https://www.theiphonewiki.com/w/index.php?action=history&feed=atom&title=AMFID_code_signing_evasi0n7AMFID code signing evasi0n7 - Revision history2026-06-17T10:20:21ZRevision history for this page on the wikiMediaWiki 1.31.14https://www.theiphonewiki.com/w/index.php?title=AMFID_code_signing_evasi0n7&diff=41724&oldid=prevAker: Created this page; some info might be missing2014-08-09T08:42:30Z<p>Created this page; some info might be missing</p>
<p><b>New page</b></p><div>By creating a dylib without code, just redefining the signed code verification function with a "return ok" method from another signed library and using text relocation, the entire code signing requirement gets circumvented.<br />
<br />
In [[p0sixspwn]], the _.dylib redefines these functions:<br />
* _kMISValidationOptionValidateSignatureOnly (_kCFUserNotificationTokenKey from CoreFoundation)<br />
* _kMISValidationOptionExpectedHash (_kCFUserNotificationTimeoutKey from CoreFoundation)<br />
* _MISValidateSignature (_CFEqual from CoreFoundation)<br />
<br />
TODO: some more detailed description missing here.<br />
<br />
== Usage ==<br />
* [[p0sixspwn]] jailbreak<br />
* [[evasi0n7]] jailbreak<br />
<br />
== See Also ==<br />
* [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1273 CVE-2014-1273]<br />
<br />
== Credit ==<br />
* [[User:planetbeing|planetbeing]]<br />
* maybe others too<br />
<br />
[[Category:Exploits]]</div>Aker