Comments (3)
The first step required for this would be raw image boot in checkra1n - which should not be a problem in theory.
Then, if booted from DFU, then iBoot will act as iBSS/iBEC and expect a devicetree/kernel/ramdisk combo uploaded over USB. And our injected shellcode would divert the boot flow to PongoOS after the handoff trampoline. That should in theory all work, if we implemented raw image boot.
However, if your device does physically not have a functional NAND, then that will be an issue, as iBoot will try to load NVRAM variables and SysCfg data off NAND.
from pongoos.
iPhone7,2 boots up to SSH ramdisk properly with NAND physically desoldered. (Yes, it does complain about absense of NAND)
from pongoos.
The first step required for this would be raw image boot in checkra1n - which should not be a problem in theory. Then, if booted from DFU, then iBoot will act as iBSS/iBEC and expect a devicetree/kernel/ramdisk combo uploaded over USB. And our injected shellcode would divert the boot flow to PongoOS after the handoff trampoline. That should in theory all work, if we implemented raw image boot.
However, if your device does physically not have a functional NAND, then that will be an issue, as iBoot will try to load NVRAM variables and SysCfg data off NAND.
and if we just patched the iboot to localboot automatically and then load it on dfu it should boot and load devicetree/kernel/ramdisk from the system instead of usb, but there is the problem it will boot without checkra1n. is there something to get checkra1n inject the shellcode into an specific iboot image loaded from usb and then boot with it ?
from pongoos.
Related Issues (20)
- Cannot build on macOS 13 HOT 3
- Running fetch_stdout.py triggers kernel panic HOT 1
- It is work in windows?? HOT 1
- variable ... set but not used HOT 2
- Timed out waiting for download mode HOT 2
- Can't build testmodule example (iOS15 Branch) HOT 1
- PongoOS image is too large: must be at most 0x7fe00, have 0xa5060 HOT 1
- ld: symbol(s) not found for architecture arm64 HOT 6
- quick question do i have permission to use some or your code in the repo's on this org? HOT 1
- use framebuffer after lowlevel_cleanup()
- T2 ssh HOT 9
- Ubuntu Build Error : ld: could not process llvm bitcode object file HOT 10
- Android on iOS15 branch currently broken HOT 11
- [Checkra1n development status]
- Questions about PongoOS
- ld: symbol(s) not found for architecture arm64 HOT 1
- Stuck in Booting PongoOS HOT 1
- .asc gpg key checkra1n???? HOT 1
- Support for ipod touch? HOT 2
- Unfortunately, it's a pity that pongoOS can no longer be compiled... HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pongoos.