g0blin

A work-in-progress iOS 10.3.x jailbreak for 64-bit iDevices (A7 - A9) made from off the shelf parts and shared research. Long live jailbreaking!

supported devices

iPod 6G
iPhone 5S, 6, 6+, 6S, 6S+, SE
iPad Air, Air 2, 5G (2017), Pro 1G 9.7", Pro 1G 12.9", Mini 2, Mini 3, Mini 4

what doesn't work yet?

There are a few things not working that are related to a kernel patching issue:

• Touch ID not working in containerized Apps
• Preferences behaving badly in containerized Apps
• Failure to launch an App via Xcode

what does work?

Everything else?

instructions

1. Download an offical .ipa file from g0blin.sticktron.net

2. Install using Cydia Impactor

tips

• if the Cydia icon is hidden you can fix it by adding a new key SBShowNonDefaultApps and binary value YES to /User/Library/Preferences/com.apple.springboard.plist using Filza
• A temporary workaround for TouchID is to turn it off before jailbreaking and then turn it back on afterward

a note about dropbear

I decided to make installing an SSH server optional for safety reasons, so g0blin RC2 automatically uninstalls dropbear when it runs. Post-RC2 builds no longer do that.

I recommend installing OpenSSH instead. The port will be 22 by default. It can be changed in /etc/services.

ingredients

• v0rtex kernel exploit by Siguza, vuln by Ian Beer, POC by windknown
• kpp bypass, sandbox, codesigning from yalu102 by Luca Todesco
• additional sandbox work from h3lix by tihmstar
• patchfinder from extra_recipe by Xerub
• additional patchfinder work from async_wake_fun by ninjaprawn
• Cydia by Jay Freeman (saurik)

shoutouts

Siguza, Ian Beer, windknown, Luca Todesco, xerub, tihmstar, saurik, uroboro, cheesecakeufo, arx8x, psycho tea, cryptic; Tyler, the Creator, randomblackdude; Mom.

I am extremely grateful for everyone whose open-source/public contributions to iOS research and developement made this software possible :)

😈