Giter Club home page Giter Club logo

time_waste's Introduction

time_waste

iOS 12.0-13.3 tfp0 for all devices (in theory) using heap overflow bug by Brandon Azad (CVE-2020-3837) and cuck00 info leak by Siguza (will probably remove in the future). Exploitation is mostly the same as oob_timestamp with a few differences. The main difference is that this one does not rely on hardcoded addresses and thus should be more reliable. The rest of the code is under GPL (exception given to the unc0ver team)

time_waste's People

Contributors

coolstar avatar jakeajames avatar krisanovdev avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

time_waste's Issues

Time_waste reliability

Hi jake, i am experiencing several issues with time_waste. At times, it causes my device to kernel panic whilst attempting to jailbreak, at other times it fails to jailbreak my device entirely.
My device is iOS 13.3 (iPad Air 2)
My question is, will you be working on a more successful rewrite of the exploit?
Thanks
As you can see from my error log it failed to get tfp0 image

"Undefined symbol" errors when building

I got these 11 errors when building on Xcode 11.3.1 it that all said "Undefined symbol" for a bunch of things. How can I fix these?:

image

Undefined symbols for architecture x86_64:
"_IOConnectCallAsyncStructMethod", referenced from:
_find_port_via_cuck00 in exploit.o
"_IOConnectAddClient", referenced from:
_init_IOAccelerator in IOAccelerator_stuff.o
"_IOConnectCallScalarMethod", referenced from:
_find_port_via_cuck00 in exploit.o
"_IOServiceMatching", referenced from:
_init_IOSurface in IOSurface_stuff.o
_init_IOAccelerator in IOAccelerator_stuff.o
"_kIOMasterPortDefault", referenced from:
_init_IOSurface in IOSurface_stuff.o
_init_IOAccelerator in IOAccelerator_stuff.o
"_IOObjectRelease", referenced from:
_term_IOSurface in IOSurface_stuff.o
_term_IOAccelerator in IOAccelerator_stuff.o
"_IOServiceClose", referenced from:
_term_IOSurface in IOSurface_stuff.o
_term_IOAccelerator in IOAccelerator_stuff.o
"_IOServiceGetMatchingService", referenced from:
_init_IOSurface in IOSurface_stuff.o
_init_IOAccelerator in IOAccelerator_stuff.o
"_IOServiceOpen", referenced from:
_init_IOSurface in IOSurface_stuff.o
_init_IOAccelerator in IOAccelerator_stuff.o
"_IOConnectCallAsyncMethod", referenced from:
_IOAccelCommandQueue2_set_notification_port in IOAccelerator_stuff.o
"_IOConnectCallMethod", referenced from:
_init_IOSurface in IOSurface_stuff.o
_IOSurface_setValue in IOSurface_stuff.o
_IOSurface_getValue in IOSurface_stuff.o
_IOSurface_removeValue in IOSurface_stuff.o
_IOAccelSharedUserClient2_create_shmem in IOAccelerator_stuff.o
_IOAccelSharedUserClient2_destroy_shmem in IOAccelerator_stuff.o
_IOAccelCommandQueue2_submit_command_buffers in IOAccelerator_stuff.o
...
ld: symbol(s) not found for architecture x86_64
clang: error: linker command failed with exit code 1 (use -v to see invocation)

Undefined behavior in IOSurface_stuff

IOSurface_stuff contains undefined behavior that causes time_waste to crash when returning with compiler optimizatione enabled.

I'll keep looking but for now setting -O0 is required on IOSurface_stuff

kernel panic

Hi,jakea, the system reboot(kernel panic) due to a kernel data abort when I spawn a 3rd party process after the exploit successfully

Not working IOS 13.3.1

I though that this update would help jailbreak iOS 13.3.1, iPhone XR but I might just be confused. I politely request you to try to jailbreak iOS 13.3.1. Thank you
C5210E49-AD75-4FB3-9D37-75F395EA96F6

iOS 12.4.1 iPhone XR kernel read fails

I tried running this 6 times and 4/6 times I get:
[i] Offsets selected for iOS 12.0 or above
[] Initialized offsets
[
] Initialized IOAccelerator
[i] page size: 0x4000
[] Initialized IOSurface
[
] Doing stage 0 heap setup
[] Doing stage 1 heap setup
[
] Triggering bug with 7 bytes
[] Corruption worked?
[
] Freed kmsg
[+] ikm_header leak: 0xffffffe124a18028
[+] Segment list calculated to be at: 0xffffffe1189f0000
[+] fakeport: 0x6907
[+] Leaked port: 0xffffffe004764540
[-] Kernel read failed!

And 2/6 times I get a bunch of these messages and they never end until I stop it in Xcode:
[-] Probably won't work with this timestamp, retrying...
[-] Probably won't work with this timestamp, retrying...
[-] Probably won't work with this timestamp, retrying...
[-] Probably won't work with this timestamp, retrying...
[-] Probably won't work with this timestamp, retrying...
[-] Probably won't work with this timestamp, retrying...

iOS 12.2.5 iPhone 6

[i] Offsets selected for iOS 12.0 or above
[] Initialized offsets
[
] Initialized IOAccelerator
[i] page size: 0x1000
[] Initialized IOSurface
[
] Doing stage 0 heap setup
[] Doing stage 1 heap setup
[
] Triggering bug
[] Corruption worked?
[
] Freed kmsg
[-][IOSurface] Failed to get value: 0xe00002db ((iokit/common) no space for data)
[-] Failed to read back value

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.