19459248 HackiOS boots Apple’s open-source 19459248 XNU kernel ( 19459140, the kernel of iOS 16.5) on Android phone hardware and runs the 19459248 unmodified iOS 16.5 user area 19459249 on top of it: launchd → backboardd → SpringBoard → apps. Our own EFI loader, our own replacements for Apple’s closed chauffeurs, a UEFI port, and a Linux Wi-Fi chauffeur on a compatibility layer make that possible. 19459252 It runs in 2 locations: POCO X5 Pro 5G (redwood, Snapdragon 778G) 19459249– absolutely nothing is flashed: the UEFI is begun with , the entire system resides in RAM, and after a reboot the phone is back in Android; QEMU 19459249 ( 19459142, aarch64)– the exact same thing on any Linux computer system, no phone required. 19659003 This repository is half of the job: 19659004 Repository What hackios-xnu-kernel (this one) XNU spots, the EFI loader, the UEFI port, Wi-Fi, QEMU scripts, 19459143, prebuilt kernel/loader/UEFI, scripts 19659008 hackios-xnu-userland 19659009 our init, injected libraries, launchd tasks, the APFS image home builder, the scripts that take iOS out of Apple’s IPSW, Metal/Mesa work 19659010 No Apple files remain in either repository. 19659011 downloads the iOS 16.5 IPSW from Apple’s own CDN to your device and extracts what is required there. HackiOS is an independent research study task by OOSEX GANG and is not associated with, authorised or backed by Apple Inc. iOS, iPhone and Apple are hallmarks of Apple Inc.
19659012
19459252 Photographed on the phone, the Adreno GPU illustration( 19459146. More in Screenshots. 19459252 What works Functions 19659014 Does not work( yet) 19659015 Lock screen, swipe to unlock, home screen with all icons (2 pages), stock iOS 16 wallpapers 19659016 Cellular, Bluetooth System gestures: swipe up(home, app switcher), edge swipe( back), Control Center Charging under our kernel (the phone just releases ) Apps: Settings, Clock, Calendar, Photos, Notes, Safari and more; widgets(Weather, Calendar) on the phone 19659020 Metal for apps (in development: 293 of 456 system shaders currently operate on the Adreno, see in hackios-xnu-userland) Phone touchscreen(Goodix GT9916), multitouch, wake on touch; genuine power and volume secrets App Store material and Apple ID sign-in (no Secure Enclave; FairPlay daemon exits) As much as 8 CPU cores(, huge core at 2.4 GHz, ~ 20 s to the lock screen 19659024 Video and Live Photo tape-recording Adreno 642L GPU through Mesa/freedreno(, OpenGL ES for CoreAnimation) Wi-Fi (WCN6750, ath11k ): sign up with from Settings, Safari over Wi-Fi, 55– 90 Mbit/s Noise (speakers, primary microphone), video camera in Camera.app (front/rear, sneak peek, focus, HEIC images) Information that iOS composes makes it through a reboot ( 19459150; iOS root volume on the phone’s flash 19659029 Sileo + Procursus (dpkg, apt), fine-tunes, SSH 19659030 It is a research study bench, not a ROM: a session lasts an offered variety of seconds, then the kernel go back to the loader and turn over its log. 19459252 Quick begin: QEMU, no kernel construct 19459274 holds the kernel, loader and our programs constructed from these repositories, so all you require is the system image
, which is made on your maker from Apple’s IPSW. 19459252 Requirements: Linux x86-64, ~ 12 GB totally free disk, 4
GB complimentary RAM. Bundles (Arch): 19659031(Debian/Ubuntu: ; 7-Zip needs to be 23 or more recent– it checks out APFS.) fastboot ->> our loader in RAM (fastboot boot); it raises its own USB link 19459281/ xl ramdisk 19659043 # submit the system image into the phone’s RAM (2.5 GB, ~ 80 s), when per loader session 19459281 XL_SECS=900 XL_CMDLINE=/ xl run./ xl screenshot shot.png./ xl reboot 19659045 # back to Android without any arguments lists every command (logs, screen and sound recording, cam frames, stop, state …). 19459252 19459252 Prebuilt boot image 19459274 Every release has connected: the redwood UEFI with our loader inside, all set for 19459141 It consists of no Apple files; the system image is still made on your device(above).
19459252 Building from source 19459274 runs every action that this device can run and utilizes for the rest. 19659047 Kernel — requires theos 19459286 in (cctools and 19459176 and 19459177
Information: xnu/README. md. 19659048 Loader — (clang+lld-link, an EFI application without EDK2). 19659049 Images 19459249– 19459179 (variables recorded at the top of that file). 19659050 UEFI — uefi/README. md(Project Silicium port); not required to run, 19459180 has it. 19659051 After restoring: revitalizes 19459252 Porting to another gadget 19459274 19659053 Follow docs/PORTING. md: the UEFI port, the loader’s platform description, the kernel’s chauffeurs, the firmware. Gadget profiles reside in 19459183 ( 19459184, 19459185, 19459186. 19459252
How it works The iOS programs, structures and dyld shared cache are not altered by a single byte: what they miss out on is done by the kernel(chauffeur replacements)
or by a library the kernel injects with 19459188 ( 19459189. 19459252 19459252 Layout Course What 19659057(office), 19459192/ 19459193(per gadget), 19459194, , drives the phone over USB: loader, kernel runs, logs, screenshots, screen and sound recording the loader: (UEFI application), (kernel + images + arguments container) 19659060 our XNU modifications: spot, brand-new files, 19459202/ whatever for structure XNU on Linux: 19459191, tool wrappers, stubs , kernel develop , the UEFI port and loading the boot image for the layer on which Linux’s Wi-Fi chauffeur constructs for our kernel QEMU runs, touch input, screenshots, stack symbolication 19659068 recording ( 19459214, , UFS/flash tools, , 19459217, host tests 19659069 developed kernel, loader and UEFI pieces ( for the third-party code in the kernel) 19659070 screenshots, checks.md, PORTING.md 19459252 Debugging 19459274 19459254 Session log: QEMU’s stdout or from the phone. 19659072– an image that opens and opens every app of the very first page. 19659073 in the log is the stack of a procedure that called 19459224; 19459225 (with — crashes. Live stacks (QEMU): 19459227, then (requirements. 19659075 How a check can lie to you: docs/checks. md. 19459252 Screenshots From the phone’s screen, one session(, 19459146 
): 19459252 
Licenses No iOS files remain in the repositories: 19459145 downloads them from Apple’s CDN to your device. is an acquired work of XNU and is dispersed under APSL 2.0, like XNU itself; 19459234 is the kernel constructed from it. It likewise consists of ath11k( BSD-3-Clause-Clear )and FreeBSD LinuxKPI code (BSD-2-Clause): see prebuilt/NOTICES. md. 19659078 and — libzbitmap(Corellium LLC, MIT here ); 19459237– libdeflate 1.24 (Eric Biggers, MIT, there ). ath11k, Linux and FreeBSD sources are not in the repository: 19459239 brings pinned releases. are our modifications to FreeBSD headers; the rest of is ours. 19659080 and consist of UEFI motorists from the phone’s Xiaomi firmware, dispersed the method Project Silicium disperses them for other gadgets; — AOSP, Apache-2.0. 19659081 This repository is accredited under the Apple Public Source License 2.0: our modifications to XNU are a derivative of XNU and need to be, and our other code here (loader, scripts) is launched under the exact same license. Third-party code keeps its own license, as noted above. Team OOSEX GANG– @oodze 19459286 (creator), @netusd , @wannqn , @hxfuxyyXD 19459286. News: t.me/ oosexgangdevs 19659083
