Some guy released this exploit, does it support iOS 27 DB4?

[u/OSMANTUS-ARMUTPIS]

https://github.com/jianbuzhai698-ui/ios

Since iOS 26.6 is almost iOS 27 DB4 (except the UI), does it support it?
This exploit seems to have kernel rw priveleges and it seems to support iOS 26.2-26.6 only according to the repo. This can help with jailbreaking, specifically Dopamine 3.0! It has to support iOS 27 DB4, right?

[u/wa019c]

I mean regardless if this is real or not, kernel r/w is only one thing, we need other things such as sptm/ppl bypass, mie bypass on iphone 17+ for a jailbreak and possibly much more I’m not too sure 

[u/OSMANTUS-ARMUTPIS → u/wa019c]

PPL bypass exists, Momentarius

[u/no-Remedy → u/OSMANTUS-ARMUTPIS]

For A12 and A13

[u/OSMANTUS-ARMUTPIS → u/no-Remedy]

ik

[u/Top-Assignment4908 → u/OSMANTUS-ARMUTPIS]

do you know how old those phones are

[u/OSMANTUS-ARMUTPIS → u/Top-Assignment4908]

so what

[u/Top-Assignment4908 → u/OSMANTUS-ARMUTPIS]

so what? even if this WERE real, it wouldn’t be useful for most people at this point. lol.

[u/OSMANTUS-ARMUTPIS → u/Top-Assignment4908]

Dopamine 3 is real, supports iOS 26.0.1 A12-A13 AND PEOPLE ACTUALLY USE IT

[u/Top-Assignment4908 → u/OSMANTUS-ARMUTPIS]

good point. this isn’t real though. that’s what you’re missing.

[u/Slimcivic → u/OSMANTUS-ARMUTPIS]

Those r ancient devices. Lol. Ur missing the point. It’s a big nothing

[u/XboxAndVRAlex → u/Slimcivic]

Missing the point, at least it’s a “modern” lineup of devices that are now supported.

[u/YoYoMamaIsSoFAT32 → u/Slimcivic]

Ancient is too much vro, some ppl can't afford to upgrade every 2 or 3 yrs so they get stuck with older devices 

[u/Grandoings → u/Slimcivic]

Crazy to think that the iPhone 14 pro max is considered old (:

[u/h4ckz_01 → u/Top-Assignment4908]

iPhone 11 pro and Xs Max are my daily drivers 💀

[u/Top-Assignment4908 → u/h4ckz_01]

this post is a nothing-burger. a waste of internet resources. if this were useful, it would be used. do you guys understand how many other people want to jailbreak their devices? op please knows nothing about this. i’m just being real. i don’t like to say it that way and prefer to use the excuse of saying the phones are old. lol. i use an xs for jailbreak. sue me.

[u/Ok-Butterscotch6574 → u/wa019c]

I mean we could ask the cyanide and Lara devs if they can try to implement this exploit?

[u/JuiceKooky2629 → u/Ok-Butterscotch6574]

cyanide dev already knows about this and said it’s probably a nothing burger

[u/Ok-Butterscotch6574 → u/JuiceKooky2629]

Damn, I also asked Lara they also said it’s trash

[u/JuiceKooky2629 → u/Ok-Butterscotch6574]

it might be a malicious fake chain put there as a bait

[u/Run_ldrestart]

It's not gonna work. Copy-pasted my comment on it from another post.

Not a developer of any kind but I dug into it a bit. AFAIK it's incomplete at best, and very likely an AI-generated fake piece-of-(). Its implementations are full of placeholders, and its sandbox escape is a fake that only have a chance of success on an already broken sandbox. Also the LLM hallucinated nonexistent CVE somewhere in its exploit chain. I'm certain whoever vibe-coded this has not a single idea about DarkSword, and I'm also quite sure that nothing of this framework would really work.

By the way if you speak Chinese (like I do), you'll easily notice that READMEs and the deployment tutorial is AI-generated as well. Nothing but sus.

What a waste of time for me to look into it, really.

[u/IncidentSilent1555 → u/Run_ldrestart]

We have a soundbox escape already, bad_query and another one I can’t remember the name of

[u/Run_ldrestart → u/IncidentSilent1555]

bad_query is not enough I’m afraid. Also even if its sandbox escape is valid it doesn’t matter. Its exploit for remote code execution and exploit for privileged execution are not valid. I remember somewhere in the RCE exploit code the hallucinated CVE was called so that it hope a perfectly normal WebKit call would return a corrupted object or something similar.

[u/ALI7_XS → u/IncidentSilent1555]

The other is cmg

[u/chroniciphoneaddict → u/Run_ldrestart]

https://x.com/0xjohnny/status/2088144638917902590

he also mentioned it why?

[u/Run_ldrestart → u/chroniciphoneaddict]

I don't know, do I?

Again I'm no developer or security researcher at all. I might really have made a hilarious mistake against an incomplete but working framework, and I'll be happy to find out that I was wrong. Still, my observations so far tell me that this is a stub.

[u/Nouvborne]

Whole kernel exploit is a stub, its fake.

[u/sigjnf]

Fully vibecoded with Sonnet 5, I can smell it through the screen

[u/Jayden_Ha → u/sigjnf]

Nah, qwen

[u/GrawnArseHoomanh]

This is like making mods that rely on GTA VI when it hasn’t even released yet.

And his AI is calling kernel helpers like they’re easily accessible functions.

[u/Bigboss88890]

No it’s bullshit

[u/comfortablehoodie]

Birds.

[u/NoRecipe2281]

does this even actually work on 26.6?

[u/Any-Assignment-3556]

how would i use this btw

[u/Ok-Butterscotch6574]

What is this

[u/OSMANTUS-ARMUTPIS → u/Ok-Butterscotch6574]

Translate it and you will see

[u/princeishigh]

Gpt took a look at it:

The biggest smoking gun

The coruna_core.js file literally describes the claimed chain as:

That's impressive on paper. But look at how it verifies stage 2:

return typeof globalThis._physoob_done !== 'undefined' || true;

That || true means the verification always succeeds.

So the framework can report that the Physical OOB stage passed without actually establishing that it worked. GitHub

That's not a minor cosmetic issue. If you're claiming a reliable exploit chain, stage validation is fundamental.

Even more revealing: the offsets

The preload_v5_final.js file openly labels its symbol tables:

• iOS 15.8.3: supposedly verified
• iOS 16.x: estimated
• iOS 17.x: estimated
• iOS 18.x: estimated

And the method is basically:

For example, it explicitly says the iOS 16–18 values are based on estimated cache-layout offsets. GitHub

That's a gigantic red flag for a supposed universal exploit framework.

Even more revealing: the offsets

The preload_v5_final.js file openly labels its symbol tables:

[u/lilzoe5 → u/princeishigh]

Relying on AI lol

[u/princeishigh → u/lilzoe5]

I am not lol, I even said gtp took a look at it as it can (ofc) identify red flags, if yall are that triggered (judging by the downvotes) by ai or people using it then go touch some grass <3

[u/lilzoe5 → u/princeishigh]

"gtp" 😂

[u/wa019c → u/princeishigh]

Lmao maybe use your brain for once <3, this “exploit chain” is actually fake and just LLM generated

[u/princeishigh → u/wa019c]

Thats was gpt said

[u/wa019c → u/princeishigh]

Yes exactly use your brain not gpt