Nyxian 0.11.1 "Scriptura" Beta

Changelog

Nyxian

• Feat: Browsing/deleting files directly in the guest file system (through MoltenFileManager, note this feature is still in early development) (dc5ecdb, 41bba65, f940a0b)
• Feat: added more Virtual Environment settings features such as restore, reload daemons, browsing files, clearing application caches, etc (056b062, 6047bb9, d0a3b4f, 7983d7d, 0a7789e, 92bbb4b, 62a8381, ec45b9a, 61aa4a4, 9aab755)
• Fix: Nyxian opens again on iOS 18 (idk which commit, one commit fixed it tho xD)

LiveProcess

• Fix: Properly restore exception ports in ktfp after handoff of task port (537075b)
• Hardening: enhanced launch service validation (baefff1)

Micro Kernel (ksurface)

• Vulnerability Patch: patched Mach IPC type Confusion (found by @semvis123) (5f35113)
• Vulnerability Patch: patched attacker controlled OOB write in LCPatchExecutableSlice (found by @semvis123) (662a9c1)
• Vulnerability Patch: patched 1 byte NULL overflow in KERN_HOSTNAME setting mechanism in SYS_sysctl (found by @semvis123) (8ae7ec7)
• Vulnerability Patch: patched SYS_wait4 async event handler leaks mach port send rights (found by @semvis123) (9af771c, d99bb10)
• Vulnerability Patch: patched another OOB write in LCPatchExecutableSlice (2952a33)
• Vulnerability Patch: patched attacker controlled stack buffer overflow in SYS_sysctl (found by @semvis123) (1e75dcb, dee9694)
• Vulnerability Patch: patched attacker controlled stack buffer overflow in macho_read_token (found by @semvis123) (f89090c)
• Vulnerability Patch: patched deadlock in SYS_setreuid and SYS_setregid (found by @semvis123) (cd2d67a)
• Vulnerability Patch: patched data corruption vulnerability in key.m (found by @semvis123) (068cf74)
• Vulnerability Patch: patched null ptr deref in proc_list (found by @semvis123) (068cf74)
• Vulnerability Patch: patched task port confusion (found by @semvis123) (e4d70d7)
• Vulnerability Entry Patch: patched a reference/lock leak in kvobject_snapshot (found by @semvis123) (4905e2a)
• Hardening: swapped binaries will now cause PECTL_CS_FALLBACK_ENT (shall fix some appstore apps failing to open properly) (f26cfdb)
• Hardening: added os_unfair_lock to DYLD cdhash verifier in LiveProcess (1b6b161)
• Hardening: applying LC hooks before constructors run (0d88cc3, ae31522)
• Hardening: entitlement sanitization (strips all entitlements that make no sense in a certain collection of entitlements) (6754f51, b370fba)
• Feat: more PEUserspaceManager features (056b062, 6047bb9, d0a3b4f, 7983d7d, 0a7789e, 92bbb4b, 62a8381, ec45b9a, 61aa4a4)

Contributors: @semvis123, @ruri1208

Note

Standard SDK used in this version of Nyxian is iPhoneOS26.5.

Note

This update is very recommended to install, it features a ton of patched to a ton of vulnerabilities @semvis123 collected over the last 3 months.