2022-09-26 19:47:30 -04:00
2022-09-25 14:04:25 -04:00
2022-09-24 17:05:10 -04:00
2022-09-26 15:39:43 -04:00
2022-09-24 16:11:33 -04:00
2022-09-26 14:19:13 +02:00
2022-09-26 19:47:30 -04:00

As of now, Linux users may have a bug where the ramdisk doesn't boot

If you're having an issue with the ramdisk booting, please use SSHRD_Script to manually dump a blob and install TrollStore. Place your dumped blob in blobs/DEVICEID-IOSVERSION.shsh2, then run palera1n again.

palera1n

iOS 15.0-15.7 work in progress semi-tethered checkm8 "jailbreak"

What does this do?

It boots the device with AMFI patches. On first run, it'll boot a ramdisk which dumps your onboard blob, and installs the loader app (Pogo by Amy) to Tips. This is mainly a developer jailbreak. There is no tweak injection yet.

NOTE: sudo usbmuxd -p -f should fix most USB issues on Linux. If not, compile and install usbmuxd2.

WARNING: On A11, it has the deep sleep bug while booted with palera1n, and will kernel panic, or just not wake up until force rebooted, about a minute after being in sleep mode.

WARNING 2: I am NOT responsible for any data loss. The user of this program accepts responsibility should something happen to their device. While nothing should happen, jailbreaking has risks in itself. If your device is stuck in recovery, please run futurerestore --exit-recovery, or use irecovery -n.

On A10 and A11, you must disable your passcode while in the jailbroken state. On A10, this can be fixed in the future by implementing blackbird. On A11, we don't have a SEP exploit yet. It may also break camera while in the jailbroken state.

Known working devices: iPhone X, 8, 7, 6s

Prerequisites

  1. checkm8 vulnerable iOS device on iOS 15 (A8X-A11)
  2. Linux or macOS computer
    • Python 3 is required

How to use

  1. Clone this repo with git clone --recursive https://github.com/palera1n/palera1n && cd palera1n
  2. Run ./palera1n.sh
    • [A10+] Before running, you must disable your passcode
    • If you want to start from DFU, run ./palera1n.sh --dfu <your iOS version here>
  3. Make sure your device is in normal mode, if you didn't start from DFU
  4. Follow the steps
    • Right now, getting into DFU is steps for A11, please suppliment the steps for your device
  5. Open the Tips app, and click install!
    • If Pogo didn't install to Tips for some reason, you can get a Pogo IPA from here to install with TrollStore
    • You should now see Sileo on your homescreen, enjoy!
    • You'll have to uicache in the Pogo app every reboot

Credits

  • Nathan for a lot of the code from SSHRD_Script
    • The ramdisk that dumps blobs is a slimmed down version of SSHRD_Script
  • Mineek for the patching and booting commands
  • Amy for the Pogo app
  • nyuszika7h for the script to help get into DFU
  • the Procursus Team for the amazing bootstrap
S
Languages
C 95.9%
Makefile 3.5%
Assembly 0.6%