Is porting this to the new kfd exploit possible?

[KernelFox0]

KFD: https://github.com/felix-pb/kfd

Apparently it can emulate MDC and it also can overwrite some files (as seen in Posi0nKFD)

That would support versions above 16.1.2 (up to 16.5 and 16.6 beta 1)

[GenericCoding]

we need a new method to patch installd afaik which kfd currently doesn't have publically.

[KernelFox0]

we need a new method to patch installd afaik which kfd currently doesn't have publically.

What about emulating MDC?

[zhuowei]

I tried using Kfund's KFD->MacDirtyCow emulation (funVnodeOverwriteFile) yesterday. The resulting executable crashed the first time it accessed a modified rebase page, exactly like what the comment in Kfund said. So it looks like emulating MDC with KFD might not work for this.

Anyways, this is no longer needed after Trollstore 2 was released, as every iOS version that supports KFD also supports Trollstore

[doraorak]

I tried using Kfund's KFD->MacDirtyCow emulation (funVnodeOverwriteFile) yesterday. The resulting executable crashed the first time it accessed a modified rebase page, exactly like what the comment in Kfund said. So it looks like emulating MDC with KFD might not work for this.

Anyways, this is no longer needed after Trollstore 2 was released, as every iOS version that supports KFD also supports Trollstore

This is needed in order to install swift playground on iphones. Sadly my version does not support mdc and seeing that kfd port did not work is kind of sad. Would the so called-mdc2 exploit work for this in theory ? (Idk what it is really just assumed they were similiar because the names are the same)

[zhuowei]

This is needed in order to install swift playground on iphones
Have you tried installing Swift Playgrounds with Trollstore instead?

[doraorak]

Yes it crashes on launch. Appearently this bypasses info.plist signature checks so thats why its necessary. Here is a link https://www.reddit.com/r/jailbreak/comments/168to04/run_swift_playgrounds_on_iphone_with_mdc/

[zhuowei]

@doraorak I think at this point you're better off waiting for a jailbreak, which would let you use AppSync Unified or similar to bypass the installd checks instead.