hephaest0s / usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.
4.38k stars 507 forks source link

Whitelist ids for iPhone #79

Open awead opened 7 years ago

awead commented 7 years ago

I was unable to whitelist my iPhone 7 on El Capitan. I did some digging. If run:

$ system_profiler SPUSBDataType

I get Vendor ID: 0x05ac (Apple Inc.). But, using that value in the whitelist array wasn't working. So I tried:

$ system_profiler SPUSBDataType -xml -detailLevel mini

Which is what the usbkill script is running, and the xml output for my iPhone had:

<key>vendor_id</key>
<string>apple_vendor_id</string>

Using "apple_vendor_id:[product_id]" did the trick. So it seems the system_profiler isn't giving out consistent info for the Apple vendor id.

ghost commented 11 months ago

I left a note of my fork of USBKill with the comment added as:

For jailbroken iPhones, use "apple_vendor_id:[product_id]" in usbkill.ini

This repo is not maintained anymore, so use other people's forks.