The checkm8 from mlgradish

checkm8's People

Contributors

Stargazers

Watchers

checkm8's Issues

Device reboots straight after repairing heap

File "main", line 92, in
pdev.write_memory(0x100007044, b"\x00\x00\x80\xd2")

iphone 7 reboots straight to OS after
print('Heap repaired.')

same issue happens:

Traceback (most recent call last):
  File "main", line 92, in <module>
    pdev.write_memory(0x100007044, b"\x00\x00\x80\xd2")
  File "/Users/nk2/checkm8/usbexec.py", line 44, in write_memory
    def write_memory(self, address, data):         self.command(self.cmd_memcpy(address, self.cmd_data_address(3), len(data)) + data, 0)
  File "/Users/nk2/checkm8/usbexec.py", line 106, in command
    response = device.ctrl_transfer(0xA1, 2, 0xFFFF, 0, response_length + 1, CMD_TIMEOUT).tostring()[1:]
  File "/usr/local/lib/python3.7/site-packages/usb/core.py", line 1043, in ctrl_transfer
    self.__get_timeout(timeout))
  File "/usr/local/lib/python3.7/site-packages/usb/backend/libusb1.py", line 883, in ctrl_transfer
    timeout))
  File "/usr/local/lib/python3.7/site-packages/usb/backend/libusb1.py", line 595, in _check
    raise USBError(_strerror(ret), ret, _libusb_errno[ret])
usb.core.USBError: [Errno 5] Input/Output Error

ValueError: The device has no langid

➜  checkm8 git:(master) python3 main
*** checkm8 exploit by axi0mX ***
Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0C ECID:*** IBFL:3C SRTG:[iBoot-2696.0.0.1.33]
Performing USB port reset.
Traceback (most recent call last):
  File "main", line 33, in <module>
    checkm8.exploit()
  File "/Users/nk2/checkm8/checkm8.py", line 506, in exploit
    device.serial_number
  File "/usr/local/lib/python3.7/site-packages/usb/core.py", line 830, in serial_number
    self._serial_number = util.get_string(self, self.iSerialNumber)
  File "/usr/local/lib/python3.7/site-packages/usb/util.py", line 314, in get_string
    raise ValueError("The device has no langid")
ValueError: The device has no langid

Recommend Projects