Lilu
An open source kernel extension bringing a platform for arbitrary kext, library, and program patching throughout the system for macOS.
Features
- Generic kext patcher
- Generic process patcher (64-bit with basic 32-bit functionality)
- Generic framework/library patcher (64-bit with basic 32-bit functionality)
- Provides a unified plugin API
Installation
You should install this kext along with the plugin kexts depending on it.
The prebuilt binaries are available on releases page.
Several existing plugins possibly with code samples are available on known plugins page.
To compile a plugin copy the debug version of Lilu.kext into its directory.
Configuration
- Add
-liludbgto enable debug printing (available in DEBUG binaries). - Add
-liludbgallto enable debug printing in Lilu and all loaded plugins (available in DEBUG binaries). - Add
-liluoffto disable Lilu. - Add
-liluuseroffto disable Lilu user patcher (for e.g. dyld_shared_cache manipulations). - Add
-liluslowto enable legacy user patcher. - Add
-lilulowmemto disable kernel unpack (disables Lilu in recovery mode). - Add
-lilubetato enable Lilu on unsupported OS versions (11.0 and below are enabled by default). - Add
-lilubetaallto enable Lilu and all loaded plugins on unsupported os versions (use very carefully). - Add
-liluforceto enable Lilu regardless of the mode, OS, installer, or recovery. - Add
liludelay=1000to enable 1 second delay after each print for troubleshooting. - Add
lilucpu=Nto let Lilu and plugins assume Nth CPUInfo::CpuGeneration. - Add
liludump=Nto let Lilu DEBUG version dump log to/var/log/Lilu_VERSION_KERN_MAJOR.KERN_MINOR.txtafter N seconds
Peculiarities
Most of the plugins cease to function in safe (-x) mode.
By default Lilu itself does not function in single-user (-s) mode, unless -liluforce is present.
Discussion
InsanelyMac topic in English
AppleLife topic in Russian
Contribution
For the contributors with programming skills the headers are filled with AppleDOC comments.
Earlier code changes could be tracked in AppleALC project.
Writing and supporting code is fun but it takes time. Please provide most descriptive bugreports or pull requests.
Credits
- Apple for macOS and lzvn decompression
- Brad Conte for SHA-256 implementation
- fG! for Onyx The Black Cat used as a base of the kernel patcher
- Nguyen Anh Quynh for capstone disassembler module
- Pike R. Alpha for original lzvn decompression
- Ralph Hempel for umm_malloc static pool allocator
- Vyacheslav Patkov for hde64 simple disassembler module
- 07151129 for some code parts and suggestions
- vit9696 for writing the software and maintaining it