Skip to content

Commit

Permalink
iOS 16 Support (#280)
Browse files Browse the repository at this point in the history
* ios 16 stuff, booting may not work yet
- does not mount user data partition for iPhone X compatibility, isn't even really needed anymore
- deploys files to the rootfs (fakefs if needed)
- copies cryptexes on ios 16
- fix deviceid finding
- use apticket.der because dumping seems to freeze on my device?
- add /palera1n/info.json
- uicache loader app on boot (no more Tips app hijacking)
- fix rootless
- semi-tethered webkit fix on 16
- switch to local boot

* make sure submodule uses ios16 branch

* fixes

* other fixes

* maybe it needs more time to execute

* cant local boot tethered for now

* new jbin funnies

* changes

* payload i guess (home button fix on iphone 7(+) and 8(+))

* this will probably fix errors

* post.sh is needed

* changes

* .rd_in_progress

* kill iproxy before starting ramdisk process

* shouldnt need cryptexes copying anymore (-h in kernel64patcher)

* requested changes

* rootless fixes

* more changes

* keep fs number

* update submodule

* my tfp0 patch doesnt work on 15.x

the way the patch grabs the tfp0 function is using a panic string in a developer mode check introduced in ios 16's kernel
and that check happened to be inside of task_conversion_eval_internal, so we could use it to allow tfp0
but since that check was introduced in 16.x we cant use this to get tfp0 on 15.7.x

* chmod got broken lol

* changes

* noobula moment (#281)

* final updates & include commits from main (#282)

* chmod the post.sh :frcoal:

* fixed ibootpatch2 binary

* other changes

* 16.1* fix

* move dyld link to ramdisk

* fix disk stuff

* update changelog

Co-authored-by: Tom E <guacaplushy@icloud.com>
Co-authored-by: plooshi <95927318+plooshi@users.noreply.github.com>
  • Loading branch information
3 people committed Dec 12, 2022
1 parent f16df47 commit 6dae613
Show file tree
Hide file tree
Showing 23 changed files with 1,026 additions and 157 deletions.
7 changes: 6 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -11,4 +11,9 @@ BuildManifest.plist
blobs

This comment has been minimized.

Copy link
@iMonZ

iMonZ Dec 14, 2022

Hey, sadly, it doesn't work with the old Apple TV HD. With the A10 CPU.

Is that a thing that can be easily fixed?

tweaksinstalled
logs
.disclaimeragree
dump.raw
other/rootfs/jbin/loader.app
.rd_in_progress
logs
.disclaimeragree
.fs-*
1 change: 1 addition & 0 deletions .gitmodules
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
[submodule "ramdisk"]
path = ramdisk
url = https://github.com/palera1n/ramdisk
branch = ios16
18 changes: 16 additions & 2 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,15 +1,29 @@
# Changelog

## 1.4.0

- Does not mount user data partition for iPhone X compatibility, isn't even really needed anymore
- Deploys files to the rootfs (fakefs if needed)
- Fix deviceid finding
- Use apticket.der because dumping rdisk seems to freeze
- Add /.installed_palera1n with info
- uicache loader app on boot (no more Tips app hijacking)
- Fix rootless
- Webkit fix on 16
- Switch to local boot
- Fix home button on iPhone 7(+) and 8(+)
- Increase stability
- Supports 15.0-16.2 on all checkm8 devices

## 1.3.0

- Fully fix deep sleep bug
- Support 15.0-15.7.1 on all checkm8 devices
- Supports 15.0-15.7.1 on all checkm8 devices
- Increase stability
- Fix TrollStore, camera, and screen recording

## 1.2.0

- Fix deep sleep bug
- Numerous fixes
- Let Pogo install tweak support

Expand Down
7 changes: 4 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,6 @@ Thank you so much to our Patreons that make the future development possible! You
- irecovery -n

# Prerequisites
#### Warning: You must install the Tips app from the App Store before running palera1n.
- A checkm8 vulnerable iOS device on iOS 15 (A8-A11)
- The device must be on iOS 15.0-15.7.1
- Linux or macOS computer
Expand Down Expand Up @@ -74,7 +73,7 @@ If you want to make a rootless repo, use the official [palera1n repo](https://gi
# Credits

- [Nathan](https://github.com/verygenericname)
- The ramdisk that dumps blobs, installs pogo to tips app, and duplicates rootfs is a slimmed down version of [SSHRD_Script](https://github.com/verygenericname/SSHRD_Script)
- The ramdisk that dumps blobs, copies files, and duplicates rootfs is a slimmed down version of [SSHRD_Script](https://github.com/verygenericname/SSHRD_Script)
- For modified [restored_external](https://github.com/verygenericname/sshrd_SSHRD_Script)
- Also helped Mineek getting the kernel up and running and with the patches
- Helping with adding multiple device support
Expand All @@ -93,9 +92,11 @@ If you want to make a rootless repo, use the official [palera1n repo](https://gi
- [F121](https://github.com/F121Live) for helping test
- [m1sta](https://github.com/m1stadev) for [pyimg4](https://github.com/m1stadev/PyIMG4)
- [tihmstar](https://github.com/tihmstar) for [pzb](https://github.com/tihmstar/partialZipBrowser)/original [iBoot64Patcher](https://github.com/tihmstar/iBoot64Patcher)/original [liboffsetfinder64](https://github.com/tihmstar/liboffsetfinder64)/[img4tool](https://github.com/tihmstar/img4tool)
- [Tom](https://github.com/guacaplushy) for a couple patches and bugfixes
- [xerub](https://github.com/xerub) for [img4lib](https://github.com/xerub/img4lib) and [restored_external](https://github.com/xerub/sshrd) in the ramdisk
- [Cryptic](https://github.com/Cryptiiiic) for [iBoot64Patcher](https://github.com/Cryptiiiic/iBoot64Patcher) fork, and [liboffsetfinder64](https://github.com/Cryptiiiic/liboffsetfinder64) fork
- [libimobiledevice](https://github.com/libimobiledevice) for several tools used in this project (irecovery, ideviceenterrecovery etc), and [nikias](https://github.com/nikias) for keeping it up to date
- [Nick Chan](https://github.com/asdfugil) general help with patches.
- [Nick Chan](https://github.com/asdfugil) general help with patches and iBoot payload stuff
- [Dora](https://github.com/dora2ios) for iBoot payload and iBootpatcher2
- [Sam Bingner](https://github.com/sbingner) for [Substitute](https://github.com/sbingner/substitute)
- [Serena](https://github.com/SerenaKit) for helping with boot ramdisk.
674 changes: 674 additions & 0 deletions binaries/.licenses/iBootpatch2_LICENSE

Large diffs are not rendered by default.

Binary file modified binaries/Darwin/Kernel64Patcher
Binary file not shown.
Binary file modified binaries/Darwin/iBoot64Patcher
Binary file not shown.
Binary file added binaries/Darwin/iBootpatch2
Binary file not shown.
Binary file added binaries/Kernel16Patcher-nolivefs.ios
Binary file not shown.
Binary file added binaries/Kernel16Patcher.ios
Binary file not shown.
Binary file modified binaries/Linux/Kernel64Patcher
100755 → 100644
Binary file not shown.
Binary file modified binaries/Linux/iBoot64Patcher
Binary file not shown.
Binary file added binaries/Linux/iBootpatch2
Binary file not shown.
Binary file added other/payload/payload_t8010.bin
Binary file not shown.
Binary file added other/payload/payload_t8015.bin
Binary file not shown.
Binary file added other/rootfs/jbin/binpack/binpack.tar
Binary file not shown.
Binary file added other/rootfs/jbin/jb.dylib
Binary file not shown.
Binary file added other/rootfs/jbin/jbinit
Binary file not shown.
Binary file added other/rootfs/jbin/jbloader
Binary file not shown.
Binary file added other/rootfs/jbin/launchd
Binary file not shown.
13 changes: 13 additions & 0 deletions other/rootfs/jbin/post.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
binpack=/jbin/binpack

# uicache loader app
$binpack/bin/mkdir -p /var/.palera1n
$binpack/bin/rm -rf /var/.palera1n/loader.app
$binpack/bin/cp -R /jbin/loader.app /var/.palera1n
$binpack/usr/bin/uicache -p /var/.palera1n/loader.app

# respring
$binpack/usr/bin/killall -9 SpringBoard

echo "[post.sh] done"
exit

1 comment on commit 6dae613

@DwifteJB
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

palera1n promotes piracy!!!! - saunders tech

Please sign in to comment.