matthewpierson / ramiel Goto Github PK
View Code? Open in Web Editor NEWAn open-source, multipurpose macOS GUI utility for checkm8-vulnerable iOS/iPadOS devices
License: GNU General Public License v3.0
An open-source, multipurpose macOS GUI utility for checkm8-vulnerable iOS/iPadOS devices
License: GNU General Public License v3.0
The error log is:
`Ramiel wasn't able to reconnect to the device after sending iBSS for the second time
Failed to send iBSS to device for the second time
Detailed Error Log:
libirecovery returned: IRECV_E_NO_DEVICE192`
My Device info:
iPhone 8P
OS: 12.0 IPSW: 13.4.1
When the error happened, my device was being rebooted. That's why Ramiel cannot connect to my phone.
So why my device is rebooted? Can it be fixed?
It is sure I succeeded to make a boot with a customized logo. But only 1 time. When I tried a second time, error happened. What is the root cause?
Describe the bug
The iPhone Wiki site is down. We cannot get firmware keys. We cannot proceed dual-booting.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
An error that says theiphonewiki.com is down and that the app cannot grab firmware keys.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Log from the app
Device Information:
Model: n69uap
iOS Version: 13.5
Bootargs: "-v"
Other Error Information:
Please check detailed log for more information
Failed to get firmware keys
Detailed Error Log:
(null)
Device Information:
Model: j71tap
iOS Version: 14.2
Bootargs: "-v"
Other Error Information:
Kairos returned with: -1
Failed to patch iBSS
Detailed Error Log:
N/A
when I open in the Terminal, many error with
10.15
I think this is why
Any option?
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
Device Information:
Model: d11ap
iOS Version: 13.7
Bootargs: "-v"
Other Error Information:
Ramiel wasn't able to reconnect to the device after sending iBSS for the second time
Failed to send iBSS to device for the second time
Detailed Error Log:
libirecovery returned: IRECV_E_NO_DEVICE
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Dualboot to iOS 13.7 with 14.6 as main.
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
Describe the bug
It is known that macOS Big Sur 11.3 beta breaks checkm8 exploit over USB, for some reasons. For my case, eclipsa8000
binary will never terminate, causing the whole application to hang - just like when running directly from ipwndfu
.
The application should at least display an error that the exploit failed to work.
Reference: https://www.reddit.com/r/jailbreak/comments/ldbhfv/news_macos_big_sur_11_beta_3_intel_breaks/
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Not sure if this information would help. Console app is being spammed with this from Ramiel:
... Ramiel@(null): AppleUSBHostUserClient::start: missing entitlement com.apple.ibridge.control
"Device is not in pwned DFU mode..."
"Your iPhone10.6 is not in PWNED DFU mode. Please enter it now. Run checkm8"
Detailed Error Log:
*** checkm8 exploit by axi0mX ***
Found: CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:0E ECID:000C65E91320102D IBFL:3C SRTG:[iBoot-3332.0.0.1.23]
ERROR: Exploit failed. Device did not enter pwned DFU Mode.
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
skys-iMac:Desktop sky$ /Applications/Ramiel.app/Contents/MacOS/Ramiel
2021-03-30 23:06:19.171 Ramiel[1025:15785] Failed to connect (titleBox) outlet from (RamielView) to (NSTextField): missing setter or instance variable
2021-03-30 23:06:20.047 Ramiel[1025:15785] 6
2021-03-30 23:06:20.047 Ramiel[1025:15785] 48
2021-03-30 23:06:20.512 Ramiel[1025:15785] This application is trying to draw a very large combo box, 31 points tall. Vertically resizable combo boxes are not supported, but it happens that 10.4 and previous drew something that looked kind of sort of okay. The art in 10.5 does not break up in a way that supports that drawing. This application should be revised to stop using large combo boxes. This warning will appear once per app launch.
objc[1025]: Class FIFinderSyncExtensionHost is implemented in both /System/Library/PrivateFrameworks/FinderKit.framework/Versions/A/FinderKit (0x7fff8d2fc3f0) and /System/Library/PrivateFrameworks/FileProvider.framework/OverrideBundles/FinderSyncCollaborationFileProviderOverride.bundle/Contents/MacOS/FinderSyncCollaborationFileProviderOverride (0x10f2f9f50). One of the two will be used. Which one is undefined.
2021-03-30 23:07:40.634 Ramiel[1025:15962] unzipping...
2021-03-30 23:07:42.636 Ramiel[1025:15962] unzipping...
2021-03-30 23:07:44.636 Ramiel[1025:15962] unzipping...
2021-03-30 23:07:46.639 Ramiel[1025:15962] unzipping...
2021-03-30 23:07:48.639 Ramiel[1025:15962] unzipping...
2021-03-30 23:07:50.638 Ramiel[1025:15962] unzipping...
2021-03-30 23:07:52.640 Ramiel[1025:15962] unzipping...
2021-03-30 23:07:54.642 Ramiel[1025:15962] unzipping...
2021-03-30 23:07:56.645 Ramiel[1025:15962] unzipping...
2021-03-30 23:07:58.644 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:00.645 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:02.645 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:04.646 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:06.647 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:08.651 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:10.652 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:12.654 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:14.654 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:16.654 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:18.655 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:20.655 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:22.657 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:24.660 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:26.663 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:28.664 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:30.664 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:32.665 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:34.666 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:36.666 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:38.669 Ramiel[1025:15962] unzipping...
2021-03-30 23:08:40.671 Ramiel[1025:15962] unzipping...
ldid.cpp(3004): assert(): errno=2
ldid.cpp(705): assert(): Swap(mach_header->filetype) == MH_EXECUTE || Swap(mach_header->filetype) == MH_DYLIB || Swap(mach_header_->filetype) == MH_BUNDLE
ldid.cpp(693): _assert(): false
ldid.cpp(693): _assert(): false
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
[+] Patching /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibss.raw
[+] Base address: 0x1800b0000
[+] Does have kernel load
[+] Patching boot-args...
[+] Image base address at 0x1800b0000
[+] Searching for alternate boot-args
[+] Found boot-arg string at 0x5a487
[+] Found boot-arg xref at 0x18478
[+] Changed CSEL to MOV
[+] Found branch pointing to 0x1800c8584 at 0x18468
[+] Changed ADR X20, 0x180108340 to ADR X20, 0x18010a487
[+] Enabling kernel debug...
[+] Found debug-enabled string at 0x59f68
[+] Found debug-enabled xref at 0x16f2c
[+] Found second bl after debug-enabled xref at 0x16f40
[+] Wrote MOVZ X0, #1 to 0x1800c6f40
[+] Enabled kernel debug
[+] Unlocking nvram...
[+] Found debug-uarts string at 0x180108536
[+] Found debug-uarts reference at 0x5b9a8
[+] setenv whitelist begins at 0x5b998
[+] Found ref to setenv whitelist at 0x2d20
[+] Forcing sub_1800b2d04 to return immediately
[+] Found env whitelist at 0x5b9c8
[+] Found ref to env whitelist at 0x2d6c
[+] Forcing sub_1800b2d54 to return immediately
[+] Found "com.apple.System." string at 0x18010b577
[+] Found reference to "com.apple.System." at 0x3ec88
[+] Forcing sub_1800eec80 to return immediately
[+] Patching out RSA signature check...
[+] Found IMG4 string at 0x59e23
[+] Found IMG4 xref at 0x14d1c
[+] Found beginning of _image4_get_partial at 0x14cac
[+] Found xref to _image4_get_partial at 0x15724
[+] Found start of sub_1800c5644
[+] Found ADR X2, 0x18010cc38 at 0x15c7c
[+] Call to 0x14fc0
[+] RET found for sub_1800c4fc0 at 0x155a0
[+] Did MOV r0, #0 and RET
[+] Wrote patched image to /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibss.pwn
[+] Patching /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibec.raw
[+] Base address: 0x1800b0000
[+] Does have kernel load
[+] Patching boot-args...
[+] Image base address at 0x1800b0000
[+] Searching for alternate boot-args
[+] Found boot-arg string at 0x5a487
[+] Found boot-arg xref at 0x18478
[+] Changed CSEL to MOV
[+] Found branch pointing to 0x1800c8584 at 0x18468
[+] Changed ADR X20, 0x180108340 to ADR X20, 0x18010a487
[+] Enabling kernel debug...
[+] Found debug-enabled string at 0x59f68
[+] Found debug-enabled xref at 0x16f2c
[+] Found second bl after debug-enabled xref at 0x16f40
[+] Wrote MOVZ X0, #1 to 0x1800c6f40
[+] Enabled kernel debug
[+] Unlocking nvram...
[+] Found debug-uarts string at 0x180108536
[+] Found debug-uarts reference at 0x5b9a8
[+] setenv whitelist begins at 0x5b998
[+] Found ref to setenv whitelist at 0x2d20
[+] Forcing sub_1800b2d04 to return immediately
[+] Found env whitelist at 0x5b9c8
[+] Found ref to env whitelist at 0x2d6c
[+] Forcing sub_1800b2d54 to return immediately
[+] Found "com.apple.System." string at 0x18010b577
[+] Found reference to "com.apple.System." at 0x3ec88
[+] Forcing sub_1800eec80 to return immediately
[+] Patching out RSA signature check...
[+] Found IMG4 string at 0x59e23
[+] Found IMG4 xref at 0x14d1c
[+] Found beginning of _image4_get_partial at 0x14cac
[+] Found xref to _image4_get_partial at 0x15724
[+] Found start of sub_1800c5644
[+] Found ADR X2, 0x18010cc38 at 0x15c7c
[+] Call to 0x14fc0
[+] RET found for sub_1800c4fc0 at 0x155a0
[+] Did MOV r0, #0 and RET
[+] Wrote patched image to /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibec.pwn
[w] patch: offset 0x1069c5c has a8, expected fd
[e] cannot apply patch
2021-03-30 23:09:15.751 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:17.756 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:19.760 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:21.762 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:23.763 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:25.765 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:27.769 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:29.772 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:31.777 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:33.779 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:35.781 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:37.782 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:39.784 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:41.785 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:43.785 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:45.789 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:47.790 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:49.793 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:51.794 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:53.796 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:55.801 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:57.806 Ramiel[1025:15962] Waiting...
2021-03-30 23:09:58.616 Ramiel[1025:15785] Booted device successfully!
Creating listening port 2222 for device port 44
bind(): Address already in use
Error creating socket for listen port 2222: Address already in use
Exception: Error reading SSH protocol banner[Errno 54] Connection reset by peer
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout
x = self.__socket.recv(128)
ConnectionResetError: [Errno 54] Connection reset by peer
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2039, in run
self._check_banner()
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2215, in _check_banner
raise SSHException(
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout
x = self.__socket.recv(128)
ConnectionResetError: [Errno 54] Connection reset by peer
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/Applications/Ramiel.app/Contents/Resources/ssh/dump.py", line 9, in
client.connect(hostname="localhost", password="alpine", username="root", port=2222)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/client.py", line 406, in connect
t.start_client(timeout=timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 660, in start_client
raise e
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2039, in run
self._check_banner()
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2215, in _check_banner
raise SSHException(
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer
Exception: Error reading SSH protocol banner[Errno 54] Connection reset by peer
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout
x = self.__socket.recv(128)
ConnectionResetError: [Errno 54] Connection reset by peer
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2039, in run
self._check_banner()
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2215, in _check_banner
raise SSHException(
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout
x = self.__socket.recv(128)
ConnectionResetError: [Errno 54] Connection reset by peer
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/Applications/Ramiel.app/Contents/Resources/ssh/dump.py", line 9, in
client.connect(hostname="localhost", password="alpine", username="root", port=2222)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/client.py", line 406, in connect
t.start_client(timeout=timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 660, in start_client
raise e
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2039, in run
self._check_banner()
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2215, in _check_banner
raise SSHException(
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer
[Restored 30 Mar 2021 at 11:17:34 PM]
Last login: Tue Mar 30 23:15:37 on console
Restored session: Tue Mar 30 23:13:34 CST 2021
skys-iMac:Desktop sky$ clear
skys-iMac:Desktop sky$ /Applications/Ramiel.app/Contents/MacOS/Ramiel
2021-03-30 23:18:03.364 Ramiel[467:14651] Failed to connect (titleBox) outlet from (RamielView) to (NSTextField): missing setter or instance variable
2021-03-30 23:18:04.165 Ramiel[467:14666] Setting closedState to: 0
2021-03-30 23:18:04.289 Ramiel[467:14651] 68
2021-03-30 23:18:04.289 Ramiel[467:14651] 57
2021-03-30 23:18:04.351 Ramiel[467:14651] This application is trying to draw a very large combo box, 31 points tall. Vertically resizable combo boxes are not supported, but it happens that 10.4 and previous drew something that looked kind of sort of okay. The art in 10.5 does not break up in a way that supports that drawing. This application should be revised to stop using large combo boxes. This warning will appear once per app launch.
objc[467]: Class FIFinderSyncExtensionHost is implemented in both /System/Library/PrivateFrameworks/FinderKit.framework/Versions/A/FinderKit (0x7fff8b36d3f0) and /System/Library/PrivateFrameworks/FileProvider.framework/OverrideBundles/FinderSyncCollaborationFileProviderOverride.bundle/Contents/MacOS/FinderSyncCollaborationFileProviderOverride (0x11b7a5f50). One of the two will be used. Which one is undefined.
2021-03-30 23:18:57.190 Ramiel[467:14891] unzipping...
2021-03-30 23:18:59.191 Ramiel[467:14891] unzipping...
2021-03-30 23:19:01.196 Ramiel[467:14891] unzipping...
2021-03-30 23:19:03.201 Ramiel[467:14891] unzipping...
2021-03-30 23:19:05.204 Ramiel[467:14891] unzipping...
2021-03-30 23:19:07.205 Ramiel[467:14891] unzipping...
2021-03-30 23:19:09.207 Ramiel[467:14891] unzipping...
2021-03-30 23:19:11.208 Ramiel[467:14891] unzipping...
2021-03-30 23:19:13.210 Ramiel[467:14891] unzipping...
2021-03-30 23:19:15.212 Ramiel[467:14891] unzipping...
2021-03-30 23:19:17.214 Ramiel[467:14891] unzipping...
2021-03-30 23:19:19.215 Ramiel[467:14891] unzipping...
2021-03-30 23:19:21.217 Ramiel[467:14891] unzipping...
2021-03-30 23:19:23.219 Ramiel[467:14891] unzipping...
2021-03-30 23:19:25.220 Ramiel[467:14891] unzipping...
2021-03-30 23:19:27.221 Ramiel[467:14891] unzipping...
2021-03-30 23:19:29.221 Ramiel[467:14891] unzipping...
2021-03-30 23:19:31.223 Ramiel[467:14891] unzipping...
2021-03-30 23:19:33.223 Ramiel[467:14891] unzipping...
2021-03-30 23:19:35.223 Ramiel[467:14891] unzipping...
2021-03-30 23:19:37.224 Ramiel[467:14891] unzipping...
2021-03-30 23:19:39.224 Ramiel[467:14891] unzipping...
2021-03-30 23:19:41.224 Ramiel[467:14891] unzipping...
2021-03-30 23:19:43.225 Ramiel[467:14891] unzipping...
2021-03-30 23:19:45.225 Ramiel[467:14891] unzipping...
2021-03-30 23:19:47.227 Ramiel[467:14891] unzipping...
2021-03-30 23:19:49.233 Ramiel[467:14891] unzipping...
2021-03-30 23:19:51.235 Ramiel[467:14891] unzipping...
2021-03-30 23:19:53.238 Ramiel[467:14891] unzipping...
2021-03-30 23:19:55.239 Ramiel[467:14891] unzipping...
2021-03-30 23:19:57.245 Ramiel[467:14891] unzipping...
2021-03-30 23:19:59.248 Ramiel[467:14891] unzipping...
2021-03-30 23:20:01.248 Ramiel[467:14891] unzipping...
ldid.cpp(3004): assert(): errno=2
ldid.cpp(705): assert(): Swap(mach_header->filetype) == MH_EXECUTE || Swap(mach_header->filetype) == MH_DYLIB || Swap(mach_header_->filetype) == MH_BUNDLE
ldid.cpp(693): _assert(): false
ldid.cpp(693): _assert(): false
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
ldid.cpp(2244): _assert(): DiskFolder::Open(Info.plist)
[+] Patching /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibss.raw
[+] Base address: 0x1800b0000
[+] Does have kernel load
[+] Patching boot-args...
[+] Image base address at 0x1800b0000
[+] Searching for alternate boot-args
[+] Found boot-arg string at 0x5a487
[+] Found boot-arg xref at 0x18478
[+] Changed CSEL to MOV
[+] Found branch pointing to 0x1800c8584 at 0x18468
[+] Changed ADR X20, 0x180108340 to ADR X20, 0x18010a487
[+] Enabling kernel debug...
[+] Found debug-enabled string at 0x59f68
[+] Found debug-enabled xref at 0x16f2c
[+] Found second bl after debug-enabled xref at 0x16f40
[+] Wrote MOVZ X0, #1 to 0x1800c6f40
[+] Enabled kernel debug
[+] Unlocking nvram...
[+] Found debug-uarts string at 0x180108536
[+] Found debug-uarts reference at 0x5b9a8
[+] setenv whitelist begins at 0x5b998
[+] Found ref to setenv whitelist at 0x2d20
[+] Forcing sub_1800b2d04 to return immediately
[+] Found env whitelist at 0x5b9c8
[+] Found ref to env whitelist at 0x2d6c
[+] Forcing sub_1800b2d54 to return immediately
[+] Found "com.apple.System." string at 0x18010b577
[+] Found reference to "com.apple.System." at 0x3ec88
[+] Forcing sub_1800eec80 to return immediately
[+] Patching out RSA signature check...
[+] Found IMG4 string at 0x59e23
[+] Found IMG4 xref at 0x14d1c
[+] Found beginning of _image4_get_partial at 0x14cac
[+] Found xref to _image4_get_partial at 0x15724
[+] Found start of sub_1800c5644
[+] Found ADR X2, 0x18010cc38 at 0x15c7c
[+] Call to 0x14fc0
[+] RET found for sub_1800c4fc0 at 0x155a0
[+] Did MOV r0, #0 and RET
[+] Wrote patched image to /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibss.pwn
[+] Patching /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibec.raw
[+] Base address: 0x1800b0000
[+] Does have kernel load
[+] Patching boot-args...
[+] Image base address at 0x1800b0000
[+] Searching for alternate boot-args
[+] Found boot-arg string at 0x5a487
[+] Found boot-arg xref at 0x18478
[+] Changed CSEL to MOV
[+] Found branch pointing to 0x1800c8584 at 0x18468
[+] Changed ADR X20, 0x180108340 to ADR X20, 0x18010a487
[+] Enabling kernel debug...
[+] Found debug-enabled string at 0x59f68
[+] Found debug-enabled xref at 0x16f2c
[+] Found second bl after debug-enabled xref at 0x16f40
[+] Wrote MOVZ X0, #1 to 0x1800c6f40
[+] Enabled kernel debug
[+] Unlocking nvram...
[+] Found debug-uarts string at 0x180108536
[+] Found debug-uarts reference at 0x5b9a8
[+] setenv whitelist begins at 0x5b998
[+] Found ref to setenv whitelist at 0x2d20
[+] Forcing sub_1800b2d04 to return immediately
[+] Found env whitelist at 0x5b9c8
[+] Found ref to env whitelist at 0x2d6c
[+] Forcing sub_1800b2d54 to return immediately
[+] Found "com.apple.System." string at 0x18010b577
[+] Found reference to "com.apple.System." at 0x3ec88
[+] Forcing sub_1800eec80 to return immediately
[+] Patching out RSA signature check...
[+] Found IMG4 string at 0x59e23
[+] Found IMG4 xref at 0x14d1c
[+] Found beginning of _image4_get_partial at 0x14cac
[+] Found xref to _image4_get_partial at 0x15724
[+] Found start of sub_1800c5644
[+] Found ADR X2, 0x18010cc38 at 0x15c7c
[+] Call to 0x14fc0
[+] RET found for sub_1800c4fc0 at 0x155a0
[+] Did MOV r0, #0 and RET
[+] Wrote patched image to /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibec.pwn
[w] patch: offset 0x1069c5c has a8, expected fd
[e] cannot apply patch
2021-03-30 23:20:35.808 Ramiel[467:14891] Waiting...
2021-03-30 23:20:37.813 Ramiel[467:14891] Waiting...
2021-03-30 23:20:39.818 Ramiel[467:14891] Waiting...
2021-03-30 23:20:41.822 Ramiel[467:14891] Waiting...
2021-03-30 23:20:42.433 Ramiel[467:17993] Failed to send /Applications/Ramiel.app/Contents/Resources/ibec.img4 image
2021-03-30 23:20:43.825 Ramiel[467:14891] Waiting...
2021-03-30 23:20:45.434 Ramiel[467:17993] Failed to send /Applications/Ramiel.app/Contents/Resources/ibec.img4 image
2021-03-30 23:20:45.830 Ramiel[467:14891] Waiting...
2021-03-30 23:20:46.434 Ramiel[467:17993] Failed to send go commmand
2021-03-30 23:20:47.835 Ramiel[467:14891] Waiting...
2021-03-30 23:20:49.841 Ramiel[467:14891] Waiting...
2021-03-30 23:20:51.846 Ramiel[467:14891] Waiting...
2021-03-30 23:20:53.848 Ramiel[467:14891] Waiting...
2021-03-30 23:20:55.853 Ramiel[467:14891] Waiting...
2021-03-30 23:20:57.858 Ramiel[467:14891] Waiting...
2021-03-30 23:20:59.859 Ramiel[467:14891] Waiting...
2021-03-30 23:21:01.859 Ramiel[467:14891] Waiting...
2021-03-30 23:21:03.864 Ramiel[467:14891] Waiting...
2021-03-30 23:21:05.869 Ramiel[467:14891] Waiting...
2021-03-30 23:21:07.874 Ramiel[467:14891] Waiting...
2021-03-30 23:21:09.880 Ramiel[467:14891] Waiting...
2021-03-30 23:21:11.885 Ramiel[467:14891] Waiting...
2021-03-30 23:21:13.890 Ramiel[467:14891] Waiting...
2021-03-30 23:21:15.787 Ramiel[467:14651] Booted device successfully!
Creating listening port 2222 for device port 44
waiting for connection
New connection for 2222->44, fd = 5
waiting for connection
No connected device found, terminating.
Exception: Error reading SSH protocol banner[Errno 54] Connection reset by peer
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout
x = self.__socket.recv(128)
ConnectionResetError: [Errno 54] Connection reset by peer
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2039, in run
self._check_banner()
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2215, in _check_banner
raise SSHException(
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout
x = self.__socket.recv(128)
ConnectionResetError: [Errno 54] Connection reset by peer
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/Applications/Ramiel.app/Contents/Resources/ssh/dump.py", line 9, in
client.connect(hostname="localhost", password="alpine", username="root", port=2222)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/client.py", line 406, in connect
t.start_client(timeout=timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 660, in start_client
raise e
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2039, in run
self._check_banner()
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2215, in _check_banner
raise SSHException(
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer
New connection for 2222->44, fd = 5
waiting for connection
No connected device found, terminating.
Exception: Error reading SSH protocol banner[Errno 54] Connection reset by peer
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout
x = self.__socket.recv(128)
ConnectionResetError: [Errno 54] Connection reset by peer
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2039, in run
self._check_banner()
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2215, in _check_banner
raise SSHException(
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer
Traceback (most recent call last):
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2211, in _check_banner
buf = self.packetizer.readline(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 380, in readline
buf += self._read_timeout(timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/packet.py", line 607, in _read_timeout
x = self.__socket.recv(128)
ConnectionResetError: [Errno 54] Connection reset by peer
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/Applications/Ramiel.app/Contents/Resources/ssh/dump.py", line 9, in
client.connect(hostname="localhost", password="alpine", username="root", port=2222)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/client.py", line 406, in connect
t.start_client(timeout=timeout)
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 660, in start_client
raise e
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2039, in run
self._check_banner()
File "/Users/sky/Library/Python/3.9/lib/python/site-packages/paramiko/transport.py", line 2215, in _check_banner
raise SSHException(
paramiko.ssh_exception.SSHException: Error reading SSH protocol banner[Errno 54] Connection reset by peer
not works to jailbreak a7 10.3 , as i have done verbose but when opened device , it says device not jailbroken , please really wanting an solution
Describe the bug
Trying to restore iOS 10.3.3 to iPhone 7 (running iOS 14.4.1), but this error always occurring:
ERROR: Failed to patch iBSS (Kairos returned with: -1)
To Reproduce
Steps to reproduce the behavior:
Expected behavior
No errors, Boot iOS 10.3.3
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Log:
Device Information:
Model: d101ap
iOS Version: (null)
Bootargs: "-v"
Other Error Information:
Kairos returned with: -1
Failed to patch iBSS
Detailed Error Log:
N/A
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
Describe the bug
When booting device, cannot finalize IPSW installation due to "failed dump SHSH" error.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
IPSW is installed, and iPhone is downgraded from iOS 14.5.1 to 14.2
Screenshots
See attached screenshot of error window:
See error log file:
Ramiel_Error_Log_10.39.PM.txt
Desktop (please complete the following information):
Selected Dualbooted - 8
Selected AMFI
Selected AMSD
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
[+] Changed CSEL to MOV
[+] Found branch pointing to 0x870010254 at 0x10184
[+] Changed ADR X21, 0x870047400 to ADR X21, 0x870048a95
[+] Enabling kernel debug...
[+] Found debug-enabled string at 0x4854e
[+] Found debug-enabled xref at 0xeaf8
[+] Found second bl after debug-enabled xref at 0xeb0c
[+] Wrote MOVZ X0, #1 to 0x87000eb0c
[+] Enabled kernel debug
[+] Unlocking nvram...
[+] Found debug-uarts string at 0x8700475f6
[+] Found debug-uarts reference at 0x49ba0
[+] setenv whitelist begins at 0x49b90
[+] Found ref to setenv whitelist at 0x2abc
[+] Forcing sub_870002aa0 to return immediately
[+] Found env whitelist at 0x49bb8
[+] Found ref to env whitelist at 0x2b08
[+] Forcing sub_870002af0 to return immediately
[+] Found "com.apple.System." string at 0x870049767
[+] Found reference to "com.apple.System." at 0x2f3d4
[+] Forcing sub_87002f3cc to return immediately
[+] Patching out RSA signature check...
[+] Found IMG4 string at 0x48409
[+] Found IMG4 xref at 0xc928
[+] Found beginning of _image4_get_partial at 0xc8b8
[+] Found xref to _image4_get_partial at 0xd31c
[+] Found start of sub_87000d23c
[+] Found ADR X2, 0x870049ef0 at 0xd840
[+] Call to 0xcbcc
[+] RET found for sub_87000cbcc at 0xd198
[+] Did MOV r0, #0 and RET
[+] Wrote patched image to /Applications/Ramiel.app/Contents/Resources/RamielFiles/ibec.pwn
[e] cannot set convert
i am on a MacBook Pro 2012 Retina, macOS 10.15 Catalina. Whenever i open the latest release/build of Ramiel, i get the error mentioned in the title.
i have 10,3 install in my device when i load 10.1 ios from this app said success to boot 10.1 but when i check result in 3utools its still 10.3 .
When trying to run checkm8 I get this error. Any help would be amazing. Thanks.
Ramiel_Error_Log_7.40.PM.txt
:(
Describe the bug
Attempting to boot an IPSW/local drive just says "device booting" but the device is stuck on a blank screen.
To Reproduce
Expected behavior
A 14.0 boot should happen, to the setup screen, after a Divise TD.
Screenshots
N/A
Desktop
iOS/iPadOS Device(please complete the following information):
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
Hi, I Have Another Issue, My Uncle Found This LOST iPhone 7 That May Be On iOS 12 Because Of The Set Wallpaper After Booting Up The Phone, I Want To Restore To That Version With SHSH Blobs But When I Use Ramiel To Dump Them, It Gives Me An Error: No APTicket Dump Found, I Do Not Know What Exact Version It Is On But I Do Not Want iOS 14!!! Please Help!!! (The iPhone IS Also Password Locked!)
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Dump The Blobs
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
I used Ramiel to download an iOS 10.3.3 ipsw but when it got to the patching iBSS/iBEC phase I got the above error.
My device is iPhone SE 2016 (8,4)
Successfully in pwnDFU
my Mac is running Sierra
I Am Trying To Use Divise To DualBoot My iPhone 5S Running iOS 10.3.3 With The Latest Supported iOS 12.5.2, But Booting With Ramiel Makes The Device Panic, Using PyBoot, It Flashes A Blue Screen Then Boots To iOS 10. Can You Please Help, I Really Want This To Work!
CPU-Apple A7
STORAGE-64GB
DEVICE-iPhone 5S
iOS 10.3.3/12.5.2
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
14.4跟哪个系统sep兼容呢。
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
Describe the bug
Currently, you determine the path of the Homebrew binary with this code:
NSString *brewPath;
if (@available(macOS 11.0, *)) {
brewPath = @"/opt/homebrew/bin/brew";
} else {
brewPath = @"/usr/local/bin/brew";
}
However, the Homebrew binary is only in /opt/homebrew/bin
on ARM machines. On x86 machines running macOS 11, the binary is still in /usr/local/bin
. This makes it impossible to use Ramiel on x86 machines that run macOS 11.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Ramiel should check if it's being run on an ARM machine to determine the Homebrew binary path rather than checking if it's being run on macOS 11.
Desktop (please complete the following information):
Additional context
I am using a QEMU/KVM virtual machine to try Ramiel (I'm not sure whether or not it works in a VM but I'm trying it anyway), however everything should be nearly identical to a physical Mac.
ERROR: Received malformed keys
Device Information: iphone 6s ios 14.3 downgrade to 12.4.1. OS 10.15.6
Model: n71map
iOS Version: 12.4.1
Bootargs: "-v"
Other Error Information:
Expected string lengths of 64 & 32 but got 7, 7 & 7, 7
Received malformed keys
Detailed Error Log:
Key Information:
iBSS Key: Unknown
iBSS IVs: Unknown
iBEC Key: Unknown
iBEC IVs: Unknown
When I hit run checkm8 I get this error:
Device Information:
Model: d10ap
iOS Version: (null)
Bootargs: "-v"
Other Error Information:
Please reboot device and re-enter DFU mode.
Failed to exploit device, reason: EXPLOIT FAILED
Detailed Error Log:
===================================================================
Fugu Copyright (C) 2019/2020 Linus Henze
https://github.com/LinusHenze/Fugu
This is free software, and you are welcome to redistribute it
under certain conditions; See the LICENSE file for more information
If you paid for this software, you got scammed
===================================================================
Connecting to iDevice�[?25l�[?25h
Connecting to iDevice: Done!
Device is not in pwned DFU. Exploiting now.
Exploiting iDevice�[?25l
Exploiting iDevice: Leaking memory
Exploiting iDevice: Triggering UaF
Exploiting iDevice: FAILED!
Aborted transfer failed!
�[?25h
Describe the bug
A clear and concise description of what the bug is.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
After clicking on "boot device", I get the error: "ERROR: Failed to exploit device, reason: EXPLOIT FAILED"
Attached is the error log
Ramiel_Error_Log_11.35.AM.txt
phone - iphone X, mac os - Catalina OS machine model - macbook pro early 2015
phone jailbroken using chekrain in ios 14.6
i am trying to downgrade to ios 14.3
phone put into DFU mode;
checkm8 exploit worked and i select the ios 14.3 ipsw;
following noticed popped up.
after i press okay on the phone i saw SHSHblobs dumping
then following errors came up.
one after the other.
how can i fix this problem?
Thank you
when i try to boot 10.1 from 10.3 i alwasy getting failled , i need help
Posibilidad de instalar a un drive externo version de ios ultima usando un cable OTG.
Every time I try to boot my device, I get the error: "Exploit Failed", and my iMac says that it failed to open Fugu, and that Fugu might not be supported by my macOS version. I am running macOS 10.13 High Sierra.
Ramiel_Error_Log_8.53.AM.txt
Error log from trying to open Fugu:
Process: Fugu [867]
Path: /Applications/Ramiel.app/Contents/Resources/Exploits/Fugu/Fugu
Identifier: Fugu
Version: 0
Code Type: X86-64 (Native)
Parent Process: Ramiel [840]
Responsible: Fugu [867]
User ID: 501
Date/Time: 2021-05-11 08:53:00.160 -0600
OS Version: Mac OS X 10.13.6 (17G66)
Report Version: 12
Anonymous UUID: 03941768-053F-4776-46FB-B82E0405F294
Time Awake Since Boot: 5100 seconds
System Integrity Protection: enabled
Crashed Thread: 0
Exception Type: EXC_CRASH (SIGABRT)
Exception Codes: 0x0000000000000000, 0x0000000000000000
Exception Note: EXC_CORPSE_NOTIFY
Termination Reason: DYLD, [0x1] Library missing
Application Specific Information:
dyld: launch, loading dependent libraries
Dyld Error Message:
Library not loaded: @rpath/libswiftCore.dylib
Referenced from: /Applications/Ramiel.app/Contents/Resources/Exploits/Fugu/Fugu
Reason: image not found
Binary Images:
0x1031e5000 - 0x103232ff7 +Fugu (0) <58F6F191-C092-3215-892D-B7B0A3721721> /Applications/Ramiel.app/Contents/Resources/Exploits/Fugu/Fugu
0x10eca2000 - 0x10ececacf dyld (551.4) <8A72DE9C-A136-3506-AA02-4BA2B82DCAF3> /usr/lib/dyld
0x7fff38741000 - 0x7fff38bdbff7 com.apple.CoreFoundation (6.9 - 1454.90) /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x7fff3a8b9000 - 0x7fff3ac7ffff com.apple.Foundation (6.9 - 1454.90) <8EA924F3-ADAE-3F4B-8482-8B11C027D9A5> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x7fff3af96000 - 0x7fff3b031fff com.apple.framework.IOKit (2.0.2 - 1445.71.1) <2EA4F383-CAA9-3AF0-99C5-90C22ADAA6B6> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x7fff5e332000 - 0x7fff5e333ffb libSystem.B.dylib (1252.50.4) /usr/lib/libSystem.B.dylib
0x7fff5fa6d000 - 0x7fff5fe5e3b7 libobjc.A.dylib (723) /usr/lib/libobjc.A.dylib
Model: iMac10,1, BootROM 215.0.0.0.0, 2 processors, Intel Core 2 Duo, 3.06 GHz, 10 GB, SMC 1.52f9
Graphics: NVIDIA GeForce 9400, NVIDIA GeForce 9400
Memory Module: BANK 0/DIMM0, 4 GB, DDR3, 1067 MHz, 0x80CE, 0x4D34373142353237334448302D4348392020
Memory Module: BANK 1/DIMM0, 4 GB, DDR3, 1067 MHz, 0x80CE, 0x4D34373142353237334448302D4348392020
Memory Module: BANK 0/DIMM1, 1 GB, DDR3, 1067 MHz, 0x802C, 0x384A53463132383634485A2D314731463120
Memory Module: BANK 1/DIMM1, 1 GB, DDR3, 1067 MHz, 0x802C, 0x384A53463132383634485A2D314731463120
AirPort: spairport_wireless_card_type_airport_extreme (0x168C, 0x8F), Atheros 9280: 4.0.74.0-P2P
Bluetooth: Version 6.0.7f10, 3 services, 27 devices, 1 incoming serial ports
Network Service: Wi-Fi, AirPort, en1
Serial ATA Device: ST3500418ASQ, 500.11 GB
Serial ATA Device: OPTIARC DVD RW AD-5680H
USB Device: USB Bus
USB Device: BRCM2046 Hub
USB Device: Bluetooth USB Host Controller
USB Device: USB Bus
USB Device: IR Receiver
USB Device: HP USB Optical Mouse
USB Device: USB 2.0 Bus
USB Device: Keyboard Hub
USB Device: Apple Mobile Device (DFU Mode)
USB Device: Apple Keyboard
USB Device: USB Mass Storage Device
USB Device: USB 2.0 Bus
USB Device: Built-in iSight
Thunderbolt Bus:
Describe the bug
SSH Ramdisk boots fine but when it tries to dump that's where the issue begins.
It apparently tries to setup a proxy to connect to but fails because the port is already in use as you can see in terminal when you run the executable inside Ramiel.app
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
Describe the bug
A clear and concise description of what the bug is.
ramiel after booting 13.3.1 finish
if iPad go sleep or power button go sleep for a long time it will kick out and go back to 13.5
To Reproduce
Steps to reproduce the behavior:
Expected behavior
A clear and concise description of what you expected to happen.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Add any other context about the problem here.
looping boot device menu with unzipping ipsw
2021-03-22 13:59:58.038 Ramiel[6340:37441] Waiting...
2021-03-22 14:00:00.038 Ramiel[6340:37441] Waiting...
2021-03-22 14:00:01.654 Ramiel[6340:37212] Booted device successfully!
Creating listening port 2222 for device port 44
waiting for connection
Traceback (most recent call last):
File "/Applications/Ramiel.app/Contents/Resources/ssh/dump.py", line 3, in
import paramiko
ModuleNotFoundError: No module named 'paramiko'
Traceback (most recent call last):
File "/Applications/Ramiel.app/Contents/Resources/ssh/dump.py", line 3, in
import paramiko
ModuleNotFoundError: No module named 'paramiko'
for Ramiel 1.0.3
iOS/iPadOS Device(please complete the following information):
Here is the crash report I got:
Process: Ramiel [842]
Path: /Applications/Ramiel.app/Contents/MacOS/Ramiel
Identifier: com.moski.Ramiel
Version: 1.0.3 (1)
Code Type: X86-64 (Native)
Parent Process: ??? [1]
Responsible: Ramiel [842]
User ID: 501
Date/Time: 2021-03-22 14:39:32.883 +0100
OS Version: macOS 11.2.3 (20D91)
Report Version: 12
Anonymous UUID: DCADEBF6-705B-8A54-F2CB-9DA078C3EE26
Time Awake Since Boot: 330 seconds
System Integrity Protection: disabled
Crashed Thread: 0
Exception Type: EXC_CRASH (SIGABRT)
Exception Codes: 0x0000000000000000, 0x0000000000000000
Exception Note: EXC_CORPSE_NOTIFY
Termination Reason: DYLD, [0x1] Library missing
Application Specific Information:
dyld: launch, loading dependent libraries
Dyld Error Message:
dyld: Using shared cache: 52762DF1-0E55-3F8B-9588-8169E6D0EB95
Library not loaded: /usr/local/opt/[email protected]/lib/libcrypto.1.1.dylib
Referenced from: /Applications/Ramiel.app/Contents/MacOS/Ramiel
Reason: image not found
Binary Images:
0x102adb000 - 0x102b4afff +com.moski.Ramiel (1.0.3 - 1) <8DC8A987-9E39-3676-8966-79DC8E4D1F92> /Applications/Ramiel.app/Contents/MacOS/Ramiel
0x102b6a000 - 0x102b91fff +org.cocoapods.AFNetworking (2.7.0 - 1) /Applications/Ramiel.app/Contents/Frameworks/AFNetworking.framework/Versions/A/AFNetworking
0x102bea000 - 0x102c09fff +org.cocoapods.SSZipArchive (2.2.3 - 1) /Applications/Ramiel.app/Contents/Frameworks/SSZipArchive.framework/Versions/A/SSZipArchive
0x102c33000 - 0x102c39fff +libusbmuxd-2.0.6.dylib (0) /Applications/Ramiel.app/Contents/Frameworks/libusbmuxd-2.0.6.dylib
0x102c46000 - 0x102c55fff +libusb-1.0.0.dylib (0) <58A99A32-16D5-39AD-8F6F-160E1B8BEEF6> /Applications/Ramiel.app/Contents/Frameworks/libusb-1.0.0.dylib
0x10a732000 - 0x10a7cdfff dyld (832.7.3) <0D4EA85F-7E30-338B-9215-314A5A5539B6> /usr/lib/dyld
0x7fff204fa000 - 0x7fff20995fff com.apple.CoreFoundation (6.9 - 1774.101) <2A0E160E-9EE6-3B23-8832-6979A16EC250> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x7fff20fbb000 - 0x7fff21038fff com.apple.SystemConfiguration (1.20 - 1.20) <3518EA0E-C32D-32CC-81B9-0F3C83B6430C> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x7fff22334000 - 0x7fff22685fff com.apple.security (7.0 - 59754.80.3) /System/Library/Frameworks/Security.framework/Versions/A/Security
0x7fff2a5bd000 - 0x7fff2a5cffff libz.1.dylib (76) <6E2BD7A3-DC55-3183-BBF7-3AC367BC1834> /usr/lib/libz.1.dylib
0x7fff2a6c4000 - 0x7fff2a7b4fff libiconv.2.dylib (59) /usr/lib/libiconv.2.dylib
0x7fff2a8fd000 - 0x7fff2a915fff libcompression.dylib (96.40.6) <9C42DB2C-0A6D-38CE-BB8D-899A9B34B695> /usr/lib/libcompression.dylib
0x7fff30074000 - 0x7fff30074fff com.apple.CoreServices (1122.11 - 1122.11) /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
Model: iMacPro1,1, BootROM 1554.40.41.0.0, 8 processors, 8-Core Intel Core i7, 3,8 GHz, 16 GB, SMC
Graphics: AMD Radeon VII, AMD Radeon VII, spdisplays_pcie_device, 16 GB
Memory Module: BANK 0/ChannelA-DIMM1, 4 GB, DDR4, 3000 MHz, Corsair, CMK16GX4M4B3000C15
Memory Module: BANK 1/ChannelA-DIMM2, 4 GB, DDR4, 3000 MHz, Corsair, CMK16GX4M4B3000C15
Memory Module: BANK 2/ChannelB-DIMM1, 4 GB, DDR4, 3000 MHz, Corsair, CMK16GX4M4B3000C15
Memory Module: BANK 3/ChannelB-DIMM2, 4 GB, DDR4, 3000 MHz, Corsair, CMK16GX4M4B3000C15
AirPort: spairport_wireless_card_type_third_party
Bluetooth: Version 8.0.3d9, 3 services, 27 devices, 1 incoming serial ports
Network Service: Ethernet 2, Ethernet, en1
Network Service: Wi-Fi, AirPort, en2
Serial ATA Device: WDC WD1003FZEX-00MK2A0, 1 TB
Serial ATA Device: WDC WD10EZEX-00WN4A0, 1 TB
USB Device: USB 3.1 Bus
USB Device: USB2.0 Hub
USB Device: BCM920702 Bluetooth 4.0
USB Device: iPhone
USB Device: AURA LED Controller
USB Device: ROG Gladius II
USB Device: Razer Kiyo
USB Device: USB2.0 Hub
USB Device: CORSAIR Lighting Node CORE
USB Device: H100i Platinum
USB Device: General Purpose USB Hub
USB Device: Arctis Pro Wireless
USB Device: Arctis Pro Wireless
USB Device: Smart Card Reader Interface
USB Device: Corsair Gaming K95 RGB PLATINUM Keyboard
Thunderbolt Bus:
Describe the bug
Ramiel will show an error when attempting to launch PWNDFU mode on a dualbooted iPhone
To Reproduce
Steps to reproduce the behavior:
Expected behavior
I expected the phone to begin booting to the dualbooted system
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
Error log:
Ramiel_Error_Log_9.56.AM.txt
Describe the bug
Expected string lengths of 64 & 32 but got 7, 7 & 7, 7 -> Cannot dualboot
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Nothing happens except the error pops up.
Screenshots
https://imgur.com/GuF3aSN
Desktop (please complete the following information):
iOS/iPadOS Device(please complete the following information):
Additional context
None.
Whenever I try to open Ramiel, I get an error saying "Failed to download img4 and img4tool form GitHub". I would really appreciate some help with this issue.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.