- Replace bad_query with forcequitOS/worse_query (App Group based) - Read the App Group from the code signature entitlements - Add pathleak container enumeration and iOS 27 system container lookup - Route descriptor/CarPlay writes through worse_query - Add sign_personal.sh and POCKET_POSTER_SELFTEST diagnostics - Keep bad_query as an iOS 26 fallback
37 lines
1.1 KiB
Objective-C
37 lines
1.1 KiB
Objective-C
//
|
|
// worse_query.h
|
|
// worse_query
|
|
//
|
|
// Created by Taj C on 8/20/26.
|
|
//
|
|
|
|
/*
|
|
worse_query - A sandbox escape PoC for iOS 26 and 27, again.
|
|
Copyright (C) 2026 Taj C (forcequit)
|
|
|
|
This program is free software: you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation, either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef worse_query_h
|
|
#define worse_query_h
|
|
|
|
#import <Foundation/Foundation.h>
|
|
#include <stdint.h>
|
|
#include <stdbool.h>
|
|
|
|
int64_t worse_query(NSString *path, NSString *group, bool alt_flags, bool create_dir);
|
|
void worse_query_release(int64_t handle);
|
|
|
|
#endif /* worse_query_h */
|