Brad Stevenson

Welcome to Brad Stevenson mobile OS development

2014-08-28T13:10:00.000+01:00

This blog aims to give you guides on many various technical aspects of OS development aimed at the none technical everyday user.

The guides to date range from setting up a platform to start developing yourself here to how to set-up a Fake DNS and server spoof to collect authentication keys from an iPhone 4S here

Jailbreaking Windows RT

2013-01-10T13:45:00.000+00:00

Download the files needed here.
First extract runExploit.bat to a folder on your tablet (a folder simply on the Desktop will suffice).
Right-click and run runExploit.bat as Administrator.
The first time this is run an instance of Windows PowerShell will open which installs a Modern UI app needed for the exploit.
In PowerShell Type 'Y' and press enter.
Type 'R' and press enter again.
Another PowerShell will now pop up - To proceed type 'R' and press enter.
Type 'Y' and press enter to continue.
Press enter one more time to close the PowerShell.
CMD.exe will now run the exploit prompt you to press Volume Down button and then exit.

Congratulations you are now Jailbroken!

Try to run runExploit.bat one more time to verify the process worked.

*This is an untethered exploit and therefore you will need to rerun the runExploit.bat process on each reboot. However after the first time the PowerShell steps are not necessary*

Where to get compiled Applications:

Check out xda-developers forum here to download compiled apps ready to run on your newly Jailbroken device.

Sources and credits:

Tool has been made and packaged by Netham45.
Source page here.
Development process documented here.
Original Exploit from clrokr.
Exploit documentation here.

I will be uploading another post documenting the methodology used behind this exploit soon.

Follow me @BraddStevo if you want to ask any questions or more information

Have Fun!

Test

2012-01-25T21:09:00.002+00:00

Follow this guide if you already have a Hackintosh install and only wish to make this install compatible with AHCI BIOS settings and RAID BIOS settings, (Useful for a dual-boot scenario)

Click this button

Open Finder
Click the 'Go' drop-down menu, then 'Go to Folder'

Enter the Directory:
/System/Library/Extensions/AppleAHCIPort.kext/Contents

This will now open the contents of the .kext we need to edit
Copy the file 'Info.plist' to your desktop

Click this button

Right-click 'Info.plist' (on your desktop) and open with TextEditor
(Or whatever your preferred plist editor is, but for this tutorial i will use this as it is the most standard)

Scroll down to the <key> labelled ICH10AHCI
In the <dict> section find the <key> labelled IOPCIPrimaryMatch this contains the <string> we must edit
It should currently have the value 0x3a228086 (Please confirm this before continuing)

We now need to add the string 0x8228086
You should now finally have a key written as:

<key>IOPCIPrimaryMatch</key> 

                  <string>0x3a228086 0x8228086</string>

Click this button

Now save and close this file
Copy 'Info.plist' from the desktop back to the folder we have open in finder
(If you have closed it see steps 1 - 4)
You will have to confirm you want to overwrite the original file and provide your admin password.

Now repair kext permissions with your chosen utility (KextHelper, MultiBeast)
Once this is down shutdown your Hackintosh change BIOS settings to RAID and reboot!

Congratulations you can now boot in RAID!

Click this button

Making your AHCI Hackintosh install RAID compatible

2012-01-20T00:37:00.000+00:00

Follow this guide if you already have a Hackintosh install and only wish to make this install compatible with AHCI BIOS settings and RAID BIOS settings, (Useful for a dual-boot scenario)

Click this button

Right-click 'Info.plist' (on your desktop) and open with TextEditor
(Or whatever your preferred plist editor is, but for this tutorial i will use this as it is the most standard)

Scroll down to the <key> labelled ICH10AHCI
In the <dict> section find the <key> labelled IOPCIPrimaryMatch this contains the <string> we must edit
It should currently have the value 0x3a228086 (Please confirm this before continuing)

We now need to add the string 0x28228086
You should now finally have a key written as:

<key>IOPCIPrimaryMatch</key> 

                  <string>0x3a228086 0x8228086</string>

Click this button

Installing OpenSSL on Windows for use in CMD

2012-01-12T11:30:00.000+00:00

To Get OpenSSL on your Windows PC first download either:

32-bit or 64-bit
Install to C:\OpenSSL
Note: You may need to install Microsoft C++ 2008 Redistributables. Get them here:
Microsoft C++ 2008 Redistributables: 32-bit or 64-bit

Choose to Copy OpenSSL DLLs to \bin directory.
Now we need to add this to the system path.
Open: Control Panel, System, Advanced, Environment Variables,System Variable.
Edit the variable named 'path' and add:
' ;C:\OpenSSL\bin '
At the end of the current value.
Apply and close

Open RubyCMD and type:

openssl

You should now start OpenSSL in RubyCMD with no errors congratulations!

How to get Ruby and DevKit on Windows

2011-12-27T19:21:00.001+00:00

Install Ruby and DevKit on Windows:

Download necessary files here and here

Run Ruby '1.9.3.exe'
Install to desired path (I used default C:\Ruby193)
Select all optional installation extras

You will now have 'Start Command Prompt with Ruby' in your menu, This is what we will be using.

(I will refer to this in guides as RubyCMD)

Open 'Ruby DevKit 4.5.2' (Please Run After fresh ruby install [No extra gems installed])
Extract to chosen destination (I chose C:\DevKit and recommend this)
Open RubyCMD

Run:

cd C:\Devkit
//*[or your chosen install directory]
ruby dk.rb init
ruby dk.rb install

Testing the install:

gem install rdiscount --platform=ruby

You should see: Temporarily enhancing PATH to include DevKit...

Confirm gem is working:

ruby -rubygems -e "require 'rdiscount'; puts RDiscount.new ('**Hello Ruby Installer**').to_html'"

Congratulations you now have Ruby with DevKit installed on Windows.

Follow me on @BraddStevo

*Credit for installed to 'RubyInstaller for Windows'*

SiriProxy Guide for Windows

2011-12-25T21:17:00.001+00:00

For purposes of this tutorial I have been using Windows 7, Please note this tutorial is in beta. It will be improved as I get more feedback from you guys :)

Install Ruby and DevKit:

Download necessary files here and here

Run Ruby '1.9.3.exe'
Install to desired path (I used default C:\Ruby193)
Select all optional installation extras

You will now have 'Start Command Prompt with Ruby' in your menu, This is what we will be using.

(I will refer to this in guides as RubyCMD)

Open 'Ruby DevKit 4.5.2' (Please Run After fresh ruby install [No extra gems installed])
Extract to chosen destination (I chose C:\DevKit and recommend this)
Open RubyCMD

Run:

cd C:\Devkit
//*[or your chosen install directory]
ruby dk.rb init
ruby dk.rb install

Testing the install:

gem install rdiscount --platform=ruby

You should see: Temporarily enhancing PATH to include DevKit...

Confirm gem is working:

ruby -rubygems -e "require 'rdiscount'; puts RDiscount.new ('**Hello Ruby Installer**').to_html'"

Congratulations you now have Ruby with DevKit installed on Windows.
*Credit for installed to 'RubyInstaller for Windows'*

For OpenSSL download the following files:

32-bit or 64-bit
Install to C:\OpenSSL
Note: You may need to install Microsoft C++ 2008 Redistributables. Get them here:
Microsoft C++ 2008 Redistributables: 32-bit or 64-bit

Choose to Copy OpenSSL DLLs to \bin directory.
Now we need to add this to the system path.
Open: Control Panel, System, Advanced, Environment Variables,System Variable.
Edit the variable named 'path' and add:
;C:\OpenSSL\bin
At the end of the current value.
Apply and close

Open RubyCMD and type:

openssl

You should now start OpenSSL in RubyCMD with no errors congratulations!

Download Python:

32-bit or 64-bit
Install to C:\Python
Choose to Copy OpenSSL DLLs to \bin directory.
Now we need to add this to system path.
Open: Control Panel, System, Advanced, Environment Variables,System Variable)
Edit the variable named 'path' and add:
;C:\Python
At the end of the current value.
Apply and close

Open RubyCMD and type:

python

Python should now start in RubyCMD.

We now need to install necessary gems

Open RubyCMD and run:

gem install CFPropertyList

gem install eventmachine --pre

Install libxml2:

Download necessary files Here
Move both iconv.dll and libxml2-2.dll to C:\Ruby193\bin

Generating the certificates

Download the SiriProxy files here, and extract to C:\SiriProxy
Create folder C:\SiriProxy\Certs

Open RubyCMD as Admin and run:

(When prompted for password enter whatever you wish. I recommend you choose the same password whenever requested to avoid confusion.
When requested you can enter whatever company information you wish, except at all times enter your PCs IP address as common name, and put in no challenge password.)

cd C:\SiriProxy\Certs
openssl
genrsa -des3 -out ca.key 4096

req –new –x509 –days 365 –key ca.key –out ca.crt

genrsa –des3 –out server.key 4096

req –new –key server.key –out server.csr

x509 –req –days 365 –in server.csr –CA ca.crt –CAkey ca.key –set_serial 01 –out server.passless.crt

rsa –in server.key –out server.key.insecure

Exit

move server.key server.key.secure

move server.key.insecure server.passless.key

In your C:\SiriProxy\Certs folder you should now have the file ca.crt:

Email to your iDevice and install by opening the file on it.

Move server.passless.key and server.passless.crt to C:\SiriProxy

Install required gems

Run:

gem install httparty

Now create files called:

speechId
assistantId
sessionValidationData

In each of these files you need to enter the keys you gained from your iPhone 4S. Place these in C:\SiriProxy

Running the DNS

Download the DNS script here
Extract dns.py to /yourpath/DNS
On line 29 edit 'YourIPGoesHere' with the ip address of your PC
On Your phones Wi-Fi, click the blue icon and set the DNS to the IP address of your PC.

Run:

cd /yourpath/DNS
python dns.py

Start the server

Run:

cd C:\SiriProxy
ruby StartProxy.rb

Now test by saying "Test SiriProxy" to the phone.

Please Share and follow @BraddStevo

The more feedback the more I will work to help and make these guides easier

SiriProxy Guide for Mac OS X

2011-12-23T18:01:00.000+00:00

For purposes of this guide i have used Mac OS X 10.6.8

Download needed files here and here, we will be setting up the DNS server first.

DNS:

In the Downloaded folder open dns.py on line 29 edit 'YOURIPGOESHERE' with the ip address of your Mac
Now in terminal open the directory where you saved dns.py (with cd /yourpath/)

Type:

sudo python dns.py

Your DNS server should now be up and running.

Ensure you are using Ruby 1.9.3 and begin to install gems.

Navigate to the root of where you have extracted SiriProxy (cd /yourpath/)

Type:

rvmsudo gem install rake bundler
rake install
mkdir ~/.siriproxy
cp ./config.example.yml ~/.siriproxy/config.yml
siriproxy gencerts

Navigate to ~/.siriproxy then email ca.pem to the phone and install

Type:

siriproxy bundle
rvmsudo siriproxy server

Congratulations! now test by saying "Test SiriProxy" to the phone

Please Share :) and follow @BraddStevo

Reccommended for use with SiriPort by @iP1neapple

Guide for Siri Authentication keys on Mac

2011-12-23T09:22:00.000+00:00

By following this guide you will learn how to extract Siri Authentication keys from a function iPhone 4S, once these keys are extracted they can be used with any Siri GUI Ports and SiriProxy to create a functioning version of Siri on non-supported devices.

Please not that you should never distribute your own keys, as they will be blacklisted by Apple if they are seen connected to too many requests.

For my purposes this guide was completed on Mac OS X 10.6.8:

First ensure you have Xcode installed.

Then open terminal and type:

sudo su (when prompted, type in your Account Password)

gem install CFPropertyList
gem install eventmachine

Then download this folder and open the directory on your Mac (with cd /Pathofyoufile/)

Then, type:

openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 365 -key ca.key -out ca.crt
openssl genrsa -des3 -out server.key 4096

IMPORTANT! Add guzzoni.apple.com as Common name now.

openssl req -new -key server.key -out server.csr

openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.passless.crt
openssl rsa -in server.key -out server.key.insecure
mv server.key server.key.secure
mv server.key.insecure server.passless.key

You will get a file called ca.crt in the SiriProxy File. Send it via Mail to your iPhone 4S and install it.

Now, you will setup a fake DNS server. In the downloaded folder there is a file called dns.py. In line 29, replace YOURIPGOESHERE in there with your Macs IP address.

Now in terminal, open the directory where you saved dns.py (with cd /yourpath/ again)

Type:

python dns.py
ruby siriServer.rb

Done, Now you should get these 4 IDs:

1. X-ACE-HOST
2. speechID
3. Session ValidationData
4. assistantID

Do not forget the creator of the files @kmsbueromoebel, and myself @BraddStevo

Highly recommended to use with SiriPort by @iP1neapple

Guide for Siri Authentication keys on Windows

2011-12-22T20:23:00.000+00:00

By following this guide you will learn how to extract Siri Authentication keys from a function iPhone 4S, once these keys are extracted they can be used with any Siri GUI Ports and SiriProxy to create a functioning version of Siri on non-supported devices.
Please not that you should never distribute your own keys, as they will be blacklisted by Apple if they are seen connected to too many requests.

Install Ruby and DevKit:

Download necessary files here and here

Run Ruby '1.9.3.exe'
Install to desired path (I used default C:\Ruby193)
Select all optional installation extras

You will now have 'Start Command Prompt with Ruby' in your menu, This is what we will be using.

(I will refer to this in guides as RubyCMD)

Open 'Ruby DevKit 4.5.2' (Please Run After fresh ruby install [No extra gems installed])
Extract to chosen destination (I chose C:\DevKit and recommend this)
Open RubyCMD

Run:

cd C:\Devkit
//*[or your chosen install directory]
ruby dk.rb init
ruby dk.rb install

Testing the install:

gem install rdiscount --platform=ruby

You should see: Temporarily enhancing PATH to include DevKit...

Confirm gem is working:

ruby -rubygems -e "require 'rdiscount'; puts RDiscount.new ('**Hello Ruby Installer**').to_html'"

Congratulations you now have Ruby with DevKit installed on Windows.
*Credit for installed to 'RubyInstaller for Windows'*

For OpenSSL download the following files:

32-bit or 64-bit
Install to C:\OpenSSL
Note: You may need to install Microsoft C++ 2008 Redistributables. Get them here:
Microsoft C++ 2008 Redistributables: 32-bit or 64-bit

Choose to Copy OpenSSL DLLs to \bin directory.
Now we need to add this to the system path.
Open: Control Panel, System, Advanced, Environment Variables,System Variable.
Edit the variable named 'path' and add:
;C:\OpenSSL\bin
At the end of the current value.
Apply and close

Open RubyCMD and type:

openssl

You should now start OpenSSL in RubyCMD with no errors congratulations!

Download Python:

32-bit or 64-bit
Install to C:\Python
Choose to Copy OpenSSL DLLs to \bin directory.
Now we need to add this to system path.
Open: Control Panel, System, Advanced, Environment Variables,System Variable)
Edit the variable named 'path' and add:
;C:\Python
At the end of the current value.
Apply and close

Open RubyCMD and type:

python

Python should now start in RubyCMD.

We now need to install necessary gems

Open RubyCMD and run:

gem install CFPropertyList

gem install eventmachine --pre

Install libxml2:

Download necessary files Here
Move both iconv.dll and libxml2-2.dll to C:\Ruby193\bin

Generating the certificates

Create a working Directory (Such as C:\SiriServer\Certs)

Open RubyCMD as Admin and run:

(When prompted for password enter whatever you wish. I recommend you choose the same password whenever requested to avoid confusion.
When requested you can enter whatever company information you wish, except at all times enter guzzoni.apple.com as common name, and put in no challenge password.)

cd C:\SiriServer\Certs
openssl
genrsa -des3 -out ca.key 4096

req –new –x509 –days 365 –key ca.key –out ca.crt

genrsa –des3 –out server.key 4096

req –new –key server.key –out server.csr

x509 –req –days 365 –in server.csr –CA ca.crt –CAkey ca.key –set_serial 01 –out server.passless.crt

rsa –in server.key –out server.key.insecure

Exit

move server.key server.key.secure
move server.key.insecure server.passless.key

In your C:\SiriServer\Certs folder you should now have the file ca.crt:

Email to your 4S and install by opening the file on the iPhone

Move server.passless.key and server.passless.crt to C:\SiriServer

Running the DNS and server:

Download SiriServer.rb Here and extract to C:\SiriServer

Running the DNS:

Download the DNS script here
Make folder C:\SiriServer\DNS and extract dns.py to it.
On line 29 edit 'YourIPGoesHere' with the ip address of your PC
On Your phones Wi-Fi, click the blue icon to the side of connected network and set the DNS to the IP address of your PC.

Run:

cd C:\SiriServer\DNS
python dns.py

Now keep this open and open a new RubyCMD Window.

Run:

cd C:\SiriServer

ruby siriServer.rb

Now run Siri on your iPhone 4S

Collect your codes :)

Codes will be dumped in the RubyCMD Windows

Written by @BraddStevo please follow for help and updates.

Application and port By @iP1neapple please follow