API tools faq
paste
rafaeldamasceno

Untitled

rafaeldamasceno
Jun 26th, 2017
72
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 32.40 KB | None | 0 0
raw download clone embed print report
  1. rafael@ubuntu:~/odysseus-0.999.0/linux$ sshtool -s baseband.tar -p 22 192.168.0.107
  2. fish: Connecting to 192.168.0.107:22
  3. fish: Waiting for initial line...
  4. root@192.168.0.107's password:
  5. fish: Sending initial line...
  6. fish: Handshaking version...
  7. fish: Starting linear transfer...
  8. fish: Transferred 48844800 bytes
  9. fish: Disconnecting from 192.168.0.107
  10. rafael@ubuntu:~/odysseus-0.999.0/linux$ ls -s
  11. total 1196172
  12. 47700 baseband.tar 456 ipsw 76 ticket
  13. 4 FirmwareBundles 24 irecovery 84 validate
  14. 220 idevicerestore 4 shsh 240 xpwntool
  15. 1147348 iPad3,4_6.1.3_10B329_Restore.ipsw 16 sshtool
  16. rafael@ubuntu:~/odysseus-0.999.0/linux$ ipsw iPad3,4_6.1.3_10B329_Restore.ipsw custom.ipsw baseband.tar
  17. Hashing IPSW...
  18. Matching IPSW in FirmwareBundles/... (e4de2525...)
  19. checking: FirmwareBundles//Down_iPhone3,1_6.1.2_10B146.bundle/Info.plist
  20. checking: FirmwareBundles//Down_iPhone3,3_7.1.2_11D257.bundle/Info.plist
  21. checking: FirmwareBundles//Down_iPhone5,2_7.0.4_11B554a.bundle/Info.plist
  22. checking: FirmwareBundles//Down_iPhone4,1_7.1.2_11D257.bundle/Info.plist
  23. checking: FirmwareBundles//.DS_Store/Info.plist
  24. checking: FirmwareBundles//Down_iPhone5,2_8.1.2_12B440.bundle/Info.plist
  25. checking: FirmwareBundles//Down_iPad3,1_6.1.2_10B146.bundle/Info.plist
  26. checking: FirmwareBundles//Down_iPad2,1_6.1.3_10B329.bundle/Info.plist
  27. checking: FirmwareBundles//Down_iPad3,3_6.1.3_10B329.bundle/Info.plist
  28. checking: FirmwareBundles//Down_iPad3,1_7.1.2_11D257.bundle/Info.plist
  29. checking: FirmwareBundles//Down_iPhone4,1_6.1.3_10B329.bundle/Info.plist
  30. checking: FirmwareBundles//Down_iPhone5,4_8.1.2_12B440.bundle/Info.plist
  31. checking: FirmwareBundles//Down_iPhone3,1_7.0.6_11B651.bundle/Info.plist
  32. checking: FirmwareBundles//Down_iPhone3,1_7.1.2_11D257.bundle/Info.plist
  33. checking: FirmwareBundles//Down_iPhone5,2_8.3_12F70.bundle/Info.plist
  34. checking: FirmwareBundles//Down_iPhone5,2_7.1.2_11D257.bundle/Info.plist
  35. checking: FirmwareBundles//Down_iPad3,4_6.1.3_10B329.bundle/Info.plist
  36. loading: 048-2457-005.dmg (1144912896)
  37. loading: 048-2592-005.dmg (9914756)
  38. loading: 048-2666-005.dmg (9914756)
  39. loading: BuildManifest.plist (18774)
  40. loading: Firmware/ (0)
  41. loading: Firmware/all_flash/ (0)
  42. loading: Firmware/all_flash/all_flash.p101ap.production/ (0)
  43. loading: Firmware/all_flash/all_flash.p101ap.production/applelogo@2x.s5l8955x.img3 (15236)
  44. loading: Firmware/all_flash/all_flash.p101ap.production/batterycharging0@2x.s5l8955x.img3 (11908)
  45. loading: Firmware/all_flash/all_flash.p101ap.production/batterycharging1@2x.s5l8955x.img3 (37188)
  46. loading: Firmware/all_flash/all_flash.p101ap.production/batteryfull@2x.s5l8955x.img3 (654340)
  47. loading: Firmware/all_flash/all_flash.p101ap.production/batterylow0@2x.s5l8955x.img3 (170756)
  48. loading: Firmware/all_flash/all_flash.p101ap.production/batterylow1@2x.s5l8955x.img3 (39876)
  49. loading: Firmware/all_flash/all_flash.p101ap.production/DeviceTree.p101ap.img3 (81156)
  50. loading: Firmware/all_flash/all_flash.p101ap.production/glyphcharging@2x.s5l8955x.img3 (7428)
  51. loading: Firmware/all_flash/all_flash.p101ap.production/glyphplugin@2x.s5l8955x.img3 (7108)
  52. loading: Firmware/all_flash/all_flash.p101ap.production/iBoot.p101ap.RELEASE.img3 (289284)
  53. loading: Firmware/all_flash/all_flash.p101ap.production/LLB.p101ap.RELEASE.img3 (150020)
  54. loading: Firmware/all_flash/all_flash.p101ap.production/manifest (350)
  55. loading: Firmware/all_flash/all_flash.p101ap.production/recoverymode@2x~ipad.s5l8955x.img3 (280516)
  56. loading: Firmware/dfu/ (0)
  57. loading: Firmware/dfu/iBEC.p101ap.RELEASE.dfu (289284)
  58. loading: Firmware/dfu/iBSS.p101ap.RELEASE.dfu (76292)
  59. loading: Firmware/usr/ (0)
  60. loading: Firmware/usr/local/ (0)
  61. loading: Firmware/usr/local/standalone/ (0)
  62. loading: kernelcache.release.p101 (7790212)
  63. loading: Restore.plist (2090)
  64. RestoreKernelCache: /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: ae031e9d2765bb140597f923fbb60c88624c9345c868ab3030b169b47bcf5a789c458c6675b10b90a640d00509ea2f8b
  65. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: ae031e9d2765bb140597f923fbb60c88624c9345c868ab3030b169b47bcf5a789c458c6675b10b90a640d00509ea2f8b
  66. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: ae031e9d2765bb140597f923fbb60c88624c9345c868ab3030b169b47bcf5a789c458c6675b10b90a640d00509ea2f8b
  67. writing... success
  68. Restore Ramdisk: /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: f5ab51725ec38dfe4e9d2d8dbba5b34173a45409bff2c8f1a8c3deac5ade2324b846f7f3b205363ac0f417f0f9120470
  69. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: f5ab51725ec38dfe4e9d2d8dbba5b34173a45409bff2c8f1a8c3deac5ade2324b846f7f3b205363ac0f417f0f9120470
  70. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: f5ab51725ec38dfe4e9d2d8dbba5b34173a45409bff2c8f1a8c3deac5ade2324b846f7f3b205363ac0f417f0f9120470
  71. writing... success
  72. iBSS: Firmware/dfu/iBSS.p101ap.RELEASE.dfu (FirmwareBundles//Down_iPad3,4_6.1.3_10B329.bundle/iBSS.p101ap.RELEASE.patch)... encrypted input... /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 66cb3f7e9e93d8f378cdae4c4d9a45eee431a2ddbac95a8c6af77140a6cbbf6da847146541cf89faecb9bd45b6e075de
  73. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 66cb3f7e9e93d8f378cdae4c4d9a45eee431a2ddbac95a8c6af77140a6cbbf6da847146541cf89faecb9bd45b6e075de
  74. encrypted output... /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 66cb3f7e9e93d8f378cdae4c4d9a45eee431a2ddbac95a8c6af77140a6cbbf6da847146541cf89faecb9bd45b6e075de
  75. writing... success
  76. iBSS: /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 66cb3f7e9e93d8f378cdae4c4d9a45eee431a2ddbac95a8c6af77140a6cbbf6da847146541cf89faecb9bd45b6e075de
  77. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 66cb3f7e9e93d8f378cdae4c4d9a45eee431a2ddbac95a8c6af77140a6cbbf6da847146541cf89faecb9bd45b6e075de
  78. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 66cb3f7e9e93d8f378cdae4c4d9a45eee431a2ddbac95a8c6af77140a6cbbf6da847146541cf89faecb9bd45b6e075de
  79. writing... success
  80. iBEC: Firmware/dfu/iBEC.p101ap.RELEASE.dfu (FirmwareBundles//Down_iPad3,4_6.1.3_10B329.bundle/iBEC.p101ap.RELEASE.patch)... encrypted input... /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 6b5b8da207f89832b6064c92536702eac6cc931d4b4a983092e7d766e1bd1c30fa7aaa54d3d9134c991b80d4d9698def
  81. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 6b5b8da207f89832b6064c92536702eac6cc931d4b4a983092e7d766e1bd1c30fa7aaa54d3d9134c991b80d4d9698def
  82. encrypted output... /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 6b5b8da207f89832b6064c92536702eac6cc931d4b4a983092e7d766e1bd1c30fa7aaa54d3d9134c991b80d4d9698def
  83. writing... success
  84. iBEC: /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 6b5b8da207f89832b6064c92536702eac6cc931d4b4a983092e7d766e1bd1c30fa7aaa54d3d9134c991b80d4d9698def
  85. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 6b5b8da207f89832b6064c92536702eac6cc931d4b4a983092e7d766e1bd1c30fa7aaa54d3d9134c991b80d4d9698def
  86. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 6b5b8da207f89832b6064c92536702eac6cc931d4b4a983092e7d766e1bd1c30fa7aaa54d3d9134c991b80d4d9698def
  87. writing... success
  88. RestoreDeviceTree: /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 748f75b464bd6d1645e2b188ea72155bd12ad79f1d6cbbccc9f095480d3591cda4165ee06284c9384600e15e299f520c
  89. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 748f75b464bd6d1645e2b188ea72155bd12ad79f1d6cbbccc9f095480d3591cda4165ee06284c9384600e15e299f520c
  90. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 748f75b464bd6d1645e2b188ea72155bd12ad79f1d6cbbccc9f095480d3591cda4165ee06284c9384600e15e299f520c
  91. writing... success
  92. RestoreLogo: /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 63228bdfcd0235a444079f107ce4e9413f4e1f126222d55a602bf979849eba114869daf6925d18cc5645023587b35615
  93. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 63228bdfcd0235a444079f107ce4e9413f4e1f126222d55a602bf979849eba114869daf6925d18cc5645023587b35615
  94. /tmp/xpwn/ipsw-patch/img3.c:createAbstractFileFromImg3:643: 63228bdfcd0235a444079f107ce4e9413f4e1f126222d55a602bf979849eba114869daf6925d18cc5645023587b35615
  95. writing... success
  96. /tmp/xpwn/ipsw-patch/main.c:main:470: using filesystem backed temporary storage
  97. Writing out data..
  98. run 0: start=0 sectors=512, length=14922, fileOffset=0x18e
  99. run 1: start=262144 sectors=512, length=29369, fileOffset=0x3bd8
  100. run 2: start=524288 sectors=512, length=34802, fileOffset=0xae91
  101. run 3: start=786432 sectors=512, length=31812, fileOffset=0x13683
  102. run 4: start=1048576 sectors=512, length=31036, fileOffset=0x1b2c7
  103. run 5: start=1310720 sectors=512, length=29534, fileOffset=0x22c03
  104. run 6: start=1572864 sectors=512, length=29946, fileOffset=0x29f61
  105. run 7: start=1835008 sectors=512, length=33807, fileOffset=0x3145b
  106. run 8: start=2097152 sectors=512, length=32829, fileOffset=0x3986a
  107. run 9: start=2359296 sectors=512, length=38216, fileOffset=0x418a7
  108. run 10: start=2621440 sectors=512, length=37381, fileOffset=0x4adef
  109. run 11: start=2883584 sectors=512, length=31730, fileOffset=0x53ff4
  110. run 12: start=3145728 sectors=512, length=32838, fileOffset=0x5bbe6
  111. run 13: start=3407872 sectors=512, length=34042, fileOffset=0x63c2c
  112. run 14: start=3670016 sectors=512, length=34543, fileOffset=0x6c126
  113. run 15: start=3932160 sectors=512, length=33249, fileOffset=0x74815
  114. run 16: start=4194304 sectors=512, length=38859, fileOffset=0x7c9f6
  115. run 17: start=4456448 sectors=512, length=34563, fileOffset=0x861c1
  116. run 18: start=4718592 sectors=512, length=27891, fileOffset=0x8e8c4
  117. run 19: start=4980736 sectors=512, length=23504, fileOffset=0x955b7
  118. run 20: start=5242880 sectors=512, length=28929, fileOffset=0x9b187
  119. run 21: start=5505024 sectors=512, length=28003, fileOffset=0xa2288
  120. run 22: start=5767168 sectors=512, length=30305, fileOffset=0xa8feb
  121. run 23: start=6029312 sectors=512, length=33679, fileOffset=0xb064c
  122. run 24: start=6291456 sectors=512, length=32353, fileOffset=0xb89db
  123. run 25: start=6553600 sectors=512, length=33649, fileOffset=0xc083c
  124. run 26: start=6815744 sectors=512, length=30704, fileOffset=0xc8bad
  125. run 27: start=7077888 sectors=512, length=34577, fileOffset=0xd039d
  126. run 28: start=7340032 sectors=512, length=31636, fileOffset=0xd8aae
  127. run 29: start=7602176 sectors=512, length=33156, fileOffset=0xe0642
  128. run 30: start=7864320 sectors=512, length=28606, fileOffset=0xe87c6
  129. run 31: start=8126464 sectors=512, length=37822, fileOffset=0xef784
  130. run 32: start=8388608 sectors=512, length=19499, fileOffset=0xf8b42
  131. run 33: start=8650752 sectors=512, length=1167, fileOffset=0xfd76d
  132. run 34: start=8912896 sectors=512, length=1167, fileOffset=0xfdbfc
  133. run 35: start=9175040 sectors=512, length=1167, fileOffset=0xfe08b
  134. run 36: start=9437184 sectors=512, length=1167, fileOffset=0xfe51a
  135. run 37: start=9699328 sectors=512, length=1167, fileOffset=0xfe9a9
  136. run 38: start=9961472 sectors=512, length=1167, fileOffset=0xfee38
  137. run 39: start=10223616 sectors=512, length=1167, fileOffset=0xff2c7
  138. run 40: start=10485760 sectors=512, length=1167, fileOffset=0xff756
  139. run 41: start=10747904 sectors=512, length=1167, fileOffset=0xffbe5
  140. run 42: start=11010048 sectors=512, length=1167, fileOffset=0x100074
  141. run 43: start=11272192 sectors=512, length=1167, fileOffset=0x100503
  142. run 44: start=11534336 sectors=512, length=1167, fileOffset=0x100992
  143. run 45: start=11796480 sectors=512, length=1167, fileOffset=0x100e21
  144. run 46: start=12058624 sectors=512, length=1167, fileOffset=0x1012b0
  145. run 47: start=12320768 sectors=512, length=1167, fileOffset=0x10173f
  146. run 48: start=12582912 sectors=512, length=80627, fileOffset=0x101bce
  147. run 49: start=12845056 sectors=512, length=185654, fileOffset=0x1156c1
  148. run 50: start=13107200 sectors=512, length=202983, fileOffset=0x142bf7
  149. run 51: start=13369344 sectors=512, length=206890, fileOffset=0x1744de
  150. run 52: start=13631488 sectors=512, length=211432, fileOffset=0x1a6d08
  151. run 53: start=13893632 sectors=512, length=195938, fileOffset=0x1da6f0
  152. run 54: start=14155776 sectors=512, length=210346, fileOffset=0x20a452
  153. run 55: start=14417920 sectors=512, length=210846, fileOffset=0x23d9fc
  154. run 56: start=14680064 sectors=512, length=210759, fileOffset=0x27119a
  155. run 57: start=14942208 sectors=512, length=210491, fileOffset=0x2a48e1
  156. run 58: start=15204352 sectors=512, length=214198, fileOffset=0x2d7f1c
  157. run 59: start=15466496 sectors=512, length=200076, fileOffset=0x30c3d2
  158. run 60: start=15728640 sectors=512, length=199647, fileOffset=0x33d15e
  159. run 61: start=15990784 sectors=512, length=215122, fileOffset=0x36dd3d
  160. run 62: start=16252928 sectors=512, length=190126, fileOffset=0x3a258f
  161. run 63: start=16515072 sectors=512, length=221396, fileOffset=0x3d0c3d
  162. run 64: start=16777216 sectors=512, length=219874, fileOffset=0x406d11
  163. run 65: start=17039360 sectors=512, length=221127, fileOffset=0x43c7f3
  164. run 66: start=17301504 sectors=512, length=221355, fileOffset=0x4727ba
  165. run 67: start=17563648 sectors=512, length=221669, fileOffset=0x4a8865
  166. run 68: start=17825792 sectors=512, length=206025, fileOffset=0x4dea4a
  167. run 69: start=18087936 sectors=512, length=200742, fileOffset=0x510f13
  168. run 70: start=18350080 sectors=512, length=188355, fileOffset=0x541f39
  169. run 71: start=18612224 sectors=512, length=211462, fileOffset=0x56fefc
  170. run 72: start=18874368 sectors=512, length=206505, fileOffset=0x5a3902
  171. run 73: start=19136512 sectors=512, length=191671, fileOffset=0x5d5fab
  172. run 74: start=19398656 sectors=512, length=199378, fileOffset=0x604c62
  173. run 75: start=19660800 sectors=512, length=188555, fileOffset=0x635734
  174. run 76: start=19922944 sectors=512, length=198121, fileOffset=0x6637bf
  175. run 77: start=20185088 sectors=512, length=208612, fileOffset=0x693da8
  176. run 78: start=20447232 sectors=512, length=198780, fileOffset=0x6c6c8c
  177. run 79: start=20709376 sectors=512, length=210605, fileOffset=0x6f7508
  178. run 80: start=20971520 sectors=512, length=200754, fileOffset=0x72abb5
  179. run 81: start=21233664 sectors=512, length=196824, fileOffset=0x75bbe7
  180. run 82: start=21495808 sectors=512, length=205048, fileOffset=0x78bcbf
  181. run 83: start=21757952 sectors=512, length=212430, fileOffset=0x7bddb7
  182. run 84: start=22020096 sectors=512, length=207136, fileOffset=0x7f1b85
  183. run 85: start=22282240 sectors=512, length=189067, fileOffset=0x8244a5
  184. run 86: start=22544384 sectors=512, length=185620, fileOffset=0x852730
  185. run 87: start=22806528 sectors=512, length=180213, fileOffset=0x87fc44
  186. run 88: start=23068672 sectors=512, length=136846, fileOffset=0x8abc39
  187. run 89: start=23330816 sectors=512, length=185679, fileOffset=0x8cd2c7
  188. run 90: start=23592960 sectors=512, length=205435, fileOffset=0x8fa816
  189. run 91: start=23855104 sectors=512, length=176577, fileOffset=0x92ca91
  190. run 92: start=24117248 sectors=512, length=199412, fileOffset=0x957c52
  191. run 93: start=24379392 sectors=512, length=195309, fileOffset=0x988746
  192. run 94: start=24641536 sectors=512, length=206894, fileOffset=0x9b8233
  193. run 95: start=24903680 sectors=512, length=214312, fileOffset=0x9eaa61
  194. run 96: start=25165824 sectors=512, length=226509, fileOffset=0xa1ef89
  195. run 97: start=25427968 sectors=512, length=262144, fileOffset=0xa56456
  196. run 98: start=25690112 sectors=512, length=262144, fileOffset=0xa96456
  197. run 99: start=25952256 sectors=512, length=262144, fileOffset=0xad6456
  198. run 100: start=26214400 sectors=512, length=262144, fileOffset=0xb16456
  199. ...
  200. run 5722: start=1499987968 sectors=512, length=62019, fileOffset=0x43dabd1a
  201. run 5723: start=1500250112 sectors=512, length=60788, fileOffset=0x43dbaf5d
  202. run 5724: start=1500512256 sectors=512, length=56235, fileOffset=0x43dc9cd1
  203. run 5725: start=1500774400 sectors=512, length=54119, fileOffset=0x43dd787c
  204. run 5726: start=1501036544 sectors=512, length=54633, fileOffset=0x43de4be3
  205. run 5727: start=1501298688 sectors=512, length=68977, fileOffset=0x43df214c
  206. run 5728: start=1501560832 sectors=512, length=55455, fileOffset=0x43e02ebd
  207. run 5729: start=1501822976 sectors=512, length=57857, fileOffset=0x43e1075c
  208. run 5730: start=1502085120 sectors=512, length=54785, fileOffset=0x43e1e95d
  209. run 5731: start=1502347264 sectors=512, length=58377, fileOffset=0x43e2bf5e
  210. run 5732: start=1502609408 sectors=512, length=50433, fileOffset=0x43e3a367
  211. run 5733: start=1502871552 sectors=512, length=52474, fileOffset=0x43e46868
  212. run 5734: start=1503133696 sectors=512, length=46602, fileOffset=0x43e53562
  213. run 5735: start=1503395840 sectors=512, length=66438, fileOffset=0x43e5eb6c
  214. run 5736: start=1503657984 sectors=512, length=54648, fileOffset=0x43e6eef2
  215. run 5737: start=1503920128 sectors=512, length=52788, fileOffset=0x43e7c46a
  216. run 5738: start=1504182272 sectors=512, length=65089, fileOffset=0x43e8929e
  217. run 5739: start=1504444416 sectors=512, length=63615, fileOffset=0x43e990df
  218. run 5740: start=1504706560 sectors=512, length=48909, fileOffset=0x43ea895e
  219. run 5741: start=1504968704 sectors=512, length=62243, fileOffset=0x43eb486b
  220. run 5742: start=1505230848 sectors=512, length=58661, fileOffset=0x43ec3b8e
  221. run 5743: start=1505492992 sectors=512, length=57875, fileOffset=0x43ed20b3
  222. run 5744: start=1505755136 sectors=512, length=69613, fileOffset=0x43ee02c6
  223. run 5745: start=1506017280 sectors=512, length=61863, fileOffset=0x43ef12b3
  224. run 5746: start=1506279424 sectors=512, length=55051, fileOffset=0x43f0045a
  225. run 5747: start=1506541568 sectors=512, length=51680, fileOffset=0x43f0db65
  226. run 5748: start=1506803712 sectors=512, length=49919, fileOffset=0x43f1a545
  227. run 5749: start=1507065856 sectors=512, length=54683, fileOffset=0x43f26844
  228. run 5750: start=1507328000 sectors=512, length=49870, fileOffset=0x43f33ddf
  229. run 5751: start=1507590144 sectors=512, length=29664, fileOffset=0x43f400ad
  230. run 5752: start=1507852288 sectors=512, length=33220, fileOffset=0x43f4748d
  231. run 5753: start=1508114432 sectors=512, length=38210, fileOffset=0x43f4f651
  232. run 5754: start=1508376576 sectors=512, length=41897, fileOffset=0x43f58b93
  233. run 5755: start=1508638720 sectors=512, length=57949, fileOffset=0x43f62f3c
  234. run 5756: start=1508900864 sectors=512, length=56067, fileOffset=0x43f71199
  235. run 5757: start=1509163008 sectors=512, length=53884, fileOffset=0x43f7ec9c
  236. run 5758: start=1509425152 sectors=512, length=50757, fileOffset=0x43f8bf18
  237. run 5759: start=1509687296 sectors=512, length=57935, fileOffset=0x43f9855d
  238. run 5760: start=1509949440 sectors=512, length=57832, fileOffset=0x43fa67ac
  239. run 5761: start=1510211584 sectors=512, length=53068, fileOffset=0x43fb4994
  240. run 5762: start=1510473728 sectors=512, length=49608, fileOffset=0x43fc18e0
  241. run 5763: start=1510735872 sectors=512, length=52032, fileOffset=0x43fcdaa8
  242. run 5764: start=1510998016 sectors=512, length=57830, fileOffset=0x43fda5e8
  243. run 5765: start=1511260160 sectors=512, length=63658, fileOffset=0x43fe87ce
  244. run 5766: start=1511522304 sectors=512, length=59878, fileOffset=0x43ff8078
  245. run 5767: start=1511784448 sectors=512, length=68906, fileOffset=0x44006a5e
  246. run 5768: start=1512046592 sectors=512, length=65452, fileOffset=0x44017788
  247. run 5769: start=1512308736 sectors=512, length=55856, fileOffset=0x44027734
  248. run 5770: start=1512570880 sectors=512, length=51379, fileOffset=0x44035164
  249. run 5771: start=1512833024 sectors=512, length=37539, fileOffset=0x44041a17
  250. run 5772: start=1513095168 sectors=512, length=48210, fileOffset=0x4404acba
  251. run 5773: start=1513357312 sectors=512, length=48338, fileOffset=0x4405690c
  252. run 5774: start=1513619456 sectors=512, length=54828, fileOffset=0x440625de
  253. run 5775: start=1513881600 sectors=512, length=52071, fileOffset=0x4406fc0a
  254. run 5776: start=1514143744 sectors=512, length=55402, fileOffset=0x4407c771
  255. run 5777: start=1514405888 sectors=512, length=53984, fileOffset=0x44089fdb
  256. run 5778: start=1514668032 sectors=512, length=53177, fileOffset=0x440972bb
  257. run 5779: start=1514930176 sectors=512, length=54120, fileOffset=0x440a4274
  258. run 5780: start=1515192320 sectors=512, length=52880, fileOffset=0x440b15dc
  259. run 5781: start=1515454464 sectors=512, length=47076, fileOffset=0x440be46c
  260. run 5782: start=1515716608 sectors=512, length=43025, fileOffset=0x440c9c50
  261. run 5783: start=1515978752 sectors=512, length=50942, fileOffset=0x440d4461
  262. run 5784: start=1516240896 sectors=512, length=60275, fileOffset=0x440e0b5f
  263. run 5785: start=1516503040 sectors=512, length=54269, fileOffset=0x440ef6d2
  264. run 5786: start=1516765184 sectors=512, length=55947, fileOffset=0x440fcacf
  265. run 5787: start=1517027328 sectors=512, length=61403, fileOffset=0x4410a55a
  266. run 5788: start=1517289472 sectors=512, length=56494, fileOffset=0x44119535
  267. run 5789: start=1517551616 sectors=512, length=59048, fileOffset=0x441271e3
  268. run 5790: start=1517813760 sectors=512, length=57322, fileOffset=0x4413588b
  269. run 5791: start=1518075904 sectors=512, length=52349, fileOffset=0x44143875
  270. run 5792: start=1518338048 sectors=512, length=53021, fileOffset=0x441504f2
  271. run 5793: start=1518600192 sectors=512, length=34302, fileOffset=0x4415d40f
  272. run 5794: start=1518862336 sectors=512, length=28050, fileOffset=0x44165a0d
  273. run 5795: start=1519124480 sectors=512, length=24660, fileOffset=0x4416c79f
  274. run 5796: start=1519386624 sectors=512, length=25706, fileOffset=0x441727f3
  275. run 5797: start=1519648768 sectors=512, length=21886, fileOffset=0x44178c5d
  276. run 5798: start=1519910912 sectors=512, length=24306, fileOffset=0x4417e1db
  277. run 5799: start=1520173056 sectors=512, length=44502, fileOffset=0x441840cd
  278. run 5800: start=1520435200 sectors=512, length=48385, fileOffset=0x4418eea3
  279. run 5801: start=1520697344 sectors=512, length=35293, fileOffset=0x4419aba4
  280. run 5802: start=1520959488 sectors=512, length=46426, fileOffset=0x441a3581
  281. run 5803: start=1521221632 sectors=512, length=41169, fileOffset=0x441aeadb
  282. run 5804: start=1521483776 sectors=512, length=49394, fileOffset=0x441b8bac
  283. run 5805: start=1521745920 sectors=512, length=57851, fileOffset=0x441c4c9e
  284. run 5806: start=1522008064 sectors=512, length=54539, fileOffset=0x441d2e99
  285. run 5807: start=1522270208 sectors=512, length=47905, fileOffset=0x441e03a4
  286. run 5808: start=1522532352 sectors=512, length=48468, fileOffset=0x441ebec5
  287. run 5809: start=1522794496 sectors=512, length=51498, fileOffset=0x441f7c19
  288. run 5810: start=1523056640 sectors=512, length=50908, fileOffset=0x44204543
  289. run 5811: start=1523318784 sectors=512, length=59382, fileOffset=0x44210c1f
  290. run 5812: start=1523580928 sectors=512, length=34180, fileOffset=0x4421f415
  291. run 5813: start=1523843072 sectors=512, length=35199, fileOffset=0x44227999
  292. run 5814: start=1524105216 sectors=512, length=39790, fileOffset=0x44230318
  293. run 5815: start=1524367360 sectors=512, length=72264, fileOffset=0x44239e86
  294. run 5816: start=1524629504 sectors=512, length=262144, fileOffset=0x4424b8ce
  295. run 5817: start=1524891648 sectors=512, length=262144, fileOffset=0x4428b8ce
  296. run 5818: start=1525153792 sectors=512, length=262144, fileOffset=0x442cb8ce
  297. run 5819: start=1525415936 sectors=512, length=241775, fileOffset=0x4430b8ce
  298. run 5820: start=1525678080 sectors=288, length=147456, fileOffset=0x4434693d
  299. run 5822: start=1525828608 sectors=1, length=179, fileOffset=0x4436a93d
  300. Growing root to minimum: 1504
  301. merging baseband.tar
  302. ignoring usr/standalone/update, type = 5
  303. ignoring usr/standalone/update/all_flash, type = 5
  304. ignoring usr/standalone/update/all_flash/all_flash.p101ap.production, type = 5
  305. file: usr/standalone/update/all_flash/all_flash.p101ap.production/applelogo@2x~ipad.s5l8955x.img3 (0644), size = 17868
  306. file: usr/standalone/update/all_flash/all_flash.p101ap.production/batterycharging0@2x~ipad.s5l8955x.img3 (0644), size = 9740
  307. file: usr/standalone/update/all_flash/all_flash.p101ap.production/batterycharging1@2x~ipad.s5l8955x.img3 (0644), size = 35020
  308. file: usr/standalone/update/all_flash/all_flash.p101ap.production/batteryfull@2x~ipad.s5l8955x.img3 (0644), size = 107724
  309. file: usr/standalone/update/all_flash/all_flash.p101ap.production/batterylow0@2x~ipad.s5l8955x.img3 (0644), size = 119884
  310. file: usr/standalone/update/all_flash/all_flash.p101ap.production/batterylow1@2x~ipad.s5l8955x.img3 (0644), size = 5260
  311. file: usr/standalone/update/all_flash/all_flash.p101ap.production/glyphplugin@2x~ipad-lightning.s5l8955x.img3 (0644), size = 4364
  312. file: usr/standalone/update/all_flash/all_flash.p101ap.production/recoverymode@2x~ipad-lightning.s5l8955x.img3 (0644), size = 102412
  313. ignoring usr/standalone/update/ramdisk, type = 5
  314. replacing usr/standalone/update/ramdisk/H5GSURamDisk.dmg
  315. file: usr/standalone/update/ramdisk/H5GSURamDisk.dmg (0644), size = 48423052
  316. unencrypted ramdisk
  317. growing ramdisk: 9912320 -> 9912320
  318. Cannot shrink volume
  319. patching usr/sbin/asr (FirmwareBundles//Down_iPad3,4_6.1.3_10B329.bundle/asr.patch)... retrieving...patching...writing... success
  320. got /usr/local/share/restore/options.p101.plist from ramdisk
  321. start create restore options
  322. <?xml version="1.0" encoding="UTF-8"?>
  323. <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
  324. <plist version="1.0">
  325. <dict>
  326. <key>SystemPartitionPadding</key>
  327. <dict>
  328. <key>128</key>
  329. <integer>1280</integer>
  330. <key>16</key>
  331. <integer>160</integer>
  332. <key>32</key>
  333. <integer>320</integer>
  334. <key>64</key>
  335. <integer>640</integer>
  336. <key>8</key>
  337. <integer>80</integer>
  338. </dict>
  339. <key>MinimumSystemPartition</key>
  340. <integer>1504</integer>
  341. <key>CreateFilesystemPartitions</key>
  342. <true/>
  343. <key>SystemPartitionSize</key>
  344. <integer>1504</integer>
  345. <key>UpdateBaseband</key>
  346. <false/>
  347. </dict>
  348. </plist>
  349. Creating and writing DDM and partition map...
  350. run 0: sectors=1, left=1
  351. run 0: sectors=60, left=60
  352. malloc: 0x139d230 4096
  353. run 0: sectors=4, left=4
  354. Writing main data blkx...
  355. run 1: sectors=512, left=3080192
  356. run 2: sectors=512, left=3079680
  357. run 3: sectors=512, left=3079168
  358. run 4: sectors=512, left=3078656
  359. run 5: sectors=512, left=3078144
  360. run 6: sectors=512, left=3077632
  361. run 7: sectors=512, left=3077120
  362. run 8: sectors=512, left=3076608
  363. run 9: sectors=512, left=3076096
  364. run 10: sectors=512, left=3075584
  365. run 11: sectors=512, left=3075072
  366. run 12: sectors=512, left=3074560
  367. run 13: sectors=512, left=3074048
  368. run 14: sectors=512, left=3073536
  369. run 15: sectors=512, left=3073024
  370. run 16: sectors=512, left=3072512
  371. run 17: sectors=512, left=3072000
  372. run 18: sectors=512, left=3071488
  373. run 19: sectors=512, left=3070976
  374. run 20: sectors=512, left=3070464
  375. run 21: sectors=512, left=3069952
  376. run 22: sectors=512, left=3069440
  377. run 23: sectors=512, left=3068928
  378. run 24: sectors=512, left=3068416
  379. run 25: sectors=512, left=3067904
  380. run 26: sectors=512, left=3067392
  381. run 27: sectors=512, left=3066880
  382. run 28: sectors=512, left=3066368
  383. run 29: sectors=512, left=3065856
  384. run 30: sectors=512, left=3065344
  385. run 31: sectors=512, left=3064832
  386. run 32: sectors=512, left=3064320
  387. run 33: sectors=512, left=3063808
  388. run 34: sectors=512, left=3063296
  389. run 35: sectors=512, left=3062784
  390. run 36: sectors=512, left=3062272
  391. run 37: sectors=512, left=3061760
  392. run 38: sectors=512, left=3061248
  393. run 39: sectors=512, left=3060736
  394. run 40: sectors=512, left=3060224
  395. run 41: sectors=512, left=3059712
  396. run 42: sectors=512, left=3059200
  397. run 43: sectors=512, left=3058688
  398. run 44: sectors=512, left=3058176
  399. run 45: sectors=512, left=3057664
  400. run 46: sectors=512, left=3057152
  401. run 47: sectors=512, left=3056640
  402. run 48: sectors=512, left=3056128
  403. run 49: sectors=512, left=3055616
  404. run 50: sectors=512, left=3055104
  405. run 51: sectors=512, left=3054592
  406. run 52: sectors=512, left=3054080
  407. run 53: sectors=512, left=3053568
  408. run 54: sectors=512, left=3053056
  409. run 55: sectors=512, left=3052544
  410. run 56: sectors=512, left=3052032
  411. run 57: sectors=512, left=3051520
  412. run 58: sectors=512, left=3051008
  413. run 59: sectors=512, left=3050496
  414. run 60: sectors=512, left=3049984
  415. run 61: sectors=512, left=3049472
  416. run 62: sectors=512, left=3048960
  417. run 63: sectors=512, left=3048448
  418. run 64: sectors=512, left=3047936
  419. run 65: sectors=512, left=3047424
  420. run 66: sectors=512, left=3046912
  421. run 67: sectors=512, left=3046400
  422. run 68: sectors=512, left=3045888
  423. run 69: sectors=512, left=3045376
  424. run 70: sectors=512, left=3044864
  425. run 71: sectors=512, left=3044352
  426. run 72: sectors=512, left=3043840
  427. run 73: sectors=512, left=3043328
  428. run 74: sectors=512, left=3042816
  429. run 75: sectors=512, left=3042304
  430. run 76: sectors=512, left=3041792
  431. run 77: sectors=512, left=3041280
  432. run 78: sectors=512, left=3040768
  433. run 79: sectors=512, left=3040256
  434. run 80: sectors=512, left=3039744
  435. run 81: sectors=512, left=3039232
  436. run 82: sectors=512, left=3038720
  437. run 83: sectors=512, left=3038208
  438. run 84: sectors=512, left=3037696
  439. run 85: sectors=512, left=3037184
  440. run 86: sectors=512, left=3036672
  441. run 87: sectors=512, left=3036160
  442. run 88: sectors=512, left=3035648
  443. run 89: sectors=512, left=3035136
  444. run 90: sectors=512, left=3034624
  445. run 91: sectors=512, left=3034112
  446. run 92: sectors=512, left=3033600
  447. run 93: sectors=512, left=3033088
  448. run 94: sectors=512, left=3032576
  449. run 95: sectors=512, left=3032064
  450. run 96: sectors=512, left=3031552
  451. run 97: sectors=512, left=3031040
  452. run 98: sectors=512, left=3030528
  453. run 99: sectors=512, left=3030016
  454. ...
  455. run 5998: sectors=512, left=9728
  456. run 5999: sectors=512, left=9216
  457. run 6000: sectors=512, left=8704
  458. run 6001: sectors=512, left=8192
  459. run 6002: sectors=512, left=7680
  460. run 6003: sectors=512, left=7168
  461. run 6004: sectors=512, left=6656
  462. run 6005: sectors=512, left=6144
  463. run 6006: sectors=512, left=5632
  464. run 6007: sectors=512, left=5120
  465. run 6008: skipping sectors=4592, left=4608
  466. run 6009: skipping sectors=14, left=16
  467. run 6010: sectors=2, left=2
  468. Inserting main blkx...
  469. Inserting cSum data...
  470. Inserting nsiz data
  471. Writing free partition...
  472. Writing XML data...
  473. making size data
  474. we know to flip this size resource
  475. Generating UDIF metadata...
  476. Master checksum: b10f49ec
  477. Writing out UDIF resource file...
  478. Cleaning up...
  479. Done.
  480. packing: 048-2457-005.dmg (1144912896)
  481. packing: 048-2592-005.dmg (9914756)
  482. packing: 048-2666-005.dmg (9914580)
  483. packing: BuildManifest.plist (18774)
  484. packing: Downgrade/ (0)
  485. packing: Downgrade/DeviceTree.p101ap.img3 (81000)
  486. packing: Downgrade/applelogo@2x.s5l8955x.img3 (15040)
  487. packing: Downgrade/kernelcache.release.p101 (7790036)
  488. packing: Firmware/ (0)
  489. packing: Firmware/all_flash/ (0)
  490. packing: Firmware/all_flash/all_flash.p101ap.production/ (0)
  491. packing: Firmware/all_flash/all_flash.p101ap.production/DeviceTree.p101ap.img3 (81156)
  492. packing: Firmware/all_flash/all_flash.p101ap.production/LLB.p101ap.RELEASE.img3 (150020)
  493. packing: Firmware/all_flash/all_flash.p101ap.production/applelogo@2x.s5l8955x.img3 (15236)
  494. packing: Firmware/all_flash/all_flash.p101ap.production/batterycharging0@2x.s5l8955x.img3 (11908)
  495. packing: Firmware/all_flash/all_flash.p101ap.production/batterycharging1@2x.s5l8955x.img3 (37188)
  496. packing: Firmware/all_flash/all_flash.p101ap.production/batteryfull@2x.s5l8955x.img3 (654340)
  497. packing: Firmware/all_flash/all_flash.p101ap.production/batterylow0@2x.s5l8955x.img3 (170756)
  498. packing: Firmware/all_flash/all_flash.p101ap.production/batterylow1@2x.s5l8955x.img3 (39876)
  499. packing: Firmware/all_flash/all_flash.p101ap.production/glyphcharging@2x.s5l8955x.img3 (7428)
  500. packing: Firmware/all_flash/all_flash.p101ap.production/glyphplugin@2x.s5l8955x.img3 (7108)
  501. packing: Firmware/all_flash/all_flash.p101ap.production/iBoot.p101ap.RELEASE.img3 (289284)
  502. packing: Firmware/all_flash/all_flash.p101ap.production/manifest (350)
  503. packing: Firmware/all_flash/all_flash.p101ap.production/recoverymode@2x~ipad.s5l8955x.img3 (280516)
  504. packing: Firmware/dfu/ (0)
  505. packing: Firmware/dfu/iBEC.p101ap.RELEASE.dfu (289080)
  506. packing: Firmware/dfu/iBSS.p101ap.RELEASE.dfu (76088)
  507. packing: Firmware/usr/ (0)
  508. packing: Firmware/usr/local/ (0)
  509. packing: Firmware/usr/local/standalone/ (0)
  510. packing: Restore.plist (2090)
  511. packing: kernelcache.release.p101 (7790212)
  512. rafael@ubuntu:~/odysseus-0.999.0/linux$ xpwntool `unzip -j custom.ipsw 'Firmware/dfu/iBSS*' | awk '/inflating/{print $2}'` pwnediBSS
  513. rafael@ubuntu:~/odysseus-0.999.0/linux$ mv `unzip -j custom.ipsw 'Firmware/dfu/iBEC*' | awk '/inflating/{print $2}'` pwnediBEC
  514. rafael@ubuntu:~/odysseus-0.999.0/linux$ sshtool -k ../kloader -b pwnediBSS -p 22 192.168.0.107
  515. fish: Connecting to 192.168.0.107:22
  516. fish: Waiting for initial line...
  517. root@192.168.0.107's password:
  518. fish: Sending initial line...
  519. fish: Handshaking version...
  520. fish: store tmp/kloader: sending command...
  521. fish: storing file 8192 (18928)
  522. fish: storing file 16384 (18928)
  523. fish: storing file 18928 (18928)
  524. fish: store tmp/pwnediBSS: sending command...
  525. fish: storing file 8192 (73728)
  526. fish: storing file 16384 (73728)
  527. fish: storing file 24576 (73728)
  528. fish: storing file 32768 (73728)
  529. fish: storing file 40960 (73728)
  530. fish: storing file 49152 (73728)
  531. fish: storing file 57344 (73728)
  532. fish: storing file 65536 (73728)
  533. fish: storing file 73728 (73728)
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!