MatthewPierson / Ramiel

An open-source, multipurpose macOS GUI utility for checkm8-vulnerable iOS/iPadOS devices
GNU General Public License v3.0
172 stars 27 forks source link

Failed to dump shsh. macOS Catalina. Log Attached. #105

Open ChazzaH014 opened 1 year ago

ChazzaH014 commented 1 year ago

I haven't been able to get Ramiel to dump my shsh. it appears to go wrong when it cannot find kernel.pwn. hidutil seems to fail too. what can I do to help resolve these errors? This is on an iPhone 8 (Global), the base os is 14.7.1 being dual booted to 16.0.2

2022-12-13 18:45:28.929 Ramiel[21994:77735] 49 2022-12-13 18:45:28.929 Ramiel[21994:77735] 17 2022-12-13 18:45:29.019 Ramiel[21994:77735] This application is trying to draw a very large combo box, 31 points tall. Vertically resizable combo boxes are not supported, but it happens that 10.4 and previous drew something that looked kind of sort of okay. The art in 10.5 does not break up in a way that supports that drawing. This application should be revised to stop using large combo boxes. This warning will appear once per app launch. 2022-12-13 18:45:43.759 Ramiel[21994:77788] Waiting 2022-12-13 18:45:45.763 Ramiel[21994:77788] Waiting 2022-12-13 18:45:47.766 Ramiel[21994:77788] Waiting 2022-12-13 18:45:49.766 Ramiel[21994:77788] Waiting 2022-12-13 18:45:51.766 Ramiel[21994:77788] Waiting 2022-12-13 18:45:53.767 Ramiel[21994:77788] Waiting 2022-12-13 18:45:55.769 Ramiel[21994:77788] Waiting 2022-12-13 18:45:57.773 Ramiel[21994:77788] Waiting 2022-12-13 18:45:59.774 Ramiel[21994:77788] Waiting 2022-12-13 18:46:01.777 Ramiel[21994:77788] Waiting 2022-12-13 18:46:03.777 Ramiel[21994:77788] Waiting 2022-12-13 18:46:05.781 Ramiel[21994:77788] Waiting 2022-12-13 18:46:07.783 Ramiel[21994:77788] Waiting 2022-12-13 18:46:09.786 Ramiel[21994:77788] Waiting 2022-12-13 18:46:11.787 Ramiel[21994:77788] Waiting 2022-12-13 18:46:13.787 Ramiel[21994:77788] Waiting 2022-12-13 18:46:15.787 Ramiel[21994:77788] Waiting 2022-12-13 18:46:17.787 Ramiel[21994:77788] Waiting 2022-12-13 18:46:19.789 Ramiel[21994:77788] Waiting 2022-12-13 18:46:21.791 Ramiel[21994:77788] Waiting 2022-12-13 18:46:23.793 Ramiel[21994:77788] Waiting 2022-12-13 18:46:42.778 Ramiel[21994:77788] Waiting 2022-12-13 18:46:44.782 Ramiel[21994:77788] Waiting 2022-12-13 18:46:46.784 Ramiel[21994:77788] Waiting 2022-12-13 18:46:48.787 Ramiel[21994:77788] Waiting 2022-12-13 18:46:50.789 Ramiel[21994:77788] Waiting hdiutil: resize: failed. Invalid argument (22) hdiutil: attach failed - no mountable file systems /Applications/Ramiel.app/Contents/Resources/ssh/gtar: ._bin: Cannot open: File exists /Applications/Ramiel.app/Contents/Resources/ssh/gtar: ._private: Cannot open: File exists /Applications/Ramiel.app/Contents/Resources/ssh/gtar: ._usr: Cannot open: File exists /Applications/Ramiel.app/Contents/Resources/ssh/gtar: Exiting with failure status due to previous errors ldid.cpp(3004): _assert(): errno=2 ldid.cpp(3004): _assert(): errno=2 ldid.cpp(705): _assert(): Swap(machheader->filetype) == MH_EXECUTE || Swap(machheader->filetype) == MH_DYLIB || Swap(machheader->filetype) == MH_BUNDLE ldid.cpp(693): _assert(): false hdiutil: detach failed - No such file or directory [+] Patching /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibss.raw [+] Base address: 0x18001c000 [+] Does have kernel load [+] Patching boot-args... [+] Image base address at 0x18001c000 [+] Found boot-arg string at 0x7a144 [+] Relocating from 0x180035e1c... [+] Found boot-arg xref at 0x180035eac [+] Pointing boot-arg xref to large string at: 0x180050230 [+] Enabling kernel debug... [+] Found debug-enabled string at 0x79b98 [+] Found debug-enabled xref at 0x188a4 [+] Found second bl after debug-enabled xref at 0x188b8 [+] Wrote MOVZ X0, #1 to 0x1800348b8 [+] Enabled kernel debug [+] Unlocking nvram... [+] Found debug-uarts string at 0x18009376e [+] Found debug-uarts reference at 0x72ad0 [+] setenv whitelist begins at 0x72ac0 [+] Found ref to setenv whitelist at 0x2220 [+] Forcing sub_18001e204 to return immediately [+] Found env whitelist at 0x72ae8 [+] Found ref to env whitelist at 0x2274 [+] Forcing sub_18001e25c to return immediately [+] Found "com.apple.System." string at 0x1800978b1 [+] Found reference to "com.apple.System." at 0x46380 [+] Forcing sub_180062378 to return immediately [+] Patching out RSA signature check... [+] Found IMG4 string at 0x7997c [+] Found IMG4 xref at 0x16450 [+] Found beginning of _image4_get_partial at 0x163a4 [+] Found xref to _image4_get_partial at 0x16e1c [+] Found start of sub_180032d48 [+] Found ADR X2, 0x18008fcc0 at 0x17378 [+] Call to sub_1668c [+] Did MOV r0, #0 and RET [+] Wrote patched image to /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibss.pwn [+] Patching /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibec.raw [+] Base address: 0x18001c000 [+] Does have kernel load [+] Patching boot-args... [+] Image base address at 0x18001c000 [+] Found boot-arg string at 0x7a144 [+] Relocating from 0x180035e1c... [+] Found boot-arg xref at 0x180035eac [+] Pointing boot-arg xref to large string at: 0x180050230 [+] Enabling kernel debug... [+] Found debug-enabled string at 0x79b98 [+] Found debug-enabled xref at 0x188a4 [+] Found second bl after debug-enabled xref at 0x188b8 [+] Wrote MOVZ X0, #1 to 0x1800348b8 [+] Enabled kernel debug [+] Unlocking nvram... [+] Found debug-uarts string at 0x18009376e [+] Found debug-uarts reference at 0x72ad0 [+] setenv whitelist begins at 0x72ac0 [+] Found ref to setenv whitelist at 0x2220 [+] Forcing sub_18001e204 to return immediately [+] Found env whitelist at 0x72ae8 [+] Found ref to env whitelist at 0x2274 [+] Forcing sub_18001e25c to return immediately [+] Found "com.apple.System." string at 0x1800978b1 [+] Found reference to "com.apple.System." at 0x46380 [+] Forcing sub_180062378 to return immediately [+] Patching out RSA signature check... [+] Found IMG4 string at 0x7997c [+] Found IMG4 xref at 0x16450 [+] Found beginning of _image4_get_partial at 0x163a4 [+] Found xref to _image4_get_partial at 0x16e1c [+] Found start of sub_180032d48 [+] Found ADR X2, 0x18008fcc0 at 0x17378 [+] Call to sub_1668c [+] Did MOV r0, #0 and RET [+] Wrote patched image to /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibec.pwn Traceback (most recent call last): File "/Applications/Ramiel.app/Contents/Resources/ssh/compare.py", line 15, in patched = open(args[2], "rb").read() FileNotFoundError: [Errno 2] No such file or directory: '/Applications/Ramiel.app/Contents/Resources/RamielFiles/kernel.pwn' [e] cannot read '/Applications/Ramiel.app/Contents/Resources/kc.bpatch' [e] cannot apply patch 2022-12-13 18:47:14.214 Ramiel[21994:77788] Waiting 2022-12-13 18:47:16.216 Ramiel[21994:77788] Waiting 2022-12-13 18:47:18.218 Ramiel[21994:77788] Waiting 2022-12-13 18:47:20.220 Ramiel[21994:77788] Waiting 2022-12-13 18:47:22.223 Ramiel[21994:77788] Waiting 2022-12-13 18:47:24.225 Ramiel[21994:77788] Waiting 2022-12-13 18:47:26.227 Ramiel[21994:77788] Waiting 2022-12-13 18:47:28.229 Ramiel[21994:77788] Waiting 2022-12-13 18:47:30.231 Ramiel[21994:77788] Waiting 2022-12-13 18:47:32.233 Ramiel[21994:77788] Waiting 2022-12-13 18:47:34.233 Ramiel[21994:77788] Waiting 2022-12-13 18:47:36.237 Ramiel[21994:77788] Waiting 2022-12-13 18:47:38.240 Ramiel[21994:77788] Waiting 2022-12-13 18:47:40.240 Ramiel[21994:77788] Waiting 2022-12-13 18:47:42.240 Ramiel[21994:77788] Waiting 2022-12-13 18:47:44.240 Ramiel[21994:77788] Waiting 2022-12-13 18:47:46.241 Ramiel[21994:77788] Waiting 2022-12-13 18:47:48.242 Ramiel[21994:77788] Waiting 2022-12-13 18:47:50.244 Ramiel[21994:77788] Waiting 2022-12-13 18:47:52.246 Ramiel[21994:77788] Waiting 2022-12-13 18:47:54.248 Ramiel[21994:77788] Waiting 2022-12-13 18:47:54.799 Ramiel[21994:77735] Booted device successfully! Creating listening port 2222 for device port 44 bind(): Address already in use Error creating socket for listen port 2222: Address already in use Exception (client): Error reading SSH protocol banner[Errno 54] Connection reset by peer Traceback (most recent call last): File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2271, in _check_banner buf = self.packetizer.readline(timeout) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/packet.py", line 380, in readline buf += self._read_timeout(timeout) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout x = self.__socket.recv(128) ConnectionResetError: [Errno 54] Connection reset by peer

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2094, in run self._check_banner() File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2275, in _check_banner raise SSHException( paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer

Traceback (most recent call last): File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2271, in _check_banner buf = self.packetizer.readline(timeout) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/packet.py", line 380, in readline buf += self._read_timeout(timeout) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout x = self.__socket.recv(128) ConnectionResetError: [Errno 54] Connection reset by peer

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "/Applications/Ramiel.app/Contents/Resources/ssh/dump.py", line 8, in client.connect(hostname="localhost", password="alpine", username="root", port=2222) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/client.py", line 421, in connect t.start_client(timeout=timeout) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 699, in start_client raise e File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2094, in run self._check_banner() File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2275, in _check_banner raise SSHException( paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer Exception (client): Error reading SSH protocol banner[Errno 54] Connection reset by peer Traceback (most recent call last): File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2271, in _check_banner buf = self.packetizer.readline(timeout) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/packet.py", line 380, in readline buf += self._read_timeout(timeout) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout x = self.__socket.recv(128) ConnectionResetError: [Errno 54] Connection reset by peer

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2094, in run self._check_banner() File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2275, in _check_banner raise SSHException( paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer

Traceback (most recent call last): File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2271, in _check_banner buf = self.packetizer.readline(timeout) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/packet.py", line 380, in readline buf += self._read_timeout(timeout) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout x = self.__socket.recv(128) ConnectionResetError: [Errno 54] Connection reset by peer

During handling of the above exception, another exception occurred:

Traceback (most recent call last): File "/Applications/Ramiel.app/Contents/Resources/ssh/dump.py", line 8, in client.connect(hostname="localhost", password="alpine", username="root", port=2222) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/client.py", line 421, in connect t.start_client(timeout=timeout) File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 699, in start_client raise e File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2094, in run self._check_banner() File "/Users/charlie/Library/Python/3.10/lib/python/site-packages/paramiko/transport.py", line 2275, in _check_banner raise SSHException( paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer