From AwkwardTV
Revision as of 02:34, 21 May 2019 by Nito (talk | contribs)
Jump to: navigation, search

cycript for jailbreakd based jailbreaks tvOS 10.2.2 - > 12.1.1
Current Version: 0.9.8000

Cycript allows developers to explore and modify running applications on either iOS or Mac OS X using a hybrid of Objective-C++ and JavaScript syntax through an interactive console that features syntax highlighting and tab completion. (It also runs standalone on Android and Linux and provides access to Java, but without injection.)

Special Notes for jailbreakd jailbreaks

Cycript can currently not be used the same way as you have always been used to, due to limitations of the new style of jailbreaks (no kpp bypass) some additional steps are necessary to get cycript working.

Step 1: Install cycript from featured section on nitoTV

Step 2: ssh in to your appletv (if you need more instructions here, you probably arent ready for cycript)

Step 3: Run the new 'cycripter' bin to make it easier to inject our CycriptLoader.dylib into the target process

cycripter PineBoard &


[1] 1627
root@ (/var/root)# PineBoard PID is 1619
Remote task: 0xa03
Dylib Path Addr: 0x100ffc100
our dir: /tmp/PineBoard
center: <CFNotificationCenter 0x100601d90 [0x20af2fce0]>
Start listening...Trying dlopen...
dylib opened at addr: 0x282618e40
No error occurred!
we got a port! 1337
cycript started on port: 1337, press return & then run the command to connect:
cycript -r

Step 4: Hit return (will take you back to root@ (/var/root)# )

Step 5: Start cycript (the command to start cycript will be the last line of the prior commands output)

cycript -r (note your port number might be different, keep an eye on the output of the first command you run)

Step 6: Profit!

The latest version of the listener library will check to see if the default (1337) is bound already, if it is it will keep incrementing port numbers until it finds an available port.

It is important to note that '&' is crucial to background cycripter, as soon as cycripter is exited it tears the entire process down for some reason (the process you have injected into).