Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nvram boot-nonce patch, more elegant offset loading #11

Open
wants to merge 4 commits into
base: master
Choose a base branch
from

Conversation

arx8x
Copy link

@arx8x arx8x commented Dec 21, 2017

pls read, senpai

  • changes the button to say 'go', since we're not just running the sploit anymore
  • use sysctl calls to get hw identifier and current build id
  • organized device, build id blocks to add offset for every possible device that has 10.3 - 10.3.3(more will be added in the next commit)
  • log test offset, device identifier, build id, kern version to console so that you can actually check if it loads the offset
  • fixed a condition check in offset loading
  • changed some return values and comparisons to match C standards
  • removed comparisons using Foundation objects for identifying device + buildid combinations (replaced with C string for consistency. We're now using NSObjects only in viewController stuff)

Patches the nvram variable 'com.apple.System.boot-nonce' to enable users to set generator.
note : this has to be done as part of the exploit as we have both kernel task and kernel base address. Getting these in a different tool is not that easy. Requires getting tfp0 and kernel base address. We will be compelled to do this in future.

Accept this one after you accept #10

@PsychoTea
Copy link
Owner

I assume you have verified everything to work correctly, without any issues? :)

@arx8x
Copy link
Author

arx8x commented Dec 21, 2017

On an iPhone 6s 10.3.2, yes. Remounting / failed because it lacked the offset. iPhone 7 should succeed if it did before. Try though

@talanov
Copy link

talanov commented Dec 21, 2017

@PsychoTea don't forget to merge #10 first 👍
Here everything works OK.

@talanov
Copy link

talanov commented Dec 22, 2017

@PsychoTea
There's not much tbd to remove conflicts.
I guess, only conflicts to dismiss for you are in storyboard.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants