Tool LazarusJailed - Permanently Disable App Revokes for iOSGods Application [ iOS 12 - 12.1.2 ]

[Joka 4.5k iPhone X 12.4]

If you have ever used a third-party app before such as the iOSGods app on your iOS device, you may have been faced with the app becoming revoked.

LazarusJailed, a new tool for those on iOS 12 - 12.1.2,  uses the new voucher swap exploit to prevent app revokes. It works very well compared to existing anti-revoke apps. In fact, respringing or restarting your device will not disable or turn off the app-revoking app.

The LazarusJailed application is compatible with any iPhone, iPad, iPod Touch running on iOS 12.0 to iOS 12.1.2. No jailbreak is needed to install this app.

Download Link: HERE.

(Should be added to the iOSGods app soon)

Change Log:

Spoiler

v1.1.2

• Refreshed icon to suit the app design better.
• Fixed some typos
• Added some more error handling.

To use the app, tap on the application to launch it. You will come across a 'Block Revokes' button highlighted in the center of the screen. Tap on it and wait a few seconds. If the exploit hasn't failed, it will ask for you to respring. Simply tap on the Respring button to respring your iDevice. That’s it! Now all your third-party apps will be revokeless due to LazarusJailed.

Credits: - Ignition, - Brandon Azad, - Jakeahacks & Pwn20wd.

[fiaden 1.2k iPhone 8 13.4.1]

Awesome

[Sterling0x1 3.8k iPhone Xs Max 13.5]

How is this different from this?

https://github.com/useignition/Lazarus

[Joka 4.5k iPhone X 12.4]

3 minutes ago, Sterling0x1 said:

How is this different from this?

https://github.com/useignition/Lazarus

Ignition themselves created both.

[Sterling0x1 3.8k iPhone Xs Max 13.5]

14 minutes ago, Joka said:

Ignition themselves created both.

how come he never updated source code to 1.1.2 on GitHub 🤔? Also I don't understand how kernel exploit would be relevant to certificate revokes (maybe I miss something). someone please explain

[Sterling0x1 3.8k iPhone Xs Max 13.5]

so I went to reverse this app and found this so far. 

voucher_swap bundled into the IPA but nothing else. as I browse strings I found this, __cstring:000000010000D0E3    0000004B    C    /Users/josephshenton/Desktop/LazarusJailed/voucher_swap/voucher_swap/log.c

which lead to this 🤔

 

 

[Rook 572.1k iPad Pro (2nd gen) 17.4 Donor]

31 minutes ago, Sterling0x1 said:

so I went to reverse this app and found this so far. 

voucher_swap bundled into the IPA but nothing else. as I browse strings I found this, __cstring:000000010000D0E3    0000004B    C    /Users/josephshenton/Desktop/LazarusJailed/voucher_swap/voucher_swap/log.c

which lead to this 🤔

 

 

Jakeashacks and possibly Pwn20wnd have helped in the making of this. Afaik they’ using the iOS 12 exploits to make it happen. Thus the 12.1.2 or lower requirement.

[Sterling0x1 3.8k iPhone Xs Max 13.5]

this is the binary from lazarusjailed

https://mega.nz/#!rl4WSQ4Q!tF6Hn9sVXMvr-pTapcaMB2t_C8GTwiKulmCjNnR9I3Q

this is the binary from original lazarusproject I built just now

https://mega.nz/#!es4CjaLQ!vHDKzN2keRUfBZLeR4jptKPu7sjnTjHll_ZYNi6wFC8

I reversed both, voucher_swap binary contains literally nothing that would reference to any vpn activity, apart from a few strings that says:

__cstring:000000010000CF8A    00000010    C    Revokes Blocked
__cstring:000000010000CF9A    00000014    C    [+] Revokes Blocked
__cstring:000000010000CFAE    0000000E    C    Block Revokes
__cstring:000000010000D1F0    00000011    C    Blocking Revokes
__cstring:000000010000D267    00000015    C    Disabled app revokes
__objc_methname:000000010000E819    0000000F    C    disableRevokes
 

2 minutes ago, DiDA said:

Jakeashacks and possibly Pwn20wnd have helped in the making of this. Afaik they’ using the iOS 12 exploits to make it happen. Thus the 12.1.2 or lower requirement.

 

[Rook 572.1k iPad Pro (2nd gen) 17.4 Donor]

Just now, Sterling0x1 said:

this is the binary from lazarusjailed

https://mega.nz/#!rl4WSQ4Q!tF6Hn9sVXMvr-pTapcaMB2t_C8GTwiKulmCjNnR9I3Q

this is the binary from original lazarusproject I built just now

https://mega.nz/#!es4CjaLQ!vHDKzN2keRUfBZLeR4jptKPu7sjnTjHll_ZYNi6wFC8

I reversed both, voucher_swap binary contains literally nothing that would reference to any vpn activity, apart from a few strings that says:

__cstring:000000010000CF8A    00000010    C    Revokes Blocked
__cstring:000000010000CF9A    00000014    C    [+] Revokes Blocked
__cstring:000000010000CFAE    0000000E    C    Block Revokes
__cstring:000000010000D1F0    00000011    C    Blocking Revokes
__cstring:000000010000D267    00000015    C    Disabled app revokes
__objc_methname:000000010000E819    0000000F    C    disableRevokes
 

 

This is not a VPN. I haven't checked the source, but this is something else that Unc0ver is using for their anti revokes.

[Sterling0x1 3.8k iPhone Xs Max 13.5]

6 minutes ago, DiDA said:

This is not a VPN. I haven't checked the source, but this is something else that Unc0ver is using for their anti revokes.

I see. I thought it would use the vpn as original Lazarus did, that’s why it seemed a bit fishy.