LukeZGD

Home Depot Offsets iOS 8.x.
Found with the help of https://github.com/Merculous/OF32
bufattr_cpx and bx_lr offsets: first result of searching hex 00687047
A5 offsets should work. tested working: 8.0, 8.3, 8.4.1
A6 does not seem to work at all on Home Depot, possibly because of something to do with the Trident exploit.

A5 8.0-8.0.2
0x2c5308
0x2c73e8
0x1ba80

MTACS

Hosted Preference Bundles

Create a "hosted" view of a preference bundle outside of Preferences.app, and in a dedicated application.

For application

• Create new tweak using "iphone/application_modern" template
• In the app's delegate file add the following to the -(void)applicationDidFinishLaunching:(UIApplication *)application; method:

m1stadev

What's nonce entanglement?

Beginning with devices using an A12 SoC or higher, Apple introduced nonce entangling.

• This meant that, when saving SHSH blobs, a nonce generator would generate a different ApNonce for each device.
• When saving SHSH blobs for an A12+ device, you now must find a generator-ApNonce pair for your device, then use that generator-ApNonce pair when saving SHSH blobs.
• After you have found a generator-ApNonce pair for your device, you can save it and re-use it whenever you save SHSH blobs again.

Getting a generator-ApNonce pair (jailbroken)

1. (iOS 14+ only) Install an iOS kernel r/w library.
   • On Taurine, install libkernrw.

• On unc0ver, install libkrw.

LukeZGD

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>SectionsEnabledIdentifiers</key>
	<array>
		<string>com.apple.controlcenter.settings</string>
		<string>com.apple.controlcenter.brightness</string>
		<string>com.atwiiks.controlcenterx.volume-slider</string>
		<string>com.atwiiks.controlcenterx.air-night</string>

Siguza

// Bugs by NSO Group / Ian Beer.
// Exploit by Siguza & tihmstar.
// Thanks also to Max Bazaliy.

#include <stdint.h>             // uint32_t, uint64_t
#include <stdio.h>              // fprintf, stderr
#include <string.h>             // memcpy, memset, strncmp
#include <unistd.h>             // getpid
#include <mach/mach.h>
#include <stdlib.h>

LukeZGD

• Patch: https://github.com/LukeZGD/iOS-OTA-Downgrader-Keys/releases/download/jailbreak/untether.patch
• Commands:

# Patch
bspatch untether.bin untethermod.bin untether.patch
# Get diff
xxd untether.bin u1.hex
xxd untethermod.bin u2.hex
diff u1.hex u2.hex

tihmstar

extern "C"
void initKernRw(mach_port_t dstTask, uint64_t dstTaskAddr, uint64_t (*kread64)(uint64_t addr), void (*write_20)(uint64_t addr, const void *buf)){
    KernelRW *newKrw = new KernelRW;

    auto p = newKrw->getPrimitivepatches(kread64,dstTaskAddr);

    {
        uint8_t buf[20];
        for (int i=0; i<sizeof(buf); i+=8) {
            *((uint64_t*)&buf[i]) = kread64(p.where-20+8+4+i);

nullpixel

#include <mach/mach.h> // mach_task_self, vm_protect
#include <substrate.h> // MSFindSymbol


// MARK: - Types

typedef void (*MSHookMemory_ptr_t)(void *target, const void *data, size_t size);

#define ENSURE_KERN_SUCCESS(ret) \ 
if (ret != KERN_SUCCESS) { \

jakeajames

if [ $# != 2 ]; then
    echo "Usage: $0 /path/to/input_ipa /path/to/output_ipa"
    exit 1
fi

if ! [ -f $1 ]; then
    echo "'$1' does not exist"
    exit 1
fi

TheRealKeto

Futurerestore Guide

Futurerestore is a tool that allows users to upgrade, downgrade, or re-restore their iOS device to an unsigned firmware through the use of SHSH2 blobs. This guide will teach you how to use Futurerestore in order to upgrade, downgrade, or re-restore to an unsigned firmware.

Before continuing, keep in mind that this guide is based off of this one, and contains information that can change your device's behavior or even damage it. With that in mind, please read the guide fully, as no one but YOU will be held responsible for any damage caused to your device.

Notes and Hints

Throughout the entirety of this guide, keep in mind that:

• iOS 13.1.3's SEP and Baseband are NOT compatible with iOS 12.x for all devices. This means that you're NOT able to upgrade, downgrade, or re-restore A10-A12X devices back to iOS 12.x. Attempting to use an incompatible SEP and Baseband will cause Futureresto