khanhduy032

73 Followers
12 Following
49 Posts
Amethyst (was PojavLauncher), LiveContainer, TrollPad; iOS internal explorer
JB: https://khanhduytran0.github.io/repo[email protected]
macOS is not enough, here’s iOS 26 simulator running on that same jailbroken iPhone XS Max
Hello @zhuowei, it’s been 4 years since you tried running WindowServer on iPhone. Would you like to try it again, if I told you I made it work using iOS simulator’s Metal-over-XPC? (I don’t know whether Metal on simulator was a thing back then or not)

Introducing multitasking support for LiveContainer

Powered by my previous reverse engineering work on FrontBoardAppLauncher and by taking advantage of multiprocess app extension, you can run apps in separate process, separate window. 3 app limit is now effectively bypassed.

This is still technically a PoC, so not all apps will work yet, and it may be bound to stricter memory limit.

In order to try this, your apps need be converted to shared, Launch JIT disabled. Hold an app and press Multitask. Have fun!

https://github.com/LiveContainer/LiveContainer/actions/runs/14887339867

GitHub - LiveContainer/LiveContainer: Run iOS apps without actually installing them!

Run iOS apps without actually installing them! Contribute to LiveContainer/LiveContainer development by creating an account on GitHub.

GitHub

Just came up with a new method for enabling JIT on the latest iOS beta:
https://gist.github.com/JJTech0130/142aee0f7bda9c61a421140d17afbdeb

It requires a tiny bit more cooperation with the debugger to set up, gl to whoever is going to update JITStreamer.

Thanks @osy86 and @khanhduy032

Improved method of using a debugger for JIT on iOS... Uses split rx/rw regions, and works on iOS 18.4b1

Improved method of using a debugger for JIT on iOS... Uses split rx/rw regions, and works on iOS 18.4b1 - debugger_jit_improved.m

Gist
First 32bit app running on LiveExec32, iOS 16
LiveContainer is now working again on iOS 18, no more resolution issue. Turns out it was a regression (huge thanks to haxi0 for bringing this to my attention)
https://github.com/khanhduytran0/LiveContainer/actions/runs/10113010321
GitHub - khanhduytran0/LiveContainer: Run iOS app without actually installing it!

Run iOS app without actually installing it! Contribute to khanhduytran0/LiveContainer development by creating an account on GitHub.

GitHub
I updated LiveContainer to work without JIT. Apparently you can dlopen signed Mach-O from Documents directory as long as app has get-task-allow entitlement that developer certificate gives.
Also fixed compatibility with many apps.
https://github.com/khanhduytran0/LiveContainer/actions
GitHub - khanhduytran0/LiveContainer: Run iOS app without actually installing it!

Run iOS app without actually installing it! Contribute to khanhduytran0/LiveContainer development by creating an account on GitHub.

GitHub
Almost did it! Stage Manager via AirPlay on iPhone. Unfortunately, it didn’t recognize Bluetooth keyboard mouse for some reason, so it fell back to mirroring.
Key: SBExtendedDisplayOverrideSupportForAirPlayAndDontFileRadars
OpenAI Sora prompt: “TrollStore installation process on iOS 17.0 using CVE-2023-41993 and CVE-2023-41992”
(Disclaimer: this is a joke)