Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

boot-args patch option seemingly ignored #16

Open
asdfugil opened this issue Sep 27, 2022 · 0 comments
Open

boot-args patch option seemingly ignored #16

asdfugil opened this issue Sep 27, 2022 · 0 comments

Comments

@asdfugil
Copy link

I am trying to patch an macOS 12.3.1 iBoot for Apple Virtual Machine 1 (VirtualMac2,1). The -b option appears to be ignored.

nick@NickdeMacBook-Pro vm % ~/Documents/kairos/kairos iBEC.raw iBEC.patched -b '-v keepsyms=1 serial=3 debug=0xfffffffe launchd_unsecure_cache=1 launchd_missing_exec_no_panic=1 amfi=0xff amfi_allow_any_signature=1 amfi_get_out_of_my_way=1 amfi_allow_research=1 amfi_unrestrict_task_for_pid=1 amfi_unrestricted_local_signing=1 cs_enforcement_disable=1 pmap_cs_allow_modified_code_pages=1 pmap_cs_enforce_coretrust=0 pmap_cs_unrestrict_pmap_cs_disable=1 -unsafe_kernel_text dtrace_dof_mode=1 panic-wait-forever=1 -panic_notify cs_debug=1 PE_i_can_has_debugger=1 wdt=-1 nand-enable-reformat=1 rd=md0 -restore -progress' -n
[+] Patching iBEC.raw
[+] Base address: 0x7006c000
[!] PAC bootloader detected
[+] Patching out RSA signature check...
[+] Found IMG4 string at 0x4bfe1
[+] Found IMG4 xref at 0x3e7c
[+] Found beginning of _image4_get_partial at 0x3e08
[+] Found xref to _image4_get_partial at 0x4a20
[+] Found start of sub_7007093c
[+] Found ADR X2, 0x700cba1b at 0x48bf0
[+] Call to sub_700cba1b
[+] ret0 gadget at 0x4918
[+] Did MOV r0, #0 and RET
[+] Wrote patched image to iBEC.patched
nick@NickdeMacBook-Pro vm % strings iBEC.patched | grep restore
aborting autoboot due to tethered restore.
M = 0x4: restore mode image
restore-security-overrides0
restore-security-overrides1
restore-security-overrides2
restore-security-overrides3
 -restore
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant