Evasi0n

2013-02-28T03:10:26Z

Jaywalker: /* External Links */

{{lowercase}}
[[File:Evasi0n.png|165px|thumb|right|evasi0n's icon]]

'''evasi0n''' is a [[jailbreak]] tool that can perform an [[untethered jailbreak]] on [[iOS]] 6.0-6.1.2 for all [[#Supported Devices|supported devices]], excluding both [[Apple TV 3G]] revisions. It was first released on 4 February 2013 by [[evad3rs]], and is available for Windows, Mac OS X, and Linux (x86 and x86_64). There is also a [[Cydia.app|Cydia]] package called "evasi0n [[iOS]] 6.0-6.1 [[untethered jailbreak|untether]]" which can untether an existing [[tethered jailbreak]] without the need to restore and use the desktop tool. It is a [[userland]] [[jailbreak]].

== Supported Devices ==
As of evasi0n's release, the only unsupported devices are the [[Apple TV 3G]] revisions, since the [[kernel]]s on these devices lack an [[Injection Vector|injection vector]] to run unsigned code. All other devices running [[iOS]] 6.0-6.1.2 are supported (including iOS 5.2 for the [[k66ap|Apple TV 2G]]).

== Cydia Package ==
The Cydia package contains just these files:
usr\libexec\dirhelper
var\evasi0n\amfi.dylib
var\evasi0n\evasi0n

== Version History ==
{| class="wikitable" style="text-align:left;"
! Version
! Cydia Package Version
! Release Date
! Changes
|-
! 1.0
| style="text-align:center;" | 0.1-1
| 04 Feb 2013
|
* Initial Release
|-
! 1.1
| style="text-align:center;" | 0.2-3
| 06 Feb 2013
|
* Prevents [[:/Applications/Weather.app|Weather]] app from appearing on [[iPad]]s
* Mitigated the long reboot issue
* Fixed freezing issue with after connecting multiple devices
* Fixed blinking of the jailbreak instructions on OS X.
* OS X app is now codesigned.
|-
! 1.2
| style="text-align:center;" | 0.3-1
| 08 Feb 2013
|
* Disables [[OTA Updates|OTA updates]].
* Correct timezone issue in evasi0n binary if client fails to correct it.
|-
! 1.3
| style="text-align:center;" | 0.3-2
| 11 Feb 2013
|
* Adds support for the [[n94ap|iPhone 4S]] on [[iOS]] 6.1.1.
|-
! 1.4
| style="text-align:center;" | 0.3-3
| 19 Feb 2013
|
* Added support for iOS 6.1.2
|-
! 1.5
| style="text-align:center;" | 0.4-1
| 23 Feb 2013
|
* Improved boot time.
* Updated included Cydia package list.
|}

== Download ==
{| class="wikitable" style="text-align:center; white-space:nowrap;"
! Version
! OS
! SHA-1 Hash
! colspan="4" | Download
|-
! rowspan="3" | 1.0
| [[wikipedia:Linux|GNU/Linux]]
| <code>c9e4b15a161b89f0e412721f471c5f8559b6054f</code>
| style="text-decoration: line-through;" | [https://sites.google.com/site/evad3rs/evasi0n-linux-1.0-3c53ba10e2448d311b0f4157f2d7eb568f106c4f-release.tar.lzma Google Sites]
| style="text-decoration: line-through;" | [https://evad3rs.box.com/shared/static/5dped2c9ejnk5r6ahfpg.lzma Box]
| [https://mega.co.nz/#!0kUkXBLC!Q8e53kQZpLbGL7PquHWgQFhMU9Ru3WJWxBuzEdkiMJo Mega]
|-
| [[wikipedia:OS X|Mac OS X]]
| <code>23f99a0d65e71fd79ff072b227f0ecb176f0ffa8</code>
| style="text-decoration: line-through;" | [https://sites.google.com/site/evad3rs/evasi0n-mac-1.0-3c53ba10e2448d311b0f4157f2d7eb568f106c4f-release.dmg Google Sites]
| style="text-decoration: line-through;" | [https://evad3rs.box.com/shared/static/du66n0g9wl1j4ta57hpx.dmg Box]
| [https://mega.co.nz/#!5h0BwQoa!KdRLFwNJ3OjMS-7Zs2YGQnsvPxAKEsaAjabY__8pNtY Mega]
|-
| [[wikipedia:Microsoft Windows|Windows]]
| <code>2ff288e1798b4711020e9dd7f26480e57704d8b2</code>
| style="text-decoration: line-through;" | [https://sites.google.com/site/evad3rs/evasi0n-win-1.0-3c53ba10e2448d311b0f4157f2d7eb568f106c4f-release.zip Google Sites]
| style="text-decoration: line-through;" | [https://evad3rs.box.com/shared/static/tg1t0cz7oakvq7hsv0bd.zip Box]
| [https://mega.co.nz/#!d9ciUApQ!AkwevVU1OtUrEUU7U4fE-V8qqM9aINTAGgjkukShihE Mega]
|-
! rowspan="3" | 1.1
| GNU/Linux
| <code>6c06a6be87e003eee470eb749b42ffbaafcc9e62</code>
| [https://sites.google.com/site/evad3rs/evasi0n-linux-1.1-baad71faf69b65b5d97f8fc1391846d5778b289d-release.tar.lzma Google Sites]
| [https://evad3rs.box.com/shared/static/8smyi2ud2ts41icmtf50.lzma Box]
| [https://mega.co.nz/#!Qw9wwJpC!IE3ZcRv9-yCc-w12Ktmd_AQbVV84xCdIycB7W0OyW8g Mega]
|-
| Mac OS X
| <code>ae9d20bc927976a1f55089cd80afca48de0f7a2e</code>
| [https://sites.google.com/site/evad3rs/evasi0n-mac-1.1-baad71faf69b65b5d97f8fc1391846d5778b289d-release.dmg Google Sites]
| [https://evad3rs.box.com/shared/static/ydz8ctzuvyjuqb7y0oj5.dmg Box]
| [https://mega.co.nz/#!I0FmTK7Q!YTBYg3e9oEFYIFwFN56XfVqcHAdh1YacWW0OkFE1dHo Mega]
|-
| Windows
| <code>4225b01afd4a4fd1277565954964bd3310ad8b5f</code>
| [https://sites.google.com/site/evad3rs/evasi0n-win-1.1-baad71faf69b65b5d97f8fc1391846d5778b289d-release.zip Google Sites]
| [https://evad3rs.box.com/shared/static/velx0yh66mmw4jlf4igm.zip Box]
| [https://mega.co.nz/#!1x9EzajI!CqMhmQ8rl6NODx6S4lOZVRNHyBJ9Dgt3TtRBl4_l2NA Mega]
|-
! rowspan="3" | 1.2
| GNU/Linux
| <code>2e1d1f6c7e6ca775860df03298dce3b0d798658a</code>
| [https://sites.google.com/site/evad3rs/evasi0n-linux-1.2-54502235236cbca6b1fcdbce5694ae2e4c5eb703-release.tar.lzma Google Sites]
| [https://evad3rs.box.com/shared/static/jcerfiaug4ke7f4q6z15.lzma Box]
| [https://mega.co.nz/#!Ak12CQIJ!Mf6_W1l9xPQKvQUYOZEl9w_4yB0HbfqrTRWZ6BJKSjg Mega]
|-
| Mac OS X
| <code>8f91aba478ad28bda800dc5c303be1699fcfb800</code>
| [https://sites.google.com/site/evad3rs/evasi0n-mac-1.2-54502235236cbca6b1fcdbce5694ae2e4c5eb703-release.dmg Google Sites]
| [https://evad3rs.box.com/shared/static/qogbw1s82xi8ogdfk1co.dmg Box]
| [https://mega.co.nz/#!wxMFAZhR!KIMDnVwbvscogces8L2z7j1aQIgxPZgsBygLou69gfk Mega]
|-
| Windows
| <code>9942559caf779da6526b9fd0e207d21554a8a9cf</code>
| [https://sites.google.com/site/evad3rs/evasi0n-win-1.2-54502235236cbca6b1fcdbce5694ae2e4c5eb703-release.zip Google Sites]
| [https://evad3rs.box.com/shared/static/ld4e7c2ckrjyaj1cym8g.zip Box]
| [https://mega.co.nz/#!9k0iQICT!M_gOkBSyYO5c86LqXX9UUWF-twF-wJMhH9ScPwd1CFE Mega]
|-
! rowspan="3" | 1.3
| GNU/Linux
| <code>d93bc45653345e62a315e0a0aaa1b709aacd26c4</code>
| [https://sites.google.com/site/evad3rs/evasi0n-linux-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release.tar.lzma Google Sites]
| [https://evad3rs.box.com/shared/static/yu314zif091koehui5pb.lzma Box]
| [https://mega.co.nz/#!Rg0kyRIK!T-_u6CMAgTc1lFl0XMdjwjD3sBcAnOlIUK0GdR-Nh-s Mega]
|-
| Mac OS X
| <code>c239da3fd4e312c8468cdca967c86962b2cbd3f9</code>
| [https://sites.google.com/site/evad3rs/evasi0n-mac-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release.dmg Google Sites]
| [https://evad3rs.box.com/shared/static/cfbxzbn3p9gmj24tslwc.dmg Box]
| [https://mega.co.nz/#!wgdgHCLb!AHLWLhCqoTQR-qWceDld_nODFZAo-MiMJbDug3my2iE Mega]
|-
| Windows
| <code>92bbe23f125f3b0155334f1925943624e24ce130</code>
| [https://sites.google.com/site/evad3rs/evasi0n-win-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release.zip Google Sites]
| [https://evad3rs.box.com/shared/static/spd5uii8p86ko6ypad1l.zip Box]
| [https://mega.co.nz/#!Uh0gVLbQ!YP63Pk2qb300H_bI17i8i3z7868m5aQPJEWaDob5Qe8 Mega]
|-
! rowspan="3" | 1.4
| GNU/Linux
| <code>95c34e7a7220d2dab2e93cf9bb62beb49aef8996</code>
| [https://sites.google.com/site/evad3rs/evasi0n-linux-1.4-91fc5a30e4caf41b22e85427e1b3b738f5158d8e-release.tar.lzma Google Sites]
| [https://evad3rs.box.com/shared/static/f6llokbz8k2a3ag08d54.lzma Box]
| [https://mega.co.nz/#!B5FGyQLY!QoSdQFK-8yWmXbwhBjr0YhXeFW5YQGih2ZUOzGIO9SA Mega]
|-
| Mac OS X
| <code>96b62f303e335bb5c6b78034027606fee5fc93c3</code>
| [https://sites.google.com/site/evad3rs/evasi0n-mac-1.4-91fc5a30e4caf41b22e85427e1b3b738f5158d8e-release.dmg Google Sites]
| [https://evad3rs.box.com/shared/static/flvifqy9csegg2dyk79n.dmg Box]
| [https://mega.co.nz/#!10dgUABL!R8uxsTBRPD58gE6K7cF22QI2xtp0k6OAYcD6L6d-9g4 Mega]
|-
| Windows
| <code>36adf9ccf62aaf770163666e757c7a89e9ba3a55</code>
| [https://sites.google.com/site/evad3rs/evasi0n-win-1.4-91fc5a30e4caf41b22e85427e1b3b738f5158d8e-release.zip Google Sites]
| [https://evad3rs.box.com/shared/static/eesitqovp4ac444txvau.zip Box]
| [https://mega.co.nz/#!04ljSZQJ!F9kaThdAaXyYiOINpn63WA1kEARYujnUh6SRl4gp7Ok Mega]
|-
! rowspan="3" class="blradiusplz nobborderplz" | 1.5
| GNU/Linux
| <code>923db21a9045df6aaaff27670be92330f4855a21</code>
| [https://sites.google.com/site/evad3rs/evasi0n-linux-1.5-9cde20f28818ac84a776f2db463c265db00c1021-release.tar.lzma?attredirects=0 Google Sites]
| [https://evad3rs.box.com/shared/static/0uhcxb83r30519x59avl.lzma Box]
| [https://mega.co.nz/#!5odg2TBQ!M_csICuu8BazHC16H5Y_zlv6hqw7ZFsz-rOoYkrXdeg Mega]
|-
| Mac OS X
| <code>cccf7e5b4a83df8c05dcfed98b9627533c018541</code>
| [https://sites.google.com/site/evad3rs/evasi0n-mac-1.5-9cde20f28818ac84a776f2db463c265db00c1021-release.dmg?attredirects=0 Google Sites]
| [https://evad3rs.box.com/shared/static/ip3yvihmkkp9qh3arixs.dmg Box]
| [https://mega.co.nz/#!YpdiWJpZ!GDrEaV5xwMI8XUv2gKER6EstsD1MMgKJD-MkTo41MLM Mega]
|-
| Windows
| <code>25799bbeea3733c26fb010e6aca432d686fd8f9f</code>
| [https://sites.google.com/site/evad3rs/evasi0n-win-1.5-9cde20f28818ac84a776f2db463c265db00c1021-release.zip?attredirects=0 Google Sites]
| [https://evad3rs.box.com/shared/static/tnez6rzlyka0yovc59fu.zip Box]
| [https://mega.co.nz/#!M4En0DqT!TLDb1TO0bnRYxnvd53pcP31Yf0RoD50oeEN9nsERi9o Mega]
|}

== Exploits ==
evasi0n takes advantage of several vulnerabilities:
* [[Symbolic Link Vulnerability]]
* [[Malformed PairRequest]]
* [[Shebang Trick]]
* [[AMFID code signing evasion]]
* [[launchd.conf untether]]
* [[IOUSBDeviceFamily Vulnerability]]
* [[ARM Exception Vector Info Leak]]
* [[dynamic memmove() locating]]
* [[vm_map_copy_t corruption for arbitrary memory disclosure]]
* [[kernel memory write via ROP gadget]]
* [[Overlapping Segment Attack]]

== See Also ==
* [[evad3rs]]

== External Links ==
* [http://www.evasi0n.com/ Official Website]
* [http://blog.accuvantlabs.com/blog/bthomas/evasi0n-jailbreaks-userland-component Accuvant Labs analysis]
* [http://blog.azimuthsecurity.com/2013/02/from-usr-to-svc-dissecting-evasi0n.html Analysis by kernelpool]
* [http://www.forbes.com/sites/andygreenberg/2013/02/05/inside-evasi0n-the-most-elaborate-jailbreak-to-ever-hack-your-iphone/ Explanation by planetbeing in Forbes]
* [https://github.com/NetsourceLabs/HopperScripts Hopper Script to demangle evasi0n strings]

[[Category:Jailbreaks]]

Animate

2011-02-09T06:58:34Z

Jaywalker:

{{lowercase}}
'''animate''' (Package ID: <code>org.chronic-dev.animate</code>) is a software bundled in [[greenpois0n (jailbreak)|greenpois0n RC5]] that enables users to display (a sequence of) PNG images on boot.

This approach has the advantage of being usable on all devices, regardless of their ability of [[0x24000 Segment Overflow|accepting custom firmware]], and supporting animated boot logos.

[[Applelogo|The original boot logo]] will always show first.

== Notes for logo designers ==
The animation currently runs at about 5 frames per second.

A picture of the Apple logo is available at http://yfrog.com/gzqigp

Animations must be stored in png format in [[/Library]]/BootLogos/(animationName)/ and be listed in order, from 0.png to x.png.

Packages containing (animated) logos should depend on <code>org.chronic-dev.animate</code>.

== Installation ==
The '''animate''' tweak has been released on Cydia but it is invisible for some reason. To install it, search and install a package named ''Apple boot logo'' ('''animate''' is a dependency). After the installation, a new tab will appear in the [[:/var/stash/Applications.*****/Preferances.app|Settings app]] named ''BootLogos''. Anyone having trouble keeping settings should be sure that /Library/BootLogos/ is chown mobile:mobile. Sometime uninstalling all boot animation packages and reinstalling fixes this issue.

== References ==
[[User:Jaywalker|Jaywalker's]] [http://www.twitlonger.com/show/8lepqg notes]

Animate

2011-02-08T03:48:26Z

Jaywalker: Updated the boot logo base to better match the real apple logo. (mine was off...)

'''animate''' (Package ID: <code>org.chronic-dev.animate</code>) is a software bundled in [[greenpois0n (jailbreak)|greenpois0n RC5]] that enables users to display (a sequence of) PNG images on boot.

This approach has the advantage of being usable on all devices, regardless of their ability of [[0x24000 Segment Overflow|accepting custom firmware]], and supporting animated boot logos.

[[Applelogo|The original boot logo]] will always show first.

==Notes for logo designers==
The animation currently runs at about 5 frames per second.

A picture of the Apple logo is available at http://yfrog.com/gzqigp

Animations must be stored in png format in [[/Library]]/BootLogos/(animationName)/ and be listed in order, from 0.png to x.png.

Packages containing (animated) logos should depend on <code>org.chronic-dev.animate</code>.

==References==
[[User:Jaywalker|Jaywalker's]] [http://www.twitlonger.com/show/8lepqg notes]

User:Jaywalker

2010-08-15T20:32:02Z

Jaywalker:

Justin Williams - iPhone Hacker, Member of the [[Chronic Dev (team)|Chronic Dev]]

Twitter: [http://www.twitter.com/Jaywalker9988 Jaywalker's Twitter]

Other Projects: PogoPlank, openiboot for ipt2g
[[Category:Hackers]]

User:Jaywalker

2010-08-06T05:36:44Z

Jaywalker:

Justin Williams - iPhone Hacker, Member of the [[Chronic Dev]]

Twitter: [http://www.twitter.com/Jaywalker9988 Jaywalker's Twitter]

Other Projects: PogoPlank
[[Category:Hackers]]

User:Jaywalker

2010-08-06T05:35:35Z

Jaywalker:

Justin Williams - iPhone Hacker, Member of the [[Chronic Dev]][[BR]]
Twitter: [http://www.twitter.com/Jaywalker9988 Jaywalker's Twitter][[BR]]
Other Projects: PogoPlank
[[Category:Hackers]]

User:Jaywalker

2010-08-06T05:35:16Z

Jaywalker:

Justin Williams - iPhone Hacker, Member of the [[Chronic Dev]]
Twitter: [http://www.twitter.com/Jaywalker9988 Jaywalker's Twitter]
Other Projects: PogoPlank
[[Category:Hackers]]

The iPhone Wiki - User contributions [en]

Evasi0n

Animate

Animate

User:Jaywalker

User:Jaywalker

User:Jaywalker

User:Jaywalker