palera1n

[warped horizon]

it’s verified by the bootrom, which is read only

[keen fulcrum]

you are forgeting one key detail: We are exploiting the bootrom for testing'

[warped horizon]

if you have a new bootrom exploit then you are sitting on something worth thousands of dollars

those are not common

[keen fulcrum]

right now we are testing with the current bootrom exploit aka the exploit palera1n as some of us have devices that are below a12

[warped horizon]

the current bootrom exploit cannot be exploited untethered

it is a tethered exploit

even if you bypass the signing checks with it, you cannot boot the os without a pc

[keen fulcrum]

did I not mention saying that shsh blobs are only requested during install

[warped horizon]

you are misunderstanding how the process works

the bootrom verifies the installed apticket every time the device turns on

[keen fulcrum]

then the device wont boot if I forgot to update simple as that

[warped horizon]

no?

why would that be the case

when you flash a firmware that blob is “converted” into an apticket, which is stitched into the firmware

[keen fulcrum]

BUT THEN AGAIN ITS NOT DONE AFTER THE FIRMWARE IS INSTALLED

wouldnt we able to grab the stiched apticket

[frosty heath]

palera1n support ios 16.7.10?

[brittle ember]

If the device is supported yes

[frosty heath]

exactly?

show an example

[keen fulcrum]

do you have a device that supports palera1n

like this exploit is only for specific devices which is not decided by version

like my device is a A10 device so its supported

[frosty heath]

iphone 8

[keen fulcrum]

thats a supported device no matter the version

[frosty heath]

my jailbreak doesn't work for some reason

[viscid apex]

do you have a password on

[frosty heath]

no

[viscid apex]

did you turn it off

[keen fulcrum]

password should not matter for iphone 8

[viscid apex]

it does

lol

[frosty heath]

16.7.10

[frosty heath]

apple pay

[keen fulcrum]

thats only for a11 devices

[viscid apex]

which is the iphone 8

[keen fulcrum]

its only for a11 devices like iphone x

[viscid apex]

and the 8

the iphone 8 and x both are a11

[keen fulcrum]

a8 I think

[viscid apex]

the iphone 6 is a8

[keen fulcrum]

I think you mean iphone se

[frosty heath]

the icon does not appear

[viscid apex]

the se1 is a9

[keen fulcrum]

one sec

[viscid apex]

did you remove a passcode

[frosty heath]

yes

[viscid apex]

did you reset the phone after

[frosty heath]

no

[viscid apex]

you'll have to reset if you want to jb

it's some stupid apple security thing

[keen fulcrum]

I dont think its required

[viscid apex]

if you try the jb won't appear

[keen fulcrum]

@frosty heath give me one min k

just dont do anything

[viscid apex]

lol

[keen fulcrum]

I want to make sure something

[viscid apex]

bros got an sep bypass for a11

[keen fulcrum]

nooooooooooooooooooooooo I think you are confusing it with the iphone se

[viscid apex]

bro

[frosty heath]

reset settings

[viscid apex]

https://support.apple.com/en-ca/111976

[frosty heath]

not work reset settings

[viscid apex]

did you do factory reset

[frosty heath]

very slow

activation

[keen fulcrum]

whyyyyyyyyyyyyyyyyyyyyyyyyyy

[frosty heath]

jailbreak

[keen fulcrum]

oh by the way while I was anylzing how ipados installation worked I noticed something I am sending the file now

[viscid apex]

tf do you know that the p1 team doesn't

i'd like to hear

[keen fulcrum]

cause I did not check wether the iphone 8 is actualy a11 or not

[viscid apex]

appledb.dev

[frosty heath]

not work

[viscid apex]

what doesn't work

[frosty heath]

WORK

[viscid apex]

it works?

[frosty heath]

yes

is it possible to restore a copy?

[cosmic niche]

what a dumb discussion here

Solving if iPhone 8 and X are A11

[keen fulcrum]

idk

[frosty heath]

what

[viscid apex]

you can restore a backup without a password

since you said you removed it before you reset, if you backed up then you could restore that

[frosty heath]

yes

work

[warped horizon]

and then what

i have to ask, are you aware of how private key cryptography works?

that is the underlying concept behind firmware signing and installation and fundamentally you have to understand that to even consider exploiting the downgrade process

[cosmic niche]

they dont understand anything

[warped horizon]

we’re all here to learn

[spiral drift]

Anybody have an A10x iPad Pro running iPadOS 17.x? I have a few questions.

[solemn verge]

what's your questions

[spiral drift]

Does the small swipe keyboard lag on this hardware on iPadOS 17? The swipe keyboard works great for me on iPadOS 14.3, but my iPad 9 on 17.0 has keyboard lag that it didn’t have on iPadOS 15.4. And I don’t know if the difference is the RAM, or the whole 17.0 being kinda shit. I’m considering getting a battery replacement unit for my 10.5 iPad Pro, and I expect it will come with 17.x

[spiral drift]

Also, is PaleRa1n pretty stable? How often do you have to reboot?

[cosmic niche]

palera1n is stable

you can get very long uptime when not doing experiments

[silent anchor]

i'd say its more stable than even dopamine with physpuppet or other low success rate exploits

[solemn verge]

physpuppet has a high success rate

tbf most issues can be blamed on kfd as a base rather than the actual exploit themselves

(but also inherently, a checkm8-based jailbreak will be more stable than any semi-untether)

[silent anchor]

ok but its worse than landa

[solemn verge]

false

physpuppet as a bug is amazing (and also only 8 lines)

like it's basically a slightly worse sockpuppet (which was essentially the best vuln we've ever had)

[solemn verge]

a lot of it comes down to this

[frozen furnace]

So I was banned in the palera1n server... idk why I can't think of anything I did, if some mod for Palera1n could tell me at least why I was banned, and if theirs a way/chance of me to apeal.. (DM me then ping me here pls)

I sent @shut stone a DM about it, but his about me says he doesn't read DMs requests and to ping him, I've been waiting for him to come online for like a week now bc I don't want to like disturb him if he's not on, but I think he's always invisible...

[solemn verge]

unbanned (you got banned for raid phrase)

[frozen furnace]

oh lol, thanks!

[mild siren]

are there any videos i cant watch to jailbreak with paler1n i have iphone x i have mac, every adapter i keep running into issues with this step (Run palera1n -l
Make sure your device is plugged in when entering this command
When ready, press Enter and follow the on screen instructions to enter DFU mode) no instruction pop up and instead a pop up tells me to restore and update my iphone, if anyone can help and guide me through there is bread in it for you lmk ty

[keen fulcrum]

bruh I anlysed the firmware install and the device only goes once in dfu mode

[warped horizon]

that doesnt change any part of what i said

[keen fulcrum]

still if the installation is not verified by apple after installation thats techincly why this exploit could work

[keen fulcrum]

Its just that there is no pe that uses this exploit

[warped horizon]

it is though

i said before, every single time you turn the device on it verifies the apticket installed on the system

[keen fulcrum]

but I have noticed that the apticket is first sent to the client and then to the deivce for some reason

[keen fulcrum]

though that descovery has been made and thats how tsssaver works

[warped horizon]

except that's not a downgrade exploit

we can't create our own blobs or apticket, we can only save for signed versions

[keen fulcrum]

except for the fact that the verification happens at the bootrom level which is exploitable for A11 devices and below

[keen fulcrum]

and if the apticket is stiched to the os woudnt it be valid still

[warped horizon]

yes, a tethered bootrom exploit

we already have ways to bypass the firmware signing check on certain checkm8 devices, but you need a pc to turn on the device

!t blobsfaq

[stiff tree]

blobsfaq

What's a blob?
They're like golden tickets, but instead a digital signature made by Apple that was saved at the time when the signing window was open. If you possess one (or many), keep them safe.

How do they work?
They can be used in a program called futurerestore to restore to a firmware in which the SEP/Baseband is compatible. To check SEP/Baseband compatibility, check /tag sepbb.

Make sure to not use misleading sites. Stick to reputable sites like ios.cfw.guide and AppleDB.

Regardless of SEP/Baseband compatibility, any/all blobs should be saved for future downgrading abilities.

Can I use other people’s blobs?
No. Blobs are a file containing a special key specifically for that one device to allow downgrading to a specific firmware. Due to the way they work, only Apple can create them for your own device.

Can I save them now?
In general, yes. Blobs can be saved at any time, but it is crucial to save them when Apple releases new firmware, because they can only be saved for versions that are currently signed. There is one exception to this: if you are jailbroken and Apple has unsigned the version you're currently on, you may save onboard blobs for that version.

Added by eric#1997 | Used 1,725 times · Dec 21, 2020, 11:20 PM

[keen fulcrum]

but the bootrom exploit give you root access to the device right?

[warped horizon]

it lets you exploit the device on boot, but that doesn't mean the changes are persistent

[keen fulcrum]

DOESNT THE BOOTROM EXPLOIT GIVE ME ROOT ACCESS TO THE DEVICE

[warped horizon]

again the changes are not persistent

there's a whole chain of firmware checking that goes on when you turn the device on

with checkm8, yes you can modify some of these checks

but now the device knows that the chain has been modified and won't boot without being exploited

but since checkm8 needs a pc to exploit the device, your device is a brick until you plug it in to a pc

iOS Firmware + APTicket (blob) = iOS Signed Firmware (apple private key)

BootROM (containing apple public key) — VALIDATE —> iOS Signed iBoot (signed with private key pair) — VALIDATE —> iOS Signed Firmware (sig. priv key) + SSV — VALIDATE —> iOS Signed BB/SEP/Other firmwares (sig. priv key) — BOOT —> Sandboxing, userland, etc. —> Lock screen (iOS Firmware running) — VALIDATE APPS —> AMFI, amfid, other fun stuff —> Apps running!

[keen fulcrum]

but I am not planing on modifying the kernel cache SEP and baseband would it still boot like the downgrade checks only happen post installation so if I use the latest kernel cache SEP and baseband I should be fine

and I am only focused on trying to migergrate the downgrade checks that allow the os to downgrade.

all modifications are done post installation and are reverted pre installation

[warped horizon]

if you don't patch anything out the downgrade won't be possible

[keen fulcrum]

Bruh I AM PATCHING THE PE THAT DOES THE INSTALLATION

[warped horizon]

...which would make the whole thing tethered

again

you still go back to the fundamental issue that modifying anything in the boot process will require a pc to boot

[keen fulcrum]

I never said I am modifying the iboot or anything of the atual os.

[keen fulcrum]

I am only patching the pe that does the installation

[warped horizon]

what are you referrring to

[keen fulcrum]

preinstalled envioment

[warped horizon]

and how do you expect to do any sort of downgrade without touching iboot or dfu?

[keen fulcrum]

I am only touching dfu

when I said "I never said I am modifying the iboot or anything of the atual os." is dfu part of ios

no cause dfu does not load a os

[warped horizon]

it is used to flash an os

[keen fulcrum]

Do you think I dont know that

no

and dfu isnt part of a os

so I never said I wont be touching dfu

[warped horizon]

and the moment you try and touch dfu you change the boot process, making the boot tethered

[keen fulcrum]

um even a shsh downgrade requires a pc so I dont get your point

[warped horizon]

the difference is with an shsh downgrade you can boot without a pc

[keen fulcrum]

but when I am modifying the boot process I am using a custom pe not a mofied iboot which is installed

so start the downgrade so I still dont get your point

[warped horizon]

again im not sure what you mean by preinstalled environment because that's not really a term that exists in ios

[keen fulcrum]

I am talking ouside ios my guy

[warped horizon]

well you haven't really explained how this preinstalled environment works

[keen fulcrum]

well its job is to install ios via a script. once I have acces I might be able to share a dump of it with you

well the apple's version

[warped horizon]

so are you trying to downgrade with or without blobs

[keen fulcrum]

I am trying to modify the script to make it without blobs

[warped horizon]

what you're describing is tether downgrading and there are some tools to do it

but you should still keep working on it, it's a good learning experience

[keen fulcrum]

what i was planing on doing was try to do a downgrade via the bootrom exploit while not modifying the boot chain

[oak escarp]

what a great project, keep us updated once you develop a POC

[keen fulcrum]

tbh I need to modify the dump I have currently

[oak escarp]

best of luck

[viscid apex]

Hey if you’re willing to do it that’s awesome

Good luck

[mint knoll]

Any one have a tutorial fpr how to have a rooted jailbreak on iphone 7 running ios 15

[keen fulcrum]

check palera1x if you have windows installed

[mint knoll]

Is there any tutorial on how to use it? I have tried to use it but didn't really know how, I have dopamine installed atm

What I'm looking for is called Untethered Jailbreaks on wiki where I need to do the exploit only once
Untethered jailbreaks can be considered the holy grail of all jailbreaks. They only require the exploit to be ran once either via a website, an app or a computer.

[keen fulcrum]

parlera1n and palera1x are bootrom jailbreaks so they are tempoary

[keen fulcrum]

tbh its going to be best if you use parler1n/parler1x jaibreak cause I dont think that any newer jailbreaks would work on the device

[mint knoll]

I have tried to use them but didn't manage to make it work, if you know if there is a tutorial or a video on how to use them I would be thankful

[keen fulcrum]

did you install bindfs

thats a required step in getting the rooted jailbreak working

[mint knoll]

What is bindfs

[keen fulcrum]

me when apple discovers that I have found a way of bypassing apple's ios/ipados installation verification without the need of saving shsh blobs
https://tenor.com/view/ドロン-忍法-パッと消える-poof-disappear-gif-15682669

!t bindfs

!t bindfsfaq

!t help

!t blobsfaq

[stiff tree]

blobsfaq

What's a blob?
They're like golden tickets, but instead a digital signature made by Apple that was saved at the time when the signing window was open. If you possess one (or many), keep them safe.

How do they work?
They can be used in a program called futurerestore to restore to a firmware in which the SEP/Baseband is compatible. To check SEP/Baseband compatibility, check /tag sepbb.

Make sure to not use misleading sites. Stick to reputable sites like ios.cfw.guide and AppleDB.

Regardless of SEP/Baseband compatibility, any/all blobs should be saved for future downgrading abilities.

Can I use other people’s blobs?
No. Blobs are a file containing a special key specifically for that one device to allow downgrading to a specific firmware. Due to the way they work, only Apple can create them for your own device.

Can I save them now?
In general, yes. Blobs can be saved at any time, but it is crucial to save them when Apple releases new firmware, because they can only be saved for versions that are currently signed. There is one exception to this: if you are jailbroken and Apple has unsigned the version you're currently on, you may save onboard blobs for that version.

Added by eric#1997 | Used 1,726 times · Dec 21, 2020, 11:20 PM

[keen fulcrum]

BindFS is a tool used in the context of jailbroken iOS devices. It allows you to create a bind mount, which is essentially a way to mirror a directory to another location. This can be useful for various purposes, such as redirecting file paths or managing file system permissions.

[oak escarp]

me when i have no proof of backing up my claim

that's like saying haha i got checkm8 to work on A13

[keen fulcrum]

I just havent gotten around to testing it

[oak escarp]

yeah so how about you test it first and then bloat about how you found a downgrade method

[mint knoll]

Wait is that possible??
How can you skip it?

[mint knoll]

But is there any tutorial on how to use the software I haven't understood how

[oak escarp]

it's not

[keen fulcrum]

its simple to use

help the dump I have gotten is encrypted

[keen fulcrum]

k

[keen fulcrum]

Can anyone help me with the making of a pe that will install ios without shsh blobs

[silent anchor]

I genuinely don’t think you understand what private cryptography is

The bootrom verifies apple’s private key with a burned in public key

You can’t just fabricate your own blobs

[keen fulcrum]

I AM NOT TRYING TO DO THAT

[oak escarp]

then figure it out

yourself

i love how you go around saying "I have a found a downgrade exploit" when in fact you found nothing so far and everything is speculation

[silent anchor]

Whitename behavior

🫃

[frosty leaf]

wtf

[glacial crest]

piracy :/

[keen fulcrum]

how come you have ios 21.4

[frosty leaf]

early tesetr

[cosmic niche]

someone is trying to make a giant leap in downgrading iOS versions

[leaden spindle]

One message removed from a suspended account.

[solemn verge]

no

[little coral]

im testing ios 22 right now on my iphone 18 pro max ultra

[cosmic niche]

good luck

[unreal tinsel]

Hey, I have a question, I saw for a bunch of weeks that it’s possible to have palera1n like uncover so that you don’t need you’re pc to jb the phone. Is that true or some scam shit what I saw?🤔

[oak escarp]

scam

[unreal tinsel]

Oh… okay

[brittle ember]

Palera1n is based on an hardware exploit so it will be impossible with only software on your phone

[jolly condor]

How to jailbreak ipad 4 with windows laptop

[brittle ember]

Do you have any kind of laptop or pc?

[jolly condor]

I have windows laptop

Hp 15s ey 2000au

[brittle ember]

Oh mb misread it xD

You can use palen1x as a live boot to jailbreak

[jolly condor]

Can i install in windows

[brittle ember]

U will need to flash it to an usb stick and then live boot

There is no direct support for windows

[jolly condor]

Will palera1n work on ipad 4 with ios 10.3.4

I have tried ra1n usb that did not work on ios10.3 4

[brittle ember]

No that’s way to old

Use https://socket-jb.app/

[jolly condor]

Bro will it work windows

R u sure?

[brittle ember]

Like stated on the website u can sideload it with sideloadly

So yes it will work on windows

[jolly condor]

I will try and inform you

Thnx bro

[silent anchor]

is there palera1n for windows

instead of linux

[molten ingot]

Anyone know how to get clash of clans working?!?

Palen1x

@silent anchor

You get that? @silent anchor

[silent anchor]

yea

but i tried installing kali instead of that

tried many times

on other ssd

and like

user and pass

fails

while its correct

im doing the other method

is it possible on vm

?

[cosmic niche]

no

[warped horizon]

don’t do that

kali is quite possibly the worst distro you can use to try and install palera1n

[bold locust]

How does one know that -C even worked to remove a Created BindFS if re-doing -B says it already exists

[brave pewter]

Linux mint is fine

[sick compass]

!t whyrootless

[stiff tree]

Hey @bold locust, have a look at this!

whyrootless

Why rootless > rootful:

• There isn't any storage penalty (such as the 2-5 GB bindfs or 10GB+ fakefs storage penalty) compared to stock iOS
• Most future development of both tweaks and palera1n will primarily be rootless
• In general, rootful tends to have more and harder to troubleshoot issues in comparison to rootless

Yes, tweak compatibility for older tweaks may be better than rootless, but many older tweaks can be patched in various ways to work with a rootless setup.

Added by mastermike88 | Used 198 times · Sep 3, 2023, 12:56 AM

[sick compass]

Rootful is dead on ios 15+

We don't provide support for it

[proud merlin]

why does the palera1n app not show

[sick compass]

What device and iOS verison?

[proud merlin]

oh wait

[bold locust]

ok I figured out it's just -f --force-revert that will remove the BindFS as well
didn't work anyways, but Rootless works fine

I am just not exactly sure what you are meant to do with it after

like u install it and when you reboot you just make it boot Rootless again, or what happens

[molten ingot]

Woot woot!!!! I did it!!!

I got clash of clans working!!!

[oak escarp]

[fiery fog]

Supershocked

[sturdy rampart]

Choicy?

[raven skiff]

!t palera1nupdate

[stiff tree]

palera1nupdate

palera1n has received updates to support both iPadOS 17 and 18, however this comes with some misconceptions. palera1n is different from app-based jailbreaks such as Taurine, unc0ver, Dopamine, etc, as it uses the checkm8 bootROM exploit. In simple terms, this means that the exploit targets the read-only low level hardware of the phone, meaning it is completely unfixable by Apple, and can only be fixed by releasing newer devices.

However, this also means palera1n will only ever support older devices on 17+, namely A10X iPads and older (as there are no checkm8-supported iPhones that received iOS 17 or newer). Compatibility for iPadOS 17+ is limited to the following devices:

• iPad 6th Gen
• iPad 7th Gen (17 & 18)
• iPad Pro 10.5 inch
• iPad Pro 12.9 inch 2nd Gen

Added by bulpes | Used 82 times · Jul 22, 2024, 7:24 PM

[molten ingot]

@oak escarp @sturdy rampart I uninstalled the official App Store version and installed a official ipa that was patched to not crash jailbroken

[fiery fog]

Official іра

[sick compass]

Not much you can do there

you kind of just have to factory reset your device

[molten ingot]

https://youtu.be/BCiuerVsJa4?si=_UtFJPa_Dei93DhS

[exotic relic]

!t palera1n

[sick compass]

https://ios.cfw.guide/installing-palera1n/

Sadly you can't look up a jailbreak with GIR iirc

[exotic relic]

@sick compass I am sorry I didn't know

[sick compass]

You're all good

Just trying to help around here :)

[molten ingot]

Reminds me of “fresh frozen” when talking about food instead lol

[warped horizon]

do /jailbreak

[oak escarp]

wait till you find out this simply using choicy would be enough!

[tranquil haven]

when i reset everything will my iphone get locked again with the old icloud ? I only have a windows pc

[oak escarp]

we dont help with icloudbypassed devices

[cursive quail]

Is it possible that when I tried to jailbreak the iPhone 8 it could have bricked? My terminal (I use Linux) got lagged and it said that I was putting the device into restore mode and it got lagged and I couldn't do anything and I turned off the terminal and I haven't been able to exit restore mode for 2/3 days I don't know what to do through on Windows nothing I couldn't do anything, exit restore mode or flash the system, and iTunes doesn't even show the device... What to do?

[brittle ember]

What’s the current best tool to downgrade to older versions tethered for checkm8 devices?

[silent anchor]

!t reboot

[stiff tree]

Hey @cursive quail, have a look at this!

reboot

This will force reboot the device. For normal rebooting instructions, see the normalreboot tag.

iPhone 8 or newer (including all notched devices, iPhone SE 2020 and newer):

• Press and release volume up
• Press and release volume down
• Press and hold the side button for 10-20 seconds until the Apple logo appears

iPhone 7:

• Press and hold the volume down and power buttons for 10-20 seconds until the Apple logo appears

iPhone 6S/SE 2016/iPad 8th or older:

• Press and hold the home and power buttons for 10-20 seconds until the Apple logo appears

Added by JTV#5846 | Used 1,874 times · Mar 14, 2021, 7:51 PM

[ember forum]

Is there a jailbreak for iOS 18 /ipad 8th generation

[oak escarp]

no

[cosmic niche]

https://gist.github.com/LukeZGD/9d781f1b03a69fa46869384a9407a41a

[wise oak]

can iphone xs max or iphone 13 pro max downgrade to IOS 16?

[vital apex]

no

[wise oak]

ok

[molten junco]

I have a question. I keep getting this error performing usb device reset device disconnect detection might not work until a manual cable replug. How do I fix this? I tried replugging the cable back into the usb port but it still gives me that error.

[molten ingot]

I have choicy what are your settings at? I’d rather use the App Store than wait for the patched ipas every update

@oak escarp

[oak escarp]

you completely toggle off tweak injection

[molten ingot]

I tried Choicy, Shadow and one more I think but I forgot which one not at the same time but I still get the clash crash of being jailbroken

[molten junco]

Does anyone know?

[warm wadi]

What device and version?

[molten junco]

Ipad 6th gen 17.7. I have an AMD cpu on my main setup so I am unable to use this setup for the process. My Poweredge r720 has an intel CPU so I am trying to use that atm. I am using an ubuntu VM in proxmox for the jailbreak process.

[warm wadi]

Does it let you jailbreak the device at all? If yes, try unplugging and replugging the device when it says Checkmate!

[molten junco]

No, it won't let me. It has this error.

I tried replugging the cable back in and it still gives that error no matter what.

[warm wadi]

I believe the error is the VM

Your VM software doesn't support USB Passthrough

See if you can run a live linux boot from a USB or run it directly on proxmox

[molten junco]

On proxmox I setup the Linux VM so that it can recognize the USB port but oh well. I will try on my EndeavourOS boot. Give me a moment to see if it works.

[molten junco]

This is what I get on EndeavourOS. I have an AMD CPU so I figured that was the reason.

[warm wadi]

Yeah that error is due to AMD

[molten junco]

Thats what I figured cause I saw it mentioned on the site saying AMD CPUs have issues. Something related to USB controllers iirc.

[molten junco]

Is there any other way I could potentially do this jailbreak without having to get a computer that has an intel cpu? I am not able to go out a get a laptop at this moment.

[warm wadi]

You could keep trying on AMD it just has a very low success rate

Or boot palen1x from the intel cpu computer on proxmox

palen1x is meant for windows but in this situation it would still work, its just linux but only lets you run palera1n

https://ios.cfw.guide/using-palen1x

[molten junco]

Ok, Thank you for helping. I will keep trying and let you know if I run into anymore issues.

[warm wadi]

No problem

[molten junco]

I forgot to ask. On the EndeavourOS I am running where it says Setup Packet was not accepted in the image above that I posted. Do I just let that keep on going until it is successful?

I am a bit new to this. So I apologuise for the many questions.

[warm wadi]

Not sure since I don't own any computers with an AMD cpu

Probably just let it keep going

[warm wadi]

All good

[molten junco]

Ok will do. Thanks!

[bold locust]

I wonder if iOS 15.8.3 on a A10 did something

or if versions of palra1n past 1.0.7 changed something regarding BindFS

Technically it should work but something doesn't. I kinda do wanna use -L to log what -B did, but at the same time idk.
Rootless however works fine.

[indigo drum]

Jailbreak ios 16.7.4 iphone 8 give me

[gusty wagon]

How to get Xr features and dynamic island on iOS 16.7.10 iPhone 8 with no pc

[oak escarp]

!t guide

[stiff tree]

Hey @indigo drum, have a look at this!

guide

Complete guide to iOS and tvOS modification, from stock to jailbroken

Added by eric#1997 | Used 1,881 times · Dec 21, 2020, 11:23 PM

[indigo drum]

Send me link

[oak escarp]

@indigo drum

[silent anchor]

omg same ios version!!!!

[bold locust]

ye it did

if u are on something line less than A11 and iOS 15 you need to use the iso version 1.1.5 or less

before 2.0

[oak escarp]

[molten junco]

I tried for a few hours and had no success. I am going to hold off on doing this any further until I get an intel computer. Thank you very much for helping me earlier.

[warm wadi]

No problem!

[rose surge]

https://tenor.com/view/muslim-knight-rider-ninja-gif-12758551

[brave pewter]

Thats just rude

[uncut nymph]

Should I do rootful or rootless on a iphone x on latest ios?

[brittle ember]

!t whyrootless

[stiff tree]

Hey @uncut nymph, have a look at this!

whyrootless

Why rootless > rootful:

• There isn't any storage penalty (such as the 2-5 GB bindfs or 10GB+ fakefs storage penalty) compared to stock iOS
• Most future development of both tweaks and palera1n will primarily be rootless
• In general, rootful tends to have more and harder to troubleshoot issues in comparison to rootless

Yes, tweak compatibility for older tweaks may be better than rootless, but many older tweaks can be patched in various ways to work with a rootless setup.

Added by mastermike88 | Used 199 times · Sep 3, 2023, 12:56 AM

[uncut nymph]

thanks ❤️

[covert horizon]

Which Linux distro will work 100%? Ubuntu gives <Error>: Timed out waiting for download mode (error code: -status_exploit_timeout_error)

[cosmic niche]

https://ios.cfw.guide/installing-palera1n/

[silent anchor]

palen1x

Ubuntu usually doesn't work/isn't recommended iirc

!t palen1x

[stiff tree]

palen1x

palen1x allows you to use palera1n-c on Windows computers via live-booting. You will need a USB flash drive or SD card for this.

Added by hydrate#9351 | Used 676 times · Feb 22, 2023, 6:39 PM

[broken willow]

hey all, i need some help with palerara1n- i installed it on iOS 16.7.4 on an iphone 8. it install fine but i keep finding that it will occasionally go into safe mode- i uninstalled and reinstalled the plugin i thought it was but it wasn't it. Also, whenever rebooting and re-jailbreak it remains in safe mode. What can i do to escape, this time it seems as if i'm stuck there.

what i have installed: snowboard, trollstore helper/trollstore/trollstore lite, floatingdock XVI, filza, and the other necessary ones that come pre installed with palerara1n

[vocal lance]

is ios 17.6 on an ipad7 supported ?

[silent anchor]

yup

[vocal lance]

perfect, ty

[cosmic niche]

why both trollstore and trollstore lite?

[broken willow]

🤷‍♂️

[cosmic niche]

uninstall trollstore lite

[kindred nymph]

Hi, dose iPhone 12 iOS 18.1 supported? What to do after installing Altstore? Im no pro at this things 🤦‍♀️

[brittle ember]

iPhone 12 isnt supported so no

[placid olive]

Can we jailbreak iOS 17.3.1 iPhone 15 max pro

[brittle ember]

no

[placid olive]

You think they going to have one ☝️

[brittle ember]

sometime prob

but not anytime soon

[placid olive]

Isn’t there one for iOS 17 tho

[brittle ember]

the only thing is the iPad OS 17 and 18 with an jailbreak

for iPhone no

only Trollstore + Bootstrap on 17.0

[placid olive]

I got a iPad

[brittle ember]

which one?

[placid olive]

I need to see atm im on vacation I think it’s

[brittle ember]

if its any of these, u can jailbreak it

[placid olive]

iPad Pro

[brittle ember]

there are multiple pros xD

[placid olive]

Need to see when I get back in a week lol 😂

[brittle ember]

alr

[placid olive]

Isn’t there something like sandbox iOS ipa

Like an emulator

[brittle ember]

to emulate iOS?

[placid olive]

Yea

I don’t think so but if they do be nice to run a jailbreak for an app and then transfer data

[brittle ember]

well u could kinda use corellium and even jailbreak every version I think but aint cheap

so prob not worth it for a normal usecase

else you would have https://github.com/devos50/qemu-ios but thats also not really useful for anything newer

and still very much in testing last time i checked at least

[brittle ember]

u could get a free trial tough for like 60 min or so if u can convince them that u need it

[placid olive]

How much

[placid olive]

Dam why so much

[brittle ember]

because its meant for profesional security researchers

and i can imagine, building a fully functional iOS VM for all fairly recent devices on all versions isnt that easy

[placid olive]

True

[brittle ember]

but like i said, if u only need it once for a short time u could get a free trial

[placid olive]

Isn’t this for iPod tho

[brittle ember]

yeah thats why i said its not really useful

just pretty much the 2 systems able to emulate ios in any way that i know

[sturdy rampart]

i used it when i did not have iphone (now i have a jailbroken iphone)

[placid olive]

Same I have other iPhone on iOS 14 just sucks cause some them app need to be on iOS 17 I used to know how to bypass but I guess not

[sturdy rampart]

they mixed up the free trial options(before you just had to click free trial and type your info)

[sturdy rampart]

bruh why tf did they do that

[sturdy rampart]

ah yes corelium solo a classic

[placid olive]

Dam lol 😂 isn’t there a way to spoof app for higher firmware and if this isn’t channel what channel can I ask

[brittle ember]

oh yeah, they accepted mine tough couple months ago with this current one

[storm oasis]

i wanna jail break my iphone 8 with ios 15 on it whats the best route?

i want it for pokemon go

oops wrong channel

[viscid apex]

no you're in a pretty good channel for that

it doesn't really matter

i'd suggest dopamine for that device

[tawny magnet]

its gonna run pretty poorly

but yeah use dopamine

[runic bay]

Does palera1n support iOS 16.7.10 (20H350)?

[warm wadi]

Depends what iPhone

[runic bay]

iPhone X

[warm wadi]

Yes

[solemn verge]

16.7.10 is EoL only so yes

!t nosep but keep this in mind

[stiff tree]

nosep

When using checkra1n/palera1n on the iPhone 8/X running iOS 14 or later, you will not be able to use any of the following SEP features in a jailbroken state:

• Passcode
• Touch ID/Face ID
• Apple Pay

Additionally, if you’ve ever enabled a Passcode on iOS 16 on the iPhone 8/X, you’ll need to erase all content and settings in order to successfully jailbreak with palera1n.

Added by stkc#8018 | Used 1,114 times · Apr 22, 2021, 8:45 PM

[warm wadi]

Thought so

[runic bay]

Would it mess with my cellular data ?

[warm wadi]

No

[warm wadi]

But keep this in mind ^

[runic bay]

Passcode is the 6 digits correct?

[warm wadi]

What do you mean

[warm wadi]

You will lose the ability to do passcode, faceid, and apple pay

[runic bay]

Is that it or are there more things not written?

[warm wadi]

No thats it, nothing else is lost.

You can get the passcode back use FakePass

[runic bay]

Perfect

[warm wadi]

[[FAkePass]]

[stiff tree]

FakePass

Fake passcode for checkm8 jailbreaks on iOS 14+ on A11

Author

Luna

Version

0.1.5

Price

Free

Repo

Luna's Repo

Bundle ID

net.cadoth.fakepass

Powered by Canister · Oct 2, 2024, 12:54 AM

[runic bay]

Do you know how long it would take to install?

I just found about it 1 hour ago and it seems like the only option that’s good

[warm wadi]

Depends, windows, mac or linux

[runic bay]

Windows

[solemn verge]

note that since you’re on 16, you’ll need to erase all content and settings if you’ve ever set a passcode

[warm wadi]

https://ios.cfw.guide/using-palen1x/

Maybe 10-25 minutes

[runic bay]

Before or after jail break?

[runic bay]

Do you guys also help with installing tweaks?

[warm wadi]

Yes

[solemn verge]

before and moving forward

[runic bay]

I can’t just turn it off rn?

[solemn verge]

you have to erase if you ever set a passcode to use palera1n

thank you Apple SEP mitigations

[runic bay]

What would you say is better #palera1n #dopamine for ipa singing

[solemn verge]

If you’re on 16.7.10 you can’t use Dopamine

and no you can’t downgrade

(that being said… Sideloadly would likely be fine if that’s your goal)

[runic bay]

Would that be permanent ipa signing or temporary?

[runic bay]

@solemn verge do you know of a YouTube video on how to install it?

[runic bay]

Which one would I install

[ebon lake]

the one with 64

[ebon lake]

!t yt

[stiff tree]

Hey @runic bay, have a look at this!

yt

YouTube is typically a very poor source of information and should be avoided. Many jailbreak YouTubers promote piracy, outdated tweaks, or just flat out fake jailbreaks. Reliable sources: iOS Guide, r/jailbreak Wiki, Apple Database and The Apple Wiki.

Added by toilet cat#8018 | Used 2,559 times · Jan 26, 2021, 4:28 PM

[ebon lake]

that's crazy that !t yt is in his name 😭

@silent anchor ^

[silent anchor]

😭

[ebon lake]

read the top of the screenshot brother

[runic bay]

wtf

[ebon lake]

permanent as long as you are jailbroken

[runic bay]

What about for this one which ones do I download?

[ebon lake]

buddy

what is your operating system do you know that?

[runic bay]

Bruh I realized as soon as I sent the picture

My fault is that all I download from this website or more?

[cosmic niche]

!t tsjb

[stiff tree]

Hey @runic bay, have a look at this!

tsjb

If you have a device on iOS 16.7.x or iOS 17.0.1+ and it is jailbroken, you can use TrollStore Lite as an alternative to the regular TrollStore. TrollStore Lite is recommended if your device does not support TrollStore, otherwise you should just use that.

You can install TrollStore Lite from Havoc by clicking the link below.

Added by burgerkingflopper | Used 65 times · Jul 25, 2024, 5:21 PM

[visual hill]

Is there a way to bypass the jb detection from supercell games? Specifically clash royale

[oak escarp]

disable tweak injection with choicy

[visual hill]

thanks

[visual hill]

ive disabled tweak injection for the app but it still dosnt work. is there any other settings that i have to enable for it to work?

[oak escarp]

do you have

filza installed

through jailbreak

[visual hill]

yup

[oak escarp]

uninstall it

[thorny temple]

Hi! I have a question, why does my vnodebypass is failed? I installed dopamine thru trollstore and my jailbreak is Palera1n+rootles iPhone 7 v15.8.3?

[oak escarp]

how long did you wait on the screen

[thorny temple]

It instantly changed back to "enable" button

[thorny temple]

oh my bad, here is what's happening when I click "enable" button

[loud valve]

Guys i need jailbreak ios 17.3.1

[cosmic niche]

there is

[oak escarp]

ios is not ipados

[cosmic niche]

my bad

I thought we are in palera1n so he means iPadOS

[bold locust]

why exactly does palera1n say

[sick compass]

It has to do with timing issues with AMD CPU’s iirc

[bold locust]

don't newer Intel though have a defect though?

e.g. let's say one seeks a new build type thing

[sick compass]

That’s different

You can still use palera1n on AMD you’ll just have a lot of issues

[bold locust]

like issues as in errors?

[bold locust]

on a Reddit post someone said that it worked for them using a different USB Port

seen that newer models support something called "USB 4.0" 🤔

AMD isn't great when it comes to explain features, probably in BIOS one can find a bunch of settings for USB maybe, not sure

this sort of issues are present on the AMD GPU. CS:GO Steam Forums would go wild on issues. Being forced to change the settings, isn't something common that a user should be forced to do

[sick compass]

Oh yeah, it was their USB controllers that have weird issues

[bold locust]

https://www.youtube.com/watch?v=ET4PFZ9rqlc what a strange thing

because like I think CPUs themselves work the same

[sick compass]

Got my info here

Sorry for the ping reply

[warped horizon]

it’s a latency issue with AMD

[viscid apex]

AMD desktop CPUs have some USB controller thing that results in the exploit being really inconsistent

doesn't occur on AMD laptops

[bold locust]

do they let one disable it?

[viscid apex]

disabling the usb controller means no usb

[bold locust]

so is the usb controller just screwed

[viscid apex]

it's not screwed just buggy with this

[bold locust]

is it all of the amd cpus?

[viscid apex]

I don't think so

[bold locust]

are newer ones affected

[viscid apex]

but I haven't seen someone try this on like AMD FX

[warped horizon]

anything ryzen based is certainly affected

[bold locust]

does that mean AMD are bad CPUs? or what would that mean

[viscid apex]

doesn't mean they're bad it just means it doesn't work with this

[warped horizon]

the cpus are fine, we're a very fringe use case that amd just doesn't account for

like the latency increase is in literal ms but that's enough to make checkm8 not work

[bold locust]

i don't think a cpu should cause issues 🤔 🤷
no clue how the exploit works in detail though

also what USB Latency, like in-general or is it related to the exploit?

[visual hill]

still didint work :/

[agile blaze]

I can use it in iPad Pro M4 ? am new here

[warped horizon]

no, ipad 7th gen and older only

[agile blaze]

Ok , thanks

[warped horizon]

intel and amd have different code for their usb stacks

amd just has slightly higher latency in theirs which makes checkm8 not work right

[bold locust]

did amd not reduce the latency in newer CPU models?

[warped horizon]

again like i said before this is not an issue in any other application

this issue only crops up when you're running an exploit that needs very low latency

you would never have an issue with amd's usb stack in any other use case

[bold locust]

so this latency thing doesn't equal to data is sent less faster through USB on AMD than on Intel?

[warped horizon]

it is a difference of less than a second

you would not even notice it was there

[fervent acorn]

nvm

[obsidian valve]

Hello

I’m new at jailbreaks

Please is it good and will my phone not get spoiled. Pls someone should put me on

[fervent acorn]

what iphone & ios

and chances are ur phone won't get "spoiled"

just make a backup first

[obsidian valve]

iPhone 14 Pro Max and my current iOS is 18

[fervent acorn]

yeah unfortunately you can't jailbreak

if you want a jailbreak in the future, don't update your phone

[obsidian valve]

Oh okay

[fervent acorn]

you can have a look at the /canijailbreak

command

[obsidian valve]

I added you please accept

[fervent acorn]

why

[obsidian valve]

So I can dm you and so that you can put me on very well please.

[fervent acorn]

there's nothing else to say

[obsidian valve]

Ohk.

[fervent acorn]

you can't jailbreak

simple as that

[ionic magnet]

can a iphone X be upgraded to the newest version or is it apple update locked?

[fervent acorn]

there's a good reason why the latest ios version isnt compatible with iphone X

chances are if u did somehow magically successfully manage to be able to do it

you'll only be met with a bootloop

phone starts up
crashes
repeat

[ionic magnet]

so whats the earliest ver it can be put on too

im trying to jb a iphone x i got

[ashen cloak]

u seem like yk what ur doing so i got a question. if i downgrade my phone to 16.5 RC and jailbreak it, will i be able to customize it to make it look like a newer version cus i really do not like the ios 16 like look

[ionic magnet]

thank god 100% avalible 🙏

[fervent acorn]

unfortunately you can't downgrade from iOS 16 because of the Cryptex(an iphone security feature that prevents downgrading, EVEN IF you save blobs)

[ionic magnet]

yeah its impossible to downgrade

[fervent acorn]

so once ur in iphone 16, there's no going back for now

[ashen cloak]

damn i thought i could. so i have to wait for a jailbreak for ios18? (i got a 12 btw)

[fervent acorn]

yeah it might take awhile though

apple bought all of the jailbreak developers lol

[ionic magnet]

it will take a long while

there hasnt even been one for 17.6

[ashen cloak]

yea thats why i wanted to downgrade it. i used mistakaX to get the dynamic island but because of how the 12 is it gets cut off so i wanted to downgrade to jailbreak the phone and fix all of that

[fervent acorn]

for A12+ processors it's iOS 16.6 max i think

[ashen cloak]

unless there is another way of fixing that but i dont believe there is

[fervent acorn]

unfortunate, but u can always still jailbreak ur phone and customise it

[fervent acorn]

wait maybe 1-2 years and that will change

[ashen cloak]

yea ima be waiting a couple years for a jailbreak lol

by then ima have a new phone

[fervent acorn]

but wait

u have an iphone 12

with ios 16

[ashen cloak]

no 18

[fervent acorn]

ohh

[ashen cloak]

it came with 17 and i didnt know so i kept updating

[fervent acorn]

yeah then i guess u gotta wait

[ionic magnet]

iphone X is only 167 dollars rn

thats good but still not worth it i rather just pray to god some goated jailbreak developer drops a jb for 17.6.1

[ashen cloak]

what if i download a IPSW of ios 16.5.1 or whatever it is an then flash it to my phone or will that not work

[fervent acorn]

nop

[fervent acorn]

https://x.com/opa334dev i guess keep an eye out

opa334 (@opa334dev) on X

24, Developer of Dopamine Jailbreak, TrollStore and some jailbreak tweaks. Employed @CellebriteLabs, opinions are my own. Repo: https://t.co/jIxCyNXT1p

Twitter

[fervent acorn]

basically how do i explain it

when u want to install an update

it communicates with apple's servers

and if apple allows for the iOS version to be installed

they will send a key

which lets u install it

but yk how in #announcements it says

ios version is no longer signed

that means apple has stopped giving out keys for that specific ios version

and the keys are tied to your iPhone hardware information so they can't be shared

and apple has stopped giving out keys for ios 16 altogether so u cant downgrade

u can see here https://ipsw.me/product/iPhone

ipsw are the iOS files

i guess the good news for u is

[ashen cloak]

yea i saw on that site actually i could still download 16 so i thought maybe it would work

[fervent acorn]

u can downgrade to ios 17.7

[ashen cloak]

i can but by the time 17 gets a jailbreak i might be better off forgetting about it and update my phone. or deal with dynamic island being cut off halfway

[fervent acorn]

¯_(ツ)_/¯

[ashen cloak]

or just not use it, i thought there was a way to downgrade so i figured id ask

[warped horizon]

you can technically downgrade to 17.6 by downloading the 17.6 beta (still signed) and then using delay ota to update to 17.6 stable

[odd basin]

How to jailbreak one plus 8t 💀

[fervent acorn]

get outtt

[odd basin]

Lmfaooaoaoao

[tranquil crane]

Is there a jailbreak for 17.3.1?

[nova path]

Hi I’m new at this so how can I unlock phones from carrier

[oak escarp]

call the carrier

no other option

[sick compass]

Are you on an iPad 6, 7, Pro 1, or Pro 2?

[oak escarp]

pro 1 only went up to ios 16

[sick compass]

I was too lazy to search it up

[weary marten]

with the new troll store version will this make a new jailbreak come then

I’m on 17.1.1

[weary marten]

I agree … I’ve been waiting along time waiting for iOS 17 to work

[warped horizon]

no

[fervent acorn]

No

you can still jailbreak if you had altstore

TrollStore isn’t a requirement for jailbreaking

[supple crown]

sideloadly > altstore

[cosmic niche]

no

16.5.1 and A15/16 and M2 is max 16.5

[molten tree]

trollstore>>

[supple crown]

yea ofc but thats only if u have the exploit available

[viscid apex]

unlock bootloader then install magisk

or ksu if that's even compatible with the 8t

[odd basin]

Ik I was joking

I don't need to jailbreak this

[modest oriole]

can you jailbreak on iPhone 13 Pro Max cuz ngl this iPhone 7pro be getting hot

[silent anchor]

no

palera1n doesnt work on the 13 pro max

what ios version is it on

[modest oriole]

shoot I’d have to check fam

Damn got lab rn

[ornate atlas]

Hello, I have ipad air 4th gen OS 17.5.1. Do i need a computer to jailbreak Palera1n?

[stiff tree]

iPad Air (4th generation)

All brand names

iPad Air (4th generation) Wi-Fi (iPad13,1)
iPad Air (4th generation) Wi-Fi + Cellular (iPad13,2)

Model(s)

A2072, A2316, A2324, A2325

Latest firmware

18.0.1 (22A3370)

SoC

A14 chip (arm64e)

Powered by https://appledb.dev

[silent anchor]

u cant jailbreak

at all

[ornate atlas]

Ohh

Like ever? Or in future i can?

[silent anchor]

no

never ever

not going to happen

stay on 17.5.1 for 2 more years and maybe u'll have a jb

[dreamy hull]

iPad getting access to iOS 18 while iPhones don’t get 16.7 even 💔 insane ngl

[worthy kindle]

Can u jail break a iPhone xr?

[cosmic niche]

not with palera1n, with dopamine up to iOS 16.5.1

[modest oriole]

yo how does one jailbreak with iPhone 7plus

[silent anchor]

What ios

[modest oriole]

15.8.3

[silent anchor]

https://ios.cfw.guide/installing-dopamine/

follow this

[modest oriole]

bet ty

[silent anchor]

16.6.1? a13

[silent anchor]

!t semijailbreak

[stiff tree]

Hey @silent anchor, have a look at this!

semijailbreak

Recently, some tools have come out for certain devices and versions covered by the CoreTrust bypass. These tools claim to be "semi-jailbreaks" as opposed to a traditional, "full" jailbreak.

The primary difference is that these semi-jailbreaks do not require any sort of PPL bypass, which is a required exploit on "full" jailbreaks in order to run tweaks. As a consequence, this means semi-jailbreaks are limited to devices only supported by the CoreTrust bypass. Additionally, they may suffer from a lack of stability and be prone to crashing or random reboots.

Additionally, these tools are limited as to what they can modify. While certain Springboard tweaks (such as those that modify the lock screen or home screen) and app tweaks work, overall tweak compatibility may be limited. Furthermore, tweaks that require the use of daemons (system processes that run in the background), such as Crane and Aemulo, will not work with any current semi-jailbreak.

Finally, due to the requirement of a userland PAC bypass in iOS 17.0, it is unlikely that any semi-jailbreak will be released for iOS 17.0 soon after a kernel exploit is released. To add to that, as SPTM now manages userland PAC, it may be that semi-jailbreaks will never support A15+ devices on iOS 17.0.

Added by bulpes | Used 209 times · Jan 8, 2024, 5:34 AM

[silent anchor]

follow this

https://ios.cfw.guide/installing-nathanlr/

Do u can remove it after u set it up

[soft nebula]

Yeah it removes itself after every reboot

But if you fully wanna uninstall it then make sure to remove the tweaks first just to be safe

[silent anchor]

Ok

What does restring do

And if my phone will 0% then it will remove

?

[soft nebula]

Respring?

[soft nebula]

Yeah

[silent anchor]

Yes

[silent anchor]

Ok

[soft nebula]

Tbh idk

But

[silent anchor]

Its reloads springboard?

[soft nebula]

For example if you install a tweak most of the time you’ll need to respring your phone for the tweak to work

[soft nebula]

Yeah I think so

[silent anchor]

Oh

Yeah its just restart spring board

[soft nebula]

Ye

[silent anchor]

Ty

[soft nebula]

Np

[silent anchor]

Does it will do on ip11 16.6.1

Nathanlr

[soft nebula]

Yeah

[silent anchor]

Ok

Can u tell in details how to unjailbreak phone

[cosmic niche]

palera1n?

[silent anchor]

Nathanlr

[cosmic niche]

isnt it in the guide?

because idk

[silent anchor]

Idk

[silent anchor]

Is palera1n removable without losing data?

[silent anchor]

!t rootfs

[stiff tree]

Hey @silent anchor, have a look at this!

rootfs

To revert the jailbreak installation on your device, follow the steps below.

palera1n
Rootful: palera1n --force-revert -f
Rootless(default): palera1n --force-revert

If the above methods didn't work, see /tag rootfscli for more options.

Dopamine
Reboot, open Dopamine, open the Settings page, then press "Remove Jailbreak"

Note: Since the rootfs is sealed on iOS 15+, it remains the same across all devices. Thus, "Restore rootfs" means practically the same thing as "Remove Jailbreak"

Added by nyuszika7h#0001 | Used 1,183 times · Apr 14, 2021, 1:00 PM

[silent anchor]

cool thanks

[normal topaz]

does palera1n work on ipad 10 ios 18

[silent anchor]

no

you cant downgrade either

to a jailbreakable version at least

[lean spindle]

what ios can you jb sith palera1n

[silent anchor]

A11 and below devices

[lean spindle]

so like

ph Lr

oh alr*

[remote pendant]

…

[soft nebula]

You just remove the tweaks and then you should be able to safely uninstall the jailbreak there should be a guide somewhere

[silent anchor]

Оk

[fast patio]

i use to have palera1n on my jailbroken phone but i lost my usd how do i start over again , i have a new usb just need to know the steps

[soft nebula]

Palen1x

[oblique grail]

does the secure rom dump work for iphone 5

[fast patio]

where’s the guide to that

[slow hull]

Sad that the last iphone that is supported with palera1n no longer has support for the latest version of ios 18

[oak escarp]

it doesn't even have ios 17

[blazing blade]

Hey guys, has anyone had any luck with jailbreak detection bypass on the Wizz Air app? I have blobs for iOS 15.8.3 and iOS 14.2

It seems to be quite strict with jailbreak detection and just crashes on launch if the device is jailbroken (though it launches if palera1n is installed but not in the jailbroken state)

[lavish haven]

What type of jailbreak does palerain have

[sturdy rampart]

semi thetrered

[brittle ember]

did u try disabling tweak injection with choicy? if the app is apperantly not checking any files because it works in non jailbroken state i would assume its checking tweak injection

[blazing blade]

Good point, I'll try it, but would it be possible then to still use Frida to analyse the app?

[brittle ember]

i dont know exactly how frida works but i would assume it will have to inject something into the app if thats the case prob no

You could try A-Bypass too but that wont be as powerful as choicy so it might get detected

[blazing blade]

Ok so then there aren't any tweaks that properly hide injection entirely? I guess apps can do random stuff to see if there are tweaks

Also rootless jb would be easier to hide than rootful right? I am at 15.8.3 but can downgrade to 14.2 and use KernBypass

[brittle ember]

i dont think that will do a big difference tbh as the app wouldnt have the priviliges so check that if rootful anyway

[brittle ember]

there are couple ones that work with most general apps like A-Bypass or Choicy but more advanced ones mostly have specific ones

sadly ur app prob isnt big enough to be in GIRs list

[blazing blade]

Alright then I'll just play around with A-Bypass and Choicy and see if I can come up with a way to run Frida and bypass detection

But probably it's not going to work

Thanks for the help

[brittle ember]

i mean if u are good enough in reverse engineering, you could just try frida without choicy and then find out what the app is checking

[blazing blade]

Honestly it's not something I want to invest a massive amount of time in (it's a small favor for someone else) so I was just checking for a general solution

[brittle ember]

alr then just try choicy or A-Bypass

[warped horizon]

“work” in what way

[violet basin]

Hello all
I recently installed palera1n on my iPad. Installed Filza with zebra 1.1.36. I can transfer files to my MacBook using chrome with filza but unable to transfer files to my iPad. Please help.

[raw spruce]

can i jailbreak my iphone 7 with ios 15.8.3?

[vital apex]

yes

jailbreak using Dopamine

https://ios.cfw.guide/installing-dopamine

[old geyser]

Ios 16.7.10

Please

[silent anchor]

are u on linux/mac or windows

[old geyser]

@vital apex

[silent anchor]

[silent anchor]

#palera1n message

answer the question

please

[old geyser]

Windows

[silent anchor]

!t palen1x

[stiff tree]

Hey @old geyser, have a look at this!

palen1x

palen1x allows you to use palera1n-c on Windows computers via live-booting. You will need a USB flash drive or SD card for this.

Added by hydrate#9351 | Used 685 times · Feb 22, 2023, 6:39 PM

[silent anchor]

click on palen1x tutorial

[old geyser]

Okey

Tnx

[lone prawn]

You can transfer files through your iCloud if your devices are synced and connected with your Apple id. From your Mac book put them on iCloud - and open the files app that’s preloaded on your iPad and click iCloud Drive and your files should be there.

[shell patio]

Is there an option in Palera1n to disable tweak injection without the phone being jailbroken? My SpringBoard is stuck in a respring loop because of a tweak

[oak escarp]

palera1n -S i think

for safemode

[red stone]

A friends off mine askes if you can jailbreak iPhone XS max with ios 17.6.1. I thought it wasn't. Thanks in advance

[soft nebula]

you cant

[red stone]

Thanks, that was what I thought

[violet basin]

Thanks. Is there a way to fix this? Filza on my iPhone works fine.

[lone prawn]

I’m not sure im understanding what your trying to or want filza to work together with. What are you asking if there a way to fix what?
You said you can transfer files to mb using chrome with filza.
You should have to use chrome at all to transfer files between your devices.
You can just ari drop the files back and froth between all of them. Let me know what you’re trying to achieve.

[violet basin]

Hi sorry for being not clearer before. I am trying to move files from my PC to ipad using chrome - filza web address but it doesnt work. However moving files from ipad to PC seem to be working.

[flat stratus]

A15 ios 16.6.1 possible?

[vital apex]

https://ios.cfw.guide/installing-nathanlr

not a full jailbreak but it's a semi-jailbreak

[fast patio]

is it possible to get parler1an on my phone using a pavilion g7 ?

[sick compass]

Any computer made in the last 20 years will work https://ios.cfw.guide/installing-palera1n/

As long as it has an Intel CPU you should be fine

[sick compass]

Also what ios verison and device do you have?

[gray flame]

What am I doing wrong? Sileo won’t let me install choicy

iOS 16.7.7

[silent anchor]

press the reload icon

over and over

and it will work eventually

[violet basin]

Hello
Can someone please help?
Filza installed thru tigisoftware repo on palera1n - zebra - iOS 17.3.1 iPad 7 rootless. Unable to transfer files from pc to iPad via Chrome. Files don't show up after I upload them.

[gray flame]

Didn’t work, erased all content and settings, re jailbroke and now choicy isn’t showing up.

[silent anchor]

[[choicy]]

[stiff tree]

Choicy

Advanced Tweak Configuration!

Author

opa334

Version

1.4.10-3

Price

Free

Repo

opa334's Repo

Bundle ID

com.opa334.choicy

Powered by Canister · Oct 6, 2024, 9:59 PM

[silent anchor]

get it from this repo

[gray flame]

🥲

Wow ok i deleted the other repos and readded opa334 and it worked

Thanks tho

[sturdy hinge]

Hi I am on linux ubuntu, have an iphone 8 running iOS 16.7.10 and I tried palera1n and it gets to``` - [10/07/24 04:31:24] <Verbose>: == checkm8 trigger stage ==

• [10/07/24 04:31:25] <Info>: Checkmate!
• [10/07/24 04:31:25] <Verbose>: Device should now reconnect in download mode
• [10/07/24 04:31:25] <Verbose>: DFU mode device disconnected
• [10/07/24 04:31:45] <Error>: Timed out waiting for download mode (error code: -status_exploit_timeout_error)

[silent anchor]

Unplug it then plug it again when you see “Checkmate!”

[sturdy hinge]

                                                                                    Failed to start notification connection. There was an error connecting to the device.

put an * instead of my name its not normaly like that fyi

@silent anchor(sry for the @ have to go soon so just checking) soo have any idea?

[silent anchor]

im a bit busy

ill try figuring it out later

[sturdy hinge]

thanks

[carmine ocean]

Can I downgrade
On iPhone 8

16.7 to 16.6.

[oak escarp]

no

[weary robin]

You have a JB tho, so I don’t see the point in downgrading

[carmine ocean]

it is for my friend and he wanted trollstore and a jailbreak without needing wipe and no passcode

[cosmic niche]

does he have blobs?

[carmine ocean]

he doesnt know anything

[cosmic niche]

then he cant downgrade

[carmine ocean]

probably not

[carmine ocean]

also it is worth going to 17.7 for more chances for jailbreak

[cosmic niche]

stay the lowest possible

[nocturne summit]

im on 14.4.2 on a 2nd gen ipad pro 11 inch. what do i need to upgrade to so that i can play pogo and jailbreak again?

[oak escarp]

you upgrade your ipad to a newer one on a jailbreakable ios version

[nocturne summit]

yes i was asking what ios version i should upgrade too lol sorry

[oak escarp]

well that's the funny part

you can't

so that's why you upgrade your ipad, aka buy a new one on a jailbreakable version

[fast patio]

can someone help me

i’m doing the correct steps to enter dfu mode but it dosent let me ??

[silent anchor]

!t usbcmoment

[stiff tree]

Hey @fast patio, have a look at this!

usbcmoment

TLDR: You'll need a USB-A to Lightning cable.
USB-C to USB-A adapters will work fine.

Added by Cryptic#6293 | Used 375 times · Oct 23, 2021, 12:36 AM

[sturdy hinge]

Did you manage to get any time? No issue if you hadn't I'm going to sleep soon and remembered to ask

[silent anchor]

where was this

the palera1n logs or what

[sturdy hinge]

Yep

After the DFU mode stuff it states that

Well when I replug it states that

[vocal junco]

trying to install palen1x and it says to download ventoy

i follow directions and it says open “Ventoy2Disk.exe”

i do that and it says please run under correct directory

what am i doin wrong

[silent anchor]

does it jailbreak or not

[silent anchor]

also why are u replugging it, does it give you the download mode error, if it doesnt then just leave it like that

[warm wadi]

Is the exe file in the folder you downloaded it in

Like is it in the same foldder with the other files

[sturdy hinge]

There's no palera1n app

[sturdy hinge]

Wait the error is ok? I was doing it BCS of the error

[silent anchor]

are you on palen1x

or another linux distro

[sturdy hinge]

Oh also BCS of this why I unplug

[sturdy hinge]

I'm on Ubuntu Linux which is my daily driver

[silent anchor]

yeah thats why sorry

you'll have to use palen1x

!t palen1x

[stiff tree]

palen1x

palen1x allows you to use palera1n-c on Windows computers via live-booting. You will need a USB flash drive or SD card for this.

Added by hydrate#9351 | Used 693 times · Feb 22, 2023, 6:39 PM

[sturdy hinge]

What's the technical reason?

[silent anchor]

no idea

[sturdy hinge]

Alright thanks

[silent anchor]

I’m running palerain rootless and I installed trollstore via trollstore helper from sileo (havoc repo). Then I installed trollinstallerX via trollstore to get the persistence helper (and reinstalled trollstore through TIX).
If I were to now install Dopamine using trollstore, then reboot, could I rejailbreak using dopamine? This is rather convoluted but if it works it means I can get away without making an apple account.

[warm wadi]

This should work

Uninstall TrollStore from trollhelper, but keep apps on uninstall. Then with TIX kept, re-install trollstore through TIX and install dopamine through there

[silent anchor]

TIX rebooted during the installation :/ so I’ll try again tomorrow. Thanks for the reply 😄 Edit: It worked!

[zinc anchor]

Is there a way to get palera1n on A13

[warped horizon]

never

[zinc anchor]

Fuck

[dull swift]

how to fix it ?

• [07/10/24 21:15:11] <Error>: Unable to open device: e00002c5 (error code: -status_open_device_error)

pls teach me

[rain kelp]

How would I jailbreak ios 17.7 ?Probably a dumb question

[silent anchor]

if its an iPad 6th Gen, iPad 7th Gen, iPad Pro 10.5 inch or iPad Pro 12.9 inch 2nd Gen then you can use palera1n

if its anything else then u cant

[rain kelp]

What if its a iphone 11 pro max with ios 17.7?

[silent anchor]

read

[rain kelp]

okay

[raven goblet]

Is pal3rain can use on ipad11 M1.???

[warped horizon]

no

[raven goblet]

Thx mam

[river frigate]

Hey guys new jb noob here, how would I jb iOS 16.7.7 on iPhone X

[oak escarp]

!t guide

[stiff tree]

Hey @river frigate, have a look at this!

guide

Complete guide to iOS and tvOS modification, from stock to jailbroken

Added by eric#1997 | Used 1,896 times · Dec 21, 2020, 11:23 PM

[shell patio]

Hello, is there a tweak to check the crash logs via sileo on iOS version 16.7.10? Cr4shed/crash reported/krashkop is not working

[river frigate]

Thank you 🙂 so I have to remove all data sadly:/ I guess I can’t continue for now

[kind plume]

I never jailbroke before but want to jailbreak my old ipad air 2 (A8 chip) is this even possible?😅

[viscid apex]

Yes but it depends on iOS version

[sick compass]

Check out this page on what jailbreak to use https://ios.cfw.guide/get-started/iPad-Air-2.html

The from and to are for iOS version

[buoyant vapor]

pongos is hanging on enabling usb?

enabling usb Done! pongos >

thats all it says \

how do i turn it off to restart it

[molten ingot]

Unplug it and replug it in to start the jailbreak

[buoyant vapor]

nothing happens

it just stays on pongos

[molten ingot]

Weird mine did the same but unplugging it fixed mine…

[slow surge]

can I use rufus to flash paler1x instead of ventoy, and if so do I flash it in iso mode or dd mode

ventoy has never worked for me ever I don't want to use it

[viscid apex]

DD mode

[viscid apex]

worked for me

i imagine it didn't due to safe mode but you can enroll keys

[viscid apex]

re-run palera1n again, generally should work

[slow surge]

alright

[slow surge]

okay so it split into 3 different drives, and doesn’t show up in winpe

[viscid apex]

yeah you’re supposed to boot into it

[slow surge]

guess I’ll look at the bios boot menu then

instead of the winpe one

[viscid apex]

that’s what you’re supposed to do?

[slow surge]

using the winpe worked on my laptop but that thing was a Microsoft surface with a single usb port

so I couldn’t really use it

had no hub and the keyboard also didn’t work because Microsoft makes great products

yeah it doesn’t show up

all those “generic massstorageclass” things is my usb hub

oh there we go

gave it a reboot and “usb” and “usb, partition 2” showed up

the second one is marked uefi do I select that one

yeah that worked

oh
it was not mentioned anywhere on the guide that you needed to solder a usb port onto an apple tv for the jailbreak

probably should’ve occurred to me sooner but damn

[buoyant vapor]

my iphone 8 goes to dfu and it keeps leaving it

my specs are in my bio if u need them

[warped horizon]

tbf the guide is portrayed as for iphones/ipads specifically

[slow surge]

fair enough

weird how there’s no notes about it on the apple tv 4k’s firmware selection page though

[solemn verge]

because I need to:

• actually split the guide properly for palera1n
• get the proper guide to show (checkra1n has this same issue)

for the record on Apple TV's you want to run palera1n -f, not palera1n -l

[slow surge]

perfect storm of awfulness, I have an Apple TV 4K, an apple tv 2nd gen, Apple TV 3rd, gen, but no 2nd or 3rd gen remote, and an Apple TV HD remote, but no actual apple tv hd

consequences of being unorganized

[granite kestrel]

can i jailbreak an iphone 14 pro on ios 16.6.1

[viscid apex]

There is semi jb with nathanlr but no full jailbreak

So stuff like Crane doesn’t work

[viscid apex]

I think you can use a Goldeneye Cable, no?

[slow surge]

a goldeneye cable could work

but tbh at this point I’d be happy to just install trollstore

but of course that process isn’t easy either

[lime magnet]

Is there a jailbreak yet that’s compatible with iphone 14 pro v17.3.1

[oak escarp]

no

[silk lance]

Is there a way to jailbreak a 13pro on v17.3.1

[warped horizon]

no

[silk lance]

Is it better to downgrade to ios 15 then try?

[oak escarp]

you cant downgrade

[silk lance]

Forced downgrade doesn’t work anymore?

I haven’t jailbroken in a while I came back to iPhone this is all new to me

[oak escarp]

never did

[silk lance]

I’ve done it before in the past way back when ios14 was around

That was when I last attempted

Easy to brick your phone but it’s possible. It’s just a pain

[warped horizon]

that method no longer works

[silk lance]

Well I’m sad now.

What’s the best way to go about it then for v17

[warped horizon]

there's nothing to do except wait

[silk lance]

I figured as much

[cosmic niche]

on and on the same questions "can i jailbreak" "is it compatible with" cant you all read?

[brittle ember]

well you need 2 clicks to get that info, might be too much for some people

[bronze flax]

please help decided to re is tall palera1n on my iPhone X so I reset my phone to remove sep then installed and it keeps giving error much help appreciated🙏

[silent anchor]

wdym by "reset my phone to remove sep"???

[silent anchor]

also open your phone and click trust

then run palera1n again

[bronze flax]

I did

[bronze flax]

Just remove all passwords Face ID Apple ID etc

[silent anchor]

oh

go into recovery manually then run palera1n

!t recovery

[stiff tree]

recovery

Recovery Mode (not to be confused with DFU Mode) is a mode which allows a device to be reflashed to a fresh install of iOS. You can optionally either keep your data and update to a newer version or restore and start over with a fresh install.

To restore in Recovery Mode

• Enter Recovery Mode
• Connect your device to your PC/Mac and open iTunes/Finder
• A prompt should appear which says “A device has been connected in recovery mode.” Either select “Restore” or “Update”

NOTE: If you use this method you can only restore/updated to a signed version of iOS.

Added by Tanbeer#4750 | Used 235 times · Jul 17, 2021, 1:55 PM

[bronze flax]

Jsit put it into recovery then run palera1n?

[silent anchor]

yes

[bronze flax]

Ok. Will try Tomorrow

[cosmic niche]

probably

[modest folio]

Hi, I’m in the process of jailbreaking an iPhone X running 16.7.10, but when going through palera1n and it begins to reboot the phone, nothing has changed on the phone

[flat wave]

the palera1n loader app takes a while to load afaik

not sure if there's any trick to make it show quicker

but given that log it looks like it was successful

[silent anchor]

Did you ever set a passcode before

[modest folio]

Do i leave it plugged in whilst it loads?

[flat wave]

nvm, it says fail i think

[silent anchor]

#palera1n message

[modest folio]

I had a passcode, but before starting the process i deactivated it

[silent anchor]

You need to reset

Deactivating it wont work

[modest folio]

Full factory reset?

[flat wave]

ahh

[silent anchor]

Yes

[velvet iris]

[silent anchor]

Erase all content and settings

[modest folio]

Wont that install latest ios?

[velvet iris]

[silent anchor]

Ur on the latest ios anyways

[flat wave]

16.7.10 is already latest for you

[silent anchor]

Also it doesnt

[modest folio]

Okay, I’ll do that now thanks

That worked guys, installed now thanks @silent anchor @flat wave @velvet iris

[velvet iris]

NEVER set a passcode again, or you have to reset it once more

Don’t use Apple Pay, Face ID, anything like that

[modest folio]

Wtf i had sileo and everything, then i restarted the phone and it deleted it all?

[soft nebula]

Duh you have to do that every time

[silent anchor]

palera1n is semi tethered

!t jbtypes

[stiff tree]

jbtypes

Types of jailbreaks:

Tethered
The device must be booted using a computer every time, otherwise it won't boot at all. This type of jailbreak is uncommon. (e.g.: redsn0w, 4039)

Semi-tethered
The device must be jailbroken using a computer every time it's rebooted, otherwise it will boot in unjailbroken state. (e.g.: checkra1n, palera1n)

Semi-untethered
The device must be jailbroken using an app every time it's rebooted, otherwise it will boot in unjailbroken state. A computer is usually used for the initial installation, but it's not strictly necessary. (e.g.: unc0ver, Odyssey, Taurine, Dopamine)

Untethered
The device will stay jailbroken after a reboot, no additional action is required. This type of jailbreak is uncommon. (e.g.: Pangu9, Fugu14)

Added by nyuszika7h#0001 | Used 924 times · May 23, 2021, 5:24 PM