search

kpwn / yalu

incomplete ios 8.4.1 jailbreak by Kim Jong Cracks (8.4.1 codesign & sandbox bypass w/ LPE to root & untether)
384 stars 185 forks source link

Did anyone manage to get SSH working? #38

Open Asynix opened 8 years ago

Asynix commented 8 years ago

BRITTA ROLL UP [no its not pythech!] [i] iomasterport: 0x0000070b / gasgauge user client: 0x0000050b jk++ ret: 236d5000 ret: 00000000 found overlapping object found overlapped object ret: ffffff80 ret: 0128c000 ret: ffffff80 ret: 1bc61780 ret: 00000000 ret: 18c00000 ret: ffffff80 ret: 1ac02000

This is what I manage to get, I'm using qfdk's bootstrap and have followed all instructions to the point. However even after idevicediagnostics restart SSH still fails to work and I get connection refused. Any ideas?

@kpwn

kpwn commented 8 years ago

That looks correct. It should work. Care to do a "idevicesyslog"?

2015-12-19 6:00 GMT+01:00 Asynix notifications@github.com:

BRITTA ROLL UP [no its not pythech!] [i] iomasterport: 0x0000070b / gasgauge user client: 0x0000050b jk++ ret: 236d5000 ret: 00000000 found overlapping object found overlapped object ret: ffffff80 ret: 0128c000 ret: ffffff80 ret: 1bc61780 ret: 00000000 ret: 18c00000 ret: ffffff80 ret: 1ac02000

This is what I manage to get, I'm using qfdk's bootstrap and have followed all instructions to the point However even after idevicediagnostics restart SSH still fails to work Any ideas?

@kpwn https://github.com/kpwn

— Reply to this email directly or view it on GitHub https://github.com/kpwn/yalu/issues/38.

Asynix commented 8 years ago

Sure, but when is the best time to run idevicesyslog? Should I rerun the entire thing or is there a quicker method? I don't mind if I have to restore, I have a second device on iOS 8.4.1.

Maybe the bootstrap is the issue? I tried this with my own bootstrap but it didn't work either so I used qfdk's.

Also can you elaborate how OpenSSH starts with idevicediagnosticsrestart?

!/bin/sh

launchctl load /Library/LaunchDaemons/com.openssh.sshd.plist exit 0

From what I've seen none of the bootstraps have a launchctl file in /bin/ are we supposed to include it? Apologies and thanks in advanced for all the questions and thank you for providing us this tool, I'm merely a web designer nothing big and fancy like you folks 😅

Edit: I recovered this from the exact same time I got that yalu log:

Dec 18 23:41:48 iPhone SpringBoard[50] : Forcing crash report of <FBApplicationProcess: 0x146561120; MobileReplayer; pid: 209> (reason: 1, description: developer.apple.wwdc-Release failed to launch in time) Dec 18 23:41:48 iPhone ReportCrash[210] : task_set_exception_ports(B07, 400, D03, 0, 0) failed with error (4: (os/kern) invalid argument) Dec 18 23:41:48 iPhone ReportCrash[210] : [CrashReport _extractBinaryImageInfoUsingSymbolicator] caught exception: *\ setObjectForKey: object cannot be nil (key: ExecutablePath) (0x18394c22c 0x1955c00e4 0x1838350c8 0x10007ab1c 0x18b37835c 0x10007a8bc 0x1000798c4 0x100083abc 0x100078bbc 0x100078e44 0x195d7e0c0 0x100083514 0x195e1fdb8 0x195e1fd14 0x195e1cee8) Dec 18 23:41:50 iPhone wifid[34] : WiFi:[472192910.006610]: Disable WoW requested by "dataaccessd" Dec 18 23:41:51 iPhone SpringBoard[50] : Finished crash reporting. Dec 18 23:41:51 iPhone ReportCrash[210] : Saved report to /var/mobile/Library/Logs/CrashReporter/MobileReplayer_2015-12-18-234148_iPhone.ips Dec 18 23:42:28 iPhone locationd[57] : PLClientLogging: log locationd withContent { } cannot continue due to nils! Dec 18 23:42:54 iPhone syncdefaultsd[106] : (Note ) marked "com.me.keyvalueservice" topic as "enabled" on <APSConnection: 0x134e120d0> [disconnected] [connected]

kpwn commented 8 years ago

Just do it while doing a idevicediagnostics restart.

idea is idevicediagnostics restart runs /sbin/reboot as uid=0, which kickstarts sshd.

On 20 Dec 2015, at 02:55, Asynix notifications@github.com wrote:

Sure, but when is the best time to run idevicesyslog? Should I rerun the entire thing or is there a quicker method? I don't mind if I have to restore, I have a second device on iOS 8.4.1.

Maybe the bootstrap is the issue? I tried this with my own bootstrap but it didn't work either so I used qfdk's.

Also can you elaborate how OpenSSH starts with idevicediagnosticsrestart?

!/bin/sh

launchctl load /Library/LaunchDaemons/com.openssh.sshd.plist exit 0

From what I've seen none of the bootstraps have a launchctl file in /bin/ are we supposed to include it? Apologies in advance and thank you for providing us this tool, I'm merely a web designer nothing big and fancy like you folks 😅

— Reply to this email directly or view it on GitHub https://github.com/kpwn/yalu/issues/38#issuecomment-166053868.

Asynix commented 8 years ago

Okay, I'll do it when I can. Is there a specific part of the log that you'd like me to post? Or would you just want the whole thing?

Thanks once again

qfdk commented 8 years ago

you can try to write a script in reboot for example echo "test success" >>/media/coucou just make sure that reboot is called ... or try to find the com.openssh.* exists