Using an arbitrary TeamID

Question

Using an arbitrary TeamID

papamata1 opened this issue a year ago · 2 comments

I try to set an arbitrary TeamID so I can inject a dylib to an arbitrary app with opainject. I updatedAppStoreCodeDirectory.h with a Code Directory from the target app but when I use opainject, the kernel complains about the signature. Is there any step I am missing?

Answer 1 · 2023-12-05T11:18:38.000Z

You need to manually create a new template signature blob - it is hardcoded to match the original App Store CodeDirectory.

Answer 2 · 2023-12-12T16:50:58.000Z

https://github.com/opa334/ChOma/blob/main/tests/ct_bypass/main.c#L127-L130 these have to be adjusted