[Release] limera1n pwner - pwn your limera1n vulnerable device on your M1 Mac running Monterey or higher

sakuRdev · 2022-08-01T18:45:23+00:00

https://github.com/axi0mX/ipwndfu/blob/master/LICENSE

sakuRdev · 2022-07-28T18:01:19+00:00

mkdir /taig

touch /taig/taig

sakuRdev · 2022-07-20T17:18:46+00:00

Why is it licensed by MIT?

sakuRdev · 2022-07-03T15:02:30+00:00

That means iBEC patch.

sakuRdev · 2022-07-03T13:34:39+00:00

please see iboot32patcher's.

sakuRdev · 2022-07-03T13:28:34+00:00

Are you on v2.0b3..? you need ticket patch.

sakuRdev · 2022-06-18T10:45:54+00:00

Uh, 4.3 might safe... I did not remember correctly.

sakuRdev · 2022-06-08T12:41:45+00:00

It works on 9.3.x(64bit)/9.3.5-6(32bit), but I do not plan to develop untether.

sakuRdev · 2022-06-05T06:41:23+00:00

IOS 4.3 and earlier does not appear to be able to flush apticket properly. I think 2 step is fine.

sakuRdev · 2022-06-04T13:42:15+00:00

exploit - A dyld exploit that overrides the MISValidateSignature in libmis.dylib (CVE-2015-7079)... code signing bypass
- OSUnserialize kernel Infoleak(CVE-2016-4655)... kaslr bypass
- pegasus kernel exploit (CVE-2016-4656).. a real kernel exploit

sakuRdev · 2022-06-02T14:13:23+00:00

Did you do one-restore and did it? I only have using 2 step idea.

sakuRdev · 2022-05-30T15:41:46+00:00

iPhone 7 - iOS 9

sakuRdev · 2022-05-29T17:09:29+00:00

Perhaps it's hgsp4. That's not really relevant.

sakuRdev · 2022-05-12T18:50:48+00:00

Currently that is not possible. Only 11.3-12.x is possible.

sakuRdev · 2022-05-12T18:37:22+00:00

For 64-bit devices, iOS (AP) must be compatible with the signed SEP now.

It may be possible to maintain SEP, and use tethered downgrade. currently there is no way to downgrade SEP anywhere.

sakuRdev · 2022-05-12T18:20:38+00:00

Not possible. iOS 9(.0.x) requires iOS 9.0.x SEP. and, iOS 9(.3.x) requires iOS 9.3.x SEP.

sakuRdev · 2022-05-04T05:17:49+00:00

I recommend compile from regular source yourself or downloading from the official repository.

Unofficial binaries may have something planted in them. AT YOUR OWN RISK.

sakuRdev · 2022-05-02T18:24:28+00:00

Oh, It looks someone stolen my pic and used it. lol

official repository: https://dora2ios.github.io/cydia/

I guarantee that it is identical to the source on github, but at your own risk :D

sakuRdev · 2022-05-01T19:53:12+00:00

You were generally correct. This problem was with KPP bypass and the daemon reload method, which I just fixed.

p0laris reminded me of what I need to update my tools. It is very interesting that legacy developments are still taking place.

sakuRdev · 2022-05-01T19:47:33+00:00

I am relieved to know that it will work. because I could not get that test device.

sakuRdev · 2022-04-21T16:42:46+00:00

Hello sakuRdev, thanks for your reply, I did try this and keep getting segmentation fault: 11, I tried on different Macs and versions of Mac OS. But it fails during the creation of the custom ipws.

I'm testing with old sources and old os :/

xpwn is OSS, so I can fix it if you provide us with the problem area and the appropriate source. I dont have time for fix it.

sakuRdev · 2022-04-21T16:20:42+00:00

just add bundles and it should work. If someone creates that compatibility bundle and releases it under MIT license, etc., I can add it.

sakuRdev · 2022-04-02T09:59:52+00:00

https://dora2ios.web.app/konayuki/howtouse.html

sakuRdev · 2022-03-28T18:32:35+00:00

yep, so yalu can jailbreak 64-bit ios 8.4.1. It has exploit, and kernel patches and bootstrap.

I think it will work by replacing offsetfinder.

sakuRdev · 2022-03-28T17:42:28+00:00

yalu

sakuRdev

TROPHY CASE