Search results

• Main Page
  * [[alloc8 Exploit]] * [[BPF STX Kernel Write Exploit]]
  10 KB (1,218 words) - 18:16, 24 January 2023
• Talk:Firmware/2010
  ...l likely work on iPhone 4 too. There is no such case as iPhone 4 having an exploit that an iPod touch 3G does not. Also this page displays if a jailbreak tool
  8 KB (1,276 words) - 16:19, 28 March 2017
• GID Key
  ...which Apple eventually patches" they mentioned). If a person has a bootrom exploit like limera1n, they can decrypt firmwares by generating the firmware keys f ...- "This package allows you to directly access the iPhone's AES engine from userland. You may encrypt and decrypt with the UID and GID keys, as well as any cust
  10 KB (1,556 words) - 12:50, 17 September 2021
• Talk:Obtaining IMG3 Keys
  Hey, thats my "exploit" ;-) Dev used openiboot. ..., no reason to pwn with it. I was originally strapping this with the diags exploit.
  4 KB (767 words) - 23:36, 19 August 2014
• Jailbreak (S5L8720x)
  ...So you cannot just cheat by sending a 1.1.4 iBoot and then using the diags exploit to strap a patched one ;-) ...remost, they can properly signature check LLB, so the classic "[[Pwnage]]" exploit in which the device would happily run any LLB in NOR without first signatur
  14 KB (2,533 words) - 18:42, 28 May 2017
• Greenpois0n (jailbreak)
  ...ts: SHAtter (a [[bootrom]] [[exploit]]) as well as a userland [[kernel]] [[exploit]] provided by [[User:Comex|Comex]] to make the jailbreak [[untethered jailb ...09}}, which led to a delay in greenpois0n's release (to implement geohot's exploit, not SHAtter).
  4 KB (585 words) - 23:37, 16 September 2021
• Spirit
  ...and]] exploit, unique in that it does not rely on an [[iBoot]]/[[bootrom]] exploit. Since MobileBackup requires activation to be used, Spirit requires [[activ *[[MobileBackup Copy Exploit]]
  2 KB (292 words) - 13:14, 17 September 2021
• 25C3 presentation "Hacking the iPhone"
  ...ft|C05]] The [[iOS|iPhone OS]] primarily runs on a [[NAND]] flash disk. To userland it appears as a normal [[wikipedia:Device file#Block devices|block device]] ...tion [[:Category:Exploits|exploit]], you still need a privilege escalation exploit as well in order to modify this file. And even if you could do that, the [[
  49 KB (8,611 words) - 13:26, 17 September 2021
• Star
  Star (also known as '''[[JailbreakMe]] 2.0''') is a [[userland]] [[untethered jailbreak]] from [[User:Comex|comex]] that utilizes two expl ...Type 2 library used by iOS. Then an integer overflow in [[IOSurface Kernel Exploit|IOSurface.framework]] used to get root access and privileges.[http://suppor
  4 KB (682 words) - 18:57, 12 December 2017
• Hacktivation
  ...tion can be performed by most jailbreak tools that break the boot chain. [[Userland]] jailbreaks such as [[Spirit]] and [[Star]] cannot hacktivate, as they req However, a more proper hacktivation could be done via a [[lockdownd]] exploit on some iOS versions, such as on iOS 7.1.1 and below. This activation gives
  4 KB (724 words) - 21:59, 22 March 2022
• Talk:Usb control msg(0xA1, 1) Exploit
  So would this exploit lead to a tethered jailbreak or would it be untethered? --[[User:JacobVenge ...3.1.2 iBSS/iBEC (if that can even be done?) for that other USB control msg exploit in 3.1.2 iBoot. [[User:Iemit737|Iemit737]] 02:37, 21 September 2010 (UTC)
  5 KB (866 words) - 08:40, 4 January 2014
• Limera1n
  ...he [[limera1n Exploit]]) and [[User:Comex|comex]]'s [[Packet Filter Kernel Exploit]] to achieve an [[untethered jailbreak]] on many devices. The following dev * '''[[User:Geohot|geohot]]''' - The program itself, and the bootrom exploit.
  8 KB (1,143 words) - 15:59, 21 May 2022
• Talk:Limera1n
  I think this page should be cleaned up and include information about the exploit and the tool in one page rather then split them up since little is known ab :I think it should be separate. I think of having an article for each exploit. Tools are something else, which just use these exploits. I fully agree wit
  14 KB (2,319 words) - 09:32, 30 March 2017
• Userland
  ...loit or jailbreak, being entirely software-based, can be patched by Apple. Userland jailbreaks differ from jailbreaks that affect the boot chain of trust, in t ...ng userland jailbreaks include JailbreakMe [[Star]] and [[Saffron]]. Other userland jailbreaks include [[Spirit]], [[Absinthe]], [[evasi0n]], and [[Pangu]].
  636 bytes (90 words) - 20:25, 19 September 2014
• Sandbox
  *If a [[userland]] exploit was discovered in an [[App Store]] app, the [[CodeResources]] would become ...he [[CodeResources]] file makes it vulnerable to the [[Incomplete Codesign Exploit]]
  1 KB (158 words) - 20:31, 19 September 2014
• Talk:Bootrom Dumper Utility
  ...ot need to be any specific platform support for [[usb control msg(0xA1, 1) Exploit|stake]] or [[pwnage2]] i think there is better way using [http://www.beyond :it's the [[limera1n]] exploit. it does not work throughout a vm --[[User:Liamchat|liamchat]] 14:45, 13 Fe
  9 KB (1,366 words) - 09:53, 29 March 2017
• Packet Filter Kernel Exploit
  {{DISPLAYTITLE:Packet filter kernel exploit}} ...ra1n]], [[PwnageTool]], and [[redsn0w]], along with limera1n's [[bootrom]] exploit, to achieve an [[untethered jailbreak]] for devices invulnerable to [[0x240
  4 KB (549 words) - 09:31, 9 July 2011
• Greenpois0n (toolkit)
  * [http://github.com/Chronic-Dev/syringe GreenPois0n Syringe]: Greenpois0n's exploit injector, to assist in booting devices into jailbroken states. ...new vulnerabilities and design super fast, low-level iBoot jailbreaks and exploit payloads, much like the way [[blackra1n]]/[[purplera1n]] works.
  1 KB (173 words) - 15:21, 10 April 2014
• Incomplete Codesign Exploit
  ...to first plant the binary on the filesystem (like the [[MobileBackup Copy Exploit]] used in Spirit, or one of the DFU mode exploits [[Pwnage 2.0]]/[[Steaks4u ...fragments (gadgets). The endgame is to have the userland code trigger and exploit a kernel vulnerability to achieve the jailbroken state. This is fixed as of
  13 KB (1,971 words) - 22:19, 9 March 2012
• IPad 2
  ...ailbroken by [[comex]], using [[JailbreakMe]] 3.0 "[[Saffron]]" which is a userland jailbreak. Apple released iOS 4.3.4 to address the exploited vulnerabilitie ...] which is a userland jailbreak using a modified version of the [[Corona]] exploit used in other iOS 5 jailbreaks. On {{date|2012|5|25}}, all models except fo
  3 KB (376 words) - 02:19, 5 November 2021

View (previous 20 | next 20) (20 | 50 | 100 | 250 | 500)