mirror of https://github.com/opa334/TrollStore.git
Merge pull request #160 from itsnebulalol/main
This commit is contained in:
commit
484c7ee18e
|
@ -63,7 +63,7 @@ The binaries inside an IPA can have arbitary entitlements, fakesign them with ld
|
|||
|
||||
## Banned entitlements
|
||||
|
||||
iOS 15 has banned the following three entitlements related to running unsigned code, these are impossible to get without a PPL or PAC bypass, apps signed with them will crash on launch.
|
||||
iOS 15 on A12+ has banned the following three entitlements related to running unsigned code, these are impossible to get without a PPL or PAC bypass, apps signed with them will crash on launch.
|
||||
|
||||
`com.apple.private.cs.debugger`
|
||||
|
||||
|
@ -134,4 +134,4 @@ Afterwards you can use the [spawnRoot function in TSUtil.m](./Store/TSUtil.m#L39
|
|||
|
||||
[@LinusHenze](https://twitter.com/LinusHenze/) - Found the CoreTrust bug that allows TrollStore to work.
|
||||
|
||||
[Early Write-Up on the CoreTrust bug with more information](https://worthdoingbadly.com/coretrust/).
|
||||
[Early Write-Up on the CoreTrust bug with more information](https://worthdoingbadly.com/coretrust/).
|
||||
|
|
|
@ -6,7 +6,10 @@ Video tutorial: https://youtu.be/SsvumuaZBT0
|
|||
|
||||
1. Run `git clone https://github.com/verygenericname/SSHRD_Script --recursive && cd SSHRD_Script`
|
||||
|
||||
2. Run `./sshrd.sh <latestipswlinkhere> TrollStore <uninstallablesystemapphere>` (Tips is the best choice)
|
||||
2. Run `./sshrd.sh <iOS version for ramdisk> TrollStore <uninstallable system app>`
|
||||
- Make sure to **not** include the `<>`
|
||||
- 14.3 is the recommended version for the ramdisk, it does not matter what version your device is already on
|
||||
- The uninstallable system app should be an app you don't need to use (e.g. Tips)
|
||||
|
||||
3. Run `./sshrd.sh boot` the device should start verbosing and show a TrollFace in ascii, then reboot eventually
|
||||
|
||||
|
|
Loading…
Reference in New Issue