Skip to content

Instantly share code, notes, and snippets.

View matthewcabor's full-sized avatar

Matthew Cabor matthewcabor

View GitHub Profile
@spv420
spv420 / untether.txt
Created October 28, 2021 13:59
untether.txt is back
i'll do a better release tomorrow or something, but to keep my promise, here's a gist
bug2:
platform-application bypass,
/usr/bin/fileproviderctl is a binary with a purpose i'm not sure of, however, it executes /usr/local/bin/fileproviderctl_internal when run
make /usr/local/bin/fileproviderctl_internal a symlink to your code to execute, and replace a daemon with /usr/bin/fileproviderctl
recommended to use wifiFirmwareLoader, and SUID fileproviderctl with mobile:mobile (if it runs as root containermanagerd has a seizure)
boom, BFU code exec on >11.xish -> 14.xish
bug3:
platform-application bypass,