The iPhone Wiki - User contributions [en]

Scam Jailbreaks and Unlocks

2018-03-26T17:05:02Z

Vagy: Added pangu11.mobi and moved pangu10.mobi

This is an ''incomplete'' list of community-reported '''scam sites''' that pretend to distribute or sell jailbreaking and unlocking tools/services. (There are many other scam sites not listed here yet.)

If you see a site selling jailbreaking or unlocking software (or asking you to do a survey before downloading), it's a scam. (Companies make money when you fill out surveys, so they promise a jailbreak to get you to fill them out.) Scam sites may also provide free fake tools that actually install adware or other kinds of malware in order to make money from you. Some legitimate forms of unlocking are not free - third-party IMEI unlocks and SIM interposer devices both cost money - but ultrasn0w is always free.

In general, please consider: '''is what the site promises too good to be true?''' Does it promise a new jailbreak for the latest iOS version, when nobody from trusted sources (such as well-known blogs or Reddit or developers on Twitter) is talking about this new jailbreak? When a real new jailbreak gets released, huge numbers of people talk about it - so if you find something people aren't talking about, be very skeptical and check trusted sources.

=== You can contribute to this list ===

Please contribute to this list if you find a scam site. By listing them here, we can help people find good information when they search Google for more information about these sites. If your site is listed here and you believe that's a mistake, you may contact an administrator to request removal.

Be sure not to link to these pages, as all links will boost their Google ranking.

== Jailbreak fakes ==
{| class="wikitable"
|-
! Domain !! Notes
|-
| 3kjailbreak.com || Fake
|-
| 4na.weebly.com || Fake
|-
| 7evasi0n.com || Fake
|-
| 7jailbreak.com || On-device survey scam
|-
| 71jailbreak.com || Fake
|-
| 8jailbreak.net || Fake
|-
| alphajailbreak.com || Survey scam
|-
| alpinejb.blogspot.com || Fake
|-
| apps.appshed.com/[various #] || On-device fake, webclips and profiles
|-
| celtikios7.com || Survey scam
|-
| cyberelevat0r.net || Fake
|-
| cyberelevat0r.us || Fake
|-
| cydia8jailbreak.com || Fake has you download multiple free-to-play apps hoping for in-app purchases
|-
| cydiaappdownloader.wordpress.com || Fake. Virustotal.com analysis: 39 of 56 scanners detect malware.
|-
| cydia-download.us || On-device scam, cost is unknown as it wants to install a profile and I'm not willing to go that far ;p
|-
| cydiadownloaders.com || On-device webclip scam offering $14.99 & $19.99 memberships
|-
| cydiafree.com || Fake
|-
| cydiainstall9.weebly.com || Fake, makes you download apps from the AppStore, promo video has obvious edit.
|-
| cydiajailbreak.org || Scam. Offers links to taig-download.com offering $14.99 & $19.99 memberships
|-
| cydiapro.com || Scam. On-device webclip offers membership for donations of $14.99 & $19.99
|-
| cyrooting.com || Affiliated with cydia-download.us which installs a profile from cyrooting.com
|-
| downgradeios7.com || Fake on-device downgrade tool
|-
| downgradeios8.com || Fake on-device downgrade tool
|-
| downgradeiphone.com || Sells a false promise (universal iOS/baseband downgrade) for $29
|-
| downloadcydiainstaller.weebly.com || Scam, part of cydiapro.com group
|-
| downloadpangu.org || Fake
|-
| ecydia.com || Sells an unspecified tool for $24.99
|-
| en-pangu.com || Fake, affiliated with i0n1c.com and taig9.com
|-
| equsi0n.com || Survey scam
|-
| evad3rs.me || No survey, not selling anything, just has downloads of evasi0n 1.0.7, calling it 1.0.8 and saying it works on iOS 7.1.x. Pointless.
|-
| evad3rsdevteam.com || Survey scam, copy of evasi0n.com
|-
| evad3rs-devteam.com || Copy of evasi0n.com
|-
| evad3rsjb.com || Fake
|-
| evad3rsteam.com || Survey scam
|-
| evasi0nblog.com || Repackaged evasi0n
|-
| evasi0ndevteam.com || Sells evasi0n for $15
|-
| evasi0njb.net || Copy of evasi0n.com
|-
| evasion-jailbreak.com || Survey scam
|-
| evasion-jailbreak7.com || Survey scam
|-
| evasi0n-jailbreak.net || Survey scam, copy of evasi0n.com
|-
| evasi0njailbreak.com || Fake
|-
| evasion7.com || Fake
|-
| evasion7download.info/pangu || Malware. See [https://www.virustotal.com/en/file/fb64d5934ebd946c0a4cd49bb8adb13005a57c0ffb04b77e94d40563b6e001e2/analysis/1418953850/ VirusTotal results]
|-
| evasioniosjailbreak.com || Survey scam
|-
| evasionjailbreak.net || Survey scam, copy of evasi0n.com
|-
| evasionjailbreak.us || Copy of evasi0n.com
|-
| evasionjailbreak7.com || Survey scam
|-
| evasi0n-official.com || Survey scam, loosely copied from evasi0n.com
|-
| evasl0n.blogspot.com || Survey scam, copy of evasi0n.com
|-
| evasi0n7.com/pangu || Fake
|-
| evasion7download.info || Malware. See [https://www.virustotal.com/en/file/fb64d5934ebd946c0a4cd49bb8adb13005a57c0ffb04b77e94d40563b6e001e2/analysis/1418953850/ VirusTotal results]
|-
| evasion7-jailbreak.com || Fake
|-
| evazi0n.net || Fake
|-
| ex0dus-jailbreak.com || Unspecified tool, claims to be developed by @planetbeing and @pimskeks. Survey scam after being strung along downloading a fake tool which requires a patch, said patch download requiring survey completion.
|-
| factory-directme.com || Sells redsn0w for $14.95
|-
| firest0rm.net || Survey scam
|-
| freed0md00r.com || Survey scam
|-
| future7ios7.com || Survey scam
|-
| geeksn0w.net || Copy of geeksn0w.it
|-
| geeksn0w.net/pangu || Fake
|-
| geeksn0wdownload.com || Copy of Geeksn0w.it
|-
| getthebest365.com || Sells unspecified tool for $27.00
|-
| getcydiapro.com || Requires downloading apps
|-
| greenpois0n-gc.blogspot.com || Survey scam
|-
| icysn0w.com || Survey scam
|-
| idevicehacker07.com || Fake, claims to install R4m0n JB for iOS 9
|-
| idowngrade.com || Survey scam
|-
| iemu.org || Fake; previous site for [[iEmu]]
|-
| ievad3rs.com || Survey scam
|-
| ijailbreak-iphone.com || Sells an unspecified tool for $19.95
|-
| ijailbreaking.com || Fake, see iosjailbreakings.com entry
|-
| ijailbreakpro.com || Sells an unspecified tool for $29.90, $39.90 and $49.90
|-
| ijailbreakpro.net || Sells an unspecified tool (for $29.90, $39.90, and $49.90), to which the most expensive purchase is required to use the tool more than once.
|-
| ijailbreaktool.com || Sells an unspecified tool for $24.99
|-
| imessagewin.com || Claims to have iMessage for Windows platform; Survey scam
|-
| ineedjailbreak.com || Sells evasi0n / redsn0w for $24.95
|-
| inj3ct3d.klikkit.co.uk || asking for donations to publish a non-existent jailbreak
|-
| insanelyios.blogspot.com || Downgrade fake, survey scam
|-
| instajailbreaker.com || Sells unspecified tool(s) for $29.95
|-
| installcydia.mobi || Fake. Takes you to appial.com for freemium appstore games
|-
| instantjb.com || Fake. Installs multiple profiles. Sells "premium" cydia for $9.99
|-
| ios-6-1-4-jailbreak.com || Survey scam
|-
| ios-jailbreak.com || Provides fake iOS 9.3 jailbreak tool that includes malware
|-
| ios8jailbreak.org || Fake
|-
| ios8jailbreak.tk || Fake (alternate domain name is ios8-jailbreak.weebly.com)
|-
| ios8jailbreakdownload.net || Survey scam
|-
| ios8pangu.com || Fake, webclip. Wants to install unsigned profile that cannot be removed
|-
| ios9.semijb.com || See semijb.com entry
|-
| ios11.site || Survey scam
|-
| iosjail.com || Survey scam
|-
| iosjailbreak.org || Scam. Links to webclip sites with $14.99 & $19.99 memberships for fake cydia
|-
| iosjailbreak.top || Requires downloading apps
|-
| iosjailbreakings.com || Fake, sends you to ijailbreaking.com
|-
| iosjailbreakpangu.com || Survey scam. Good copy of real pangu site
|-
| ipadjailbreak3.com || Forwards to jailbreakunlock.org
|-
| ipangu.net || Fake. Passworded zip files
|-
| iphone5break.com || Sells unspecified tool for $49.99
|-
| iphonejailbreakplus.com || Sells evasi0n / redsn0w for $29.95
|-
| iphonejailbreak-unlock.com || Sells unspecified tool for $27.00
|-
| iremotejb.com || Fake. AppStore app download scheme to boost app rankings and profit scammer via in-app advertising.
|-
| irevert.wordpress.com/ || Claims to be able to downgrade firmware
|-
| i0n1c.com/jailbreak-ios-9.1 || Fake browser-based tool
|-
| jail-ios.com || App Store app download scam, also a survey scam. They should sell it outright for the trifecta.
|-
| jailbreak.cc || Sells jailbreaking tools
|-
| jailbreak-7.com || App Store app download+play time required, artificially inflating its popularity
|-
| jailbreak-absinthe.com || Survey scam
|-
| jailbreak-ios-7.com || Tells people to go to thejailbreakshop.com
|-
| jailbreak-ios7.net || Sells unspecified tools for $29.95 and $39.95
|-
| jailbreak-my-ipad.org || Sells evasi0n / redsn0w for $29.95 '''per month'''
|-
| jailbreak-my-iphone.com || Sells unspecified tool for $29.97
|-
| jailbreak-official.com || Sells "jailbreak membership" for $19.99
|-
| jailbreak-team.com || Sells an unspecified tool for $29.99
|-
| jailbreak71.com || Fake
|-
| jailbreak7wizz.com || Links to jailbreakthings.com, which in turn links to instajailbreaker.com, which sells unspecified tools for $29.95
|-
| jailbreakandunlock1.pressdoc.com || Blog that is about jailbreak and unlock which uses fake tools.
|-
| jailbreakbj.com || Survey scam
|-
| jailbreakgenie.com || Scam. Sells unspecified jailbreak tool for $9.99
|-
| jailbreakios7untethered.com || Survey scam, all set up in advance for iOS 7
|-
| jailbreakiosnewversion.elitegamershub.com || Survey scam, copied/modified verion of evasi0n7
|-
| jailbreakiphone5s.com || Tells people to go to thejailbreakshop.com
|-
| jailbreakme10.com || ICU's attempt to cash in on Yalu
|-
| jailbreakmenow.net || Sells unspecified tools for $19.95, $29.95, and $39.95
|-
| jailbreaknewiphone.com || Survey scam after being strung along downloading a fake tool
|-
| jailbreaktheipad2.com || Sells unspecified tool for $14.95
|-
| jailbreakthings.com || Exists solely to promote instajailbreaker.com, a scam site
|-
| jailbreakunlock.info || Sells unspecified tools for $19.95, $29.95, and $39.95
|-
| jailbreakunlock.org || Sells evasi0n / redsn0w for $14.95
|-
| jailbroke.info || Sells jailbreaking "solutions"
|-
| jbadd.com || Requires downloading apps
|-
| k33n.mobi || Survey scam
|-
| k33nweb.com || Fake
|-
| latestiphoneunlock.com || Sells an unspecified tool for $9.95 or $29.95
|-
| linxijb.weebly.com || Fake
|-
| newios7jailbreak.com || Directs visitors to unlock-jailbreak.net
|-
| opensn0w.net || Survey scam
|-
| overcast7.com || Survey scam
|-
| pangu8.com || Fake. Installs webclip from semijb.com
|-
| pangu8.us || Scam. Part of the cydiapro.com group of on-device webclip scams with $14.99 & $19.99 "memberships"
|-
| pangu9.net || Scam. Charges paid "memberships"
|-
| pangu9.mobi || Fake
|-
| pangu10.mobi || Claims to have "injected" cydia into App Store apps, makes money off of you installing the apps.
|-
| pangu11.mobi || Fake, see pangu10.mobi
|-
| pangucydia.com || Survey scam
|-
| pangudownload.com || Fake
|-
| pangu-download.net || Fake
|-
| pangu-jailbreak.com || Fake
|-
| pangujailbreak.info || Fake, survey scam, poor things can't even pay their hosting bill :)
|-
| pangujb.blogspot.com || Fake
|-
| pangujb11.com || Survey scam
|-
| pangulive.com || Survey scam
|-
| pangunow.com || Fake
|-
| pod2gblog.blogspot.com || Copy of pod2g's blog
|-
| p0sixspwn.co || Windows version is a malware downloader that eventually downloads the real [[p0sixspwn]]
|-
| posixspwndownload.com || Copy of [[p0sixspwn]]
|-
| ppjailbreak.com || Copy of [[PPJailbreak]] and copyright infringement
|-
| ppjailbreakdownload.com || Fake. Has links to real tools.
|-
| premiumjailbreak.com || Sells jailbreaking tools
|-
| purpletools.wordpress.com || (and all the other sites/people offering similar stuff)<br />Scam - Claims access to Apple's internal VPN
|-
| redpois0n.net || Survey scam
|-
| red-snow.com || Sells unspecified tools for $29.95 and $39.95
|-
| redsn0w-r9-new.blogspot.com || Survey scam, text is ripped from Dev-Team Blog
|-
| ricojb.com || Requires downloading apps
|-
| rocky-racoon.com || Survey scam, copy of Dev-Team Blog
|-
| safera1n.com || Sells an unspecified tool for $24.99
|-
| saigonjb.com || Fake. AppStore app download scheme
|-
| silv3rwind.com || Sells an unspecified tool for $20
|-
| semijb.com || Fake. Does not install "the cydia."
|-
| semirestore.org || Fake redistributions of SemiRestore and SemiRestore7
|-
| spirit-jb.com || Survey scam
|-
| spiritjb.net || Survey scam
|-
| synergyjailbreak.com || Survey scam
|-
| taig-download.com || Scam. On-device webclip offers membership for $14.99 & $19.99
|-
| taig-nc.blogspot.com || Survey scam
|-
| taig8.net || Fake
|-
| taig9.com || Fake
|-
| taig9.mobi || Fake. AppStore app download scheme to boost app rankings and profit scammer via in-app advertising.
|-
| taig10.mobi || Fake. AppStore app download scheme.
|-
| taigremote.com || On-device app-download scam, basically a survey scam
|-
| team7jailbreak.com || On-device survey scam (redirects to 7jailbreak.com). [https://twitter.com/search?q=It%27s%20easy.%20%20Follow%20this%20realy%20simple%20guide%20from%20%40teamjailbreak7&src=typd&f=realtime Known to spam on Twitter]
|-
| theios7jailbreaker.com || Directs people to scam sites (ijailbreakpro.com, appleunlocker.com, ijailbreaktool.com)
|-
| theios8jailbreak.com || Fake
|-
| thejailbreakshop.com || Sells an unspecified tool for $29.97 and $49.97
|-
| trianglejailbreak.com || Sells jailbreaking tool
|-
| u7xjailbreak.com || Survey scam
|-
| unja1l.com || Survey scam
|-
| untetheredjailbreakios8.com || Survey scam
|}

== Scam jailbreak and unlock sites ==

{| class="wikitable"
|-
! Domain !! Notes
|-
| appleunlocker.com || Sells unspecified jailbreaking + unlocking software for $19.95
|-
| bestra1n.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| cheapestiphoneunlock.com || Sells unspecified jailbreaking + unlocking software for $9.99
|-
| deblocage-iphone-fr.com || Sells unspecified unlocking software for €29.99
|-
| desbloquear-iphone-pro.com || Sells unspecified unlocking software for €29.99
|-
| e-imeiunlock.com || Survey scam
|-
| easyiphoneunlocking.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| easyunlockiphone.net || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| easyunlockingsolutions.com || Sells unspecified unlocking software for $19.99
|-
| how-jailbreak-iphone.com || Sells unspecified jailbreaking + unlocking software for $19.95
|-
| ih8sn0w.mobi || Sells who knows what for 20 Euros. Quite funny, but don't be a sucker.
|-
| ijailbreakpro.com || Sells redsn0w for $29.90, $39.90, or $49.90
|-
| ijailbreaktool.com || Sells unspecified jailbreaking software for $24.99
|-
| ios7jailbreaker.net || Survey scam
|-
| ios7jailbreak.fr || Survey scam
|-
| iphone-unlocker.org || Survey scam
|-
| iphone-instant-unlock.com || Sells unspecified unlocking software for $14.95
|-
| iphone-unlock-pro.com || Redirects to unlock4iphone.com, desbloquear-iphone-pro.com, and deblocage-iphone-fr.com
|-
| iphone-unlocker-pro.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| iphone-unlock-me.com || Sells unspecified unlocking software for $14.95
|-
| iphone-unlockme.com || Sells unspecified unlocking software for $14.95
|-
| iphone5break.com || Sells unspecified jailbreaking + unlocking software for $49.99
|-
| iphoneimei.net || Fake
|-
| iphoneunlocker.org.uk || Sells unspecified jailbreaking + unlocking software for £14.99
|-
| iphoneunlockersoftware.com || Sells unspecified jailbreaking + unlocking software for $24.97
|-
| iphoneunlockplus.com || Sells unspecified unlocking software for $22.99
|-
| iphoneunlockwiz.com || Sells unspecified jailbreaking + unlocking software for $29.97
|-
| jailbreakandunlockiphones.com || Glowing reviews of, and links to, scam sites which are mostly offline now
|-
| jailbreakiphone5express.com || Links to ijailbreakpro.com, appleunlocker.com and ijailbreaktool.com
|-
| myappledownload.com || Sells undefined non-existing jailbreaks, unlocks, downgrades for $19.99
|-
| mydowngrade.com || Sells undefined non-existing jailbreaks, unlocks, downgrades for $19.99
|-
| myunlocker.org || On-device survey / app download scam
|-
| officialiphoneunlock.co.uk || Fake
|-
| phoneunlockguy.com || Sells unspecified jailbreaking + unlocking software for $14.95
|-
| solutions-directme.com || Sells unspecified jailbreaking software for $14.95
|-
| superiorsim.com || Sells SIM interposers, reported to be a scam by various websites
|-
| superunlockiphone.com || Sells unspecified jailbreaking + unlocking software for £14.99
|-
| tracyandmatt.co.uk || Refers victims to unlock-jailbreak.net
|-
| transx-solutions.com || Sells software for $14.95 which does not say what it is. Also requires a download
|-
| trusted-iphone-unlocker.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| ultimateiphoneunlocker.com || Sells unspecified unlocking software for $19.95
|-
| unlock-your-phones.com || Sells evasi0n as an unlock for €8.99
|-
| unlock-apple-iphone.com || Sells unspecified jailbreaking + unlocking software for $29.99
|-
| unlock-appleiphone.com || Sells IMEI unlocks for ANY carrier (including Singtel, which is factory unlocked, and including Sprint, which is nearly impossible, and certainly not done for that price) for $29.95
|-
| unlock-ijailbreak.net || Added a letter to the URL, otherwise it's the same site as unlock-jailbreak.net
|-
| unlock-iphone.info || Fake. Claims that donating will expedite your request.
|-
| unlock-jailbreak.net || Sells unspecified unlocking software for $24.99
|-
| unlock-jailbreak-iphone.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlock-the-iphone.com || Sells unspecified jailbreaking + unlocking software for $29.95, $37.95, or $49
|-
| unlock4iphone.com || Sells unspecified unlocking software for $29.99
|-
| unlockimeiiphone.com || Sells unspecified jailbreaking + unlocking tool for $19.95
|-
| unlockingfox.com || Survey scam
|-
| unlockiphone.net || Sells unspecified jailbreaking + unlocking tool
|-
| unlockiphone.org || Sells unspecified unlocking software for $24.95
|-
| unlockiphoneios5.com || Sells unspecified jailbreaking + unlocking software for $14.95
|-
| unlockiphonenow.org || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockiphonepro.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockjailbreaktool.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockmecentral.com || Sells jailbreaking "membership"
|-
| ultrasn0wtool.com || Claims to unlock via a GUI app
|-
| ziphone.org || Directs visitors to iphone-unlocker-pro.com
|}

Scam Jailbreaks and Unlocks

2018-03-25T15:09:10Z

Vagy: Added some fakes

This is an ''incomplete'' list of community-reported '''scam sites''' that pretend to distribute or sell jailbreaking and unlocking tools/services. (There are many other scam sites not listed here yet.)

If you see a site selling jailbreaking or unlocking software (or asking you to do a survey before downloading), it's a scam. (Companies make money when you fill out surveys, so they promise a jailbreak to get you to fill them out.) Scam sites may also provide free fake tools that actually install adware or other kinds of malware in order to make money from you. Some legitimate forms of unlocking are not free - third-party IMEI unlocks and SIM interposer devices both cost money - but ultrasn0w is always free.

In general, please consider: '''is what the site promises too good to be true?''' Does it promise a new jailbreak for the latest iOS version, when nobody from trusted sources (such as well-known blogs or Reddit or developers on Twitter) is talking about this new jailbreak? When a real new jailbreak gets released, huge numbers of people talk about it - so if you find something people aren't talking about, be very skeptical and check trusted sources.

=== You can contribute to this list ===

Please contribute to this list if you find a scam site. By listing them here, we can help people find good information when they search Google for more information about these sites. If your site is listed here and you believe that's a mistake, you may contact an administrator to request removal.

Be sure not to link to these pages, as all links will boost their Google ranking.

== Jailbreak fakes ==
{| class="wikitable"
|-
! Domain !! Notes
|-
| 3kjailbreak.com || Fake
|-
| 4na.weebly.com || Fake
|-
| 7evasi0n.com || Fake
|-
| 7jailbreak.com || On-device survey scam
|-
| 71jailbreak.com || Fake
|-
| 8jailbreak.net || Fake
|-
| alphajailbreak.com || Survey scam
|-
| alpinejb.blogspot.com || Fake
|-
| apps.appshed.com/[various #] || On-device fake, webclips and profiles
|-
| celtikios7.com || Survey scam
|-
| cyberelevat0r.net || Fake
|-
| cyberelevat0r.us || Fake
|-
| cydia8jailbreak.com || Fake has you download multiple free-to-play apps hoping for in-app purchases
|-
| cydiaappdownloader.wordpress.com || Fake. Virustotal.com analysis: 39 of 56 scanners detect malware.
|-
| cydia-download.us || On-device scam, cost is unknown as it wants to install a profile and I'm not willing to go that far ;p
|-
| cydiadownloaders.com || On-device webclip scam offering $14.99 & $19.99 memberships
|-
| cydiafree.com || Fake
|-
| cydiainstall9.weebly.com || Fake, makes you download apps from the AppStore, promo video has obvious edit.
|-
| cydiajailbreak.org || Scam. Offers links to taig-download.com offering $14.99 & $19.99 memberships
|-
| cydiapro.com || Scam. On-device webclip offers membership for donations of $14.99 & $19.99
|-
| cyrooting.com || Affiliated with cydia-download.us which installs a profile from cyrooting.com
|-
| downgradeios7.com || Fake on-device downgrade tool
|-
| downgradeios8.com || Fake on-device downgrade tool
|-
| downgradeiphone.com || Sells a false promise (universal iOS/baseband downgrade) for $29
|-
| downloadcydiainstaller.weebly.com || Scam, part of cydiapro.com group
|-
| downloadpangu.org || Fake
|-
| ecydia.com || Sells an unspecified tool for $24.99
|-
| en-pangu.com || Fake, affiliated with i0n1c.com and taig9.com
|-
| equsi0n.com || Survey scam
|-
| evad3rs.me || No survey, not selling anything, just has downloads of evasi0n 1.0.7, calling it 1.0.8 and saying it works on iOS 7.1.x. Pointless.
|-
| evad3rsdevteam.com || Survey scam, copy of evasi0n.com
|-
| evad3rs-devteam.com || Copy of evasi0n.com
|-
| evad3rsjb.com || Fake
|-
| evad3rsteam.com || Survey scam
|-
| evasi0nblog.com || Repackaged evasi0n
|-
| evasi0ndevteam.com || Sells evasi0n for $15
|-
| evasi0njb.net || Copy of evasi0n.com
|-
| evasion-jailbreak.com || Survey scam
|-
| evasion-jailbreak7.com || Survey scam
|-
| evasi0n-jailbreak.net || Survey scam, copy of evasi0n.com
|-
| evasi0njailbreak.com || Fake
|-
| evasion7.com || Fake
|-
| evasion7download.info/pangu || Malware. See [https://www.virustotal.com/en/file/fb64d5934ebd946c0a4cd49bb8adb13005a57c0ffb04b77e94d40563b6e001e2/analysis/1418953850/ VirusTotal results]
|-
| evasioniosjailbreak.com || Survey scam
|-
| evasionjailbreak.net || Survey scam, copy of evasi0n.com
|-
| evasionjailbreak.us || Copy of evasi0n.com
|-
| evasionjailbreak7.com || Survey scam
|-
| evasi0n-official.com || Survey scam, loosely copied from evasi0n.com
|-
| evasl0n.blogspot.com || Survey scam, copy of evasi0n.com
|-
| evasi0n7.com/pangu || Fake
|-
| evasion7download.info || Malware. See [https://www.virustotal.com/en/file/fb64d5934ebd946c0a4cd49bb8adb13005a57c0ffb04b77e94d40563b6e001e2/analysis/1418953850/ VirusTotal results]
|-
| evasion7-jailbreak.com || Fake
|-
| evazi0n.net || Fake
|-
| ex0dus-jailbreak.com || Unspecified tool, claims to be developed by @planetbeing and @pimskeks. Survey scam after being strung along downloading a fake tool which requires a patch, said patch download requiring survey completion.
|-
| factory-directme.com || Sells redsn0w for $14.95
|-
| firest0rm.net || Survey scam
|-
| freed0md00r.com || Survey scam
|-
| future7ios7.com || Survey scam
|-
| geeksn0w.net || Copy of geeksn0w.it
|-
| geeksn0w.net/pangu || Fake
|-
| geeksn0wdownload.com || Copy of Geeksn0w.it
|-
| getthebest365.com || Sells unspecified tool for $27.00
|-
| getcydiapro.com || Requires downloading apps
|-
| greenpois0n-gc.blogspot.com || Survey scam
|-
| icysn0w.com || Survey scam
|-
| idevicehacker07.com || Fake, claims to install R4m0n JB for iOS 9
|-
| idowngrade.com || Survey scam
|-
| iemu.org || Fake; previous site for [[iEmu]]
|-
| ievad3rs.com || Survey scam
|-
| ijailbreak-iphone.com || Sells an unspecified tool for $19.95
|-
| ijailbreaking.com || Fake, see iosjailbreakings.com entry
|-
| ijailbreakpro.com || Sells an unspecified tool for $29.90, $39.90 and $49.90
|-
| ijailbreakpro.net || Sells an unspecified tool (for $29.90, $39.90, and $49.90), to which the most expensive purchase is required to use the tool more than once.
|-
| ijailbreaktool.com || Sells an unspecified tool for $24.99
|-
| imessagewin.com || Claims to have iMessage for Windows platform; Survey scam
|-
| ineedjailbreak.com || Sells evasi0n / redsn0w for $24.95
|-
| inj3ct3d.klikkit.co.uk || asking for donations to publish a non-existent jailbreak
|-
| insanelyios.blogspot.com || Downgrade fake, survey scam
|-
| instajailbreaker.com || Sells unspecified tool(s) for $29.95
|-
| installcydia.mobi || Fake. Takes you to appial.com for freemium appstore games
|-
| instantjb.com || Fake. Installs multiple profiles. Sells "premium" cydia for $9.99
|-
| ios-6-1-4-jailbreak.com || Survey scam
|-
| ios-jailbreak.com || Provides fake iOS 9.3 jailbreak tool that includes malware
|-
| ios8jailbreak.org || Fake
|-
| ios8jailbreak.tk || Fake (alternate domain name is ios8-jailbreak.weebly.com)
|-
| ios8jailbreakdownload.net || Survey scam
|-
| ios8pangu.com || Fake, webclip. Wants to install unsigned profile that cannot be removed
|-
| ios9.semijb.com || See semijb.com entry
|-
| ios11.site || Survey scam
|-
| iosjail.com || Survey scam
|-
| iosjailbreak.org || Scam. Links to webclip sites with $14.99 & $19.99 memberships for fake cydia
|-
| iosjailbreak.top || Requires downloading apps
|-
| iosjailbreakings.com || Fake, sends you to ijailbreaking.com
|-
| iosjailbreakpangu.com || Survey scam. Good copy of real pangu site
|-
| ipadjailbreak3.com || Forwards to jailbreakunlock.org
|-
| ipangu.net || Fake. Passworded zip files
|-
| iphone5break.com || Sells unspecified tool for $49.99
|-
| iphonejailbreakplus.com || Sells evasi0n / redsn0w for $29.95
|-
| iphonejailbreak-unlock.com || Sells unspecified tool for $27.00
|-
| iremotejb.com || Fake. AppStore app download scheme to boost app rankings and profit scammer via in-app advertising.
|-
| irevert.wordpress.com/ || Claims to be able to downgrade firmware
|-
| i0n1c.com/jailbreak-ios-9.1 || Fake browser-based tool
|-
| jail-ios.com || App Store app download scam, also a survey scam. They should sell it outright for the trifecta.
|-
| jailbreak.cc || Sells jailbreaking tools
|-
| jailbreak-7.com || App Store app download+play time required, artificially inflating its popularity
|-
| jailbreak-absinthe.com || Survey scam
|-
| jailbreak-ios-7.com || Tells people to go to thejailbreakshop.com
|-
| jailbreak-ios7.net || Sells unspecified tools for $29.95 and $39.95
|-
| jailbreak-my-ipad.org || Sells evasi0n / redsn0w for $29.95 '''per month'''
|-
| jailbreak-my-iphone.com || Sells unspecified tool for $29.97
|-
| jailbreak-official.com || Sells "jailbreak membership" for $19.99
|-
| jailbreak-team.com || Sells an unspecified tool for $29.99
|-
| jailbreak71.com || Fake
|-
| jailbreak7wizz.com || Links to jailbreakthings.com, which in turn links to instajailbreaker.com, which sells unspecified tools for $29.95
|-
| jailbreakandunlock1.pressdoc.com || Blog that is about jailbreak and unlock which uses fake tools.
|-
| jailbreakbj.com || Survey scam
|-
| jailbreakgenie.com || Scam. Sells unspecified jailbreak tool for $9.99
|-
| jailbreakios7untethered.com || Survey scam, all set up in advance for iOS 7
|-
| jailbreakiosnewversion.elitegamershub.com || Survey scam, copied/modified verion of evasi0n7
|-
| jailbreakiphone5s.com || Tells people to go to thejailbreakshop.com
|-
| jailbreakme10.com || ICU's attempt to cash in on Yalu
|-
| jailbreakmenow.net || Sells unspecified tools for $19.95, $29.95, and $39.95
|-
| jailbreaknewiphone.com || Survey scam after being strung along downloading a fake tool
|-
| jailbreaktheipad2.com || Sells unspecified tool for $14.95
|-
| jailbreakthings.com || Exists solely to promote instajailbreaker.com, a scam site
|-
| jailbreakunlock.info || Sells unspecified tools for $19.95, $29.95, and $39.95
|-
| jailbreakunlock.org || Sells evasi0n / redsn0w for $14.95
|-
| jailbroke.info || Sells jailbreaking "solutions"
|-
| jbadd.com || Requires downloading apps
|-
| k33n.mobi || Survey scam
|-
| k33nweb.com || Fake
|-
| latestiphoneunlock.com || Sells an unspecified tool for $9.95 or $29.95
|-
| linxijb.weebly.com || Fake
|-
| newios7jailbreak.com || Directs visitors to unlock-jailbreak.net
|-
| opensn0w.net || Survey scam
|-
| overcast7.com || Survey scam
|-
| pangu8.com || Fake. Installs webclip from semijb.com
|-
| pangu8.us || Scam. Part of the cydiapro.com group of on-device webclip scams with $14.99 & $19.99 "memberships"
|-
| pangu9.net || Scam. Charges paid "memberships"
|-
| pangu9.mobi || Fake
|-
| pangucydia.com || Survey scam
|-
| pangudownload.com || Fake
|-
| pangu-download.net || Fake
|-
| pangu-jailbreak.com || Fake
|-
| pangujailbreak.info || Fake, survey scam, poor things can't even pay their hosting bill :)
|-
| pangujb.blogspot.com || Fake
|-
| pangujb11.com || Survey scam
|-
| pangulive.com || Survey scam
|-
| pangunow.com || Fake
|-
| pod2gblog.blogspot.com || Copy of pod2g's blog
|-
| p0sixspwn.co || Windows version is a malware downloader that eventually downloads the real [[p0sixspwn]]
|-
| posixspwndownload.com || Copy of [[p0sixspwn]]
|-
| ppjailbreak.com || Copy of [[PPJailbreak]] and copyright infringement
|-
| ppjailbreakdownload.com || Fake. Has links to real tools.
|-
| premiumjailbreak.com || Sells jailbreaking tools
|-
| purpletools.wordpress.com || (and all the other sites/people offering similar stuff)<br />Scam - Claims access to Apple's internal VPN
|-
| redpois0n.net || Survey scam
|-
| red-snow.com || Sells unspecified tools for $29.95 and $39.95
|-
| redsn0w-r9-new.blogspot.com || Survey scam, text is ripped from Dev-Team Blog
|-
| ricojb.com || Requires downloading apps
|-
| rocky-racoon.com || Survey scam, copy of Dev-Team Blog
|-
| safera1n.com || Sells an unspecified tool for $24.99
|-
| saigonjb.com || Fake. AppStore app download scheme
|-
| silv3rwind.com || Sells an unspecified tool for $20
|-
| semijb.com || Fake. Does not install "the cydia."
|-
| semirestore.org || Fake redistributions of SemiRestore and SemiRestore7
|-
| spirit-jb.com || Survey scam
|-
| spiritjb.net || Survey scam
|-
| synergyjailbreak.com || Survey scam
|-
| taig-download.com || Scam. On-device webclip offers membership for $14.99 & $19.99
|-
| taig-nc.blogspot.com || Survey scam
|-
| taig8.net || Fake
|-
| taig9.com || Fake
|-
| taig9.mobi || Fake. AppStore app download scheme to boost app rankings and profit scammer via in-app advertising.
|-
| taig10.mobi || Fake. AppStore app download scheme.
|-
| taigremote.com || On-device app-download scam, basically a survey scam
|-
| team7jailbreak.com || On-device survey scam (redirects to 7jailbreak.com). [https://twitter.com/search?q=It%27s%20easy.%20%20Follow%20this%20realy%20simple%20guide%20from%20%40teamjailbreak7&src=typd&f=realtime Known to spam on Twitter]
|-
| theios7jailbreaker.com || Directs people to scam sites (ijailbreakpro.com, appleunlocker.com, ijailbreaktool.com)
|-
| theios8jailbreak.com || Fake
|-
| thejailbreakshop.com || Sells an unspecified tool for $29.97 and $49.97
|-
| trianglejailbreak.com || Sells jailbreaking tool
|-
| u7xjailbreak.com || Survey scam
|-
| unja1l.com || Survey scam
|-
| untetheredjailbreakios8.com || Survey scam
|}

== Scam jailbreak and unlock sites ==

{| class="wikitable"
|-
! Domain !! Notes
|-
| appleunlocker.com || Sells unspecified jailbreaking + unlocking software for $19.95
|-
| bestra1n.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| cheapestiphoneunlock.com || Sells unspecified jailbreaking + unlocking software for $9.99
|-
| deblocage-iphone-fr.com || Sells unspecified unlocking software for €29.99
|-
| desbloquear-iphone-pro.com || Sells unspecified unlocking software for €29.99
|-
| e-imeiunlock.com || Survey scam
|-
| easyiphoneunlocking.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| easyunlockiphone.net || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| easyunlockingsolutions.com || Sells unspecified unlocking software for $19.99
|-
| how-jailbreak-iphone.com || Sells unspecified jailbreaking + unlocking software for $19.95
|-
| ih8sn0w.mobi || Sells who knows what for 20 Euros. Quite funny, but don't be a sucker.
|-
| ijailbreakpro.com || Sells redsn0w for $29.90, $39.90, or $49.90
|-
| ijailbreaktool.com || Sells unspecified jailbreaking software for $24.99
|-
| ios7jailbreaker.net || Survey scam
|-
| ios7jailbreak.fr || Survey scam
|-
| iphone-unlocker.org || Survey scam
|-
| iphone-instant-unlock.com || Sells unspecified unlocking software for $14.95
|-
| iphone-unlock-pro.com || Redirects to unlock4iphone.com, desbloquear-iphone-pro.com, and deblocage-iphone-fr.com
|-
| iphone-unlocker-pro.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| iphone-unlock-me.com || Sells unspecified unlocking software for $14.95
|-
| iphone-unlockme.com || Sells unspecified unlocking software for $14.95
|-
| iphone5break.com || Sells unspecified jailbreaking + unlocking software for $49.99
|-
| iphoneimei.net || Fake
|-
| iphoneunlocker.org.uk || Sells unspecified jailbreaking + unlocking software for £14.99
|-
| iphoneunlockersoftware.com || Sells unspecified jailbreaking + unlocking software for $24.97
|-
| iphoneunlockplus.com || Sells unspecified unlocking software for $22.99
|-
| iphoneunlockwiz.com || Sells unspecified jailbreaking + unlocking software for $29.97
|-
| jailbreakandunlockiphones.com || Glowing reviews of, and links to, scam sites which are mostly offline now
|-
| jailbreakiphone5express.com || Links to ijailbreakpro.com, appleunlocker.com and ijailbreaktool.com
|-
| myappledownload.com || Sells undefined non-existing jailbreaks, unlocks, downgrades for $19.99
|-
| mydowngrade.com || Sells undefined non-existing jailbreaks, unlocks, downgrades for $19.99
|-
| myunlocker.org || On-device survey / app download scam
|-
| officialiphoneunlock.co.uk || Fake
|-
| phoneunlockguy.com || Sells unspecified jailbreaking + unlocking software for $14.95
|-
| solutions-directme.com || Sells unspecified jailbreaking software for $14.95
|-
| superiorsim.com || Sells SIM interposers, reported to be a scam by various websites
|-
| superunlockiphone.com || Sells unspecified jailbreaking + unlocking software for £14.99
|-
| tracyandmatt.co.uk || Refers victims to unlock-jailbreak.net
|-
| transx-solutions.com || Sells software for $14.95 which does not say what it is. Also requires a download
|-
| trusted-iphone-unlocker.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| ultimateiphoneunlocker.com || Sells unspecified unlocking software for $19.95
|-
| unlock-your-phones.com || Sells evasi0n as an unlock for €8.99
|-
| unlock-apple-iphone.com || Sells unspecified jailbreaking + unlocking software for $29.99
|-
| unlock-appleiphone.com || Sells IMEI unlocks for ANY carrier (including Singtel, which is factory unlocked, and including Sprint, which is nearly impossible, and certainly not done for that price) for $29.95
|-
| unlock-ijailbreak.net || Added a letter to the URL, otherwise it's the same site as unlock-jailbreak.net
|-
| unlock-iphone.info || Fake. Claims that donating will expedite your request.
|-
| unlock-jailbreak.net || Sells unspecified unlocking software for $24.99
|-
| unlock-jailbreak-iphone.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlock-the-iphone.com || Sells unspecified jailbreaking + unlocking software for $29.95, $37.95, or $49
|-
| unlock4iphone.com || Sells unspecified unlocking software for $29.99
|-
| unlockimeiiphone.com || Sells unspecified jailbreaking + unlocking tool for $19.95
|-
| unlockingfox.com || Survey scam
|-
| unlockiphone.net || Sells unspecified jailbreaking + unlocking tool
|-
| unlockiphone.org || Sells unspecified unlocking software for $24.95
|-
| unlockiphoneios5.com || Sells unspecified jailbreaking + unlocking software for $14.95
|-
| unlockiphonenow.org || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockiphonepro.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockjailbreaktool.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockmecentral.com || Sells jailbreaking "membership"
|-
| ultrasn0wtool.com || Claims to unlock via a GUI app
|-
| ziphone.org || Directs visitors to iphone-unlocker-pro.com
|-
| pangu10.mobi || Claims to have "injected" cydia into App Store apps, makes money off of you installing the apps.
|}

Jailbreak Exploits

2018-01-18T09:54:17Z

Vagy: Link LiberiOS

This page lists the '''exploits''' used in [[jailbreak]]s.

== Common exploits ==
These exploits are not dependent on any firmware; as such, they are used in numerous jailbreaking programs.

* [[Pwnage]] + [[Pwnage 2.0]] (together to jailbreak the [[M68AP|iPhone]], [[N45AP|iPod touch]], and [[N82AP|iPhone 3G]])
* [[ARM7 Go]] (from iOS 2.1.1) (for [[tethered jailbreak]] on [[N72AP|iPod touch (2nd generation)]])
* [[0x24000 Segment Overflow]] (for [[untethered jailbreak]] on [[N88AP|iPhone 3GS]] with [[Bootrom 359.3|old bootrom]] and [[N72AP|iPod touch (2nd generation)]] with [[Bootrom 240.4|old bootrom]]; another exploit as the [[limera1n Exploit]] is required)
* [[limera1n Exploit]] (for [[tethered jailbreak]] on [[N88AP|iPhone 3GS]], [[N18AP|iPod touch (3rd generation)]], [[K48AP|iPad]], [[iPhone 4]], [[N81AP|iPod touch (4th generation)]] and [[K66AP|Apple TV (2nd generation)]])
* [[usb_control_msg(0xA1, 1) Exploit]] (also known as "steaks4uce") (for [[tethered jailbreak]] on [[N72AP|iPod touch (2nd generation)]])

== Jailbreak Programs ==
=== [[PwnageTool]] (2.0 - 5.1.1) ===
* uses different common exploits
* uses the exploits listed below to untether up to iOS 5.1.1

=== [[redsn0w]] (3.0 - 6.0) ===
* uses different common exploits
* uses the same exploits as [[Absinthe|Absinthe]] and [[Absinthe|Absinthe 2.0]] to jailbreak iOS 5.0/5.0.1 and 5.1.1
* uses the exploits listed below to untether up to iOS 5.1.1

=== [[sn0wbreeze]] (3.1.3 - 6.1.3) ===
* uses different common exploits
* uses the exploits listed below to untether up to iOS 6.1.2

== Programs used to jailbreak 1.x ==
=== [[AppTapp Installer]] (1.0 / 1.0.1 / 1.0.2) ===
* iBoot <code>cp</code>-command exploit

=== [[iBrickr]] (1.0 / 1.0.1 / 1.0.2) ===
* iBoot <code>cp</code>-command exploit

=== [[AppSnapp]]/[[JailbreakMe|JailbreakMe 1.0]] (1.0 / 1.0.1 / 1.0.2 / 1.1.1) ===
* [[LibTiff|libtiff exploit]] (Adapted from the PSP scene, used by [[JailbreakMe]]) ({{cve|2006-3459}})

=== [[mknod|OktoPrep]] (1.1.2) ===
"Upgrade" to 1.1.2 from a jailbroken 1.1.1
* [[mknod]]

=== [[Soft Upgrade]] (1.1.3) ===
"Upgrade" to 1.1.3 from a running jailbroken 1.1.2

=== [[ZiPhone]] (1.1.3 / 1.1.4 /1.1.5) ===
* [[Ramdisk Hack]]

=== [[iLiberty+|iLiberty / iLiberty+]] (1.1.3 / 1.1.4 /1.1.5) ===

== Programs used to jailbreak 2.x ==
=== [[QuickPwn]] (2.0 - 2.2.1) ===
* uses [[Pwnage]] and [[Pwnage 2.0]]

=== [[Redsn0w Lite]] (2.1.1) ===
* [[ARM7 Go]] (for [[N72AP|iPod touch (2nd generation)]] only)

== Programs used to jailbreak 3.x ==
=== [[purplera1n]] (3.0) ===
* [[iBoot Environment Variable Overflow]] ({{cve|2009-2795}})
* uses [[0x24000 Segment Overflow]]

=== [[blackra1n]] (3.1.2) ===
* [[usb_control_msg(0x21, 2) Exploit]] ({{cve|2010-0038}})
* uses [[0x24000 Segment Overflow]]

=== [[Spirit]] (3.1.2 / 3.1.3 / 3.2) ===
* [[MobileBackup Copy Exploit]]
* [[Incomplete Codesign Exploit]]
* [[BPF_STX Kernel Write Exploit]]

=== [[Star|JailbreakMe 2.0 / Star]] (3.1.2 / 3.1.3 / 3.2 / 3.2.1) ===
* [[Malformed CFF Vulnerability]] ({{cve|2010-1797}})
* [[Incomplete Codesign Exploit]]
* [[IOSurface Kernel Exploit]] ({{cve|2010-2973}})

=== [[limera1n]] / [[greenpois0n (jailbreak)|greenpois0n]] (3.2.2) ===
* uses different common exploits
* [[Packet Filter Kernel Exploit]]

== Programs used to jailbreak 4.x ==
=== [[Star|JailbreakMe 2.0 / Star]] (4.0 / 4.0.1) ===
* [[Malformed CFF Vulnerability]] ({{cve|2010-1797}})
* [[Incomplete Codesign Exploit]]
* [[IOSurface Kernel Exploit]] ({{cve|2010-2973}})

=== [[limera1n]] (4.0 / 4.0.1 / 4.0.2 / 4.1) ===
* uses different common exploits
* [[Packet Filter Kernel Exploit]]

=== [[greenpois0n (jailbreak)|greenpois0n]] (4.1) ===
* uses different common exploits
* [[Packet Filter Kernel Exploit]]

=== [[greenpois0n (jailbreak)|greenpois0n]] (4.2.1) ===
* uses different common exploits
* [[HFS Legacy Volume Name Stack Buffer Overflow]]

=== [[Saffron|JailbreakMe 3.0 / Saffron]] (4.2.6 / 4.2.7 / 4.2.8) ===
* [[T1 Font Integer Overflow]] ({{cve|2011-0226}})
* [[HFS Legacy Volume Name Stack Buffer Overflow]]

=== [[Saffron|JailbreakMe 3.0 / Saffron]] (4.3 / 4.3.1 / 4.3.2 / 4.3.3) ===
Except for the [[N18AP|iPod touch (3rd generation)]] on iOS 4.3.1.
* [[T1 Font Integer Overflow]] ({{cve|2011-0226}})
* [[IOMobileFrameBuffer Privilege Escalation Exploit]] ({{cve|2011-0227}})

=== i0nic's Untether (4.3.1 / 4.3.2 / 4.3.3) ===
used in [[redsn0w]] to untether iOS 4.3.1 / 4.3.2 / 4.3.3
* [[ndrv_setspec() Integer Overflow]]

== Programs used to jailbreak 5.x ==
=== [[unthredera1n]] (5.0 / 5.0.1 / 5.1 / 5.1.1) ===
Except for the [[iPad (3rd generation)]]
* MobileBackup2 Copy Exploit
* a new Packet Filter Kernel Exploit ({{cve|2012-3728}})
* [[AMFID code signing evasion]] ({{cve|2013-0977}})
* [[launchd.conf untether]]
* [[Timezone Vulnerability]]

=== [[Absinthe]] (5.0 on [[N94AP|iPhone 4S]] only / 5.0.1 on [[iPad 2]] and [[iPhone 4S]]) ===
* [[Racoon String Format Overflow Exploit]] ({{cve|2012-0646}}) (used both for payload injection and untether)
* [[HFS Heap Overflow]] ({{cve|2012-0642}})
* unknown exploit ({{cve|2012-0643}})

=== [[Corona|Corona Untether]] (5.0.1) ===
* [[Racoon String Format Overflow Exploit]] ({{cve|2012-0646}})
* [[HFS Heap Overflow]] ({{cve|2012-0642}})
* unknown exploit ({{cve|2012-0643}})

=== [[Absinthe|Absinthe 2.0]] and [[Rocky Racoon|Rocky Racoon Untether]] (5.1.1) ===
* a new Packet Filter Kernel Exploit ({{cve|2012-3728}})
* Racoon DNS4/WINS4 table buffer overflow ({{cve|2012-3727}})
* MobileBackup2 Copy Exploit

== Programs used to jailbreak 6.x ==
=== [[evasi0n]] (6.0 / 6.0.1 / 6.0.2 / 6.1 / 6.1.1 / 6.1.2) ===
* [[Symbolic Link Vulnerability]] ({{cve|2013-0979}})
* [[Timezone Vulnerability]]
* [[Shebang Trick]] ({{cve|2013-5154}})
* [[AMFID code signing evasion]]
* [[launchd.conf untether]]
* [[IOUSBDeviceFamily Vulnerability]] ({{cve|2013-0981}})
* [[ARM Exception Vector Info Leak]] ({{cve|2013-0978}})
* [[dynamic memmove() locating]]
* [[vm_map_copy_t corruption for arbitrary memory disclosure]]
* [[kernel memory write via ROP gadget]]
* [[Overlapping Segment Attack]] ({{cve|2013-0977}})

=== [[p0sixspwn]] (6.1.3 / 6.1.4 / 6.1.5 / 6.1.6) ===
* [[posix_spawn kernel information leak]] ({{cve|2013-3954}}) (by [[i0n1c]])
* [[posix_spawn kernel exploit]] ({{cve|2013-3954}}) (by [[i0n1c]])
* [[mach_msg_ool_descriptor_ts for heap shaping]] ({{cve|2013-3953}})
* [[AMFID_code_signing_evasi0n7]] ({{cve|2014-1273}})
* [[DeveloperDiskImage race condition]] (by [[comex]])
* [[launchd.conf untether]]

== Programs used to jailbreak 7.x ==
=== [[evasi0n7]] (7.0 / 7.0.1 / 7.0.2 / 7.0.3 / 7.0.4 / 7.0.5 / 7.0.6) ===
{{Section Stub}}
* [[Symbolic Link Vulnerability]] ({{cve|2013-5133}})
* [[AMFID_code_signing_evasi0n7]] ({{cve|2014-1273}})
* CrashHouseKeeping chmod vulnarability ({{cve|2014-1272}})
* ptmx_get_ioctl ioctl crafted call ({{cve|2014-1278}})

=== [[Geeksn0w]] (7.1 / 7.1.1) ===
* [[limera1n]]'s bootrom exploit ([[Tethered jailbreak]]) on [[iPhone 4]]

=== [[Pangu]] (7.1 / 7.1.1 / 7.1.2) ===
* Mach-O OSBundleHeaders info leak ({{cve|2014-4491}}) (Pangu v1.0.0)
* AppleKeyStore::initUserClient info leak ({{cve|2014-4407}}) (Pangu >v1.0.0)
* break_early_random (by [[i0n1c]] and Tarjei Mandt of Azimuth) ({{cve|2014-4422}})
* mach_port_kobject exploit {{cve|2014-4496}} - used to recover the permutation value and addresses of kernel objects
* IOSharedDataQueue notification port overwrite ({{cve|2014-4461}})
* "syslogd chown" vulnerability
* enterprise certificate (no real exploit, used for initial "unsigned" code execution)
* "foo_extracted" symlink vulnerability (used to write to /var) ({{cve|2014-4386}})
* /tmp/bigfile (a big file for improvement of the reliability of a race condition)
* VoIP backgrounding trick (used to auto restart the app)
* hidden segment attack

== Programs used to jailbreak 8.x ==
=== [[Pangu8]] (8.0 / 8.0.1 / 8.0.2 / 8.1) ===
* an exploit for a bug in /usr/libexec/neagent (source @iH8sn0w)
* enterprise certificate (inside the IPA)
* a kind of dylib injection into a system process (see IPA)
* a dmg mount command (looks like the Developer DMG) (syslog while jailbreaking)
* a sandboxing problem in debugserver ({{cve|2014-4457}})
* mach_port_kobject exploit {{cve|2014-4496}} - used to recover the permutation value and addresses of kernel objects
* the same kernel exploit as used in [[Pangu|the first Pangu]] ({{cve|2014-4461}}) (source @iH8sn0w) - now used to also leak kernel memory (source @Morpheus______)
* enable-dylibs-to-override-cache
* a new ovelapping segment attack ({{cve|2014-4455}})

=== [[TaiG]] and [[PPJailbreak]] (8.0 / 8.0.1 / 8.0.2 / 8.1 / 8.1.1 / 8.1.2) ===
(See also details at [http://newosxbook.com/articles/TaiG.html newosxbook.com])
* A new AFC symlink attack ({{cve|2014-4480}}) - to get onto the device filesystem
* [[DeveloperDiskImage race condition]] (by [[comex]], also used in p0sixspwn) - to mount a fake DDI and instantly overwrite (via union) libmis/xpcd_cache
* A new overlapping segment attack [in a modified version], dyld, ({{cve|2014-4455}}) - negative LC_SEGMENT - to allow libmis and xpcdcache to load
* libmis redirection of MISValidateSignature (as per evasion) to kCFEqual, with overlapping segment variant on TaiG (Segment at end of file, negative)
* enable-dylibs-to-override-cache - force loading of dynamic libraries from filesystem (where available) instead of the shared cache (overriding libmis/xpcd_cache)
* MobileStorageMounter exploit ({{cve|2015-1062}})
* Backup exploit used to access restricted parts of the filesystem ({{cve|2015-1087}})

Kernel:

* Mach-O OSBundleHeaders info leak ({{cve|2014-4491}}) - leaks slid addresses
* mach_port_kobject exploit {{cve|2014-4496}} - used to recover the permutation value and addresses of kernel objects
* IOHIDFamily Kernel exploit ({{cve|2014-4487}}) - to overwrite memory

=== [[TaiG]] and [[PPJailbreak]] (8.1.3 / 8.2 / 8.3 / 8.4) ===
(See also details at http://newosxbook.com/articles/28DaysLater.html and http://newosxbook.com/articles/HIDeAndSeek.html)
* [[DeveloperDiskImage race condition]] (also used in TaiG for 8.0-8.1.2 but modified) - to mount a fake DDI
* enable-dylibs-to-override-cache - force loading of dynamic libraries from filesystem (where available) instead of the shared cache (overriding libmis)
* Symbolic linking to AFC ({{cve|2015-5746}})
* Backup exploit to write to protected regions of the disk ({{cve|2015-5752}})
* Code signing exploit ({{cve|2015-3802}})
* Code signing exploit ({{cve|2015-3803}})
* Code signing exploit ({{cve|2015-3805}})
* Code signing exploit ({{cve|2015-3806}})
* IOHIDFamily exploit ({{cve|2015-5774}})
* Air Traffic exploit to allow attackers to access arbitrary filesystem locations via vectors related to asset handling ({{cve|2015-5766}})

=== [[EtasonJB]] and [[Home Depot]] (8.4.1) ===
(OSUnserializeBinary Info Leak and Kernel Exploit)
* Information leak ({{cve|2016-4655}})
* Kernel exploit ({{cve|2016-4656}})

== Programs used to jailbreak 9.x ==
=== [[Pangu9]] (9.0 / 9.0.1 / 9.0.2 / 9.1) ===
* Photos exploit to gain arbitrary unsandboxed file system access as mobile to load outdated DDI. ({{cve|2015-7037}})
* MobileStorageMounter allowed older DeveloperDiskImages to be mounted, resulting in unsandboxed unsigned code execution due to known weaknesses in entitled executables. ({{cve|2015-7051}})
* IOHIDFamily Use-After-Free for kernel information leak / code execution as mobile. ({{cve|2015-6974}})
* dyld exploit in dyld shared cache handling to override MISValidateSignature in libmis.dylib for persistency ({{cve|2015-7079}})
* Racing KPP for some of the patches.
* AMFI MAC Hooks were in non-__const __DATA section, so wouldn't be integrity checked by KPP, allowing to replace MAC hooks required for code-signing. ({{cve|2015-7055}})

=== [[Pangu9]] (9.2 / 9.2.1 / 9.3 / 9.3.1 / 9.3.2 / 9.3.3) ===
* IOMobileFrameBuffer exploit to execute arbitrary code with kernel privileges. ({{cve|2016-4654}})

=== [[Home Depot]] (9.1-9.3.4) ===
(OSUnserializeBinary Info Leak and Kernel Exploit)
* Information leak ({{cve|2016-4655}})
* Kernel exploit ({{cve|2016-4656}})

=== [[Phœnix]] (9.3.5) ===
(OSUnserializeBinary Info Leak and Kernel Exploit)
* Information leak ({{cve|2016-4655}})
* Kernel exploit ({{cve|2016-4656}})

== Programs used to jailbreak 10.x ==

=== [[yalu + mach_portal]] (10-10.1.1) ===

* set_dp_control_port exploit to execute arbitrary code with kernel privileges. ({{cve|2016-7644}})

=== [[yalu102]] (10-10.2) ===

* mach_voucher_extract_attr_recipe_trap memory corruption. ({{cve|2017-2370}})

=== [[H3lix]] (10-10.3.3) ===
(Note there are many exploits involved, which means the CVE's provided are not exact. Also vulnerable in iOS 11.1.2 which is used in [[LiberiOS]])
* IOUserClient Information Leak ({{cve|2017-7116}})
* IOSurfaceRootUserClient Kernel Exploit ({{cve|2017-7103}})
* IOSurfaceRootUserClient Sandbox escape ({{cve|2017-11121}})

BootNeuter

2018-01-01T17:10:46Z

Vagy: Fix spelling

[[Image:Bootneuter.png|right|thumb|BootNeuter on firmware 2.0.|300px]]
BootNeuter allows one to [[unlock]] their [[M68AP|iPhone]], "neuter" it, flash a [[Fakeblank]] [[Baseband Bootloader#S-Gold 2 Revisions|bootloader]], and flash the 3.9 or 4.6 bootloader image, regardless of the iPhone's bootloader version. Bootneuter does not support the [[X-Gold 608]] and [[X-Gold 618]], used by the successors to the original [[M68AP|iPhone]].

== Neuter ==
A neutered bootloader has many restrictions placed by the bootloader removed. With a neutered bootloader:
*The baseband is no longer integrity-checked, so modifications (including unlocking) can be made.
*[[Secpack]] restrictions are removed
**You are free to downgrade your baseband using bbupdater without having to run ieraser/ienew first.
**No longer does the “greater than” (4.6BL) or “greater than or equal” (3.9BL) rule apply. You can arbitrarily go up and down regardless of what [[secpack]]s you use.
*[[Secpack]] signatures are ignored
**The RSA encrypted header is no longer checked for correct hash values by the bootloader
**The *.fls files can be patched and fed to bbupdater directly
**A copy of the last used [[secpack]] will be saved at a03c0000, retrievable via norz or similar dumpers. Not that secpacks even matter anymore.

== Unlocking ==
BootNeuter gives you the option to unlock your 1.1.4 or 2.0 ([[M68AP|iPhone]] only) baseband. The bootloader will need to be neutered for [[unlock]]ing.

A neutered bootloader will let you use bbupdater on modified ICE*.fls files, so now you don't even need a separate app to unlock. As discussed on the simple_unlock page, you can now unlock the baseband before it even gets put on your iPhone!

== [[Baseband Bootloader#S-Gold 2 Revisions|Bootloader]] Version ==
BootNeuter is able to switch your first generation iPhone's bootloader between 3.9 or 4.6 at will. If your iPhone got onto bootloader 3.8, BootNeuter can upgrade it. Although BootNeuter makes flashing the bootloader easy, you should still only switch versions as necessary.

== [[Fakeblank]] ==
A [[Fakeblank]] bootloader allows for [[M68AP|iPhone]] hackers to be able to run serial payloads directly at [[S-Gold 2]] reboot time. If BootNeuter detects that your iPhone is currently fakeblanked, it will do all of its bootloader operations via serial payload and won't need to erase/reprogram the baseband to make bootloader changes. If you don't know what FakeBlank means, you probably should leave it off when using BootNeuter.

== Credits ==
[[User:MuscleNerd]], gray, chris, wizdaz, [[User:Planetbeing|planetbeing]], and the entire [[iPhone Dev Team]]. Thanks to [[User:Geohot|geohot]] for the [[Minus 0x20000 with Back Extend Erase]] vulnerability for bootloader 4.6.

== Links ==
* [http://wikee.iphwn.org/sgold_bootrom:bootneuter Official BootNeuter homepage]

[[Category:Unlocking Methods]]
[[Category:Hacking Software]]