[Windows/macOS] Introducing Sideloadly! - Working Cydia Impactor & AltStore Alternative!

Memooo006 · July 4, 2022

Sa

Fayh · July 4, 2022

Thank

Ffggfgfgg345 · July 4, 2022

G

chimedka · July 4, 2022

b

SigfridHT · July 4, 2022

On 7/4/2022 at 8:55 AM, BarberRo said:

El viejo problema está de vuelta:

ERROR: Meditación del gurú da8d42@132 : 556260@120 : 556260@392 : 0db732@894 : 0db732@1068 : 0db732@1044 : 0db732@592 : 0db732@245 :3aea77 Error de inicio de sesión (-224 no se pudo completar): . Intentar otra vez.

Expand

ese error está desde mayo y siguen sin solucionarlo se supone que nosotros los ios son los que debemos tener prioridad y nada mas no lo reparan ya estoy harto

TRCiOS · July 4, 2022

@Rook Would it be possible to add a function to specify custom entitlements?

Trying to exploit Psychic Paper and the IPA doesn't retain the exploited entitlements from ldid before using sideloadly (unless I'm doing something wrong?)

Rook · July 4, 2022

On 7/4/2022 at 10:26 PM, TRCiOS said:

@Rook Would it be possible to add a function to specify custom entitlements?

Trying to exploit Psychic Paper and the IPA doesn't retain the exploited entitlements from ldid before using sideloadly (unless I'm doing something wrong?)

Expand

Custom entitlements only seems possible on paid Apple IDs.

TRCiOS · July 4, 2022

On 7/4/2022 at 11:33 PM, Rook said:

Custom entitlements only seems possible on paid Apple IDs.

Expand

Thanks for answering.

I currently reproduce the exploit with a free cert and a mobileprovision I extracted from XCode (7 days signing, free account, whatever random XCode ents uses) then I use codesign with custom entitlements (codesign -f -s “cert” —entitlements=psychicpaperents.plist app.app and finally install with ideviceinstaller.

Psychic paper gives you arbitrary entitlements due to different entitlement parsers in iOS.

I understand this is pretty niche, but would be very helpful for legacy exploitation, since asking non-savvy users to do all of this just for a sandbox escape isn’t very friendly.

Updated July 4, 2022 by TRCiOS

Rook · July 5, 2022

On 7/4/2022 at 11:50 PM, TRCiOS said:

Thanks for answering.

I currently reproduce the exploit with a free cert and a mobileprovision I extracted from XCode (7 days signing, free account, whatever random XCode ents uses) then I use codesign with custom entitlements (codesign -f -s “cert” —entitlements=psychicpaperents.plist app.app and finally install with ideviceinstaller.

Psychic paper gives you arbitrary entitlements due to different entitlement parsers in iOS.

I understand this is pretty niche, but would be very helpful for legacy exploitation, since asking non-savvy users to do all of this just for a sandbox escape isn’t very friendly.

Expand

Is this the new exploit that people are talking about?