g0blin

A work-in-progress iOS 10.3.x jailbreak for 64-bit iDevices (A7 - A9) made from off the shelf parts and shared research. Long live jailbreaking!

supported devices

iPod 6G
iPhone 5S, 6, 6+, 6S, 6S+, SE
iPad Air, Air 2, 5G (2017), Pro 1G 9.7", Pro 1G 12.9", Mini 2, Mini 3, Mini 4

what doesn't work yet?

There are a few things not working that are related to a kernel patching issue:

Touch ID not working in containerized Apps
Preferences behaving badly in containerized Apps
Failure to launch an App via Xcode

what does work?

Everything else?

instructions

Download an offical .ipa file from g0blin.sticktron.net
Install using Cydia Impactor

tips

if the Cydia icon is hidden you can fix it by adding a new key SBShowNonDefaultApps and binary value YES to /User/Library/Preferences/com.apple.springboard.plist using Filza
A temporary workaround for TouchID is to turn it off before jailbreaking and then turn it back on afterward

a note about dropbear

I decided to make installing an SSH server optional for safety reasons, so g0blin RC2 automatically uninstalls dropbear when it runs. Post-RC2 builds no longer do that.

I recommend installing OpenSSH instead. The port will be 22 by default. It can be changed in /etc/services.

ingredients

v0rtex kernel exploit by Siguza, vuln by Ian Beer, POC by windknown
kpp bypass, sandbox, codesigning from yalu102 by Luca Todesco
additional sandbox work from h3lix by tihmstar
patchfinder from extra_recipe by Xerub
additional patchfinder work from async_wake_fun by ninjaprawn
Cydia by Jay Freeman (saurik)

shoutouts

Siguza, Ian Beer, windknown, Luca Todesco, xerub, tihmstar, saurik, uroboro, cheesecakeufo, arx8x, psycho tea, cryptic; Tyler, the Creator, randomblackdude; Mom.

I am extremely grateful for everyone whose open-source/public contributions to iOS research and developement made this software possible :)

😈

eduardorandom/g0blin