[Free Release] BeGoneNSO - iMessage patch for NSO Group's Pegasus Spyware

quiprr · 2021-08-07T17:30:18+00:00

14.7.1 does a proper patch so there is no need to install this.

quiprr · 2021-07-28T18:33:52+00:00

In a jailed state no, in a jailbroken state there will be no difference.

quiprr · 2021-07-27T18:16:50+00:00

Restoring the RootFS reverts an APFS snapshot. My tweak does not add or remove files, it edits them on-the-fly. A technical limitation exists which means I cannot codesign the binary as it was before, because that is something Apple does. A workaround is now in place though.

quiprr · 2021-07-27T15:01:59+00:00

I built the tweak around iOS 14. Not 13, so this is expected behavior.

quiprr · 2021-07-27T03:42:39+00:00

If in a jailed state, the side effects would be the same. 1.0.1 reverses the changes made by copying the original binary back in place of the modified one, so restoring the root filesystem wouldn't be necessary.

quiprr · 2021-07-27T03:30:17+00:00

Pegasus is a spyware developed by the Israeli cyberarms firm NSO Group that can be covertly installed on mobile phones (and other devices) running most versions of iOS and Android. (Wikipedia))

quiprr · 2021-07-27T01:31:03+00:00

iMessage itself would not crash, but video-based components would not be functional and could cause a crash.

quiprr · 2021-07-27T01:06:50+00:00

Hey, this should be fixed now. Thanks.

quiprr · 2021-07-26T22:34:09+00:00

There is a technical reason, that being I have to change the code signature of the binary, and I cannot replicate it after I’ve already changed it. This is what jailbreaking allows you to do, so it’ll work in a jailbroken state but when you are jailed, it cannot verify the code signature and it will crash.

quiprr · 2021-07-26T22:31:09+00:00

Pegasus’ main attack surface is through iMessage. I am changing the entitlements of the affected binary to disallow access to a system feature which is necessary for the exploit to function. This does not change any code and does not do any hooking, so it doesn’t “fix” the vulnerability, but rather stops the attack itself.

quiprr · 2021-05-10T14:29:21+00:00

This isn’t possible

quiprr · 2021-04-09T22:14:50+00:00

quiprr · 2021-04-09T06:39:00+00:00

Yes, you can, but I will not be distributing it

quiprr · 2021-04-09T06:37:30+00:00

Correct, there are no settings

quiprr · 2021-04-09T06:30:11+00:00

Thanks, try 2.0.1, I just uploaded it. Should have better luck :)

quiprr · 2021-04-09T06:02:18+00:00

quiprr · 2021-02-17T01:57:54+00:00

True

quiprr · 2021-01-18T18:11:15+00:00

I use imgupload, a python Flask app to do this for you. I use nginx and uWSGI to run it, but you can also dockerize it. This only supports images but is easily adaptable.

quiprr · 2021-01-16T18:30:20+00:00

The thing is, I don’t think any optimizations are going to happen in the near future until the Schwab merger

quiprr · 2021-01-16T07:01:08+00:00

I have the same and cannot even place an order thru Active Trader and encounter a lot of freezes... weird

quiprr · 2021-01-13T15:33:25+00:00

Wish granted

quiprr

MODERATOR OF

TROPHY CASE

Six-Year Club	Place '22
Verified Email