cfw-guide / ios.cfw.guide

A complete iOS modding guide, from stock to jailbroken.

ios.cfw.guide

A complete iOS modding guide, from stock to jailbroken.

https://ios.cfw.guide/

Running the site locally

This requires the following installed to your system:

• Node.js v12+
• Yarn v1 classic (npm install --global yarn)

To test the website locally, simply run the following commands:

git clone https://github.com/cfw-guide/ios.cfw.guide.git --recursive
cd ios.cfw.guide
yarn install
yarn dev

to build the Markdown files into HTML and start a testing webserver on http://127.0.0.1:8080.

Building the site

Follow the steps above, but run yarn build instead at the final step. Once complete, the output will be stored at /docs/.vuepress/dist.

Translating

To help translate ios.cfw.guide, please contribute to its Crowdin project. Do not PR changes directly to the repository as that will conflict with the translations managed by Crowdin.

ios.cfw.guide's Issues

iTunes installer is intended for 32-bit versions of windows

In this page (https://ios.cfw.guide/installing-dopamine/) It leads me to a direct download of iTunes, but it's a 32 bit installer and wont let me install it

Palera1n guide update for wifi-only devices

It should be noted somewhere that when using palera1n to jailbreak a wifi-only device (iPad, iPod Touch), it is essential to include the command line switch: --no-baseband lest the script hang (see below for output), requiring the user to ctrl+c out of it.

[*] Creating fakefs, this may take a while (up to 10 minutes)
mount_apfs: volume could not be mounted: No such file or directory

Installing Android or Linux on iOS devices via Project Sandcastle, OpeniBoot, iphonelinux, or linux-apple

Hello, can guides on installing Linux and Android on iOS devices that support them be written based on attempts to port Linux (and Android by extension) to iOS devices?

1. Project Sandcastle: Android guide, Linux guide
2. linux-apple: Linux guide
3. iphonelinux/OpeniBoot/iDroid: Android guide Android guide 2 Linux website
4. Apple TV 1st generation guides: Linux via OSMC Mac OS X guide Android guide

Connection reset by peer

FAIL_00:58:32-2023-02-05-Linux-5.15.0-58-generic.log

kex_exchange_identification: read: Connection reset by peer
Connection reset by 127.0.0.1 port 6413

Tried many times and reconnecting and disconecting. I got the HHD with leaf logo on the phone but can't get past that?

appledb.dev

It used to be a simple google chart of all the info you needed, simple and to the point: device, jailbreak name, ios number that's supported. Now it's a mess of unnecessary and convoluted junk of vague information and device types, without the core of what I actually need to know. Unless it's hidden in some super secret location or thinned out to make the site look as though it has more content, it no longer has what I need.

Can I have the better google docs back?

New method for ios 16.6.1 on arm64e

me and two guys in the discord came up with a method that seems pretty consistent, not sure where else to share so i’ll post here, feel free to close this issue or ignore just felt like sharing
(specs were iPhone 11; iOS 16.6.1)

My Steps: (Lucian and FastTim did all the work this is what i did)

1: Install PureKFD (https://github.com/PureKFD/PureKFD/releases/tag/5.0beta_landa)
2: uninstall Tips
3: Reboot device
4: install Tips (don’t open it)
5 reboot (still don’t open tips)
6: Wait for a minute or two
7: Open PureKFD (don’t change any settings)
8: install trollstore helper (Developer > Install trollstore helper)
9: if it worked a pop up will appear saying installing
9.5: if the app crashes or device crashes retry opening PureKFD and installing trollstore
10: after installing hard reset your device
11: open the tips app and click install trollstore
11.5: if tips crashes open again uninstall trollstore then reinstall
12: after installing register tips as trollstore helper (i did this idk if it’s needed)
13: open trollstore go to setting and install persistence helper as Tips
14: success

`yarn dev` and `yarn build` both fail

I followed the instructions in the Readme, but both yarn dev and yarn build are failing. I'm wondering if I did anything wrong?

jay@Ubuntu11:~/PycharmProjects/ios.cfw.guide$ yarn dev
yarn run v1.22.21
$ vuepress dev docs
warning an anonymous plugin or theme was detected and ignored
info Initializing VuePress and preparing data...
error error in hook onInitialized from vuepress-dynamic-pages
Error: File '/home/jay/PycharmProjects/ios.cfw.guide/docs/en_US/include/using-Cydia.md' not found.
    at _replaceIncludeByContent (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/markdown-it-include/dist/markdownItInclude.js:90:17)
    at Array._includeFileParts (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/markdown-it-include/dist/markdownItInclude.js:122:17)
    at Core.process (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/markdown-it/lib/parser_core.js:54:13)
    at MarkdownIt.parse (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/markdown-it/lib/index.js:524:13)
    at MarkdownIt.render (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/markdown-it/lib/index.js:544:36)
    at md.render (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/@mdit-vue/plugin-headers/dist/index.cjs:21:20)
    at md.render (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/@mdit-vue/plugin-title/dist/index.cjs:23:20)
    at md.render (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/@mdit-vue/plugin-frontmatter/dist/index.cjs:20:12)
    at renderPageContent (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/@vuepress/core/lib/page/renderPageContent.js:14:42)
    at createPage (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/@vuepress/core/lib/page/createPage.js:29:144)
error Command failed with exit code 1.
info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command.

jay@Ubuntu11:~/PycharmProjects/ios.cfw.guide$ yarn build
yarn run v1.22.21
$ vuepress build docs
warning an anonymous plugin or theme was detected and ignored
info Initializing VuePress and preparing data...
error error in hook onInitialized from vuepress-dynamic-pages
Error: File '/home/jay/PycharmProjects/ios.cfw.guide/docs/en_US/include/using-Cydia.md' not found.
    at _replaceIncludeByContent (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/markdown-it-include/dist/markdownItInclude.js:90:17)
    at Array._includeFileParts (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/markdown-it-include/dist/markdownItInclude.js:122:17)
    at Core.process (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/markdown-it/lib/parser_core.js:54:13)
    at MarkdownIt.parse (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/markdown-it/lib/index.js:524:13)
    at MarkdownIt.render (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/markdown-it/lib/index.js:544:36)
    at md.render (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/@mdit-vue/plugin-headers/dist/index.cjs:21:20)
    at md.render (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/@mdit-vue/plugin-title/dist/index.cjs:23:20)
    at md.render (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/@mdit-vue/plugin-frontmatter/dist/index.cjs:20:12)
    at renderPageContent (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/@vuepress/core/lib/page/renderPageContent.js:14:42)
    at createPage (/home/jay/PycharmProjects/ios.cfw.guide/node_modules/@vuepress/core/lib/page/createPage.js:29:144)
error Command failed with exit code 1.
info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command.

Hh

https://ios.cfw.guide/get-started/iPad-Pro-(9.7-inch).html claims that palera1n doesn't support iPadOS 16.7.4

nekojb public beta was released please add a page for it

Version sorting doesn't account for build number formatting

Problems:

1. iOS versions ≤5.x sort above iOS 6+ in Version Table (screenshot 1)
2. "Latest jailbreakable version" reflects this same bug (screenshot 2)

Likely cause:
Build numbers aren't zero-padded, so the 10x of iOS 16 is "less" than the 9x of iOS 15.

Guides for preliminary jailbreak of the Apple Watch and HomePod

Can you add preliminary guides on jailbreak of the Apple Watch S1/S2/S3 and the first-generation HomePod? Currently, no tweaks exist for either, but research on rooted Apple Watches and HomePods could deliver the first ever tweaks for these devices.

1. An Apple Watch jailbreak that only works on the Apple Watch S3 and watchOS 4.1 called jelbrekTime exists, and only reveals an SSH shell on a remote device. This is basically a Proof of Concept (PoC).
2. The Apple Watch S1/S2/S3 is compatible with the checkra1n exploit, but has only been used by a https://blog.elcomsoft.com/2019/06/apple-tv-and-apple-watch-forensics-01-acquisition/ https://blog.elcomsoft.com/2022/11/ios-forensic-toolkit-8-apple-watch-s3-checkm8-extraction-cheat-sheet/ tool called Elcomsoft, and no open-source tool nor jailbreak exists. Note that an iBUS adapter is needed similar to how the Apple TV 4K works. This could be mentioned as an inspiration for official checkra1n support for the Apple Watch
3. The HomePod is officially supported in checkra1n, although no tweaks exist for it. Adapters for the HomePod debugging port have been found from Apple factories, but cannot be purchased by the general populace, so again, we have to turn to the digital investigators for making a DIY cable.

[Request] Downgrade iOS guide

Hi,
Could you please make a detailed guide how to downgrade iOS/iPadOS using blobs?
Thanks in advanced.

For the iPhone 8 add an option for checkra1n on iOS 14.4.2 and just warn them that they will loose all forms of security. Some people like me who really want to jailbreak probably wouldn’t mind that drawback.

iOS 16.0 missing in https://ios.cfw.guide/get-started/iPad-(7th-generation).html

when add Chinese to page

when add Chinese to page

New Jailbreak like tool for iOS 14.0-17.0 A8-A17 & M1+M2 - roothide Bootstrap

This project is promising and when you combine it with serotonin tool to enable springboard, it's almost like a normal jailbreak

https://github.com/RootHide/Bootstrap

https://github.com/mineek/Serotonin

Firmware selection is in the wrong order on https://ios.cfw.guide/get-started/iPad-2.html

checkra1n instructions not updated for linux

As far as i know there are only instructions for macos

For Chimera Jailbreak installation

Do NOT put your device in a freezer and jailbreak it. Put your device in front of a high throttle fan instead.

Is updating to arbitrary version now possible even after the delay OTA expiration?

https://ios.cfw.guide/updating-blobless/
I see in this doc that the introduction to the principle of delayed OTA in the "Required Reading" section seems deliberately removed, and replaced with a sentence "If you previously attempted an older blobless method, remove all delay and beta profiles prior to following this method".
Is this a brand new method to OTA without the 90 day window limit? If this is true, it is absolutely an astounding achievement.

Error on camera

after successfull Up to 14.3, on setting show notification on top "this phone is supervised and managed". then, i try to send image on whatsapp, instagram and many application but the camera blank. If i photo on camera, the photo can't save and gallery stuck.
how to fix this? And sory my english bad.

My device : iphone 7+. 13.3 to 14.3

complete

complete

Home button doesn't work on iPhone 7 iOS 15.2

After a successful jailbreak home button stopped working (works without JB)

Update totallynotspyware to tns-sockport

https://github.com/LukeZGD/tns-sockport

Please don't suggest sockH3lix

When I used sockH3lix on an iPad Air 1 on iOS 10.3.3, launching the MTerminal app would only print a line "Killed: 9". I can still SSH into it though. Switching to doubleh3lix fixed it.

Menu not working correctly

On mobile the menu won’t work correctly when on the “Updating (Blobless)” page. It won’t open or close, depending on whether it was closed or open to begin with.

F

Update ‘‘Installing TrollStore (TrollStar)’’ guide

https://ios.cfw.guide/installing-trollhelper-trollstar/
Please add the following instructions in the Installing TrollStore section.
if the Tips app not TrollStore Helper, reinstall Tips app from App store (Do not open it) and reboot, then redo the previous operation “Injecting TrollStore Helper”.

Sorry, my English is not very good.

Add trollstore SSH ramdisk tutorial

tutorial: https://github.com/opa334/TrollStore/blob/ea52074779f2e78ffabf1dc28a58550b123ce373/install_sshrd.md

I think it might be worthwhile to add this to ios.cfw.guide

iOS 9.3.5 points to non-existent `installing-kok3shi` guide

https://ios.cfw.guide/get-started/iPhone-4S.html, for example, goes to https://ios.cfw.guide/installing-kok3shi/, which is a 404.

Randomly testing other devices known to have iOS 9.3.5 also show this behaviour.

Preferencees instead of Preferences in Sideloading Guide

For AltStore, it says Preferencees instead of Preferences in step two
Would edit if I could, but I can not for the life of me figure out where the actual page to edit is as all the edit links are broken

Cydia impactor is deprecated

Cydia impactor works but is not free, altstore/server is a better method.

Add backup guide

Can you create a guide on how to back up your device, and link to it on every jailbreak page? I would personally recommend an iTunes/Finder backup before jailbreaking, to prevent jailbreak files "poisoning" future backup files and making it unable to restore to a non-jailbroken reset. If the user does not own a computer, uses an iPad as their only computer, uses ChromeOS, or does not have the necessary storage for a backup, using the iCloud Transfer feature to get free infinite backup storage for a single iCloud backup.

Many viewers come directly from Google or another search engine for an installation guide, and not have any backup warnings. The first step should always link to the backup page.

Odysseyn1x requires SecureBoot to be off

Recently a user on the jailbreak discord server wrecked his Windows installation by turning SecureBoot off. Device was a Windows Surface 2 with BitLocker enabled stock and no backup key. And no, turning SecureBoot back on did not fix the issue.

Should a section mentioning this issue be placed on the guide? There's an untested solution in the form of https://www.ventoy.net/en/doc_secure.html . No idea if it should be recommended.

iPhone getting out of DFU when palera1n.sh is executed

Hello,

I wanted to jailbreak an iPhone 7 on IOS 15.5
Using a Mac (ARM) with Ventura 13.0.1
A USB-C to USB-A adapter was used. (Apple's official)

The iPhone got out of the DFU mode every time after creating the ramdisk.

Push italian translation

Italian translation is currently at 100% (99 if you consider the test page) on crowdin

iPad Air version table isn't sorted, causing incorrect "latest jailbreakable version"

On the iPad Air (first generation) firmware selection page, 12.1 is listed at the bottom of the list, below 7, even though the rest of the list is sorted descending (i.e. 12.0 is listed at the top). This in turn causes the iPad Air (family) DEVICE selection page page to say that 12.0 is the last jailbreakable version, which I almost took at face value before deciding to click through out of curiosity (and even then, almost missed the mis-sorted entry)

translate to chinese

Please add Chinese language thanks

Does enabling supervision using cowabunga lite involve factory resetting your device?

I would ask on the Cowabunga lite repo, but https://ios.cfw.guide/updating-blobless-advanced/ is self contradictory, so the issue needs to be reported here anyway
The Windows tutorial doesn't mention factory resetting, but the next step mentions:

When the device boots up after being erased, set it up, then open this page on your device

So it's completely unclear, and I am confused

GenExampleImg

Revert b9268a9e1765dd1a0a58b2638ebf231ed61b963c

All I get are emails complaining about issues after using beltuguese. Just use the regular script, especially since beltuguese is just a script running gui like the old futurerestore guis.

Update finding ECID on macOS

https://ios.cfw.guide/saving-blobs/#saving-blobs-all-devices

On this link, it says that you can find the ECID by going to the device summary page on Finder - that does not exist. A way to do so on a Mac would be to download the checkra1n app and then seeing your ECID there.

"Edit this page" links are broken

Update “Installing TrollStore” guide to include Trollstore-tvOS fork for Apple TV HD and 4K devices

Im hoping you can update the installation guide to include Apple TV devices on tvOS versions: 14.0 - 16.6.1, 16.7 RC (20H18), 17.0 . Developer of TrollStore-tvOS and Misaka, straight-tomago, instructs users to sideload Misaka-tvOS as the TrollStore installation method for tvOS versions 15-17. However, it’s unclear how to install TrollStore on all tvOS 14 versions. The recommended method to install TrollHelper on iOS 14 versions is incompatible with tvOS 14 versions as the havoc.app repo cannot be added through nitoTV (package manager for jailbroken Apple TV devices.)

E

Old version of Pangu7 suggested

Hello,

Not sure if this is intentional, but the guide is suggesting an old version of Pangu7 (1.0-en instead of 1.2.1) for (at least) the iPhone 4 7.1(.2) section. The most recent version's available from archive.org at https://web.archive.org/web/20190602191004/http://dl.pangu.25pp.com/jb/Pangu_v1.2.1.exe

Additionally, as of 1.1.0 (according to https://www.theiphonewiki.com/wiki/Pangu), 25PP isn't even suggested unless the language is set to Chinese, so providing the more recent version might save users a step.

Sorry if the selection of the old version was intentional, feel free to ignore me if so.