https://www.theiphonewiki.com/w/api.php?action=feedcontributions&user=InvoxiPlayGames&feedformat=atomThe iPhone Wiki - User contributions [en]2024-03-29T01:58:26ZUser contributionsMediaWiki 1.31.14https://www.theiphonewiki.com/w/index.php?title=SHA-1_Image_Segment_Overflow&diff=118977SHA-1 Image Segment Overflow2021-10-25T15:14:23Z<p>InvoxiPlayGames: </p>
<hr />
<div>'''SHA-1 Image Segment Overflow''' or '''SHAtter''' was an exploit that allowed unsigned code execution from a flaw in the [[bootrom]]. It was never used in a public jailbreak because the [[limera1n]] exploit was released first, and more devices were vulnerable to it. SHAtter was patched in the [[S5L8940|A5]] bootrom and therefore, never officially released.<br />
<br />
An implementation of SHAtter is available in [[ipwndfu]].<br />
<br />
== Compatibility ==<br />
SHAtter only works with [[S5L8930|A4]] devices:<br />
* [[K48AP|iPad]]<br />
* [[iPhone 4]] (all models)<br />
* [[N81AP|iPod touch (4th generation)]]<br />
* [[K66AP|Apple TV (2nd generation)]]<br />
<br />
== Credit ==<br />
* '''vulnerability''': [[User:posixninja|posixninja]] ({{date|2010|05}}), also discovered independently by [[User:geohot|geohot]]<br />
* '''research''': [[User:posixninja|posixninja]], [[User:pod2g|pod2g]], also [[User:MuscleNerd|MuscleNerd]]<br />
* '''exploit''': [[User:Pod2g|pod2g]]<br />
<br />
==Background Info==<br />
In {{date|2010|04}} [[User:pod2g|pod2g]] wrote a USB [[wikipedia:Fuzz testing|fuzzer]] (see also: [[fuzzing]]) and tested every single [[USB control messages|USB control message]] possible on his [[N72AP|iPod touch (2nd generation)]]. <br />
The [[wikipedia:Fuzz testing|fuzzer]] found 2 vulnerabilities:<br />
* a heap overflow caused by [[usb_control_msg(0xA1, 1) Exploit‎|usb_control_msg(0xA1, 1)]]<br />
* a way to dump the bootrom using USB descriptors request<br />
<br />
The team tested these two vulnerabilities on newer devices ([[N88AP|iPhone 3GS]], [[N18AP|iPod touch (3rd generation)]], [[K48AP|iPad]]) and both were already fixed by Apple.<br />
<br />
[[User:posixninja|posixninja]] continued [[wikipedia:Fuzz testing|fuzzing]] on these devices, and found that with a particular sequence of [[USB control messages]], it was possible for the first time to dump the [[wikipedia:.bss|BSS]]+Heap+Stack (on newer devices only).<br />
<br />
Interestingly, his first attempts to dump the memory resulted in rebooting the device. Research began to figure out why the device would reboot. [[User:posixninja|posixninja]] found the reason and proposed different ideas to exploit this. He also reversed tons of assembly code of the bootrom in this period, giving a support discussion to the team. This took months of work.<br />
<br />
In the meanwhile, [[User:pod2g|pod2g]] helped on the USB reversing side and found a way to have more control over the size of the USB packets sent. The finer-grained control of the packet sizes is the key of SHAtter.<br />
<br />
[[User:posixninja|posixninja]] and [[User:pod2g|pod2g]] worked on exploiting the vulnerability for days. Every attempt was a failure because the idea to attack the stack and bypass the [[IMG3 File Format|IMG3]] control routines was just impossible. It took them weeks to understand why they failed and why they couldn't exploit it this way.<br />
<br />
They both gave up in {{date|2010|07}} and focused on other subjects.<br />
<br />
== Vulnerability == <br />
Explanation by [[p0sixninja]] at [[MyGreatFest]]:<br />
<br />
:It tricked the bootrom to think the size of the image uploading was larger then what it actually was. Then when it would try to load the image, it would see that it was wrong. Then it would try to wipe out the entire image with all zeroes and go past it and start wiping out bootrom. <br />
<br />
:Exploitation was done by overwriting SHA-1 registers to zeroes so then when it went to check images it would copy part of image into memory address zero (where the bootrom is). It would take the image uploaded and copy it over top of the bootrom (which turns out to be writable over the data portion).<br />
<br />
== References ==<br />
* [[p0sixninja]]'s [http://conference.hitb.org/hitbsecconf2013kul/materials/D2T1%20-%20Joshua%20%27p0sixninja%27%20Hill%20-%20SHAttered%20Dreams.pdf HITB 2013 Kuala Lumpur presentation] (SHAttered Dreams - Adventures in BootROM Land; starting at page 51)<br />
<br />
[[Category:Bootrom Exploits]]</div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=User:InvoxiPlayGames&diff=113398User:InvoxiPlayGames2021-05-07T05:26:59Z<p>InvoxiPlayGames: Created page with "Self proclaimed "legacy iOS connoisseur" from the UK, interested in the ticking of all legacy (iOS 9 and below) softwares and jailbreaks. I mostly make Substrate tweaks for th..."</p>
<hr />
<div>Self proclaimed "legacy iOS connoisseur" from the UK, interested in the ticking of all legacy (iOS 9 and below) softwares and jailbreaks. I mostly make Substrate tweaks for these old devices, you can find those on [https://cydia.invoxiplaygames.uk my Cydia repo]. Keep up with me through my [https://invoxiplaygames.uk/ website].<br />
<br />
A few notable creations:<br />
<br />
* [https://invoxiplaygames.uk/projects/spiritnet/ SpiritNET] - a reimplementation of comex's Spirit jailbreak for iOS 3.1.2-3.2 in .NET Framework using libimobiledevice.<br />
* [https://cydia.invoxiplaygames.uk/package/imessagercepatch iMessage RCE Patch] - a mitigation of multiple vulnerabilities in iMessage for iOS 12.0-12.4. Also available on BigBoss.<br />
* [https://tubefixer.ovh/ TubeFixer] - a barely functional tweak to watch YouTube via the built-in app on iOS 3 through 5.</div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=Untethered_jailbreak&diff=112394Untethered jailbreak2021-04-26T02:39:37Z<p>InvoxiPlayGames: Rewrite page, include examples of utilities, more information about specific methods</p>
<hr />
<div>An '''untethered jailbreak''' is a jailbreak wherein a user can reboot their device at will, and have their device start up with the jailbreak automatically applied without the assistance of a computer or a utility on the device.<br />
<br />
These jailbreaks can be applied via multiple different methods, the most common of which being kernel exploits.<br />
<br />
== Kernel exploits ==<br />
<br />
Most untethered jailbreaks rely on vulnerabilities in the kernel and early boot process, typically using a combination of codesigning bypasses and manipulating the system into executing a binary early in the boot process (or obtaining unsigned code execution via a vulnerability in an existing startup process). Once code execution has been obtained, a kernel exploit is used in order to patch the currently loaded kernel to allow for the rootfs to be remounted as read/write, and to allow for unsigned code execution.<br />
<br />
Tools that use kernel exploits to achieve untethered jailbreaks:<br />
<br />
*[[Spirit]]<br />
*[[Star|JailbreakMe 2.0 (star)]]/[[Saffron|JailbreakMe 3.0 (saffron)]]<br />
*[[limera1n]]<br />
*[[greenpois0n]]<br />
*[[Absinthe]]<br />
*[[unthredera1n]]<br />
*[[evasi0n]]<br />
*[[p0sixspwn]]<br />
*[[evasi0n7]]<br />
*[[Pangu]]<br />
*[[Pangu8]]<br />
*[[TaiG]]<br />
*[[etasonJB]]<br />
*[[UntetherHomeDepot]]<br />
*[[Pangu9]]<br />
<br />
== BootROM exploits ==<br />
<br />
Older devices, such as the iPhone 3GS, iPod touch 2 (old bootrom) and earlier, have had vulnerabilities discovered in the [[BootROM]] that are able to be executed without the assistance of DFU mode (such as via a malformed image in the NOR) allowing for stages of the boot chain to be overwritten with custom code, such as a patched LLB/iBoot to allow for an unsigned kernel, and a custom boot logo. Examples of bootrom exploits that allow for untethered code execution are [[Pwnage]], [[0x24000 Segment Overflow|24kpwn]] and [[alloc8 Exploit|alloc8]].<br />
<br />
Tools that use bootROM exploits to achieve untethered jailbreaks:<br />
<br />
*[[redsn0w]]<br />
*[[sn0wbreeze]]<br />
*[[PwnageTool]]<br />
*[[ipwndfu]]<br />
<br />
== iBoot exploits ==<br />
<br />
Some jailbreaks abuse vulnerabilities in the currently installed [[iBoot]] in order to patch out signature checks or load an alternative iBoot, therefore being able to load a patched and jailbroken kernel. Very few jailbreak utilities opt to use this method, as iBoot exploits are rare to come across and are able to be patched by Apple with software updates, thereby only being able to be used if blobs have been saved, or if the device was discontinued before Apple released a patch.<br />
<br />
==See also==<br />
*[[Jailbreak]]<br />
*[[Jailbreak Exploits]]<br />
*[[Tethered jailbreak]]<br />
*[[Semi-tethered jailbreak]]<br />
*[[Semi-untethered jailbreak]]<br />
<br />
[[Category:Jailbreaking]]</div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=Sochi_11D257_(iPhone5,2)&diff=98727Sochi 11D257 (iPhone5,2)2019-12-28T13:34:01Z<p>InvoxiPlayGames: Corrected LLB, from https://diosra2.hatenadiary.jp/entry/19900101/631119600</p>
<hr />
<div>{{keys<br />
| Version = 7.1.2<br />
| Build = 11D257<br />
| Device = iPhone5,2<br />
| Codename = Sochi<br />
| Baseband = 6.02.00<br />
| DownloadURL = https://secure-appldnld.apple.com/iOS7.1/031-4798.20140627.fpeqS/iPhone5,2_7.1.2_11D257_Restore.ipsw<br />
<br />
| RootFS = 058-4447-009<br />
| RootFSKey = 16f99aba62c8325456e9f9c36c9ad31b4498c6f034042540222321b81ec4734b1a3780d0<br />
<br />
| UpdateRamdisk = 058-4357-009<br />
| UpdateRamdiskIV = c609eba82fe8acb1710ec3539a1d37eb<br />
| UpdateRamdiskKey = b3070f4fb8da78d478ee2f5422b0988883f295208e78ab0d79f84ced490c22dd<br />
<br />
| RestoreRamdisk = 058-4276-009<br />
| RestoreRamdiskIV = 13b6456bec67fa74faada14e1c3607aa<br />
| RestoreRamdiskKey = 4e0bcc542aefc750cd463f6d0ed4710f15fb0ec0d2a11d4e213b6f58c1e20e87<br />
<br />
| AppleLogo = applelogo@2x~iphone.s5l8950x.img3<br />
| AppleLogoIV = 9e81e7de70555a77c8ca9ee14d00420b<br />
| AppleLogoKey = 89e683b3820c83b0971e46c28ef3f11e851a4907b85bedffa14c4ccde8e5736c<br />
<br />
| BatteryCharging0 = batterycharging0@2x~iphone.s5l8950x.img3<br />
| BatteryCharging0IV = 965f2f774639c72fd930617051ba95c9<br />
| BatteryCharging0Key = f59bcf24806eaaa712eb0966901ca2aa794f76544e4535bac141fb35dc5dc4d3<br />
<br />
| BatteryCharging1 = batterycharging1@2x~iphone.s5l8950x.img3<br />
| BatteryCharging1IV = cbc4bb3fca585fa18877970ae8bab532<br />
| BatteryCharging1Key = db3a8402c16aee450b43460162f9cb95312f489a1dff1c56c2bc910464edbe11<br />
<br />
| BatteryFull = batteryfull@2x~iphone.s5l8950x.img3<br />
| BatteryFullIV = 208203e66f8764b18a14d0edecb4815d<br />
| BatteryFullKey = e3c5e92bd17a8701d4eb7da1d7a7b24d1ca2bedf3dce130f5a180bb09bde40e6<br />
<br />
| BatteryLow0 = batterylow0@2x~iphone.s5l8950x.img3<br />
| BatteryLow0IV = 12ffe5e4a3fb42b9d09c23fd385264c1<br />
| BatteryLow0Key = 1fb973478062ea8d815db5bd5962542327428c7bf8f68243e0f1dd4292deb413<br />
<br />
| BatteryLow1 = batterylow1@2x~iphone.s5l8950x.img3<br />
| BatteryLow1IV = ef8e4d282b7cc1394eab296f1983295d<br />
| BatteryLow1Key = abe3dfb85d89a0309d823bb22af28cac11d7afce025faa58a9b735dc593dc3b3<br />
<br />
| DeviceTree = DeviceTree.n42ap.img3<br />
| DeviceTreeIV = 814b4f2f7ea8aa695ba9503663293222<br />
| DeviceTreeKey = 3df14c776de506ce08353d1c87d997f6f5a75343c83f8f43d313dae058aae2bd<br />
<br />
| GlyphPlugin = glyphplugin@1136~iphone-lightning.s5l8950x.img3<br />
| GlyphPluginIV = 0c71f70cb151b1076e2b72b9ded2f44b<br />
| GlyphPluginKey = a6d040af2c5c58b7375f8de97a9505aab9e16b6cf24c6a94a72cf4a3091e33de<br />
<br />
| iBEC = iBEC.n42ap.RELEASE.dfu<br />
| iBECIV = 1d45b6ca42dafd5d711e3d23e5fa0fc7<br />
| iBECKey = 459912ddeeeb9d4a1c66068c8c1d8f46d8dd72e3e7dfa3ff0326f1ab6bb59c28<br />
<br />
| iBoot = iBoot.n42ap.RELEASE.img3<br />
| iBootIV = 422b9c5e642ff797dc38b9910f084826<br />
| iBootKey = b23dbe781086f6000cba372e5e8ae01c3f61c032ab1fb6729129707e3ccb9463<br />
<br />
| iBSS = iBSS.n42ap.RELEASE.dfu<br />
| iBSSIV = d279e5c309be7ac035fd313958a178be<br />
| iBSSKey = 617f7e2d5d8e2940a325758cd42055b83e2e3d243f068d5a9015b0fe67bed815<br />
<br />
| Kernelcache = kernelcache.release.n42<br />
| KernelcacheIV = c7901452e5c32f32a7195a77d126e592<br />
| KernelcacheKey = 2697534225bb043f54c2db418b1584c969f3e4f11bca8cb1e6baffe7c815e73e<br />
<br />
| LLB = LLB.n42ap.RELEASE.img3<br />
| LLBIV = aec3884b72a2bed79cdeb22dafe435ae<br />
| LLBKey = eab62675bf2b2f8712205da766c1b5d90e725a38200b76aa7726a2ce3cd8d173<br />
<br />
| RecoveryMode = recoverymode@1136~iphone-lightning.s5l8950x.img3<br />
| RecoveryModeIV = f91c21637ca0b51522d4c4d4d0a68378<br />
| RecoveryModeKey = 3349b42d49224378ead053885503e426ebd08d3653538015630783314bab209c<br />
}}</div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=N1ghtshade&diff=98557N1ghtshade2019-12-13T17:00:16Z<p>InvoxiPlayGames: fix infobox date</p>
<hr />
<div>{{lowercase}}<br />
{{infobox software<br />
| name = n1ghtshade<br />
| title = n1ghtshade<br />
| logo = [[File:N1ghtshade.png|85px]]<br />
| screenshot = [[File:N1ghtshade-screenshot.png|300px]]<br />
| caption = n1ghtshade beta 2<br />
| author = synackuk<br />
| developer = synackuk<br />
| released = beta 1 / {{start date and age|2019|12|07}}<br />
| latest release version = beta 9<br />
| latest release date = {{start date and age|2019|12|08}}<br />
| programming language = C<br />
| status = Active<br />
| operating system = [[wikipedia:macOS|macOS]]<br />
| language = [[wikipedia:English|English]]<br />
| genre = Jailbreaking / Downgrading<br />
}}<br />
'''n1ghtshade''' is a downgrading and [[jailbreaking]] utility. It utilises the [[checkm8]] exploit and is compatible with devices that use the [[S5L8950|A6 processor]], such as the [[iPhone 5]].<br />
<br />
The tool is capable of [[Tethered_jailbreak|tethered jailbreaking]] iOS 6 and 7 and [[Tethered_Downgrade|tethered downgrading]] to any iOS version supported by the device. It is only compatible with [[wikipedia:macOS Mojave|macOS Mojave]] as of beta 2.<br />
<br />
n1ghtshade's source code is available on [https://github.com/synackuk/n1ghtshade GitHub] under the GNU GPL v3 licence.<br />
<br />
== Version History ==<br />
{| class="wikitable"<br />
! Version<br />
! Release Date<br />
! Download<br />
! Changes<br />
|-<br />
! beta 1<br />
| rowspan="5" | {{date|2019|12|7}}<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B1 GitHub]<br />
|<br />
* Initial release.<br />
|-<br />
! beta 2<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B2 GitHub]<br />
| <br />
* Fixed bug in idevice finding code<br />
|-<br />
! beta 3<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B3 GitHub]<br />
|<br />
* Attempt to fix some of the libusb issues<br />
|-<br />
! beta 4<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B4 GitHub]<br />
|<br />
* Fixed a really dumb bug.<br />
|-<br />
! beta 5<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B5 GitHub]<br />
|<br />
* Fixed "failed to upload iBEC"<br />
|-<br />
! beta 6<br />
| rowspan="5" | {{date|2019|12|8}}<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B6 GitHub]<br />
|<br />
* Fixed reliability issues, NOTE that if you're on Catalina you must eject the iPhone from finder before you run n1ghtshade.<br />
|-<br />
! beta 7<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B7 GitHub]<br />
|<br />
* Fixed iPhone5,1 support<br />
|-<br />
! beta 8<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B8 GitHub]<br />
|<br />
* Attempted A6X support<br />
|-<br />
! beta 9<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B9 GitHub]<br />
|<br />
* Now works on macOS Sierra and up, Working A6X support.<br />
|}</div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=N1ghtshade&diff=98556N1ghtshade2019-12-13T16:59:44Z<p>InvoxiPlayGames: new versions</p>
<hr />
<div>{{lowercase}}<br />
{{infobox software<br />
| name = n1ghtshade<br />
| title = n1ghtshade<br />
| logo = [[File:N1ghtshade.png|85px]]<br />
| screenshot = [[File:N1ghtshade-screenshot.png|300px]]<br />
| caption = n1ghtshade beta 2<br />
| author = synackuk<br />
| developer = synackuk<br />
| released = beta 1 / {{start date and age|2019|12|07}}<br />
| latest release version = beta 6<br />
| latest release date = {{start date and age|2019|12|08}}<br />
| programming language = C<br />
| status = Active<br />
| operating system = [[wikipedia:macOS|macOS]]<br />
| language = [[wikipedia:English|English]]<br />
| genre = Jailbreaking / Downgrading<br />
}}<br />
'''n1ghtshade''' is a downgrading and [[jailbreaking]] utility. It utilises the [[checkm8]] exploit and is compatible with devices that use the [[S5L8950|A6 processor]], such as the [[iPhone 5]].<br />
<br />
The tool is capable of [[Tethered_jailbreak|tethered jailbreaking]] iOS 6 and 7 and [[Tethered_Downgrade|tethered downgrading]] to any iOS version supported by the device. It is only compatible with [[wikipedia:macOS Mojave|macOS Mojave]] as of beta 2.<br />
<br />
n1ghtshade's source code is available on [https://github.com/synackuk/n1ghtshade GitHub] under the GNU GPL v3 licence.<br />
<br />
== Version History ==<br />
{| class="wikitable"<br />
! Version<br />
! Release Date<br />
! Download<br />
! Changes<br />
|-<br />
! beta 1<br />
| rowspan="5" | {{date|2019|12|7}}<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B1 GitHub]<br />
|<br />
* Initial release.<br />
|-<br />
! beta 2<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B2 GitHub]<br />
| <br />
* Fixed bug in idevice finding code<br />
|-<br />
! beta 3<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B3 GitHub]<br />
|<br />
* Attempt to fix some of the libusb issues<br />
|-<br />
! beta 4<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B4 GitHub]<br />
|<br />
* Fixed a really dumb bug.<br />
|-<br />
! beta 5<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B5 GitHub]<br />
|<br />
* Fixed "failed to upload iBEC"<br />
|-<br />
! beta 6<br />
| rowspan="5" | {{date|2019|12|8}}<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B6 GitHub]<br />
|<br />
* Fixed reliability issues, NOTE that if you're on Catalina you must eject the iPhone from finder before you run n1ghtshade.<br />
|-<br />
! beta 7<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B7 GitHub]<br />
|<br />
* Fixed iPhone5,1 support<br />
|-<br />
! beta 8<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B8 GitHub]<br />
|<br />
* Attempted A6X support<br />
|-<br />
! beta 9<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B9 GitHub]<br />
|<br />
* Now works on macOS Sierra and up, Working A6X support.<br />
|}</div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=N1ghtshade&diff=98486N1ghtshade2019-12-08T16:44:11Z<p>InvoxiPlayGames: </p>
<hr />
<div>{{lowercase}}<br />
{{infobox software<br />
| name = n1ghtshade<br />
| title = n1ghtshade<br />
| logo = [[File:N1ghtshade.png|85px]]<br />
| screenshot = [[File:N1ghtshade-screenshot.png|300px]]<br />
| caption = n1ghtshade beta 2<br />
| author = synackuk<br />
| developer = synackuk<br />
| released = beta 1 / {{start date and age|2019|12|07}}<br />
| latest release version = beta 6<br />
| latest release date = {{start date and age|2019|12|08}}<br />
| programming language = C<br />
| status = Active<br />
| operating system = [[wikipedia:macOS|macOS]]<br />
| language = [[wikipedia:English|English]]<br />
| genre = Jailbreaking / Downgrading<br />
}}<br />
'''n1ghtshade''' is a downgrading and [[jailbreaking]] utility. It utilises the [[checkm8]] exploit and is compatible with devices that use the [[S5L8950|A6 processor]], such as the [[iPhone 5]].<br />
<br />
The tool is capable of [[Tethered_jailbreak|tethered jailbreaking]] iOS 6 and 7 and [[Tethered_Downgrade|tethered downgrading]] to any iOS version supported by the device. It is only compatible with [[wikipedia:macOS Mojave|macOS Mojave]] as of beta 2.<br />
<br />
n1ghtshade's source code is available on [https://github.com/synackuk/n1ghtshade GitHub] under the GNU GPL v3 licence.<br />
<br />
== Version History ==<br />
{| class="wikitable"<br />
! Version<br />
! Release Date<br />
! Download<br />
! Changes<br />
|-<br />
! beta 1<br />
| rowspan="5" | {{date|2019|12|7}}<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B1 GitHub]<br />
|<br />
* Initial release.<br />
|-<br />
! beta 2<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B2 GitHub]<br />
| <br />
* Fixed bug in idevice finding code<br />
|-<br />
! beta 3<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B3 GitHub]<br />
|<br />
* Attempt to fix some of the libusb issues<br />
|-<br />
! beta 4<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B4 GitHub]<br />
|<br />
* Fixed a really dumb bug.<br />
|-<br />
! beta 5<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B5 GitHub]<br />
|<br />
* Fixed "failed to upload iBEC"<br />
|-<br />
! beta 6<br />
| rowspan="5" | {{date|2019|12|8}}<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B6 GitHub]<br />
|<br />
* Fixed reliability issues, NOTE that if you're on Catalina you must eject the iPhone from finder before you run n1ghtshade.<br />
|-<br />
! beta 7<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B7 GitHub]<br />
|<br />
* Fixed iPhone5,1 support<br />
|}</div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=N1ghtshade&diff=98466N1ghtshade2019-12-08T00:47:30Z<p>InvoxiPlayGames: add more versions</p>
<hr />
<div>{{lowercase}}<br />
{{infobox software<br />
| name = n1ghtshade<br />
| title = n1ghtshade<br />
| logo = [[File:N1ghtshade.png|85px]]<br />
| screenshot = [[File:N1ghtshade-screenshot.png|300px]]<br />
| caption = n1ghtshade beta 2<br />
| author = synackuk<br />
| developer = synackuk<br />
| released = beta 1 / {{start date and age|2019|12|07}}<br />
| latest release version = beta 6<br />
| latest release date = {{start date and age|2019|12|08}}<br />
| programming language = C<br />
| status = Active<br />
| operating system = [[wikipedia:macOS|macOS]]<br />
| language = [[wikipedia:English|English]]<br />
| genre = Jailbreaking / Downgrading<br />
}}<br />
'''n1ghtshade''' is a downgrading and [[jailbreaking]] utility. It utilises the [[checkm8]] exploit and is compatible with devices that use the [[S5L8950|A6 processor]], such as the [[iPhone 5]].<br />
<br />
The tool is capable of [[Tethered_jailbreak|tethered jailbreaking]] iOS 6 and 7 and [[Tethered_Downgrade|tethered downgrading]] to any iOS version supported by the device. It is only compatible with [[wikipedia:macOS Mojave|macOS Mojave]] as of beta 2.<br />
<br />
n1ghtshade's source code is available on [https://github.com/synackuk/n1ghtshade GitHub] under the GNU GPL v3 licence.<br />
<br />
== Version History ==<br />
{| class="wikitable"<br />
! Version<br />
! Release Date<br />
! Download<br />
! Changes<br />
|-<br />
! beta 1<br />
| rowspan="5" | {{date|2019|12|7}}<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B1 GitHub]<br />
|<br />
* Initial release.<br />
|-<br />
! beta 2<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B2 GitHub]<br />
| <br />
* Fixed bug in idevice finding code<br />
|-<br />
! beta 3<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B3 GitHub]<br />
|<br />
* Attempt to fix some of the libusb issues<br />
|-<br />
! beta 4<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B4 GitHub]<br />
|<br />
* Fixed a really dumb bug.<br />
|-<br />
! beta 5<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B5 GitHub]<br />
|<br />
* Fixed "failed to upload iBEC"<br />
|-<br />
! beta 6<br />
| {{date|2019|12|8}}<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B6 GitHub]<br />
|<br />
* Fixed reliability issues, NOTE that if you're on Catalina you must eject the iPhone from finder before you run n1ghtshade.<br />
|}</div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=N1ghtshade&diff=98465N1ghtshade2019-12-07T17:42:52Z<p>InvoxiPlayGames: release of beta 3</p>
<hr />
<div>{{lowercase}}<br />
{{infobox software<br />
| name = n1ghtshade<br />
| title = n1ghtshade<br />
| logo = [[File:N1ghtshade.png|85px]]<br />
| screenshot = [[File:N1ghtshade-screenshot.png|300px]]<br />
| caption = n1ghtshade beta 2<br />
| author = synackuk<br />
| developer = synackuk<br />
| released = beta 1 / {{start date and age|2019|12|07}}<br />
| latest release version = beta 3<br />
| latest release date = {{start date and age|2019|12|07}}<br />
| programming language = C<br />
| status = Active<br />
| operating system = [[wikipedia:macOS|macOS]]<br />
| language = [[wikipedia:English|English]]<br />
| genre = Jailbreaking / Downgrading<br />
}}<br />
'''n1ghtshade''' is a downgrading and [[jailbreaking]] utility. It utilises the [[checkm8]] exploit and is compatible with devices that use the [[S5L8950|A6 processor]], such as the [[iPhone 5]].<br />
<br />
The tool is capable of [[Tethered_jailbreak|tethered jailbreaking]] iOS 6 and 7 and [[Tethered_Downgrade|tethered downgrading]] to any iOS version supported by the device. It is only compatible with [[wikipedia:macOS Mojave|macOS Mojave]] as of beta 2.<br />
<br />
n1ghtshade's source code is available on [https://github.com/synackuk/n1ghtshade GitHub] under the GNU GPL v3 licence.<br />
<br />
== Version History ==<br />
{| class="wikitable"<br />
! Version<br />
! Release Date<br />
! Download<br />
! Changes<br />
|-<br />
! beta 1<br />
| rowspan="3" | {{date|2019|12|7}}<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B1 GitHub]<br />
|<br />
* Initial release.<br />
|-<br />
! beta 2<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B2 GitHub]<br />
| <br />
* Fixed bug in idevice finding code<br />
|-<br />
! beta 3<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B3 GitHub]<br />
|<br />
* Attempt to fix some of the libusb issues<br />
|}</div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=N1ghtshade&diff=98464N1ghtshade2019-12-07T16:18:58Z<p>InvoxiPlayGames: Created page with "{{lowercase}} {{infobox software | name = n1ghtshade | title = n1ghtshade | logo = 85px | screensh..."</p>
<hr />
<div>{{lowercase}}<br />
{{infobox software<br />
| name = n1ghtshade<br />
| title = n1ghtshade<br />
| logo = [[File:N1ghtshade.png|85px]]<br />
| screenshot = [[File:N1ghtshade-screenshot.png|300px]]<br />
| caption = n1ghtshade beta 2<br />
| author = synackuk<br />
| developer = synackuk<br />
| released = beta 1 / {{start date and age|2019|12|07}}<br />
| latest release version = beta 2<br />
| latest release date = {{start date and age|2019|12|07}}<br />
| programming language = C<br />
| status = Active<br />
| operating system = [[wikipedia:macOS|macOS]]<br />
| language = [[wikipedia:English|English]]<br />
| genre = Jailbreaking / Downgrading<br />
}}<br />
'''n1ghtshade''' is a downgrading and [[jailbreaking]] utility. It utilises the [[checkm8]] exploit and is compatible with devices that use the [[S5L8950|A6 processor]], such as the [[iPhone 5]].<br />
<br />
The tool is capable of [[Tethered_jailbreak|tethered jailbreaking]] iOS 6 and 7 and [[Tethered_Downgrade|tethered downgrading]] to any iOS version supported by the device. It is only compatible with [[wikipedia:macOS Mojave|macOS Mojave]] as of beta 2.<br />
<br />
n1ghtshade's source code is available on [https://github.com/synackuk/n1ghtshade GitHub] under the GNU GPL v3 licence.<br />
<br />
== Version History ==<br />
{| class="wikitable"<br />
! Version<br />
! Release Date<br />
! Download<br />
! Changes<br />
|-<br />
! beta 1<br />
| rowspan="2" | {{date|2019|12|7}}<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B1 GitHub]<br />
|<br />
* Initial release.<br />
|-<br />
! beta 2<br />
| [https://github.com/synackuk/n1ghtshade/releases/tag/B2 GitHub]<br />
| <br />
* Fixed bug in idevice finding code<br />
|}</div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=File:N1ghtshade.png&diff=98463File:N1ghtshade.png2019-12-07T16:09:17Z<p>InvoxiPlayGames: </p>
<hr />
<div></div>InvoxiPlayGameshttps://www.theiphonewiki.com/w/index.php?title=File:N1ghtshade-screenshot.png&diff=98462File:N1ghtshade-screenshot.png2019-12-07T16:08:55Z<p>InvoxiPlayGames: Screenshot of n1ghtshade beta 2's GUI.</p>
<hr />
<div>== Summary ==<br />
Screenshot of n1ghtshade beta 2's GUI.</div>InvoxiPlayGames