Compare commits
6 Commits
90d1292cf3
...
39ee397ff1
Author | SHA1 | Date | |
---|---|---|---|
39ee397ff1 | |||
![]() |
1c7802e9f3 | ||
![]() |
189e3be8a9 | ||
![]() |
af7644923d | ||
![]() |
b2efbaa7fb | ||
![]() |
9f053cd226 |
45
README.md
45
README.md
@ -1,18 +1,21 @@
|
||||
# Icarus
|
||||
An exploit for Chrome devices which allows people to unenroll devices with device management interception using a proxy and a custom Certificate Authority.
|
||||
|
||||
### warning
|
||||
### WARNING
|
||||
> [!IMPORTANT]
|
||||
> DO NOT USE ANY PUBLIC IP ADDRESSES FOR ICARUS AS A PROXY, YOU WILL RISK YOUR DATA and YOU WILL BE REMOTELY COMPROMISED.<br><br>
|
||||
> ANYTHING GOOGLE CAN REMOTELY PERFORM ON YOUR DEVICE, ICARUS CAN BE USED TO DO. AN EXAMPLE OF THIS IS INSTALL EXTENSIONS, SPY, USE YOUR CAMERA, REMOTE INTO YOUR DEVICE, GET YOUR PASSWORDS, AND MORE.<br><br>
|
||||
> ONLY SELF HOST ICARUS, NEVER USE A PUBLIC SERVER!
|
||||
> -UNRETAINED
|
||||
## REQUIREMENTS
|
||||
* KV4 OR LOWER CHROMEBOOK
|
||||
* V127 - V125 (YOU CAN DOWNGRADE USING IMAGES @ https://chrome.fanqyxl.net)
|
||||
* A USB DRIVE
|
||||
## USING PREBUILTS
|
||||
GET A PREBUILT @ [MY FILE HOST](https://dl.fanqyxl.net/ChromeOS/Prebuilts/Icarus) OR [KXTZ'S FILE HOST](https://dl.kxtz.dev)
|
||||
FLASH IT TO YOUR USB USING RUFUS, BALENAETCHER, OR CHROMEBOOK RECOVERY UTILITY
|
||||
|
||||
<!--
|
||||
> [!IMPORTANT]
|
||||
> You won't be able to use pre-built shims with this! You'd need to make new shims with ***your CA certificates***!
|
||||
If you want to use my (kxtz) shims, pass `--bypass` to the start.sh script below!
|
||||
-->
|
||||
|
||||
FOLLOW THE SERVER SETUP INSTRUCTIONS
|
||||
## Setup and installation instructions
|
||||
Clone the repo with `git clone --recursive https://git.kxtz.dev/kxtzownsu/icarus/` and change directory to it.
|
||||
|
||||
@ -26,7 +29,7 @@ Before continuing, open Chrome on your build machine and go to chrome://componen
|
||||
|
||||
After doing this the output directory (from here on reffered to as PKIMetadata) will be generated, which is the custom Certificate Authority.
|
||||
|
||||
Now, to modify the shim with the generated PKIMetadata:
|
||||
Now, to modify the shim with the generated PKIMetadata (THIS WILL OVERWRITE YOUR SHIM) :
|
||||
|
||||
- `sudo bash modify.sh <shim path>`
|
||||
|
||||
@ -34,9 +37,19 @@ Now boot the shim, and Icarus will attempt to modify your stateful partition.
|
||||
|
||||
### Server setup
|
||||
Requirements: npm, node
|
||||
|
||||
Linux:
|
||||
Run `make start-server` to start your proxy, then continue with the instructions below.
|
||||
|
||||
Do not use WSL to host a server!
|
||||
Windows:
|
||||
GET A PREBUILT FROM THE RELEASES TAB, AND RUN IT.
|
||||
|
||||
## USING MY PUBLIC SERVER
|
||||
AGAIN, PLEASE SELF HOST. THIS IS ONLY IF YOU HAVE NO OTHER CHOICE!!
|
||||
|
||||
IP: 72.80.65.133
|
||||
|
||||
PORT: 8126
|
||||
|
||||
## Setup and installation instructions, continued
|
||||
Reboot the device. You'll boot into verified mode. Once you have your server running, open the network configuration by clicking the lower right button (it will show the date), connecting to wifi, and then change the proxy settings accordingly.
|
||||
@ -46,13 +59,6 @@ Reboot the device. You'll boot into verified mode. Once you have your server run
|
||||
- Resume setup and your device will unenroll.
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
<details>
|
||||
<summary>During building, everything starting from root was copied into original!</summary>
|
||||
|
||||
Please run ``git pull`` on your local copy. This bug has been fixed.
|
||||
</details>
|
||||
|
||||
<details>
|
||||
<summary>My device says "Can't reach Google"!</summary>
|
||||
|
||||
@ -60,9 +66,14 @@ Reboot the device. You'll boot into verified mode. Once you have your server run
|
||||
- If that didn't work, powerwash your device and re-run the modified shim, and keep the server running.
|
||||
</details>
|
||||
|
||||
## HELP PLEASE
|
||||
* PLEASE DONT ANNOY WRITABLE/UNRETAINED FOR HELP OR DM ME, KXTZ, OR COSMICDEV
|
||||
* FOR HELP, YOU CAN PING ME IN MY [DISCORD SERVER](discord.gg/FF6Evz2gwr) OR TN. SAME FOR KXTZ AND COSMIC
|
||||
|
||||
## New Credits
|
||||
- [kxtzownsu](https://github.com/kxtzownsu) - rolling ssl keys, maintaining this fork :D
|
||||
- [kxtzownsu](https://github.com/kxtzownsu) - rolling ssl keys
|
||||
- [cosmicdevv](https://github.com/cosmicdevv) - creating icarus lite
|
||||
- [fanqyxl](https://github.com/fanqyxl) - maintaining repo, emotional support, testing :3
|
||||
|
||||
## Original Credits
|
||||
- [MunyDev](https://github.com/MunyDev) - Creating this exploit
|
||||
|
Loading…
x
Reference in New Issue
Block a user