nathanlr

[radiant cape]

i extracted the files

[flint lichen]

they're a folder ipwndfu-main in documents?

[radiant cape]

Yes

[flint lichen]

👍

sudo python3 ~/Documents/ipwndfu-main/ipwndfu -p && ipwndfu --patch-sigchecks && ipwndfu --repair-heap

[radiant cape]

Am I missing something ?

[flint lichen]

Wait ~/ doesn't work ok

What's your user folder name

wait if you run ls

[atomic lantern]

you didn't look at what's in the folder lol

[radiant cape]

Did I got the wrong one ?

That’s what it said on the guide

A11

[flint lichen]

Hold on

So on the guide part 1 step 3 was done

step 4 doesn't work?

[radiant cape]

i am still on step one i need to enter pwned DFU

[flint lichen]

Yeah

Part 1

step 3

python3 -m pip install --user --force-reinstall https://github.com/hack-different/ipwndfu/archive/main.zip

then step 4
ipwndfu -p && ipwndfu --patch-sigchecks && ipwndfu --repair-heap

Does this work?

[radiant cape]

Wait

[radiant cape]

ipwndfu: command not found

[radiant cape]

that worked

[atomic lantern]

what was the output from python3 though

[radiant cape]

taht's what i am getting when i am running this inside ipwndfu-main

[flint lichen]

close terminal and open it again

or cd ..

cd ..

same effect

[atomic lantern]

@radiant cape ?

[radiant cape]

i am sorry my english not perfect what do you mean ?

[atomic lantern]

after running python3, what text appeared in the window?

[radiant cape]

after running this command ? python3 -m pip install --user --force-reinstall https://github.com/hack-different/ipwndfu/archive/main.zip

[atomic lantern]

yes

[atomic lantern]

that's why it's telling you command not found

installing as --user puts it in a place that's not in $PATH by default

[radiant cape]

okay so what should i do ?

[atomic lantern]

sudo -H python3 -m pip install --force-reinstall https://github.com/hack-different/ipwndfu/archive/main.zip

[atomic lantern]

now try ipwndfu -p && ipwndfu --patch-sigchecks && ipwndfu --repair-heap

[radiant cape]

while the device in DFU mode ?

[atomic lantern]

yes

[atomic lantern]

@glossy coyote just something to note for that 15to14 guide
either install with sudo -H or add $HOME/.local/bin to path

[radiant cape]

n$ ipwndfu -p && ipwndfu --patch-sigchecks && ipwndfu --repair-heap
*** checkm8 exploit by axi0mX ***
Found: CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:0E ECID:000A30180844E02E IBFL:3C SRTG:[iBoot-3332.0.0.1.23]
Traceback (most recent call last):
File "/usr/local/bin/ipwndfu", line 8, in <module>
sys.exit(main())
File "/home/m3m3n140/.local/lib/python3.8/site-packages/ipwndfu/main.py", line 117, in main
pwn(device, match_device=args.match_device)
File "/home/m3m3n140/.local/lib/python3.8/site-packages/ipwndfu/main.py", line 202, in pwn
checkm8.exploit(match=match_device)
File "/home/m3m3n140/.local/lib/python3.8/site-packages/ipwndfu/checkm8.py", line 881, in exploit
if "PWND:[checkm8]" not in device.serial_number:
File "/home/m3m3n140/.local/lib/python3.8/site-packages/usb/core.py", line 864, in serial_number
self._serial_number = util.get_string(self, self.iSerialNumber)
File "/home/m3m3n140/.local/lib/python3.8/site-packages/usb/util.py", line 313, in get_string
raise ValueError("The device has no langid"
ValueError: The device has no langid (permission issue, no string descriptors supported or device error)
m3m3n140@m3m3n140-Predator-PH315-53:

[flint lichen]

No langid

Put device in DFU mode again

If that doesn't work restart laptop

[radiant cape]

ok

[flint lichen]

getting devices in pwned DFU is pain

[radiant cape]

tell me about it

[flint lichen]

Took me 3 days

[radiant cape]

i am fighting with my device

lol

same

[flint lichen]

The first day was getting the program to work at all

Then just

up arrow + enter over and over

dangit no langid DFU mode again

double dangit didn't fix time to restart

so many segfaults

[radiant cape]

again

same thing

[flint lichen]

Is device in DFU mode after being restarted

[radiant cape]

yes

[flint lichen]

Restart your laptop

Should fix it

[radiant cape]

brb

[flint lichen]

If not try different cable and/or port

[radiant cape]

i only has the type c cable which i am not using right now and the other cable i brought

[flint lichen]

Darn

Try different port

[atomic lantern]

wait, not yet pls

[radiant cape]

ok

[atomic lantern]

sudo apt install libusb-dev then try the first command with sudo as well sudo ipwndfu -p

[glossy coyote]

well yes I was gonna mention that but at least on Ubuntu the default PATH has already included it for a while

and sudo with pip = bad practice

[atomic lantern]

idk, this seems like a recent version of ubuntu, so that's strange lol

[radiant cape]

sudo ipwndfu -p
*** checkm8 exploit by axi0mX ***
Found: CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:0E ECID:000A30180844E02E IBFL:3C SRTG:[iBoot-3332.0.0.1.23]
Traceback (most recent call last):
File "/usr/local/bin/ipwndfu", line 8, in <module>
sys.exit(main())
File "/usr/local/lib/python3.8/dist-packages/ipwndfu/main.py", line 117, in main
pwn(device, match_device=args.match_device)
File "/usr/local/lib/python3.8/dist-packages/ipwndfu/main.py", line 202, in pwn
checkm8.exploit(match=match_device)
File "/usr/local/lib/python3.8/dist-packages/ipwndfu/checkm8.py", line 881, in exploit
if "PWND:[checkm8]" not in device.serial_number:
File "/usr/local/lib/python3.8/dist-packages/usb/core.py", line 864, in serial_number
self._serial_number = util.get_string(self, self.iSerialNumber)
File "/usr/local/lib/python3.8/dist-packages/usb/util.py", line 313, in get_string
raise ValueError("The device has no langid"
ValueError: The device has no langid (permission issue, no string descriptors supported or device error)

[atomic lantern]

F

yeah just reboot lol

[radiant cape]

lol ok

brb

[glossy coyote]

langid error is almost always fixed by retrying for me but my error message never said "permission issue, ..." unless that's new

[flint lichen]

All of my langids were fixed by rebooting something

phone or mac

[atomic lantern]

[radiant cape]

i am back

just restarted the laptop

what now ?

[atomic lantern]

bad title, same contents

[flint lichen]

ik

[flint lichen]

Try again

btw next comment isn't directed at you

Can we ban idiots from the internet

Not people who don't know a lot about a topic but want to learn

But idiots

[radiant cape]

i am trying to get into DFU mode again

and it's a pain

[radiant cape]

okay now i did it but it happened again

[flint lichen]

Try again?

Wait

I bet it doesn't have permissions

Needs a chmod

[atomic lantern]

only reason why i said to try sudo is because it was suggested by a decent amount of people

[radiant cape]

also the phone not staying in DFU mode for much longer same thing happned to me using type c cable

15 sec and it's reboot

[atomic lantern]

what are you even going to run chmod on though? permissions isn't always about r/w/x

[radiant cape]

can anyone do that for me by remote ?

[flint lichen]

?

[radiant cape]

lol

[flint lichen]

You sure you want to let random people on the internet remote into your pc

[radiant cape]

yeah cuz i am tired from the same error over and over again

and DFU mode is a pain

i don't think i would ever get to downgrade to iOS 14.8 with my luck

i am literally trying everything and it's the same thing over and over again

i even rebooted my laptop twice and tried

i am willing to pay someone to do that for me

no kidding

i have blobs and everything

i even downloaded the ipsw

but i can't set my nonce that's my only problem

[atomic lantern]

i mean, i don't mind

[radiant cape]

i would be glad if you can help me

srsly

i tried everything and i am new to this linux stuff never had linux before

it's the latest version of Ubuntu

just tell me when to put my device in DFU mode and you will do all the commands and stuff

so ? ..

[atomic lantern]

ok

[radiant cape]

okay so how we gonna do that ?

[cyan tusk]

I'm having some issues with Ubuntu, my iPhone suddenly isnt being recognized by it anymore

It had this issue before because libusb and some other stuff was missing

fixed it and now it suddenly isnt working again

[atomic lantern]

well, so far, i'm actually just getting exploit failed lol

[flint lichen]

That's good

[atomic lantern]

except that's what happens every time

[flint lichen]

No segfaults?

[atomic lantern]

nope

[flint lichen]

Keep trying ig

[atomic lantern]

for (( i=1; i<100; i++ )) ;do ipwndfu -p ; done || exit 1

yeah this is funny

[flint lichen]

Do it

[atomic lantern]

already am

if it can fail 106 times in a row, there's a problem

[atomic lantern]

so it told me i was in pwndfu, though futurerestore said it failed to upload ibss

[flint lichen]

Uh

No idea

[atomic lantern]

and yes, that was with pwned restore + set nonce

[flint lichen]

I have no idea

Is his phone working right now?

[atomic lantern]

well he was able to get to recovery and what not

so i'd assume yes

[flint lichen]

This man is cursed in some way

[atomic lantern]

though, futurerestore sets auto-boot for recovery

[radiant cape]

True

Also I am back hi 👋

Do you want to try again @atomic lantern ?

Sry for the ping lol

[atomic lantern]

don't apologize lol

but i kinda give up lol. probably better to just wait for checkra1n for 15

[radiant cape]

Aww okay np at least you tried I appreciate it , really .

I don’t know why I am so unlucky lol 😂

I have blobs and everything and still nothing work

It’s all cuz I need to set up nonce in order to futurerestore and I don’t know how to freaking do that on Linux

😝

If I had MacOS everything would’ve gone better .. i guess .

i think i am getting close to something

k so i managed to get my device into pwned DFU mode

*** checkm8 exploit by axi0mX ***
Found: CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:0E ECID:000A30180844E02E IBFL:3C SRTG:[iBoot-3332.0.0.1.23]
Device is now in pwned DFU Mode.
(1.57 seconds)

Device found in DFU Mode.
Sending iBSS (1488973 bytes)...
Cleaning up...
[exception]:
what=ERROR: Unable to send iBSS component: Unable to upload data to device

[radiant cape]

anyone know how to fix it ?

[untold quiver]

someone know maybe whats the problem "Anable to activate an update is required"?

[flint lichen]

What iOS version are you on

And device

If you're on a 6S or 6S+ on 9 that can happen

[untold quiver]

hey guys

someone know how to exit from here?

[flint lichen]

You can skip wifi no?

Ah

What iOS version

[untold quiver]

its an iphone 8

[untold quiver]

ios 15.2.1

15.3.1 sorry

[flint lichen]

Uhh

Yeah

[hallow cape]

dfurestore

DFU (Device Firmware Upgrade) mode is a mode which allows a device in any condition to be restored to a fresh version of iOS (not to be confused with Recovery Mode). You cannot keep data when restoring via DFU and you can only restore to a signed version.

To restore via DFU:

• Enter DFU Mode
• Once you enter DFU, the device should show a black screen.
• Connect the device to a Mac/PC and open Finder/iTunes.
• On the prompt that says "A device has been connected in recovery mode and needs to be restored" press "Restore iPhone" then "Restore and Update.”

Added by Black Swordsman#2802 | Used 132 times · Aug 13, 2021, 2:13 PM

[manic cave]

No Service

[untold quiver]

can be the sim reader broken?

[manic cave]

that means something even worse is wrong (else you’d just have Searching or No Sim)

try dfu restore though

[untold quiver]

it says searching

[untold quiver]

no service either

what can i try?

[sullen sail]

Baseband death?

[untold quiver]

lol

[verbal skiff]

that can either mean dead baseband or you are somewhere that has no service

[untold quiver]

maybe the antenna for signal?

[blazing maple]

Why does, “scanning for index files” take so long when running checkn1x

[sullen sail]

Probably because you’re using checkn1x

Use odysseyn1x

[flint lichen]

Likely you did

[atomic lantern]

how so?

[atomic lantern]

which apps are crashing?

just reboot then

[hallow cape]

reboot

iPhone 8 or newer (including all notched devices and iPhone SE 2020):

• Press volume up
• Press volume down
• Press and hold the side button for 10-20 seconds until the Apple logo appears

iPhone 7:

• Press and hold the volume down and power buttons for 10-20 seconds until the Apple logo appears

iPhone 6S/SE 2016/iPad 8th or older:

• Press and hold the home and power buttons for 10-20 seconds until the Apple logo appears

Added by JTV#5846 | Used 839 times · Mar 14, 2021, 7:51 PM

[atomic lantern]

well idk why that happens

are you using checkra1n alone or odysseyra1n?

you should restore rootfs with checkra1n then

does safe mode work?

[oblique grove]

Force reboot

[dire gull]

can you at least put some screen recordings

[south dragon]

checkra1n is usually the most stable

[atomic lantern]

i have a feeling that the snapshot is broken or somethin

cause that's all i can think of

[flint lichen]

Do you have blobs saved

If not can you try to rejb with checkra1n and save blobs with deverser

https://github.com/joshuah345/deverser

Lets you dump onboards

Your phone is a special case

[verbal skiff]

man

[flint lichen]

^^

I've used it on an SE 1, 6S, 7, and iPad 6

0 problems

[verbal skiff]

you have a fucked snapshot, dump onboards, futurerestore with pwndfu and the onboards

[flint lichen]

^^

[south dragon]

no it objectively is

jailbreaks are inherently unstable

[verbal skiff]

i said

you have a fucked snapshot, dump onboards, futurerestore with pwndfu and the onboards

https://github.com/joshuah345/deverser start with this

you'll need linux or macos

ok im not helping you

[dire gull]

just fucking read you illiterate bitch

[verbal skiff]

you have issues

then

get

linux

[atomic lantern]

the thing is, you need to have ssh access to dump onboards

[verbal skiff]

ha!

[lilac junco]

Stop spamming you dickshit

[dire gull]

average windows users

[verbal skiff]

was going to say run succession but ha!

[atomic lantern]

man, WSL could probably dump onboards fine too

[verbal skiff]

idk your an L

[lilac junco]

if you read you would understand that you can live boot Linux via a usb and not have to reinstall your entire os

But your so obsessed with being an asshole that you decide to spam chat instead

[dire gull]

you are being a complete dickhead

[verbal skiff]

says you bro

ok then, live boot linux

[lilac junco]

We have no reason to be nice to you, your spamming chat because your refusing to read instructions

[dire gull]

live boot linux

we dont spoon feed

[lilac junco]

Then get mad when your told to read it

None of us are paid to deal with your bullshit

[dire gull]

and ur username is ty.smart

so since yu smart

[verbal skiff]

google it

[lilac junco]

You don't need genius to open a link

[valid roost]

If you don't want either of those then no checkra1n for you. End of story.

[dire gull]

go live boot linux

or wsl

[valid roost]

wsl doesnt work

checkra1n

[dire gull]

yea true dore still has no dev role

[valid roost]

[verbal skiff]

to dump onboards and wipe your phone

alright you dont get checkra1n

bye

[dire gull]

then solve it yourself and stop crying

[valid roost]

what are they trying to do

[verbal skiff]

you have a fucked snapshot

[lilac junco]

is his rootfs snapshot dead?

[verbal skiff]

yes

[lilac junco]

L

[verbal skiff]

knowing your dumbass you probably deleted it

your root file system snapshot

[dire gull]

"fuck up rootfs snapshot for free minecraft minecoins!!!!"

[atomic lantern]

in other words: you have to restore

[verbal skiff]

just restore with itunes

[lilac junco]

when you jailbreak a copy of iOS (rootfs) is created, so, in the case of everything going to shit, you can restore it

[atomic lantern]

no, itunes

[dire gull]

if you dont want to restore

cope

[lilac junco]

apparently yours is fucked so the only solution is wiping your device

[verbal skiff]

wiping your phone

[dire gull]

yes

fuck you

[atomic lantern]

erase everything, start over

[verbal skiff]

yes, you can't use a backup either

[dire gull]

how old are you

doesnt seem true ngl

[verbal skiff]

your the dumbest 15 year old ever

im not a redditor or a discord mod, i just have common knowledge

[dire gull]

if you can click on our profiles and look at our roles, "15 year old"

[hallow cape]

Hey @verbal skiff, have a look at this!

Rule 1

No personal attacks, accusations, harassment, sexism, racism, or general malicious behavior. This includes, but is not limited to comments that we deem to be of this nature.

[verbal skiff]

lol

[dire gull]

omg

wipe

or cope

[verbal skiff]

you have to rootfs first, which means you have to restore

you cannot restore rootfs with the current state of your device.

[dire gull]

FUCK SAKE CANT YOU REMEMBER YOUR PASSWORD

[verbal skiff]

get it in your head

[dire gull]

STOP BEING THE STUPIDIST 15 YEAR OLD

[verbal skiff]

an icloud backup might work

[dire gull]

I GOT OVER 1K

[valid roost]

dont they save to your icloud keychain

[verbal skiff]

uh

50%

^

[valid roost]

if you save passwords in safari that is

but i do not trust you do the simplest shits

[verbal skiff]

oh man

im done

[valid roost]

laugh now

so funny

[verbal skiff]

this server makes me lose too many braincells

if they're uploaded to icloud

wait, you cant dump onboards lol

you'd need a mac to load a telent ramdisk

no you'd have to restore to 15.3.1

[dire gull]

yes

[verbal skiff]

do you have any 14.x blobs

[dire gull]

cope

i dont have jailbreak for a year

[verbal skiff]

cope

[south dragon]

dude plz stop raging

[verbal skiff]

do you have a mac

[south dragon]

u need to calm down

[strange light]

Does anyone have a video link for checkra1n install?

[verbal skiff]

ok your fucked

you can make a hackintosh

ok you probabkt shouldnt

[valid roost]

cant you dump onboards with linux

deverser exists

[verbal skiff]

you'd need ssh to dump onboards

right?

[valid roost]

yes

[verbal skiff]

they cant jailbreak

at all

[valid roost]

@atomic lantern please merge my pr

[verbal skiff]

they'd need to load a telent ramdisk, which requires macos

[atomic lantern]

i don't check my emails that often to know

[verbal skiff]

unless you can load ramdisks with linux

[strange light]

windows 10

[valid roost]

btw please test beforehand i dont have a jailbroken device to know

[atomic lantern]

wtf did you change

[hallow cape]

odysseyn1x

Odysseyn1x allows you to use checkra1n and Odysseyra1n on Windows computers via live-booting. You will need a USB flash drive or SD card for this.

[Tutorial]

Added by kitty#6969 | Used 2270 times · Jan 18, 2021, 10:39 PM

[verbal skiff]

no i dont know how to load a ramdisk, but you wouldn't be able to load one anyway

[valid roost]

mostly cleaning up the preparation stage

[strange light]

ty

[south dragon]

u will have to update probably

no way to get around it tho

or reinstall ur firmware with succession

[verbal skiff]

they cant

[south dragon]

o then yeah

they moght have to update

no u need a jailbreak

[verbal skiff]

no, you'd need to jailbreak

if you can get checkra1n to work then idk

[valid roost]

just do it

[south dragon]

cope

[valid roost]

you dont deserve jailbreaking

[verbal skiff]

15.3.1 is cool

[south dragon]

u will have to wait

[valid roost]

Yes.

[verbal skiff]

hold volume down while booting with checkra1n

[hallow cape]

Hey @valid roost, have a look at this!

Rule 1

No personal attacks, accusations, harassment, sexism, racism, or general malicious behavior. This includes, but is not limited to comments that we deem to be of this nature.

[valid roost]

ok.

[verbal skiff]

just do it

it disables injection

or is it volume up idk

[south dragon]

did he try safe mode?

[valid roost]

tf you can do that?

i always just do safe mode

[strange light]

Fuck I have a ryzen processor

[verbal skiff]

its either volume down or up idk

[valid roost]

hold both

[verbal skiff]

^

[south dragon]

then too bad u need to update

[verbal skiff]

right before the checkra1n stuff appears on the device hold the volume up and down

[strange light]

Can I still do checkra1n with a ryzen possessor?

[valid roost]

Yes but good luck

Success rate is low

[verbal skiff]

yes, you'd want to plug the device right into the mobo

what the fuck are you saying

[valid roost]

Unless you have the ryzen mobile 5000 series, heard they fixed the issue then

[verbal skiff]

right when it says booting on your pc

[hallow cape]

checkra1namd

If you’re on AMD/Ryzen, you may be encountering a few issues when using checkra1n. This can vary between freezes and straight up crashes. It’s because of AMD’s weird drivers that cause it not to work that well with checkra1n’s exploit. If you’re lucky you can actually successfully manage to jailbreak using checkra1n.

If you’re on AMD/Ryzen, you can try the following to give yourself a better success rate.

• Plug your device into your computer's motherboard.
• Use a genuine Apple USB-A to lighting cable.

If you’re stuck on the apple logo please force reboot yourself (see: /tag reboot).

If these don’t work, try to get your hands on another computer (Preferably intel), and try to use checkra1n again.

Added by flower#1116 | Used 3 times · Feb 21, 2022, 2:19 AM

[verbal skiff]

do dfu mode, when it says booting on the pc, hold both volume buttons

actually do it when you finish dfu

no i didnt i said when it says booting

no it doesnt but ok, hold both volume buttons when it says like "Right before trigger (this is the real bug setup)" or something

it wont

if anything it just wont do anything lol

[atomic lantern]

i mean i guess it works
still have to test linux maybe

also already have img4tool, so

[verbal skiff]

normal

[valid roost]

nice ecid

[verbal skiff]

yeah bro i have no idea

[mortal stone]

Hey… a question, checkra1n when will release to support iOS 15, it means it’ll support to the latest update for iOS 15 or early versions? And about the A11 the issue of passcode will be fixed or not!
More respect for you.

[hallow cape]

It appears you are asking about future jailbreaks. Nobody knows when a jailbreak will be released, but you can subscribe to notifications about releases by going to #roles.

This action was performed automatically. Please disregard if incorrect.

[verbal skiff]

a11 passcode probably not, and it will probably support all of 15

no

[hallow cape]

It appears you are asking about future jailbreaks. Nobody knows when a jailbreak will be released, but you can subscribe to notifications about releases by going to #roles.

This action was performed automatically. Please disregard if incorrect.

[verbal skiff]

i said.

[mortal stone]

Thx for reply I appreciate it (:

[verbal skiff]

not nessessaraily

[oblique grove]

A11 passcode is not an issue, its on purpose cause of changes in iOS 14+ and there is no a11 sep exploit to bypass the new iOS 14+ changes.

[tame pawn]

You suck

[atomic lantern]

who does

[tame pawn]

He knows who he is lol

[strange light]

What is the latest ios version checkra1n supports?

[flint lichen]

14.8.1

[strange light]

I’m installing it but it is stuck on booting

[flint lichen]

What's your device

and iOS version

[strange light]

14.7.1

[flint lichen]

What device

[strange light]

7plus

[flint lichen]

What OS

[strange light]

Windows 7 I think

[flint lichen]

You can't use checkra1n on Windows...

Use odysseyn1x

You'll need a USB flash drive

https://github.com/raspberryenvoie/odysseyn1x

[strange light]

Does this support my ios?

[flint lichen]

Yes

[atomic lantern]

yes

[strange light]

Alright thanks

[lusty jackal]

Yo whats good guys. I have one quick question. I have my iPhone 7 Plus jail broken on iOS 13.2.2. And when I try to put it on DFU mode it always goes straight to recovery mode and check rain doesn’t read it. Any ways on how I can get this to work

[flint lichen]

Why not Odyssey or unc0ver?

[near osprey]

are you using a usb-a cable?

[lusty jackal]

Well I continued with check rain because that’s what I used the very first time

[flint lichen]

That's fair

Yeah USB-C or USB-A cable?

[lusty jackal]

I’m using the usb-c to lighting

[flint lichen]

Switch to USB-A

[near osprey]

that wont work

[flint lichen]

USB-C doesn't work

[near osprey]

^^

[lusty jackal]

Thank you guys

[warm crag]

Is it possible to jailbreak 15.3.1? If not is it possible to go back to an older version

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[crystal hull]

no

[hallow cape]

canidowngrade

You cannot downgrade to an unsigned version of iOS (/tag unsigned), unless you have a Jailbreak or an A11- device, and have blobs (see /tag blobsfaq for more info).

You can’t downgrade to 13.x, as SEP and/or Baseband isn’t compatible (see /tag sepbb).

If you meet these requirements, check out /tag futurerestore and #futurerestore-help.

You can downgrade to a signed version of iOS, using iTunes / Finder, or iDeviceRestore (see /tag downgrade).

For legacy Devices, you can check out https://github.com/LukeZGD/iOS-OTA-Downgrader/ and Legacy Jailbreak if you need help.

Added by Night#1337 | Used 53 times · Jan 13, 2022, 11:21 PM

[lime zinc]

I know that there isn't an ios 15 jb yet, but once there is, would it be possible to jb an icloud locked iphone on ios 15?

[sullen sail]

No and never

Also

[hallow cape]

Rule 5

No Activation Lock bypass discussion. Asking how to do it or posting about it is not allowed. The same goes for anything similar to this subject, such as removing a passcode.

[lime zinc]

oh my bad, but thanks

[hallow cape]

checkra1n

Version

0.12.4

Compatible with

iOS 12.0 - 14.8.1

Type

Semi-tethered

Notes

Compatible with A7 - A11 devices. A11 devices on iOS 14 cannot use a passcode, Touch ID, Face ID, or Apple Pay in a jailbroken state.

Powered by https://ios.cfw.guide

[earnest tangle]

How can i uptade to ios 15 after jailbreak

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[crystal hull]

restore rootfs and update with iTunes

[cedar folio]

and won’t be able to rejailbreak for now

[open ridge]

Does anybody know how to fix

My iphone is stuck on a loop like this

[hallow cape]

reboot

iPhone 8 or newer (including all notched devices and iPhone SE 2020):

• Press volume up
• Press volume down
• Press and hold the side button for 10-20 seconds until the Apple logo appears

iPhone 7:

• Press and hold the volume down and power buttons for 10-20 seconds until the Apple logo appears

iPhone 6S/SE 2016/iPad 8th or older:

• Press and hold the home and power buttons for 10-20 seconds until the Apple logo appears

Added by JTV#5846 | Used 840 times · Mar 14, 2021, 7:51 PM

[open ridge]

Oh my god

Thank you so much !!!

Im. not an expert at jailbreaking so i didnt know

[shadow perch]

when trying to run odysseyn1x for checkra1n, it gets stuck on "checking if device is ready" im on ipad 7th generation 14.6

also tried checkn1x

[hallow cape]

iPad (7th generation)

All brand names

iPad (7th generation) Wi-Fi (iPad7,11)
iPad (7th generation) Wi-Fi + Cellular (iPad7,12)

Model(s)

A2197, A2198, A2199, A2200

Latest firmware

15.4 beta 4 (19E5235a)

SoC

A10 chip (arm64)

Powered by https://ios.cfw.guide

[atomic lantern]

yeah, checkn1x won't help

it's old and outdated

[shadow perch]

oh

but i tried using odyssey n1x but it didnt work

tried using bootra1n but it said it couldnt put device into recovery mode

[atomic lantern]

that's even worse

you should be using odysseyn1x

what cpu do you have?

[shadow perch]

ryzen

AMD Ryzen 7 5800X

[atomic lantern]

oh man

that's a problem

[hallow cape]

checkra1namd

If you’re on AMD/Ryzen, you may be encountering a few issues when using checkra1n. This can vary between freezes and straight up crashes. It’s because of AMD’s weird drivers that cause it not to work that well with checkra1n’s exploit. If you’re lucky you can actually successfully manage to jailbreak using checkra1n.

If you’re on AMD/Ryzen, you can try the following to give yourself a better success rate.

• Plug your device into your computer's motherboard.
• Use a genuine Apple USB-A to lighting cable.

If you’re stuck on the apple logo please force reboot yourself (see: /tag reboot).

If these don’t work, try to get your hands on another computer (Preferably intel), and try to use checkra1n again.

Added by flower#1116 | Used 4 times · Feb 21, 2022, 2:19 AM

checkra1nerrors

Error connecting to lockdownd
Unlock your idevice and trust the pc if a popup appears, then disconnect and reconnect the idevice.

iOS not supported or device not supported, but chart says otherwise
Make sure you are using the latest version of checkra1n, and enable allow untested version in the options. A11 users on ios 14+ will also need to enable skip a11 bpr.

Stuck on checking for device, or device won't go info dfu?
Make sure you're using a [usb-a to lightning cable](#bot-commands message) (as well as an adapter if needed). Use a pc with an intel cpu if possible, and don't use a VM.

Added by Black Swordsman#2802 | Used 67 times · Aug 13, 2021, 1:58 PM

[atomic lantern]

oof

[shadow perch]

:v

[shadow perch]

got it to work

found a computer with intel

[flint lichen]

Nice

[fringe anchor]

What is the checkm8? For me it fails right when the prep stage starts with error -26 "Sanity check transfer failed, device is busy or crashed? (fffffff...)

I'm tryna jailbreak an iPhone 5s running iOS 12.5.5

[hallow cape]

a7moment

Checkra1n issues for A7 Devices on Linux Hosts:
Checkra1n won’t really work for a7 devices on a Linux Host. You will need to do a replug trick and may even need to use an older version of Checkra1n.
Tutorial: HERE

Added by Cryptic#6293 | Used 62 times · Nov 6, 2021, 2:35 AM

[sullen sail]

@fringe anchor

[shadow perch]

How can you fix error loading preference bundles? Im using checkra1n and installed preference loader, and rocket strap

I tried reinstalled but didnt work

[glossy coyote]

So correct me if im wrong but the Checkra1n jailbreak and the checkm8 exploit will probably never support the iphone 13 huh

[flint lichen]

Nope

Never ever

The highest it could possibly support is A13 or 11 series + SE 2

But that requires a mem leak to be found for A12 or A13

[glossy coyote]

That is about what i figured , thank you

[uneven pawn]

Can I use PongOS on iPhone SE 2？

IOS15

[tame pawn]

No

Grrrrr I hate a14 devices 😭😭😭

[sullen sail]

A14 despiser role when

[uneven pawn]

iPad Air2？

[tame pawn]

Huh

[hallow cape]

iPad Air 2

All brand names

iPad Air 2 Wi-Fi (iPad5,3)
iPad Air 2 Wi-Fi + Cellular (iPad5,4)

Model(s)

A1566, A1567

Latest firmware

15.4 beta 4 (19E5235a)

SoC

A8X chip (arm64)

Powered by https://ios.cfw.guide

[sullen sail]

Yes

[hallow cape]

yt

YouTube is typically a very poor source of information and should be avoided. Many jailbreak YouTubers promote piracy, outdated tweaks, or just flat out fake jailbreaks. Reliable sources: iOS Guide, r/jailbreak Wiki, Complete Jailbreak Chart and The iPhone Wiki.

Added by toilet cat#8018 | Used 1246 times · Jan 26, 2021, 4:28 PM

[sullen sail]

No, that is a misleading video title and or scam trying to steal some of your data

[hallow cape]

iPhone 13

All brand names

iPhone 13 Pro (iPhone14,2)
iPhone 13 Pro Max (iPhone14,3)
iPhone 13 mini (iPhone14,4)
iPhone 13 (iPhone14,5)

Model(s)

A2481, A2482, A2483, A2484, A2626, A2628, A2629, A2630, A2631, A2633, A2634, A2635, A2636, A2638, A2639, A2640, A2641, A2643, A2644, A2645

Latest firmware

15.4 beta 4 (19E5235a)

SoC

A15 chip (arm64e)

Powered by https://ios.cfw.guide

[lofty forge]

chekra1n for ios 15.3.1, I waiting for you 😐

[drifting shadow]

Is 15.1 out?

[near osprey]

the version yes, a jailbreak no

[drifting shadow]

When are we expecting a jailbreak for ios 15.1

[hallow cape]

It appears you are asking about future jailbreaks. Nobody knows when a jailbreak will be released, but you can subscribe to notifications about releases by going to #roles.

This action was performed automatically. Please disregard if incorrect.

[tame pawn]

Never

[weak sorrel]

This is a joke but i dont think someone will try to jailbreak it for like 190 days or sumthin

[glossy coyote]

Where did you pick that number out of your butt

Sorry dunno if im allowed to swear in here

[near osprey]

you can!

[lusty jackal]

And im back on jailbreak thanks guys

[flint lichen]

👍

[glossy coyote]

Why is the try again off centered?

[atomic lantern]

it shakes, remember?

i think he just took a screenshot in the middle of the anim

[lusty jackal]

No i have jellyfish activated and have it set to the right

[atomic lantern]

jellyfish shouldn't do that lol

the "try again" message for touchid?

[hallow cape]

iPhone 12

All brand names

iPhone 12 mini (iPhone13,1)
iPhone 12 (iPhone13,2)
iPhone 12 Pro (iPhone13,3)
iPhone 12 Pro Max (iPhone13,4)

Model(s)

A2172, A2176, A2341, A2342, A2398, A2399, A2400, A2402, A2403, A2404, A2406, A2407, A2408, A2410, A2411, A2412

Latest firmware

15.4 beta 4 (19E5235a)

SoC

A14 chip (arm64e)

Powered by https://ios.cfw.guide

[hallow cape]

downgrade

Tutorial for downgrading to signed iOS versions with iTunes or Finder

NOTE: you cannot use a backup that was created on iOS 14.5+ on 14.4.2 and below, the backups are incompatible with those versions and you will run into issues while restoring the backup. Either use a backup created on 14.4.2 and below, or start fresh.

Added by eric#1997 | Used 181 times · Dec 21, 2020, 11:21 PM

[hallow cape]

canidowngrade

You cannot downgrade to an unsigned version of iOS (/tag unsigned), unless you have a Jailbreak or an A11- device, and have blobs (see /tag blobsfaq for more info).

You can’t downgrade to 13.x, as SEP and/or Baseband isn’t compatible (see /tag sepbb).

If you meet these requirements, check out /tag futurerestore and #futurerestore-help.

You can downgrade to a signed version of iOS, using iTunes / Finder, or iDeviceRestore (see /tag downgrade).

For legacy Devices, you can check out https://github.com/LukeZGD/iOS-OTA-Downgrader/ and Legacy Jailbreak if you need help.

Added by Night#1337 | Used 56 times · Jan 13, 2022, 11:21 PM

[acoustic obsidian]

is there any news on when checkra1n for ios 15 will be released? Or any news that it is in development?

[near osprey]

no eta

and it is being worked on

has been since the first ios 15 beta

[acoustic obsidian]

ok thanks

[dull coyote]

hi someone how to fix error 31? please thanks

[near osprey]

send a screenshot

[dull coyote]

okay

wait a second

[dull coyote]

I already tried with many versions and nothing with the last one, the previous one and so on

[near osprey]

what ios version

[dull coyote]

14.0.1

bro?

Can someone help me please I don't know what to do anymore😭

[cyan kraken]

Mac?

[lofty badge]

Is 14.8.1 jailbreakable for this, or for any other jailbreaks out there.

[flint lichen]

If you have a checkra1n compatible device yes

Otherwise no

Note that on A11 you lose the ability to use a passcode, Touch ID/Face ID, or Apple Pay

If you jb with checkra1n

[lofty badge]

I have a Iphone 11 is that a A11?

[flint lichen]

No

iPhone 11 is A13

Not compatible

[lofty badge]

rip

[flint lichen]

Are you on 14.8.1?

[lofty badge]

Yes

any other jailbreaks?

[flint lichen]

Nope

[lofty badge]

rip

[flint lichen]

If you were on 14.8 or lower you'd have unc0ver but ah well

I think you might still be able to delayOTA to 15.1 not sure

Definitely can to 15.2

[lofty badge]

This is my first time learning about jailbreak

delayota?

[flint lichen]

Software updates in Software Update in iOS are called OTA updates

For Over The Air

[lofty badge]

ah

[flint lichen]

Even after a new update replaces an old one, like 15.3 replacing 15.2.1

They're still available

And so we can delayOTA to them with some work

https://guides.stkc.win/posts/delayotajailed/

Updated link got the wrong one

[lofty badge]

So I have to delayOTA to 15.1 in order to install the newest jailbreak when it releases?

[hallow cape]

It appears you are asking about future jailbreaks. Nobody knows when a jailbreak will be released, but you can subscribe to notifications about releases by going to #roles.

This action was performed automatically. Please disregard if incorrect.

[flint lichen]

15.1 has a kernel exploit writeup out there so it's likely to get a jb first

15.1 expires march 12th

[lofty badge]

So I should update to 15.1 rn?

[flint lichen]

Ye

[lofty badge]

Using that method

[flint lichen]

Yep

[lofty badge]

Damn shi seems complicated asf just looking at it lol

[flint lichen]

Ye

[lofty badge]

I have to follow the unjailbroken devices part right/

[flint lichen]

Yeah

[lofty badge]

alright thanks

[atomic lantern]

15.1 ded rn apparently

[flint lichen]

Oh really?

Wonder if that was inspired by the PoC

or writeup

[sharp cove]

I heard ios 15 is not for public anymore , even checkrain or uncover. Is that true?

[drifting lava]

What

[sharp cove]

I saw on twitter

[drifting lava]

No like

I’m not sure what ur talking about

[sharp cove]

https://twitter.com/thejailbreakhub/status/1496684587459792899?s=21

The Jailbreak Hub (@thejailbreakhub)

PSA: Just for some people that don’t know, as of the time of this tweet there IS NO WORKING public jailbreak out for ANY version of iOS 15. This includes Checkra1n.

Twitter · Feb 24, 2022, 3:13 AM

[drifting lava]

Yea that’s true

There’s no jailbreak for iOS 15 on any device

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[drifting lava]

Also get your i from from either here or the server

Not a random bozo on Twitter

[sharp cove]

Also we heard a lot of rumor that will be successful

XD

[drifting lava]

Well afik there’s no jailbreak for iOS 15

[flint lichen]

No jb for 15

rn

[near osprey]

balls

oops

[oblique grove]

Which I wish I didn't have :(

[near osprey]

i literally did not mean to type that here

i didnt plug in my keyboard to my hack lol

[near osprey]

[sharp cove]

👀

[clear crypt]

🙏🏼

[tough stone]

"Exploit Failed (Error code: -31)" Im jailbreaking ipod touch 7 gen 14.7.1 and it enters dfu mode fine then it turns back on

[tough stone]

waiting for apple pay

[clear crypt]

Apple Pay can’t be added. It requires Sep

[tough stone]

oh

[glossy coyote]

Moment when you dont have any blobs to downgrade:

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[oblique grove]

Thats not possible for a tweak, thats done through sep, so unless an a11 sep exploit gets released, checkra1n will never be getting apple pay on a11 ever again.

I did say until a11 gets an sep exploit.

[spice pike]

guys i have iphone 7 plus on ios 15 can jailbreak using checkra1n

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[flint lichen]

No

[ebon magnet]

guys if i used checkra1n to jailbreak my ipod touch 6th gen (compatible) to bypass activation lock?

[hallow cape]

Rule 5

No Activation Lock bypass discussion. Asking how to do it or posting about it is not allowed. The same goes for anything similar to this subject, such as removing a passcode.

[sullen sail]

Why is the command like this

Can’t it just be numbers

[dull coyote]

hello, does anyone know how to do jaibrake without usb or having to boot anything in windows? Thank you

[flint lichen]

Not possible

On Windows you have to make an odysseyn1x bootable USB

macOS/Linux you can just use the checkra1n app

[uneven pawn]

I can't open the checkra1n web page for some reason. Has anyone done the same thing?

[atomic lantern]

it's down rn

[uneven pawn]

Is it an update?

[deep birch]

qwert forgot to pay for the server again

[oblique grove]

No

[uneven pawn]

Unfortunate

[atomic lantern]

good thing you can boot odysseyn1x on anything (except m1/arm trol)

[oblique grove]

You can't jb with regular checkra1n though cause the bootstrap is downloaded from there server.

[atomic lantern]

wtf

why would they do that

[oblique grove]

Its been done like that since day one with the checkra1n loader

[atomic lantern]

i know keeping it up to date is a thing, but still

[oblique grove]

Its been like that since checkra1n first launched, so.

[atomic lantern]

oh the loader

[oblique grove]

Yeah, the loader downloads the bootstrap from there servers

[atomic lantern]

odysseyra1n it is

[hallow cape]

Fugu

Version

0.4

Compatible with

iOS 13.0 - 13.5
Works with A10, A10X

Type

Semi-tethered

Powered by https://ios.cfw.guide

[onyx socket]

I am getting error unable to fetch bootstraps

Any solution

[atomic lantern]

checkra1n server is down

use odysseyra1n

[onyx socket]

Share the latest script

Because the script freezes enter password

[atomic lantern]

https://raw.githubusercontent.com/coolstar/Odyssey-bootstrap/master/procursus-deploy-linux-macos.sh

and you run it on linux/macOS with curl https://raw.githubusercontent.com/coolstar/Odyssey-bootstrap/master/procursus-deploy-linux-macos.sh | bash

[onyx socket]

What is the latter part

[atomic lantern]

the script is for linux and macOS
that's just how you'd run it in a terminal lol

[brisk shale]

It’s been a while since I had to do this but my stick lost the checkra1n file what one do I download?

[flint lichen]

odysseyn1x

https://github.com/raspberryenvoie/odysseyn1x

[brisk shale]

This doesn’t seem right, I’m trying to install the checkra1n to a usb to open in windows

[flint lichen]

checkra1n doesn't exist for Windows

You have to use something like this

[brisk shale]

I used to have it installed on a flash drive then would boot the pc o using the drive

[flint lichen]

Yep

[brisk shale]

It would launch checkra1n

[flint lichen]

That's what this is

You write the image to a flash drive

Boot PC from the drive

Use checkra1n

[brisk shale]

That sounds familiar

[glossy coyote]

what up guys!?

[flint lichen]

That's what odysseyn1x is

[boreal bolt]

Got back from the gym leg day

[young onyx]

anybody has experience with checkrain on amd ryzen mobile chips?

cuz i wonder if this is pure luck or

im scared to reboot

[near osprey]

ryzen mobile works fine afaik

its the desktop cpus that have issues

[spice pike]

can i use the delay ota method to downgrade

[manic cave]

no

[spice pike]

can i downgrade to ios 15.2 beta or it is unsigned

[glossy coyote]

Its unsigned

I gotta save my 15.3.1 blob

[sullen sail]

You missed your chance sadly

[spare mesa]

iOS 15?

[near osprey]

no

[young onyx]

Oh didn't know that good to know

[hallow cape]

checkra1n

Version

0.12.4

Compatible with

iOS 12.0 - 14.8.1

Type

Semi-tethered

Notes

Compatible with A7 - A11 devices. A11 devices on iOS 14 cannot use a passcode, Touch ID, Face ID, or Apple Pay in a jailbroken state.

Powered by https://ios.cfw.guide

[dawn spruce]

you can jailbreak mac?

[modest bluff]

with a mac or jailbreak the mac?

[dawn spruce]

the

[dawn spruce]

the

[modest bluff]

not that i know of

[near osprey]

checkm8 exists on T2 macs but nothing has been done with it

other than some group changing the boot logo

[dawn spruce]

hm

[near osprey]

not like you'd want to anyway

there's no tweaks for macos and root is already provided

[uneven pawn]

I'm looking forward to updating Checkra1n and Unc0ver.

[tame pawn]

Ha

[sullen sail]

And chime trol

[slender stratus]

Checkrain seems to work fine but keeps hanging on "Booting" is this an issue?

Linux*

[dim yacht]

what device is that?

[slender stratus]

Ipad mini 4

[flint lichen]

What iOS

[slender stratus]

14.4

[glossy coyote]

There are rumours that checkra1n work with iOS 15.1 are they true?

[flint lichen]

Nope

[glossy coyote]

Ok 😢

[hallow cape]

Hey @unborn pendant, have a look at this!

checkra1n

Version

0.12.4

Compatible with

iOS 12.0 - 14.8.1

Type

Semi-tethered

Notes

Compatible with A7 - A11 devices. A11 devices on iOS 14 cannot use a passcode, Touch ID, Face ID, or Apple Pay in a jailbroken state.

Powered by https://ios.cfw.guide

[unborn lintel]

does checkra1n have a built in update check for linux?

i know i can use --version, but is there a feature that'll auto-update?

[atomic lantern]

don't think so

not like checkra1n updates that often to begin with

[unborn lintel]

true

[hallow cape]

checkra1n

Version

0.12.4

Compatible with

iOS 12.0 - 14.8.1

Type

Semi-tethered

Notes

Compatible with A7 - A11 devices. A11 devices on iOS 14 cannot use a passcode, Touch ID, Face ID, or Apple Pay in a jailbroken state.

Powered by https://ios.cfw.guide

[next ibex]

I otadelay updated from 12.1.1 (checkra1n) to 14.8.1 on my og iPad Pro 9.7” but on 14.8.1 it won’t jb with checkra1n despite having unsupported versions checked and safe mode checked.

Wasn’t able to remove checkra1n before updating because honestly I thought otadelay to 14.8.1 wasn’t gonna work. I at least rebooted into non-jailbroken before updating though

[manic cave]

do the A9X guide in the message Bloo sent

[next ibex]

Thanks Mike, I didn't see that originally

So will I have to repeat all of those steps every time I need to rejailbreak?

[atomic lantern]

well no, not all. just running checkra1n

[next ibex]

The CLI version or app?

[atomic lantern]

the same one you ran in the guide

[next ibex]

👍

[hallow cape]

checkra1n

Version

0.12.4

Compatible with

iOS 12.0 - 14.8.1

Type

Semi-tethered

Notes

Compatible with A7 - A11 devices. A11 devices on iOS 14 cannot use a passcode, Touch ID, Face ID, or Apple Pay in a jailbroken state.

Powered by https://ios.cfw.guide

[hallow cape]

Fugu

Version

0.4

Compatible with

iOS 13.0 - 13.5
Works with A10, A10X

Type

Semi-tethered

Powered by https://ios.cfw.guide

Fugu14

Version

None

Compatible with

iOS 14.3 - 14.5.1
Works with A12+

Type

Untethered

Powered by https://ios.cfw.guide

[deep birch]

@light kestrel #bot-commands

[light kestrel]

Shit

Sorry

[glossy coyote]

Till i waiting for the proper checkra1n vers im plaiyng chess.com

Lol

[twilit flower]

does anyone know how to fix getting stuck in "setting up the exploit (this is the heap spray)?

[near osprey]

what phone/ios version?

[twilit flower]

iphone 5 ios 12.5.5

[near osprey]

are you sure its a 5

because im pretty sure checkra1n is A7 up

the 5 is A6

[twilit flower]

its either a 5 or a 5s

[near osprey]

5s yeah

[hallow cape]

a7moment

Checkra1n issues for A7 Devices on Linux Hosts
Checkra1n won’t really work for a7 devices on a Linux Host. You will need to do a replug trick and may even need to use an older version of Checkra1n.

Added by Cryptic#6293 | Used 76 times · Nov 6, 2021, 2:35 AM

[twilit flower]

ty, ill try it

[marble pulsar]

Hi, yes. But it's very old.

[dusty needle]

12,5,5 is so sh*t

[flint lichen]

12.5.4 better

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[atomic lantern]

reboot userspace

[hallow cape]

commoncommands

Run these commands over SSH or using a terminal such as NewTerm 2.

Respring
sbreload (faster)
killall SpringBoard (for older jailbreaks)

Safe Mode
killall -11 SpringBoard

Userspace Reboot
launchctl reboot userspace

uicache
uicache -a

ldrestart - (not recommended, use userspace reboot instead)
su root -c ldrestart

Reboot
launchctl reboot

Fix Cellular connection issues
killall CommCenter

Force the checkra1n loader to appear
uicache -p /var/binpack/Applications/loader.app

Added by cameren#0420 | Used 63 times · Jan 2, 2022, 8:27 PM

[ripe musk]

/tagreboot

[hallow cape]

reboot

iPhone 8 or newer (including all notched devices and iPhone SE 2020):

• Press volume up
• Press volume down
• Press and hold the side button for 10-20 seconds until the Apple logo appears

iPhone 7:

• Press and hold the volume down and power buttons for 10-20 seconds until the Apple logo appears

iPhone 6S/SE 2016/iPad 8th or older:

• Press and hold the home and power buttons for 10-20 seconds until the Apple logo appears

Added by JTV#5846 | Used 856 times · Mar 14, 2021, 7:51 PM

[spice pike]

Does anyone have a guide on how to use inferius to tether downgrade

[deep birch]

don’t tether downgrade it’s really not worth it

[flint lichen]

^^

[sand nacelle]

do u lose sep or something?

[atomic lantern]

nah just using a pc to boot ios is meh

and sending command after command isn't fun either

[sand nacelle]

oh right

its tethered

i wish i had blobs for 14.5 on my iphone x

[spice pike]

But i want to know how it is done

Is there anyway to downgrade without blobs even if it is so hard

[green wasp]

How to jailbreak a9x with windows

[hallow cape]

Hey @green wasp, have a look at this!

checkra1n

Version

0.12.4

Compatible with

iOS 12.0 - 14.8.1

Type

Semi-tethered

Notes

Compatible with A7 - A11 devices. A11 devices on iOS 14 cannot use a passcode, Touch ID, Face ID, or Apple Pay in a jailbroken state.

Powered by https://ios.cfw.guide

[sullen sail]

Tethered downgrading

It’s not worth it though

[modest bluff]

Video tutorial link?

[sullen sail]

Futurerestore with —skip-blob

You need a checkm8 compatible device for it

[warm vale]

I think it's not

I'm new to jailbreaking and apple but as far as i've seen a lot reddit posts about downgrading you can't downgrade to unsigned version without blobs

if you didn't save SHSH blobs you're out of luck sorry

of if we have some method then idk

i forgot to mention that you can downgrade old models without SHSH blobs

[sullen sail]

Tethered downgrades use just any blob for any version as long as it’s for your device

[warm vale]

you know that every SHSH blob is unique?

you can't just download someone's SHSH blobs for your model and use them

as far as i've heard that's it what I know

[deep birch]

as long as it’s for your device

tether downgrades bypass signature checks anyway

[near osprey]

^

thats why its called skip-blob lol

every single time you boot the device you have to exploit it since you’re patching out the signature checks

[warm vale]

as long as it's for your device that means your iPhone model or? Sorry for asking those questions I'm just new to Jailbreaking and iPhones

[near osprey]

tethered downgrades can use any blob

doesnt matter from who or where

[warm vale]

oh i Understand now

[oblique grove]

Doesn't tethered downgrading break face id and sep?

[sullen sail]

I actually don’t know

[near osprey]

probably

[sullen sail]

You’re using the wrong blob so I would imagine it would break them

[warm vale]

so is it possible to downgrade from let's say iOS 15 to 14? without having your owns SHSH blobs

[near osprey]

if you want to need a pc to boot every time you turn off the device sure

[sullen sail]

They have to be yours as in for your device, but you can use any versions blob for that

I should unironically try a tethered downgrade later today tbh

[warm vale]

is your iOS 15.1?

[sullen sail]

My main device yes

[warm vale]

yeah today my first iPhone 11 came with iOS 15.1

but it's good to know that we have a exploit

for 15.0 to 15.1.1 and 15.2 b1 maybe

EDIT: sorry misspelled some versions xd

[sullen sail]

If you join FDR Bureau Nathan compiled the poc ipa (or found it idk)

It’s very good at crashing your device instantly

[warm vale]

who want's that hahaha

[sullen sail]

It’s fun because to the uninitiated it pretty much bootloops your device

After running it and your phone reboots it’ll try launch the app again in the background

Executing the poc again and crashing your device again

So you have to quickly uninstall the app after reboot lol

[warm vale]

that's sounds like a challenge for the fastest reaction time ect xD

[sullen sail]

Eh, it takes about 15 seconds after you unlock your device

So you gotta be quick

[warm vale]

I also had a infinity bootloop on my old Samsung Galaxy A9 whenever i try to uninstall System app which is not from google

idk why but uninstalling Google Apps works without bootlooping but trying non-google app and restarting makes your phone unbootable and you need just to go to the recovery and just reinstall the whole firmware with ODIN

[glossy coyote]

Do i need blobs for tethered downgrade?

[sullen sail]

what have I done describing tethered downgrades

[sullen sail]

Yes

[glossy coyote]

Ok thx

[sullen sail]

And a pc every time you want your device to boot

[warm vale]

as i've check some githubs and hear from @sullen sail you just need to download SHSH blobs for your version and device

also it breaks FaceID

[sullen sail]

Im pretty sure it breaks sep as a whole lol

Device probably won’t even boot properly

[warm vale]

what is SEP?

yeah it's risky downgrade

[sullen sail]

Secure Enclave (Processor)

[warm vale]

also it doesnt work for A12+ models

[sullen sail]

Manages biometrics (faceid/touchid), passcode, Apple Pay

And many other things

[deep birch]

or just make a custom ipsw

http://github.com/m1stadev/inferius

[sullen sail]

True

[warm vale]

yeah

[spice pike]

I don't how to use inferius at all does anyone have a guide

Or any guide to tether downgrade

[deep birch]

don’t do it bro

it’s not worth it at all

[warm vale]

first of all make sure your device is vulnerable to checkm8

also yeah it's not really worth it

[flint lichen]

What device do you have

But also

Not

Worth

It

[spice pike]

Iphone 7 plus

[flint lichen]

Is it your main phone

[spice pike]

No

[warm vale]

what iOS version you're running?

[spice pike]

15.3.1

[warm vale]

I don't know if you really want to downgrade you can lookup for tether downgrading on google and on some githubs and find some information about it

[near osprey]

my opinion is if you cant figure out how to use it from the gh readme you shouldnt use it at all

[flint lichen]

^^

[cold beacon]

Hello guys , i was just wondering but can the new ios15 exploit be integrated into checkra1n for A13 support 🙏🏾

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[manic cave]

checkra1n would never use it

checkra1n uses an exploit known as checkm8, a bootrom exploit for A5-A11 devices (A5 requires an arduino, and checkra1n only supports A7-A11)

[cold beacon]

Ohk so currently speaking , no such exploit has been found in A13

[glossy coyote]

@cold beacon It’s not that it hasn’t been found. It’s that it hasn’t been produced for the public. It’s a cat and mouse game. Apple pays people to find exploits to push an update to patch it. Some exploits remain still but probably kept private.

[near osprey]

i doubt anyone is sitting on a bootrom exploit though

and i doubt one even exists rn

[glossy coyote]

Yeah unfortunately. Most known lead to a dead end . However I heard rumors of a 15.1.1 jailbreak so let’s keep our fingers crossed 🤞🏻

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[hallow cape]

checkra1n

Version

0.12.4

Compatible with

iOS 12.0 - 14.8.1

Type

Semi-tethered

Notes

Compatible with A7 - A11 devices. A11 devices on iOS 14 cannot use a passcode, Touch ID, Face ID, or Apple Pay in a jailbroken state.

Powered by https://ios.cfw.guide

[autumn stag]

but on ios 15.3.1 dont work?

[sullen sail]

No

Not yet at least

[marsh halo]

when my phone was jailbroken i was able to use touch ID and apple pay?!

[atomic lantern]

on ios 14?

iphone 8/x?

[marsh halo]

it was ios 14.7 and iphone 7

[atomic lantern]

iphone 7 is not a11

[marsh halo]

oh shit 🤦🏻 hahaha

sorry bout that

[hybrid moth]

https://twitter.com/silzeejailbreak/status/1498905506995310592?s=21

Silzee (@SilzeeJailbreak)

📢📢 iOS 15 > 15.1.1

Stay on your current iOS , don't upgrade to 15.2 > 15.4

Likes

101

Twitter · Mar 2, 2022, 6:18 AM

Hopefully good news sooon

[trim cipher]

Checkra1n is constantly giving me error -31, reinstalling doesn’t help

Any suggestions?

[stone perch]

Are you using a Intel or amd processor?

[atomic lantern]

i mean, we know this already

it's not related to checkra1n

it's about desc_race

[graceful quest]

@glossy coyote

[crystal hull]

remove passcode probably

[fossil glen]

heeeey guns ,can I do jailbreak my iPhone with checkra1n on iPad 😹

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[hallow cape]

checkra1n

Version

0.12.4

Compatible with

iOS 12.0 - 14.8.1

Type

Semi-tethered

Notes

Compatible with A7 - A11 devices. A11 devices on iOS 14 cannot use a passcode, Touch ID, Face ID, or Apple Pay in a jailbroken state.

Powered by https://ios.cfw.guide

[near osprey]

yes

[fossil glen]

That’s cool!

Any posts url ? So that I don’t need to worry about the iPhone reboot suddenly 🙂🙂

My iPad can’t jail break

[fossil glen]

[near osprey]

?

[fossil glen]

Oh sorry but I don’t know how to use iPad to do jailbreak for iPhone with checkra1n

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[near osprey]

https://github.com/dora2-iOS/ra1npoc

[fossil glen]

Yeah thanks! Have a good night (at here)

[clear crypt]

Let’s say I saved blobs for 15 have many files should it save? 1 shsh file or 2?

[near osprey]

depends on what you saved it with but its usually 2

apnonce and noapnonce

[clear crypt]

Ah so it is normal 😂😂 I’ve personally never used futurerrstore. I was abit confused as to why 2 files were being saved. 🤦‍♂️

[oblique grove]

@carmine snow @mossy dirge Shouldn't this twitter account not be allowed here? This twitter hosts and advertises multiple scam jbs (survey scam ones and pay scam ones).

[hybrid moth]

bruh

you couldve just said to me

no need to snitch right away

[oblique grove]

I wasn't talking about you, I was just talking to the admins about that twitter account.

[hybrid moth]

ahh ok

😂

[glossy coyote]

https://github.com/foxlet/bootra1n
This works for ios 14.4.2? Iphone 7

[near osprey]

use odysseyn1x

[hallow cape]

odysseyn1x

Odysseyn1x allows you to use checkra1n and Odysseyra1n on Windows computers via live-booting. You will need a USB flash drive or SD card for this.

You’re gonna be using Ventoy in the guide below, this will also allow you to add multiple .iso’s into the USB flash drive so you don’t have to waste most of your capacity.

Added by kitty#6969 | Used 2308 times · Jan 18, 2021, 10:39 PM

[glossy coyote]

Ty do you have also a youtube vid for me? Litle noob in this😅

[novel steeple]

Is the checkrain team inactive or did apple implement something really hard to crack on iOS 15? Or maybe both

[hallow cape]

It appears you are asking about future jailbreaks. Nobody knows when a jailbreak will be released, but you can subscribe to notifications about releases by going to #roles.

This action was performed automatically. Please disregard if incorrect.

[atomic lantern]

it's more of the latter

one of the issues being ssv

so the jailbreak has to be "rootless" now

[oblique grove]

The developer just have lives and aren't free everyday.

[atomic lantern]

and yea it's not like it's actually an entire team doing the core stuff iirc

[novel steeple]

So like apple services won’t work properly with the exploit?

[atomic lantern]

they work fine?

[novel steeple]

I’m just confused on why ssv would be a problem then.

[atomic lantern]

ssv is just a hurdle

[oblique grove]

Ssv locks the rootfs, if you modify the rootfs your idevice bootloops. All jbs have to become rootless

[atomic lantern]

i mean, that's what happens internally, would just bootloop on modification

[novel steeple]

That’s crazy they actually fixed it, everyone made it sound like as long as you had the right device they couldn’t patch it.

[atomic lantern]

they didn't fix it

they worked around it

that's what rootless means

core parts of the jailbreak need to be rewritten for it to work on 15

[near osprey]

yeah you cant unseal rootfs at all

rooted jailbreaks are dead unless you get an untethered bootrom exploit

[near osprey]

wait you dont mean checkm8 itself do you

because you cant patch checkm8 on devices that have it

its a vulnerability in the physical hardware

[novel steeple]

I just worded it terribly, I knew it was hardware based. It’s just crazy that they implemented something that still isn’t figured out yet.

[near osprey]

well we have figured out ssv though

[novel steeple]

Did the ssv start on iOS 15? Or later iOS 14 versions?

[near osprey]

they know theres no way to disable it, so we have to work around it

ios 15

[atomic lantern]

techically it started on 14, but didn't get enforced until ios 15

[novel steeple]

How limiting is rootless? What’s the main thing tweaks would not be able to do?

[lyric sequoia]

Hi?

[near osprey]

touch root

all tweaks will need to be updated

[oblique grove]

Anything that requires root

[near osprey]

but other than that it should mostly be fine

[lyric sequoia]

Where may I ask for help regarding checkra1n jb?

[oblique grove]

Here

[lyric sequoia]

Awesome, Im fairly new to jailbreaking. And I am very very lost

[novel steeple]

What would be an example of something that would need root permissions? Filza? SSH?

[lyric sequoia]

I have an Iphone 7 Plus 14.6 iOS, and I cannot seem to figure out which Jb works for me

[hallow cape]

It appears you are asking if you can jailbreak your device, you can find out that information by using /canijailbreak or in the "Get Started" section of ios.cfw.guide.

This action was performed automatically. Please disregard if incorrect.

[near osprey]

just checkra1n

[lyric sequoia]

I did

[oblique grove]

Checkra1n is your only jb

[young onyx]

i wonder if it will affect tweaks like appstore++ (or something like that) or frida

[lyric sequoia]

It states that I can jailbreak it, however when I set it up to jailbreak it, it says device unsupported

[near osprey]

appstore++ is already updated for ios 15

[young onyx]

but i think rootless is better for preventing jailbreak detection i assume?

[oblique grove]

Appstore++ isn't a root tweak at all, so no.

[near osprey]

not necessarily

[near osprey]

did you enable untested versions

[young onyx]

in the android world since root has become systemless kinda like rootless its easier to hide

[lyric sequoia]

Yes I did

[oblique grove]

You need to enable the "allow untested versions" option.

[lyric sequoia]

I also used some sort of? Port?? To try on windows

[young onyx]

so i assumed it would be the same for ios

[near osprey]

they would still scan for tweak injection

and filepaths

[young onyx]

right

[near osprey]

a funny way apps scan for jb is by writing to /private iirc

[young onyx]

i only jailbreak for pentesting tbh

[near osprey]

cause /private becomes r/w after a jailbreak and is accessible from the sandbox

[young onyx]

so i can live with rootless

[young onyx]

oh

[near osprey]

i assume they would do that, but for /private/preboot

[young onyx]

i didnt know that

its possible to mount it as ro?

🤔

or would it break tweaks

[near osprey]

its part of rootfs

[young onyx]

ah

[near osprey]

so on ios 15 you cant touch /private

[lyric sequoia]

Also, its possible to run Checkra1n on Raspbarry Pi?