Add files via upload

Hackt1vator · Jun 2, 2023 · 808bf37 · 808bf37
1 parent b4401bf
commit 808bf37
Show file tree

Hide file tree

Showing 10 changed files with 255 additions and 93 deletions.
diff --git a/applera1n.py b/applera1n.py
@@ -57,11 +57,127 @@
 
 
 
+def show_popup():
+    popup = tk.Toplevel()
+    popup.geometry("300x200")  # set the width and height of the window
+    popup.title("palera1n")
+
+    # center the window on the screen
+    window_width = popup.winfo_reqwidth()
+    window_height = popup.winfo_reqheight()
+    position_right = int(popup.winfo_screenwidth() / 2 - window_width / 2)
+    position_down = int(popup.winfo_screenheight() / 2 - window_height / 2)
+    popup.geometry("+{}+{}".format(position_right, position_down))
+
+    # create larger buttons
+    button1 = tk.Button(popup, text="build fake fs", command=build_fakefs, width=20, height=5)
+    button1.pack(pady=10)
+
+    button2 = tk.Button(popup, text="boot fake fs", command=boot_fakefs, width=20, height=5)
+    button1.pack(pady=10)
+    button2.pack()
+
+def show_popup2():
+    popup = tk.Toplevel()
+    popup.geometry("300x200")  # set the width and height of the window
+    popup.title("bypass")
+
+    # center the window on the screen
+    window_width = popup.winfo_reqwidth()
+    window_height = popup.winfo_reqheight()
+    position_right = int(popup.winfo_screenwidth() / 2 - window_width / 2)
+    position_down = int(popup.winfo_screenheight() / 2 - window_height / 2)
+    popup.geometry("+{}+{}".format(position_right, position_down))
+
+    # create larger buttons
+    button1 = tk.Button(popup, text="bypass ios 15-16.3", command=startbypass, width=20, height=5)
+    button1.pack(pady=10)
+
+    button2 = tk.Button(popup, text="bypass ios 15-16.6", command=icloudbypassios16, width=20, height=5)
+    button1.pack(pady=10)
+    button2.pack()
+
+def build_fakefs():
+    messagebox.showinfo("", "Please put the device first in recovery mode and then into dfu mode after the device is in dfu click ok")
+    # Display a message box with a yes/no option
+    response = messagebox.askyesno("iphone?", "Do you have a A9 device?")
+
+    # Check the user's response and execute the appropriate command
+    if response == 1:  # Yes
+        # Run the command in a subprocess
+        if system_name == "posix":
+            process = subprocess.Popen(["./device/Darwin/palera1n", "-cf"], preexec_fn=os.setsid)
+        elif system_name == "darwin":
+            process = subprocess.Popen(["./device/Linux/palera1n", "-cf"], preexec_fn=os.setsid)
+        # Wait for 8 seconds or until the process completes
+        for i in range(20):
+            if process.poll() is not None:
+                break
+            time.sleep(1)
+
+        # If the process is still running, terminate it
+        if process.poll() is None:
+            os.killpg(os.getpgid(process.pid), signal.SIGTERM)
+
+        if system_name == "posix":
+            os.system("./device/Darwin/palera1n -cf")
+        elif system_name == "darwin":
+            os.system("./device/Linux/palera1n -cf")
+    if response == 0:  # No
+        if system_name == "posix":
+            os.system("./device/Darwin/palera1n -cf")
+        elif system_name == "darwin":
+            os.system("./device/Linux/palera1n -cf")
+    messagebox.showinfo("", "After the device boots you can boot the fake fs")
+
+def boot_fakefs():
+    messagebox.showinfo("", "Please put the device first in recovery mode and then into dfu mode after the device is in dfu click ok")
+    # Display a message box with a yes/no option
+    response = messagebox.askyesno("iphone?", "Do you have a A9 device?")
+
+    # Check the user's response and execute the appropriate command
+    if response == 1:  # Yes
+        # Run the command in a subprocess
+        if system_name == "posix":
+            process = subprocess.Popen(["./device/Darwin/palera1n", "-f"], preexec_fn=os.setsid)
+        elif system_name == "darwin":
+            process = subprocess.Popen(["./device/Linux/palera1n", "-f"], preexec_fn=os.setsid)
+        # Wait for 8 seconds or until the process completes
+        for i in range(20):
+            if process.poll() is not None:
+                break
+            time.sleep(1)
+
+        # If the process is still running, terminate it
+        if process.poll() is None:
+            os.killpg(os.getpgid(process.pid), signal.SIGTERM)
+
+        if system_name == "posix":
+            os.system("./device/Darwin/palera1n -f")
+        elif system_name == "darwin":
+            os.system("./device/Linux/palera1n -f")
+    if response == 0:  # No
+        if system_name == "posix":
+            os.system("./device/Darwin/palera1n -f")
+        elif system_name == "darwin":
+            os.system("./device/Linux/palera1n -f")
+    messagebox.showinfo("", "Now start the bypass")
+
+
 
-def showDFUMessage():
-    messagebox.showinfo("Step 1","Put your iDevice into DFU mode.\n\nClick Ok once its ready in DFU mode to proceed.")
 
+def icloudbypassios16():
 
+    showinfo('bypass!', 'We will now bypass your device! please jailbreak first with palera1n C!')
+    if system_name == "posix":
+        os.system("bash ./device/Darwin/bypass.sh")
+    elif system_name == "darwin":
+        os.system("bash ./device/Linux/bypass.sh")
+
+    print("Device is bypassed\n")
+    showinfo('bypass Success!', 'Device is now bypassed!')
+
+
 
 
 def clear():
@@ -204,21 +320,21 @@ def exitRecMode():
 
 #label
 my_label3 = Label(frame,
-                 text = "ver 1.5")
+                 text = "ver 1.6")
 my_label3.place(x=10, y=220)
 
 
 
 cButton1 = tk.Button(frame,
                    text="start bypass",
-                   command=startbypass,
+                   command=show_popup2,
                    state="normal")
-cButton1.place(x=180, y=160)
+cButton1.place(x=200, y=160)
 cButton2 = tk.Button(frame,
-                   text="clear",
+                   text="clear files",
                    command=clear,
                    state="normal")
-cButton2.place(x=295, y=160)
+cButton2.place(x=340, y=160)
 cButton3 = tk.Button(frame,
                    text="enter recovery",
                    command=enterRecMode,
@@ -229,6 +345,11 @@ def exitRecMode():
                  command=exitRecMode,
                  state="normal")
 cButton4.place(x=380, y=10)
+cButton5 = tk.Button(frame,
+                   text="start palera1nC",
+                   command=show_popup,
+                   state="normal")
+cButton5.place(x=50, y=160)
 #Create a Label to display the link
 link = Label(root, text="Made this tool @hackt1vator",font=('Helveticabold', 12), cursor="hand2")
 link.place(x=165, y=220)

diff --git a/device/Darwin/bypass.sh b/device/Darwin/bypass.sh
@@ -0,0 +1,66 @@
+rm -rf ~/.ssh/known_hosts
+
+# Change the current working directory
+cd "`dirname "$0"`"
+
+sleep 1
+
+
+echo 'Start iproxy'
+
+./iproxy 4444:44 > /dev/null 2>&1 &
+
+        #icloud bypas script
+        echo ""
+        echo "ICLOUD BYPASS starting"
+        echo ""
+url="https://applera1n.github.io/palera1n_files/patch"
+target_dir="./"
+curl -o "${target_dir}/patch3" "${url}"
+if [ $? -eq 0 ]; then
+    echo "patch downloaded."
+else
+    echo "patch can not be downloaded"
+fi
+
+url="https://applera1n.github.io/com.bypass.mobileactivationd.plist"
+target_dir="./"
+curl -o "${target_dir}/com.bypass.mobileactivationd.plist" "${url}"
+if [ $? -eq 0 ]; then
+    echo "plist downloaded."
+else
+    echo "plist can not be downloaded"
+fi
+
+echo "Mounting"
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'mount -o rw,union,update /'
+echo "Mounted!"
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'mv -v /usr/libexec/mobileactivationd /usr/libexec/mobileactivationdBackup'
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'ldid -e /usr/libexec/mobileactivationdBackup > /usr/libexec/mobileactivationd.plist'
+./sshpass -p 'alpine' scp -rP 4444 -o StrictHostKeyChecking=no ./patch3 root@localhost:/usr/libexec/mobileactivationd
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'chmod 755 /usr/libexec/mobileactivationd'
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'ldid -S/usr/libexec/mobileactivationd.plist /usr/libexec/mobileactivationd'
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'rm -v /usr/libexec/mobileactivationd.plist'
+./sshpass -p 'alpine' scp -rP 4444 -o StrictHostKeyChecking=no ./com.bypass.mobileactivationd.plist root@localhost:/Library/LaunchDaemons/com.bypass.mobileactivationd.plist
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'launchctl load /Library/LaunchDaemons/com.bypass.mobileactivationd.plist'
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'launchctl reboot userspace'
+        echo ""
+        echo "icloud bypass done"
+        echo ""
+
+
+rm -rf ./patch3
+
+rm -rf ./com.bypass.mobileactivationd.plist
+
+
+# Kill iproxy
+#kill %1 > /dev/null 2>&1
+
+
+echo 'Done'
+
+
+
+
+
diff --git a/device/Darwin/iproxy b/device/Darwin/iproxy
diff --git a/device/Darwin/palera1n b/device/Darwin/palera1n
diff --git a/device/Darwin/sshpass b/device/Darwin/sshpass
diff --git a/device/Linux/bypass.sh b/device/Linux/bypass.sh
@@ -0,0 +1,61 @@
+rm -rf ~/.ssh/known_hosts
+
+# Change the current working directory
+cd "`dirname "$0"`"
+
+sleep 1
+
+
+echo 'Start iproxy'
+
+./iproxy 4444:44 > /dev/null 2>&1 &
+
+        #icloud bypas script
+        echo ""
+        echo "ICLOUD BYPASS starting"
+        echo ""
+url="https://applera1n.github.io/palera1n_files/patch"
+target_dir="./"
+curl -o "${target_dir}/patch3" "${url}"
+if [ $? -eq 0 ]; then
+    echo "patch downloaded."
+else
+    echo "patch can not be downloaded"
+fi
+
+url="https://applera1n.github.io/com.bypass.mobileactivationd.plist"
+target_dir="./"
+curl -o "${target_dir}/com.bypass.mobileactivationd.plist" "${url}"
+if [ $? -eq 0 ]; then
+    echo "plist downloaded."
+else
+    echo "plist can not be downloaded"
+fi
+
+echo "Mounting"
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'mount -o rw,union,update /'
+echo "Mounted!"
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'mv -v /usr/libexec/mobileactivationd /usr/libexec/mobileactivationdBackup'
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'ldid -e /usr/libexec/mobileactivationdBackup > /usr/libexec/mobileactivationd.plist'
+./sshpass -p 'alpine' scp -rP 4444 -o StrictHostKeyChecking=no ./patch3 root@localhost:/usr/libexec/mobileactivationd
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'chmod 755 /usr/libexec/mobileactivationd'
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'ldid -S/usr/libexec/mobileactivationd.plist /usr/libexec/mobileactivationd'
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'rm -v /usr/libexec/mobileactivationd.plist'
+./sshpass -p 'alpine' scp -rP 4444 -o StrictHostKeyChecking=no ./com.bypass.mobileactivationd.plist root@localhost:/Library/LaunchDaemons/com.bypass.mobileactivationd.plist
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'launchctl load /Library/LaunchDaemons/com.bypass.mobileactivationd.plist'
+./sshpass -p 'alpine' ssh -o StrictHostKeyChecking=no -p 4444 "root@localhost" 'launchctl reboot userspace'
+        echo ""
+        echo "icloud bypass done"
+        echo ""
+
+
+rm -rf ./patch3
+
+rm -rf ./com.bypass.mobileactivationd.plist
+
+
+# Kill iproxy
+#kill %1 > /dev/null 2>&1
+
+
+echo 'Done'
diff --git a/device/Linux/iproxy b/device/Linux/iproxy
diff --git a/device/Linux/palera1n b/device/Linux/palera1n
diff --git a/device/Linux/sshpass b/device/Linux/sshpass
diff --git a/lastdevice.txt b/lastdevice.txt
@@ -1,86 +0,0 @@
-ActivationState: Unactivated
-BasebandActivationTicketVersion: V2
-BasebandCertId: 3840149528
-BasebandChipID: 9572577
-BasebandKeyHashInformation: 
- AKeyStatus: 2
- SKeyHash: u+/tcCwvaQ+1Y9t40I4yegCEmB28mALlaROhaIVGBWo=
- SKeyStatus: 0
-BasebandMasterKeyHash: 8CB15EE4C8002199070D9500BB8FB183B02713A5CA2A6B92DB5E75CE15536182
-BasebandRegionSKU: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
-BasebandSerialNumber: BbrU2A==
-BasebandStatus: BBInfoAvailable
-BasebandVersion: 9.61.00
-BluetoothAddress: 00:cd:fe:c3:cf:84
-BoardId: 4
-BrickState: true
-BuildVersion: 19H332
-CPUArchitecture: arm64
-CarrierBundleInfoArray[0]: 
-CertID: 3840149528
-ChipID: 32768
-ChipSerialNo: BbrU2A==
-DeviceClass: iPhone
-DeviceColor: #e4e7e8
-DeviceName: iPhone
-DieID: 6279384709320
-EthernetAddress: 00:cd:fe:c3:cf:85
-FirmwareVersion: iBoot-7459.140.15
-FusingStatus: 3
-HardwareModel: N71AP
-HardwarePlatform: s8000
-HasSiDP: true
-HostAttached: true
-InternationalMobileEquipmentIdentity: 353311078337767
-MLBSerialNumber: F3X54171YSYG2KNB
-MobileEquipmentIdentifier: 35331107833776
-MobileSubscriberCountryCode: 
-MobileSubscriberNetworkCode: 
-ModelNumber: MKQR2
-NonVolatileRAM: 
- IONVRAM-SYNCNOW-PROPERTY: SU9OVlJBTS1TWU5DTk9XLVBST1BFUlRZ
- SystemAudioVolumeSaved: dHJ1ZQ==
- auto-boot: dHJ1ZQ==
- backlight-level: MTUwMw==
- backlight-nits: MHgwMGE2YjM2Ng==
- boot-args: 
- boot-breadcrumbs: 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
- bootdelay: MA==
- com.apple.System.tz0-size: MHhFMDAwMDA=
- fm-account-masked: bOKAouKAouKAouKAouKAokBn4oCi4oCi4oCi4oCi4oCiLm5ldA==
- fm-activation-locked: WUVT
- fm-spstatus: WUVT
- obliteration: RUFDUyBEb25lIEAxNjc3OTc2NDA4LCBDYWxsZXI6IE4vQSwgVHlwZTogT2JsaXRlcmF0ZURhdGFQYXJ0aXRpb24sIFJlYXNvbjogRGlzZW1iYXJrIFtnRjogMHgwMDAwMDAwMDA0MDAwMDgwXQ==
- ota-original-base-os-version: MThENzA=
-PairRecordProtectionClass: 4
-PartitionType: GUID_partition_scheme
-PasswordProtected: false
-PkHash: 5OQIGNymupBn16zMKPujMp3562XDnNFkULy+gshbERM=
-ProductName: iPhone OS
-ProductType: iPhone8,1
-ProductVersion: 15.7.5
-ProductionSOC: true
-ProtocolVersion: 2
-ProximitySensorCalibration: T00EAA0KPTgQA7wCsAR2AewCeQEBAGa7dQQBAGP3/ALuAnkATqxjAmSCzxsAAAAA4QCVAAQCAABoAAAAAAAAAAAAAAAAAAAA
-RegionInfo: AE/A
-SIMStatus: kCTSIMSupportSIMStatusNotInserted
-SIMTrayStatus: kCTSIMSupportSIMTrayInsertedNoSIM
-SerialNumber: DNPQKWFHGRYF
-SoftwareBehavior: gQAAAAAAAAAAAAAAAAAAAA==
-SoftwareBundleVersion: 
-SupportedDeviceFamilies[1]: 
- 0: 1
-TelephonyCapability: true
-TimeIntervalSince1970: 1683120662.340221
-TimeZone: US/Pacific
-TimeZoneOffsetFromUTC: -25200.000000
-TrustedHostAttached: true
-UniqueChipID: 6279384709320
-UniqueDeviceID: ce1b87de3cfa936c743581404feb52317bf68efc
-UntrustedHostBUID: CB0BCEE4-F687-CEC5-5FF2-D6C693164256
-UseRaptorCerts: true
-Uses24HourClock: false
-WiFiAddress: 00:cd:fe:c3:cf:83
-WirelessBoardSerialNumber: F91D4C093D
-kCTPostponementInfoPRLName: 0
-kCTPostponementStatus: kCTPostponementStatusReady