IPad Air 1 / IPad Air 2 is le sad :<

[lethal gate]

Palera1n-c: itl go to pongo os, say booting kernel and do alot of text, followed by a full screen solid red flash, it wont jb and sileo wouldnt open when i did have it
Palera1n.sh: used to work awhile ago, but the whole script is broken and says parse error: Invalid numeric literal at line 1, column 10
Chimera: Crashes at step 1/3
Chimera Patch: asks to reboot, reboots, and doesnt jb
Unc0ver: too new ios

[cold reef]

palera1n.sh is deprecated

and palera1n does not support below iOS 15 so palera1n will not work

we said that already in #palera1n

[lethal gate]

ik just listing what everything does

and that sh worked b4

that air 2 also now refuses to be jb-d by anything -w-

[cold reef]

try reseting the air 2

[lethal gate]

it boots straight to rec

it was running sh

but freezes at Extracted Image4 payload data to: work/kcache.raw Bad magic: 20206d6f

[cold reef]

what

1. boot straight to what?
2. running what?
3. freezes at what? what is saying this??

[lethal gate]

it boots straight to recovery mode like it does
ios 15 smth smth
palera1n.sh says that after awhile, nd freezes, the air 2 at the disk palera1n screen thing

[cold reef]

again you should not be using palera1n.sh anymore

please follow https://ios.cfw.guide/installing-palera1n/

if it boots straight to recovery you can just reset it

if that doesn't work then go into DFU mode and reset

[lethal gate]

can -c boot a .sh palera1n install?

[cold reef]

no

-c, --setup-fakefs
When used with -f, --fakefs, Create the new APFS volume required for rootful. Will fail if one already exists.

you should not be using rootful anymore

you should just remove any existing installation of rootful, then reinstall using the guide https://ios.cfw.guide/installing-palera1n/

[marsh citrus]

WHY in the name of jesus christ are you using palera1n.sh on 12.5.6

[eager briar]

better yet why palera1n.sh

@lethal gate ur looking for https://ios.cfw.guide/installing-odysseyra1n maybe

[lethal gate]

but like it already is all tweaked up i dont wanna do it all again

nd how is it better

[eager briar]

well

first of all how tf did palera1n even work

[lethal gate]

are we talking about the air 1 or 2 :3

[eager briar]

it’s not tethered (i assume what ur using is tethered)

[eager briar]

i assume air 1

[lethal gate]

the one that doesnt work at all or the one that is running .sh but not working

[lethal gate]

air 2 is tethered i think yea, nd it used to work but doesnt anymor nd it freezes at Bad magic: 20206d6f
air 1 used to run .sh but it just crashes out of .sh when trynna jb it

[eager briar]

something is very scuffed

[lethal gate]

mhms :3

[lethal gate]

the air 1, as said in this msg, has no jb that workies

[lethal gate]

this im not agreeing w btw

rootless is dumb

[marsh citrus]

https://ios.cfw.guide/installing-odysseyra1n/

[lethal gate]

ill twy tmr :3

[eager briar]

is the air 2 really frozen or is it making the fakefs

[lethal gate]

it says at that bad magic error for more than 10 mins

[eager briar]

i see

i think we should blame mineek and move on

[lethal gate]

hehe

dumb question, whats the diff between one checkra1n based jb and another

why is there a diff where palera1n.sh and -c cant boot eachother, why isnt it just the same jb rewriten in C

[eager briar]

well

there’s also the fact that palera1n.sh is true rootful

and palera1n-c isn’t

[marsh citrus]

first of all every single other rootful jailbreak besides palera1n doesnt use fakefs on 12 because that is extremely dumb, the reason fakefs was even created in the first place was to “mitigate” against SSV which was added in 15

Palera1n never even officially supported 12 pretty sure

[eager briar]

no

[marsh citrus]

Whar

[lethal gate]

it ran b4 tho

[eager briar]

sorry that means i’m agreeing with you

[lethal gate]

maybe a year ago but it did run on the air 1

[lethal gate]

so how are they similar

its a diff loader, diff app, diff core in how it works

[marsh citrus]

Ran doesn’t necessarily mean you should use it

[lethal gate]

if it works idc

[eager briar]

what injector/hooker does palera1n.sh use

[lethal gate]

i kno that .sh doesnt use pongoOS

[marsh citrus]

Palera1n should ONLY be used on 15+ because it was never made or designed to run on 14-, so you will run into big issues with it most likely even if it “works”, an update to palera1n can break everything.

There’s genuinely no reason as to why you should use palera1n on 14- instead of something like checkra1n which doesnt use a fakefs, unlike palera1n

[eager briar]

jb with checkra1n

[eager briar]

palera1n.sh doesn’t use a fakefs btw

[marsh citrus]

Still

[lethal gate]

ive always been on the last version of .sh

never updated, it just shit its pants

[marsh citrus]

Never was made or designed for 12

[eager briar]

you don’t have to remove anything just jb with checkra1n and see if it works

(also don’t install cydia or anything in the loader app)

[lethal gate]

ys that

[marsh citrus]

Genuine question why would you use palera1n.sh over checkra1n/odysseyra1n on 12 even if it “works”

[eager briar]

that too

[marsh citrus]

Just why, why why why

What’s the point

[lethal gate]

checkrains last update was when ios 14 came out, and i didnt know odysseyra1n even existed

i knew that palera1n worked nd its what i used on everything

[ember rapids]

omg hello mocha cat

[lethal gate]

hewwo!!

[marsh citrus]

Fair enough

[lethal gate]

nd again, it worked so, why stop using it??

[eager briar]

it worked
is it still working

[lethal gate]

shush

my phone ran .sh up until i learned of dopamine

[marsh citrus]

Because you’ll probably run into bigger issues in the future + it clearly isn’t working anymore so

[lethal gate]

ive never got -c to work nd its jankier in my testing

[marsh citrus]

On unsupported iOS? Yeah

[lethal gate]

no on supported

[eager briar]

tbf it was designed for rootless, rootful was just an afterthought
-# dont fact check this, because it is wrong

[lethal gate]

i tried rootless

er technically, didnt know it was using smth else

it wouldnt get to pongoos before just not working

[marsh citrus]

Rootless on 12 would be beyond problematic anyways (even if it worked) because most rootless packages are designed for 15.0+, also rootless only exists because of SSV which was added in 15.0

[lethal gate]

im not talking about janky on 12

[eager briar]

stuck in 🅱️ongoOS -> ctrl + c -> run palera1n again

[lethal gate]

im saying on 15 and 16

[marsh citrus]

Oh

[lethal gate]

did that

[eager briar]

uhhhhhhhhhhhhhhhhhhhhhh

[lethal gate]

no one could help me bac then either

[marsh citrus]

[lethal gate]

just pretty much got a Neko_Shrug from everyone

[eager briar]

palera1n.sh so this isn’t linux so no mux

what id going on

[lethal gate]

???

[marsh citrus]

Just use .sh on supported ios if you’re more comfortable with it and it works for you

Its your choice

[lethal gate]

i mean id like to get sh working -w-

[marsh citrus]

But yeah using it on unsupported ios really isnt a good idea

[lethal gate]

like wtf dus Bad magic: 20206d6f even mean

[marsh citrus]

When you use software built for a newer version of iOS and the unintended backward compatibility breaks yeah you’ll get very weird and cryptic errors

[lethal gate]

that error is on ios 15

[marsh citrus]

Well

[lethal gate]

the air 1 on ios 12 doesnt get anywhere near that far

[lethal gate]

dis comes from an air 2 that was running .sh tethered up until recently, where it just gives dis error nd freezes

ios 15.smth.smth

[marsh citrus]

Yeah i get it that it must be frustrating for it to not work but just use dopamine

[lethal gate]

i cant cuz its tethered nd cant get to a homescreen

[marsh citrus]

Oh

[lethal gate]

i think tethered, whatever just goes to the recovery mode screen and cant boot w/o the jailbreak

[eager briar]

bad magic

something is corrupted

[lethal gate]

WHAT??

but it ran fine b4!!!

[eager briar]

who knows what happened

[lethal gate]

it ran fine, sat around for maybe half a year

[eager briar]

space laser flipped a bit

happens

[lethal gate]

:<

[marsh citrus]

Ok so the palera1n.sh script doesn’t work at all now, correct?

[lethal gate]

mhms

[marsh citrus]

Why not just clone it again

[lethal gate]

its always dun dis btw

[lethal gate]

?

[marsh citrus]

Yeah it’s normal palera1n.sh is tethered

[lethal gate]

mkmk

[marsh citrus]

1. delete the old palera1n.sh directory
2. cd to the directory you want to have the new palera1n.sh directory in
3. git clone -b legacy --recursive --depth=1 --shallow-submodules https://github.com/palera1n/palera1n && cd palera1n

[lethal gate]

y tho

[marsh citrus]

No idea but the current script seems to be corrupted idk

[lethal gate]

oh the script is corrupt??

[eager briar]

the device is, not the script

well

[marsh citrus]

Oh whay

How does one

Corrupt a device

????

[lethal gate]

it sat around, i did nothing

[eager briar]

storage

[lethal gate]

i wasnt using it as a seat or smth

[eager briar]

for me that happened after i installed kde (real) and arch couldn’t determine fs type

[lethal gate]

peak arch moment

[marsh citrus]

Is the storage full or anything

[lethal gate]

nope

[marsh citrus]

@eager briar

[eager briar]

blame mineek and move on

[marsh citrus]

n0

[lethal gate]

well blaming some1 doesnt solve it not workin

[eager briar]

how much do you care about your data?

[marsh citrus]

Good question

[eager briar]

jk!

[lethal gate]

i mean

[eager briar]

never blame mineek

[lethal gate]

id prefer it to stay

[eager briar]

https://tenor.com/view/blandship-bland-neko-ender-vtuber-gif-26025740

[marsh citrus]

So palera1n.sh no worky anymore, how does one recover the data

😭

[lethal gate]

i mean, can we got it to workie

[eager briar]

update the device, overwrites rootfs and device boots but no jb

load up sshrd and become super schizo

[marsh citrus]

[lethal gate]

if i re jb-d w sh would tweaks stay?

[eager briar]

no

[lethal gate]

id say half the data i want on that is just all the tweaks and confs

sooo

[marsh citrus]

How does palera1n.sh work again @eager briar

Does it just shamelessly break the ssv seal

[eager briar]

yes

that’s why it’s tethered

[marsh citrus]

Amazing

Peak software

[lethal gate]

it is :3

[marsh citrus]

Wouldn’t trying to ipsw update in an SSV bricked state just fail

[eager briar]

fuck i forgot it checked that

[marsh citrus]

i truly love restored_external

[eager briar]

seprmvr64v2 step 4 🥺

[lethal gate]

on a scale of 0 to dildo how fucked am i

[eager briar]

terry davis

[marsh citrus]

Probably like triple dildo

[lethal gate]

LMFAO

oh uhhh

[marsh citrus]

Ok so

[lethal gate]

ideas

[marsh citrus]

@eager briar i have an idea

[ember rapids]

or unplug + replug

worked for me

[marsh citrus]

What if we get into an ssh ramdisk

And nuke everything

[lethal gate]

also do that

[marsh citrus]

If we nuke the whole nand there’s no ssv seal

No?

[eager briar]

that’s how you fix it yes

[lethal gate]

i wann my tweaks tho :<

[ember rapids]

wait what did u do

[lethal gate]

it sounds like getting sh to work is the only option,,

[lethal gate]

did*

[eager briar]

go through PlaneraJB.sh and see what it does

boot up sshrd and try to recreate

[lethal gate]

tf is that

[marsh citrus]

Nuking the whole nand seems like a very viable option in this case if we can’t get that to work

[lethal gate]

sounds like smth pulled outta ur ass

[eager briar]

sshrd - secure shell ramdisk

[ember rapids]

what the duck id a whoogle

[marsh citrus]

Null meant palera1n.sh

😭

[eager briar]

that’s what i said

[lethal gate]

self hostable google

[eager briar]

anyways

[lethal gate]

then whats PlaneraJB??????

[eager briar]

funni reddit comment

[lethal gate]

bro leaked secret jb frfr

[marsh citrus]

Funny thing null likes to say idk

[eager briar]

https://tenor.com/view/the-voices-meme-cat-gif-23917781

[marsh citrus]

ok so

Plan 1:
get palera1n.sh to work

Plan 2:
get into an ssh ramdisk
nuke nand

[lethal gate]

then lets try to get wut i said working before hitting a 9/11 on my nand

[marsh citrus]

Ok great @eager briar any ideas

On how we can get palera1n.sh to work

[eager briar]

get into sshrd yes

nuke nand not yet

[marsh citrus]

Then what

[eager briar]

first we need to look at palera1n.sh as a script

both creation of jb files and boot process

[marsh citrus]

What does that even mean

[lethal gate]

do u need that folder palera1n.sh makes for every device

[eager briar]

not sure at this moment

[lethal gate]

if ur not sore thats pretty good

[eager briar]

ima let xrt do whatever tf i just said and yes

[marsh citrus]

What

[marsh citrus]

Man we don’t know what the fuck we’re doing

💔💔💔

[lethal gate]

well we can find out :3

[eager briar]

that’s why we have to find out silly

[lethal gate]

exactlyy

[marsh citrus]

Is this a reasonable reason to ping the one and only mineek

[lethal gate]

‼️

[eager briar]

yes but it’s 3 am for him

[lethal gate]

sounds like the perfect time to ping imo

[marsh citrus]

He’ll see it when he wakes up smh

[lethal gate]

exactlyy

[eager briar]

eh

no comment

[marsh citrus]

Lets go back to square one

What does bad magic even fucking mean

[lethal gate]

im still not sure

dont exist

smh

[marsh citrus]

@eager briar new question, how 2 nuke nand

[lethal gate]

nyooo

dont exist at all

[eager briar]

@lethal gate i’ve just realized something

[lethal gate]

ya

[marsh citrus]

This is the most verbose error of ALL time

Bad magic

[ember rapids]

how does it work

[eager briar]

it’s possible that the ramdisk is the thing that’s corrupted

[marsh citrus]

Why did the ramdisk corrupt itself

[lethal gate]

https://github.com/benbusby/whoogle-search

[eager briar]

idk ask it

[lethal gate]

can we just

make

a new

one

:3

[eager briar]

definitely

[lethal gate]

:o

Extracted extra Image4 payload data: to work/kpp.bin.
Extracted Image4 payload data to: work/kcache.raw
Bad magic: 20206d6f```

more of the err

[marsh citrus]

Well that helps a bit

[eager briar]

@marsh citrus if i pwn my 7 then pass it to maxos vm will it work for checkm8/other shit

[lethal gate]

its extracting shit, then dus an err u say means smth is corrupt

[eager briar]

work is sshrd related

[lethal gate]

we are doing tech shit, not chess

smh

bros loosing it,,,

[eager briar]

look at checkra1n icon

[lethal gate]

LMFAO

trolley

[marsh citrus]

Idk

[lethal gate]

ok we got dis

[marsh citrus]

Gir > esmbot :/

[lethal gate]

yesh

[lethal gate]

bot tuah*

[marsh citrus]

lets start fresh

[lethal gate]

hi who are you?

[marsh citrus]

1. make a new directory we can test out things in
2. git clone -b legacy --recursive --depth=1 --shallow-submodules https://github.com/palera1n/palera1n && cd palera1n
3. dont ask what happened to number 2

Oh wait

There js a number 2

[lethal gate]

bozo

[marsh citrus]

Nvm

[lethal gate]

ratioo

ima go get the pad that is 👁️

[marsh citrus]

@eager briar how 2 palera1n.sh

What even is the syntax

[lethal gate]

i know it dw

[marsh citrus]

Thank god

[lethal gate]

./palera1n.sh --tweaks [ur ios ver]

[eager briar]

holy shit how do i get more ram and better. cpu on this bitch

[lethal gate]

one sec homie

https://archive.org/details/soft-ram

[marsh citrus]

Shut the hell up stop venting about your assMac Pro

[marsh citrus]

ok so do this #1318714322658005082 message then just run that

[lethal gate]

mhms 1 sec

[marsh citrus]

启用对中国大陆网络环境的替代办法

[lethal gate]

‼️

[eager briar]

ram successfully doubled

[lethal gate]

les goo

Hold home + power button (0)
Release power button, but keep holding home button (3)
[*] Device entered DFU!
[*] Creating ramdisk
<string>:1: DeprecationWarning: 'pkgutil.find_loader' is deprecated and slated for removal in Python 3.14; use importlib.util.find_spec() instead
  import pkgutil; exit(not pkgutil.find_loader("pyimg4"))
Archive:  gaster-Darwin.zip
  End-of-central-directory signature not found.  Either this file is not
  a zipfile, or it constitutes one disk of a multi-part archive.  In the
  latter case the central directory and zipfile comment will be found on
  the last disk(s) of this archive.
unzip:  cannot find zipfile directory in one of gaster-Darwin.zip or
        gaster-Darwin.zip.zip, and cannot find gaster-Darwin.zip.ZIP, period.
[-] An error occurred
(venv) arcane@arcanes-MacBook-Pro:~/palera1n|legacy⚡*
➤```

[marsh citrus]

What the fuck does this mean

[lethal gate]

also ratio, i have a kitty cat

[lethal gate]

u tell me bucko

bro

that shit 0 bytes

[marsh citrus]

What is even happening

[lethal gate]

its downloading smth called gaster

and it downloaded a 0 byte zip file

[marsh citrus]

Do you keep a source of radiation near your computer because how the fuck did that get corrupted

[eager briar]

you can now boot untrusted images!

is luna finally dead

https://alexia.lol/gaster/gaster-Darwin.zip

[lethal gate]

deleting it and it redownloading downloads the 0 byte one again

[eager briar]

gaster-Darwin.zip works on my machine L bozo skill issue

[lethal gate]

ok

correction

[marsh citrus]

Are u sure u have space

[lethal gate]

it downloads it

[marsh citrus]

On uhh your mac

[lethal gate]

then it turns 0 bytes

1 sec

45 gigs of space

[marsh citrus]

What the actual fuck

[eager briar]

im just saying

[lethal gate]

LMFAO

[eager briar]

stop relying on the script

instead start relying on the script's content

[lethal gate]

whar

[marsh citrus]

> palera1n.sh throws weird error
> redownloading it throws more errors
> cant restore because palera1n.sh effectively ssv bricks you
> i cant just nuke the nand because there’s data

🫃

What are we supposed to do

[cold reef]

that's what i'm saying

[lethal gate]

we are on a diff ipad rn

[cold reef]

i know

[lethal gate]

but also i already answered that question

[cold reef]

regardless palera1n.sh should not be used

[lethal gate]

disagreed

its my fav

[ember rapids]

g

[marsh citrus]

Stop arguing guys

😭

[lethal gate]

yesh

i like my fav jb

go use shitra1n or whatever

[marsh citrus]

I think its time to nuke the nand

Maybe

Just maybe

[lethal gate]

hmph

[cold reef]

Do it.

[lethal gate]

fine :<

[marsh citrus]

@ember rapids @cold reef @eager briar any opinions

[lethal gate]

step 2

[marsh citrus]

Before the great nand nuke of 24

[lethal gate]

how

nah it should just be a date like 9/11

12/20,,,

[marsh citrus]

I need to consult with my fellow idiots geniuses first sorry

[cold reef]

i am an idiot sometimes not offended

[eager briar]

this section can be commented out, assuming you have pyimg4 installed

if ! python3 -c 'import pkgutil; exit(not pkgutil.find_loader("pyimg4"))'; then
    echo '[-] pyimg4 not installed. Press any key to install it, or press ctrl + c to cancel'
    read -n 1 -s
    _check_network_connection
    python3 -m pip install pyimg4
fi```

[lethal gate]

at the idiotbar

[cold reef]

chat got

got

gpt

autocrat

[marsh citrus]

Oh my god are you ok mentally

[cold reef]

autocorrect 😭

[eager briar]

what

[marsh citrus]

Are you going to make us run palera1n.sh manually

Are you sane

[lethal gate]

fr

[eager briar]

@lethal gate you got places to be? things to do?

i sure dont

[lethal gate]

nope

[eager briar]

ok great!

[ember rapids]

sudo rm rf / to make it funnier

[cold reef]

mods

:/

[ember rapids]

?

[cold reef]

sep test reference

[eager briar]

(also xrt thats to help running the script, not doing it manually)

[ember rapids]

he he

[marsh citrus]

Im going to paint the walls with my brains

[lethal gate]

still has the pkgutil.find_loader err :3

[marsh citrus]

启用对中国大陆网络环境的替代办法

[eager briar]

wtf

[lethal gate]

ill brb while u 3-4 jabber for a sec

[eager briar]

how is it giving u an error if its not being run

Kokonfused

[marsh citrus]

Solar rays corrupting the code to emit the #

[lethal gate]

i deleted the whole section

[ember rapids]

h

[lethal gate]

the string "Bad Magic" doesnt appear anywhere in the whole folder according to finderp

[ember rapids]

mocha what r u. even tryong to do

[eager briar]

makes sense

generic error

[marsh citrus]

How is that generic

[eager briar]

also does this script save all bins in it's root

[lethal gate]

jailbreak my air 2, or, erase it to jb it again

[eager briar]

Kokonfused

[eager briar]

generic as in it can happen everywhere

[ember rapids]

and why cant u use chimera

[eager briar]

ios 15

idk whats going on anymore

[ember rapids]

whar

[lethal gate]

already jailbroken w .sh tethered

[ember rapids]

dopamine

[lethal gate]

i cant get to the homescreen

[ember rapids]

nuke ur nand

[lethal gate]

we already have jabbered about that

bro doesnt read frfr

[ember rapids]

then do it

[eager briar]

@marsh citrus i am unable to express my ideas in a legible fashion :(

KokoCries

[lethal gate]

we decided itd be best to try to not

[ember rapids]

why

[eager briar]

brother

well no he has a point

but we would not like to lose data

also

@molten epoch another thread

[ember rapids]

why

[eager briar]

fun fact: palera1n.sh is over 1.1k lines long

[ember rapids]

if he cant get to homescreen whats the poiny of even trying to save data

[eager briar]

fun

[ember rapids]

[eager briar]

curiosity

[lethal gate]

booting so i can still use it w my data...?

[ember rapids]

[lethal gate]

also she*

[eager briar]

why yall in a rush

[ember rapids]

o sorry

[lethal gate]

:3

[marsh citrus]

Ok so

[lethal gate]

its literally in my name-

[marsh citrus]

I have the how to nuke nand guide ready

Did you guys make a break through

[ember rapids]

me too

[lethal gate]

ight

[marsh citrus]

Or is it just yap

[ember rapids]

its called sudo rm -rf /

[eager briar]

extra line, unnecessary , will pr fix soon

[ember rapids]

mocha can u even get to dfu lol

[lethal gate]

not just yapping, but uselessness that hasnt furtured society

yea yea its in dfu rn

[ember rapids]

restore 👍

[marsh citrus]

How 2 nuke nand to avoid SSV brick

1. Clone and cd into this repository: git clone https://github.com/verygenericname/SSHRD_Script --recursive && cd SSHRD_Script
2. Never ask about step 2
3. Run ./sshrd.sh <iOS version for ramdisk>, without the <>.
4. Run ./sshrd.sh boot to boot the ramdisk
5. Run ./sshrd.sh ssh to connect to SSH on your device
6. Finally, to mount the filesystems, run mount_filesystems
7. Type in dd if=/dev/zero of=/dev/disk0 bs=1M

Im sorry moderators

It had to be done

To avoid SSV

[marsh citrus]

.

[lethal gate]

i mean, null seems to be on path #uno

[marsh citrus]

palera1n.sh breaks the ssv seal

[lethal gate]

aka, not wiping it

[ember rapids]

Whar.

[marsh citrus]

Restore no worky

[ember rapids]

oh

[lethal gate]

as we already said

[ember rapids]

palera1n.sh

[ember rapids]

i do. not want ot read all 485 messgaes at 4 am

[marsh citrus]

After doing these

Reboot (you should be in either recovery or DFU, probably DFU) then restore to latest

!t reboot

[lethal gate]

https://dictionary.cambridge.org/us/dictionary/english/preference

[night bone]

reboot

This will force reboot the device. For normal rebooting instructions, see the normalreboot tag.

iPhone 8 or newer (including all notched devices, iPhone SE 2020 and newer):

• Press and release volume up
• Press and release volume down
• Press and hold the side button for 10-20 seconds until the Apple logo appears

iPhone 7:

• Press and hold the volume down and power buttons for 10-20 seconds until the Apple logo appears

iPhone 6S/SE 2016/iPad 8th or older:

• Press and hold the home and power buttons for 10-20 seconds until the Apple logo appears

Added by JTV#5846 | Used 1,940 times · Mar 14, 2021, 7:51 PM

[ember rapids]

meow meow meow meow meow meow meow meow meow meow meow meow

[lethal gate]

ok then shush it and help someone else..?

[ember rapids]

ok!!!

[marsh citrus]

Ok so big disclaimer

All all all all all all data will be lost

All of it

[lethal gate]

@eager briar update on plan A?

[lethal gate]

yea lets put a pin in plan b :P

[marsh citrus]

@eager briar Die

Sorry

[lethal gate]

!!!

[eager briar]

@marsh citrus my phone won't boot

jk!

[lethal gate]

real

[marsh citrus]

Peak

So are we going ahead with plan B

[eager briar]

hold the fuck on vro

we do not have a time limit

[lethal gate]

if theres smth we can try w A, no

ya

[marsh citrus]

palera1n.sh SSV brick tuah wipe nand on that thang

[ember rapids]

palera1n.sh SSV brick tuah wipe nand on that thang

[lethal gate]

you will go missing on 5/30/25

[eager briar]

fuck palera1n.sh needing normal mode

[ember rapids]

mods

i wanna ssv brick one of my devices

@marsh citrus teach

[lethal gate]

IPad Air 1 / IPad Air 2 is le sad :<

[marsh citrus]

@eager briar any updates?????

[eager briar]

i forgot to save changes and did the same script 3 times

[lethal gate]

https://tenor.com/view/no-craig-federighi-craig-ofcourse-not-apple-gif-21503325

REAL

[eager briar]

and there it is

pkgutil still shows up cuz its in sshrd.sh

[lethal gate]

question

idfm cuz its just a warning

i think we need to be more worried on how it zeros out a zip it wants

[eager briar]

who

[marsh citrus]

Yeah that’s quite concerning

[eager briar]

that's also a valid concern however i was planning on bypassing that and just giving it the bin it wants

[lethal gate]

smort

[eager briar]

curl -LO https://alexia.lol/gaster/gaster-Darwin.zip && unzip gaster-Darwin.zip && chmod +x gaster

btw

[lethal gate]

run dat?

oh

[marsh citrus]

Or just compile gaster from source smh

[lethal gate]

nono i did that

it doesnt care

it still wants the zip

[marsh citrus]

[eager briar]

run again in palera1n/ramdisk/Darwin

same about that pkgutil error, edit sshrd.sh

[marsh citrus]

Me have an idea

Actually no

It’s so stupid

[lethal gate]

[*] Creating ramdisk

[marsh citrus]

FINALLY

PROGRESS

[eager briar]

slowly but surely

[lethal gate]

woa,, my ipad,,,

sudo rm -rf /private/tmp/SSHRD

trolley

[eager briar]

KokoThink

[lethal gate]

Bad magic: 20206d6f

:<

[eager briar]

fuck its the ipad

[marsh citrus]

🫃

🫃🫃🫃

🫃

🫃🫃

[lethal gate]

[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
Error connecting to device: No such file or directory
[*] Dumping apticket
[*] Patching the kernel
mv: /mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/System/Library/Caches/com.apple.kernelcaches/kernelcache: No such file or directory
[*] Downloading BuildManifest
Version: 9bfdde2b2456181045f74631683fba491d8bf4f2 - 38
libfragmentzip version: 0.64-aaf6fae83a0aa6f7aae1c94721857076d04a14e8-RELEASE
init pzb: https://updates.cdn-apple.com/2022SummerFCS/fullrestores/012-41685/A12D2F85-A629-49EF-B5F7-FDF71C040564/iPad_64bit_TouchID_15.6_19G71_Restore.ipsw
init done
getting: BuildManifest.plist
100% [===================================================================================================>]
download succeeded
[*] Downloading kernelcache
Version: 9bfdde2b2456181045f74631683fba491d8bf4f2 - 38
libfragmentzip version: 0.64-aaf6fae83a0aa6f7aae1c94721857076d04a14e8-RELEASE
init pzb: https://updates.cdn-apple.com/2022SummerFCS/fullrestores/012-41685/A12D2F85-A629-49EF-B5F7-FDF71C040564/iPad_64bit_TouchID_15.6_19G71_Restore.ipsw
init done
getting: kernelcache.release.ipad5b
100% [===================================================================================================>]
download succeeded
[*] Patching kernelcache
Reading work/kernelcache...
[NOTE] Image4 payload data is LZSS compressed, decompressing...
Extracted extra Image4 payload data: to work/kpp.bin.
Extracted Image4 payload data to: work/kcache.raw
Bad magic: 20206d6f

[eager briar]

actually

[lethal gate]

⁉️

[marsh citrus]

So is the ipad a paperweight or not

[lethal gate]

shh

null is cookin

[eager briar]

    remote_cmd "/mnt6/$active/kpf /mnt6/$active/System/Library/Caches/com.apple.kernelcaches/kcache.raw /mnt6/$active/System/Library/Caches/com.apple.kernelcaches/kcache.patched"
    remote_cp root@localhost:/mnt6/$active/System/Library/Caches/com.apple.kernelcaches/kcache.patched work/```

what does this mean 🤔

[lethal gate]

you tell me!!!

[eager briar]

ok nvm that's fine

you said ur using --tweaks right

[lethal gate]

i mean

yea

y

[marsh citrus]

@lethal gate @cold reef @ember rapids @molten epoch Gn

Gn to you too null

I need sleep sorry

:/

[lethal gate]

nini

[lethal gate]

pointlaugh

[eager briar]

well that sucks

[lethal gate]

?

[eager briar]

unrelated... null ramblings...

[lethal gate]

:3

question

could it be saying bad 🧙‍♂️ bcuz of Error connecting to device: No such file or directory

[eager briar]

[lethal gate]

https://tenor.com/view/patrick-star-patrick-spongebob-spongebob-meme-sponge-bob-gif-18332011437791213244

[eager briar]

https://tenor.com/view/kuwaii-kuwaii22-kuwaiitv-tiktok-tiktokph-gif-20118320

[lethal gate]

nope its not

[eager briar]

run the command with zsh +x infront of it so i can see which command it’s failing on pls pls pls

[lethal gate]

unplugged during the 7 loading bars and it went away

still bad wizards

[lethal gate]

bet

who needs kb input,,,

[eager briar]

wait wtf whys it asking for gasted

[lethal gate]

gasted,,,

also idk

i just gasted a nut

?????

[eager briar]

wait you shouldn’t even be seeing that error

those damn space aliens added in gaster check and removed gaster bin 😡

[lethal gate]

whar

kibty

[eager briar]

https://tenor.com/view/green-alien-cat-green-alien-green-cat-alien-gif-721538137659195618

[lethal gate]

REAL

[eager briar]

wait we never got rid of gaster check we just placed the bin which passed the check

but why’s it gone

[lethal gate]

i dont think it was gone at all

[eager briar]

omg it has demetia

[lethal gate]

joe biden,,,

[eager briar]

joera1n and rambiden ok

there’s still the option of doing it manually actually

[lethal gate]

bro

im not against it

[eager briar]

we wont have to do all 1.1k lines that would just be stupid

[lethal gate]

mhm

i mean

sure

[eager briar]

after eliminating all the unnecessary stuff then uh

idk

only 1 way to find out

[lethal gate]

😭

ok

well

isnt making our own sh better

so its not

copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste, copy paste,

[eager briar]

tracing

[lethal gate]

whar

[eager briar]

when we find the problem section we can fafo and maybe fix something

whereas making our own sh is

harder to trace

[lethal gate]

just add a log at every single line

[eager briar]

essentially

[eager briar]

[lethal gate]

nah wait lemmie cook rq

i give up

i didnt cook

[eager briar]

https://tenor.com/view/cryptodads-gif-27215156

ok time to look at palera1n.sh properly kinda

[lethal gate]

:p

[eager briar]

i’ll put stuff here as i go along reading this but to start off

0. im an idiot

gaster doesn’t belong in current working directory
extending on 1 i have a few questions:

• did it ever actually fucking cuz how tf
• “dir” is a misleading name

solution:
mv gaster ./binaries/Darwin/
or
run the gaster script in that directory

what this tells me is that even without that fix something was going right for some reason

2. palera1n.sh has logs
   no clue how useful they are but they exist in, well, /logs

sidenote --debug also exist

[lethal gate]

+ mv kernelcache.release.ipad5b work/kernelcache
+ [[ iPad5,4 == \i\P\h\o\n\e\8* ]]
+ [[ iPad5,4 == \i\P\a\d\6* ]]
+ [[ iPad5,4 == *\i\P\a\d\5* ]]
+ python3 -m pyimg4 im4p extract -i work/kernelcache -o work/kcache.raw --extra work/kpp.bin
Reading work/kernelcache...
[NOTE] Image4 payload data is LZSS compressed, decompressing...
Extracted extra Image4 payload data: to work/kpp.bin.
Extracted Image4 payload data to: work/kcache.raw
+ sleep 1
+ remote_cp work/kcache.raw root@localhost:/mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/System/Library/Caches/com.apple.kernelcaches/
+ /Users/arcane/palera1n/binaries/Darwin/sshpass -p alpine scp -o StrictHostKeyChecking=no -P6413 work/kcache.raw root@localhost:/mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/System/Library/Caches/com.apple.kernelcaches/
+ remote_cmd '/mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/kpf /mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/System/Library/Caches/com.apple.kernelcaches/kcache.raw /mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/System/Library/Caches/com.apple.kernelcaches/kcache.patched'
+ /Users/arcane/palera1n/binaries/Darwin/sshpass -p alpine ssh -o StrictHostKeyChecking=no -p6413 root@localhost '/mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/kpf /mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/System/Library/Caches/com.apple.kernelcaches/kcache.raw /mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/System/Library/Caches/com.apple.kernelcaches/kcache.patched'
Bad magic: 20206d6f
+ _exit_handler
+ '[' Darwin = Darwin ']'
+ killall -CONT AMPDevicesAgent AMPDeviceDiscoveryAgent MobileDeviceUpdater
+ '[' 0 -eq 0 ']'
+ exit

whereever kcache.raw comes from is instead returning a file without its headers/'magic number'

[eager briar]

indeed

kcache.raw comes from kernelcache in work/

[lethal gate]

nodnod

[eager briar]

you should try verifying kernelcache by img4 -i work/kernelcache -d

[lethal gate]

➤ img4 -i work/kernelcache -d 23:16:42
fish: Unknown command: img4
(venv) arcane@arcanes-MacBook-Pro:~/palera1n|legacy⚡*?
➤

[eager briar]

wtf no img4lib?!

[lethal gate]

brew has never heard of it

[eager briar]

compile from source!
https://github.com/xerub/img4lib

[lethal gate]

booo

[eager briar]

(imagine no aur lmao L bozo)

[lethal gate]

real

[lethal gate]

no M1 lmao L bozo)

[eager briar]

but i do have M2

in ipad form

[lethal gate]

stfu

no m1 mac lmao l bozo ratio

https://tenor.com/view/bozo-gif-10892028644071453848

[eager briar]

so uh

make CORECRYPTO=1

[lethal gate]

even more errors

also ew crypto

nfts

https://tenor.com/view/nft-monkey-gif-24311302

[eager briar]

https://tenor.com/view/cryptography-gif-21831425

cryptography.

[lethal gate]

blockchain!!!!

‼️

[eager briar]

define more errors

[eager briar]

ok uh

try common instead

[lethal gate]

????

[eager briar]

make COMMONCRYPTO=1

[lethal gate]

fatal error: 'lzfse.h' file not found

[eager briar]

git submodule init && git submodule update && make -C lzfse

[lethal gate]

clang -o libvfs/vfs_lzfse.o -Wall -W -pedantic -Wno-variadic-macros -Wno-multichar -Wno-four-char-constants -Wno-unused-parameter -O2 -I. -g -DiOS10 -DDER_MULTIBYTE_TAGS=1 -DDER_TAG_SIZE=8 -D__unused="__attribute__((unused))" -Ilzfse/src -DUSE_COMMONCRYPTO -c libvfs/vfs_lzfse.c
In file included from libvfs/vfs_lzfse.c:17:
lzfse/src/lzfse.h:56:43: warning: a function declaration without a prototype is deprecated in all versions of C [-Wstrict-prototypes]
   56 | LZFSE_API size_t lzfse_encode_scratch_size();
      |                                           ^
      |                                            void
lzfse/src/lzfse.h:94:43: warning: a function declaration without a prototype is deprecated in all versions of C [-Wstrict-prototypes]
   94 | LZFSE_API size_t lzfse_decode_scratch_size();
      |                                           ^
      |                                            void
2 warnings generated.
clang -o libvfs/vfs_img4.o -Wall -W -pedantic -Wno-variadic-macros -Wno-multichar -Wno-four-char-constants -Wno-unused-parameter -O2 -I. -g -DiOS10 -DDER_MULTIBYTE_TAGS=1 -DDER_TAG_SIZE=8 -D__unused="__attribute__((unused))" -Ilzfse/src -DUSE_COMMONCRYPTO -c libvfs/vfs_img4.c
ar crus libimg4.a lzss.o libDER/DER_Encode.o libDER/DER_Decode.o libDER/oids.o libvfs/vfs_file.o libvfs/vfs_mem.o libvfs/vfs_sub.o libvfs/vfs_enc.o libvfs/vfs_lzss.o libvfs/vfs_lzfse.o libvfs/vfs_img4.o
gcc -o img4 -g -Llzfse/build/bin img4.o lzss.o libDER/DER_Encode.o libDER/DER_Decode.o libDER/oids.o libvfs/vfs_file.o libvfs/vfs_mem.o libvfs/vfs_sub.o libvfs/vfs_enc.o libvfs/vfs_lzss.o libvfs/vfs_lzfse.o libvfs/vfs_img4.o libimg4.a -llzfse -framework Security -framework CoreFoundation
(venv) arcane@arcanes-MacBook-Pro:~/p/img4lib|master✓
➤```

[eager briar]

this thread is surprisingly short compared to some of my others

[lethal gate]

LMFAO

[lethal gate]

wont be by the end

question right

can we copy the jb shit

wipe it

install 15.7.3, jb, and transplant the jb shit

[eager briar]

i mean that could work

it could also break a bunch of shit

[lethal gate]

like?

[eager briar]

i’ll let xrt explain this

[lethal gate]

they r eeping rn

rember

[eager briar]

also how would you know which files are the jb files

and which ones are system

[lethal gate]

thought youd know

https://media.discordapp.net/stickers/1306861450874191883.gif?size=160&name=wiggle+jiggle

[eager briar]

besides you’ll probably have the same issue

[lethal gate]

i mean

im loosing hope in re-jbing it

lets wipe it and c if .sh works

[eager briar]

deleting the whole work folder and running thr script has a chance of working

[lethal gate]

bet

:3 nyo

36D0579506/kpf /mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/System/Library/Caches/com.apple.kernelcaches/kcache.raw /mnt6/5F52C212F3FDD3BE6B772FD95E646436D0579506/System/Library/Caches/com.apple.kernelcaches/kcache.patched'
Bad magic: 20206d6f

• _exit_handler
• '[' Darwin = Darwin ']'
• killall -CONT AMPDevicesAgent AMPDeviceDiscoveryAgent MobileDeviceUpdater
• '[' 0 -eq 0 ']'
• exit

so

how wipe

[eager briar]

fucking magic number

[eager briar]

boot up sshrd

(dont run yet) dd if=/dev/zero of=/dev/disk bs=4M

[lethal gate]

girlie (i think???) idk wtf that is or how to do that

u cant say dont run yet to me! i gotta have fucking step by step shit

in order

[eager briar]

luckily joera1n has a ramdisk for us
./ramdisk/sshrd.sh boot
./ramdisk/sshrd.sh ssh

[eager briar]

gotta mske sure disk0 is real and not a space alien again

[lethal gate]

WTF ARE YOU SAYING

just

whats cmd 1 to run

[eager briar]

what folder r u in

[lethal gate]

~/palera1n/

also should i leave the 👁️ pad where it is on the palera1n icon or put it in rec

or put in dfu

[eager briar]

put in dfu
cd ramdisk
sudo ./sshrd.sh boot
sudo ./sshrd.sh ssh

[lethal gate]

  sudo ./sshrd.sh boot
  sudo ./sshrd.sh ssh
Password:
<string>:1: DeprecationWarning: 'pkgutil.find_loader' is deprecated and slated for removal in Python 3.14; use importlib.util.find_spec() instead
  import pkgutil; exit(not pkgutil.find_loader("pyimg4"))
usb_timeout: 5
usb_abort_timeout_min: 0
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Stage: RESET
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Stage: SETUP
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Stage: SPRAY
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Stage: PATCH
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Now you can boot untrusted images.
usb_timeout: 5
usb_abort_timeout_min: 0
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
<string>:1: DeprecationWarning: 'pkgutil.find_loader' is deprecated and slated for removal in Python 3.14; use importlib.util.find_spec() instead
  import pkgutil; exit(not pkgutil.find_loader("pyimg4"))
[*] Waiting for device in DFU mode

[eager briar]

does the ipad have nathan on it

[lethal gate]

???

it has the disk icon w the palera1n tear on it

[eager briar]

why must ramra1n be like this

ssh is probably still possible

[lethal gate]

idfk whats happening girlie

[eager briar]

me neither vro

i mean what

[lethal gate]

k wait

[eager briar]

ok try diskramplanerajb or exit and use real sshrd or wait for mineek to lend his wisdom

[lethal gate]

[*] Command ran: ./palera1n.sh --tweaks 15.7.3
palera1n | Version 1.4.2-legacy-4fb51a7
Made with ❤ by Nebula, Mineek, Nathan, llsc12, Ploosh, and Nick Chan

[*] Waiting for devices
[*] Detected ramdisk mode device
[*] Rebooting device in SSH Ramdisk
./palera1n.sh: line 341: 41419 Terminated: 15          "$dir"/iproxy 6413 22 > /dev/null
[*] Waiting for device in recovery mode
^C⏎
(venv) arcane@arcanes-MacBook-Pro:~/palera1n|legacy:zap:*?
➤```

it was in sshrd

[eager briar]

well

sudo ./sshrd.sh ssh

hope it connects

[lethal gate]

well its out of it now

bac at rec screen

i tried it tho

i mean

why not put in dfu like it wants

[eager briar]

it’s supposed to be
dfu -> sshrd
not
dfu -> sshrd -> dfu

recursion

[lethal gate]

<string>:1: DeprecationWarning: 'pkgutil.find_loader' is deprecated and slated for removal in Python 3.14; use importlib.util.find_spec() instead
  import pkgutil; exit(not pkgutil.find_loader("pyimg4"))
usb_timeout: 5
usb_abort_timeout_min: 0
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Stage: RESET
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Stage: SETUP
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Stage: SPRAY
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Stage: PATCH
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Now you can boot untrusted images.
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f
Compiled with plist: YES
Saved IM4M to work/IM4M
Version: 9bfdde2b2456181045f74631683fba491d8bf4f2 - 38
libfragmentzip version: 0.64-aaf6fae83a0aa6f7aae1c94721857076d04a14e8-RELEASE
init pzb:
Error init failed
[-] An error occurred
(venv) arcane@arcanes-MacBook-Pro:~/p/ramdisk|(2cff81b1)⚡?
➤```

wait

wait

hold it

[eager briar]

_ _

[lethal gate]

<string>:1: DeprecationWarning: 'pkgutil.find_loader' is deprecated and slated for removal in Python 3.14; use importlib.util.find_spec() instead
  import pkgutil; exit(not pkgutil.find_loader("pyimg4"))
usb_timeout: 5
usb_abort_timeout_min: 0
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Now you can boot untrusted images.
usb_timeout: 5
usb_abort_timeout_min: 0
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
(venv) arcane@arcanes-MacBook-Pro:~/p/ramdisk|(2cff81b1):zap:?
➤```

[eager briar]

ok good

[lethal gate]

ssh cmd?

[eager briar]

yep

[lethal gate]

➤ sudo ./sshrd.sh ssh 23:59:31
<string>:1: DeprecationWarning: 'pkgutil.find_loader' is deprecated and slated for removal in Python 3.14; use importlib.util.find_spec() instead
import pkgutil; exit(not pkgutil.find_loader("pyimg4"))
[*] Waiting for device in DFU mode

its still at the disk

[eager briar]

it’s supposed to just connect…

then again joera1n is probably using an outdated sshrd ver…

[lethal gate]

still at da disk rn

[eager briar]

wanna try the most recent sshrd?

[lethal gate]

i have no clue what that means

sure

[eager briar]

git clone https://github.com/verygenericname/SSHRD_Script --recursive && cd SSHRD_Script

[lethal gate]

mk

[eager briar]

sudo ./sshrd.sh 15.7
sudo ./sshrd.sh boot
sudo ./sshrd.sh ssh

dfu for the first 2

[lethal gate]

be in dfu?

[eager briar]

yep

[lethal gate]

kk

download succeeded
usb_timeout: 5
usb_abort_timeout_min: 0
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x7001
Found the USB handle.
Now you can boot untrusted images.
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
[-] An error occurred
(venv) arcane@arcanes-MacBook-Pro:~/SSHRD_Script|main✓
➤

[eager briar]

how are you so cursed 😭

[lethal gate]

you fucking tell me

😭

ok so

rember the 0-dildo fucked scale

[eager briar]

terry. davis.

[lethal gate]

i think we are more in the amount of dildos, was ur est?

im saying 10+

[eager briar]

0

in fact

negative some number

[lethal gate]

how

[eager briar]

great question

so anyways

[eager briar]

try sshrd.sh 15.9 or whatever again and hope gaster actually pwns

do you live close to a 5g antenna perchance?

[lethal gate]

uhhh

Neko_Shrug

"disk5" ejected.
none
none

[*] Cleaning up work directory

[*] Finished! Please use ./sshrd.sh boot to boot your device
(venv) arcane@arcanes-MacBook-Pro:~/SSHRD_Script|main✓
➤

[eager briar]

https://tenor.com/view/antenna-radiation-poison-gif-19952875

[lethal gate]

REAL

[eager briar]

ok great

[lethal gate]

do wut it said?

[eager briar]

yes

[lethal gate]

woa

theres a funny lil green man

[eager briar]

before ./sshrd.sh ssh do
sudo ./sshrd.sh dump-blobs

[eager briar]

nathan!

[lethal gate]

Warning: Permanently added '[localhost]:2222' (ECDSA) to the list of known hosts.
16168+216 records in
16375+1 records out
4192148 bytes transferred in 0.572716 secs (7319768 bytes/sec)
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f
Compiled with plist: YES
Found IM4R extracting generator: ok
Saved IM4M to dumped.shsh
./sshrd.sh: line 380: 78606 Terminated: 15          "$oscheck"/iproxy 2222 22 >&/dev/null
[*] Onboard blobs should have dumped to the dumped.shsh file
(venv) arcane@arcanes-MacBook-Pro:~/SSHRD_Script|main:zap:?
➤ ./sshrd.sh ssh                                                                                                                                                      00:10:47```

[eager briar]

perfect

so

you have 2 options

[lethal gate]

oo fun

[eager briar]

copy all the files then zero the nand
or
eliminate all bytes

[lethal gate]

ok

heres da thing

most of wut i want

is just it already being tweaked

is it being retweaked faster or slower than finding every file to copy after the fact?

id say faster

so opt 2 pwease

[eager briar]

aight

so uh

i forgor

oh yea

[lethal gate]

https://tenor.com/view/howtogetrich-how-to-get-rich-quick-i-forgor-i-forgot-gif-22453361

[eager briar]

indexnull_'S INSTRUCTIONS ARE PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE INSTRUCTIONS.

(this is also your opportunity to have any second thoughts or regrets)

[lethal gate]

nah its gud

i trust

[eager briar]

dd if=/dev/zero of=/dev/disk0 bs=4M

[lethal gate]

wont wipe my macbook yea? 😭

[eager briar]

make sure ur doing it in the ssh terminal 🙃

[lethal gate]

dd if=/dev/zero of=/dev/disk0 bs=4M
tee: logs/00:19:08-2024-12-21-Darwin-24.1.0.log: Permission denied
Warning: Permanently added '[localhost]:2222' (ECDSA) to the list of known hosts.
localhost:~ root#```

‼️

it said smth ‼️

[eager briar]

ah right sudo

default pass is alpine i think

[lethal gate]

w h a t

-sh: sudo: command not found

Trolled

[eager briar]

whar

wait a sec

im not gonna say what happened, try it again

[lethal gate]

-sh: sudo: command not found

[lethal gate]

say

[eager briar]

without sudo

[lethal gate]

dd: bs: illegal numeric value

ILLEGAL

[eager briar]

oh my days

[lethal gate]

👮‍♂️ FoxyJail

bro tried to jailbreak we getting JAILED

[eager briar]

why is 4 illegal

try 1

[lethal gate]

ILLEGAL

FoxyJail

[eager briar]

try 4096 with no m

[lethal gate]

still no response

[eager briar]

it’s probably doing something then

[lethal gate]

idek how big the storage on this bish is

dumb idea

[eager briar]

4 kilobytes at a time is insane

[lethal gate]

WAH??

[eager briar]

soon enough the ipad will reveal its true colors as an evil space alien

[lethal gate]

real

using an ipad as a storage device to run macos nd use the clickbaity half lying title "RUNNING MACOS ON A IPAD!!!!!!!!"

[eager briar]

@bright bay would patched restored_external allow for ssv brick bypass no null bytes

[verbal cloak]

this is the most insane support post I've seen wtf is this support

[lethal gate]

air 1 status is ????
air 2 status is: wiping the nand byte for byte cuz palera1n.sh shat its pants

[eager briar]

oh wait you do use palera1n.sh on ios 12 too

maybe that’s why this happened

[lethal gate]

whar

we redownloaded palera1n tho

[eager briar]

this isn’t the worst one 😓

[lethal gate]

yikes,,

[eager briar]

clearly the evil ios 12 aliens don’t care

[lethal gate]

real

i blame them dropping .sh support and switching to a shittier version based on shitty core (rootless)

still not done btw

[eager briar]

but

[lethal gate]

while we wait

explain how rootless > rootful

[eager briar]

you have to consider that rootless is just better for most people

[lethal gate]

how,,,

isnt the point of a jailbreak to get root access

[eager briar]

define root

[lethal gate]

i mean

can modify /

and has sudo access to everything

aka

root access

[eager briar]

eh

still

[eager briar]

most people don’t want a tethered device or a large storage penalty

[lethal gate]

i go by this definition

i doubt making semi-tethered rootful isnt possible

bet it exists

[eager briar]

it exists

but

[lethal gate]

exactly so

[eager briar]

storage penalty

[lethal gate]

i mean

sucks to suck

[eager briar]

bindfs is like 2 - 5G and fakefs easily 10G+

[lethal gate]

delete genshin impact or smth

[eager briar]

no.

[lethal gate]

shits like 10 gigs

thats most of it right there

[eager briar]

28.1 which is surprisingly small

[lethal gate]

yea just delete genshin

youll gain storage and prolly a life

[eager briar]

but then how will i

[lethal gate]

rawr on discord

rawrrr

rawr,,!!!

[eager briar]

welp this’ll take anywhere from 4.4 to 35.6 hours

how about that air 1

[lethal gate]

WHAT

uhm

well

can i unplug da air 2?

well

dis is my only cable

so who knows its batt

ik its batt is shit

[eager briar]

prolly not

[lethal gate]

so why u asking about the air 1???

[eager briar]

https://tenor.com/view/clash-of-clans-build-air-coc-build-air-build-clash-of-clans-gif-13632920852505155443

[lethal gate]

real,,,

also 🇱 game frfr

[eager briar]

nahh

i love clash of clans

-# you didn’t see anything

[lethal gate]

YOU LOVE COC!!!

real

[lethal gate]

@eager briar @eager briar @eager briar @eager briar @eager briar @eager briar @eager briar @eager briar

ITS DUN

i uh, i now accidentally unplugged it but i mean it finished

dd if=/dev/zero of=/dev/disk0 bs=4M
tee: logs/00:19:08-2024-12-21-Darwin-24.1.0.log: Permission denied
Warning: Permanently added '[localhost]:2222' (ECDSA) to the list of known hosts.
localhost:~ root# sudo dd if=/dev/zero of=/dev/disk0 bs=4M
-sh: sudo: command not found
localhost:~ root# sudo dd if=/dev/zero of=/dev/disk0 bs=4M
-sh: sudo: command not found
localhost:~ root# dd if=/dev/zero of=/dev/disk0 bs=4M
dd: bs: illegal numeric value
localhost:~ root# dd if=/dev/zero of=/dev/disk0 bs=1M
dd: bs: illegal numeric value
localhost:~ root# dd if=/dev/zero of=/dev/disk0 bs=4096
dd: /dev/disk0: end of device
7812501+0 records in
7812500+0 records out
32000000000 bytes transferred in 3192.563930 secs (10023292 bytes/sec)
localhost:~ root# Connection to localhost closed by remote host.
Connection to localhost closed.
./sshrd.sh: line 380: 97664 Terminated: 15          "$oscheck"/iproxy 2222 22 >&/dev/null
(venv) arcane@arcanes-MacBook-Pro:~/SSHRD_Script|main⚡?
➤ ./sshrd.sh ssh                                                                                                                                                      01:28:04
meow
tee: logs/01:28:32-2024-12-21-Darwin-24.1.0.log: Permission denied
Connection closed by ::1 port 2222
./sshrd.sh: line 380: 55426 Terminated: 15          "$oscheck"/iproxy 2222 22 >&/dev/null
(venv) arcane@arcanes-MacBook-Pro:~/SSHRD_Script|main⚡?
➤```

[eager briar]

[lethal gate]

im smartnt

whats step 3

[eager briar]

2 options again

[lethal gate]

:o?

[eager briar]

restore back to 15.7.3 or go to 15.8.3

[lethal gate]

assuming this isnt some magic way to downgrade ya?

cant go to like

14?

[eager briar]

do you have blobs?

[lethal gate]

nu

[eager briar]

there’s your answer

[lethal gate]

assumed

uhhhhh

.7.3 pwease

[eager briar]

actually

[lethal gate]

:O

?

[eager briar]

you use tethered devices don’t you

[lethal gate]

mhm

i mean my 6s is dopeamine, but besides that idgaf

[eager briar]

well you can downgrade to 14 if you’re willing to stay tethered

[lethal gate]

i mean can i use this bitch wish ios 8

:3

wut it shipped w)

and dualboot cuz ik thats smth that exists

[eager briar]

seprmvr64

[lethal gate]

im guessing thats a yes!

[eager briar]

take a look and see https://github.com/mineek/seprmvr64/tree/v2

(ios 14 downgrade is way better)

[lethal gate]

WHAT

whats the oldest ios thats not

shit???

[eager briar]

14

[lethal gate]

that i can dualboot

thats like nothing tho!!

[eager briar]

oh well

deal with it

[lethal gate]

hmmmmmmmmmmm

just 14

no dualboot

WAIT

nvm :3

ya gimmie 14 pwease :3