administration Posted August 1, 2014 Report Share Posted August 1, 2014 (edited) [RO]Salut am gasit un exploit nou in versiunea 11.2.2.3 a iTunes de la Apple ce permite deblocarea partiala a telefonului pe partea de iTunes si anume bypass icloud lock, acest bug se afla in fisierul iTunes.dll. Modificarea acestuia face ca telefonul sa fie recunoscut ca unul activat si inlatura procesele de activare alocate server-ului albert.apple.com.Din pacate in iTunes nu puteti decat sa sincronizati video muzica si foto dar va las pe voi sa experimentati mai multe deoarece telefonul se comporta ciudat uneori el deblocanduse total.Deblocarea totala a aparut atunci cand:- am conectat un iphone activat (deblocat icloud) 5, 16 Gb cu numele Axx si l-am sincronizat pe un cont store Bxxdupa- am conectat un iphone neactivat ( blocat icloud) 5, 16 Gb cu numele Axx si l-am conectat pe un cont store Cxxdupa am primit pe ecranul telefonului eroarea "nu se poate efectua" cu optiunea de apasare a "ok" iar dupa apasare telefonul intra in meniul desktop iar reteaua functioneaza perfect.Fara ceea ce am descris mai sus va da eroarea ca nu poate creea o sesiune cu telefonul ceea ce este si normal, deci ce ramane de facut? - modifica driverul apple ce se ocupa de sesiune din computerul tau- incearca o bucla de activare bazata pe cartela simexploit-ul a mai fost prezentat partial unui administrator gadgetwide si pe urma aici deci este exclusivitate RST.[EN]A zero day exploit i have found in iTunes version 11.2.2.3, more exactly in iTunes.dll.This exploit bypass albert.apple.com activation and make the device to be recognized as a a activated one.In iTunes part the device will be like icloud unlocked iphone you can sync with video , music, pictures but some thing cant be done why?The iTunes will give us the error message: a session cant be started with your iphone or something like...Next thing that you have are two variants:1. crack the session in apple driver on your machine2. try to make a activation loop on device based on sim activation.How to use?- download cracked iTunes.dll and itunes 11.2.2.3 from bellow- uninstall all higher version and lower of iTunes and delete all apple directory on your pc- restart pc- install iTunes 11.2.2.3(if you allready have this version search and delete the file "cache.db" from user profiles apple directory)- replace iTunes.dll with the cracked one downloaded from hereENJOY !!!If you feel unsecure scan the fuc*ing dll on virustotal Credit: iCloudRemover Team, Justin, Jack, #FF0000sn0w, Me and SpiderCrewvulnerable segment is located at:CalculateDiskUsage BatteryIsCharging FullyCharged ExternalChargeCapable ExternalConnected BatteryCurrentCapacity BasebandStatus SIMStatus MobileSubscriberCountryCode MobileSubscriberNetworkCode ActivationState UnBctivated Activated FactoryActivated SoftActivation MismatchedIMEI MismatchedICCID MissingSIM WildcardActivated Expired ActivationStateAcknowledged kCTSIMSupportSIMStatusReady kCTSIMSupportSIMStatusNotReadyUnactivated changed to UnBctivated to trick the apple system enjoy with session bypass next!DOWNLOAD:MD5 file sum: 1d7c72faf4350b479131b49e4484ee1fDepositFilesGirlShare.roExternalThe reason of research is only for study the security, the full sequence of the session controlkey and activation loop will not be public, only advanced programmers, crackers and hackers will obtain more info on next steps ! Edited August 1, 2014 by administration 1 Quote Link to comment Share on other sites More sharing options...
Coco Posted August 1, 2014 Report Share Posted August 1, 2014 Odata facut public , se va remedia daca chiar exista o problema ( parerea mea ) Quote Link to comment Share on other sites More sharing options...
administration Posted August 1, 2014 Author Report Share Posted August 1, 2014 (edited) Odata facut public , se va remedia daca chiar exista o problema ( parerea mea )se face public ceva nou cand se gaseste altceva intelegi .... merita si altii sa incerce si sa ajunga la alte metode pornind de la o idee. se poate bloca telefonu foarte simplu tot modificand un string pe modul connected to iTunes si deblocate in iTunes, dar incurajez asa pe cei care vor sa vanda telefoanele blocate...Nu am destul timp sa exploatez acest bug deoarece lucrez cu ultima versiune acum si ios 8, dar va rog mult sa postati aici fotografii in cazul in care descoperiti ceva nou, eroari sau alte lucruri care nu le intelegeti. Multumesc.Daca vad pe cineva ca face progrese o sa il sustin si o sa ii deblochez dispozitivele apple ! Edited August 1, 2014 by administration Quote Link to comment Share on other sites More sharing options...
TheOne Posted August 1, 2014 Report Share Posted August 1, 2014 Aveam un 4s blocat aruncat printr-un sertar, o sa incerc si revin cu reply. Mersi deocamndata. Quote Link to comment Share on other sites More sharing options...
em Posted August 1, 2014 Report Share Posted August 1, 2014 Posteaza careva si un scan pe virustotal? Sunt de pe telefon, nu trag 100MB pentru asta.Good work if it's legit. Quote Link to comment Share on other sites More sharing options...
Byte-ul Posted August 1, 2014 Report Share Posted August 1, 2014 Posteaza careva si un scan pe virustotal? Sunt de pe telefon, nu trag 100MB pentru asta.Good work if it's legit.Scan dll:https://www.virustotal.com/ro/file/0b8a66933c7f80349e1e1e92f6d1845ad112ebd7292dcc099950bc498b5e3cab/analysis/1406879645/Scan la setup nu merge sa fac pentru ca e prea mare. Oricum, are digital signature. Quote Link to comment Share on other sites More sharing options...
bahaosistu Posted August 1, 2014 Report Share Posted August 1, 2014 pe ce telefoane merge ? 5s? 5? sau depinde de soft Quote Link to comment Share on other sites More sharing options...
administration Posted August 1, 2014 Author Report Share Posted August 1, 2014 Fratilor voi v-ati apucat sa faceti scan la installer-ul de la iTunes :)) daca nu vreti sa il instalati descarcati de pe net versiunea 11.2.2.3 si gata nu mai scanati sute de mega :) Quote Link to comment Share on other sites More sharing options...
catalin2209 Posted August 12, 2014 Report Share Posted August 12, 2014 Merge? Quote Link to comment Share on other sites More sharing options...
04xptex Posted August 29, 2014 Report Share Posted August 29, 2014 Hey man i need ios,android,bb, windows,osx exploit for public CVE or 0 day ,pls reply me if you have any idea Quote Link to comment Share on other sites More sharing options...
Romania- Posted August 30, 2014 Report Share Posted August 30, 2014 Merge?Nu merge. Quote Link to comment Share on other sites More sharing options...
albastrel Posted September 8, 2014 Report Share Posted September 8, 2014 (edited) [RO]Salut am gasit un exploit nou in versiunea 11.2.2.3 a iTunes de la Apple ce permite deblocarea partiala a telefonului pe partea de iTunes si anume bypass icloud lock, acest bug se afla in fisierul iTunes.dll. Modificarea acestuia face ca telefonul sa fie recunoscut ca unul activat si inlatura procesele de activare alocate server-ului albert.apple.com.Din pacate in iTunes nu puteti decat sa sincronizati video muzica si foto dar va las pe voi sa experimentati mai multe deoarece telefonul se comporta ciudat uneori el deblocanduse total.Deblocarea totala a aparut atunci cand:- am conectat un iphone activat (deblocat icloud) 5, 16 Gb cu numele Axx si l-am sincronizat pe un cont store Bxxdupa- am conectat un iphone neactivat ( blocat icloud) 5, 16 Gb cu numele Axx si l-am conectat pe un cont store Cxxdupa am primit pe ecranul telefonului eroarea "nu se poate efectua" cu optiunea de apasare a "ok" iar dupa apasare telefonul intra in meniul desktop iar reteaua functioneaza perfect.Fara ceea ce am descris mai sus va da eroarea ca nu poate creea o sesiune cu telefonul ceea ce este si normal, deci ce ramane de facut? - modifica driverul apple ce se ocupa de sesiune din computerul tau- incearca o bucla de activare bazata pe cartela simexploit-ul a mai fost prezentat partial unui administrator gadgetwide si pe urma aici deci este exclusivitate RST.[EN]A zero day exploit i have found in iTunes version 11.2.2.3, more exactly in iTunes.dll.This exploit bypass albert.apple.com activation and make the device to be recognized as a a activated one.In iTunes part the device will be like icloud unlocked iphone you can sync with video , music, pictures but some thing cant be done why?The iTunes will give us the error message: a session cant be started with your iphone or something like...Next thing that you have are two variants:1. crack the session in apple driver on your machine2. try to make a activation loop on device based on sim activation.How to use?- download cracked iTunes.dll and itunes 11.2.2.3 from bellow- uninstall all higher version and lower of iTunes and delete all apple directory on your pc- restart pc- install iTunes 11.2.2.3(if you allready have this version search and delete the file "cache.db" from user profiles apple directory)- replace iTunes.dll with the cracked one downloaded from hereENJOY !!!If you feel unsecure scan the fuc*ing dll on virustotal Credit: iCloudRemover Team, Justin, Jack, #FF0000sn0w, Me and SpiderCrewvulnerable segment is located at:CalculateDiskUsage BatteryIsCharging FullyCharged ExternalChargeCapable ExternalConnected BatteryCurrentCapacity BasebandStatus SIMStatus MobileSubscriberCountryCode MobileSubscriberNetworkCode ActivationState UnBctivated Activated FactoryActivated SoftActivation MismatchedIMEI MismatchedICCID MissingSIM WildcardActivated Expired ActivationStateAcknowledged kCTSIMSupportSIMStatusReady kCTSIMSupportSIMStatusNotReadyUnactivated changed to UnBctivated to trick the apple system enjoy with session bypass next!DOWNLOAD:MD5 file sum: 1d7c72faf4350b479131b49e4484ee1fDepositFilesGirlShare.roExternalThe reason of research is only for study the security, the full sequence of the session controlkey and activation loop will not be public, only advanced programmers, crackers and hackers will obtain more info on next steps !am si eu o mica intrebare... si daca l-ai axat pe contul store Cxx a luat UniqueID si IMEIul de la primul iphone 5 care era activat si s-a pus pe iphone 5 blocat icloud neactivat, explica-mi... cum s-a schimbat IDul, IMEIul, UDID si restul ?.... Dar m-ai e o intrebare... cum s-a deschis ? nu a ramas in logoul apple pe telefon? sau a intrat in setup? Eu de exemplu am schimbat lockdown de pe un 5 activat fara icloud pe un 5 blocat icloud si mi-a ramas prima data apple blocat cand l-am restartat am intrat cu SSH pe el prin WI-FI, a 2 a oara am schimbat la loc mi-a intrat iar in setup... logica mea este ca LOCKDOWN si LOCKDOWND fac toata treaba "asta e creierul". Dar nu inteleg cum s-a schimbat IMEIul etc... la tine?... si ti s-a deschis telefonul in menu...? care e logica? e aceelasi imei ? de pe 5ul ala activat? Edited September 8, 2014 by albastrel Quote Link to comment Share on other sites More sharing options...
administration Posted September 10, 2014 Author Report Share Posted September 10, 2014 am si eu o mica intrebare... si daca l-ai axat pe contul store Cxx a luat UniqueID si IMEIul de la primul iphone 5 care era activat si s-a pus pe iphone 5 blocat icloud neactivat, explica-mi... cum s-a schimbat IDul, IMEIul, UDID si restul ?.... Dar m-ai e o intrebare... cum s-a deschis ? nu a ramas in logoul apple pe telefon? sau a intrat in setup? Eu de exemplu am schimbat lockdown de pe un 5 activat fara icloud pe un 5 blocat icloud si mi-a ramas prima data apple blocat cand l-am restartat am intrat cu SSH pe el prin WI-FI, a 2 a oara am schimbat la loc mi-a intrat iar in setup... logica mea este ca LOCKDOWN si LOCKDOWND fac toata treaba "asta e creierul". Dar nu inteleg cum s-a schimbat IMEIul etc... la tine?... si ti s-a deschis telefonul in menu...? care e logica? e aceelasi imei ? de pe 5ul ala activat?toate alcatuiesc un token.token-ul genereaza o sesiune de lucru, sesiunea depinde de certificatessh lipsa pe 4s, 5 , 5c si 5stot ce trebuie sa faci este sa controlezi sesiunea si parametrii ei ori prin usb(aproape imposibil - JTAG), ori prin wifi(este foarte greu) ori prin itunes.metoda merge pe ios 8 pe iphone 6 ! Quote Link to comment Share on other sites More sharing options...
vldqs Posted September 10, 2014 Report Share Posted September 10, 2014 Am un iPad 4 wifi si am incercat o zi intreaga dar nu merge deloc. Quote Link to comment Share on other sites More sharing options...
nandreass Posted October 14, 2014 Report Share Posted October 14, 2014 din pacate nu merge... "This iPhone cannot be used because the required software is not installed...." Quote Link to comment Share on other sites More sharing options...