#development
1 messages · Page 581 of 1
hire a samurai
jingle
rich important people hired samurai. the poor people who could not afford to hire samurai did not hire samurai. All credit goes to Bill Wurtz
@restive ether if you warn me for useless pinging you, you’re gay
what ru doing with launchd
what are you linking that’s got the wrong version?
often it’s not safe to ignore because there are mach-o layout changes between releases
This is loser talk
It’s fine unless it crashes 
heheh, you say that but honestly it totally is in a few cases
I believe nothing really changed between iOS 6 - 8
binaries built for 9 do work back to 6 or so if you pass a specific undocumented ldflag (Theos does this because Apple broke deploying to iOS 5-8)
I know if you build without a certain flag binaries built in Xcode 13 don’t work on 12-
ugh not again
yeah the ABI breakage in the past few years has been coming on pretty heavy
But you if you don’t a set a target you’ll need the flag I don’t remember right now
good for them that they've realised Swift isn't getting any faster so they should probably look to dyld, mach-o, and objc for optimisation opportunities, I suppose
Swift may see an improvement in v6 when they introduce the new ownership changes
like how NSNumber is just straight up faster when the binary is built for … I think it's iOS 14+? can't remember now
Swift's high-level semantics try to relieve programmers from thinking about memory management in typical application code. In situations where predictable performance and runtime behavior are needed, though, the variability of ARC and Swift's optimizer have proven difficult for performance-oriented programmers to work with. The Swift Performance...
because they redid it to basically use isa as NSNumber's storage
whatever simplicity objc had, it's definitely gone now. all the core types do tricky things involving compiler magic to be faster
question, if i need to get text input from user if they want to specify a udid(the application is based on iproxy written in python). What would be the best way, using a gui library like pyqt, pysimplegui, tk or telling the user to specify udid as a env var
would a config file make more sense?
Can’t wait for tweaks to start having to depend on libSwift6 for 15- support
^
sounds like this is a tool that you want always running, in which case you prolly just want a .conf or .yaml or whatever you can throw whatever in to have it be remembered
you're going to save this udid eventually so if you cant bother with a dialog box then just make a config file
UDID = input(“enter your udid”)
save UDID to conf file
its supposed to be an applet
So cringe
what the fuck is an applet
@lime pivot can you send me a payload build that has the sign checks patched out so I can upload a custom checkra1n.dmg 🥺
it’s not really my code so I don’t feel it’s right for me to be making unofficial builds
😭
that’s what they want you to think
does anyone know how the ios discord app handles requests with the token, like is there a method that automatically has the token as a header, or would i need to manually put the header in myself
My C++ class prof in shambles after I use copilot for all my assignments
modify /etc/rc.shutdown /etc/rc.boot 
don't nfr me
😭
@grave sparrow i looked in userdefaults and didnt see anything, and theres a lot of DCD*Managers
neither am i

see, im trying to make it so it works with and without that
this^
thank you
if you could that would be great
thanks so much
yeah no problem
take all the time you need
tyty
ive been tweaking discord for almost a year now
i feel your pain
i think i might have the most public discord tweaks
besides zoey
i was gonna make somethign like that

like the bd plugin
fr
just iterate through all the servers
ong
who that
cryptic surely will tell ya
Yes?
anyone know if theres a discord api endpoint that is safe for users to get/post to that returns the color for a role from its id
does anyone have an idea why suddenly oslog doesn't work anymore on my device? Package is installed from BigBoss as usual, but when running it in the terminal, I get a segmentation fault after a random amount of time (usually a few seconds).
[[oslog]]
os_log implementation for iOS 10
i would try using this one https://github.com/dlevi309/oslog
@restive ether thanks, just tried that. while it definitely looks better with colors and such, the problem remains the same, still crashes with segmentation fault after a few seconds :/
interesting maybe @indigo kraken would know more about that
searching for "oslog" in this channel gives a few results where people had the same issue, but no solution was found. someone suggested it could be a iOS 14.5+ issue, which would fit, since this issue wasn't present when I was still on 14.4. huh.
any other easy way to get logs on a windows or linux machine, preferably over ssh?
idevicesyslog+usbmuxd2?
I figured it out, it's actually an issue with oslog. log_message->category is undefined from iOS 14.5 on, so I just removed it and now it works again! I created a fork with the fix here: https://github.com/NoisyFlake/oslog
arent we all
@stuck wyvern this shouuld work, right? modules[622].publicModule.exports.ThemeColorMap.BACKGROUND_PRIMARY = ['#00bcd4', '#00bcd4']
wdym
patch
basically I have this binary that calls a function to check if a file exists
I want to patch this function to return false if the file has a specific name
can it be done at runtime idk what you’re using
no
you run sed with hex values, no?
alright then you’ll need to load up ida / ghidra and find it and patch it
It's the checkra1n payload 

Bet i have an idea.
balls
You would do what shep said. Patch it through the disasm of your choice that supports patching. Or use a hex editor if you’re feeling raunchy
I went the lazy way and just didn't
Lmao that works too but usually you would be able to achieve your goal with ida or ghidra
yea there’s plenty of people who would be willing to help
capt jacks off to this stuff
yea
yea
I haven't tested it 
I don't have any devices supported by taurine...
yoooo cameron did swift code wtf
I've made PRs to taurine in the past...
taurine moment
I mean I guess that doesn’t otherwise exist
face reveal 😳
good catch, was segfaulting for me too but I thought I must have done something dumb
true
I should just write my own payload at this point 
Added user renaming to the wiki (temporarily, but, permanently once i re-figure out how to pull the changes to the php file from docker)
also, finally got back into the server 
turns out sshd ran out of memory

that’s a thing that’s possible?
unless checkra1n is gonna open source soon??? 👀
care to confirm kirb? 👀
like the entire server ran out of memory
oh makes sense
nope
https://github.com/hack-different/ipwndfu/issues/13 we're working on (basically) getting ipwndfu up to the same level of usefulness and i'd have to imagine it'll be done before they bother open sourcing checkra1n
contributions always appreciated! :)
I don't know python, or iOS booting process 
real ⁉️
⁉️
classic
How many STDs do you have
after using C++ and multithreading, probably like 20
I will have to try rust and mjktithreading
mjktithreading
Yeah
tbh the most cursed thing in this screenshot is the combination of c and cpp rng APIs
keep it on my clipboard to whenever the need arises
yea i just didnt feel like capturing a std::random_device nor making it every time bc its expensive
so i went with the cheap seeding option
wow seeding torrents? I thought you were better than this
torrent seeders are based
Block([=](){}); I don't even want to try and understand what that syntax is
https://cynder.me/checkra1n-source-leak.zip exclusive dont tell the chck ra1n or the pang you jail break
real (real) check checkrain the source the code source the
I seed linux ISOs all the time
Java lambdas
yo! how'd you get this?
thanks it works great
jail break
based minus the linux
so minux the entire thing
torrenting and seeding is good
@stuck wyvern
const ThemeColorMap = getModuleByIndex(622);
const colorMap = {
...ThemeColorMap.exports.ThemeColorMap,
BACKGROUND_PRIMARY: ['#000000', '#000000'],
}
ThemeColorMap.exports.ThemeColorMap = colorMap;
that should work
correct?
afaik
ok because it doesnt

just crashes on launch
lol
why dont you go seed some bitches
guess where you came from dawg
me and your mom 16 years ago

were you alive 16 years ago
yea
based only person seeding freebsd-x86_64.iso
die
15
greater than 16
admins!
no im male so idk how i would
never understood what’s going on with hack different, is this like a breakaway from the checkrain team sorta thing?
with most people in common with the original team
baby
scientists are working on it don't owrry
im not 15
It's gotta a lot of non-checkra1n people in it
yeah ik
are you 21
funny joke
??????
you’d probably be best off making a global random device
lol
how does it relate to the original team I guess is the question
true bro
I'd summarize it as an initiative started by rickmark specifically aimed at having a centralized place for people to contribute to FOSS projects related to apple reverse engineering and knowledge collection.
why doesnt it
It accepts contributions/PRs from anyone, and the org members consist of the original checkra1n team (or, as many of them who bothered to accept the invite), and the "Legit" user group from the hack-different discord
i wish checkra1n worked
why doesnt it
apple
what dd they do
for example: https://github.com/hack-different/ipwndfu Aims to be a place to conglomerate all of the scattered and wack forks of ipwndfu that all add a single specific thing and are incompatible with one another
which we've also ported to python3, made into a module, implemented poetry and linters, and overall improved the structure of a ton (and are still improving)
i wish accord tweak worked 2022
And as another example; I've moved my iBoot/srom loader to https://github.com/hack-different/iBoot-IDA , as I'd really like to accept PRs/contributions to it, and, patting myself on the back here, its the most proper/stable "Loader + Plugin" setup for iboot loading (and should work on binja/ghidra when i get off my ass and write the API wrappers for them)
waiting for my invite
(I have nothing to contribute)
i have only shitposts to contribute
i dont think i'd disagree. most open source code ive seen for ida plugins is shit
speaking of
@silver rampart do you know if an all lowercase instructions/disassembly arm64 plugin for ida is feasible
what does "all lowercase arm64 plugin" consist of
id love to have one but havent bothered to dive deep into the sdk
making instructions and register names lowercase rather than all caps
eg ldr x0, [x2, #0x20] instead of LDR X0, [X2, #0x20]
hmm
I actually am not sure, but I do know there's no patch/debug prevention in the program (even related to DRM, so especially not anywhere else)
yeah i just figured if anyone here might know its you but all good
wouldn't imagine there's an api for that specifically bc the API is hardly documented and really shit, but if all else fails a patchfinder that just changes the cstrings or subtracts however many from the chars probably wouldn't be too hard
ah
yeah i just rememberd that all the processors are dlls in procs and lo and behold
theres an arm64 one
if i modify the right function i can probably slot in the equivalent to string.lower()
though ideally it wouldnt screw over symbols but eh
on a related note: man binja is very nice
binja
new full-C decompiler is wonderful, keeps up perfectly with IDA
am just lazy
what is binanry ninja
disassembler
i actually might get that so i dont need to be paranoid about cracked ida malware
but only when i enroll fulltime
cant drop 300 rn
probably the best competitor to IDA
looks good too
ships windows+macOS (and M1 native) + linux bins
eg doesnt look like ghidra
great UI, great team, great support
1 license = all 3 of those?
yep!
damn thats nice
looks way better than hopper
not that hopper is a bad product, i think its an indie dev too
compared to the absurd ida license i have that still only works on macOS 
i heard of that
buy a mac pro instead
fr
at least it's a tangible object
5.5k woeis
F
woe
for arm64 + x86 decomp
wth
worth the price in quality for sure
if you actually need it
like professional reverse engineers
you could buy gura's membership for 45.8 years for that price
i will say its really awesome to just be able to pull out if another disasm isn't working up to par
what will gura sound like as an old lady
also u get to flex on people which is the most important bit
renewal prices are still pretty stupid though
true
unfortunately its the only thing that handles secureROMs (especially S3 Watch Roms, binja keeps crashing)
you have to pay a couple grand per year if you want updates
but you get the version you paid for at the time of it forever right
yep
but if the IDA 7.7 release hadn't leaked for windows almost immediately, you guys would have no way to load iOS 15 kernelcaches/apps/libraries
thanks r0 crew

yeah its not bad
binary ninja
for 75$ its pretty damn good value
also delivered instantly and didn't require me to spend a week sending over business documents and my ID + birth cerificate + etc
wait what
most powerful disassembly framework (probably) in existence
dont want to be giving that to the wrong people
even though theres piracy anyway
so i dont think it does a whole lot
you're way less likely to want to leak their crap and more likely to try and secure it better (in theory) if they know exactly who you are and can blacklist you from ever buying it again
true
yea ture
i dont think its unreasonable
birth cert was just bc my id has been expired for 4 years lol
but if you're not reversing embedded ROMs / low level crap i think from here i'd really reccomend binja over IDA for anyone looking to buy a disasm
python API is even so much better
oh neat, didn't know that applied there
plus then i can "sleep easy" profiting off of it
not like ive made thousands off ida

looks like it
thats from the student form
what's the commerical calledf
commercial
geico?
jabke from stabe famr
sheepgloba
no
one sec
Mayhem is back. Just in time for the latest #challenge.
Get a quote today: https://www.allstate.com/
Connect with us on:
http://a.ll.st/Facebook
http://a.ll.st/Twitter
http://a.ll.st/Pinterest
http://a.ll.st/Instagram
its so accurate
pay for youtube premuim just to have someone get you to watch a mediocre allstate ad
:troll:
oh so its buy once use forever with 1 year of updates
bc i put it on the crhomecast on the tv and like to put mediocre vids/talks on in the bg while i work
not bad i guess
and i'm on the fam plan so i'm covering a few of my friends as well w it
real G
we originally planned to actually have everyone pool money to split the cost but i'm straight up too lazy to sort that out
same with spotify premuim

@crystal owl ask again w/o the word jailbreak in it maybe
through args
Normal:./applet.py Extra ports: ./applet.py localport:deviceport
was there a CVE in 15.2 someone was talking about releasing?
anyone here getting render lag on vscode for m1 and removing codesign helps the lag... it's strange how codesign is indirectly related to the renderrer process.. something else going on here
@lime pivot haha yeah, actually uploaded that picture a few months ago but just didn't announce it anywhere 😄
you look a little like the guy from schitt's creek
I guess I'll take that as a compliment? 😂
so, has anyone ever accessed the camera via AVCaptureSession from Springboard? Because I can't get the session to run, everything is set up correctly but the session just won't start. a quick google search shows that apparently I'm not the only one with this problem. AuthorizationStatus for Springboard looks good though. Unfortunately, I also couldn't find any open source tweaks that use the camera from Springboard. Anyone?
who wants to update https://github.com/runnersaw/pebble-text for me 🥺
not really, everything is fine even with mutliple heavy extensions
i think it’ll be easier to wait until mom lets you get an apple watch
looking at a function in hopper, i see if (CPU_FLAGS & E) { ... }, what does this mean?
ios arm64
0000000000062a14 mov x20, x3
0000000000062a18 ldr x9, [x3, #0x8]
0000000000062a1c cmp x9, #0x0
0000000000062a20 cset w10, eq
0000000000062a24 cmp x8, x9
0000000000062a28 cset w8, hi
0000000000062a2c cmp w10, w8
0000000000062a30 b.eq loc_62a7c
cool ty
@restive ether can you ban @compact swift and @primal perch ? they are trolling in #development smh
wtf troll behavior
@grave sparrow or @grim sparrow do you know of a discord api endpoint to get a roles color from its id
That is not considered self botting
You don’t
Like a normal user endpoint
It’s sent in the initial payload over the web socket when you connect
bru
bru
or as you would say
bruv
😐
This is sad
@grim sparrow there’s no endpoint for getting a guild object?
Like getting a guild from Id and then iterating through all of the roles
Not publicly

🥲
lol
Zoey moment
I'm back on my bullshit
Debug Info:
Discord: 116.0 (30456)
Device: iPhone13,2
System: 15.3

on stock ios 🗿
My current bs is trying to get Aemulo working on iPad 😐
sounds fun
It is
I have software and memory dumps from a bunch of people
The fun part is figuring out what memory registers to patch
oh boy
At least I can’t brick it
at least
The memory is non-volatile but I can restore dumps
Saurik’s code in the block chain
boolForKey
@grim sparrow so after talking to evelyn, i need to make a connection with the gateway, but now im basically choking and dont know if im doing this right
can you tell me if im doing this somewhat right
void subscribe(long long guild) {
NSURLSession* urlSession = [NSURLSession sessionWithConfiguration:[NSURLSessionConfiguration defaultSessionConfiguration]];
NSURL *url = [NSURL URLWithString:@"wss://gateway.discord.gg"];
NSURLSessionWebSocketTask *webSocketTask = [urlSession webSocketTaskWithURL:url];
[webSocketTask resume];
NSString *token = [NSUserDefaults getAuthenticationToken];
NSDictionary *payload = @{
@"op": @14,
@"d": @{
@"token": token,
@"guild_id": guild,
@"activities": true,
@"threads": true,
}
};
}
So basically what I said 
Yeah do not do this
D:
Because it most likely won’t work
Because that’s not how the api works
Or at least
You need to wait until discord sends an op code
You are much better making an @stuck wyvern patch so you can avoid all of this
Making a second connection in the app is far from ideal
I've got their internal rest api module mapped
so you can make http requests with it
but it also adds the special discord headers that's needed to not get your account yeeted
@grave sparrow is RELRO even a problem with overwriting the function pointers? cant you just mach_vm_protect the page of the GOT?
can't that also get accounts banned
Probably not?
Otherwise if my account would have been banned long ago
Having discord open on two devices constantly
I mean since it's connecting to the gateway itself, wouldn't you have to perfectly emulate the params and such
gm
also welcome back @gaunt pewter
@indigo peak day 12 of waiting for gameseagull 2
i see auto gen names in IDA sub_xxx, can these names be resolved if i include the right library in IDA? or the only way to figure this out is to follow the code path?
RBS does not work for you?
idk never had issues with RBS but I was bullied into not using it 
RBS doesn’t actually provide an ipc api
something like bindiff would work for that library yes
It sucks
how are the auto gen names resolved? if it isn't included in the vtable of the binary i'm inspecting
RBS is known to have performance and battery issues on certain setups
rip
its not fully automatic but it makes it a hell of a lot easier
@indigo peak
if you suspect an app uses a library and its stripped then load it in with bindiff and you can compare and approve symbols based on how likely bindiff rates it
Why doesn’t it
i'm inspecting a dylib file. not a macho execute. does this matter?
Me every time I wake up
it works well
Do you handle it properly in the server
It’s actually surprising how you can have IPC for sandboxed apps without a jailbreak
Cause it doesn’t sound like it 
damn, bindiff requires ida pro

Ask your local crack dealer for ida pro
crackdealer.exe
aHR0cHM6Ly9zaWFza3kubmV0L0VBREFJdEhReDh0ZXlpZGhUdUNTWUVTdkVmUmR3Q1ltWXhFVkVSeW0zaGhVdHc=
whats that
It’s not b64
Lmao
If that format seems foreign perhaps reverse engineering is not a good starting point
Is that the password for birdpoop.7z
It’s N64
yes

Oh it most definitely is
The real cool kids run ida in a vm
never do because too lazy
pretty sure this ones clean
the 7.5 one ive been using for a year is likely as well
ugh, it's for win
The 7.7 pro has one as far as I was told
i'm on osx
bruh
have one for osx?
no
maybe if i spam enough buzzwords ill get attention
looks like it worked
Something something Jonathon something something Data
odds are the 7.5 i have is malware though . i mean if you can crack ida you can obscure some malware in it
windows defender aint gonna do shit

You need Avast for that shit 
if so they did it well though
havent noticed any weird shit or slowdown and im paranoid about that stuff
so they can enjoy my data
I have 7.5 7.6 and 7.7
Me when I change the hash of a file and defender doesn’t care about it anymore
actually i have been running 7.5 in a sandbox and its pretty non invasive yet better than nothing
dont wanna deal with 60 fps vms just for ida
Trol
@tacit spade congrats, you’re a word 97 macro virus https://youtu.be/3WuFSi9WMNY
http://www.twitter.com/danooct1
what would a virus warning about the year 2038 bug say? I envision a lot of memes.
FRICK
trolley
@primal perch i guess the only way now would be to figure out classes of these subroutines, trace callsites
Even so i run ida in wine unless the malware can escape then im fucked 
it's only an API translation layer not a total firewall
please dont post memes in this very very very serious channel
is this geo snow
no
f
where is geo rain
purple pain
t
die
Brute force it
you can be the first to document it
same with most ios components
easy resume builder
“documented ios components through static binary analysis”
Anyone with experience on Silica?
no
mapping time
Make your own repo instead of using a template and use the script in sileo repo to manage it. Its pretty easy
W
man
Look at how beautiful https://hearsedev.github.io 
All you need to do is drop your packages into a folder. And run the script
How does it look in a manager @hardy glen
That you can change, the icon, depictions etc using sileo docs
good repo
that’s what all repos should be like
i run repo.sh in docker if you don’t have a debian based OS. But if you use wsl you are good to go
True
true
unless youre apple
or windows
"yeah lets uh remove eveerything in 10 and redesign it"
fr
lmao
tom goes to hell
imagine having to run a script manually
(sponsored by github actions)
Except the script is magic 
Yea i like manually running commands. Especially when i wake up and run sudo pacman -Syu knowing i am going to sleep like a baby
I'm not
Hat is this
spicy pillow yummy
is it possible to find all callsites of a sub__xxx routine in IDA?
The batteries very small, a better description would be a spicy peanut butter combo
What header do you need?
I've got them all 🙃
oh
I'm not gonna help you there 
isn't this how you search for codepaths
Right click in the function and try the other graph options
is it safe to assume that sub_xxx routines are within the dylibs otool -L dumps?
just need to diff b/w the executable and the dylib and see which matches and resolve symbol names based on that?
(obviously ignoring the system dylibs)
@somber kettle I was refering to proximity browser btw
skeleton army
true
Several techniques exist for hardening ELF binaries in Linux. This post discusses one such technique called Relocation Read-Only (RELRO). Selected network daemons and suid-root programs on Red Hat Enterprise Linux version 7 (on architectures which support RELRO) are built with RELRO support. All ELF binaries shipped with Fedora version 23 and la...
yeah i thought so
"hardening"
If you are talking about comparing two binaries. There is an ida plugin called bindiff
Idk about resolving sym names tho
Is it possible that mediaserverd prevents injection? Because whenever I try to hook [FigCaptureClientSessionMonitor _updateClientStateCondition:newValue], the camera stops working (it's just black) and won't respond anymore... Any idea?
i did it first
Would be a shame if it never got reviewed/merged 
Hayden said he would accept any repo
Wtf
@restive ether bruv what
your mom has been around a long time
And it took them 30 minutes to setup
The key should've been setup before release
Marked as a piracy word!
It takes less then 10 minutes to setup
i’m still waiting for the hyi keyring
There are higher priorities right now but it will get done
Hate speech
Imo it should be very high priority
I would say it’s in the top 5
I'll merge that right away 🙏
Sending out emails to people who used private relay on packix is our top priority
Adding PayPal is #2
ball buddy
Shouldn’t #2 of been done before release
Can’t
Why
the card processor needed to see us up and running to accept us
so we used stripe temporarily
once we switch over to this new one, they have easy paypal integration
repo powered by cash transactions in the mail
repo powered by apple pay cash, jlevin style
turkish people in shambles
If I get a nfc tag, how do I write to it?

[[aemulo]]
ok, that's what i though
aemulo free????
trial version
nah, canister just can't read chariz prices
¯_(ツ)_/¯
The only difference is that the free version does not support Add to Wallet.

I want to support amy...
but on the other hand I don't want to unnecessarily spend money
just get it from my favorite repo
HYI
this one
yeah
you see
i wanted to support amy too
and i didnt want to spend the money i didnt have
so i went brrrrr
and i got it for free
:D
can u tell me these expletives in dm
now im curious what expletive means
curse words?
true
new english word learned
yeah i learned it too
ive never heard expeletive before
How tf
gm
serious question
you know how the LLVM developers are insane and are writing a libc in C++? Why havent they written a libobjc yet?

libobjc shall be written in Rust for efficiency and safety!
No Rust supremacy or rot
In fact rewrite libC and libc++ as well in rust
Is there a way to call a macos shortcut?
Surprisingly, it's impossible to run a shell on a Pebble watch
cause they had to remove a bunch of syscalls and libc funcs to fit the size limit
well their "good insanity" is that they wrote mold, im not sure why its not a part of llvm tho
mold is not written by llvm...
the LLVM linker is lld
well not by llvm, but by one of the developers
oh I didn't know he was a LLVM dev 
and yes i know that lld is the linker for it, but mold outperforms it by a ton so im wondering what the difference in both of those are
Procursus users can now apt install ktool on both iOS and macOS
mold on proc
link times go zoom
Does mold support macho?
think so
Anyone know the header for audio output?
I remember CS mentioning adding a watch jb to odyssey a long time ago. And cynder does a lot of watch stuff, but not sure if they are trying to get a jailbreak
i cant even link mold

builds successfully outside proc but not inside proc
Troll
So when I go video live on a certain app while driving, I have my phone plugged into my radio via a lighting cable. But for some reason when I go live on the app (Yubo) my audio output switches to the phones speakers instead. Anyone know of a tweak that would let me switch the output back to my radio via lightning cable? I’m also maybe looking for the header that deals with audio output so maybe I can just make the tweak myself
Anyone want a watchOS binpack? 5.4M on disk (without ldid)
wats that
It's for people making watchOS jailbreaks
WatchOS jailbreaks are dead
Ok, give me like 2 hours

Cause they didn't have a binpack


I am a professional low level exploit
please exploit my low level iq friend @tepid olive
Oh
👍
Thin (~8M) or thick (idk what size, but not much bigger)
The thin contains the bare minimum to bootstrap a system
The thick will have terminfo and more posix tools
separated
This is the thin contents https://pastebin.com/0aq6vEyR
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
It will be that plus, terminfo db, chgrp(1), env(1), groups(1), whoami(1), nl(1), paste(1), od(1), sort(1), touch(1), strings(1), tr(1)
@grave sparrow https://github.com/Diatrus/apfs/pull/1 here
do this but in C
🙏
@ocean raptor there’s been a commit upstream idk if you wanna pull it
dub cat
also fix the renaming 
we already pulled it
i just know something with the renaming is broke
why bother
maybe not so much broke, but it makes taurine mad and break so
for you to not have open PR’s 
why is du on macOS reporting different than du on FreeBSD 
idk
My ZFS is compressed with zstd
> du -shA binpack
8.1M binpack
@grave sparrow here is the thin, I will start work on a thick.
Simply extract it to whatever path you want, run dropbearkey -t rsa -f /private/var/dropbear/rsa_host_key to gen the key, then spawn dropbear with this launchdaemon https://github.com/CRKatri/Taurine/blob/binpack/Taurine/resources/dropbear.plist (modify paths)
i made a custom lib.dylib and opening in Ghidra fails. It's a simple lib that just logs. can ghidra not disassemble anything related to libSystem?
https://youtube.com/shorts/BIe-rULpkro?feature=share bro got a 0day
This Channel Deals about the Self Improvement, Motivational stories and life hacks.
We read books and researching on Articles and share ideas with you. So that you can implement the ideas directly without going into the details of the book. We hear seminars and brig the essence to you.
We believe In the concept of "be Awesome, Live Awesome"
#M...
Lmao

I’m so motivated rn
@grave sparrow you are looking quite submissive today
trolling
tbf he is 15
but she didn't give it to me so I just gave up
16 smh
lmaooooo
you are all awful
I didn't pirate it
as soon as i am able to jailbreak my main phone I'm gonna buy aemulo
amy, if you give me aemulo for free I'll transfer the QuickActions copyright to you, that seems fair, right? 
ok bro
and donato didn’t either

well I actually want to use aemulo
?? how am I??
I don’t care, why would you start critiquing someone’s development skills
That was totally uncalled for
is it possible to bypass a tweak that wont let other tweaks to load?
just load the tweak smh
simply hook MSHookFunction
Make sure your dylib loads last
ZZZZ<name>.dylib
loading last will fix the issue?
np
%hookf(void, MSHookFunction, void *symbol, void *hook, void **old)
nfr
fight me, it's a good idea
dumb question and im gonna get called names for it but how do i get started on making tweaks
i really dont know how to use this, pretty new to this area.. can you point me to an example please?
check the pins
names
HOW TO GET INTO TWEAK DEVELOPMENT
This has been asked countless times so it's time that there is a long message that explains this.
One of the first things you want to do is reach a "baseline" before you can even think about getting started.
What this means is that you need to be familiar with Object Oriented Programming and how to use Objective C.
uroboro was kind enough to create a guide that you can find here: https://uroboro.github.io/Learn-Objective-C-in-24-Days-Clone/
Additionally, you should also learn a little bit about how iOS works, learn some basic frameworks/stuff you will need to work with.
Stuff like how to use UIKit, Foundation, etc. Once you have a pretty good understanding of these, then you can proceed.
The next step is to actually start making tweaks. Install a tool called Theos for your appropriate device.
The installation wiki can be found here: https://github.com/theos/theos/wiki, please make sure to follow the appropriate platform instructions.
After that, you are ready to start making tweaks, please follow a tweak development guide. (Here's one if you're lazy: https://kodeycodesstuff.tech/guide)
This project was created with the intention of preservation
it was a joke
ah i didn't see that pin
thanks
since when has he contributed to pirating aemulo
we stan bite your apple /s
and what is he begging to get the source code of
birdpoop
lmao ok
still no go. any other idea?
what’s the tweak
add more Zs
gm
its a tweak for pokemon app (not cheating) that is basically injected with another tweak that is bypassing sideloading injection protection
@compact swift i’m pretty sure he’s asking for the source code as a joke..
and i need the other tweak since without it, the app is crashing if sideloaded
and you wouldn't?
well the archive was sent
Sorry too busy fighting the demons
Well first of all, I was given aemulo by Amy to beta test so I didn’t pirate it. Second of all, my tweak has been finished for months and I’ve been asking the owner for the source code of the paid better version as a joke. I said that i pirated aemulo and other people should too as a joke. So please next time know all the information before you try to make claims about me
And not for nothing, the tweak I’ve been asking the source code for and “trying to crack the password for” is literally a tweak that I own, and my own tweak does the exact same functionality, so I could honestly care less if I had the source
I have all the facts right here, you are a dirty pirate with scurvy 
you literally admitted to pirating 
@ aaron, ban him
Tomato Headass gone?!?
The attached are screenshots of me doing 2 things: 1 - joking with the person who sent the birdpoop 7z and then them acknowledging the fact that I was joking, and then joking in return, and 2 - me talking about my aemulo status and then me praising the tweak
Well why can’t you be like every other dev in here and not give a shit. Literally you’re the only dev that’s EVER said anything. Literally ever. So I don’t understand why it’s such a big deal. If it’s such an important thing for you, you could dm me or the other developers involved. Like, if they thought it was an issue I’m pretty sure they would’ve came to me, instead of leaving it up to you who wasn’t involved at all in this
cat
true
carpet reveal???
- window reveal
why we forgetting about the hand reveal
and cat reveal
I hate rust devs
are there docs on memory layout of a running process on macos?
you probably want to query using mach_vm_region_info apis, JLevin should have a handy example about that
Here's also a probably older pdf from apple themselves:
https://developer.apple.com/library/archive/documentation/mac/pdf/Memory/Intro_to_Mem_Mgmt.pdf
As usual, consult your google-fu in case of doubt
JLevin's ex seems old
oh wait there's a new book?
ghidra shows me offset next to the hex.
can i assume on macho execute, when running, the memory is laid as it's visually shown here? ex, at first address I find 0x55. second address 0x48..0x89?
i thought how ghidra visually shows has to do with alignment and not endiness
how many bytes are at each address? in Ghidra at each offset I see 1, or 2, 4 at maximum I see 4.
im not sure why this doesnt work, could anyone please point me in the right direction?
do you prefer uikit
@grave sparrow dummy thicc strap, heres the diff https://pastebin.com/JnZRD4aK
It's ~11M on disk, you'll also want to add -t /path/to/binpack/usr/share/terminfo to the dropbear call so that TERMINFO is set correctly
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
I also threw defaults in there
is this always the case for all executables and dylibs too?
Lol, the thick strap is only 4M larger 
thicc
im trying to introspect a binary during runtime. I can inject using lldb with dlopen. how do I print the logs? the only thing I can think of is to forward the logging to a foreign function on my macOS or something. aka backend.
it does not have awk column curl lz4 perl zip zsh or zstd
yes, otherwise you can't use any of the tools....
basically if it's not needed, it's not in the binpack
it has xz, bzip2 and gzip for compression
it doesn't have anything to download stuff
thick strap has tftp
I can add these if you want
maybe not perl though....
(I can't get perl to compile
)
Bro, of course I have tar already
Oh, that's just the diff between normal and thick
i don’t think all 3 are necessary?
ya got bash nerd
ohh
which is bash compatible for scripts
it's got [[ and some other stuff
@grave sparrow full contents of thick pack https://pastebin.com/7fpxFyF2
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
checkra1n binpack compat 🤷♂️
surely all 3 compression types aren’t necessary though?
no
who cares what they do honestly
it wasn’t a very good base they worked off
true
anything large that’s not necessary to fix something i guess?







