Skip to content

Instantly share code, notes, and snippets.

@khanhduytran0
khanhduytran0 / _MissedRevoke.md
Last active October 2, 2026 16:16
Bypass revoke and expired certs for iOS 26.x

This is for iOS 26+ only. Read mineek's secret.txt for more info.

I didn't plan to release this that early, but as iOS 27 has already nuked partial restore; and A12/A13 being jailbreakable (including A12 iPads EOL at 26) as soon as a new kernel exploit drops, there is not much to lose.

MissedRevoke

(the "secret.txt" for iOS 26)

iOS has had a long time storing revocation details in separate plists, it was trivially bypassable by zeroing and chflags immutable on them. Since iOS 26.0b2, all of these files have been migrated to mis.db.

@mineek
mineek / guide.txt
Last active October 12, 2026 06:57
block revokes permanently on enterprise certs on iOS
This will permanently block revokes and some ppq stuff.
Use this together with the profile to block some domains "without" a DNS.
Even if you don't have the profile, after applying this your device just cannot register revokes anymore. So you'll just not be able to install the app, but you will not get permanently blacklisted.
note this may lead to side effects. I am not sure. However, it does work.
AS ALWAYS, USE AT YOUR OWN RISK.
Basically all u need to do is run these commands one by one in a terminal on a jailbroken device:
@pixdoet
pixdoet / 15on16sepactivationguide.md
Last active October 9, 2026 07:28 — forked from Orangera1n/15on16sepactivationguide.md
How to activate a device on iOS 15 that was futurerestored on 16 sep

HOLY SHIT is this original guide outdated and broken as fuck

Credits to OrangeRa1n for the original guide

YOLOOOOOOOOO?

This is a guide on how to activate ur idevice on ios 15 (maybe ios 14 idk) when its futurerestored on 16 sep.

DISCLAIMER: I am very aware people might use this to bypass icloud, but I am NOT encouraging you to bypass icloud.

ALSO: THIS IS RECOMMENDED FOR ADVANCED USERS ONLY, i am not responsable for ur device being broken (tho idk how it becomes broken via this)

@chowder
chowder / README.md
Last active October 12, 2026 07:10
Exporting Microsoft Authenticator TOTP secrets

Background

Workplaces may enforce TOTP 2FA to be enabled Office 365 accounts, which require the Microsoft Authenticator app to be installed.

Regular TOTP applications (such as Aegis, Authy, or LastPass) cannot be used as Microsoft uses a proprietary scheme called phonefactor. Furthermore, the application requires Google Services Framework (GSF) to be installed (likely to provide device notifications), and will refuse to work when it is not present on the device.

Forunately, after the registration is complete, the underlying mechanism the app uses to generate TOTP codes is regular otpauth, and its secrets can be exported with a little bit of effort.

Extracting the keys

@Siguza
Siguza / phoenix.c
Last active March 7, 2026 23:37
Phœnix exploit / iOS 9.3.5
// Bugs by NSO Group / Ian Beer.
// Exploit by Siguza & tihmstar.
// Thanks also to Max Bazaliy.
#include <stdint.h> // uint32_t, uint64_t
#include <stdio.h> // fprintf, stderr
#include <string.h> // memcpy, memset, strncmp
#include <unistd.h> // getpid
#include <mach/mach.h>
#include <stdlib.h>
@Cryptiiiic
Cryptiiiic / futurerestore-static-linux.sh
Last active July 17, 2024 19:15
Futurerestore static compile script for Linux
#!/usr/bin/env bash
# Made by @Cryptiiiic, Cryptic#6293
# please build in this docker container:
# docker run -it --name debian debian:buster-slim
set -e
export FR_BASE=/tmp/build
export C_ARGS="-fPIC -static"
export CXX_ARGS="-fPIC -static"
export LD_ARGS="-Wl,--allow-multiple-definition -static -L/usr/lib/x86_64-linux-gnu -L/tmp/out/lib"
export C_ARGS2="-fPIC"
@nikias
nikias / limd-build-macos.sh
Last active August 29, 2026 22:05
Build libimobiledevice stack for macOS with ease
#!/bin/bash
# If you like this script and my work on libimobiledevice, please
# consider becoming a patron at https://patreon.com/nikias - Thanks <3
REV=1.0.22
if test "`echo -e Test`" != "Test" 2>&1; then
echo Please run this with zsh or bash.
exit 1
#!/usr/bin/env bash
#Bypass any and all “Are you sure?” messages from pacman.
NOCONFIRM=1
#Install reflector (https://www.archlinux.org/packages/?name=reflector) ,
#To update mirrorlist and set REFLECTOR_ENABLE=1
REFLECTOR_ENABLE=0
REFLECTOR_COUNTRY="United States"
@jakeajames
jakeajames / patch.sh
Last active November 6, 2025 16:41
Make h3lix work when installed not-via-Impactor. To be used with the latest h3lix.
if [ $# != 2 ]; then
echo "Usage: $0 /path/to/input_ipa /path/to/output_ipa"
exit 1
fi
if ! [ -f $1 ]; then
echo "'$1' does not exist"
exit 1
fi
@baryluk
baryluk / mesa-build.py
Last active September 7, 2026 14:55
Build Mesa from git and libdrm git for Debian. amdgpu build 64-bit and 32-bit for Debian stable, testing and unstable, and possibly Ubuntu, Mint, PopOS, etc. No root required. (well sudo to install some build dependencies required tho). Currently a bit borked on Debian stable (requires newer meson).
#!/usr/bin/env python3
# A simple script to build 64-bit and 32-bit Mesa and libdrm on amd64 Debian
# stable, Debian testing, Debian unstable, and possibly some Ubuntu versions
# with some tweaks.
#
# libdrm is build too, because often version right now in Debian sid and experimental
# is too old for current mesa git repo. Also it is nice to build debug
# versions of libdrm when troubleshooting some crashes and bugs.
#