dora2ios / ipwnder_lite Goto Github PK

Jonahs-MBP ipwnder_lite % ./ipwnder_macosx
[main] Waiting for device in DFU mode...
[main] CONNECTED
[main] CPID: 0x8003, BDID: 0x02, STRG: [iBoot-2234.0.0.2.22]
** exploiting with checkm8
[checkm8_arm64] reconnecting
[checkm8_arm64] running set_global_state()
[checkm8_arm64] reconnecting
[checkm8_arm64] running heap_occupation()

How to fix it?

The device simply reboots when attempting to run ipwnder_lite. I have also tried older version with no luck either. checkra1n works fine, and I noticed that the checkra1n procedure seems different for this device, as it requests to unplug and plug back in the lightning cable at a certain stage.

My environment is macOS 12.4 (21F79) on MacBook Air (Late 2020) (M1), with an iPad 7th generation (j171ap t8010), with an official Apple USB-A to lightning cable via a USB-C to USB-A adapter.

nick@Nicks-MacBook-Air ipwnder_lite % ./ipwnder_macosx -d 
[main] enabled: debug log
[main] Waiting for device in DFU mode...
[io_get_serial] Found serial number!
[main] CONNECTED
[main] CPID: 0x8010, BDID: 0x1c, STRG: [iBoot-2696.0.0.1.33]
** exploiting with checkm8
[checkm8_arm64] reconnecting
[io_reset] ResetDevice: 0
[io_reset] USBDeviceReEnumerate: 0
[checkm8_arm64] running heap_spray()
[heap_spray_a8_a11] (1/7) 0
[heap_spray_a8_a11] (2/7) e0004051, 0
[heap_spray_a8_a11] (3/7) e0004051
[heap_spray_a8_a11] (4/7) e0004051
[heap_spray_a8_a11] (5/7) e0004051
[heap_spray_a8_a11] (6/7) e0004051
[heap_spray_a8_a11] (7/7) e0004051
[checkm8_arm64] reconnecting
[io_reset] ResetDevice: 0
[io_reset] USBDeviceReEnumerate: 0
[checkm8_arm64] ERROR:Failed to reconnect to device

Hi, was wondering which files to modify/add in makefile to build in windows msys if possible..

Is it possible to add support for decrypting with the GID key like ipwndfu?

Iphone 7, ios 15.4.1
Full log:
macbook@MacBook-Air-macbook ipwnder_lite % sudo ./ipwnder_macosx -p [main] Waiting for device in DFU mode... [main] CONNECTED [main] CPID: 0x8010, BDID: 0x0c, STRG: [iBoot-2696.0.0.1.33] [checkm8_t8010] ERROR: Failed to generate payload! macbook@MacBook-Air-macbook ipwnder_lite %

Last time I used this, it did work on the 5C I had, however I cannot get it to work with my 6S (N71mAP). Here is a log:

nick@Nicks-MacBook-Air Other % ipwnder_macosx -p
[main] Waiting for device in DFU mode...
[io_get_serial] Found serial number!
[main] CONNECTED
[main] CPID: 0x8003, BDID: 0x04, STRG: [iBoot-2234.0.0.2.22]
[checkm8_payload] making checkm8 payload with ipwndfu-a9 style
** exploiting with checkm8
[checkm8_s8000] reconnecting
[io_reset] ResetDevice: 0
[io_reset] USBDeviceReEnumerate: 0
[checkm8_s8000] running heap_spray()
[heap_spray] (1/3) e0004051, 10
[heap_spray] (2/3) e0004051
[heap_spray] (3/3) e0004051
[checkm8_s8000] reconnecting
[io_reset] ResetDevice: 0
[io_reset] USBDeviceReEnumerate: 0
[checkm8_s8000] ERROR: Failed to reconnect to device

I have tried restarting my computer, only leaving command prompt on (no other conflicting applications), and tried multiple times without restarting without success. checkra1n does work.

My environment is macOS 12.2 on an M1 MacBook Air (Late 2020).