Skip to content

Python problems #7

@deckeys

Description

@deckeys

Many problems:
Some Library was not installed correctly, needed to install manually:
pip install -U Pillow
Installed driver manually in Zadig 2.7 libusb-win32

First Attempt to make it working got only some error:

$ 2
2
*** checkm8 exploit by axi0mX ***
****** stage 1, heap grooming
Found: CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:0001690C1038XXXX IBFL:3C SRTG:[iBoot-3332.0.0.1.23]
Traceback (most recent call last):
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\ipwndfu", line 76, in <module>
    checkm8.exploit()
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\checkm8.py", line 480, in exploit
    payload, config = exploit_config(device.serial_number)
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\checkm8.py", line 461, in exploit_config
    return payload(config.cpid), config
           ^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\checkm8.py", line 430, in payload
    t8015_shellcode = t8015_shellcode + '\0' * (PAYLOAD_OFFSET_ARM64 - len(t8015_shellcode)) + t8015_handler
                      ~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
TypeError: can't concat str to bytes

I tried "python ipwndfu -p" instead of gui but this also had problems:

python ipwndfu -p
*** checkm8 exploit by axi0mX ***
****** stage 1, heap grooming
Found: CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:0001690C1038XXXX IBFL:3C SRTG:[iBoot-3332.0.0.1.23]
Traceback (most recent call last):
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\ipwndfu", line 76, in <module>
    checkm8.exploit()
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\checkm8.py", line 483, in exploit
    if config.large_leak is not None:
       ^^^^^^
UnboundLocalError: cannot access local variable 'config' where it is not associated with a value

I tried to bypass these by commenting out "if config.large_leak[...]", but this lead to usb errors:

python ipwndfu -p
*** checkm8 exploit by axi0mX ***
****** stage 1, heap grooming
Found: CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:0001690C1038XXXX IBFL:3C SRTG:[iBoot-3332.0.0.1.23]
Performing USB port reset.
****** stage 2, usb setup, send 0x800 of 'A', sends no data
Traceback (most recent call last):
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\ipwndfu", line 76, in <module>
    checkm8.exploit()
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\checkm8.py", line 500, in exploit
    device = dfu.acquire_device()
             ^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\dfu.py", line 19, in acquire_device
    usb.util.claim_interface(device, 0)
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\usb\util.py", line 205, in claim_interface
    device._ctx.managed_claim_interface(device, interface)
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\usb\core.py", line 102, in wrapper
    return f(self, *args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\usb\core.py", line 167, in managed_claim_interface
    self.backend.claim_interface(self.handle, i)
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\usb\backend\libusb0.py", line 521, in claim_interface
    _check(_lib.usb_claim_interface(dev_handle, intf))
  File "C:\Users\User\Downloads\Checkra1n-Windows-GUI-main\usb\backend\libusb0.py", line 431, in _check
    raise USBError(errmsg, ret)
usb.core.USBError: [Errno None] b'libusb0-dll:err [claim_interface] could not claim interface 0, invalid configuration 0\n'

So is the error from bad python 2 to 3 conversion or because of running iOS 14.7.1?
Ps: I censored my ECID at the last 4 characters

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions