2.1 KiB
2.1 KiB
BLEEPiOS
BLEEPiOS = the Best LittlE ExPloit for iOS!
Q: What is it? A: It allows you to inject code to IPAs in Windows!
Q: Why? A: To show that there's an unpatchable exploit in the iOS code, when one really thinks about it. (Unpatchable as in iOS would need a massive rewrite to fix it.)
Q: How to do a simple Hello World? A (This is a long one!):
- OK so first install The GNU Tools for ARM Embeded Devices (just google for "arm gnu gcc free download")
- Next find a target IPA (perferably a legal one, https://iosninja.io/ipa-library for example)
- I AM NOT A LEGAL EXPERT
- Ok so now you need to change it to a ZIP file, and extract the binary.
- Copy binary to working directory, along with BLEEPiOS files. (Should be just the apps name, in Delta's case. I used Delta.)
- Change the name, but remember the default name.
- Be sure to leave the zip open! We will need it later
- Now open the GNU ARM Command Prompt from your start menu. (Named "GCC Command Prompt")
- Remember the name of the renamed binary? Good. Now execute "compile.bat binname", replacing binname with the actual binary name.
- It should output "ios-tasr-mainexploit" and "BLEEPiOSFinal." If it does, it should be a success! If BLEEPiOSFinal is missing, it's likely your binary name is wrong! Make sure you typed it right!
- Remember the default name of the binary? Good! Just rename "BLEEPiOSFinal" to the default binary name.
- Also, remember that IPA we turned into the zip file? (And backed up, hopefully!) Replace the old binary with the new one.
- Done! Now just use the tool here to sign it and put it on a device (It should just look like the normal app, but with C code running at boot!): https://dantheman827.github.io/ios-app-signer/
- Now what? Well, you can change ios-tasr.c (iOS Terminate and Stay Resident, but i got lazy and did a regular app instead of TaSR) to just about anything!
- Well, as long it runs in the background.
Q: How long did it take in total for you to dev this A: About 2.05-2.1 months of dev. time over the span of 3-4 years.
Q: Can I use this for my own projects? A: Sure, just follow the license!