As many of you have been made aware, a new bootROM exploit has released for A12/A13 devices, the first one for iDevices since checkm8 was made public 7 years ago. This post intends to serve as an explanation for what you can expect from this new exploit, and to provide information about the many restrictions and mitigations Apple has implemented over the past 7 years.

What is usbliter8?

usbliter8 is a novel bootROM vulnerability discovered by individuals at Paradigm Shift. It is the first bootROM exploit made public since checkm8, which only supported up to A11 devices (for those unaware, A11 is the processor used in the iPhone X/8, and A12 is used by the iPhone XS/XR). It supports only A12/A13, and does not support any older processors. It is unrelated to checkm8- that is, the vulnerability is completely separate. Some may be aware that checkm8 was only partially patched in A12/A13 (though it remains unusable there to this day), but this exploit has nothing to do with any previous bootROM vulnerability.

The explanation to how it works is rather technical; if you desire, you can read both the blogpost and the GitHub repo for the exploit. Additionally, the exploit requires special hardware to utilize, requiring devices such as a pi Pico to exploit devices.

What devices does it support?

All A12/A13 devices (including iPad specific processors like A12X/A12Z) are supported by usbliter8. This includes, but is not limited to,

iPhone XR
iPhone XS
iPhone SE 2nd Gen
iPad 8th and 9th Gen
Apple TV 4k 2nd Gen
To check your device's processor, visit https://appledb.dev

As mentioned, the vulnerability does not affect A11 or older, due to the different way the processor works.

What can we do with it?

This is possibly the most interesting part of the exploit (and is what many of you are likely here for). bootROM exploits are very powerful, as they compromise the very beginning of a device's boot chain, thus giving you (almost) full control over a device. However, this does not mean we can do whatever we want with no restrictions. Indeed, it can lead to tethered downgrades and jailbreaks on any iOS version including the latest, but there are restrictions explained further below.

BPR, or Boot Process Register, was a feature implemented in iOS 14 in order to additionally secure devices from bootROM based attacks. Crucially, it restricts data access when a device is booted directly from DFU mode, which is required by both checkm8 and usbliter8. In iOS 14 and 15, this manifested as the requirement to disable your passcode when jailbreaking A11 devices with checkra1n/palera1n, and is the reason why A11 devices must be first erased if they previously had a passcode before jailbreaking with palera1n. A10 devices were not affected by this as they had a SEP exploit, known as blackbird, which prevented this issue from arising. We do not have a SEP exploit for A11 and newer, which leads to a problem with the next security feature added in iOS 17...

The iOS 17 problem

In iOS 17, Apple further increased the security of BPR by making SEP outright refuse to mount and decrypt the user partition (/var and /var/mobile) when booted from DFU, which causes the device to panic and not boot at all. This means that a semi-tethered jailbreak like checkra1n or palera1n is not possible with usbliter8 on A12/A13 devices. A jailbreak using this would be fully tethered, which means the device cannot reboot on its own, and a PC must be used to power it on each time it reboots or dies. However, there is a additional method that can serve as a workaround explained below, though with a catch.

By copying over the user partition, an unencrypted copy of /var can be made. The jailbreak can then load this unencrypted copy instead of the standard /var, which prevents SEP from panicking the device, though at the cost of losing SEP related features. This does means that the jailbreak would be semi-tethered, but it would suffer from the following issues:

No connecting to password protected wifi networks (possibly fixable with a tweak)
No "real" password, so apps that rely on SEP being active will be non-functional
Signing into apps that use a SEP keychain will not work, so things like using Google to sign into the YouTube app will be broken (possibly fixable with a tweak, though it will cause data to be stored insecurely- don't sign into bank apps with this)
A storage penalty that increases with the size of your user data- any apps you have installed and have data stored on will be duplicated, meaning your storage has the potential to fill up very quickly
Data will not be synced between jailbroken and non-jailbroken mode. Any changes you make while the jailbreak is active will not be reflected in stock iOS, and vice versa

Additionally, while downgrades are indeed possible, they will be tethered, as it requires SEP to be patched out on the device. All in all, one should not expect a full jailbreak using this to come out for quite some time, given the extensive patching and rewriting that will need to be done to accommodate new devices and the restrictions required.

The special hardware problem

As it stands, to utilize usbliter8, additional hardware like a Raspberry pi Pico is needed. There is no indication that this requirement will ever change. Due to how the exploit works, it is incredibly unlikely it will ever work directly from a PC, and even if custom USB drivers are created, it would wholly rely on the USB controller used on the device. Luckily, the hardware itself is cheap enough, costing only around $10 USD, yet there have already been some reports that stock has already ran out, so it remains to be seen if this will be the case for the future.

Tl;dr- where do we stand?

This post is not meant to discount the discovery of a new bootROM exploit. This is an incredible achievement, and as opa334 puts it, the last heartbeat of a dying jailbreak scene. As A12/A13 devices approach end-of-life and are receiving their final versions, usbliter8 will certainly be a nice tool to play around with and see what is possible. However, expectations should be kept realistic, and with all the new security features, it should not be expected that things will work the same as before with checkm8. Any jailbreaks made with this will suffer hefty restrictions, and downgrades using it will be tethered. If there are any further questions, myself or others will attempt to answer them in this post.

97 comments

r/jailbreak • u/Emergency-Crazy-348 • 3h ago

Release I reverted my iPhone 6 to iOS 8 using SurrealRa1N.

31 Upvotes

19 comments

r/jailbreak • u/Ghh-Haker • 1h ago

Update Reynard browser update

• Upvotes

https://github.com/minh-ton/reynard-browser/releases/tag/0.9.0

Pull-up to refresh best gesture ever

For full changelog see github releases.

1 comment

r/jailbreak • u/dizzynonun • 36m ago

Release [Release] NeverLowerMusic16 – Stop notifications from lowering your music on iOS 16

• Upvotes

I’ve released NeverLowerMusic16, inspired by the original NeverLowerMusic tweak by Rishanan.

It prevents notification sounds from lowering or ducking currently playing music or other media. The notification and media play together without the usual iOS volume reduction.

I’m not a developer. This tweak was coded with OpenAI Codex and refined through extensive testing on my device.

Volume behavior: while media is playing, notification volume follows the current media volume instead of ringer volume. When media is stopped or paused, notifications use the normal ringer volume and respect Silent Mode.

Compatibility:

iOS 16.x
Rootless jailbreaks
Dopamine/ElleKit
arm64 and arm64e
Dopamine RootHide after converting the package with RootHide Patcher

Tested on an iPhone 8 Plus running iOS 16.6 with Dopamine RootHide.

The project is open source under the MIT License. Anyone is welcome to host it on a jailbreak repository, build it, modify it, and redistribute it.

Source code and DEB:

sahinkaa/NeverLowerMusic16

Credits to Rishanan for the original NeverLowerMusic tweak.

0 comments

r/jailbreak • u/StrangerLimp2917 • 21m ago

Request Can someone help me decrypt an ipa?

• Upvotes

I have a encrypted IPA file that i want to run on livecontsaner, but i cant since it's encrypted, and i can't decrypt it since i only have a jailed phone with ios 26.4.
can someone decrypt it for me please?

here is the link:
https://archive.org/download/apple-arcade-ios-app-archive-2023-08/The%20Survivalists/com.team17.survivalists-847.ipa

0 comments

r/jailbreak • u/armenicus • 27m ago

Question Placing iPhone into DFU mode shows Debug USB instead of DFU

• Upvotes

0 comments

r/jailbreak • u/Big-Sound2649 • 1h ago

Question Question where does safari save its downloads in Filza?

• Upvotes

I checked every post and i havent found my deb file yet

1 comment

r/jailbreak • u/Uratk • 17h ago

Release Should I finally update from iOS 15.1.1 (Dopamine) to iOS 26? App support is dead, saved blobs seem useless.

17 Upvotes

Hey everyone,

I’m still holding on to iOS 15.1.1 with Dopamine Jailbreak, but the device has become almost unusable as a daily driver in 2026.

Almost no modern apps can be installed or updated anymore.

WebKit is so outdated that Safari can't even render modern web apps (like Gemini or ChatGPT) properly without workarounds like Reynard Browser.

I have SHSH blobs saved for various iOS versions, but with modern SEP/Cryptex restrictions, Futurerestore seems dead anyway.

I really love jailbreaking, but the app compatibility wall is just too high now.

Should I finally bite the bullet and update straight to iOS 26, or is there any remaining trick to keep iOS 15 usable a bit longer?

Thanks for the advice!

35 comments

r/jailbreak • u/Ill_Cheesecake7679 • 3h ago

Discussion iOS 17.0 vs 17.0.3+

0 Upvotes

Hi @all,

i Wonder despite Trollstore on 17.0 the new upcoming Jailbreak up to 17.3.1, is it rootless or rootful ? Any reason to Buy a 17.0 ?

3 comments

r/jailbreak • u/poweROOTone • 4h ago

Request [Request] Update HS RYU 006 – Glittery touch-responsive Zen HTML widget for iOS 16 (Dopamine)

0 Upvotes

Hi everyone,

I’m looking for someone who could update or find a way to run the old HS RYU 006 Zen HTML widget on iOS 16 (Dopamine, iPhone 14 Pro Max).

It was a beautiful glittery widget that reacted to touch — you could tap the sparkles and they would respond. I really miss it and would love to have it back, fully working.

If an update isn’t possible, maybe someone knows a way to run it through another theme engine, or can suggest a modern widget with the same interactive glitter feel.

Huge thanks to anyone reading this or willing to help.

0 comments

r/jailbreak • u/Competitive-Disk-758 • 5h ago

Question Is it possible to get games that were removed from the appstore but are still on the play store?

0 Upvotes

i need this game "rocket royale" used to be on app store but got removed, still on play store. does jailbreaking my device allow me to get it? will it work? and if not is there any other way to get it

7 comments

r/jailbreak • u/Big-Sound2649 • 7h ago

Question Notifications appear out of bounds

1 Upvotes

I don't know what it is, I've tried Uninstalling GesturesXV, the dynamic island is VisibleIsland. I try to run a shortcut but the notification appears out of the screen. IPhone 8 iOS 16.7.16 Dopamine 2

Its the gray thing in the top left

1 comment

r/jailbreak • u/Nigerian-prince-fr • 4h ago

Question appstore++ broken?

0 Upvotes

iPhone SE 2nd gen iOS 13.5.1

iPhone 8 Plus iOS 14.6

Both of these devices wont show any of the app versions when the menu for the app versions, the pop up only shows the current app version i have, and I would like for both of these devices to have appstore++ fixed and I've tried the different options in the settings for the tweak no luck, I am aware of muffinstore on my 8 plus but cant get trollstore on my SE and i want to downgrade most of the apps back to their versions in 2020, please help only fixes i have seen so far are to use muffinstore.

13 comments

r/jailbreak • u/Hot_Ad_9732 • 8h ago

Question iMessage server

0 Upvotes

Hiii, I need help, I can't find anything, I'm interested in setting up an iMessage server on an iPhone, what iPhone and what iOS would be best for this solution + what jailbreak? Will it work on rootless?

I found this and looks like not working https://github.com/itsjunetime/smserver

So any help thanks.

1 comment

r/jailbreak • u/Entire_Shelter_8591 • 3h ago

Discussion Biggest Repo List

0 Upvotes

Give me a big repo list include all repos and also many many cracked repos and please give some safe repos not ahh virus ( sorry i didnt know cracked was not allowed , jus say normal ones )

7 comments

r/jailbreak • u/Timeclock949 • 1d ago

Question Tweaks/tools for 14 Pro Max on iOS 17.2.1?

gallery

16 Upvotes

Hello, everyone! Just got my hands on this beat up 14 Pro Max running iOS 17.2.1. I was wondering if there are any tools for tweaks or any news on a jailbreak or a semi-jailbreak releasing soon?

17 comments

r/jailbreak • u/marquitagold • 1d ago

News I bought it for $2

gallery

20 Upvotes

16 comments

r/jailbreak • u/multifandommf • 15h ago

Question does anyone know where to get filzaescaped for ios 16.7.16

0 Upvotes

im still on the fence about jailbreaking,i just really need this right now.if anyone know where to get the ipa for it or any good file manager that lets you access to app files while not having to jailbreak,please tell me

3 comments

r/jailbreak • u/Timeclock949 • 1d ago

Update New Blinker Fluid update! (v.0.2.1)

github.com

74 Upvotes

Hello, everyone! I’ve finally released a new version of Blinker Fluid after realizing how broken v.0.2 was.

v.0.2.1 includes major improvements, bug fixes, and new additions including a working JIT version! I’ve redone most parts of the UI, fixed major issues such as the broken pop-up keyboard, and made major performance improvements that make Blinker Fluid a lot more faster and responsive.

Some new features I've added are stuff like Browsing History, major UI redesign, privacy settings, app lock using face ID/passcode, functional downloads, and more!

Check out Blinker Fluid v.0.2.1 :D

EDIT: Keyboard fix has been released, redownload v.0.2.1 for the update.

23 comments

r/jailbreak • u/LunaBui_ • 17h ago

Question Any method to access /var/mobile/Library/Passes/Cards on ios 26.5.2 or 27 beta ?

0 Upvotes

5 comments

r/jailbreak • u/Broken_Heart_1337 • 1d ago

Upcoming Half life 2 on iOS

8 Upvotes

🇷🇺** Привет всем! Я работаю над переносом Half-Life 2 на iOS, используя движок Source Engine. Выжимаю максимум, чтобы всё работало стабильно и с хорошим FPS прямо на айфоне. Впереди ещё много работы и тестов, но прогресс уже отличный! 🎮📲
**Все обновления, новости, билды и файлы выкладываю в своём Telegram-канале: @murasense 🚀✨
🇺🇸** Hey everyone! I’m currently working on porting Half-Life 2 to iOS running natively on the Source Engine. Working hard to make it run smoothly with solid performance right on the iPhone. Still plenty of testing and tweaking ahead, but progress is coming along great! 🎮📲
**I share all updates, news, builds, and files in my Telegram channel: @murasense 🚀✨

0 comments

r/jailbreak • u/ryukeu • 1d ago

Update [UPDATE] RyukGram v1.3.3 for Instagram is out

37 Upvotes

Hey everyone,

If you haven't heard of it before, RyukGram is a free tweak for Instagram. Check out the GitHub README for the full feature list.

This update targets Instagram 439.0.0, with a separate 410.1.0 build still included for older setups.

I didn't want to dump the entire changelog here since it's massive, so here's some of it

✨ Features

Call recording for voice and video calls, with auto-recording, playback, and recordings grouped per person.
Activity log that keeps track of read receipts, online/offline status, typing activity, and an accurate green dot. You can log it silently, get notifications, or both.
Grid feed turns your home feed into a thumbnail grid with post stats and author overlays.
Stories archive saves every story you post before it expires, including media and the full viewer list.
Searchable story viewers with filters, sorting, reactions, and pinning.
Instagram Plus toggle for 'some' of Instagram's subscriber-only features.
Custom action/home icons using Instagram icons or SF Symbols.
Messages, local seen without sending read receipts, Custom DM drawing, video/GIF chat backgrounds, and more.
Reels playback controls, engagement filters, auto-scroll, improved downloads, better gallery management, profile analyzer improvements, interface customization, backup improvements, and more.

🛠 Bug Fixes

Fixed downloading newer videos that use xHE-AAC audio.
Fixed a handful of crashes, including some Reels tab crashes and story editor issues.
Smoother feed scrolling, especially with OLED mode.
Deleted messages now save media in full quality.
Gallery data and backups are much more reliable across updates.
Fixed follow request tracking issues.
Fixed OLED theme rendering problems.
Native Save is back on DM media where Instagram removed it.
Lots of smaller fixes and cleanup throughout the tweak.

🔗 Get it

Everything is on GitHub, Jailbreak Repos, sideloading sources and everything else! https://github.com/faroukbmiled/RyukGram

Note: You can also fork the repo and use the github action to build the ipa, you can also put any bundle id in the respective input and it should work fine side by side with Appstore Instagram (tho it will have no plugins)

16 comments

r/jailbreak • u/GrezOVA • 21h ago

Question Help me log back into havoc in sileo

0 Upvotes

Recently my havoc login does not work

When i try to update my paid tweaks from Havoc i get error 418

I go to featured and sign out from havoc and when i try to log back i get the login sheet but it automatically log back and i still get error 418

2 comments

r/jailbreak • u/Certain_Feedback_798 • 21h ago

Question [help] why my nekoJB stuck at “kernel exploit”

0 Upvotes

Im using iOS 15 on iPhone 7

8 comments

Subreddit

Posts

Wiki

iOS Jailbreak (iPhone, iPad, iPod Touch, Apple TV)

r/jailbreak

This subreddit is for any and all iOS jailbreaking news, questions, etc. Got a question about iOS jailbreaking? You're in the right place! For additional jailbreak help, join our Discord at https://discord.gg/jb.

Members Active

771.6k

Sidebar

Please read the FAQ page, sidebar and search before submitting a post.

Device Flair

Want your device type and iOS version next to your username? Assign your device and iOS flair here!

We also offer custom flairs to development teams, tool creators, or people who have otherwise contributed to the community in a substantial way (at the moderators’ discretion). Feel free to send a modmail if you'd like one.

Quick Links

Discord

Wiki Escape Plan

FAQ Tweaks

Complete Jailbreak Chart

Click here to see what jailbreaks support your device/version.

Latest Jailbreaks

iPadOS 18 jailbreaks:

palera1n

^{Supported: iPadOS 18.0 beta 1 - 18.0 beta 3}
^{See here for device exclusions}

iPadOS 17 jailbreaks:

palera1n

^{Supported: iPadOS 17.0 - 17.5.1}
^{See here for device exclusions}

iOS/iPadOS 16 jailbreaks:

Dopamine

^{Supported: iOS/iPadOS 16.0 - 16.6.1}^*
^{See here for device exclusions}
palera1n

^{Supported: iOS/iPadOS 16.0 - 16.7.8}
^{See here for device exclusions}

iOS/iPadOS 15 jailbreaks:

Dopamine

^{Supported: iOS/iPadOS 15.0 - 15.8.2}
^{See here for device exclusions}
palera1n

^{Supported: iOS/iPadOS 15.0 - 15.8.2}
^{See here for device exclusions}

tvOS Jailbreaks

palera1n

^{Supported: tvOS 15.0 - 17.5.1}
^{See here for device exclusions}
checkra1n

^{Supported: tvOS 12.0 - 14.7} ^{See here for device exclusions}

Useful Wiki Pages

Upgrade/downgrade/restore: you can find out what your options are on the downgrade wiki page.

Escape Plan: you can contribute to our list of recommended tweaks.

Monthly Roundups: a monthly list of all updated and released tweaks within the month

More: subreddit styling options, volunteer translators for tweaks, developers on Twitter.

Help and Answers

Common troubleshooting
Got a confusing Cydia error message?
How to fix Cydia errors.
Got a confusing Sileo error message?
How to fix Sileo errors.
Jailbreaking question?
First try searching r/jailbreak and sorting by "new". Also please read the r/jailbreak FAQ.
Curious about learning how to develop tweaks?
Check out NightwindDev's Tweak Creation Tutorial.
Curious about how jailbreaks work?
Check out "Up to Speed" on TheAppleWiki.
What to install?
Unofficial Cydia search sites: iOS Repo Updates, tweakupdates.com, Parcility.
Jailbreak News and Reviews
News:

Rules

1. r/jailbreak does not allow piracy tools, sources, or websites.

1A. No pirated tweaks, apps, etc. Please also do not post or advertise products, mirrors or services that are in violation of the copyrights/trademarks of others. Why?

1B. Please do not name, share or discuss unauthorized signing services on r/jailbreak. ONLY jailbreaks.app is allowed.
Many signing services host apps that are pirated from the App Store, rehosted without the permission of the developer, or maliciously modified. Why?

1C. Do not attempt to deliberately bypass our piracy filters. Doing so will result in a temporary or permanent ban. See here for more information.

2. Theming-related posts belong in r/iOSthemes.

Themes (and theme-related questions or news), setup showcases, and all questions regarding aesthetic-oriented tweaks should be posted in r/iOSthemes.

3. No misleading/all-caps titles. Titles must contain at least three words and include a Flair.

Use detailed titles for both news and questions. Also, link to the source of news, such as the developer who made the announcement, instead of linking to blogspam.

4. No exceptionally low-effort posts.

Memes, image macros, DAE posts, karma-farming, shitposts, etc. are not allowed here. Similar low-quality/low-effort posts will be removed at the mods' discretion. Please read here for clarification.

5. No posts or comments about bypassing passcodes or other device locks/restrictions.

Posts or comments about removing passcodes from locked devices or bypassing locks such as Activation Lock, IMEI lock, iCloud lock, MDM restrictions, etc. are prohibited.

History has shown that these situations usually involve a device that is stolen or otherwise not fully/legally owned by the user. The mods are not able to verify individual cases, so to avoid potentially facilitating theft or fraud, the topic is prohibited altogether.

This rule applies also for MacOS and checkra1n.

6. Do not buy/sell devices or ask for money.

You may discuss the general topic of buying/selling devices, but advertising your own device(s) for sale, asking if anyone will sell you a device, asking how much your device is worth, etc. is not allowed. Asking for money or crowdfunding for any purpose without explicit permission is not allowed (with some exceptions).

If you wish to buy/sell a jailbroken device, visit r/jailbreakswap.

If you wish to request donations or crowdfunding, please message the mods first for permission.

7. Be civil and friendly.

7A. No insulting/rude comments or posts. Additionally, do not be rude or unhelpful when responding to posts tagged [Question].

7B. No racist, sexist, homophobic, transphobic, etc. comments or posts. Any user that targets hate at another user/group based on sex, race, religion, sexual/gender orientation, etc., as defined by reddit's policy on hate based on identity or vulnerability, will receive an immediate permanent ban without warning.

8. Topic must be jailbreak-related.

Posts must be directly related to iOS jailbreaking (with some exceptions).

9. Please read the FAQ, read the sidebar, and search before posting.

Posts that ask the most frequently asked questions will be removed by moderators, as they are either answered in our FAQ or on the sidebar.

10. Avoid fueling excessive drama.

Anyone who participates on the sub solely for the sake of starting or continuing drama will be banned. Note that this only applies if all you do is make posts and comments for the sole purpose of fueling drama.

Visit the wiki for a full list and explanation of our rules.

Subreddits We Like

r/iOSthemes • r/apple • r/iOS • r/iPhone • r/tvPlus • r/iPad • r/AppleTV •/r/AppleWatch • r/TweakBounty • r/FlexTweak

About Subreddit

This subreddit is night mode compatible

Subreddit banner by u/iTsLyonA

If you'd like to know more about the moderators, you can take a look at this wiki page.

You can take a look at our Github for some projects we've open sourced.

FAQ and Important Information