checkra1n.dmg ?

[blackndoor]

I run ra1npoc with Pongo.bin (from pongoOS) and request a pongo shell. Then, I use the following cmds with pongoterm:

sep auto
/send ../../PongoOS/build/checkra1n-kpf-pongo
modload
/send ../rdsk/rdsk.dmg // extracted from the checkra1n binary
ramdisk
xargs rootdev=md0
bootx

It works but how the checkra1n jailbreak load the checkra1n.dmg (with loader.dmg) ? at which stage ?

[dora2-iOS]

are you talking about stage4? so yes, ra1npoc doesn't support it. but It works because there is already a dmg under /var/ on an already checkra1n jailbroken device.

[blackndoor]

Yes, I was talking about the stage4, how / when they transfert and load it ? (if you have some information)