kabiroberai / theos-jailed Goto Github PK

View Code? Open in Web Editor NEW

341.0 23.0 61.0 4.27 MB

A Theos module to develop jailed tweaks for iOS 8 and up

License: Other

Shell 50.30% Makefile 32.99% Logos 10.82% Perl 0.90% C 5.00%

ios theos reverse-engineering tweaks

theos-jailed's People

Contributors

Stargazers

Watchers

theos-jailed's Issues

Modify IPA Name without being removed

Hello, I thought of this idea but I'm not sure if it's possible.

After compiling the Jailed Project, new ipa will be in the package folder of Jailed Project.
If I changed name or added another IPA to the folder & compiled the project again. All of the files in the package folder will be deleted and only ipa from project will be there. Is there a way to stop this from happening?

make package error

ld: warning: object file (/Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/../lib/clang/7.3.0/lib/darwin/libclang_rt.ios.a(emutls.c.o)) was built for newer iOS version (6.0) than being linked (5.0)
Undefined symbols for architecture armv7:
"OBJC_CLASS$_SCLAlertView", referenced from:
objc-class-ref in Tweak.xm.05cd20bb.o
ld: symbol(s) not found for architecture armv7
clang: error: linker command failed with exit code 1 (use -v to see invocation)

??? plz fix

Question: Does theos-jailed support iOS 7?

Hello,

Currently have no iOS 7 device to test this but considering it says from iOS 8 up to iOS 11 is supported, I'm guessing iOS 7 is not? Is there a reason for this? Just wondering. :)

Thank you for your time!

importing dylib within tweak.xm

Im trying to import the following DYLIB:
https://github.com/iSECPartners/ios-ssl-kill-switch ( I downloaded the .deb and unpacked the dylib)
Within the following IPA file:
http://damnvulnerableiosapp.com/

My make file looks like:

MODULES = jailed
include $(THEOS)/makefiles/common.mk

TWEAK_NAME = DVIAJAILED
DISPLAY_NAME = DVIAJAILED
BUNDLE_ID = com.highaltitudehacks.dvia
DVIAJAILED_USE_FLEX = 1
DVIAJAILED_FILES = Tweak.xm
DVIAJAILED_IPA = /Users/nino/Downloads/DVIA.ipa
DVIAJAILED_EMBED_LIBARIES = $(THEOS_MAKE_PATH)/SSLKillSwitch.dylib

include $(THEOS_MAKE_PATH)/tweak.mk

However im a bit confused on Step 5:
#import <foo.h>

How can I tell what the correct header is?

Error on install, executable was signed with invalid entitlements

Hey,

Excellent work on this, great tool!

I've had success with installing an .ipa on a jailbroken device, but when I try to install it on a non-jailbroken device, I get the following output:

==> Unpacking com.asdf.asdf-iOS8.0-(Clutch-2.0.4).ipa…
==> Setting bundle ID…
==> Setting display name…
==> Copying dependencies…
==> Injecting dependencies…
==> Signing asdf.app…
==> Repacking asdf.app…
==> Waiting for iOS device to be connected…
==> Using 7e963f9b0cc0ecbcfc0ce4d8146b59d982df1ef7 (D101AP, iPhone 7, iphoneos, arm64) a.k.a. 'iPhone'.…
==> Installing: 70%
==> Error: Error 0xe8008016: The executable was signed with invalid entitlements. AMDeviceSecureInstallApplication(0, device, url, options, install_callback, 0)

It appears to be using the wildcard app id, which might be missing some entitlements. I signed into developer.apple.com and enabled all the Application Services I could for the wildcard app id, but many were greyed-out in their UI. When I run make info, it tells me I need the Wallet and App Groups capabilities. Is there some way I can add those to my wildcard app id, or am I missing the root of the issue entirely?

Thanks, and again, awesome work!

theos-jailed working on windows?

With the new https://msdn.microsoft.com/en-au/commandline/wsl/install_guide released, is it possible to get this working on windows/linux now? for those that don't have a mac? :D

At least the packaging stage as for sideloading user can use cydia impactor @kabiroberai

UIDebuggingInformationOverlay on iOS 11

In another issue, you said you thought this was removed. However, after checking headers, it is indeed present - I can look into why this doesn't present.

error 1

hello folks !
I am getting this error ...

==> Error: Could not find profile '*'
make: *** [internal-package] Error 1

any suggestions ?
Thanks

before-package on theos-jailed?

hey!

Im not sure if this is a problem on my end or with theos-jailed. but i cannot for the life of me figure out how to copy/edit something inside the .theos/_/Payload/xxx.app before the app gets repackaged by the script.

I have tried internal-package::, before-package, after-package, before-stage, after-stage, etc and they all either run before the folder above is created or after the .ipa has been packaged by the script.

how am i supposed to tell my makefile to do something right before theos starts repackaging the .app?

dylilbs not injecting

I am following directions as shown but cannot get the dylib to inject. I have tried a few that I've used with libloader to make sure its not the tweak. It will make package install but not with the dylib. Thoughts?

Failed to nicify template

INFORMATIONS

theos worked and using theos-jailed
pwd && ls -a template/

~/.local/opt/theos-jailed
.        ..       Makefile NIC      Tweak.xm theos

$THEOS/bin/nicify.pl template/

dyld: lazy symbol binding failed: Symbol not found: _Perl_xs_handshake
  Referenced from: ~/.perl5/lib/perl5/darwin-thread-multi-2level/auto/Compress/Raw/Zlib/Zlib.bundle
  Expected in: flat namespace

dyld: Symbol not found: _Perl_xs_handshake
  Referenced from: ~/.perl5/lib/perl5/darwin-thread-multi-2level/auto/Compress/Raw/Zlib/Zlib.bundle
  Expected in: flat namespace

Abort trap: 6

SOLUTIONS

[Temporary] Providing the tar file

Not work

Not exists /bin/ folder
Not work.

output_name not changing anything

hey!

i'm trying to set a custom package output name on my Makefile but nothing happens?

i noticed output_name in common.mk and set it in makefile:

OUTPUT_NAME = Test.ipa

but nothing happens? something i'm doing wrong or is it not possible?

Thank you!!!

App name does not change

if I specify a custom app name for home screen, it won't change once i install the app. is there somethinge extra that needs ot be done?

Preference Loader Support?

So I am trying to inject a tweak into an app but the tweak is disabled by default unless you enable it in the settings app through preference loader. Is there any way around this? The tweak is LocalIAPStore

'badSignature' when running patched ipa

I've been using this to patch an app with this tool.
After following the instructions from make info, successfully deploying the blank application to the device, and running it, when I tried to run the patched application, deployed through make package install PROFILE=<profile> with ios-deploy, the app closed shortly after starting with the exitReason: "badSignature".

Add support for Linux/jailbroken iOS/Windows platforms

The code uses some 'tools' which may only be available on Mac such as PlistBuddy.

but would it be possible if we can replace the files that aren't available on ios to alternatives? plistbuddy to sed for example.

Failed to get codesign name

Hi.

I've successfully used the tool with many apps via the procedure described by make info.

I would automatize the entire process, so i've created the provisioning profile via this tool . So i skip the phase with Xcode and the "fake" app. (it is right?)

The provisioning profile created, with the same id imposed in make info, is correctly installed under /Users/<username>/Library/MobileDevice/Provisioning Profile.

So i run make package install PROFILE=<xxxx>.mobileprovision, but i get this error

==> Error: Failed to get codesign name
make: *** [internal-package] Error 1

I've tried both the path under /User/... and the path inside the project when i've downloaded the provisioning profile.

Unable to invoke the FLEX toolbar

My App has installed okay and I can access the cycript service however I cant seem to trigger the FLEX toolbar by using the F or ? keys.

Im installing directly to a device (iPhone7+ not a simulator)

Do I need to do something in particular to have the menu appear?

"make package install" error

Running make package install gives me this error:
==> Error: Could not find “Packages/packages/WatusiJailed-13.ipa” to install. Aborting.

The .ipa file is outside the Packages/packages folder.
Here the folder structure:
https://ibin.co/34VG9iC2nKfs.png

Failed to nicify template

When make template "jailed.nic.tar"

Successfully installed module.
Error: Failed to nicify template

Note: all files: Makefile NIC theos Tweak.xm in
~/templates/ios/kabiroberai

Help me install?

I'm use mac el captain and xcode 7.3! But install theos of you error. Help me guide install.please!!!

Fails to copy and inject dependecies for a .ipa with a space in its binary name

Steps to reproduce:

Take a decrypted ipa that has a space in binary name, for example:

fancyapp.ipa
├── Info.plist
├── Fancy App.app
│   ├── Fancy App

Create an empty tweak for this application and run make package install messages=yes. Here's the output (cut for brevity):

> Making all for tweak test…
> Making stage for tweak test…
==> Unpacking fancyapp.ipa…
==> Copying dependencies…
rsync: link_stat "/Users/me/tweaks/test/.theos/_/Payload/Fancy" failed: No such file or directory (2)
rsync: push_dir#3 "/Users/me/tweaks/test/App.app" failed: No such file or directory (2)
[...]
"/Users/me/tweaks/test/.theos/_/Payload/Fancy" failed: No such file or directory (2)
rsync: mkdir "/Users/me/tweaks/test/App.app/Frameworks" failed: No such file or directory (2)
[...]
==> Injecting dependencies…
error: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/install_name_tool: can't open file: /Users/me/tweaks/test/.theos/_/Payload/Fancy App.app/Frameworks/tweak.dylib (No such file or directory)

You can see that the space in .app/binary name leads to confusion (it breaks at the space), and dependecies are not copied over. The generated .ipa in ./packages folder therefore won't contain any dylib.

MSHookFunction - it works?

Hi, i've successfully installed Theos Jailed and used it.

With a simply hook that logs a sentence, it's all ok.
Also if i try to hook a method inside an app which i made myself.

But i've some problem with MSHookFunction aka %hookf, useful to intercept system call.
I've no returns by these functions, neither with the app which i wrote where it's sure that the interested function is called.

It's possible that is an issue due to the jailed situation? Do you have done any test with these functions?

Dyld Error Message - library not loaded

Hello, I'm creating a simple project, everything works perfectly fine.
Compilation, automatic installation via ios-deploy... Beautiful so far;
But the app crashes. Using Xcode to debug it, I get the following message. What I am doing wrong?

Aug 15 06:13:40 arthurpad ReportCrash[6470] : Dyld Error Message:
Dyld Message: Library not loaded: @rpath/pb.dylib
Referenced from: /var/containers/Bundle/Application/087ED5C3-B94F-4509-A446-1AA67F92D5E0/NvwaStone.app/NvwaStone
Reason: image not found
Dyld Version: 390.7

embedded.mobileprovision missing into IPA

Hi, i've successfully inject some tweaks into various IPA, using an Ad Hoc mobileprovision profile.

Then, i've installed these IPAs, on the selected device, and it's all ok.
For now i can't use ios-deploy, indeed the previous apps have been installed by using ifunbox.

One app, after the patching procedure, without any errors, can't be installed: neither with ifunbox or IPA Installer. The first one returns to me a code error, while the second one tells me something about AppSync (that 've installed).

Exploring the IPAs, i've noticed that everyone, except the last, have embedded.mobileprovision. Is here the problem?

EDIT: i add some log info

Feb 14 12:08:06 iPhone SpringBoard(Security)[1945] <Notice>: could not enable test hierarchy: ApplePinningAllowTestCertsiPhoneApplicationSigning not true
Feb 14 12:08:06 iPhone securityd[1604] <Notice>: cert[0]: SubjectCommonName =(leaf)[]> 0
Feb 14 12:08:06 iPhone securityd[1604] <Notice>: cert[0]: CheckLeafMarkerOid =(leaf)[]> 0
Feb 14 12:08:06 iPhone securityd[1604] <Notice>: cert[0]: IssuerCommonName =(path)[]> 0
Feb 14 12:08:06 iPhone SpringBoard(Security)[1945] <Notice>:  [leaf CheckLeafMarkerOid IssuerCommonName SubjectCommonName]
Feb 14 12:08:06 iPhone SpringBoard(Security)[1945] <Notice>: could not enable test hierarchy: ApplePinningAllowTestCertsiPhoneApplicationSigning not true
Feb 14 12:08:06 iPhone securityd[1604] <Notice>: cert[0]: SubjectCommonName =(leaf)[]> 0
Feb 14 12:08:06 iPhone securityd[1604] <Notice>: cert[0]: CheckLeafMarkerOid =(leaf)[]> 0
Feb 14 12:08:06 iPhone securityd[1604] <Notice>: cert[0]: IssuerCommonName =(path)[]> 0
Feb 14 12:08:06 iPhone SpringBoard(Security)[1945] <Notice>:  [leaf CheckLeafMarkerOid IssuerCommonName SubjectCommonName]
Feb 14 12:08:06 iPhone locationd[67] <Notice>: Client com.apple.springboard connected
Feb 14 12:08:06 iPhone locationd[67] <Notice>: getClientEffectiveRegistrationResult, /System/Library/CoreServices/SpringBoard.app/SpringBoard, com.apple.springboard, , CLClientRegistrationResult, kCLClientRegistrationResultFailedUnavailable, CLCommonLocationServicesEnabled, 0
Feb 14 12:08:06 iPhone locationd[67] <Notice>: location disabled system-wide, denying executable com.apple.springboard
Feb 14 12:08:06 iPhone locationd[67] <Notice>: getClientEffectiveRegistrationResult, /System/Library/CoreServices/SpringBoard.app/SpringBoard, com.apple.springboard, , CLClientRegistrationResult, kCLClientRegistrationResultFailedUnavailable, CLCommonLocationServicesEnabled, 0
Feb 14 12:08:06 iPhone locationd[67] <Notice>: location disabled system-wide, denying executable com.apple.springboard
Feb 14 12:08:06 iPhone locationd[67] <Notice>: message 'kCLConnectionMessageGyroBiasEstimation' received from client 'com.apple.springboard'
Feb 14 12:08:06 iPhone locationd[67] <Notice>: Client com.apple.springboard (0x16320400) is subscribing to notification kCLConnectionMessageGyroBiasEstimation
Feb 14 12:08:06 iPhone locationd[67] <Notice>: message 'kCLConnectionMessageWatchdog' received from client 'com.apple.springboard'
Feb 14 12:08:06 iPhone SpringBoard(Security)[1945] <Notice>: could not enable test hierarchy: ApplePinningAllowTestCertsiPhoneApplicationSigning not true
Feb 14 12:08:06 iPhone securityd[1604] <Notice>: cert[0]: SubjectCommonName =(leaf)[]> 0
Feb 14 12:08:06 iPhone securityd[1604] <Notice>: cert[0]: CheckLeafMarkerOid =(leaf)[]> 0
Feb 14 12:08:06 iPhone securityd[1604] <Notice>: cert[0]: IssuerCommonName =(path)[]> 0
Feb 14 12:08:06 iPhone SpringBoard(Security)[1945] <Notice>:  [leaf CheckLeafMarkerOid IssuerCommonName SubjectCommonName]
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Running <SBAppToAppWorkspaceTransaction: 0x4f37a10> for transition request:
<SBMainWorkspaceTransitionRequest: 0x8050480; eventLabel: ActivateApplication = <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a; display: Main; source: HomeScreen> {
    applicationContext = <SBWorkspaceApplicationTransitionContext: 0x1456e200; background: NO> entities = {
        SBLayoutPrimaryRole = <SBWorkspaceApplication: 0x1451fcb0; ID: <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a; layoutRole: primary>;
    };
}
Feb 14 12:08:07 iPhone assertiond[64] <Notice>: Submitted job with label: UIKitApplication:<APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a[0xdba7][64]
Feb 14 12:08:07 iPhone SpringBoard(AssertionServices)[1945] <Notice>: [<APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a] Bootstrap complete with label: UIKitApplication:<APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a[0xdba7][64]
Feb 14 12:08:07 iPhone assertiond[64] <Notice>: CPUMON: Ignoring System App 2809
Feb 14 12:08:07 iPhone mediaserverd(CoreMedia)[224] <Notice>: -CMSessionMgr- cmsmHandleApplicationStateChange: CMSession: Client <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a with pid '2809' is now Foreground Running. Background entitlement: NO
Feb 14 12:08:07 iPhone symptomsd(SymptomEvaluator)[123] <Notice>: 2809 <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a: ForegroundRunning (most elevated: ForegroundRunning)
Feb 14 12:08:07 iPhone symptomsd(SymptomEvaluator)[123] <Error>: Attempt to add an app with insufficient id, info <private>
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Disabling home screen icon rotation for reason: SBAppToAppWorkspaceTransaction
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I Flushing queued mms messages due to low memory warning
Feb 14 12:08:07 iPhone sharingd[237] <Notice>: SystemUI unknown identifier: '<APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a'
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Disabling home screen icon rotation for reason: <SBCrossfadeIconZoomAnimator:0x6cb8830>
Feb 14 12:08:07 iPhone SpringBoard(MobileCoreServices)[1945] <Notice>: Looking up unclipped icon for app <private>
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Dismissing banner for notification (null)
Feb 14 12:08:07 iPhone SpringBoard(CoreMotion)[1945] <Notice>: Stopping device motion, mode=0x<private>
Feb 14 12:08:07 iPhone locationd[67] <Notice>: Client com.apple.springboard disconnected
Feb 14 12:08:07 iPhone sharingd[237] <Notice>: SystemUI changed: 0x10 -> 0x0
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I CSIAppInfo.AppObserver: observe_block_invoke: FBSDisplayLayoutUpdateHandler: update start
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I CSIAppInfo.AppObserver: observe_block_invoke: FBSDisplayLayoutUpdateHandler: app <private> (UIApplicationElement 1 hasKeyboardFocus 0)
Feb 14 12:08:07 iPhone ReportCrash(CrashReporterSupport)[2811] <Notice>: cr_update: <private>
Feb 14 12:08:07 iPhone ReportCrash(CrashReporterSupport)[2811] <Notice>: cr_update: <private>
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I CSIAppInfo.AppObserver: observe_block_invoke: 4. app got notification state: pid=2809 for <private>
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I CSIAppInfo.AppObserver: notifyAboutFrontAppChange: notifyAboutFrontAppChange : app: <private>; pid: 2809; net: 0
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I CSIAppInfo.AppObserver: observe_block_invoke: 5. app got notification state: new counter=1068
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I Flushing queued mms messages due to low memory warning
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I BundleID: <private> is a foreground app
Feb 14 12:08:07 iPhone ReportCrash[2811] <Notice>: Formulating report for corpse[2809] <private>
Feb 14 12:08:07 iPhone ReportCrash(MobileCoreServices)[2811] <Notice>: notify_register_check() failed with error 1000000
Feb 14 12:08:07 iPhone ReportCrash(CrashReporterSupport)[2811] <Notice>: Saved type '109(<private>)' report (6 of max 25) at <private>
Feb 14 12:08:07 iPhone SpringBoard(FrontBoard)[1945] <Notice>: <FBApplicationProcess: 0x808b6a0; GoSign InfoCert; pid: 2809> exited.
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Process exited: <FBApplicationProcess: 0x808b6a0; GoSign InfoCert; pid: -1> -> <FBApplicationProcessExitContext: 0x1677c380; exitReason: (none); terminationReason: (none)>
Feb 14 12:08:07 iPhone assertiond[64] <Notice>: Deleted job with label: UIKitApplication:<APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a[0xdba7][64]
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Undimming for source: programmatic
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: returning the workspace lock time (60.000000) from _nextLockTimeDuration
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: returning the workspace dim time (40.000000) from _nextIdleTimeDuration
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Setting next idle duration (source:1) to: 40.000000 lockAfterDim: 20.000000
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Setting _lastBKUserEventTimerMode=2 with duration=40.000000
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Undimming for source: programmatic
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: returning the workspace lock time (60.000000) from _nextLockTimeDuration
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: returning the workspace dim time (40.000000) from _nextIdleTimeDuration
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Setting next idle duration (source:1) to: 40.000000 lockAfterDim: 20.000000
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Setting _lastBKUserEventTimerMode=2 with duration=40.000000
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Undimming for source: programmatic
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: returning the workspace lock time (60.000000) from _nextLockTimeDuration
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: returning the workspace dim time (40.000000) from _nextIdleTimeDuration
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Setting next idle duration (source:1) to: 40.000000 lockAfterDim: 20.000000
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Setting _lastBKUserEventTimerMode=2 with duration=40.000000
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Enabling home screen icon rotation for reason: <SBCrossfadeIconZoomAnimator:0x6cb8830>
Feb 14 12:08:07 iPhone sharingd[237] <Notice>: SystemUI changed: 0x0 -> 0x10
Feb 14 12:08:07 iPhone SpringBoard(CoreMotion)[1945] <Notice>: Starting device motion, mode=0x22,useAccelerometer=0,useGyro=1,useCompass=0,fUseNorthRef=0,buildingGYTT=0
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Enabling home screen icon rotation for reason: SBAppToAppWorkspaceTransaction
Feb 14 12:08:07 iPhone SpringBoard[1945] <Notice>: Root transaction complete: <SBAppToAppWorkspaceTransaction: 0x4f37a10>
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I SIM has not requested to be notified on entering idle screen, not processing
Feb 14 12:08:07 iPhone locationd[67] <Notice>: message 'kCLConnectionMessageWatchdog' received from client '/System/Library/PrivateFrameworks/CoreParsec.framework'
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I Flushing queued mms messages due to low memory warning
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I Flushing queued mms messages due to low memory warning
Feb 14 12:08:07 iPhone mediaserverd(CoreMedia)[224] <Notice>: -CMSessionMgr- cmsmHandleApplicationStateChange: CMSession: Client <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a with pid '2809' is now Terminated. Background entitlement: NO
Feb 14 12:08:07 iPhone locationd[67] <Notice>: Client com.apple.springboard connected
Feb 14 12:08:07 iPhone locationd[67] <Notice>: getClientEffectiveRegistrationResult, /System/Library/CoreServices/SpringBoard.app/SpringBoard, com.apple.springboard, , CLClientRegistrationResult, kCLClientRegistrationResultFailedUnavailable, CLCommonLocationServicesEnabled, 0
Feb 14 12:08:07 iPhone locationd[67] <Notice>: location disabled system-wide, denying executable com.apple.springboard
Feb 14 12:08:07 iPhone locationd[67] <Notice>: getClientEffectiveRegistrationResult, /System/Library/CoreServices/SpringBoard.app/SpringBoard, com.apple.springboard, , CLClientRegistrationResult, kCLClientRegistrationResultFailedUnavailable, CLCommonLocationServicesEnabled, 0
Feb 14 12:08:07 iPhone locationd[67] <Notice>: location disabled system-wide, denying executable com.apple.springboard
Feb 14 12:08:07 iPhone locationd[67] <Notice>: message 'kCLConnectionMessageGyroBiasEstimation' received from client 'com.apple.springboard'
Feb 14 12:08:07 iPhone locationd[67] <Notice>: Client com.apple.springboard (0x16b92e00) is subscribing to notification kCLConnectionMessageGyroBiasEstimation
Feb 14 12:08:07 iPhone locationd[67] <Notice>: message 'kCLConnectionMessageWatchdog' received from client 'com.apple.springboard'
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I CSIAppInfo.AppObserver: observe_block_invoke: FBSDisplayLayoutUpdateHandler: update start
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I CSIAppInfo.AppObserver: notifyAboutFrontAppChange: notifyAboutFrontAppChange : app: <private>; pid: 0; net: 0
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I CSIAppInfo.AppObserver: observe_block_invoke: 5. app got notification state: new counter=1069
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I Flushing queued mms messages due to low memory warning
Feb 14 12:08:07 iPhone symptomsd(SymptomEvaluator)[123] <Notice>: 2809 <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a: Terminated (most elevated: Terminated)
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I BundleID: <private> is no longer a foreground app
Feb 14 12:08:07 iPhone symptomsd(SymptomEvaluator)[123] <Notice>: Entry, display name <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a uuid (null) pid 2809 isFront 0
Feb 14 12:08:07 iPhone symptomsd(SymptomEvaluator)[123] <Notice>: Duplicate removal of display name <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a
Feb 14 12:08:08 iPhone SpringBoard[1945] <Notice>: Destination SBNotificationBannerDestination is now ready to receive notifications
Feb 14 12:08:08 iPhone locationd[67] <Notice>: Client com.apple.springboard disconnected
Feb 14 12:08:13 iPhone CommCenter[23] <Notice>: #I Flushing queued mms messages due to low memory warning

Maybe interesting part can be

Feb 14 12:08:07 iPhone symptomsd(SymptomEvaluator)[123] <Notice>: 2809 <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a: Terminated (most elevated: Terminated)
Feb 14 12:08:07 iPhone CommCenter[23] <Notice>: #I BundleID: <private> is no longer a foreground app
Feb 14 12:08:07 iPhone symptomsd(SymptomEvaluator)[123] <Notice>: Entry, display name <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a uuid (null) pid 2809 isFront 0
Feb 14 12:08:07 iPhone symptomsd(SymptomEvaluator)[123] <Notice>: Duplicate removal of display name <APP_BUNDLE>-59c3db2589103ff660faa60fe401ed9a
Feb 14 12:08:08 iPhone SpringBoard[1945] <Notice>: Destination SBNotificationBannerDestination is now ready to receive notifications

Install ipa error - AMDeviceSecureInstallApplication

Running make package command i've this error

> Making all for tweak Trulia…
make[2]: Nothing to be done for `internal-library-compile'.
> Making stage for tweak Trulia…
==> Unpacking trulia-cracked.ipa…
==> Setting bundle ID…
==> Setting display name…
==> Copying dependencies…
==> Injecting dependencies…
==> Signing Trulia.app…
==> Repacking Trulia.app…
==> Waiting for iOS device to be connected…
==> Using J72AP 'iPad di Alfonso Solimeo' (01c5e677f2057b33ee76dd8aa0d2b9098a409043).…
==> Installing: 65%
==> Error: Error 0xe80000c8: unknown. AMDeviceSecureInstallApplication(0, device, url, options, install_callback, 0)

i've run also ios-deploy with verbose flag on the *.app generated during the making, to see the output. It block on PreflightingApplication

$: sudo ios-deploy -v -i 01c5e677f2057b33ee76dd8aa0d2b9098a409043 -b Payload/Trulia.app
...............
[ 52%] CreatingStagingDirectory
[ 57%] ExtractingPackage
[ 60%] InspectingPackage
[ 60%] TakingInstallLock
[ 65%] PreflightingApplication
2017-02-16 10:13:19.871 ios-deploy[2985:71670] [ !! ] Error 0xe80000c8: unknown. AMDeviceSecureInstallApplication(0, device, url, options, install_callback, 0)

I've done all the passages on the Usage Wiki only on the step 9 i've run the command without file.mobileprovisining because after the make info the instructions are different. Is the error here?

Trouble with codesigning

I'm having some difficulties when i need to sign the iPA.
When i run it with profile in makefile i get "Could not find profile"

I tried creating a new XCode Project like it said in make info, ran the app, deleted it and ran "make package install" and it throws "Could not find profile"

So i went to developer.apple to create a profile manually, created both Development and Distribution provisioning profiles with my certificates, and that doesn't work.

If i remove profile= from makefile and just run "make package install" then it installs fine on my phone since i am enrolled, but when i try to run it via Impactor i get invalid entitlements, not codesigned.

Any ideas?
Thanks.

make package install PROFILE=<your.bundle> error

Hoangs-MacBook-Pro:doodle hoangpx$ make package install PROFILE=com.sideload.DoodleJump
> Making all for tweak doodle…
make[2]: Nothing to be done for `internal-library-compile'.
> Making stage for tweak doodle…
==> Unpacking doodle.ipa…
==> Copying dependencies…
==> Injecting dependencies…
==> Signing DoodleJump.app…
==> Repacking DoodleJump.app…
==> Unpacking doodle-8+debug.ipa…
==> Waiting for iOS device to be connected…
==> Using J81AP 'iPad' (9515bd335d64804b9ac300497479eda53bc426ab).…
==> Installing: 70%
==> Error: Error 0xe8008015: A valid provisioning profile for this executable was not found. AMDeviceSecureInstallApplication(0, device, url, options, install_callback, 0)

Here is the log when running make clean package messages=yes
[(https://ghostbin.com/paste/dpcd9)]

I tried to install the package named doodle-8+debug.ipa I got in packages folder via xcode but there's an another error App installation failed. A signed resource has been added, modified, or deleted.

Finally, I use make package PROFILE=com.sideload.DoodleJump CODESIGN_IPA=0 to to disable codesigning completely then user Cydia Impactor to install, got another error ipa.cpp:263
ldid/ldid.cpp(1910): _assert(plist != __null)

I also install this package via xcode then I got error App installation failed. An unknown error has occurred.

Is plutil necessary?

I noticed the following line in the install script...

theos-jailed/install

Line 26 in 3108b41

plutil -convert binary1 "module/$SUBSTRATE/Info.plist"

As far as I know, iOS supports plists in both binary and XML formats. Any particular reason why binary plists are needed or preferred?

Error: Could not find profile '*'

Hi!

Im new to theos on Mac and i was able to set everything up properly but upon making i always get that error Error: Could not find profile '*'

im not sure if that error is because of my Mac or because of theos-jailed and would appreciate any help!

writeData.h don't working??

i using writeData.h but don't working. help me fix !

could not find profile '*'

im getting this error after signing

UIDebuggingInformationOverlay Crashes

When I run make package install normally, The app runs fine without crashing. When I put TWEAK_NAME_USE_OVERLAY = 1 in my makefile, the app crashes after installation. I'm going to try a different app just to see if its just the one app that has the issue.

Bypass Hash Check?

So Injustice 2 has this annoying hash check which uses a crc file and if it doesn't match, you can't connect/play online. Is there anyway around this. When I use theos jailed with the app. I can't connect online. I think you are gonna tell me to figure it out myself.

Installation doesn't work

Hi, I'm trying to install it but I keep getting this even If I have the $THEOS environment variable set in "~/.bash_profile":
Error: "" is not a directory. Aborting...

So i declared the $THEOS PATH inside the install script and then I got this:
ln: module/bin/update: File exists

Any suggestions?

Is ARC enabled?

Is ARC for automatic reference counting enabled?

Error: Codesign failed make: *** [internal-package] Error 1

WatchKit installation error

I get this error when I try to hook Applications with Watch Extensions (like Instagram in this case):

Error 0xe80000d9: This app contains a WatchKit app with an invalid bundle identifier. The bundle identifier of a WatchKit app must have a prefix consisting of the companion app's bundle identifier, followed by a '.'. AMDeviceSecureInstallApplication(0, device, url, options, install_callback

Invalid application

Hey, So my theos-jailed compiled everything perfectly. however when I open my app on my ios device, it tells me "Invalid Application, Go to store". Is that a security issue within the app?

Theos jailed affects theos non-jailed?

Hi, i am already using theos to develop my tweaks. I want to know if i install theos jailed, will my original theos work as it it? Does theos jailed overides the original jailbroken theos?

Permission denied

mera$ ./update
error: cannot open .git/FETCH_HEAD: Permission denied

how can I change permission for opt directory "all dirs files"?

is there a way to inject deb

i want to inject deb to add more feature is this possible?

Asking for Password.

I understand how to make deb so but I don't understand why it's asking for password.

AGs-MacBook-Pro:ufctv Amuyea$ make package install
> Making all for tweak ufctv…
make[2]: Nothing to be done for `internal-library-compile'.
> Making stage for tweak ufctv…
dpkg-deb: warning: deprecated compression type 'lzma'; use xz instead
dpkg-deb: warning: ignoring 1 warning about the control file(s)
dpkg-deb: building package 'com.amuyea.ufctv' in './packages/com.amuyea.ufctv_0.0.1-21+debug_iphoneos-arm.deb'.
==> Installing…
Password:
Password:
Password:
Permission denied (publickey,keyboard-interactive).
make: *** [internal-install] Error 255

AGs-MacBook-Pro:ufctv Amuyea$ make install
==> Installing…
Password:
Password:
Password:
Permission denied (publickey,keyboard-interactive).
make: *** [internal-install] Error 255

Could you be clear of what I should do. Thanks

make package error - undefinied symbols for architecture armv7

Hi to all.

I've followed the wiki "Usage" to try this project mixed with the tutorial of BishopFox, because of iOS 10. So the tweak that i've used is linked in this page

When i try to run make package command i've this error

> Making all for tweak Trulia…
==> Preprocessing Tweak.xm…
==> Compiling Tweak.xm (armv7)…
==> Compiling /Users/***/Develop/theos/mod/jailed/lib/fishhook/fishhook.c (armv7)…
==> Linking tweak Trulia (armv7)…
Undefined symbols for architecture armv7:
  "_CYListenServer", referenced from:
      _logosLocalCtor_8bb45991(int, char**, char**) in Tweak.xm.b156651c.o
ld: symbol(s) not found for architecture armv7
clang: error: linker command failed with exit code 1 (use -v to see invocation)
make[3]: *** [/Users/***/Develop/trulia/.theos/obj/debug/armv7/Trulia.dylib] Error 1
make[2]: *** [/Users/***/Develop/trulia/.theos/obj/debug/armv7/Trulia.dylib] Error 2
make[1]: *** [internal-library-all_] Error 2
make: *** [Trulia.all.tweak.variables] Error 2

The set up is:
Mac Mini equipped with

mac OS 10.12.3,
kernel Darwin 16.4
Xcode 8.2.1

Missing dylib?

Get this when trying to make

error: /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/install_name_tool: can't open file: /Users/Cryptic/boz/.theos/_/Payload/blackops.app/Frameworks/BOZ.dylib (No such file or directory)

heres the full log

https://ghostbin.com/paste/49p2d

what wrongs swhen I run command "make package install"?

Output:
make: *** No rule to make target `package'. Stop

Not everything signed?

Hi,

with Deezer Music (https://itunes.apple.com/app/deezer-music/id292738169?mt=8) i noticed following:
When i build a iPA and install it via make install via xcode/itunes the app crashes on iOS 10 when a song is playing, the device is locked and the devices gets woken up but not unlocked (e.g. via powerbutton).
But if i take exactly then same iPA (from packages dir) and push it via cydia impactor to my device it won't crash.
So maybe not everything needed to be signed is signed by ipa.sh?

Sorry I can't compare the files pushed by cydia impactor to the device with the content of the ipa cause i have atm no jailbroken device.

//edit: Crash also happens when signing with iOS App Signer also with some resigning services i tested. Only cydia impactor seems to do it right. (but as i don't have a dev account i only get a 7 day cert with it)

Import a 3rd party library inside Theos Jailed project

Hello all,

First, thanks for the amazing project !
I want to import a private 3rd party library called SocketRocket inside a jailed Theos project.
I tried to copy the SocketRocket.framework file inside /opt/theos/include/PrivateFrameworks/ and adding

ADDITIONAL_CFLAGS += -I$(THEOS)/include/PrivateFrameworks

inside the Makefile but when I try to compile I have

Tweak.xm:3:9: fatal error: 'SocketRocket/SocketRocket.h' file not found
#import <SocketRocket/SocketRocket.h>

Best regards,
Dimitri

Inject Dylib

Hi, i'm trying to inject Frida dylib, (see "Without jailbreak" section).

After download the dylib file and copied it to /Users/<username>/substrate/Library/MobileSubstrate/DynamicLibraries/, i've modified my Makefile, where ssl is the Tweak name.

ssl_INJECTS_INJECT_DYLIBS = FridaGadget.dylib
DEV_CERT_NAME = iPhone Distribution: XXXX
MODULES = jailed
include $(THEOS)/makefiles/common.mk

TWEAK_NAME = ssl
DISPLAY_NAME = ssl
BUNDLE_ID = XXXX

ssl_CFLAGS = -fobjc-arc

ssl_USE_FISHHOOK=1

ssl_FILES = <many files>
ssl_LIBRARIES = sqlite3
ssl_IPA = <path to ipa>

include $(THEOS_MAKE_PATH)/tweak.mk

After that, i've run make package PROFILE=<mobileprovision file> and make install without any errors.

App execute normally and the Tweak features work, but not the Dylib features. So, probably something goes wrong with the injection.

otool -L FridaGadget.dyliboutput is

FridaGadget.dylib:
	@executable_path/Frameworks/FridaGadget.dylib (compatibility version 0.0.0, current version 0.0.0)
	/usr/lib/libresolv.9.dylib (compatibility version 1.0.0, current version 1.0.0)
	/usr/lib/libSystem.dylib (compatibility version 1.0.0, current version 1252.0.0)

kabiroberai / theos-jailed Goto Github PK

theos-jailed's People

Contributors

Stargazers

Watchers

Forkers

theos-jailed's Issues

Steps to reproduce:

Recommend Projects

Recommend Topics

Recommend Org