GonnaHetzMe/palera1n
1
0 Fork 0
mirror of https://github.com/palera1n/palera1n.git synced 2026-10-30 04:59:49 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
v1.4.0
palera1n/README.md
T
NebulaTom Eplooshi
 6dae613bf8 iOS 16 Support (#280) 
* ios 16 stuff, booting may not work yet
- does not mount user data partition for iPhone X compatibility, isn't even really needed anymore
- deploys files to the rootfs (fakefs if needed)
- copies cryptexes on ios 16
- fix deviceid finding
- use apticket.der because dumping seems to freeze on my device?
- add /palera1n/info.json
- uicache loader app on boot (no more Tips app hijacking)
- fix rootless
- semi-tethered webkit fix on 16
- switch to local boot

* make sure submodule uses ios16 branch

* fixes

* other fixes

* maybe it needs more time to execute

* cant local boot tethered for now

* new jbin funnies

* changes

* payload i guess (home button fix on iphone 7(+) and 8(+))

* this will probably fix errors

* post.sh is needed

* changes

* .rd_in_progress

* kill iproxy before starting ramdisk process

* shouldnt need cryptexes copying anymore (-h in kernel64patcher)

* requested changes

* rootless fixes

* more changes

* keep fs number

* update submodule

* my tfp0 patch doesnt work on 15.x

the way the patch grabs the tfp0 function is using a panic string in a developer mode check introduced in ios 16's kernel
and that check happened to be inside of task_conversion_eval_internal, so we could use it to allow tfp0
but since that check was introduced in 16.x we cant use this to get tfp0 on 15.7.x

* chmod got broken lol

* changes

* noobula moment (#281)

* final updates & include commits from main (#282)

* chmod the post.sh :frcoal:

* fixed ibootpatch2 binary

* other changes

* 16.1* fix

* move dyld link to ramdisk

* fix disk stuff

* update changelog

Co-authored-by: Tom E <[email protected]>
Co-authored-by: plooshi <[email protected]>
2022-12-12 16:34:36 -05:00

103 lines
5.9 KiB
Markdown
Raw Permalink Blame History

<h1 align="center">
<img src="https://avatars.githubusercontent.com/u/114239186?s=100&v=4" alt="palera1n logo">
<p>palera1n</p>
</h1>
<h3 align="center">An iOS 15.0-15.7.1 work-in-progress, (semi-)tethered checkm8 jailbreak.</h3>
<p align="center">
<strong><a href="CHANGELOG.md">Change Log</a></strong>
•
<strong><a href="https://dsc.gg/palera1n">Discord</a></strong>
•
<strong><a href="https://twitter.com/palera1n">Twitter</a></strong>
</p>
# How does it work?
It boots the device with multiple patches required. On first run, it'll boot a ramdisk which dumps your onboard blob, creates a fakefs (if using semi tethered), installs the loader app, and patches your kernel.
# Issues
### Need help?
If you need help, **please** join our Discord. We disabled issues due to the flood of spam, and difficulty to respond in general. We are much more comfortable on Discord.
Please, please, please, provide necessary info:
- iOS version and device (eg. iPhone 7+ 15.1, iPhone 6s 15.3.1)
- Computer's OS and version (eg. Ubuntu 22.04, macOS 13.0)
- The command you ran
- **Full log from the logs folder**
**DO NOT** harass tweak devs if tweaks don't work. Refer to [here](https://github.com/itsnebulalol/ios15-tweaks) for compatiblity.
You may join [here](https://dsc.gg/palera1n).
# Patreons
Thank you so much to our Patreons that make the future development possible! You may sub [here](https://patreon.com/palera1n), if you'd like to.
<a href="https://github.com/samh06"><img width=64 src="https://user-images.githubusercontent.com/18669106/206333607-881d7ca1-f3bf-4e18-b620-25de0c527315.png"></img></a>
<a href="https://havoc.app"><img width=64 src="https://docs.havoc.app/img/standard_icon.png"></img></a>
<a href="https://twitter.com/yyyyyy_public"><img width=64 src="https://pbs.twimg.com/profile_images/1429332550112079876/dQQgsURc_400x400.jpg"></img></a>
# Warning
- We are **NOT** responsible for any data loss. The user of this program accepts responsibility should something happen to their device. While nothing should happen, jailbreaking has risks in itself. **If your device is stuck in recovery, please run one of the following:**
- futurerestore --exit-recovery
- irecovery -n
# Prerequisites
- A checkm8 vulnerable iOS device on iOS 15 (A8-A11)
- The device must be on iOS 15.0-15.7.1
- Linux or macOS computer
- Python 3 must be installed.
### A10 and A11 devices
- On A10 and A11, **you must disable your passcode while in the jailbroken state**.
- On A10, this can be fixed in the future by implementing blackbird.
- On A11, we don't have a SEP exploit yet.
# How to use?
A tutorial can be found [here](https://ios.cfw.guide/installing-palera1n).
# Repos
### Tweaks mode
All repos work when using tweaks mode because it uses normal Procursus and not rootless.
### Rootless
Repos need to be updated for rootless, here are some that work currently:
- [Mineek's repo](https://mineek.github.io/repo) contains rootless Procursus packages
- The official [palera1n repo](https://repo.palera.in) contains miscellaneous packages
If you want to make a rootless repo, use the official [palera1n repo](https://github.com/palera1n/repo) for reference. Every deb should use the `iphoneos-arm64` architecture, and *nothing* should be on the rootfs. Everything should be in /var/jb.
# Credits
- [Nathan](https://github.com/verygenericname)
- The ramdisk that dumps blobs, copies files, and duplicates rootfs is a slimmed down version of [SSHRD_Script](https://github.com/verygenericname/SSHRD_Script)
- For modified [restored_external](https://github.com/verygenericname/sshrd_SSHRD_Script)
- Also helped Mineek getting the kernel up and running and with the patches
- Helping with adding multiple device support
- Fixing issues relating to camera.. etc by switching to fsboot
- [iBoot64Patcher fork](https://github.com/verygenericname/iBoot64Patcher)
- [Mineek](https://github.com/mineek)
- For the patching and booting commands
- Adding tweak support
- For patchfinders for RELEASE kernels
- [Kernel15Patcher](https://github.com/mineek/PongoOS/tree/iOS15/checkra1n/Kernel15Patcher)
- [Kernel64Patcher](https://github.com/mineek/Kernel64Patcher)
- [Amy](https://github.com/elihwyma) for the [Pogo](https://github.com/elihwyma/Pogo) app
- [checkra1n](https://github.com/checkra1n) for the base of the kpf
- [nyuszika7h](https://github.com/nyuszika7h) for the script to help get into DFU
- [the Procursus Team](https://github.com/ProcursusTeam) for the amazing [bootstrap](https://github.com/ProcursusTeam/Procursus)
- [F121](https://github.com/F121Live) for helping test
- [m1sta](https://github.com/m1stadev) for [pyimg4](https://github.com/m1stadev/PyIMG4)
- [tihmstar](https://github.com/tihmstar) for [pzb](https://github.com/tihmstar/partialZipBrowser)/original [iBoot64Patcher](https://github.com/tihmstar/iBoot64Patcher)/original [liboffsetfinder64](https://github.com/tihmstar/liboffsetfinder64)/[img4tool](https://github.com/tihmstar/img4tool)
- [Tom](https://github.com/guacaplushy) for a couple patches and bugfixes
- [xerub](https://github.com/xerub) for [img4lib](https://github.com/xerub/img4lib) and [restored_external](https://github.com/xerub/sshrd) in the ramdisk
- [Cryptic](https://github.com/Cryptiiiic) for [iBoot64Patcher](https://github.com/Cryptiiiic/iBoot64Patcher) fork, and [liboffsetfinder64](https://github.com/Cryptiiiic/liboffsetfinder64) fork
- [libimobiledevice](https://github.com/libimobiledevice) for several tools used in this project (irecovery, ideviceenterrecovery etc), and [nikias](https://github.com/nikias) for keeping it up to date
- [Nick Chan](https://github.com/asdfugil) general help with patches and iBoot payload stuff
- [Dora](https://github.com/dora2ios) for iBoot payload and iBootpatcher2
- [Sam Bingner](https://github.com/sbingner) for [Substitute](https://github.com/sbingner/substitute)
- [Serena](https://github.com/SerenaKit) for helping with boot ramdisk.
Reference in new issue View Git Blame Copy Permalink