Search results

• 25C3 presentation "Hacking the iPhone"
  ...ons on a [[NAND]] drive. There’s a system partition, which is mounted at root, and there’s a user partition. The system partition is read-only, and the ...nd you can’t alter this [[kernelcache]], except as [[wikipedia:Superuser|root]]. So even if you got a code execution [[:Category:Exploits|exploit]], you
  49 KB (8,611 words) - 13:26, 17 September 2021
• /private/var/root/Library
  {{parent|private|var|root}}
  269 bytes (27 words) - 14:07, 12 November 2013
• /private/var/root/Media
  [[/|(Root)]]/[[/private|private]]/[[/private/var|var]]/[[/private/var/root|root]]
  336 bytes (44 words) - 00:57, 4 January 2013
• Alpine 1A420
  Based on ''/private/var/db/dyld/update-prebinding-paths.txt'' this release is called Alpine Build 1 ...version <code>Darwin Kernel Version 9.0.0d1: Thu Mar 8 01:35:34 PST 2007; root:xnu-933.0.0.144.obj~1/DEVELOPMENT_ARM_MX31ADS</code>.
  2 KB (231 words) - 06:25, 13 March 2021
• /private/etc/fstab
  ...e simply by modifying this file to grant full read/write access to the [[/|root partition]] ([[/dev/disk0s1s1]]). fstab was removed in iOS 14. [[/dev/disk0s1s2]] /private/var hfs,nosuid,nodev rw 0 2
  645 bytes (103 words) - 18:29, 25 April 2021
• Backboardd
  Padmi:~ root# ./lsof-arm7-iOS4.2 -p 64 backboard 64 mobile txt REG 1,3 333104 435969 /private/var/stash/libexec.hIXve8/backboardd
  6 KB (639 words) - 03:57, 5 March 2013
• Trampoline
  * Spawn by update daemon (causes [[/private/var/root|elevated]] privileges) * The app appears to require elevated ([[/private/var/root|root]]) privileges.
  2 KB (245 words) - 06:02, 19 March 2016
• Shebang Trick
  This was used to get root access. The following command has been used in the application that initial #!/bin/launchctl submit -l remount -o /var/mobile/Media/mount.stdout -e /var/mobile/Media/mount.stderr -- /sbin/mount -v -t hfs -o rw /dev/disk0s1s1
  660 bytes (99 words) - 22:32, 30 December 2013
• Locationd
  #REDIRECT [[/private/var/root/Library/Caches/locationd]]
  56 bytes (7 words) - 12:36, 14 September 2013
• /System/Library/Lockdown/Services.plist
  <string>/var/mobile/Media/HighlandPark</string> <string>/var/mobile/WirelessTester_mobile.log</string>
  10 KB (1,304 words) - 09:44, 2 August 2017
• /private/var/stash
  ...filling up your [[/|root partition]]. Newer Cydia versions use [[/private/var/db/stash]] instead. {{parent|private|var}}
  652 bytes (86 words) - 21:07, 31 May 2015
• Ramrod
  Referenced from: /private/var/root/ramrod/./ramrod /dev/disk0s1s2 mounted on /mnt1/private/var
  11 KB (1,450 words) - 03:42, 9 June 2015
• Evasi0n7
  drwxr-xr-x 0 planetbeing staff 0 Dec 18 18:34 ./private/var/ drwxr-xr-x 0 planetbeing staff 0 Dec 18 18:34 ./private/var/lib/
  42 KB (5,979 words) - 01:13, 17 September 2021
• Cydia Errors
  Create a file in your root folder called ".cydia_no_stash" == Could not get lock /var/lib/apt/lists/lock - open (35: Resource temporarily unavailable) ==
  12 KB (2,022 words) - 09:46, 24 May 2020
• /lib
  ...sbin, this folder is empty; quite possibly because [[iOS]] uses [[/private/var/lib]] and [[/System/Library]] instead.
  587 bytes (81 words) - 17:17, 1 February 2015
• /private/var/db/stash
  ...filling up your [[/|root partition]]. Older Cydia versions use [[/private/var/stash]] instead. {{parent|private|var|db}}
  579 bytes (80 words) - 21:07, 31 May 2015
• Electra
  *Sandbox mitigations are now in place so /Library, /private/var/mobile/Library/Preferences and /bootstrap are now accessible to all process ...eng Min Zheng] had already found and created his own bypass to remount the root filesystem, which many other developers then tried implementing in their ow
  13 KB (1,853 words) - 15:05, 15 December 2020
• CoolBooter
  ...partition on these devices, activation records can be copied to <code>/var/root/Library/Lockdown</code> from the host OS. Another option is to delete <code ...s issue can be solved by starting CoolBooterCLI via SSH instead (<code>ssh root@localhost</code>) or by using an app that spawns "coolbootercli -b".
  11 KB (1,528 words) - 19:46, 12 April 2022
• Sundance 10A316
  ...version <code>Darwin Kernel Version 13.0.0: Sun May 20 20:05:20 PDT 2012; root:xnu-2107.1.78~6/DEVELOPMENT_ARM_S5L8950X</code>. In /var/mobile/Library/Assets, you will find a folder containing the name haywire.
  2 KB (257 words) - 13:19, 13 March 2021
• GetCallResult.sh
  getCallResult.sh writes to /var/root/CallsStats.txt and then writes the total contents of that file to MOCalls_l
  168 bytes (31 words) - 22:56, 24 February 2018

View (previous 20 | next 20) (20 | 50 | 100 | 250 | 500)