Sneed-Group/historical
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
historical/BLEEPiOS.git
History
ThatLinuxFan 4061214e6a phht hahahahaah
2024-01-16 11:20:27 -06:00
..
compile.bat phht hahahahaah 2024-01-16 11:20:27 -06:00
ios-tasr.c phht hahahahaah 2024-01-16 11:20:27 -06:00
LICENSE phht hahahahaah 2024-01-16 11:20:27 -06:00
README.md phht hahahahaah 2024-01-16 11:20:27 -06:00

README.md

BLEEPiOS

BLEEPiOS = the Best LittlE ExPloit for iOS!

Q: What is it? A: It allows you to inject code to IPAs in Windows!

Q: Why? A: To show that there's an unpatchable exploit in the iOS code, when one really thinks about it. (Unpatchable as in iOS would need a massive rewrite to fix it.)

Q: How to do a simple Hello World? A (This is a long one!):

  • OK so first install The GNU Tools for ARM Embeded Devices (just google for "arm gnu gcc free download")
  • Next find a target IPA (perferably a legal one, https://iosninja.io/ipa-library for example)
  • I AM NOT A LEGAL EXPERT
  • Ok so now you need to change it to a ZIP file, and extract the binary.
  • Copy binary to working directory, along with BLEEPiOS files. (Should be just the apps name, in Delta's case. I used Delta.)
    • Change the name, but remember the default name.
    • Be sure to leave the zip open! We will need it later
  • Now open the GNU ARM Command Prompt from your start menu. (Named "GCC Command Prompt")
  • Remember the name of the renamed binary? Good. Now execute "compile.bat binname", replacing binname with the actual binary name.
  • It should output "ios-tasr-mainexploit" and "BLEEPiOSFinal." If it does, it should be a success! If BLEEPiOSFinal is missing, it's likely your binary name is wrong! Make sure you typed it right!
  • Remember the default name of the binary? Good! Just rename "BLEEPiOSFinal" to the default binary name.
  • Also, remember that IPA we turned into the zip file? (And backed up, hopefully!) Replace the old binary with the new one.
  • Done! Now just use the tool here to sign it and put it on a device (It should just look like the normal app, but with C code running at boot!): https://dantheman827.github.io/ios-app-signer/
  • Now what? Well, you can change ios-tasr.c (iOS Terminate and Stay Resident, but i got lazy and did a regular app instead of TaSR) to just about anything!
    • Well, as long it runs in the background.

Q: How long did it take in total for you to dev this A: About 2.05-2.1 months of dev. time over the span of 3-4 years.

Q: Can I use this for my own projects? A: Sure, just follow the license!