']

stuck wyvern
#

afaik

#

I'm going to nap I'll look into it later

indigo peak
#

ah ok

#

bc it crashes

#

and im like

#

.-.

ocean raptor
#

@hardy glen can you add 4444 44 to iproxyapplet?

#

How do I do binary patching?

indigo peak
#

wdym

primal perch
#

patch

ocean raptor
#

basically I have this binary that calls a function to check if a file exists

#

I want to patch this function to return false if the file has a specific name

primal perch
#

can it be done at runtime idk what you’re using

ocean raptor
#

no

glacial matrix
#

you run sed with hex values, no?

primal perch
#

alright then you’ll need to load up ida / ghidra and find it and patch it

ocean raptor
primal perch
ocean raptor
#

of course payload only runs /etc/rc.d/* if you're bootstrapped

#

just my luck

hardy glen
restive ether
#

balls

hardy glen
ocean raptor
hardy glen
#

Lmao that works too but usually you would be able to achieve your goal with ida or ghidra

primal perch
#

yea there’s plenty of people who would be willing to help

#

capt jacks off to this stuff

untold river
#

asm

#

heard that summons capt

primal perch
#

yea

ocean raptor
#

@restive ether I made a thing

#

Wanna see it?

restive ether
ocean raptor
#

I haven't tested it KEKW

#

I don't have any devices supported by taurine...

restive ether
ocean raptor
restive ether
primal perch
#

taurine moment

lime pivot
lime pivot
#

good catch, was segfaulting for me too but I thought I must have done something dumb

ocean raptor
#

I should just write my own payload at this point woeis

silver rampart
#

Added user renaming to the wiki (temporarily, but, permanently once i re-figure out how to pull the changes to the php file from docker)

#

also, finally got back into the server floshed

#

turns out sshd ran out of memory

ocean raptor
lime pivot
#

that’s a thing that’s possible?

ocean raptor
#

care to confirm kirb? 👀

silver rampart
silver rampart
lime pivot
#

oh makes sense

lime pivot
silver rampart
# ocean raptor unless checkra1n is gonna open source soon??? 👀

https://github.com/hack-different/ipwndfu/issues/13 we're working on (basically) getting ipwndfu up to the same level of usefulness and i'd have to imagine it'll be done before they bother open sourcing checkra1n

GitHub

This would allow for executing a pongo environment Pongo loading today expects LLB to be valid. We could supposedly load LLB as well over DFU to remove the on-disk requirements.

ocean raptor
silver rampart
ocean raptor
stuck wyvern
primal perch
#

C++ foundation isnt real it cant hurt you

stuck wyvern
#

⁉️

pearl sail
gentle grove
primal perch
#

after using C++ and multithreading, probably like 20

gentle grove
#

I will have to try rust and mjktithreading

primal perch
#

mjktithreading

gentle grove
#

Yeah

nimble parcel
# primal perch

tbh the most cursed thing in this screenshot is the combination of c and cpp rng APIs

ocean raptor
primal perch
#

so i went with the cheap seeding option

gentle grove
primal perch
#

torrent seeders are based

ocean raptor
#

Block([=](){}); I don't even want to try and understand what that syntax is

silver rampart
ocean raptor
primal perch
#

C++ lambdas go brr

#

sometimes a little too brr

gentle grove
#

Java lambdas

silver rampart
primal perch
gentle grove
primal perch
#

torrenting and seeding is good

indigo peak
#

@stuck wyvern

    const ThemeColorMap = getModuleByIndex(622);
    const colorMap = {
        ...ThemeColorMap.exports.ThemeColorMap,
        BACKGROUND_PRIMARY: ['#000000', '#000000'],
    }
    ThemeColorMap.exports.ThemeColorMap = colorMap;
#

that should work

#

correct?

stuck wyvern
#

afaik

indigo peak
#

ok because it doesnt

stuck wyvern
indigo peak
#

just crashes on launch

swift fiber
#

lol

gentle grove
indigo peak
primal perch
#

me and your mom 16 years ago

gentle grove
#

were you alive 16 years ago

primal perch
#

yea

lime pivot
gentle grove
#

how old

swift fiber
indigo peak
#

15

primal perch
#

greater than 16

indigo peak
gentle grove
#

or what

primal perch
#

no im male so idk how i would

gentle grove
#

i mean

#

typo

lime pivot
#

with most people in common with the original team

ocean raptor
gentle grove
indigo peak
ocean raptor
lime pivot
#

yeah ik

gentle grove
ocean raptor
indigo peak
#

??????

nimble parcel
primal perch
#

lol

lime pivot
#

how does it relate to the original team I guess is the question

indigo peak
#

i wish checkra1n worked for a7 on linux

#

shit jailbreak.

primal perch
#

true bro

silver rampart
gentle grove
silver rampart
nimble parcel
gentle grove
#

why doesnt it

primal perch
#

apple

gentle grove
#

what dd they do

silver rampart
# silver rampart It accepts contributions/PRs from anyone, and the org members consist of the ori...

for example: https://github.com/hack-different/ipwndfu Aims to be a place to conglomerate all of the scattered and wack forks of ipwndfu that all add a single specific thing and are incompatible with one another

GitHub

Fork of axi0mX's open-source jailbreaking tool for many iOS devices for integration - GitHub - hack-different/ipwndfu: Fork of axi0mX's open-source jailbreaking tool for many iOS de...

#

which we've also ported to python3, made into a module, implemented poetry and linters, and overall improved the structure of a ton (and are still improving)

indigo peak
silver rampart
#

And as another example; I've moved my iBoot/srom loader to https://github.com/hack-different/iBoot-IDA , as I'd really like to accept PRs/contributions to it, and, patting myself on the back here, its the most proper/stable "Loader + Plugin" setup for iboot loading (and should work on binja/ghidra when i get off my ass and write the API wrappers for them)

GitHub

32/64 bit SecureROM/iBoot loader for IDA Pro. Also supports loading and decrypting encrypted .im4ps within IDA. - GitHub - hack-different/iBoot-IDA: 32/64 bit SecureROM/iBoot loader for IDA Pro. Al...

ocean raptor
primal perch
#

i have only shitposts to contribute

primal perch
#

speaking of

#

@silver rampart do you know if an all lowercase instructions/disassembly arm64 plugin for ida is feasible

silver rampart
#

what does "all lowercase arm64 plugin" consist of

primal perch
#

id love to have one but havent bothered to dive deep into the sdk

#

making instructions and register names lowercase rather than all caps

#

eg ldr x0, [x2, #0x20] instead of LDR X0, [X2, #0x20]

silver rampart
#

hmm

#

I actually am not sure, but I do know there's no patch/debug prevention in the program (even related to DRM, so especially not anywhere else)

primal perch
#

yeah i just figured if anyone here might know its you but all good

silver rampart
#

wouldn't imagine there's an api for that specifically bc the API is hardly documented and really shit, but if all else fails a patchfinder that just changes the cstrings or subtracts however many from the chars probably wouldn't be too hard

primal perch
#

ah

#

yeah i just rememberd that all the processors are dlls in procs and lo and behold

#

theres an arm64 one

#

if i modify the right function i can probably slot in the equivalent to string.lower()

#

though ideally it wouldnt screw over symbols but eh

silver rampart
#

on a related note: man binja is very nice

primal perch
#

binja

silver rampart
#

new full-C decompiler is wonderful, keeps up perfectly with IDA

primal perch
#

oh binary ninja

#

thought you mispelled ninja

silver rampart
#

am just lazy

primal perch
#

ah 75$ if i prove full time student status

#

thats pretty good

gentle grove
#

what is binanry ninja

silver rampart
#

disassembler

primal perch
#

i actually might get that so i dont need to be paranoid about cracked ida malware

#

but only when i enroll fulltime

#

cant drop 300 rn

silver rampart
primal perch
#

looks good too

silver rampart
#

ships windows+macOS (and M1 native) + linux bins

primal perch
#

eg doesnt look like ghidra

silver rampart
#

great UI, great team, great support

primal perch
silver rampart
#

yep!

primal perch
#

damn thats nice

#

looks way better than hopper

#

not that hopper is a bad product, i think its an indie dev too

silver rampart
#

compared to the absurd ida license i have that still only works on macOS sadCat

gentle grove
primal perch
#

mfw pay 4000$ and get one OS

#

rip

gentle grove
#

fr

#

at least it's a tangible object

silver rampart
primal perch
#

F

gentle grove
#

woe

silver rampart
#

for arm64 + x86 decomp

gentle grove
#

wth

primal perch
#

worth the price in quality for sure

#

if you actually need it

#

like professional reverse engineers

gentle grove
#

you could buy gura's membership for 45.8 years for that price

silver rampart
#

i will say its really awesome to just be able to pull out if another disasm isn't working up to par

gentle grove
#

what will gura sound like as an old lady

silver rampart
#

also u get to flex on people which is the most important bit

#

renewal prices are still pretty stupid though

gentle grove
#

true

primal perch
#

renewal for support ?

#

or updates

#

iirc the program is buy it for life

silver rampart
silver rampart
primal perch
#

but you get the version you paid for at the time of it forever right

silver rampart
#

yep

#

but if the IDA 7.7 release hadn't leaked for windows almost immediately, you guys would have no way to load iOS 15 kernelcaches/apps/libraries

primal perch
#

thanks r0 crew

#

yeah its not bad

#

binary ninja

#

for 75$ its pretty damn good value

silver rampart
#

also delivered instantly and didn't require me to spend a week sending over business documents and my ID + birth cerificate + etc

primal perch
#

lmao does hexrays really do that

#

thats pretty crazy

#

i can kind of see why though

primal perch
#

most powerful disassembly framework (probably) in existence

#

dont want to be giving that to the wrong people

#

even though theres piracy anyway

#

so i dont think it does a whole lot

silver rampart
# gentle grove wait what

you're way less likely to want to leak their crap and more likely to try and secure it better (in theory) if they know exactly who you are and can blacklist you from ever buying it again

gentle grove
#

true

primal perch
#

yea ture

gentle grove
#

but thats kinda invasive

#

imo

silver rampart
#

i dont think its unreasonable

#

birth cert was just bc my id has been expired for 4 years lol

#

but if you're not reversing embedded ROMs / low level crap i think from here i'd really reccomend binja over IDA for anyone looking to buy a disasm

#

python API is even so much better

primal perch
#

ooh 300$ for commercial with discount

#

i didnt kjnow that was on discount too

silver rampart
#

oh neat, didn't know that applied there

primal perch
#

plus then i can "sleep easy" profiting off of it

#

not like ive made thousands off ida

primal perch
#

looks like it

#

thats from the student form

gentle grove
primal perch
#

commercial

gentle grove
#

geico?

primal perch
#

oh

silver rampart
#

jabke from stabe famr

gentle grove
#

have you see nthe allstate social media challenge ad thing

#

its so funny

primal perch
#

jabke from stabe famr

#

idk why but that butchered spelling is 10x funnier

primal perch
#

no

gentle grove
#

one sec

silver rampart
#

pay for youtube premuim just to have someone get you to watch a mediocre allstate ad

#

:troll:

gentle grove
#

Why would you pay for YouTube premium

#

Plus that's the best ad ever

primal perch
#

oh so its buy once use forever with 1 year of updates

silver rampart
primal perch
#

not bad i guess

silver rampart
primal perch
#

real G

silver rampart
#

we originally planned to actually have everyone pool money to split the cost but i'm straight up too lazy to sort that out

#

same with spotify premuim

primal perch
silver rampart
#

@crystal owl ask again w/o the word jailbreak in it maybe

hardy glen
#

Normal:./applet.py Extra ports: ./applet.py localport:deviceport

pearl sail
#

was there a CVE in 15.2 someone was talking about releasing?

somber kettle
#

anyone here getting render lag on vscode for m1 and removing codesign helps the lag... it's strange how codesign is indirectly related to the renderrer process.. something else going on here

unkempt ore
vivid dew
#

you look a little like the guy from schitt's creek

unkempt ore
#

I guess I'll take that as a compliment? 😂

unkempt ore
#

so, has anyone ever accessed the camera via AVCaptureSession from Springboard? Because I can't get the session to run, everything is set up correctly but the session just won't start. a quick google search shows that apparently I'm not the only one with this problem. AuthorizationStatus for Springboard looks good though. Unfortunately, I also couldn't find any open source tweaks that use the camera from Springboard. Anyone?

ocean raptor
harsh needle
primal perch
warped hawk
#

looking at a function in hopper, i see if (CPU_FLAGS & E) { ... }, what does this mean?

#

ios arm64

primal perch
#

idk about any e flag

#

what does the disassembly look like

warped hawk
#
0000000000062a14         mov        x20, x3
0000000000062a18         ldr        x9, [x3, #0x8]
0000000000062a1c         cmp        x9, #0x0
0000000000062a20         cset       w10, eq
0000000000062a24         cmp        x8, x9
0000000000062a28         cset       w8, hi
0000000000062a2c         cmp        w10, w8
0000000000062a30         b.eq       loc_62a7c
primal perch
#

ah

#

z flag

#

basically checking if the most recent condition set the zero flag

warped hawk
#

cool ty

ocean raptor
#

@restive ether can you ban @compact swift and @primal perch ? they are trolling in #development smh

restive ether
#

wtf troll behavior

indigo peak
#

@grave sparrow or @grim sparrow do you know of a discord api endpoint to get a roles color from its id

#

That is not considered self botting

grim sparrow
#

You don’t

indigo peak
#

Like a normal user endpoint

grim sparrow
#

It’s sent in the initial payload over the web socket when you connect

indigo peak
#

bru

grim sparrow
#

There’s no http api

#

for users

indigo peak
#

bru

#

or as you would say

#

bruv

#

😐

#

This is sad

#

@grim sparrow there’s no endpoint for getting a guild object?

#

Like getting a guild from Id and then iterating through all of the roles

indigo peak
grim sparrow
#

On user api

#

This is why most discord tweaks needed react patches 😐

indigo peak
#

🥲

primal perch
#

analyze accord source code

#

and win

indigo peak
#

I tried

#

Didn’t see anything

#

or I’m just bad

#

Bc idk swift

grim sparrow
#

Zoey moment

stuck wyvern
#

I'm back on my bullshit

#

Debug Info:

Discord: 116.0 (30456)
Device: iPhone13,2
System: 15.3

#

on stock ios 🗿

grim sparrow
#

My current bs is trying to get Aemulo working on iPad 😐

stuck wyvern
#

sounds fun

grim sparrow
#

It is

#

I have software and memory dumps from a bunch of people

#

The fun part is figuring out what memory registers to patch

stuck wyvern
#

oh boy

grim sparrow
#

At least I can’t brick it

stuck wyvern
#

at least

grim sparrow
#

The memory is non-volatile but I can restore dumps

primal perch
#

on cock vore

#

@silver rampart me applying for binja full time with 5 creditstroll

pearl sail
#

broke

#

be like carl

#

get your money up

grim sparrow
#

Whatcha buy

primal perch
#

we got a cryptard

#

i

pearl sail
#

Saurik’s code in the block chain

tepid olive
#

boolForKey

indigo peak
#

@grim sparrow so after talking to evelyn, i need to make a connection with the gateway, but now im basically choking and dont know if im doing this right

#

can you tell me if im doing this somewhat right

#
void subscribe(long long guild) {
    NSURLSession* urlSession = [NSURLSession sessionWithConfiguration:[NSURLSessionConfiguration defaultSessionConfiguration]];
    NSURL *url = [NSURL URLWithString:@"wss://gateway.discord.gg"];
    NSURLSessionWebSocketTask *webSocketTask = [urlSession webSocketTaskWithURL:url];
    [webSocketTask resume];

    NSString *token = [NSUserDefaults getAuthenticationToken];

    NSDictionary *payload = @{
        @"op": @14,
        @"d": @{
            @"token": token,
            @"guild_id": guild,
            @"activities": true,
            @"threads": true,
        }
    };
}
indigo peak
#

D:

grim sparrow
#

Because it most likely won’t work

#

Because that’s not how the api works

#

Or at least

#

You need to wait until discord sends an op code

#

You are much better making an @stuck wyvern patch so you can avoid all of this

#

Making a second connection in the app is far from ideal

stuck wyvern
#

I've got their internal rest api module mapped

#

so you can make http requests with it

#

but it also adds the special discord headers that's needed to not get your account yeeted

indigo peak
#

ok

harsh needle
#

@grave sparrow is RELRO even a problem with overwriting the function pointers? cant you just mach_vm_protect the page of the GOT?

tepid olive
grim sparrow
#

Otherwise if my account would have been banned long ago

#

Having discord open on two devices constantly

tepid olive
grim sparrow
#

Yep

#

Which is what custom clients do

primal perch
#

gm

#

also welcome back @gaunt pewter

#

@indigo peak day 12 of waiting for gameseagull 2

somber kettle
#

i see auto gen names in IDA sub_xxx, can these names be resolved if i include the right library in IDA? or the only way to figure this out is to follow the code path?

glacial matrix
#

RBS does not work for you?

stuck wyvern
#

idk never had issues with RBS but I was bullied into not using it trol

glacial matrix
#

RBS doesn’t actually provide an ipc api

primal perch
somber kettle
grim sparrow
#

RBS is known to have performance and battery issues on certain setups

stuck wyvern
#

rip

primal perch
grim sparrow
#

@indigo peak

stuck wyvern
primal perch
#

if you suspect an app uses a library and its stripped then load it in with bindiff and you can compare and approve symbols based on how likely bindiff rates it

indigo peak
grim sparrow
#

Why doesn’t it

somber kettle
primal perch
#

no

#

ive used bindiff on armv6 raw binaries

grim sparrow
#

Me every time I wake up

primal perch
#

it works well

grim sparrow
#

Do you handle it properly in the server

glacial matrix
#

It’s actually surprising how you can have IPC for sandboxed apps without a jailbreak

grim sparrow
#

Cause it doesn’t sound like it trol

somber kettle
primal perch
grim sparrow
#

Ask your local crack dealer for ida pro

somber kettle
primal perch
#

aHR0cHM6Ly9zaWFza3kubmV0L0VBREFJdEhReDh0ZXlpZGhUdUNTWUVTdkVmUmR3Q1ltWXhFVkVSeW0zaGhVdHc=

somber kettle
#

whats that

primal perch
#

some random data i happened to post

somber kettle
#

dont tell me that's the lisence to pro

#

lol

glacial matrix
#

It’s not b64

grim sparrow
#

Lmao

primal perch
#

its totally not a url to pirated ida

#

probably not malware

grim sparrow
#

If that format seems foreign perhaps reverse engineering is not a good starting point

indigo peak
glacial matrix
#

It’s N64

primal perch
indigo peak
#

I’m not@home

#

Fuck

grim sparrow
#

The real cool kids run ida in a vm

primal perch
#

never do because too lazy

stuck wyvern
#

probably not

#

never heard of that

primal perch
#

pretty sure this ones clean

#

the 7.5 one ive been using for a year is likely as well

somber kettle
#

ugh, it's for win

grim sparrow
#

The 7.7 pro has one as far as I was told

somber kettle
#

i'm on osx

grim sparrow
#

Well

#

They all do

stuck wyvern
#

bruh

somber kettle
stuck wyvern
#

use cracked IDA pro to find the backdoor in the IDA pro crack

primal perch
#

maybe if i spam enough buzzwords ill get attention

#

looks like it worked

grim sparrow
primal perch
#

odds are the 7.5 i have is malware though . i mean if you can crack ida you can obscure some malware in it

#

windows defender aint gonna do shit

grim sparrow
#

You need Avast for that shit grimaceTrol

primal perch
#

if so they did it well though

#

havent noticed any weird shit or slowdown and im paranoid about that stuff

#

so they can enjoy my data

grim sparrow
#

I have 7.5 7.6 and 7.7

grim sparrow
primal perch
#

actually i have been running 7.5 in a sandbox and its pretty non invasive yet better than nothing

#

dont wanna deal with 60 fps vms just for ida

grim sparrow
lime pivot
tacit spade
#

FRICK

primal perch
#

trolley

somber kettle
#

@primal perch i guess the only way now would be to figure out classes of these subroutines, trace callsites

hardy glen
#

Even so i run ida in wine unless the malware can escape then im fucked fr

primal perch
#

definitely could

#

i just try to not be ocd about it

lime pivot
#

it's only an API translation layer not a total firewall

primal perch
#

and supposedly it generalizes to other ocd triggers too

#

allah

tepid olive
#

please dont post memes in this very very very serious channel

primal perch
#

is this geo snow

rugged yarrow
#

no

primal perch
#

f

tepid olive
#

where is geo rain

indigo peak
hardy glen
primal perch
#

you can be the first to document it

#

same with most ios components

#

easy resume builder

#

“documented ios components through static binary analysis”

restive ether
#

LEAN

azure sail
#

Anyone with experience on Silica?

primal perch
#

no

primal perch
#

mapping time

hardy glen
hardy glen
#

All you need to do is drop your packages into a folder. And run the script

azure sail
#

How does it look in a manager @hardy glen

primal perch
#

well as soon as i get off my ass and boot mac

#

so maybe in a week

hardy glen
restive ether
#

good repo

hardy glen
#

The index.html is your page and you can design it etc, place your packages in pool and run repo.sh. Change repo.sh to your settings

restive ether
#

that’s what all repos should be like

hardy glen
#

i run repo.sh in docker if you don’t have a debian based OS. But if you use wsl you are good to go

#

True

primal perch
#

true

#

unless youre apple

#

or windows

#

"yeah lets uh remove eveerything in 10 and redesign it"

hardy glen
#

@indigo peak asking @primal perch to give him the password to bird poop

indigo peak
#

fr

primal perch
#

lmao

untold river
#

(sponsored by github actions)

hardy glen
#

Except the script is magic fr

#

Yea i like manually running commands. Especially when i wake up and run sudo pacman -Syu knowing i am going to sleep like a baby

hardy glen
#

+10 respek

primal perch
#

is anyone not

#

truly a rip

gentle grove
#

I'm not

hardy glen
#

Best show ever ong. The new movie was eh

#

It was mid

primal perch
gentle grove
primal perch
ocean raptor
#

@indigo peak maybe John the ripper can crack it 🤷‍♂️

primal perch
#

yes

#

yes you are

lime pivot
somber kettle
#

is it possible to find all callsites of a sub__xxx routine in IDA?

ocean raptor
#

What header do you need?

#

I've got them all 🙃

#

oh

#

I'm not gonna help you there trol

somber kettle
#

isn't this how you search for codepaths

faint timber
somber kettle
#

is it safe to assume that sub_xxx routines are within the dylibs otool -L dumps?

#

just need to diff b/w the executable and the dylib and see which matches and resolve symbol names based on that?

#

(obviously ignoring the system dylibs)

faint timber
#

@somber kettle I was refering to proximity browser btw

signal sedge
#

skeleton army

primal perch
#

true

harsh needle
#

yeah i thought so

#

"hardening"

hardy glen
#

Idk about resolving sym names tho

unkempt ore
#

Is it possible that mediaserverd prevents injection? Because whenever I try to hook [FigCaptureClientSessionMonitor _updateClientStateCondition:newValue], the camera stops working (it's just black) and won't respond anymore... Any idea?

ocean raptor
grim sparrow
#

Wtf

#

@restive ether bruv what

ocean raptor
#

But fine

restive ether
#

i said to accept it also

#

🙏🏻🙏🏻

grim sparrow
#

Cameren why am I being filtered for piracy here

#

Literal racism

restive ether
#

the pluto gave us a key before havoc

#

huh

shut stag
#

Pluto has been around for like half a year now

#

Havoc one week

restive ether
#

your mom has been around a long time

grim sparrow
#

And it took them 30 minutes to setup

ocean raptor
faint lionBOT
#

Marked as a piracy word!

ocean raptor
#

It takes less then 10 minutes to setup

restive ether
#

i’m still waiting for the hyi keyring

shut stag
#

There are higher priorities right now but it will get done

grim sparrow
#

Hate speech

ocean raptor
shut stag
#

I would say it’s in the top 5

ocean raptor
shut stag
#

Sending out emails to people who used private relay on packix is our top priority

#

Adding PayPal is #2

restive ether
#

ball buddy

grim sparrow
#

Shouldn’t #2 of been done before release

shut stag
grim sparrow
#

Why

shut stag
#

the card processor needed to see us up and running to accept us

#

so we used stripe temporarily

grim sparrow
#

Interesting

#

Wen eta a repo powered by shopify

shut stag
#

once we switch over to this new one, they have easy paypal integration

restive ether
#

repo powered by cash transactions in the mail

ocean raptor
#

repo powered by apple pay cash, jlevin style

restive ether
ocean raptor
#

If I get a nfc tag, how do I write to it?

primal perch
indigo peak
#

[[aemulo]]

faint lionBOT
#
Aemulo

NFC Frickery

Author

Amy While

Version

1.1.2

Price

Free

Repo
Bundle ID

com.amywhile.aemulo

ocean raptor
#

ok, that's what i though

ocean raptor
indigo peak
#

trial version

ocean raptor
indigo peak
#

¯_(ツ)_/¯

#

The only difference is that the free version does not support Add to Wallet.

ocean raptor
indigo peak
#

so you can still write to tags with the trial version

#

good to know

ocean raptor
#

I want to support amy...
but on the other hand I don't want to unnecessarily spend money

indigo peak
#

just get it from my favorite repo

ocean raptor
#

HYI

indigo peak
#

yeah

#

you see

#

i wanted to support amy too

#

and i didnt want to spend the money i didnt have

#

so i went brrrrr

#

and i got it for free

#

:D

indigo peak
#

yeah?

#

im always trying to save other people money

misty cradle
#

can u tell me these expletives in dm

#

now im curious what expletive means

#

curse words?

#

true

#

new english word learned

indigo peak
#

ive never heard expeletive before

misty cradle
#

ratio for pirating

#
  • you're white
primal perch
#

idc that people pirate bird ooop

#

always pirate

gentle grove
wicked summit
#

gm

ocean raptor
#

serious question
you know how the LLVM developers are insane and are writing a libc in C++? Why havent they written a libobjc yet?

pearl sail
#

libobjc shall be written in Rust for efficiency and safety!

#

No Rust supremacy or rot

#

In fact rewrite libC and libc++ as well in rust

harsh needle
#

Is there a way to call a macos shortcut?

ocean raptor
#

Surprisingly, it's impossible to run a shell on a Pebble watch

#

cause they had to remove a bunch of syscalls and libc funcs to fit the size limit

harsh needle
ocean raptor
#

the LLVM linker is lld

harsh needle
#

well not by llvm, but by one of the developers

ocean raptor
#

oh I didn't know he was a LLVM dev KEKW

harsh needle
#

and yes i know that lld is the linker for it, but mold outperforms it by a ton so im wondering what the difference in both of those are

ocean raptor
#

Procursus users can now apt install ktool on both iOS and macOS

restive ether
#

link times go zoom

ocean raptor
restive ether
#

think so

ocean raptor
#

Are there any watchOS jailbreaks? @restive ether

#

Or anybody working on them?

pseudo pond
#

Anyone know the header for audio output?

ocean raptor
untold river
#

builds successfully outside proc but not inside proc

ocean raptor
#

Troll

pseudo pond
#

So when I go video live on a certain app while driving, I have my phone plugged into my radio via a lighting cable. But for some reason when I go live on the app (Yubo) my audio output switches to the phones speakers instead. Anyone know of a tweak that would let me switch the output back to my radio via lightning cable? I’m also maybe looking for the header that deals with audio output so maybe I can just make the tweak myself

untold river
#

oh you're looking for the header too

#

nvm

pseudo pond
#

Yeah

#

I can’t seem to find it

ocean raptor
#

Anyone want a watchOS binpack? 5.4M on disk (without ldid)

sour halo
#

wats that

ocean raptor
primal perch
#

yes i do so much

#

🙏

pearl sail
#

WatchOS jailbreaks are dead

ocean raptor
primal perch
ocean raptor
pearl sail
#

Oh that makes so much sense

#

Cameron single handly saved watchOS jailbreaking scene

primal perch
pearl sail
faint timber
lime pivot
#

I am a professional low level exploit

pearl sail
#

please exploit my low level iq friend @tepid olive

tepid olive
#

Oh

ocean raptor
#

👍
Thin (~8M) or thick (idk what size, but not much bigger)

#

The thin contains the bare minimum to bootstrap a system

#

The thick will have terminfo and more posix tools

tepid olive
#

separated

ocean raptor
restive ether
#

@grave sparrow fix snaputil

#

auto correct sucks

ocean raptor
#

It will be that plus, terminfo db, chgrp(1), env(1), groups(1), whoami(1), nl(1), paste(1), od(1), sort(1), touch(1), strings(1), tr(1)

restive ether
#

do this but in C

ocean raptor
#

🙏

restive ether
#

@ocean raptor there’s been a commit upstream idk if you wanna pull it

#

dub cat

#

also fix the renaming troll

restive ether
#

cause that breaks taurine

#

oh did we

#

dub cat

#

me either

ocean raptor
#

I should probably ask Hayden to transfer it to the org

#

but on the otherhand

restive ether
#

i just know something with the renaming is broke

ocean raptor
#

why bother

restive ether
#

maybe not so much broke, but it makes taurine mad and break so

ocean raptor
#

now I gotta figure out how to build the terminfo woeis

#

YO! thin is 3.2M on disk

restive ether
ocean raptor
#

why is du on macOS reporting different than du on FreeBSD uhh

restive ether
#

does apple uses its own version of du

#

with some random patches

ocean raptor
#

idk

ocean raptor
#
> du -shA binpack
8.1M    binpack
somber kettle
#

i made a custom lib.dylib and opening in Ghidra fails. It's a simple lib that just logs. can ghidra not disassemble anything related to libSystem?

hardy glen
#

This Channel Deals about the Self Improvement, Motivational stories and life hacks.
We read books and researching on Articles and share ideas with you. So that you can implement the ideas directly without going into the details of the book. We hear seminars and brig the essence to you.

We believe In the concept of "be Awesome, Live Awesome"
#M...

▶ Play video
weary heath
tepid olive
#

@grave sparrow you are looking quite submissive today

ocean raptor
#

trolling

tepid olive
#

is he not joking

ocean raptor
#

tbf he is 15

tepid olive
#

you just went ahead and shit on someone that was joking

#

hate this server

tepid olive
#

and you begged amy

#

fuckhead

ocean raptor
#

but she didn't give it to me so I just gave up

ocean raptor
tepid olive
#

you are all awful

ocean raptor
ocean raptor
#

amy, if you give me aemulo for free I'll transfer the QuickActions copyright to you, that seems fair, right? trol

tepid olive
ocean raptor
#

well I actually want to use aemulo

tepid olive
#

and he did too

#

why u shitting on him

#

need an answer rn

ocean raptor
tepid olive
#

I don’t care, why would you start critiquing someone’s development skills

#

That was totally uncalled for

peak quartz
#

is it possible to bypass a tweak that wont let other tweaks to load?

ocean raptor
#

simply hook MSHookFunction

tepid olive
#

ZZZZ<name>.dylib

peak quartz
tepid olive
#

Probably?

#

Try it

peak quartz
#

ok

#

thanks

tepid olive
#

np

ocean raptor
#

%hookf(void, MSHookFunction, void *symbol, void *hook, void **old)

tepid olive
#

nfr

ocean raptor
tepid olive
#

dumb question and im gonna get called names for it but how do i get started on making tweaks

peak quartz
tepid olive
#

HOW TO GET INTO TWEAK DEVELOPMENT
This has been asked countless times so it's time that there is a long message that explains this.
One of the first things you want to do is reach a "baseline" before you can even think about getting started.

What this means is that you need to be familiar with Object Oriented Programming and how to use Objective C.
uroboro was kind enough to create a guide that you can find here: https://uroboro.github.io/Learn-Objective-C-in-24-Days-Clone/
Additionally, you should also learn a little bit about how iOS works, learn some basic frameworks/stuff you will need to work with.
Stuff like how to use UIKit, Foundation, etc. Once you have a pretty good understanding of these, then you can proceed.

The next step is to actually start making tweaks. Install a tool called Theos for your appropriate device.
The installation wiki can be found here: https://github.com/theos/theos/wiki, please make sure to follow the appropriate platform instructions.
After that, you are ready to start making tweaks, please follow a tweak development guide. (Here's one if you're lazy: https://kodeycodesstuff.tech/guide)

tepid olive
#

thanks

#

since when has he contributed to pirating aemulo

ocean raptor
#

we stan bite your apple /s

tepid olive
#

and what is he begging to get the source code of

ocean raptor
tepid olive
#

lmao ok

peak quartz
tepid olive
ocean raptor
zenith hatch
#

gm

peak quartz
# tepid olive what’s the tweak

its a tweak for pokemon app (not cheating) that is basically injected with another tweak that is bypassing sideloading injection protection

tepid olive
#

@compact swift i’m pretty sure he’s asking for the source code as a joke..

peak quartz
ocean raptor
#

and you wouldn't?

tepid olive
#

well the archive was sent

ocean raptor
#

Now I'm tempted to crack it

pearl sail
#

Ara ara drama

#

Hello

pearl sail
#

Sorry too busy fighting the demons

indigo peak
#

Well first of all, I was given aemulo by Amy to beta test so I didn’t pirate it. Second of all, my tweak has been finished for months and I’ve been asking the owner for the source code of the paid better version as a joke. I said that i pirated aemulo and other people should too as a joke. So please next time know all the information before you try to make claims about me

#

And not for nothing, the tweak I’ve been asking the source code for and “trying to crack the password for” is literally a tweak that I own, and my own tweak does the exact same functionality, so I could honestly care less if I had the source

ocean raptor
#

I have all the facts right here, you are a dirty pirate with scurvy trol

#

you literally admitted to pirating trol

#

@ aaron, ban him

pearl sail
#

Tomato Headass gone?!?

indigo peak
#

The attached are screenshots of me doing 2 things: 1 - joking with the person who sent the birdpoop 7z and then them acknowledging the fact that I was joking, and then joking in return, and 2 - me talking about my aemulo status and then me praising the tweak

primal perch
#

hey that’s me

#

drama in dev frcoal

indigo peak
#

Well why can’t you be like every other dev in here and not give a shit. Literally you’re the only dev that’s EVER said anything. Literally ever. So I don’t understand why it’s such a big deal. If it’s such an important thing for you, you could dm me or the other developers involved. Like, if they thought it was an issue I’m pretty sure they would’ve came to me, instead of leaving it up to you who wasn’t involved at all in this

untold river
primal perch
#

true

#

it’s a cat

untold river
#

it's one asshole of a cat

primal perch
#

that was implicit when you said cat

untold river
#

true

primal perch
#

mine is a butt too usually

#

lately he been chill tho

ocean raptor
#
  • voice reveal
primal perch
#
  • sock reveal wtf
#

and carpet

untold river
#

carpet reveal???

ocean raptor
#
  • window reveal
untold river
#

why we forgetting about the hand reveal

primal perch
#

and cat reveal

ocean raptor
#

I hate rust devs

somber kettle
#

are there docs on memory layout of a running process on macos?

tardy narwhal
#

As usual, consult your google-fu in case of doubtpeepoPat

somber kettle
#

JLevin's ex seems old

#

oh wait there's a new book?

#

ghidra shows me offset next to the hex.

can i assume on macho execute, when running, the memory is laid as it's visually shown here? ex, at first address I find 0x55. second address 0x48..0x89?

somber kettle
#

i thought how ghidra visually shows has to do with alignment and not endiness

somber kettle
#

how many bytes are at each address? in Ghidra at each offset I see 1, or 2, 4 at maximum I see 4.

zenith hatch
#

im not sure why this doesnt work, could anyone please point me in the right direction?

primal perch
#

oh it’s swiftui

#

can’t help

zenith hatch
ocean raptor
#

I also threw defaults in there

somber kettle
#

is this always the case for all executables and dylibs too?

ocean raptor
native dune
#

thicc

grim sparrow
#

deez

#

trolling

#

cum

somber kettle
#

im trying to introspect a binary during runtime. I can inject using lldb with dlopen. how do I print the logs? the only thing I can think of is to forward the logging to a foreign function on my macOS or something. aka backend.

ocean raptor
#

it does not have awk column curl lz4 perl zip zsh or zstd

#

yes, otherwise you can't use any of the tools....

#

basically if it's not needed, it's not in the binpack

#

it has xz, bzip2 and gzip for compression

#

it doesn't have anything to download stuff

#

thick strap has tftp

ocean raptor
#

maybe not perl though....

#

(I can't get perl to compile Clueless )

#

Bro, of course I have tar already

#

Oh, that's just the diff between normal and thick

restive ether
#

ya got bash nerd

ocean raptor
#

toysh

restive ether
#

ohh

ocean raptor
#

which is bash compatible for scripts

restive ether
#

is toysh just a posix shell

#

oh

#

more like bash my head into a wall

ocean raptor
ocean raptor
restive ether
#

surely all 3 compression types aren’t necessary though?

ocean raptor
#

no

restive ether
#

who cares what they do honestly

ocean raptor
#

logs to syslog

restive ether
#

it wasn’t a very good base they worked off

ocean raptor
#

true

restive ether
#

oh cam

#

you gotta uhhh

#

fix oslog

#

on 14.5+

ocean raptor
#

yeah

#

apt

#

dpkg

#

the goal of binpack is to be as small as possible

restive ether
#

anything large that’s not necessary to fix something i guess?

ocean raptor
#

like gpg doesn't belong in binpack

#

Or gettext(libintl)