p0larisdev/untether

Untether does not seem to work.

Opened this issue · 2 comments

eepymeowers commented

After following the steps in #3 that you mentioned and the regular install steps as well, we've installed it successfully however it does not seem to work after a reboot - for example, Cydia will crash. Do you happen to remember something about this? This isn't urgent, we are doing this on a testing 4s and solely for fun.

Thanks!

spv420 commented

sorry for taking a while. this hasn't been finished (and probably never will be). at the moment the chain is
dhcpd -> racoon -> ROP -> JS -> arbitrary JS loaded from disk that can be modified over USB from the sandbox

935csbypass is unusable due to the sandbox, so the kernel exploit would have to be written entirely in JS. i've been thinking about using a variant of triple_fetch from within stage4 to hijack another process to then run 935csbypass, at which point you could run code compiled from C, and essentially just port the jb framework from either phoenix or p0laris.

daemonspudguy commented

@spv420 I was incredibly excited to hear that a proper untether for 9.3.5 was coming out. I'm sad to hear that it hasn't been working out and might never be releasable. I do applaud you for trying because I know that this is not an easy task.