search

MatthewPierson / PyBoot

Tool for tether booting Checkm8 vulnerable iOS devices
GNU Lesser General Public License v3.0
285 stars 52 forks source link

subprocess.Popen object at 0x1098ef950 #10

Closed czqn8 closed 4 years ago

czqn8 commented 4 years ago
czqn8 commented 4 years ago

PyBoot - A tool for tether booting Checkm8 vulnerable iOS devices by Matty, @mosk_i

Current version is: Beta 0.1 Make sure your device is connected in DFU mode Checking theiphonewiki for 12.3.1 keys... Found Keys! Getting SHSH for signing images Downloading and patching 12.3.1's iBSS/iBEC Firmware/dfu/iBEC.d10.RELEASE.im4p extracted to resources/ibec.im4p Firmware/dfu/iBSS.d10.RELEASE.im4p extracted to resources/ibss.im4p Downloading 13.2.3's BuildManifest.plist Extracting: BuildManifest.plist, from iPhone_4.7_P3_13.2.3_17B111_Restore.ipsw Downloading 13.2.3's KernelCache Extracting: kernelcache.release.iphone9, from iPhone_4.7_P3_13.2.3_17B111_Restore.ipsw Downloading 13.2.3's DeviceTree Extracting: Firmware/all_flash/DeviceTree.d10ap.im4p, from iPhone_4.7_P3_13.2.3_17B111_Restore.ipsw Downloading 13.2.3's TrustCache Extracting: Firmware/048-90538-106.dmg.trustcache, from iPhone_4.7_P3_13.2.3_17B111_Restore.ipsw Patching Kernel's type from krnl to rkrn Patching TrustCache's type from trst to rtsc Patching Devicetree's type from dtre to rdtr Signing boot files Signing boot files dyld: Library not loaded: /usr/local/opt/openssl/lib/libcrypto.1.0.0.dylib Referenced from: /Users/alan/PyBoot/./resources/bin/img4toolkernel Reason: image not found Exploiting device with checkm8 checkm8 exploit by axi0mX modified version by Linus Henze s5l8965x support by Matthew Pierson Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0C ECID:0010594E3A910026 IBFL:3C SRTG:[iBoot-2696.0.0.1.33] Device is now in pwned DFU Mode. (1.50 seconds)

Exploit worked! <subprocess.Popen object at 0x110d28c50> SecureROM Signature check remover by Linus Henze Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0C ECID:0010594E3A910026 IBFL:3C SRTG:[iBoot-2696.0.0.1.33] PWND:[checkm8] Applying patches... Successfully applied patches Resetting device state

MatthewPierson commented 4 years ago

What device is this?

czqn8 commented 4 years ago

iPhone 7

MatthewPierson commented 4 years ago

I know what the issue is, will have something for you to try later today hopefully that should fix it. If I forget then just reply here and @ me

narcyzzo commented 4 years ago

@MatthewPierson bruh i added iPhone 6+ 11.4.1 firmware keys to iphonewiki, u say u unlock script when i do this? why u you missed it? https://www.theiphonewiki.com/wiki/Gebze_15G77_(iPhone7,1) https://github.com/MatthewPierson/PyBoot/issues/5

MatthewPierson commented 4 years ago

@narcyzzo I have been busy with university work, have removed the block in the latest commit so please give it a go now

narcyzzo commented 4 years ago

@MatthewPierson hi dude, any progress on tether booting A11? it will be possible to dualboot iPhone 8 ? your new tool support these devices?

MatthewPierson commented 4 years ago

A11 support is out of my hands. Kairos needs to be updated to work with A11 devices, which the author is currently working on, so once that has been done I will add A11 support.