search

bazad / memctl

An iOS kernel introspection tool.
https://bazad.github.io/2017/09/live-kernel-introspection-ios/
MIT License
226 stars 29 forks source link

iPhone X 13.3 Checkra1n support #14

Closed endercypher closed 4 years ago

endercypher commented 4 years ago

This is what’s happening, Enders-iPhone-X:/var/mobile root# memctl   memctl> fc AppleMobileFileIntegrity   warning: could not find _bzero_phys   warning: could not find _pthread_kext_register   warning: could not find __FREE   Assertion failed: (kr == KEXT_SUCCESS), function ksim_set_pc, file src/libmemctl/arm64/ksim.c, line

  1.   deinitialized   Abort trap: 6
bazad commented 4 years ago

Unfortunately memctl is rather outdated at the moment, and does not work on modern stripped kernelcaches, since the symbol finders need to be updated and the assumptions I made about heap behavior no longer hold. Realistically, I won't have time to update it for awhile, as I'll be focusing on updating KTRW for checkra1n. Is there a specific feature you are looking for?

endercypher commented 4 years ago

I was mainly looking at the ability to call kernel functions & find them for use such as serial communications etc.

bazad commented 4 years ago

Ah, I see. I'm not aware of a quick and easy way to do that at the moment without writing some code.

endercypher commented 4 years ago

Even if something on KTRW helped, also I’ve got a kernel cache that’s got some symbols but it’s 13.3 iPhone X, if you need any help testing with KTRW I’d be more than happy to help.

endercypher commented 4 years ago

Also, couldn’t you in theory make a PongoOS Module for checkra1n to load your GBD kext?

bazad commented 4 years ago

Yes, my plan is to convert KTRW into a pongoOS module.

endercypher commented 4 years ago

What is the time that you think it might take for that to be finished?

endercypher commented 4 years ago

If there was support for the iPhone X on iOS 13.3 aka the iPhone 10,6 & 10,3 on iOS 13.3 for KTRW that would be wonderful.