Unc0ver

unc0ver

Developer(s)	pwn20wnd sbingner
Initial release	13 Oct 2018 (2018-10-13)
Stable release	v3.6.1 / 8 September 2019
Operating system	iOS
Available in	English
Type	Jailbreaking
Website	The Reddit thread The GitHub repo

unc0ver is a semi-untethered jailbreak for all devices running iOS 11.0-12.2 and 12.4, (A12/A12X support is limited on iOS 12.0-12.2 and 12.4).

It uses the same, and a few more, exploits as Electra and Chimera whilst providing more features.

In order to download the latest IPA, download links from the README section has been moved to the releases section of the repository (you can find this by looking under the colored bars where you can find the releases page which is in the middle, alongside branches and contributors).

Release History

Version	Date	Changes
RC1	13 October 2018	Initial release
RC2	14 October 2018	Add the Dynastic repo by default Fix a bug in firmware checker
RC3		Add a switch to manually enable restoring RootFS Stop erasing user preferences when restoring RootFS Fix bugs
RC4		Add a label to display the uptime Add a label to display the app's version number Spawn to the PATH Stop bundling system fonts
RC5		Run videosubscriptionsd in the jailed state Fix a bug in firmware and update checker
RC6		Start logging again Improve update checker Fix multi_path
RC7	17 October 2018	Fix a bug in RootFS Restore and multi_path
RC8	18 October 2018	Fix a bug in RootFS Remount Add a work in progress warning for some firmwares
RC9	19 October 2018	Fix a bug in RootFS Remount Add even more detailed error messages Add a switch to increase the memory limit to improve the stability Improve the compatibility layer to work correctly with some tweaks that were specifically made for the other jailbreaks
v1	20 October 2018	Fix a bug in RootFS Restore and Remount Make the settings tab match with the rest of the UI Fix bugs
v1.0.1	21 October 2018	Disable the RootFS Restore for the unstable versions
v1.0.2	22 October 2018	Enable and fix the RootFS Restore for all versions
v1.0.3	23 October 2018	Fix the beta firmwares
v1.1	27 October 2018	Automatically select the best exploit Rewrite the versions checker Improve assertion Show the code which has failed in the error messages Improve memory management Optimize and clean up the code Fix the Storage settings Switch to a new technique to disable auto updates Remove so much useless logging Only set the boot-nonce if the switch is on without checking if it exists or not Log offsets Remove static sleeps to improve the speed Fix series of bugs and leave no known bug
v1.1.1	3 November 2018	Add a label to show the ECID Add a button to open the source code Improve auto layout Fix various bugs within RootFS interaction, Icon cache refresher, Version checker, Exploit selector, jailbreak state detector and others
v1.1.2		Improve auto layout and code Significantly improve Empty_List (VFS) exploit Slightly improve Multi_Path (MPTCP)
v1.1.3	6 November 2018	Fix a bug in starting jailbreakd
v1.1.4		Fix a bug in finding offsets
v2.0	30 November 2018	Initial Cydia Substrate support OTA upgrades for the jailbreak patches from Cydia without rebooting A new button to restart SpringBoard from the jailed state A switch to (re)install OpenSSH A switch to reinstall Cydia A switch to restart backboardd only so that you can jailbreak with broken tweaks Fix and update bootstrap Fix for the jailbreakd error Battery life fixes ELOD (Electra Loop Of Death) mitigations Improve the speed of system reload Fixes for countless bugs Enable Restart and Restart SpringBoard buttons on iOS 11.4 - 11.4.1 (Jailbreak itself doesn't work on iOS 11.4 - 11.4.1) Improve the reliability of the Restart button Fix the broken multi_path entitlement check Add the compatibility layer for the other jailbreaks back to fix the apps like iCleaner Fix the famous snapshot creation bug Add a button to manually reset the logs instead of automatically resetting them when the diagnostics button is tapped Fix the trust cache injection bug
v2.0.1	2 December 2018	The official release of v2.0 with a version number bump to make tracking versions easier
v2.0.2	6 December 2018	Fix bugs in the app Improve the the speed of the jailbreak Update bundled resources Switch to a new technique for blocking revokes
v2.1	14 December 2018	Make internal changes to make fixing issues easier Add T-Mobile support for the revoke disabler Make re-jailbreaking without restarting possible Make switching from Electra possible without restoring RootFS Update bundled resources Fix a bug in extracting bootstrap Only quit the app if the error is fatal Fix a bug in loading daemons Make the jailbreaking process faster and more stable Add more feedback to the user interface Other fixes and improvements Fix a bug in extracting bootstrap that was introduced with the previous build Fix a bug in installing Cydia that was introduced with the previous build Fix a bug in switching from Electra without restoring RootFS Update "No Tweaks" mode to support new "Disable Loader" option in Cydia Substrate Added the ability to completely disable jailbreakd when Substrate is installed via a future Cydia update. Add internal support for completely disabling jailbreakd with a Resources update Make a special alert for the exploit error to make it more clear Automatically reboot when the user taps "OK" on the exploit error Improve the version checker Fix a really weird bug in the system that would stop Cydia Substrate from loading tweaks although this bug isn't caused by the tool Make the UI support different font sizes or styles (E.g. Bold Text) Add the initial localization support (No localizations included yet) Reduce the number of stages Fix a bug in installing OpenSSH Switch to Sam Bingner's new superb trust cache injector thereby enable support for dual-hash signatures Don't update the hosts file unless it is needed Unblock Saurik's repo if it is blocked Reduce the number of stages Remove unnecessary checks Avoid applying unnecessary kernel patches unless they are needed Make sure that the system snapshot was correctly mounted before using it Unmount the system snapshot after root filesystem snapshot bypass or restore Simplify the credits view Don't do unnecessary logging Improve empty_list (vfs) exploit's success rate Fix runCommand to correctly log Don't run jailbreakd if Cydia Substrate is installed Don't set the boot nonce if it already is Make obvious internal changes Make jailbreaking obviously faster Fix a brutal kernel memory leak Fix shutdown or halt leading to a reboot Fix a logic error that would disable jailbreak patches when Substrate was installed but Load Daemons was disabled that was introduced with the previous build Fix a bug in RootFS Restore for iOS 11.0 - 11.2.6 that was introduced with the previous build Fix a bug in trust cache injection Improve update checker Make jailbreaking obviously faster Fix a bug in RootFS Restore for iOS 11.0 - 11.2.6 that would cause it to not work on some devices Fix a bug in update checker Fix a bug in the posix_spawn wrapper that would cause weird issues on some devices (Known for causing the "(24/40)" issue)
v2.1.1	5 January 2019	Make jailbreaking faster Don't error out if the hosts file doesn't exist Ignore dependencies in Cydia reinstallation Fix false positives Clean Cydia's user data in RootFS Restore Fix a snapshot name confusion bug in RootFS Restore Fix another bug in RootFS Restore Improve memory management Use less external binaries Completely clean Cydia's user data in RootFS Restore
v2.1.3	26 January 2019	Fix a bug in patch finder that affected the shenanigans finder on specific iOS versions Switch to a better versioning system Make downgrading from v2.2.0 possible (Unreleased as of now)
v2.1.4		Decrease the app's size from 63MBs to 22MBs by optimizing assets
v2.2.0	30 January 2019	Install Cydia Substrate if it's not already installed Validate Cydia Substrate files and reinstall it if the validation fails Fix a bug in switching from Electra without RootFS Restore Clean up the kernel data structure patches to improve the performance and the security Remove Substitute support files in the filesystem Remove Substitute support links in the filesystem Uninstall Electra's Cydia Upgrade Helper if it is present Improve preference management Switch to a more efficient versioning system Use a new implementation of the system's libarchive to extract the bootstrap to increase the perfomance Update rsync to increase the performance and the stability of RootFS Restore Improve memory management Re-Extract bootstrap if it was extracted on a different iOS version Credit Saurik in the credits view for Cydia and Substrate Avoid writing to the disk when not necessary Add a verbose log window for the jailbreak Make the exploits slightly faster Make the jailbreak significantly faster and more performant Jailbreak itself now takes almost less than a second run (Exploit not included) Fix a bug in patch finder that would cause the sandbox escape to fail on certain devices Fix theoretical bugs Improve assertion Performance improvements Fix a bug in logging Update bootstrap Enable overwriting files in the bootstrap extractor Fix switching from Electra without restoring root filesystem Fix certain error descriptions Fix RootFS Restore on certain devices Add a switch to hide the log window Decrease the app's size from 81MBs to 25MBs by optimizing assets Add a switch to reset Cydia cache on request Rewrite Cydia installation Install a local repo Remove bootstrap Hide the local APT repo from Cydia
v2.2.1		Fix a bug in installing Cydia / extracting bootstrap
v2.2.2		Fully fix a bug in installing Cydia / extracting bootstrap
v2.2.3	31 January 2019	Fix a bug with extracting rsync
v3.0.0	19 April 2019	Add support for iOS 12.0-12.1.2.
v3.0.1	23 April 2019	Iterate the proc list with proper data locks in Unrestrict to fix a possible race condition in the kernel (Important stability fix) Fix a typo in the app Fix a bug in logging Add iOS 12.1.3 - 12.2 support for the restart button
v3.1	23 May 2019	Rewrite the kernel patches from scratch to improve the stability and the reliability of the jailbreak Rewrite the preference management system from scratch to optimize the jailbreak Rewrite the diagnostics system from scratch to provide more useful information Rewrite unrestrict libary from scratch to improve the stability of the system after jailbreak Add support for switching from the other iOS 12 jailbreaks without restoring the root filesystem and losing data Make Unrestrict add sandbox exceptions for mach_lookup and mach_register Fix issues with processes looking up Substrate port on iOS 12 to fix stability and performance issues Fix support for the broken versions of RocketBootstrap and hid-support tweaks Fix the iMessage audio crash Fix FaceTime calls disappearing on some devices Fix Camera crash on some devices Update the local APT repo to include the latest updates from the Elucubratus repository, including the updated uikittools with rewritten uicache and sbreload commands to make refreshing the icon cache and reloading the SpringBoard significantly faster when installing packages from Cydia Refresh the icon cache during the root filesystem restore to fix jailbreak apps staying on the home screen after restoring the root filesystem Update mobilesubstrate to version 0.9.7033 to disable loader in the securityd daemon to fix a freeze issue on iOS 12 Significantly improve the reliability of the jailbreak when using the machswap or the machswap2 exploit Wait for the user to tap OK on the jailbreak completed alert before respringing the device Improve the jailbreak's self-repairability feature Add a progress HUD to display the status of the jailbreak process Optimize the code Improve assertion Add error-specific error messages Display info about the device on launch Clean up logging Reconfigure the "Reload System Daemons" and "Enable get-task-allow" preferences Make "Enable get-task-allow" a default option
v3.1.1	24 May 2019	Fix running root filesystem restore when not in the jailbroken state on iOS 11 Add an option to automatically restart the SpringBoard once the jailbreak is done instead of waiting for the user to tap the OK button (Requested by a Redditor)
v3.1.2		Fix a bug in the settings user interface on smaller devices Add an option to hide the progress HUD (Requested by a Redditor)
v3.1.3	28 May 2019	Fix a bug in updating the status Fix a logic bug in remounting the root filesystem (Addresses https://www.reddit.com/r/jailbreak/comments/btxqng/help_still_cant_jb_on_ios_1211_using_the_newest/) Make machswap and machswap2 not depend on stealing kernel's credentials to fix a possible reliability issue Update kernel patches to use a safer allocation method Fix missing information in the jailbreak completed notice Fix false information in the jailbreak completed notice
v3.2	1 June 2019	Redesign the user interface (https://twitter.com/HiMyNameIsUbik/status/1134938278489182208) Add dark mode for the user interface Add info buttons for the options Increase the reliability of the jailbreak with the machswap and machswap2 exploits Update jailbreak-resources to fix an issue with the CS_DEBUGGED option
v3.2.1	2 June 2019	Fix several typos in the app Update the bundled uikittools Ignore refresh icon cache failures unless they are actually fatal
v3.3.0	14 July 2019	Add the Sock Puppet exploit for iOS 12.0-12.2 support on A8X-A11 devices Remove the empty_list and multi_path exploits Replace the kernel exploit segmented switch with picker view Add code substitution platform picker view
v3.3.1	16 July 2019	Improve the speed of the jailbreak process by a few seconds Fix a bug in dark mode on the iPads
v3.3.2		Fix a bug in finding kernel offsets on iOS 11
v3.3.3	18 July 2019	Fix the Sock Puppet kernel exploit on iOS 11 Fix the Voucher Swap exploit's compatibility status with iPad Air 2 and iPad Mini 4 on iOS 11
v3.3.4	19 July 2019	Add the Sock Port exploit by @jakeashacks for iOS 11.0-12.1.4 on A7-A9X devices
v3.3.5		Fix a reliability bug in Sock Port Fix Sock Puppet on A8X
v3.3.6		Fix Sock Port failing on 4K devices
v3.3.7		Improve the reliability of the Sock Port kernel exploit on 4K devices
v3.3.8	22 July 2019	Use the rewritten SockPort 2.0 exploit with ~100% reliability, ~100 milliseconds run time and support for all devices on iOS 11.0-12.2 (12.1.3-12.2 on A12-A12X excluded) Fix the jailbreak on iOS 12.2 iPhones and iPods
v3.4.0	23 July 2019	Replace the SockPort 2.0 exploit with the SockPuppet 2.0 exploit with better reliability and stability on older devices
v3.4.1	25 July 2019	Fix the sandbox swap error when using the exploits that are not SockPuppet Add the SockPort 1.5 exploit by @jakeajames for A7-A9X devices (Reliability: ~95% from extensive testing) Disable the SockPuppet exploit on A7-A7X due to reliability issues Add iOS 12.3~b1 support to the jailbreak (Verified working on iPhone 5s) Fix a theoretical reliability bug with SockPuppet
v3.4.2		Fix the SockPuppet kernel exploit not displaying on A8-A8X devices
v3.5.0	18 August 2019	Add iOS 12.4 support to the Sock Puppet (A8-A11) and Sock Port (A7-A7X) exploits
v3.5.1	19 August 2019	Add the updated SockPuppet 3.0 exploit by @umanghere Remove the SockPort and SockPort2 exploits Update system-memory-reset fix to fix random reboots Add Apple to the credits section for development Fix error at stage 2 when jailbreaking after updating from a lower firmware while preserving the app data Fix the app crashing up on stared up on iOS 11
v3.5.2		Fix the SockPuppet 3.0 exploit on iPad Mini 4 and iPad Air 2
v3.5.3		Add WIP partial support for A12-A12X devices on iOS 12.1.3, 12.1.4, 12.2 and 12.4 with support for setting HSP#4 as TFP0, setting kernel_task info, exporting kernel_task port, dumping APTicket, logging KASLR shift and ECID and disabling auto updates
v3.5.4	22 August 2019	Add full-fledged SSH support with root-shell for A12-A12X devices on iOS 12.1.3-12.4 Add support for arbitrary unsigned code execution on A12-A12 devices on iOS 12.1.3-12.4 (Note: Object files will have to be signed with a CMS blob using the codesign utility) Add support for running expired or revoked apps on A12-A12X devices on iOS 12.1.3-12.4 Fix instant or random reboots after jailbreaking with the SockPuppet3.0 exploit on A7-A12X devices on iOS 11.0-12.4 Note: Code injection is not supported on A12-A12X devices as of yet
v3.5.5		Fixes issues with the jailbreak introduced with the last update Fixes iOS 11 support
v3.5.6	24 August 2019	Add support for remounting the RootFS as read-write on A12-A12X devices running iOS 12.1.3-12.4 Adds support for restoring the RootFS on A12-A12X devices running iOS 12.1.3-12.4
v3.6.0	8 September 2019	Completely redesign and rewrite all jailbreak patches from scratch. Make the jailbreak patches static and not dynamic, Meaning that the system stability will be completely stock after the jailbreak. Fix the app crashing on launch when signed with provisioning profiles with non-ASCII characters. Internally prepare jailbreak patches for full-fledged A12-A12X support. Make the jailbreak significantly and noticeably more reliable and faster to run. Add the SockPort 3.0 exploit for improved reliability on iOS 12.4 and devices with low RAM. Fix SSH support for arm64e devices running iOS 12.0-12.1.2. Make it possible to jailbreak with corrupted SystemVersion.plist on iOS 12.4. Make the jailbreak perform proper clean up to preserve system stability in case of a failure. Fix the jbctl command-line utility. Switch to a new technique for setting the system boot nonce generator that works on all arm64e devices running iOS12.0-12.4, (Thanks to @0x7ff for the idea). Fix a bug with the initial Cydia installation getting stuck sometimes. Significantly speed up the initial Cydia installation process. Internally prepare upcoming stable substitute support. Internally prepare Cydia and its resources for full-fledged arm64e support.
v3.6.1	8 September 2019	Improves auto-exploit selection.
v3.6.2	9 September 2019	Fix an issue with the kernel virtual memory access APIs on A7-A8 devices that rendered the jailbreak useless by causing it to fail to copy big kernel data (Error known as: "Unable to copy container profile in kernel memory.")
v3.6.3		Fix an issue with finding kernel offsets on A8