Comments (5)
from dopamine.
[+] Loading AppleNeuralEngine framework ...OK
[+] Patching model.hwx with custom initInfo section ... OK
[+] Stage 1: Grooming kernel memory ...
[+] Grooming IOSurface_zone ... OK
[+] Grooming pageable maps ... OK
[+] Grooming kernel_map ... . . . . . OK
[+] Patching model.hwx with custom initInfo section ... OK
[+] Found scratched ShmemID 0x1f6b with size 0x4000
00 40 00 00 00 00 00 00 F0 18 99 19 E2 FF FF FF | .@..............
00 40 89 02 00 00 00 00 80 2B 84 34 E1 FF FF FF | .@.......+.4....
E8 5D E2 18 E2 FF FF FF 00 00 14 0A EC FF FF FF | .]..............
88 FB CE 19 E2 FF FF FF 4B 54 55 4D 01 00 00 00 | ........KTUM....
00 00 00 00 00 00 00 00 | ........
[+] Leaked mutable kernel section (MUTK) buffer 0xffffffec0a140000
[+] Leaked IOSurface object 0xffffffe2199918f0
[+] Kernel location of our input buffer 0xffffffec0a000000
[+] Stage 3: Dumping a memory page from IOSurface_zone
[+] Deduced weightSurface (from IOKitPageableSpace submaps) location 0xffffffec0a154000
[+] Patching model.hwx with custom initInfo section ... OK
[+] Found scratched ShmemID 0x1fb8 with size 0x4000
[+] Found a matching surface-id=0x00c1 IOSurface=0xffffffe2199910a0 !
[+] IOSurfaceClient location 0xffffffe300c0f480
[+] IOSurface location 0xffffffe2199910a0
[+] IOSurfaceRoot 0xffffffe2ffef8400
[+] Stage 4: Performing the arbitrary write primitive ...
[+] Patching model.hwx with custom initInfo section ... OK
[+] Got shmem id 0x1fb8 for 0xffffffec0a000000
[+] Stage 5: Get stable arbitrary kernel read/write .... OK
[+] IOSurfaceRoot vtable 0xfffffff01af84560
[+] kread64([0xfffffff01af84560]) = 0xe5d4d5f01bf0925c
[+] kread64([0xffffffec0a003000]) = 0x4141414100003000
[+] kwrite64(0xffffffec0a003000,0xdeadbeef12345678)
[+] kread64([0xffffffec0a003000]) = 0xdeadbeef12345678
[+] Kernel text base 0xfffffff01a5ec000
CF FA ED FE 0C 00 00 01 02 00 00 C0 02 00 00 00 | ................
1A 00 00 00 40 16 00 00 01 00 20 00 00 00 00 00 | ....@..... .....
19 00 00 00 C8 02 00 00 5F 5F 54 45 58 54 00 00 | ........__TEXT..
00 00 00 00 00 00 00 00 00 C0 5E 1A F0 FF FF FF | ..........^.....
00 80 7E 00 00 00 00 00 00 00 00 00 00 00 00 00 | ............................
00 80 7E 00 00 00 00 00 05 00 00 00 05 00 00 00 | ..
08 00 00 00 00 00 00 00 5F 5F 63 6F 6E 73 74 00 | ........__const.
system name = Darwin
node name = Unc0ver
release = 21.2.0
version = Darwin Kernel Version 21.2.0: Sun Nov 28 20:43:35 PST 2021; root:xnu-8019.62.2~1/RELEASE_ARM64_T8030
machine = iPhone12,8
from dopamine.
from dopamine.
And add check, that if we found IOSurface_location then exit, so it will fast up exploit.
from dopamine.
from dopamine.
Related Issues (20)
- Disable Tweak Injection HOT 2
- Cannot mount APFS volumes and HFS partitions
- Support for Apple TV (A1625, A1842, A2169, A2737/A2843) HOT 1
- All package managers disappeared after updating tweaks HOT 2
- Web Browser not working after Jailbreak HOT 2
- Significant lag after some time HOT 12
- native iOS NFC breaking/nfcd crashing HOT 3
- Getting Error while installing the Dopamine ipa 2.1.7 HOT 1
- Mount preboot and root r/w HOT 2
- Solved: Entering Safe Mode while connecting AirPods Pro
- Watchdog Timeout HOT 2
- Jetsam numbers do opposite HOT 1
- School Network no longer connecting after updating to Dopamine 2.2.1 HOT 18
- iPhone 14 Pro Max16.5.1不支持越狱 HOT 2
- The latest version seems to break the Snowboard UI HOT 1
- IOS 15.7.2 reboot random at 2.2.x version : spin lock ,very frequent every half day . but 2.09 is ok , can you fix it? HOT 1
- Bash segfault due to LANG variable HOT 1
- Dopamine version stuck at 2.2.1 HOT 5
- Package Manager Selection HOT 2
- NewTerm does not work HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dopamine.