palera1n

iOS 15.0-16.3 work in progress, semi-tethered checkm8 jailbreak

BEFORE YOU USE

This is mainly for ROOTLESS, and is NOT READY. It was made public so you can contribute and explore the code. This is not the final product.

This version of palera1n supports booting fakefs setups with the -f <root device> option (like -f disk0s1s8).

This version of palera1n is able to create fakefs with the -c option, however as of right now if the /jbin/loader.app doesn't exist (which is true for any fakefs created with this version of palera1n), the loader that appears would be rootless.

Loader app does appear on rootless, and you can use the SSH server listening at 127.0.0.1:44 (IPv4) or ::1:44 (IPv6).

If the device is previously jailbroken, the jailbreak environment is automatically prepared. You can use the -s option to skip this behaviour.

Usbmuxd is only required for starting in normal mode, it is not required when started from recovery or DFU mode. (Usbmuxd is preinstalled with macOS)

You can obtain the latest build of palera1n-c here.

This is a work in progress.

Read this throughly, feel free to ask questions, know the risks. If you want to ask questions, either:

1. Ask in the palera1n Discord
2. Ask in the r/jailbreak Discord #palera1n channel

Please, please, please, provide necessary info:

• iOS version and device (eg. iPhone 7+ 15.1, iPhone 6s 15.3.1)
• Computer's OS and version (eg. Ubuntu 22.04, macOS 13.0)
• The command you ran

DO NOT harass tweak devs if tweaks don't work. Refer to here for compatiblity.

Patreons

Thank you so much to our Patreons that make the future development possible! You may sub here, if you'd like to. If you subscribe, please message Nebula in any way preferred to have you put here.

What does this do?

It boots the device with patches for the jailbreak.

WARNING: I am NOT responsible for any data loss. The user of this program accepts responsibility should something happen to their device. While nothing should happen, jailbreaking has risks in itself. If your device is stuck in recovery, please run futurerestore --exit-recovery, or use irecovery -n.

On A11, you must disable your passcode while in the jailbroken state. We don't have an A11 SEP exploit yet.

Credits

• Nebula, palera1n owner and Python rewrite lead developer
• Nathan
• Mineek
• Nick Chan
• Amy for the Pogo app
• checkra1n for the base of the kpf
• the Procursus Team for the amazing bootstrap
• F121 for helping test
• Tom for a couple patches and bugfixes
• Nick Chan general help with patches and jbinit
• Serena for helping with boot ramdisk
• Évelyne for ElleKit, rootless tweak injection