Merge pull request #160 from itsnebulalol/main

This commit is contained in:
Lars Fröder 2022-09-14 01:23:08 +02:00 committed by GitHub
commit 484c7ee18e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 3 deletions

View File

@ -63,7 +63,7 @@ The binaries inside an IPA can have arbitary entitlements, fakesign them with ld
## Banned entitlements
iOS 15 has banned the following three entitlements related to running unsigned code, these are impossible to get without a PPL or PAC bypass, apps signed with them will crash on launch.
iOS 15 on A12+ has banned the following three entitlements related to running unsigned code, these are impossible to get without a PPL or PAC bypass, apps signed with them will crash on launch.
`com.apple.private.cs.debugger`
@ -134,4 +134,4 @@ Afterwards you can use the [spawnRoot function in TSUtil.m](./Store/TSUtil.m#L39
[@LinusHenze](https://twitter.com/LinusHenze/) - Found the CoreTrust bug that allows TrollStore to work.
[Early Write-Up on the CoreTrust bug with more information](https://worthdoingbadly.com/coretrust/).
[Early Write-Up on the CoreTrust bug with more information](https://worthdoingbadly.com/coretrust/).

View File

@ -6,7 +6,10 @@ Video tutorial: https://youtu.be/SsvumuaZBT0
1. Run `git clone https://github.com/verygenericname/SSHRD_Script --recursive && cd SSHRD_Script`
2. Run `./sshrd.sh <latestipswlinkhere> TrollStore <uninstallablesystemapphere>` (Tips is the best choice)
2. Run `./sshrd.sh <iOS version for ramdisk> TrollStore <uninstallable system app>`
- Make sure to **not** include the `<>`
- 14.3 is the recommended version for the ramdisk, it does not matter what version your device is already on
- The uninstallable system app should be an app you don't need to use (e.g. Tips)
3. Run `./sshrd.sh boot` the device should start verbosing and show a TrollFace in ascii, then reboot eventually