search

34306 / schemeshare

a PoC that maybe an exploit that can read and export all system file from iOS 16.0 to 18.2 beta 1. Got patched on iOS 18.2 beta 2
75 stars 8 forks source link

iOS 16.1 File export failed #1

Open idonen opened 2 weeks ago

idonen commented 2 weeks ago

Tested input address /var/mobile/Library/AddressBook/AddressBook.sqlitedb, can read the file size, but when I click "Save to Files" or "AirDrop," it fails. I also tested /System/Library/Fonts/AppFonts/LockClock.ttf and /var/mobile/Library/SMS/sms.db, but they also didn't work.

34306 commented 2 weeks ago

it seems that the file with root owner cannot airdrop because of the share sheet is not sandbox.

idonen commented 2 weeks ago

it seems that the file with root owner cannot airdrop because of the share sheet is not sandbox.

Is there any way to export the root owner file?