From 4e584bf1df7b632e555eaf2a23dfe4f6a7678384 Mon Sep 17 00:00:00 2001
From: LukeZGD <26163116+LukeZGD@users.noreply.github.com>
Date: Wed, 17 Jul 2024 18:06:23 +0800
Subject: [PATCH] Testing hacktivate iPod3,1 enable exploit

---
 restore.sh | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/restore.sh b/restore.sh
index f657198..0ba1198 100755
--- a/restore.sh
+++ b/restore.sh
@@ -5598,10 +5598,9 @@ device_ramdisk_ios3exploit() {
         $scp -P $ssh_port ../saved/iPad1,1/iBoot3_$device_ecid root@127.0.0.1:/mnt1/iBEC
     fi
     case $device_vers in
-        3.1.3 | 3.2* ) read -p "$(input "Do you also want to jailbreak it now? (Y/n) ")" opt;;
-        * ) opt='n';;
+        3.1.3 | 3.2* ) opt='y';;
     esac
-    if [[ $opt != 'N' && $opt != 'n' ]]; then
+    if [[ $opt == 'y' ]]; then
         untether="${device_type}_${device_build}.tar"
         log "Sending $untether"
         $scp -P $ssh_port $jelbrek/greenpois0n/$untether root@127.0.0.1:/mnt1
@@ -5619,6 +5618,18 @@ device_ramdisk_ios3exploit() {
                 device_send_rdtar sshdeb.tar
             fi
         fi
+        if [[ $device_vers == "3.1.3" ]]; then
+            log "Getting lockdownd from device"
+            $scp -P $ssh_port root@127.0.0.1:/mnt1/usr/libexec/lockdownd .
+            log "Patching lockdownd"
+            local patch="../resources/firmware/FirmwareBundles/Down_iPhone2,1_3.1.3_7E18.bundle/lockdownd.patch"
+            $bspatch lockdownd lockdownd.patched "$patch"
+            log "Renaming original lockdownd"
+            $ssh -p $ssh_port root@127.0.0.1 "[[ ! -e /mnt1/usr/libexec/lockdownd.orig ]] && mv /mnt1/usr/libexec/lockdownd /mnt1/usr/libexec/lockdownd.orig"
+            log "Copying patched lockdownd to device"
+            $scp -P $ssh_port lockdownd.patched root@127.0.0.1:/mnt1/usr/libexec/lockdownd
+            $ssh -p $ssh_port root@127.0.0.1 "chmod +x /mnt1/usr/libexec/lockdownd"
+        fi
     fi
 }