Also they might release it.

https://x.com/calif_io/status/2111080240978223545

It was also tested on iPhone 17e.

But SPTM bypass is still missing.

Here !! https://unc0ver.dev/

Last updated at: 05/24/2020

u/Pwn20wnd New post with unc0ver v5.0.1 It's here down below!!

https://www.reddit.com/r/jailbreak/comments/gpyca8/news_unc0ver_v501_is_now_out/

### ⚠️ Support development with https://phonerebel.com ⚠️

Last updated at: 05/23/2020

05/23/2020 - v5.0.0 was released for production with the following changes:

- Full-fledged support for all devices on iOS 11.0-13.5 with Cydia and tweak injection

Here !! https://unc0ver.dev/

Use Altstore from here https://altstore.io/

u/Pwn20wnd https://twitter.com/Pwn20wnd?s=20

u/EveryApplePro https://twitter.com/EveryApplePro?s=20

All credits for you guys!

PD: if have some problem I can help you! Just DM

I know many people here use that popular iOS device management tool, but there wasn’t anything open-source as an alternative so I built one.

Available on Windows, macOS, and Linux.

Give it a star and try it out: https://github.com/iDescriptor/iDescriptor

Paradigm shift has published USB-Liter8

> This write-up details a novel iPhone BootROM vulnerability discovered and exploited by our team. It covers the underlying bug, the associated exploitation techniques, and the post-exploitation steps required to achieve application processor's boot-chain compromise. The exploit leverages both a hardware bug in the USB controller and a specific configuration flaw present in the device firmware.

> Currently supported SoCs include Apple A12, S4/S5, and A13. While technical support for A12X/Z is possible, it is not currently implemented. We limited our implementation to these devices, as demonstrating successful exploitation across this range was sufficient to thoroughly validate both the vulnerability and the exploitation strategy.

Link to writeup: https://ps.tc/pages/blog-usbliter8.html

Security Researcher matteyeux writes on Twitter:

> A new unpatchable vulnerability has been discovered for the iPhone XS and iPhone 11. The exploit enables booting an unsigned bootloader, which means tools like checkra1n or palera1n could be updated to support these devices.

Link: https://x.com/matteyeux/status/2067600073941295228?s=46

Important info: It looks like this will require special hardware.

> The exploit abuses a very low level bug of the USB controller. This means that default Mac/PC USB stack can't normally reach it. So instead we use Raspberry Pi's RP2350-based microcontroller boards.
The board we use is Waveshare RP2350 USB-A with Lightning to USB-A cable and R13 resistor optionally removed.

**Edit** Title should say vulnerability, not exploit. A vulnerability was found, a proof of concept exploit was written developed.

Also, why the fuck did reddit remove support for Markdown & then replace is with an incomplete rich text editor? > does nothing, and the UI allows no text quote or bulletin points.

Chollima is not a jailbreak.
Chollima has been confirmed to NOT include an SPTM bypass, so it does not have proper tweak injection, and cannot be classified as a jailbreak.

What do we know now?
Chollima includes a kernel exploit, sandbox escape, and an untether.

On devices with the A13 chip and older (iPhone 11 series, 2018 iPad Pro, etc), this is enough to achieve a full jailbreak as momentarius provides a PPL/SPTM bypass for them.

On devices with the A14 chip and later (iPhone 12 series and later, M1 iPad Pro, etc), only very rudimentary tweaks would be possible at the moment, equivalent to apps that used RemoteCall from DarkSword (such as lara and Cyanide).

What's next?
Outside of the demo Calif did with Chollima, a likely SPTM bypass has been patched in iOS 27.2 beta 3 It's unknown if this can be exploited at the moment, but if it is, combined with the exploits from Chollima, this will allow for a full jailbreak on A14 and later devices.

**We still do not know exact device / version support, and we do not know when anything will release.** The best move at the moment is still to remain on iOS 26 or older, as those versions have DelayOTA, which can give you an additional 90 days to update to iOS 27 in the future.

If you're on any iOS 27 beta, install 26.6.1 RC while it's still signed (preferred), or install iOS 27.0.1 (if you can't lose data).

If you're on an iPhone 18 Pro (Max), install iOS 27.0.1, it fixes important usability issues.

Do not update outside of those situations!

(Edit: anyone who says “Should i update?” Please stay on the version you’re on until more things have been announced about Chollima.)

It looks absolutely real. But I doubt the it will ever become public. Any thoughts?

Hello, community. You don't know me, but you probably have heard of s0uthwes (https://twitter.com/s0uthwes). He did a lot to the jailbreak community. He was a moderator of our russian jailbreak group called JailGeek. Last year and a half he had been suffering from leukemia, however he continied to contribute to the community. Recently, he complained in a our group chat that his state of health had deteriorated sharply and that he had only a short time to live. He hasn't apperead online since yesterday. We got worried and called him on his cell phone. His father picked up and told us that he had passed away. These news shocked us. I want to share it with you. I hope that the jailbreak community will remember his contribution. Rest in peace, Pavel.

Welcome to the dark times my friends.... Initiate Survival Mode!

Source: https://mobile.twitter.com/TSSstatus/status/826222607003312128

Thank to the Dev a new jailbreak is released on 17.0 for a12 devices happy jailbreak and happy birthday to the Dev

With the new bootrom exploit usbliter8; comes a whole new set of options for various iPhones, iPad's and now the Apple TV.

Palera1n has been successfully loaded. Keeping in mind: this is still under development but it's an exciting time to see how far things go in the jailbreak community nowadays.

With burnegg's repository, you too can jailbreak your Apple TV second gens but I would heed extreme caution at this time due to the unstableness and this still being in the early stages.

So far compatibility stems from tvOS 26.3 and up but this may change in the future for more firmwares.

:: 🔥🌸 Microkernel iNoot for j305 Copyright 2007-2026, Apple Inc. ::

:: Local boot, Board 0x8 (j305ap)/Rev 0xf ::

:: BUILD_TAG: mBoot-18000.120.36 ::

.... ======== End of iBoot serial output. ======== ....

Imported T8020 iBoot Recfg lock: 0x23df00000-0x23df0f500

==================

pongoOS 2.6.3-fad696b8

https://checkra.in

==================

Booted by: mBoot-18000.120.36

Built with: Clang 17.0.0 (clang-1700.6.4.2)

Running on: Apple A12 (T8020)

pongoOS> fuse lock

Fuses are already locked.

pongoOS> modload

[modload_macho:i] Attempting to load a module

[modload_macho:+] Loaded module checkra1n-kpf2-12.0,16.4

You also do need a pretty complex setup to get things working including a DCSD cable for DFU and a pico2 (or something equivalent) to pwn. Soon there'll be a better way of doing everything but for now, it's nice to know!

More great updates to follow shortly as the ball gets rolling.

### ⚠️ Support development with: PayPal https://www.paypal.me/pwn20wnd - Patreon https://www.patreon.com/pwn20wnd ⚠️

Last updated at: 09/08/2019

09/08/2019 - v3.6.0 was released for production with the following changes:

## v3.6.0 is the biggest stability and reliability to unc0ver ever

- Completely redesign and rewrite all jailbreak patches from scratch

- Make the jailbreak patches static and not dynamic--Meaning that the system stability will be completely stock after the jailbreak

- Fix the app crashing on launch when signed with provisioning profiles with non-ASCII characters

- Internally prepare jailbreak patches for full-fledged A12-A12X support

- Make the jailbreak significantly and noticeably more reliable and faster to run

- Add the SockPort 3.0 exploit for improved reliability on iOS 12.4 and devices with low RAM

- Fix SSH support for arm64e devices running iOS12.0-12.1.2

- Make it possible to jailbreak with corrupted SystemVersion.plist on iOS 12.4

- Make the jailbreak perform proper clean up to preserve system stability in case of a failure

- Fix the jbctl command-line utility

- Switch to a new technique for setting the system boot nonce generator that works on all arm64e devices running iOS12.0-12.4 (Thanks to @0x7ff for the idea)

- Fix a bug with the initial Cydia installation getting stuck sometimes

- Significantly speed up the initial Cydia installation process

- Internally prepare upcoming stable substitute support

- Internally prepare Cydia and its resources for full-fledged arm64e support

(edit) Substrate is still being used on all compatible devices and will never become unsupported by the jailbreak — Other solutions are being worked on for the devices Substrate does not support.

Get it at: https://unc0ver.dev

If you are interested in a possible jailbreak with an A12 or A13 device or a semi-untether with others:

• Stay if you are on iOS 12.4.1-13.1.3
• Downgrade to 13.1.3 ASAP if you are on iOS 13.2
• Save blobs for iOS 13.1.3
• Install tvOS profile to block automated software updates

If you are already jailbroken or on iOS 12 with an A12 device -> STAY

The kernel exploit (TFP0) will require more work with A12 and A13 on iOS 13 — It is better to stay on iOS 12 if possible (For A12).

Semi-untether with other devices would basically be a seamless switch between the upcoming checkra1n jailbreak and unc0ver — You could jailbreak with checkra1n and use unc0ver to enable the jailbreak without a computer when your battery runs out or your phone needs to restart.