dora2ios / cpbypass2 Goto Github PK

How is payload.o compiled？thx

I tried loading KPPmodule and it stopped here. What should I do next?
iphone7 ios13.3.1

I wanna test the offsets just found.

} else if (strcmp(u.version, "Darwin Kernel Version 18.7.0: Fri Jun 21 22:24:15 PDT 2019; root:xnu-4903.270.47~7/RELEASE_ARM64_S8000") == 0) {
        /*---- S8000 16G77 [12.4] ----*/
        bootargs_store      = OFFSET(0xFFFFFFF007095E10);
        ml_phys_read_data   = OFFSET(0xFFFFFFF0071BADEC);
        ml_phys_write_data  = OFFSET(0xFFFFFFF0071BB04C);
        _sysent_stat        = OFFSET(0xfffffff007080bb0);
        _copyinstr          = OFFSET(0xFFFFFFF0071B4C64);
        _IOLog              = OFFSET(0xFFFFFFF0075258F0);
        _strcmp             = OFFSET(0xFFFFFFF0071982D8);
        _payload_base       = OFFSET(0xfffffff0075bf6d0); 

It shows It seems that it only supports 16k devices with iOS 13/14. and stuck at Booting.
Maybe the offsets are incorrect. 😅

I have SE 1st, iOS 14.2, But when I load KPPmodule， the following error is reported：
Traceback (most recent call last):
File "module_load.py", line 32, in
dev.ctrl_transfer(0x21, 2, 0, 0, 0)
File "/usr/local/lib/python3.7/site-packages/usb/core.py", line 1079, in ctrl_transfer
self.__get_timeout(timeout))
File "/usr/local/lib/python3.7/site-packages/usb/backend/libusb1.py", line 901, in ctrl_transfer
timeout))
File "/usr/local/lib/python3.7/site-packages/usb/backend/libusb1.py", line 604, in _check
raise USBError(_strerror(ret), ret, _libusb_errno[ret])
usb.core.USBError: [Errno 32] Pipe error

I tested on 6s iOS 13.2 with the offsets i found and failed.

/*---- S8000 17B84 [13.2] ----*/
ml_phys_read_data = OFFSET(0xFFFFFFF0071F0060);
ml_phys_write_data = OFFSET(0xFFFFFFF0071F0290);
_sysent_stat = OFFSET(0xFFFFFFF00709A958);
_copyinstr = OFFSET(0xFFFFFFF0071EAE78);
_IOLog = OFFSET(0xFFFFFFF0075F07E0);
_strcmp = OFFSET(0xFFFFFFF0071CAC00);
_payload_base = OFFSET(0xFFFFFFF0076A36D0);

I've tried compile and run with CPBypass-public/cpbypass64_ms tweak, but it seems not working.

Is the tweak you build in the deb file different from the CPBypass-public one??