Giter VIP home page Giter VIP logo

Comments (27)

bob-2017 avatar bob-2017 commented on July 18, 2024 3

@jakeajames When I make stuff in c++ and i import the headers, IT IMPORTS. When I do the same in python with librarys, IT IMPORTS. When I do it in swift with frameworks, IT IMPORTS. Now, with objective-C, I am not saying that I am amazing at it but I have got a decent knowledge and I can learn fast. If I made a mistake, THEN SO BE IT. I am a human, and humans make mistakes. And I do know what an untether is, it is when a jailbroken device can power off and on at will without losing the jailbreak. This bit here:

struct load_command* lc = vmk+1;
    for (int k=0; k < vmk->ncmds; k++) {
        
        if (lc->cmd == LC_SEGMENT_64) {
            struct segment_command_64* sg = lc;
            NSLog(@"seg: %s", sg->segname);
            if (sg->vmaddr < min) {
                min = sg->vmaddr;
            }
            if (sg->vmaddr + sg->vmsize > max) {
                max = sg->vmaddr+sg->vmsize;
            }
        }
        
        lc = ((char*)lc) + lc->cmdsize;
    }
    
    NSLog(@"%llx - %llx", min, max);
    
    char* kdump = malloc(max-min);

Is the bit that creates the pointers, isn't it?
The malloc(max-min) at the end allocates the pointers between the maximum and minimum memory addresses (i.e. between 0x00000 and 0x0F67A).
So don't say that I don't know what I am talking about because I do have a decent knowledge about it

from yalu102.

jakeajames avatar jakeajames commented on July 18, 2024 1

@uspasojevic96 not talking about you, but about the bob guy

from yalu102.

P0siti0n45 avatar P0siti0n45 commented on July 18, 2024

@bob-2017 just use the precompiled ipas

from yalu102.

bob-2017 avatar bob-2017 commented on July 18, 2024

@P0siti0n45 I am trying to modify and tweak the jailbreak so the precompiled IPA isn't going to be of much use

from yalu102.

P0siti0n45 avatar P0siti0n45 commented on July 18, 2024

@bob-2017 What exactly are you trying to do?

from yalu102.

bob-2017 avatar bob-2017 commented on July 18, 2024

Attempting (Take note of the operative word "attempting") to make it fully untethered.

from yalu102.

endercypher avatar endercypher commented on July 18, 2024

Will you release it if you make it untethered?

from yalu102.

bob-2017 avatar bob-2017 commented on July 18, 2024

Yes but that is only if

from yalu102.

bob-2017 avatar bob-2017 commented on July 18, 2024

And I should also mention that I did have trouble when importing IOKit I had trouble so I just dragged the folder (Not a .framework) into the frameworks folder of xcode

from yalu102.

bob-2017 avatar bob-2017 commented on July 18, 2024

If it helps anyone, here is my copy of it:

Yalu102.zip

from yalu102.

uspasojevic96 avatar uspasojevic96 commented on July 18, 2024

I'll send you mine, you will need to change paths probably but it compiles

from yalu102.

endercypher avatar endercypher commented on July 18, 2024

Anything new @bob-2017 @uspasojevic96 let me know as soon as possible also @uspasojevic96 is yours a untethered as then fully untethered version of Yalu102?

from yalu102.

jakeajames avatar jakeajames commented on July 18, 2024

Untethering doesn't work like that. You make a Cydia package that pre-patches the kernel and runs the exploit on each boot

from yalu102.

bob-2017 avatar bob-2017 commented on July 18, 2024

Hello @uspasojevic96 , sorry for the late response, i got a bit caught up in life. If you could send me your copy that would be GREAT.
Thanks

from yalu102.

endercypher avatar endercypher commented on July 18, 2024

Hey so @bob-2017 do you have something like a bootrom exploit to patch the Kernel upon boot?

from yalu102.

endercypher avatar endercypher commented on July 18, 2024

Also @uspaojevic96 would you please send us your copy of Yalu102 and the source code and compiled IPA and is it a fully untethered? Even if it's not I'd still like to have it to look at please and use thanks!

from yalu102.

uspasojevic96 avatar uspasojevic96 commented on July 18, 2024

Sure mate, i was busy with college, i will when i get home

from yalu102.

endercypher avatar endercypher commented on July 18, 2024

@uspasojevic96 is your source code and your Yalu version Untethered?

from yalu102.

uspasojevic96 avatar uspasojevic96 commented on July 18, 2024

No, there us no way to nuke kernel in that way atm

from yalu102.

jakeajames avatar jakeajames commented on July 18, 2024

@bob-2017 @uspasojevic96 @king4q No one here has an idea of what they're talking about. You, the bob guy, if you can't add headers to a project you clearly don't even know what an untether is. And just so you know you don't have to modify (or "tweak") the application for an untether. You clearly have no idea of what your talking about

from yalu102.

uspasojevic96 avatar uspasojevic96 commented on July 18, 2024

I know what am i talking about, there needs to be exploit that can be ran during boot, meaning that there needs to be some sort of injection into kernel when its jailbroken, but that is impossible due to Apple having enhanced protection for kernelspace, the way this exploit works is by manipulating hanging pointer bug until you have enough hanging pointers from IPC, the offsets are needed so it can be decided where they start

from yalu102.

KILLCAMPER avatar KILLCAMPER commented on July 18, 2024

@bob-2017 keep up the good work hope you do this and make it more stable for Air 2 users and iPad mini 4 users

from yalu102.

bob-2017 avatar bob-2017 commented on July 18, 2024

@KILLCAMPER thanks for the support :D 👍 😄

from yalu102.

bob-2017 avatar bob-2017 commented on July 18, 2024

Also @uspasojevic96 , can you please send me your copy ASAP. thanks :D 😃

from yalu102.

Sam1370 avatar Sam1370 commented on July 18, 2024

Any way I can get a copy of that copy, I'm getting the linker error too @bob-2017 @uspasojevic96

from yalu102.

bob-2017 avatar bob-2017 commented on July 18, 2024

@uspasojevic96 please share your copy of it.

from yalu102.

bob-2017 avatar bob-2017 commented on July 18, 2024

Oh and also seeing that Ian beer made that exploit, everything should be much easier

from yalu102.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.