• Tweak name and description (Most descriptions I used are the developer’s one ,some are from idownloadblog.com and some I added ,as not all tweaks has description and some has vague or very long description).
• Repo.
• Free or Paid&Price.

Tweak list

Essentials

Filza File Manager 64-bit
File manager.
Repo : http://tigisoftware.com/cydia/.
Free.

Apps Manager
Wipe , backup , restore Appdata for installed apps.
Repo : http://tigisoftware.com/cydia/.
Free.

NewTerm 2
iOS terminal.
Repo : https://repo.chariz.com/.
Free.

iCleaner Pro
iCleaner can free up space by removing unnecessary files from your device. Also allow you to manage Launch Daemons, Substrate addons ,and Preference Bundles.
Repo : https://ib-soft.net/cydia/beta/.
Free.

Succession
Restore without updating.
Repo : https://samgisaninja.github.io/.
Free.

SSH Toggle and Port
• A Control Center toggle for turning SSH server on/off.
• A Settings menu for changing the port(s) that OpenSSH listens on, whether root login is allowed, whether password authentication is allowed, and more.
Repo : http://apt.thebigboss.org/repofiles/cydia/.
Free.

AppSync Unified
Allow for the installation of unsigned, fakesigned, or ad-hoc signed IPA packages. Can be used to downgrade or clone installed apps, to download fakesigned IPAs.
Repo : https://cydia.akemi.ai/.
Free.

CocoaTop64
Show CPU , memory usage...etc for processes and apps.
Terminate/kill processes and apps.
GitHub : https://d0m0.github.io.
Repo : Bigboss.
Free.

System Info
Show extra device and battery information and save blobs from settings.
Repo : https://apt.xninja.xyz/.
Free.

Cr4shed
A crash reporter for iOS.
Repo : https://repo.packix.com.
Free.

iSecureOS
iSecureOS is an iOS Security / Anti-Malware application.
Repo : https://isecureos.idevicecentral.com/repo.
Free.

itmsBlock
An essential security patch for iOS14 exploit.
GitHub : https://github.com/tihmstar/itmsBlock.
Free.

FORCEDEXIT
Avoid Pegasus spyware's zero-click iOS exploit "FORCEDENTRY".
Repo : https://tweak.mario.net.in/.
Free.

Sentinel
Sentinel is designed to help you avoid having to re-jailbreaking your device when you run out of battery. When the battery charge reaches a user-set percentage it will initiate a fake shutdown.
Repo : https://repo.dynastic.co.
Free.

Similar to Sentinel is
Puck
Features :
•shutdown percentage •wake percentage
•wake when plugged in •respring on wake •allow music •allow volume changes •allow calls.
Repo : https://aurilia.cafe/.
Free.

ReProvisionReborn
Keep applications signed even after 7 days are up. Automatically resigning of locally provisioned applications.
Repo : Packix.
Free.

AltStore
Jailbroken version of AltStore with on device signing feauture.
Require AltDaemon.
Repo : https://cydia.ichitaso.com/.
Free.

AltDaemon
Allows AltStore to install and refresh apps without a computer.
Repo : https://repo.dynastic.co/.
Free.

Use either ReProvisionReborn ,or AltStore and AltDaemon.

Battery

BattRate
See Active Battery Informations, Current Charge/Discharge, Percentage, Cycle Count, Voltage, Current Battery Capacity...
Repo : https://julioverne.github.io.
Free.

Powercuff
Exposes access to hidden power throttling modes for better battery life.
Repo : https://rpetri.ch/repo/.
Free.

BattSafePro
• Stop charging at designated battery percentage.
• Override stopped charging from notification.
• Control center module for easy enabling/disabling.
Repo : http://udevsharold.github.io/repo/.
Free.

Surge
Replace low power alert with a banner or capsule notification, you can enable Low Power Mode when your device's battery reaches a certain percentage.
Repo : https://repo.titand3v.com/.
Paid : 0.99$

Jailbreak Detection

Shadow
Hide jailbreak detection.
Repo : https://ios.jjolano.me/.
Free and open source.

FlyJB X
Hide jailbreak detection.
Repo : https://repo.xsf1re.kr/.
Free.

KernBypass (Unofficial)
Kernel level jailbreak detection bypass.
Repo : https://cydia.ichitaso.com/.
Free.

A-Bypass
Bypass jailbreak detection.
Repo : https://repo.co.kr/.
Free.

Liberty Lite (Beta)
Bypass jailbreak detection.
Repo : https://ryleyangus.com/repo/.
Free.

vnodebypass
An expermental tool to hide jailbreak files for bypass detection.
Repo : https://repo.xsf1re.kr/.
Free.

HideJB
Hide jailbreak detection.
Repo : BigBoss.
Free.

Ads Blockers & No Ads

MYbloXX
System wide Ad blocker.
Repo : https://myxxdev.github.io/.
Free.

BlockYouX
Systemwide Ads blocker.
Repo : https://cydia.ceadd.ca/.
Free.

UHB - iOS 9/10/11/12 (Untrusted Hosts Blocker)
System wide ads blocker.
Repo : https://repo.thireus.com/.
Free.

Install only one of the above three tweaks.

HostsBlockerToggle (beta)
disable / enable host file from CC.
Repo : https://petitstrawberry.github.io/cydia/.
Free.

Messenger No Ads
Remove ads for Facebook Messenger app.
Disable read receipt.
Disable typing indicator and more.
Repo : https://haoict.github.io/cydia/.
Free.

Reddit No Ads
Remove Ads from Reddit app.
Repo : https://haoict.github.io/cydia/.
Free.

Instagram No Ads
• Remove Ads (New Feeds and Stories).
• Can save media (Photos, Videos, IGTV, Stories, Reels, press and hold to show download option).
• Can Save HD Profile Picture (Press and hold to show download option).
• Show like count.
• Determine if user is following you.
• Disable DM seen and Story seen receipt.
Repo : https://haoict.github.io/cydia/.
Free.

Twitch No Ads
• Remove Ads.
• Can save clip (live/stream video is currently not supported, press and hold on clip video to show download option).
Repo : https://haoict.github.io/cydia/.
Free.

Twitter No Ads
• Remove Ads.
• Remove Fleets.
• Hide News and Trending posts in search tab.
• Hide who to follow section.
• Can Save Video (long press on video to save).
• Skip analytic URL when open a link.
Repo : https://haoict.github.io/cydia/.
Free.

TikTok God
• Remove Ads.
• Download without watermark.
• Auto scroll to next video.
• Change Region.
Repo : https://haoict.github.io/cydia/.
Free.

Keyboard & Text

Keyboard Accio
This tweak makes the "global" key always switch between the first and second input modes of your keyboard settings.
Repo : BigBoss.
Free.

CopyLog
Clipboard history tweak.
Repo : Packix.
Paid :2.49$

Similar to CopyLog is
Copypasta
Repo : https://aurilia.cafe/.
Free.

DockX
Add pasteboard shortcuts to your keyboard dock!
Repo : http://udevsharold.github.io/repo/.
Free.

Similar to DockX with extra features is
Shortmoji
Repo : https://miro92.com/repo/.
Free.

DoubleCut
let you bind text to a specific key and you can choose double tap, triple tap or hold.
Repo : BigBoss.
Free.

SwipeExtenderX
Add swipe gesture-based actions to help make the process of typing on an iPhone even easier than it already is.
Repo : https://repo.chariz.com/.
Paid : 2.49$
Similar tweak is
FlicksForAll
Repo : https://cydia.wuffs.org/.
Free.

Key+
• Action bar with useful editing action, including copy, paste and cut.
• Emoji bar.
• Pasteboard bar with your clipboard item.
• Swiping alternate keys.
Unlike other swiping keys tweaks, it works with iOS swiping typing without any conflicts.
Repo : Packix.
Paid : 0.99$

Marker
Marker is a better and easy way to move the cursor and select text on iOS, it's an alternative for Trackpad and a modern alternative for SwipeSelection.
Repo : https://miro92.com/repo/.
Free.

NoTrackpadDelay
Removes the delay before the force touch trackpad can be used after typing.
Repo : BigBoss.
Free.

Tranzlo
A translate tweak that let you chat in any language you want with ease and without going back and forth between Translating apps or hitting extra buttons. Tranzlo supports most of the social media apps.
Repo : https://miro92.com/repo.
Free.

Loupe
Magnifying glass on iOS 14!
Repo : http://udevsharold.github.io/repo/.
Free.

SITUM Pro
SITUM Pro adds a new button to your Text Selection Menu which helps you look up the text you selected. Also with translation feature.
Repo : Packix.
Paid : 1.50$

Similar tweak to SITUM Pro is
Selector
Select text to search or translate.
Repo : https://repo.co.kr/.
Free.

Boardy
Boardy is a tool that allows you to seamlessly sync your clipboard with your PC. It can: 1-Sync text between PC and the iPhone. 2-Copy an image from the iPhone to the PC.
Repo : Chariz.
Paid : 1.99$

SelectionPlus
Customize the select menu :
• Change menu size, corner radius, and border width.
• Button sizing, custom button ordering, button separator width, thickness, and alignment.
• Built in icons to show with each option.
• Icon only mode to show only icons without text.
• Change menu font and colors.
• Savable themes to easily export and import settings.
• Haptic feedback.
Repo : https://repo.packix.com/.
Paid : 1.49$

Similar tweak to SelectionPlus is
FancySelection
Repo : https://miro92.com/repo/.
Free.

Control Center

FiveColumnsCC
Add a fifth column of modules to your Control Center.
Repo : https://repo.4nni3.com/.
Free.

FUGap
Get rid of the ugly gap at the top of the control center. Repo : Packix.
Free.

CCSpaceItems
CCSpaceItems Gives the Opportunity to Custom Choose the Control Center Spacing Value between the Items!
Repo : BigBoss.
Free.

PowerSelector (iOS 11 to 14)
Power off / Reboot / ldrestart / safe mode / Respring / uicache / Lock / UserSpace Reboot are carried out in ControlCenter and PowerSelector app.
Wi-Fi IP, Global IP, uptime, RAM information can be displayed in the ControlCenter's information section.
Repo : https://cydia.ichitaso.com/.
Free.
Similar to PowerSelector is
CCModules Pro
Repo : Packix.
Paid : 2.50$

CCModules
Add extra modules to your CC.
Repo : https://jb365.github.io/.
Free.

AdvancedBrightnessSlider
Add reduce white point to the bottom of brightness slider to allow further screen dimming.
Repo : Packix.
Free.

Night Shift Module
Change night shift from control center.
Repo : https://shepgoba.github.io/.
Free.

White Point Module
Control Center module to toggle the "Reduce White Point" functionality. Long press / force touch to change the intensity.
Repo : https://opa334.github.io/.
Free.

LocationService (CCSupport)
You can turn on / off LocationService from the control center.
Repo : https://cydia.ichitaso.com/.
Free.

CC On & Off
Toggle off WiFi and Bluetooth from CC.
Repo : https://poomsmart.github.io/repo/.
Free.

CCRinger13
Add a slider for ringer to control center volume module.
Repo : https://shepgoba.github.io/.
Free.

Zefy
Automatically play last played track from Spotify when tapped the play button in control center. Activator extension ,which means you can automatically play from Spotify when Airpods or any headset is connected. And more features.
Repo : http://udevsharold.github.io/repo/.
Free.

Sleepizy 2
Sleepizy allows you to set a timer to stop your music, directly from Control Center. It also lets you automate some actions on timer start and end.
Features :
• Stop music after X hours/minutes • Stop music after X tracks • Let the currently playing song finish before stoping the music • Perform specific actions on timer start: Enable plane mode, Enable DND, Run an iOS Shortcut, Set custom volume • Perform specific actions on timer end: Enable plane mode, Enable DND, Run an iOS Shortcut, Disconnect Bluetooth devices (or disable Bluetooth), Kill Now Playing app • Show the remaining time/tracks in Notification Center below Clock.
Repo : Packix.
Paid : 1.99$

CCShazam
A control center button to invoke Siri and automatically ask her what song is this.
Repo : Packix.
Free.

Flex patches to change size or spacing of CC modules
Size
Spacing

Safari

Safari Plus
Force Https. Upload & download manager. Custom user agent. And many more privacy, actions , gestures and customization for Safari.
Repo : https://opa334.github.io/.
Free.

SafariBlocker
SafariBlocker will show you an alert with the following actions, when a website tries to open a new tab * Allow once * Whitelist Domain * Blacklist Domain * Blacklist URL
Repo : Packix.
Free.

NoGoogleAMP
A simple tweak that automatically calls "Request Desktop Site" on Google AMP sites, so the original website will load.
For use in Safari browser.
Repo : BigBoss.
Free.

SafariTabs14
Add tabs to Safari on iOS 14.0 -14.5.
Repo : http://udevsharold.github.io/repo/.
Free.

SafariFind
Easily access Safari's find feature from share menu.
Repo : https://yulkytulky.com/.
Free.

App Store

AppStore++
Allow downgrade apps in AppStore , block updates ,pypass 200MB download limit , disable search ads ,and disable app thinning.
Repo : https://cokepokes.github.io/.
Free.

StoreSwitcher 2
Adds a button to switch account in App Store account page.
Repo : http://subdiox.com/cydia/.
Free.

LowerInstall
Allow Install Applications In Lower iOS Version. Will work on AppStore & installd.
Repo : https://julioverne.github.io/.
Free.

Phone & iMessage

CallBar XS (iOS 12/13/14)
Re-design the incoming calls view and allow you to use your device while it’s ringing or while in a call . Answer , decline or dismiss a call with ease without stopping what you’re doing.
Repo : https://limneos.net/repo/.
Paid : 3.99$

SwipeToDeleteContact
Simple Swipe to delete an Contact.
Repo : BigBoss.
Free.
Similar tweak is DeleteContact
Repo : https://apt.iarrays.com/.
Paid : 0.99$

SpeakerFirst
Activates speaker on tap in Phone.app, long press activates menu.
Repo : http://udevsharold.github.io/repo/.
Free

AskBeforeCalling Too 13
Ask before making a phone call or FaceTime call.
Ask before sending SMS/MMS/iMessages from the Messages App.
Ask before sending email.
And more.
Repo : http://www.tateu.net/repo/.
Free.
Note : I’m on 14.3 .. Ask before making a phone call doesn’t work unless “Enable for Siri Phone/FaceTime” is toggled on in tweak settings.

—————————
DamnDuration Shows ringing duration in the Phone app.
DoubleRecents Increases recent calls from 100 to 200 in “Recents” tab.
Searchy Adds a search bar into the "Recents" tab.

Repo : https://miro92.com/repo/.
Free.
—————————

Nova
Schedule text messages at a date and time of your choice.
Repo : https://repo.titand3v.com/.
Paid : 2.50$

No Typing Indicator X
This tweak blocks the typing indicators from showing in iMessage. You can still see others typing but they will not see you typing.
Repo : https://cydia.ceadd.ca/.
Free.

Safari in Messages
Open links directly within Messages, rather than launching Safari.
Repo : https://repo.chariz.com/.
Free.

SMServer
Send texts from your browser.
Repo : https://repo.twickd.com/.
Free.

Network

NetFence :
NetFence is a network monitoring tweak. It allows you see what network requests are being made by apps and presents you with an alert, giving you the option to allow or block the connection.
Features :
• View network requests even when they are running in background.
• Configurable settings per app.
• Allow/block all subdomains of a host with wildcard syntax rules.
• Intercept requests made by browsers.
• View host categories like Ads, Trackers, Cryptominers.
• Silent Mode which records all network traffic an app makes but without any prompt.
• Global rules to allow/block any host matching in any enabled app without having to set individual rules.
• Hide requests made by the operating system.
• Quickly search for a specific request by host or app name.
• Export setup rules and recorded requests to text file.
Repo : Packix.
Paid : 3.99$

Similar to NetFence with less features is
App Firewall (iOS 10-14) :
Take control of apps' network access with AppFirewall!
AppFirewall intercepts outbound connections and prompts for your permission before continuing, similar to iOS' other permissions.
Repo : http://apt.thebigboss.org/repofiles/cydia/.
Free.

WiFi List :
See all the WiFi password you entered in your device (or another device if you have iCloud) You can even create a QR code for easy sharing.
Repo : https://www.icaughtuapp.com/repo/.
Free.

StrongerFi12 :
Auto switch to the strongest WiFi Network.
Sort Networks by Strength.
Show Hidden Networks Extra WiFi Info.
Show signal info and/or BSSID for WiFi networks.
Minimum Scan Interval : determines how often StrongerFi will scan for new networks.
Scam Type : Affects how the best network is chosen during a scan (strongest network - prefer 5G - strongest network in same frequency ).
Repo : http://tateu.net/repo/.
Free.

WiFiQR :
Generate a QR code for WiFi networks directly in the settings app.
Repo : BigBoss.
Free.

GoodWiFi :
Remove RSSI Limit.
Show Know Networks.
Show Mac Address.
Repo : https://julioverne.github.io/.
Free.

HarpyReloaded :
List all users on your local network/hotspot. Block Users from connecting to the internet on your local network. Block users from using your hotspot network.
Repo : Packix.
Paid : 2.00$

TetherMe for iOS8+ :
Enables the native tethering for your device and give you the option to share data from data from a VPN or to share a WiF connection to Usb. Also allow you to edit APN settings.
Repo : http://repo.tetherme.net/.
Paid : 4.99$

WiCarrier :
Replaces status bar's carrier name field with the currently connected WiFi network.
Repo : https://rpetri.ch/repo/.
Free.

Similar to WiCarrier is
WiFiCarrier+
Repo : https://phil-highrez.github.io/repo/.
Free.

NtSpeed :
See active traffic network speed in status bar.
Repo : https://julioverne.github.io/.
Free.

Conditional :
Allows restricting which apps are given access to WiFi and Cellular data.
Repo : Packix.
Free.

Privacy

ConfirmPasteboard :
Allow or deny apps accessing the clipboard.
Repo : https://repo.co.kr/.
Free.

Similar to ConfirmPasteboard is
NoClipboardForYou :
Prevent apps from accessing your clipboard. Configure from Settings.
Repo : https://shiftcmdk.github.io/repo/.
Free.

iCaughtU 12+ :
A security tweak that help prevent a situation where device is stolen. Alerts are sent by SMS or email when a wrong passcode is entered along with information to help finding the device like a picture or its GPS location.
Repo : https://www.icaughtuapp.com/repo/.
Paid : 2.5$

Spy :
Allow you to Log and share usage of your apps when lending your phone to someone and see what apps tried to open and what time. Also has the ability to lock the phone or start alarm when chosen apps are lunched . Activation by CC toggle or Activator gesture.
Repo : https://repo.packix.com/.
Paid : 1.99$

A-Shields :
A-Shields allow you to lock the Connectivity Modules in the Control Center or lock your apps.
Repo : https://repo.co.kr/.
Free.

Spoof Location

locsim
A tool to simulate GPS location system-wide.
Repo : http://udevsharold.github.io/repo/.
Free.

Relocate Reborn
GPS spoofer iOS 13+.
Repo : https://repo.nepeta.me/. Repo is down , get it from here https://archive.org/details/relocate-tweak-module-and-app.
Free.

Where
Fake your location.
Repo : https://repo.4nni3.com/.
Free.

LocationFakerX
Change your location in any app. Like: WeChat, Facebook, Find My iPhone....
Repo : BigBoss.
Paid : 1.99$ or 2.99$ not sure

Siri

TellSiri :
TellSiri is a tool that allows you to control siri via notifications. If a notification has the text “TellSiri: “ it will trigger siri with the text input that the notification has after the trigger word! This is specially useful for tasks such as automation that require Siri to function.
Repo : https://greg0109.github.io/repo/.
Free.

SiriUnlock :
Allow Siri to access sensitive data when phone is locked (i.e read text messages , show notes and contacts).
Repo : https://cokepokes.github.io/.
Free.

Camera & Screenshot

SneakyCam :
Discretely take a photo or record a video from anywhere, even with your screen off.
Repo : https://sparkdev.me/.
Free.

Snapper 2 :
Snapper is a tweak that lets you crop a portion of the screen and keep it floating on the screen. Copy text from images to your clipboard.
Repo : Packix.
Paid : 3.00$

ScreenshotActions :
Copy latest screenshot to the clipboard and delete it.
Uploading screenshots directly to Imgur.
Share screenshots.
Repo : Packix.
Free.

PImport :
Photo Importer Directly From Photo App
• Edit Location, Time, Exif, Tiff Meta Tags.
• Import Photo From Direct URL.
• Wi-Fi Sharing.
An Power Full Photo Importer.
Repo : https://julioverne.github.io/.
Free.

ShutterSoundSwitch :
• Silent Shutter Sound: By to ON, turn off the shutter sound of the camera and the screen shot.Also can On / Off by Flipswitch or CCSupport.
• Hide Status Bar: Cut out the status bar and shoot a screenshot.
• Share Mode: when taking a screen shot, to display the share menu.Tap "Upload to Imgur" to copy the URL to the clipboard after uploading.
• No Recently Deleted: By to ON, without taking into Recently Deleted, Delete the files directly.
Repo : https://cydia.ichitaso.com/.
Free.

11Cam14
Add the iPhone 11 Camera App to iPhone SE - iPhone X on iOS 14.
Repo : https://michaelmelita1.github.io/.
Free.

Notification

Priority
Priority allows you to prioritize notifications from certain apps, making sure you never miss another important notification.
Priority Notifications bypass Do Not Disturb
Repo : https://repo.dynastic.co/.
Free.

SmartNotifications 2
Customize your notifications such as adding custom ringtones for apps, enable time frame, snooze notifications, block contacts and much more!
Repo : Packix.
Paid : 1.99$

NotiBlock
Notification blocking and filtering tweak.
Features include blocking based on:
- Content of the notification.
- What app the notification is from.
- Whitelist mode to only allow certain notifications through.
- Block or mute notifications.
- Schedules, to only block certain times and days of the week.
Repo : BigBoss.
Free.

Banner Sounds 13
Change sounds and vibration patterns for Notifications based on filters matching an Application and/or Notification Title and/or Notification Subtitle and/or Notification Message.
Repo : http://tateu.net/repo/.
Free.

ForwardNotifier
Send your notifications to your pc or Mac.
Repo : https://repo.chariz.com/.
Free.

Video & Audio

VolSkip11 :
Skip tracks ; play/pause with volume buttons.
Repo : https://cydia.rob311.com/repo/.
Free.

RoadRunner :
RoadRunner excludes the current now playing app from being killed when Respring.
Repo : https://henrikssonbrothers.com/cydia/repo/.
Paid : 2.25$

AutoRotate :
Disable lock rotation when playing media!
Repo : https://greg0109.github.io/repo/.
Free.

VolumeMixer :
Volume control for individual app.
Repo : Bigboss.
Free.

EQE :
System-wide parametric equalizer (and more) EQE demo https://youtu.be/TgYiLN47uos.
Repo : Bigboss.
Free.

FuckMyHearing :
Prevents iOS from turning down your volume automatically to "protect" your hearing.
Repo : https://repo.twickd.com/.
Free.
Similar tweak is PissOffProtection! (iOS14)
Repo : https://myxxdev.github.io/.

MImport :
• Import Media Directly From Music App.
• Supported Audio files: mp3, m4a, m4r, aac, wav, aif, aiff, aifc, caf, amr.
• Supported Video files: mp4, m4v, mov, 3gp.
• Import m4a/m4r as Ringtone.
• Import Media Via Documents Share/Open In App.
Repo : https://julioverne.github.io/.
Free.

NextUp 2 (iOS 12 & 13) :
Allow you to see next playing song and change it before it start playing.
Repo : https://henrikssonbrothers.com/cydia/repo/.
Paid : 2.75$

YouTube & YT Music

uYou
• Remove YouTube Ads.
• Background playback for YT videos.
• Download Videos/Audio.
• Share/Export saved videos to Camera Roll or to any other app.
Repo : https://miro92.com/repo/.
Free.

YouTopia
A tweak for YouTube.
• No Ads.
• Enable Background Playback.
Repo : https://myxxdev.github.io/.
Free.

iSponsorBlock
iSponsorBlock | Automatically skip annoying sponsorships in YouTube videos.
Repo : https://galactic-dev.github.io/.
Free.

Use (uYou or YouTopia) + iSponserBlock.

Easy YouTube
While watching a YouTube video in fullscreen mode, You can:
• Simply drag your finger left/right on the top half of the screen to adjust brightness.
• Simply drag your finger left/right on the bottom half of the screen to adjust volume.
Repo : https://miro92.com/repo/.
Free.

YouPIP
Enable PIP for YouTube app.
Repo : https://poomsmart.github.io/repo/.
Free.

YTClassicVideoQuality
Revert to the original video quality selector in YouTube app.
Repo : https://poomsmart.github.io/repo/.
Free.

YTNoShorts
Removes Shorts from the YouTube app.
Repo : https://miro92.com/repo/.
Free.

NoYouTubeMusicAds
YouTube Music
• No Ads.
• Play In Background.
Repo : https://www.atebitsy.com/repo/.
Free.

NoYTPremium & NoYTMPremium
Remove YouTube/YouTube Music Premium upsell alerts.
Repo : https://poomsmart.github.io/repo/.
Free.

raspberry
Lightweight tweak that enable background playback for YouTube & YouTube Music and no ads.
Repo : https://repo.twickd.com/.
Free.

Lyrics

MusiLyric
Fetch Lyrics on Music, Spotify, TIDAL, Pandora and LockScreen.
Fetch in Background with best performance no Lags.
After Fetch Lyric will Available Offline.
Use Private API Musixmatch Database.
Repo : https://julioverne.github.io/.
Free.

Lyricify
View the lyrics to your songs on your lock screen. With lyrics support for songs played through Spotify, Soundcloud, TIDAL, Apple Music or any other prominent streaming service.
Repo : Chariz.
Paid 0.99$

Similar to Lyricify is
Lyrication
adds Apple Music style synchronized lyrics to the lockscreen, the control center and works with every music player app you have. If you use Spotify, Lyrication also adds lyrics inside there.
Repo : https://repo.basepack.co/.
Free.

Backup tweaks

IAmLazy
Backup and restore your tweaks from offline backup.
Repo : BigBoss.
Free.

IAmSpeed
Backup and restore your tweaks from an online backup.
Repo : BigBoss.
Free.

Batchomatic
Batch install your tweaks, repos, saved .debs, tweak preferences, and hosts file! All at once, online or offline.
Repo : https://captinc.me/.
Free.

Use either IAmLazy&IAmSpeed or Batchomatic

BackupAZ 4 (iOS 13 - 14)
Backup and Restore :
• Installed Cydia / Sileo / Zebra / Installer Packages
• Deb of your installed tweaks ! • Cydia/Sileo/Zebra sources • Tweaks and Apple Applications preferences • Accounts• Calendar events• Call History • Address book• Health data• iBooks library • Mails• Messages and iMessages • Notes• Photos and Videos• Safari Bookmarks • SpringBoard settings• Voice memos • Voicemails
Repo : Packix.
Paid : 2.99$

DebHoarder
Backup deb file for Cydia, Zebra, and Installer. Hoarded files stored in /var/mobile/Downloads/DebHoarder/.
Repo : http://udevsharold.github.io/repo/.
Free.

Similar tweak to DebHoarder is
redeb
Repo : https://wiety.github.io/cydia/.
Free.

Misc

Jailbreak Updater :
Update Odyssey / Taurine without rebooting and rejailbreaking.
Repo : https://repo.theodyssey.dev/.
Free.

Choicy :
Disable tweak injection for every process individually.
Configure each tweak dylib for every process individually.
Disable tweaks globally (with the ability to set exceptions for individual processes).
Option for an application shortcut to launch the application with or without tweaks.
Repo : https://opa334.github.io/.
Free.

Similar to Choicy is
TweakRestrictor
Repo : https://apt.geometricsoftware.se/.
Free.

DaemonDisabler :
Disable / Enable launch daemons on the fly from the Settings app.
Repo : https://level3tjg.xyz/repo.
Free.

Activator :
centralized gestures , buttons and shortcut management for iOS.
Repo : https://rpetri.ch/repo/.
Free.

ImLyingDownDamnit :
A tweak to correct auto-rotate, so you can rotate your device freely, while lying down, relative to your face!
Auto-detect typical lying down behaviour to avoid prompting you.
"Rollover" prompts, to correct the orientation if you change direction in bed! and more features! Repo : https://repo.dynastic.co/.
Paid : 1.49$

DragEnabler :
DragEnabler enables the iPad drag and drop features for iPhones.
Repo : https://skitty.xyz/repo/.
Free.

LPMAutoLockTime :
Allows you to set a custom autolock time while in low power mode. No more 30 second timeout !! You can set your desired time in the prefs.
Repo : Packix.
Free.

EvilScheme :
Change default browser, package manager, navigator, and more! Evil Scheme takes advantage of iOS URL schemes to allow users to change default apps in which links open.
Repo : https://repo.dynastic.co/.
Free.

AppData :
View the app bundle version and size.
View and copy the app bundle identifier.
Edit the app icon name.
Open the AppStore page of the app.
Access the app bundle and data containers.
Access the app container groups.
Check the app caches size and clear them.
Clear the app badges.
Repo : https://apt.fouadraheb.com/.
Free.

ActivityAction :
is customizable open url and javascript execute addon for MenuSupport.
Repo : Packix.
Free.

MilkyWay 2 :
Activate multitasking and run multiple apps in small windows.
GitHub : https://github.com/akusio/akusio-repo-archive.
Free.
You need to install MilkyWay2-iOS14Fix from this repo https://brendonjkding.github.io.

MilkyWay2+fix is similar to
MilkyWay3
Repo : Packix.
Paid : 2.50$

DiskProbe :
A file browser help find the large storage hogging files and folders on device and free up storage.
Repo : https://creaturecoding.com/repo/.
Paid : 1.50$

Crane :
Crane allows you to create multiple containers per application! A container contains all the data stored by the application. This essentially means you can switch between multiple instances of an application. An optional feature called "Separate Keychains" is also available, this can be used to mitigate some applications signing you out when switching containers.
Repo : Packix.
Paid : 1.99$

Appaze 2 :
Appaze 2 allows to customize volume, brightness, and a bunch of toggles (Wi-Fi, Cellular, Orientation Lock, VPN, …) for a specific app, directly using its 3D Touch menu! Every time the customized apps are in foreground (open from Home Screen, App Switcher, ...) it will set the chosen values.
Repo : Packix.
Paid : 2.49$

iSupervisor :
Enable supervised mode, and with supervised mode you can enable many hidden features:
Enable True Always On VPN.
Global HTTP Proxy.
Apply restrictions to the device (parental controls, block gamecenter, imessages, airdrop, etc).
Block ads.
Repo : https://repo.syns.me/.
Free.

Similar tweak to ISupervisor is RoCordvise
Repo : http://rocord.cf/rocordvise.
Free.

Bakgrunnur :
backgrounding your apps, even when device is locked! Features: • Expiration time for each individual app • Show indicator on homescreen when the apps is backgrounding by Bakgrunner • Option to retire apps gracefully or terminate it when it's expired • Control center module for easy enabling/disabling • CLI tool for scripting.
Repo : http://udevsharold.github.io/repo/.
Free.

Similar tweaks to Bakgrunnur are BackRunner and BackgrounderAction2
BackRunner Repo : https://repo.tr1fecta.co/.
BackgrounderAction2 GitHub : https://github.com/akusio/akusio-repo-archive.

ZXTouch :
A touch simulation.
Repo : https://zxtouch.net/.
Free & open source.

CCPatch13 :
A patch, to CommCenter to remove signing checks.
Repo : Packix.
Free.

SilentMaps :
While driving and listening to music , This tweak makes navigating less intrusive by having beeps instead of siri telling you where to go! With SilentMaps the music volume won't be lowered when getting directions to where to go.
Repo : Chariz.
Paid : 1.50$

CarPlayEnable :
Use any application with CarPlay. iOS 14+.
Repo : https://repo.ghostbin.co.
Free and open source.

Similar to CarPlayEnable is CarBridge
Repo : Packix.
Paid : 9.99$

You’d only buy carbridge over the free carplayenable if you needed ios 13 compatibility.

AutoAlerts :
AutoAlerts lets you automate alert actions.
Repo : https://shiftcmdk.github.io/repo/.
Free.

QuickSearch :
Quickly search for something on the internet. The tweak uses Activator to invoke the search bar.
Repo : Packix.
Free.

XPatcher :
XPatcher is frontend for Flips, libppf, libRUP,and xdeltaIt supports a wide verity of patch formats. You can use it to apply patches and create patched roms , like Pokémon rom hacks and others.
Github : https://github.com/Wh0ba/XPatcher/releases/.
Free.

RevelariOS :
A memory scanning utility similar to Cheat Engine's AOBScan for iOS.
GitHub : https://github.com/PsychoBird/RevelariOS.
Free.

Divisé :
Divisé is a Coolbooter-esque app which is capable of arm64 Dualboots and Tethered Downgrades, all from within the app! Checkm8 is used to tether boot the second OS, after dualbooting/tether downgrading.
Repo : https://repo.dynastic.co/.
Free.

ForceBar :
Force StatusBar is show or hide in a specific apps!
Repo : Bigboss.
Free.

TFDidThatSay?:
See what those pesky "[deleted]" comments and posts were without leaving Reddit!
Repo : https://lint.github.io/repo/.
Free.

Watusi 2 for WhatsApp :
• Freeze your last seen and control your read receipts.
• Keep your contacts deleted messages and statuses.
• Status Add-ons: Never let your friends know that you viewed their statuses – Download any status – disable auto-advance – Privacy contact groups.
• Auto-reply can reply to your messages automatically.
• Schedule messages to be sent at a specific date and time.
• Blacklist some contacts in order to stop receiving & showing their messages in the chats but instead read their messages in a private location.
• Lock a specific chat.
Repo : http://apt.fouadraheb.com/.
Paid : 4.99$

Whatsapp Reveal :
• Hide onlline+hide typing+hide read messages+hide message arrival indicator+hide recording+hide the blue message for audio.
• Confirm call.
And more other features.
Repo : BigBoss.
Free.

ProGesture :
Support iPhone 6s, 6sp, 7, 7p, 8, 8p, SE.
Features :
App Switcher: Grid Switcher, Round card corners.
Battery: Change color, Hide/Show percentage.
Control Center: Animation, Hint Bar, Status Bar, Padding.
Dock: Increase Icon Number, No Background, Round Corners, iPad Floating(Present In-App, Set number recent app, hide/show in-app switcher).
Gesture: Style Original, Disable, Modern, Miniature(Edge Protect).
Hardware Button: Original Button, Press Home for Siri.
Home Bar: Auto Hide, Show In-app, Lockscreen, Inset, Custom size, Swipe Down to Reachability Keyboard: Dark Appearance, No gesture while using, Using non-Latin language, Default/Higher keyboard.
Repo : BigBoss.
Free.

TruestCuts :
Combine Truecuts and StopShortcutNotifications in one tweak.
Truecuts : Enables Siri Shortcuts automation triggers to run without prompting.
StopShortcutNotifications : Prevents the shortcuts app from sending notifications.
Repo : BigBoss.
Free.

Xenon :
Xenon is a tweak that makes it easy to access your iOS device’s filesystem from your PC1. Unlike other methods, setup is automatic and doesn’t require a command line.
Repo : Chariz.
Paid : 0.99$

Flex 3 Beta : (Need an update developer is working on it).
Flex 3 is an incredible platform that lets jailbreakers create their own patches for the system or for installed apps.Moreover, a cloud-based system lets users mingle with one another by sharing their patches with the rest of the Flex 3 community.
Repo : http://getdelta.co/.
Free.

FLEXing :
Open Flex anywhere.
Repo : https://nscake.github.io/.
Free.

TouchFlow :
TouchFlow Shows your touches on the screen . You can choose between show always and show only when recording.
Repo : https://creaturecoding.com/repo/.
Free.

TweakReviewsDB :
TweakReviewsDB is a tweak that lets you view reviews of tweaks.
Repo : http://repo.pixelomer.com/.
Free.

PkgHistory
Records tweak installations, removals, upgrades and downgrades.
Repo : http://repo.pixelomer.com/.
Free.

MacSpoof
Set a custom Mac Address for networks.
Repo : https://repo.elihc.dev/.
Free.

youtube-dl
youtube-dl is a small command-line program to download videos from YouTube and other websites.
Repo : https://apt.procurs.us/.
Free.

HardRespring
Force respring/Idrestart your device with hardware buttons when SpringBoard is unresponsive.
Open source.
Repo : BigBoss.
Free.

overb0ard
This tweak allows you to increase memory limit for specific app/process.
For more info on how to use, visit overb0ard.
Repo : https://doregon.github.io/cydia/.
Free.

Vedette
Monitor and terminate CPU hogging processes.
Features:
• Monitor CPU usage for apps and daemons.
• Configurable CPU percentage and interval for each process.
Repo : http://udevsharold.github.io/repo/.
Free.

DNDStatusBar
Turn the StatusBar to purplish when DoNotDisturb is enabled.
Repo : https://cydia.ichitaso.com/.
Free.

FreePIP
FreePIP is a tweak to un-snap and scale the view of Picture-in-Picture on iOS unlimitedly.
Repo : Packix.
Free.

StripeCount
See the number of installed packages for Zebra package manager.
Repo : BigBoss.
Free and open source.

u0SMSCompleteFix
Fix Unc0ver and Checkra1n SMS/iMessage auto complete.
Repo : https://repo.co.kr/.
Free.

Shuffle
Shuffle organizers the settings app into sections for easier navigation : tweak section, system app section and App Store apps section.
Repo : https://creaturecoding.com/repo/.
Free.

Disable Screentime :
Disable screentime upon install, and re-enable it upon uninstall.
Repo : https://the-samminater.github.io/repo/.
Free.

This list is for iOS 14 .
Note : List is not in order of importance.

iOS 13 list.

If you use Dopamine on iOS 17.0.1 or newer, AltStore can be a really clean way to keep Dopamine and your other sideloaded apps signed.

With a free Apple ID, apps installed through AltStore expire after 7 days. Normally, AltStore needs AltServer running on a Mac or PC to refresh them.

SideStore removes the PC requirement, but it still needs LocalDevVPN for installing and refreshing apps.

Here is how to set up AltStore with Dopamine so everything can refresh directly on the device.

1. Install AltStore Classic

Install AltStore Classic normally with AltServer on your Mac or Windows PC.

You only need the computer for the initial setup.

After AltStore is installed, download the official Dopamine IPA: https://github.com/opa334/Dopamine

Open the IPA in AltStore and install it.

2. Jailbreak with Dopamine

Open Dopamine and jailbreak normally.

Once the device is jailbroken, install AltDaemonModern.

Recommended: install from ichitaso's repo

Add ichitaso's repository to your package manager:

https://cydia.ichitaso.com/

Then search for AltDaemonModern and install it normally.

This is the easiest method and also makes future updates available directly through your package manager.

Package page:
https://cydia.ichitaso.com/depiction/altdaemon.html

Alternative: install manually from GitHub

You can also download the latest .deb release manually from GitHub:

https://github.com/emp0ry/AltDaemonModern/releases

AltDaemonModern is an updated AltDaemon for modern Dopamine rootless setups and uses anisette v3.

3. Refresh without a PC

After AltDaemonModern is installed, AltStore can refresh apps directly on the device.

Open: AltStore > My Apps > Refresh All

You no longer need AltServer running on your PC for normal refreshing.

You also do not need LocalDevVPN.

4. Make the refresh automatic

You can automate the refresh with the Shortcuts app.

Open: Shortcuts > Automation > + > Time of Day

Set it to run once every day.

For example: 10:00 AM

Choose: Run Immediately

Then add the action: AltStore > Refresh All Apps

Save the automation.

Now AltStore will run Refresh All Apps every day.

This keeps AltStore, Dopamine, and your other sideloaded apps refreshed instead of waiting until they are close to expiring.

AltDaemonModern: https://github.com/emp0ry/AltDaemonModern

I've successfully updated my iPhone 12 Pro Max from iOS 15.4.1 (Dopamine Jailbreak) to iOS 17 and got TrollStore 2 working smoothly! Here's a step-by-step guide for those who might find it useful:

Removing Jailbreak And Preparing Device:

1. Install iCleaner Pro: If you're jailbroken, install iCleaner Pro from Sileo.
2. Clean Device: Use iCleaner Pro to clean all caches, battery stats, etc.
3. Reboot into Non-Jailbroken State: Reboot your device.
4. Remove Jailbreak: Open Dopamine, go to Settings, and select "Remove Jailbreak."
5. Install TrollStore: Download the latest version of TrollStore (2.0.7 at the time of writing) or update it if you already have it installed. Make sure "ldid" is on the latest version too.
6. Install Persistence Helper: Add "Persistence Helper" to the Tips app (download Tips from the App Store if not already installed).
7. Reboot Again: Reboot your device.

Cleaning the Jailbreak Leftovers Further Using Dopamine RootHide

1. Install Dopamine RootHide: Download and install Dopamine RootHide Jailbreak from their GitHub: RootHide GitHub.
2. Re-Jailbreak: Jailbreak your device again to access the RootHide app, which includes a tool named "VarClean."
3. Clean with VarClean: Open RootHide, navigate to VarClean > Select all > Clean. This removes any remaining jailbreak tweaks, caches, and folders which the dopamine remove jailbreak option couldn't.
4. Reboot into Non-Jailbroken State: Again, reboot your device.
5. Remove RootHide Jailbreak: Open Dopamine RootHide, go to Settings > "Remove Jailbreak".
6. Rebuild Icon Cache in TrollStore: Open TrollStore, go to Settings, and select "Rebuild Icon Cache."

Updating to iOS 17

1. Supervise Device: Supervise your device using TrollBox (or any tool that can, i.e Cowabunga). Whichever works for you. (I used Cowabunga personally).
2. Enable Supervision: Open TrollBox > Other minor tools > and click on “Supervise !”. Please verify whether your device is supervised before downloading the DelayOTA profile by heading over to your device settings. You should see a text on top which says your device is supervised.
3. Download iOS 17 DelayOTA Profile: Get the DelayOTA profile from here. Once installed, head over to General > Software Update, and start the update.
4. Prepare for Installation: While the update is downloading, close all apps except for TrollStore and the Tips app.
5. Proceed with Installation: Let the device download and install the update.

Post-Update Configuration

1. Configure TrollStore: After booting into iOS 17, open TrollStore from the app switcher (it can only open from there, hence the reason why I said to keep it open during the update).
2. Install Persistence Helper in TrollStore: Go to TrollStore Settings, and install Persistence Helper to any system app (I've used Compass).
3. Refresh App Registrations: Open the chosen system app (In my case, the Compass app) and click "Refresh app Registrations".

Final Steps:

1. Download AltStore or Sideloadly: Get AltStore or Sideloadly on your device to enable Developer Mode in settings.
2. Enable Developer Mode: Go to Settings > Privacy & Security, scroll down to "Developer Mode," and toggle it on.
3. Final Reboot: Your device will reboot.
4. Enjoy TrollStore: TrollStore should now work without crashing.

Note: Certain apps installed through the TrollStore on iOS 15.4.1 prior to the OTA update may experience crashes. However, reinstalling these apps should resolve the problem while preserving their data.

Unsupervise The Device: After performing the OTA update, reinstall TrollBox through TrollStore 2. Then, head over to the same “Other minor tools” section and Unsupervise your device.

Edit: Updated the guide to use TrollBox as an alternate of Cowabunga since many people are having a hard time finding the supervise option and fixed a few typos.

Enjoy!

TrollStore on iOS17 Screenshot

Okay, so yes.. This information is public but you would not think to look for it (and yes, I wrote it. No copy and paste). This thread is for the Jailbreakers that are new to the Jailbreaking community and are still wondering what to do. What I am going to show you is very important for keeping your jailbreak and avoiding unwanted Boot Loops and faulty tweaks keeping you out of your iDevice potentially forcing you to upgrade to the latest public firmware and losing your jailbreak altogether. So, first thing is first. You are going to want to install OpenSSH onto your iDevice. After you do that follow the instructions below:

Edited Deleted the first set of steps as it was not needed for a lot of people.

I will give 2 sets of instructions here, 1 for mac users and 1 for Windows users.

For Windows users: What you are going to want to download to your computer: putty.org

Now that you have that, follow these simple steps to be able to login to your device from your computer!

1. Navigate to settings then go to the wifi tab
2. Next to your wifi network, you will see a I for more information. Tap that. ( ͡° ͜ʖ ͡°)
3. Look on the line that say's IP Adress
4. This is what you are going to use to login to your iPhone remotely.
5. This is the easy part! Go ahead and open Putty on your desktop.
6. Where it says "Host Name" go ahead and type in your IP Adress. Keep everything else the same and press Open on the bottom right.
7. Where it say's login as type "root" without the quotation marks and press enter.
8. When it asks for your password, the default apple password is "alpine" so type that, we will change that next.
9. Awesome! Now you are remotely logged into your device with Terminal! Now we are going to want to change the password, which is easier than you might think.
10. Type "passwd" into the command line.
11. Follow the instructions it gives you in the Terminal, it might ask you to type the current password, in that case, type alpine. Then it will ask you for your new password then it will ask you to repeat that new password.
12. Awesome! You are done with resetting your password! Now onto the part that could potentially save your device when it is in a Boot Loop and or frozen/unable to open Cydia.

For Mac users:

1. Follow the instructions up to step 4 for Windows users, you will need to obtain your IP address.

2. Open terminal once you have your IP address.

3. In Terminal, type "ssh root@[Insert IP Adress Here]

4. Wait..

5. Wait some more..

6. Accept your new computer as host (If it asks, it it does not ask, that is fine!)

7. Login with the password "alpine" as that is the default password for apple.

8. Type "passwd" then press enter.

9. Run passwd mobile, and repeat the process your done.

10. Type your new password then boom, you are set!

11. Awesome! You are done with resetting your password! Now onto the part that could potentially save your device when it is in a Boot Loop and or frozen/unable to open Cydia.

This goes for both Windows and Mac users. This could potentially save your device if it is frozen, unable to power off/respring/go into safe mode/ect. If you are looking to restore your phone but keep your iPhone on the same firmware download [[cydia eraser]] but this is not a tutorial for wiping your device.

Here are the commands that will save your device:

Remotely respring your iDevice: killall -HUP SpringBoard

Remotely put your device into Safe Mode: killall -SEGV SpringBoard

Remotely reboot your iDevice (Warning, for ios 9.3.3 users, this will unjailbreak until you run the PP application again, like normal) type "reboot"

Power off your device with this command: halt

Also, to go into Safe Mode you could remotely run the safe mode .dat file by pasting: touch /var/mobile/Library/Preferences/com.saurik.mobilesubstrate.dat killall Springboard into your terminal. Which I think is a little easier.

Also the obvious things like never installing a untrusted source or any untrusted tweaks for that matter. These tweaks could steal your identity or potentially brick your device. Which is never good.

Be careful evereyone, I would not want to see you guys losing your jailbreaks and having to wait what will seem like forever again to rejailbreak.

Please Read this thread is for the new Jailbreakers. This is not for the users who already know what they are doing. Like I said, this information is already public but I wanted to post it onto the /r/Jailbreak section.

Important: PP users have had issues with MobileTerminal for rooting on their mobile device. In stead of using MobileTerminal use MTerminal.

^{Tutorial by KaizNG}

So, you want to go back to playing Pokemon GO? Don't want to lose any data and/or update to the latest iOS version preventing you from jailbreaking ever again? Then you have clicked on the right thread.

Note: This only works for the unc0ver version of Jailbreak

Note 2: I rejailbroke my phone just to make this have pictures lmao

Edit: User u/firesword14 suggested this

To do a complete restore(idk if that means like restore restore or no jailbroken apps restore), you would need to check "Delete the preference files of the add ons" with iCleaner/iCleaner Pro since RootFS doesn't do that.

Preparation

1. Get "Flame" from Cydia (BigBoss repo)
2. Get the Default Mail app from the App store and log in

Making a list of your tweaks for when you rejailbreak again

1. Go into Cydia, and go to the "Installed" tab at the bottom

2) On that tab, you should see a folder icon on the top left corner of that page

3) Click that icon, and click "Tweaks List"

(You don't really need to click Both because your sources will remain there as long as you don't update your phone or do anything to Cydia)

NOTE: If nothing happens when you click this, make sure you have the DEFAULT Mail app installed and make sure you're logged in

4) You should be redirected to the Mail app you installed earlier

5) Email it to yourself

6) Make sure it went through, if it did, we can move on, if not, make sure you have the prep stuff, and redo.

Actually unjailbreaking your phone

1. Go into the "unc0ver" app
2. Go to the settings page
3. Check the following options:

4) Turn on airplane mode

5) Make sure your phone doesn't lock (for the next step)

6) Go to the main page and click Re-Jailbreak

6.5) You should get two notice pop-ups, click OK to both of them

8) If your phone reboots before you get the pop-ups, go back to unc0ver, check that the two options mentioned above are still checked, and click Jailbreak again

9) After your phone reboots once more, go and click your Cydia app, it shouldn't load and your screen should be translucent for a split second

Your Cydia app should look like that, the rest varies

10) If that's what you see, congrats you unjailbroke without losing any data or updating your iOS version

11) If you still see the white preview like when you try to open it after a normal reboot, retry unjailbreaking from step 1.

To RE-JAILBREAK your phone:

1. Uncheck:

2) Jailbreak

3) Manually install all your tweaks (I know it sucks)

Sorry for the really long thread, but I wanted to added pictures in case the steps were confusing. Hope this helped some of you guys who want to get back onto that Pokemon GO grind, or just want to take a step back from jailbreaking for a bit. If you have any questions, feel free pop them below and I'll try to answer most of them!

The newest method to install 1 year cert. for the english app here

First of all, this method doesn't require you to update your iDevice to delete the jailbreak and it doesn't require your apple ID

Thanks to /u/Toby4ever for sharing the link to the chines tutorial

So here is the steps,,,

NOTE1: If you didnt jailbreak your iDevice, just skip the first step.

NOTE2: If you have Mac, you can install iFunBox in step 4 and you're good to go.

• Delete your signed jailbreak app ( which you signed with 7 days cert.).
• Reboot your device
• Activate Airplane mode and keep the WiFi off.
• Download a fresh copy of inv_ent_final_0801.ipa
• Open any iDevice manegment like iTools or iFunBox ( IPAInstaller-Windows, IPAInstaller-MAC )
• Go to application management and install the application (inv_ent_final_0801.ipa) into your device
• go to your iDevice and disable airplane mode, go to settings -> general -> device management and accept the cert
• Open the jailbreak app ( I myself dont link 25pp application because it hooks into your springboard for no reason so when you jailbreak the first time, uncheck the box like in the picture ).

and thats it. hope it would help.

PS: I did the above 4 times on my iDevices and it works every single time.

Video tutorial by /u/lulwhatno : Youtube

FAQs:

Q: I didn't jailbreak my iDevice, how can I follow these steps ?

A: You just skip the first step and proceed with the method.

Q: Will I loose my tweaks doing this method ?

A: No you won't loose any tweaks.

Q: Whats the different between this version and Pangu English version

A: They both jailbreak your phone, this one is in chines and has 1 year certificate but Pangu is in English but you can only run it using Cydia Impactor which gives you 7 days certificate only.

Q: Can we do this method with Pangu English version of the jailbreak ?

A: No we can't, because pangu's ipa doesn't have any certificate signed with it. So we have to use Cydia Impactor to install it.

Q: When the certificate expires?

A: It will expires in 27th of April, 2017.

Q: Why its called 1 year cert. and expires in 9 monthes ?!

A: The certificate was created on 27th of Aprit, 2016 and was used to sign this jailbreak app. So technically it will expire one year after it was created (common sense).

Q: What if 1 year certificate expires ?

A: You can change the time back before the time it expires and then you can re-jailbreak your device.

Q: I did the steps and my device isn't jailbroken. Why?

A: This method helps you install the jailbreak app which will help you jailbreak later. You can see this video to know how to jailbreak your device using the jailbreak app.

Q: There is no checkbox on the last step, what should I do ?

A: You should be fine because this checkbox appears when you jailbreak your device on the first time.

Q: I already jailbroke my device and didn't uncheck the checkbox when I jailbreak the device. What should I do?

A: The pp store should be installed on your device, you can delete it from Cydia under Installed packages.

Q: How can I confirm this working on my device ?

A: Go to settings -> General -> Device Management . Then you should see the certificate listed as "ENTERPRISE APP" named "Beijing Hong Yuan ....".

Q: Why we use 0727 version of the jailbreak and not 0729 ?

A: 0727 works perfectly fine but 0729 doesn't seems to work even after trusting the certificate on most devices.

Q: Can this be done on iPad Pro ?

A: Yes you can. Also version 0729 has been confirmed working fine on it.

Q: PP helper for windows doesn't ask for my apple ID to install the jailbreak. Whats the different between PP helper and this method ?

A: Some people reported PP helper didn't ask them for their apple ID to install the jailbreak, but I can confirm that it did ask me my apple ID when I tried it. So we came up with this method which is much safer to do.

Special thanks to /u/S4109 and /u/david8428 for clearing some topics.

Edit: Link updated to latest version 0801.

Well technically you just need to gain access to system (iOS 11.1.2 and lower)

TRY AT YOUR OWN RISK

BACK UP BACK UP BACK UP BACK UP BACK UP BACK UP BACK UP BACK UP BACK UP BACK UP BACK UP FIRST

NOTE: Throttling feature is introduced on iOS 10.2.1 for iPhone 6, 6 Plus, 6s, 6s Plus, SE. iOS 11.2 added iPhone 7, 7 Plus (But no jailbreak for 11.2 though), others are not afected (So don't ask me "Does my iPhone affected?")

NOTE 2: When the battery capacity is at 80% or lower then those lines can be found

Open filza and go to System/Library/Watchdog/ThermalMonitor.bundle/[your device model].bundle (Use SystemGuard Lite on App Store to find out your model. Eg: iPhone 6s model is N71AP or N71mAP)

Open info.plist, find contextualClampParams and tap on "i" icon of it

Delete lowParamsPeakPower and lowParamsSpeaker

Restart your device and done, the throttling when battery degraded feature is gone

As you know, the jailbreak is out for 9.2-9.3.3, but not the US version. You still can install the jailbreak, however, through the OG version.

Update: Does not work for iPad Pro 9.7, and the iPod Touch 6 Link1 Link2 Link3 Credits to u/justin97530

This is not an untethered jailbreak, so you need to rejailbreak after each reboot (no computer required after first use). But hey, better than nothing!

64-Bit devices only. This means devices from 5s to the latest for iPhones.

Credits to u/alionfiree for this!

Edit 1: Only windows at the moment, hopefully they'll release a tool for Mac.

1. Install the PP jailbreak tool

2. Click on the green button to start the process

Edit: It'll take a while. If it's spinning, you're good. After, you'll get a captcha.

1. Go to settings -> general -> profiles, and trust the developer. The tool will install the app on your iDevice.

2. Open the PP tool on your device and accept push notifications. After, click the circle then lock your screen

3. Wait until it's done, and you'll get a notification with Cydia installing on your device.

Edit: Adding specifics... When you get the notification, wait around 1-2 minutes. The notification means that Cydia is being installed. Don't do anything while it happens, and after its done, it will reboot automatically.

1. DO NOT uninstall the PP Tool. You're going to need that for each time you reboot and such.

2. Profit

You'll need a computer first in order to download PP on your app. HOWEVER, you don't need a computer to re-jailbreak after a reboot. Just open the PP App and itll do it for you.

Like always, if jailbreak fails the first time, reboot and try again. Pangu addressed this problem in their FAQ.

u/super-fun shared a tutorial with all the steps with pictures here. There are some things that are said here that aren't mentioned in the official tutorial (such as passcode and etc) so it's not mandatory.

I'll update this post as I get more information. Happy jailbreaking!

FAQ:

1. What's a tethered jailbreak? What's the difference? Basically, now each time you reboot your iDevice, you need to rejailbreak. You don't have to connect your device to your computer, but you still have to open the PP App for a re-jailbreak. The only difference of it from an untethered jailbreak is that tethered jailbreak require a re-jailbreak after a reboot while the untethered doesn't.

2. Do I have to re-jailbreak after a respring? Nope!

3. Do the tweaks stay after the reboot? Or would I have to reinstall all tweaks? All the tweaks will stay and the device will be back as if it was jailbroken the whole time once you re-jailbreak through the app after a reboot.

4. Where is profile settings? I can't see it. If you're trying to find the setting before installing the PP Tool on your phone, it won't show, because it only shows when a profile is there. Download the PP Tool and after a while, it'll be there, because after all you need to trust the developer before opening the app. You should've done a captcha before trusting.

5. What's up with it asking for the Apple ID? Apparently some people are getting this message - its another common sideloading feature, so go ahead and give them your apple ID. The app is being installed under your apple ID, so you should give your legit apple ID.

6. Cydia crashes after jailbreaking. What to do? Open the PP Tool and retry the download. It should work after another try. The device should automatically reboot sometime later after you lock your screen. If that doesn't work, wait 10 seconds after clicking the PP tools circle to lock the screen.

7. I've been stuck on the windows pp tool for an hour. Is this normal? If this is the case for you, I'd advise you to restart the whole jailbreaking process from step 1.

^{Tutorial by KaizNG}

(Updated for version 3.4.2 of unc0ver)

DISCLAIMER: This is removing the jailbreak from your iDevice, meaning all traces of jailbreak and Cydia are removed from your phone

So you want to remove your jailbreak? Want to play Pokemon GO again without seeing the "This device, OS, or software is not compatible." screen every couple minutes? Don't want to lose any of your data? Don't want to update to the latest iOS? Well, the last one kind of makes sense because of the news about Jailbreak and Corellium and stuff. Well, you came to the right thread.

NOTE 1: If you feel sketchy about this, know that I took these screenshots while I was unjailbreaking my iDevice. I also rejailbroke it and reinstalled all my tweaks with Batchomatic as seen in the screenshots near the bottom of the thread, so I can confirm that this works because I did this all myself.

NOTE 2: You can also use Midnightchips repo app "SnapBack" to create a snapshot, then restoring rootfs with that app, which fully restores your phone, however, you can revert to your jailbroken state at any time using that snapshot within the app. Here is a tutorial on how to use Snapback. Click here for more info about Snapback. Thanks to u/vanimox for all the info and links.

Preparation

1. Get "Filza File Manager" and "Batchomatic" from Cydia (BigBoss repo)
2. Get "Google Drive" if you don't already have it (If you have another cloud drive like Dropbox, you can use that too)

Making a .deb of your tweaks (To reinstall all your tweaks at once when/if you choose to rejailbreak)

1. Go into Cydia, and go to the "Search" tab on the bottom bar and tap "Batchomatic" on the top left corner of the screen

2) Tap "Create .deb" and let it do its thing

3) Go to the directory shown on the screen with Filza (/var/mobile/BatchomaticDebs) (also shown in the picture below)

4) Save it in whatever cloud storage you use

4.1) Tap the (i) icon on the right of the file

4.2) Tap the upload icon on the top right corner of the screen

4.3) Tap on "Drive" / whatever you use

4.4) If you're using Google Drive, it should automatically transfer you to the Google Drive App, tap "Save"

5) You've successfully made a .deb of your tweaks (Installing .deb at the end of thread)

Actually unjailbreaking your phone

1. Go into the "unc0ver" app and go to settings
2. Enable the following options:

3) Make sure your phone doesn't lock (for the next step)

4) Go to the main page and click Restore RootFS

5) You should get two notice pop-ups, click OK to both of them (I didn't get a screenshot of the second one)

6) If your phone reboots before you get the pop-ups, go back to unc0ver, check that the two options mentioned above are still checked, and click Restore RootFS again

7) After your phone reboots once more, everything jailbreak related should be wiped from your phone

8) Congrats you unjailbroke your device without losing any data or updating iOS

To REJAILBREAK your phone and REINSTALL all your tweaks:

1. Uncheck the following

2) Tap Jailbreak

3) After it jailbreaks, go into Cydia and install "Batchomatic" and "Filza File Manager"

4) Go into "Filza" and find the directory your .deb file is in (it should be in /var/mobile/BatchomaticDebs)

5) Tap on the .deb file you made before you unjailbroke and click "Install"

6) After you see "bash-5.0#" at the bottom of the screen, tap "Done" on the top left tap "Respring" on the top right (tip by u/CaptInc37)

7) After the respring, go to Cydia, go back to the "Search" tab and tap Batchomatic on the top left corner

8) This time tap "Install .deb"

9) Click "Proceed"

10) Let it do its thing, afterwards, it should bring you to the Confirm screen

10) Click Install, this will take a while and your Cydia may crash, but don't worry, it's fine. A few things may load, but you will still need to respring your device for all tweaks to load.

11) Now you should be successfully rejailbroken with all your tweaks and preferences installed.

Sorry for the really long thread but I wanted to be thorough with pictures in case the steps were confusing or worded weirdly. I hope this helped some people who were confused about unjailbreaking, although now it seems to be fairly easy and straightforward. If you have any questions, feel free to drop them below and I'll try to answer them to the best of my knowledge, but if I cant answer them, hopefully, other Redditors will be able to.

Also if any part of this thread is wrong or there is a better way of doing something, please PM me and I will change it accordingly, giving you credits of course.

Guide last updated: 07/07/2018 @ 11:17PM EST.

EDIT #1: Electra 1.0.2 just released two hours ago. For those of you stuck on the Jailbreak button (not the enable jailbreak!), remove the profile from your device, reboot and Cydia Impactor this new version into your iDevice. Then, follow my guide step by step again. This version specifically increases the probability of a successful jailbreak!

EDIT #2: Thank you all for the support and feedback. I'm so glad to see that I'm helping a lot of people with my guide. On this edit, I've added a lot of community tips and tricks into my guide on this edit. And I've also expanded my guide a bit for example, what to do if you restart your device since this is not a untethered jailbreak.

I'm writing this after successfully jail-breaking two iPhone models on two separate iOS 11 versions. (I can upload proof if necessary)

It took me the last 12 hours (almost exactly on the dot) to get both of them jailbroken. So for my fellow jailbreakers, there is hope at the end of the tunnel. Take it from me.

I wanted to give you my tips because I think it can help a lot of people out. Follow them word by word as I've gathered them not from my own experience but from a lot of different reliable sources around the community.

For reference, my two devices were an iPhone X on 11.3.1 & an iPhone 7 on iOS 11.2. Both of them took an obscenely long amount of time because of different reasons, which is why I made this thread in the first place.

Let's get started.

Requirements

---------------------

1. Any iOS device running iOS 11.2 - 11.3.1
2. Cydia Impactor - Simply extract the contents of this zip file into a folder on your desktop - http://www.cydiaimpactor.com/
3. Team Electra's Jailbreak - Most users will download the Non Dev Account version - https://coolstar.org/electra/
4. (OPTIONAL BUT RECOMMENDED BY THE JB CREATORS) tvOS11 - I'm linking a YT tutorial for this one. Video is only 2 minutes long and the process isn't much longer than 2 minutes - https://www.youtube.com/watch?v=oZVvQq_qUvo&t=4s

Installation Tutorial (Getting Electra loaded onto your iOS device using Cydia Impactor)

------------------------------------------------------------------------------------------------------------------------------

1. First, it's highly recommended to take the 10-15 minutes required to backup your device on iTunes. No one on the internet is responsible if you lose your data or anything along those lines. So do yourself a favor and make a backup.
2. Install the tvOS11 profile onto your iPhone. Follow the link provided, watch the YouTube video. You just need to go to the filedropper link in the YT video on Safari on your iPhone, download it, and then you need to install the profile to your phone and reboot your device.
3. Now, ensure that you're plugged into your computer and launch Cydia Impactor. Your device will show up in the drop-down text box. Don't click start.
4. Now, drag the jailbreak file into Cydia Impactor. You will see that it's installing it onto your device.
5. Cydia Impactor will ask you for your Apple ID email & password. Enter them.
6. If you get an error, don't panic. There's a 99% chance you have 2-factor authentication enabled. There's a work around. Simply go to http://appleid.apple.com and login to your Apple ID. In the Security section, generate an app-specific password. Copy this onto your clipboard, re-drag Electra's JB onto Cydia Impactor and re-enter your Apple account info but use the app-specific password instead of your regular iOS password.
7. If no error, you should now see Electra on your home screen. It'll be a new icon.
8. If you try to open it, your iPhone won't let you as you haven't trusted the profile yet. To do this, go to Settings > General > Profile > *your email address* will appear as a profile > tap it > trust it. You need to have WiFi or a connection during this process to trust it.
9. Now you can open Electra. However, DO NOT CLICK JAILBREAK YET.

The Jailbreak Process Requirements

----------------------------------------------------

NOTE: I recommend that you only do steps 1-6 and then restart your device and proceed to the next step. Steps 7-10 are recommended only after you've done about 35+ attempts of jailbreaking. This is because some of these steps are seemingly device-specific so you should only try them if you aren't getting anywhere. For now, only do steps 1-6.

1. Turn off Siri. (Settings > Siri & Search)
2. Turn on Airplane Mode
3. Turn off and keep Wifi off
4. Delete iOS 11.4 update file on your iPhone's Storage. (Settings > General > iPhone Storage > Find iOS 11.4 > Delete)
5. Disable Find my iPhone (Settings > Click your Profile > iCloud > Find My iPhone > turn it off)
6. Remove passcode & if applies, faceid, from your device. (Settings > Face ID & Passcode > Turn off Passcode)
   1. Move to the next step if this is your first time attempting to click Jailbreak or click Enable Jailbreak. Only come back here if you've tried more than 35+ times. Trust me.
      1. Sign-out of iCloud - This one was suggested by a reddit user. When I restarted my device and had to re-enable the JB, this helped immediately.
      2. Low Power Mode - This one was suggested by a reddit user on iPhone6S iOS 11.3.1. This one helped them after supposedly 600 attempts.
      3. Turn off Bluetooth - This one was suggested by a reddit user.
      4. Turn off Do Not Disturb - This one was suggested by a reddit user.
      5. Connect your iDevice to a charger.

The Jailbreak Process (The hard part)

------------------------------------------------------

NOTE: This process can take a long time, as you can see from my experience. I hope you've taken all of my steps because one small thing can be the difference. Due to all of the issues, there's already a new version of the Electra Jailbreak only one day after the initial release. There's possibilities of newer versions coming out that are more predictable and there's also a possibility that this is just the way everyone has to jailbreak the device. This is the part that a lot of people are stuck on so I've compiled a list of everything that has worked for me on my two devices and hundreds of others on Twitter, Reddit, YouTube and whatnot. The ends justify the means in this case.

1. Double check to ensure you've done step 1-6 in the JB process requirements listed above. Take it serious because for me, step 5 was something that took me 4 hours to figure out. As soon as I figured it out, boom, I was jailbroken.
2. Go to Electra and click Jailbreak.
   1. Possibilities and what you should do after clicking jailbreak
      1. Please Wait (1/3) & then reboots - This is extremely common right now. Simply, wait for your device to come back up, ensure Airplane mode is on & WiFi is still off and then go back into Electra and click Jailbreak again. I've done this more than 150 times just today, so I wish you the best. PRO TIP: After 3-5 tries of it rebooting every time, it's best that you force restart your device. Google how to do that as it's different for different devices.
      2. Please Wait (2/3) & then reboots - This is quite common right now. You need to do the same as the one above. Continue to let the device boot up, and try again.
      3. Please Wait (2/3) & then Electra app turns black but you can still go to the homescreen - This is also quite common. You just need to keep trying again and again.
      4. *Please Wait (2/3) & stuck* - Make sure you've waited at least 5 minutes to ensure it's stuck. Then, check your home screen and see if Cydia is there. If Cydia is there, you can reboot and move to the next step. If Cydia is not, reboot and retry.
      5. Installing Cydia & reboots - Success! Move onto the next step.
      6. Error: amfid patch - Same as above. Continue to reboot and retry.
      7. Error: rootfs remount - Ensure that you have deleted the iOS 11.4 updates and any other updates on your iPhone storage (step 6 of JB Process Requirements), ensure that you have the tvOS profile (Step 2 of the Installation Tutorial), then reboot and retry. If this happens more than 10 times, you should erase all content and settings and try again.
      8. If you aren't having luck after 35+ tries - At this point, try steps 7-10 on the Jailbreak Process Requirements, reboot, ensure everything is correctly on/off since rebooting can sometimes mess with settings and then try to jailbreak.
3. Upon the reboot, you will notice Cydia on your home screen but it will crash as soon as you open it. That's a good sign.
4. Now, reopen Electra and you will see that it says Enable Jailbreak. Click that..
   1. Possibilities and what you should do after clicking enable jailbreak
      1. *Please Wait (1/3) & then reboots - This is extremely common right now. Simply, wait for your device to come back up, ensure Airplane mode is on & WiFi is still off and then go back into Electra and click Jailbreak again. I've done this more than 80 times just today, so I wish you the best. PRO TIP: After 3-5 tries of it rebooting every time, it's best that you force restart your device. Google how to do that as it's different for different devices.
      2. Please Wait (1/3) & then Electra app turns black but you can still go to the homescreen - This is also quite common. You just need to keep force reboot and retry.
      3. Please Wait (2/3) & then reboots - This is quite common right now. You need to do the same as the one above. Continue to let the device boot up, and try again.
      4. Please Wait (2/3) & then Electra app turns black but you can still go to the homescreen - This is also quite common. You just need to force reboot and retry.
      5. Process goes through and you see a loading icon - Success! Upon respring, your device will now be jailbroken and you will have access to Cydia.
      6. If you aren't having luck after 35+ tries (SEPARATE TRIES FROM THE LAST JAILBREAK BUTTON) - At this point, try steps 7-10 on the Jailbreak Process Requirements, reboot, ensure everything is correctly on/off since rebooting can sometimes mess with settings and then try to jailbreak.
5. Once you open Cydia, you will get an error since you are not connected to a network. Simply turn on WiFi or turn off Airplane mode. Then, click reload on the top right hand side of your Cydia app.

Read this if you think you are Jailbroken but Cydia isn't appearing

----------------------------------------------------------------------------------------------

1. This advice applies for people who:
   1. Clicked Jailbreak, went to (Step 2/3), black-screen'd
   2. Clicked Jailbreak, said it installed Cydia but there's no icon
   3. Clicked Jailbreak, said it installed Cydia and then stuck on (Step 2/3) or some variation
   4. Electra has the 'Enable Jailbreak' button but you don't see Cydia
   5. A few other variations.
2. If you are one of these people, I highly recommend that you attempt to SSH into your iDevice. There are quite a few tutorials around reddit. I will give my amatuer instructions on how to do this because I've never successfully SSH'd onto my device so take my advice here with a grain of salt. I highly recommend looking up a tutorial.
   1. Get your device's IP.
   2. Download & Open PuTTY or WinSCP on your PC (if you have Mac, please find separate tutorial as you need to use Mac's Terminal)
      1. For PuTTY, connection type SSH. (Usually default)
      2. For WINSCP, connection type SCP. (Usually not default)
   3. Enter your device's IP in the IP field and make sure the port is 22.
      1. On PuTTY, click login. If you establish connection, login with username as root and password as alpine.
      2. On WINSCP, put username as root and password as alpine.
   4. Connect.
   5. Run command uicache and Cydia should appear on your spring board in a few seconds.

Read this if you are on the verge of giving up

-----------------------------------------------------------------

Note: I see a lot of people giving up after a few hours of trying and honestly, that's not enough to give up. If you need to take a break, do that. You should only resort to this if you can't get past the Jailbreak portion of Electra. If you're on Enable Jailbreak, it's recommended that you follow "Read this if you think you are Jailbroken but Cydia isn't appearing." AGAIN, this is only for people that can't even get Cydia on their device.

Basically, you need to install the jailbreak without the tweaks. When you do this, you get the ability to SSH into your device, get Cydia to show up and then you can install all the tweaks and have the same thing as everyone else. This should be a very last resort because you may encounter a lot of new errors in relation with your network, the tools required to SSH into your device and much more.

Because I've never done this and I'm not the best source, here's a tutorial by another reddit user.

If you're discovering this thread after you've already installed Electra and have had no success

-----------------------------------------------------------------------------------------------------------------------------------------

NOTE: This advice is only for people who could not successfully get Cydia on their device in the first place. I had to deal with this so I can only really give advice for this.

1. Go to your profiles and delete the Electra profile.
2. Reboot
3. Go through all of this guide now and carefully follow the steps.

(I'd venture to guess that there's somethings on this guide that you may not have tried on your first go. For me, I needed to do this on my iPhone X for it to work aswell)

After Jailbreak - Compatible Tweaks

-------------------------------------------------------

• Install tweakCompatible or go to their website. You can see an updated and crowd-sourced pool of working, partially working and broken tweaks.
• There's also a reddit thread with a list of compatible tweaks that's being updated - https://www.reddit.com/r/jailbreak/comments/8woopk/discussion_post_your_working_1131_tweaks_here/
• You can also check out YouTube videos as within the next few days, tweak videos will be spreading like wildfire. I know that iCrackUriDevice & iTwe4kz both have videos out right now that showcase compatible tweaks.

Re-enabling Jailbreak after Restarting Device

-----------------------------------------------------------------

1. If you jailbroken with the initial version or older version of Electra jailbreak. (You can check by going to the Electra app and a notification will pop-up if you have connection telling you to update)
   1. It's recommended that you delete the current profile of Electra and install the new version of Electra.
      1. Go to (Settings > General > Profile & Device Management > *Your Email Address* > Delete App (Do not worry, this does not delete your jailbreak, tweaks or any of that.)
   2. Launch Cydia Impactor, download the new version of the Electra Jailbreak and install it.
   3. Follow my guide again. Make sure you follow the Jailbreak Process Requirements and follow step #4 in the jailbreak process until success.
2. If you are jailbroken with the latest version of Electra
   1. Follow my guide again. Make sure you follow the Jailbreak Process Requirements and follow step #4 in the jailbreak process until success. I also recommend doing the same things you did that got you jailbroken in the first place.

P.S. I've been up for way too many hours so please excuse my mistakes and if I've left things out. I love the Jailbreak community and after seeing all of the people that are stuck, I wanted to put something together that might be able to help. Please message me or leave a comment if there's something I need to fix. I will take a look at this thread in my free time and make the appropriate changes.

P.S.S Thank you to the anonymous person for gilding this thread!

Summary/TL;DR: This is a general bypass guide for the majority apps that are usually hard to bypass jailbreak detection checks in. Examples of apps like this consist of Pokemongo and most Bank apps. Unfortunately this doesn’t work for all apps but it will in the future, more on this later.

NOTICE: Latest PokemonGO now needs memecity part of the guide.

List of working apps:

1. PokemonGO Version: 1.155.0 Bypass Method: Patched KernBypass memecity
2. PeacockTV Version: 1.0.11 Bypass Method: Patched KernBypass memecity
3. Switch Online Version: 1.9.0 Bypass Method: Patched KernBypass memecity
4. Pocket Camp Version: 3.3.2 Bypass Method: Patched KernBypass memecity
5. COD Mobile Version: 1.0.16 Bypass Method: Normal KernBypass

Apps I tested that are not working:

Mario Run, Mario Kart, Fortnite, Random Dice App, VR-SecureGo, Raiffeisenbank Mobilní eKonto, and Fate GO

I will test apps requested to me in the future and look for alternative bypasses when I have time.

Index:

1. Prerequisites
2. Setup
3. Video Demo
4. Troubleshooting

Prerequisites:

• Main Bypass

1. KernBypass 0.0.3

• Tweak Disabler

1. Choicy

• Shell/Terminal/SSH/File Browser

1. Filza
2. NewTerm 2
3. MTerminal
4. SSH

• App Data Wipe

1. Crane/Crane Lite
2. Apps Manager
3. Filza
4. Deleting the app itself.

Not all of theses prerequisites are needed I just listed all of them possible that I could think of.

However I highly recommend this setup:

• Main Bypass This guide is based off KernBypass so the only one I recommend is KernBypass. But there are two versions: 0.0.2 which you have to manually run every-time you reboot or 0.0.3 which runs as a daemon automatically when you jailbreak. I recommend 0.0.3 because it requires no effort.
• Shell/Terminal/SSH/File Browser For running commands I highly recommend NewTerm 2 if you don't have a computer or not near by it. Otherwise ssh is always the best option functionality-wise. For modifying the filesystem, use Filza. You can also modify the filesystem via terminal commands.
• App Data Wipe For wiping app data per application, I highly recommend, Crane or Crane Lite. It's easy to use and you can switch between app data saves, or wipe app data in general and even use a custom keychain per app data save. Second best is Apps Manager, its easy to use but has caused issues for me in the past so be warned if you use it. For a more manual approach you can use Filza. Filza has Apps Manager built in but its just more manual and slimmed down. Lastly you can just delete the app itself and reinstall it. Overall crane is the best method.

Setup:

• KernBypass: There is no repo for KernBypass unfortunately so you will have to install the deb manually through terminal, ssh, Filza, or some package managers even support deb installation.KernBypass 0.0.3(Most recommend version): jp.akusio.kernbypass_0.0.3_iphoneos-arm.deb
• KernBypass 0.0.2(I highly recommend you don't use this version): jp.akusio.kernbypass_0.0.2_iphoneos-arm.deb
• Patched KernBypass memecity 0.0.3: deb: com.apple.memecity_0.0.3_iphoneos-arm.deb on repo: https://repo.quiprr.dev/ Patched by me hosted by quiprr. The only thing you have to do is remove the old kernbypass, move the file jp.akusio.kernbypass.plist to com.apple.memecity.plist it is located in /var/mobile/Library/Preferences/ Temporarily rename /var/lib/apt then reboot. jp.akusio.kernbypass.plist and /var/lib/apt must not exist. /var/lib/apt is a needed directory for your jailbreak to work so do not open a package manager if you rename them, rename them back before opening a package manager. Note that if /var/lib/apt is missing you package manager will not work so make sure to only rename it when you want to use the app.

BigBoss Packages:

Choicy, Filza, and Apps Manager can be installed from the default repo BigBoss.

Chariz Packages:

You can get NewTerm 2 (its called NewTerm (iOS 10-13)) on chariz repo: https://repo.chariz.com/

Packix Packages:

You can get Crane or Crane Lite from packix repo: https://repo.packix.com/ Once you installed all or most of these, we are ready to begin.

KernBypass 0.0.3 starts automatically when its installed or when you re-jailbreak. If you decide to use 0.0.2, you are on your own sorry.

(Even if you don't currently use checkra1n or odysseyra1n but used them in the past on your device, follow this):

Checkra1n/Odysseyra1n Only:

Open you command executer of choice, NewTerm 2 or via SSH. Login as root and run these commands(No output generally means command succeeded.): The password root is alpine unless you changed it.

su root

umount -f /binpack

umount -f /var/binpack

rm -rf /var/binpack

rm /var/checkra1n.dmg

If both umount commands say not mounted just ignore it and run the rest of the commands. If checkra1n.dmg is not found just ignore and continue on with the guide.

Any jailbreak:

Now you can open settings, go to tweaks, then go to KernBypass. Switch on the App you want to bypass. Now go back and go to Choicy settings. Tap on Applications, select the app you want to bypass, select custom injection. It should show the whitelist tab. Turn off every switch except (crane if you have it) and zzzzzzzzzNotifyChroot. It should look like this:

Now if you are using Crane/Crane Lite go to Crane settings and select the app you are bypassing and delete app data. Do the same for Apps Manager or Filza if you are using either of those instead. If you are just lazy, delete the app and install it again.

Now you are ready to attempt to bypass the app :)

Note this doesn't work for all apps.

It does not work for Fortnite.

When you open the app, if it freezes on the splashscreen for 10-15 seconds, this meens KernBypass failed or isn't actually running(More on that in troubleshooting). If the app crashes instantly the bypass most likely won't work for that app. :(

Now you are here either having succeeded at bypassing the detection or it failed. If it succeeded, yay, if it didn't check out the troubleshooting tab.

Video Demo:

Here are a video demo of me using KernBypass, choicy, terminal, and crane to bypass pokemongo:

PokemonGO Bypass Demo

Troubleshooting:

10-15 Second Splashscreen freeze

If the app freezes for 10-15 seconds on the splashscreen, this means KernBypass isn't running. If it is installed then it should be running. It may have crashed. Install CrashReporter from revluate repo: https://revulate.dev/ and or cr4shed from packix repo. If you see changerootfs anywhere in the crashlogs this means kernbypassed crashed. You can fix this by reinstalling kernbypass and or rebooting.

Support:

You can either reply to the page with your issue, dm me on reddit, or go to the r/Jailbreak Official Discord Server: https://discord.gg/jb On the discord you can Navigate to the #genius-bar channels to be assisted with any issue you may have.

News:

Right now KernBypass only spoofs the root filesystem. In the future although not right now, a var spoofing version will be released. Right now it is currently undergoing development :) This should let you use far more apps while jailbroken.

In other news for those who are interested these are the files pokemongo is checking :) https://pastebin.com/z40Rb1e9

Credits:

This guide is made by me or me alone. If anyone shares this around without posting the direct link to this post, please report them. Also only follow this guide, don't listen to people put words in my mouth by them playing telephone lol.

Thank you Akusio for KernBypass and those Akusio has credited.

Thank you Ichitaso for making the 0.0.3 KernBypass update.

Thank you opa for making choicy and crane. Thank you tigisoftware for making appsmanager and filza.

Thank you kirb for making chariz and newterm 2.

Thank you Muirey for making cr4shed.

Thank you Revluate for hosting CrashReporter for iOS 13, ashikase for the original one and sparkdev for updates.

Thank you for using my guide :)

Thank you apple for deleting fortnite lol.

Contact:

https://discord.gg/jb

Cryptic#2693

https://twitter.com/Cryptiiiic

u/MrCryptiic

This guide works for iOS versions as low as 9 upto the latest

This post is for everyone who couldn't understand or run into errors when trying out AltServerPatcher on Windows. If you have any questions, leave them in the comments, I'll try and answer them.

Requirements

• A laptop/PC on Windows 10/Windows 7 (Might work on other versions of Windows. Can be done on a mac, but the process differs)
• An iPhone or IPad device
• AltStore (Can be downloaded here: https://altstore.io/)
• iCloud (AltStore won't work without it. Get it here: https://support.apple.com/en-us/HT204283 )
• AltServerPatcher (Needed for installing your own IPAs. Can be found here: https://ipg.pw/altstore/AltServerPatcher.exe)
• Web server for Chrome (To put your IPAs on a local webserver. Its an app for Chrome, here is the link: https://chrome.google.com/webstore/detail/web-server-for-chrome/ofhbbkphhbklhfoeikjpcbhemlocgigb)
• The IPA you want to install. For this tutorial I'll use uncover from this link: https://github.com/pwn20wndstuff/Undecimus/releases)
• Patience (Uhhhhhh)

Steps

1. Once you have everything downloaded and installed, open the turn on the webserver (Which should be in the Apps section of chrome).
2. Choose the folder which has your IPA. (Should be in the Downloads folder).
3. Once after its done and the server is turned on, go to 127.0.0.1:8887 and you should see the IPA listed in there.
4. Locate the IPA in there, right-click it and copy link address.
5. Now open AltServerPatcher (In administrator mode) and on the dropdown make sure its "Custom IPA Link" and paste the address which you copied in Step 4 onto the IPA URL and patch it. (If it cannot fit inside there, rename the IPA to something with little characters and repeat from Step 3)
6. After its done patching, open AltStore and connect your IOS device to your PC.
7. There will be a an icon in your notification panel, Right-click that and install AltStore.
8. Enter your AppleID details which will be used for the installing. (If it gives an error -22400, try again but this time do not use caps on your AppleID. Example: [PeterPan@apple.com](mailto:PeterPan@apple.com) -> [peterpan@apple.com](mailto:peterpan@apple.com)).
9. It will now install it on your device and you will be notified when its successful.
10. On your iPhone/IPad go to Settings>General>Profile & Device Management and trust the Developer App
11. open the app and enjoy it.

This should install the app onto your iPhone/iPad. If you have any issues let me know, ill try and find a fix.

/* If you’re having trouble related to crashing, there’s an updated version of AltServerPatcher: https://gitlab.com/laithayoub71/AltServerPatcher made by /u/laithayoub71, this might fix it!

/* Many thanks to /u/InvoxiPlayGames for his AltServerPatcher!

The new Yalu Beta 3 was released today! This beta adds support for the following devices and fixes the Apple Watch issue.

Supported Devices:

• iPhone 6S and 6S Plus: 10.0.0 -> 10.2
• iPhone SE: 10.0.0 -> 10.2
• iPhone 5S: 10.0.0 -> 10.2
• iPhone 6 and 6 Plus: 10.0.0 -> 10.2
• iPad Pro: 10.0.0 -> 10.2
• iPad Air : 10.0.0 -> 10.2
• iPad Mini 2 and 3: 10.0.0 -> 10.2
• iPod Touch 6G: 10.0.0 -> 10.2

Direct Yalu 10.2 Beta 3 Download: https://yalu.qwertyoruiop.com/yalu102_beta3.ipa

Cydia Impactor: http://www.cydiaimpactor.com/

How to Jailbreak:

1. Download the Beta 3 .ipa file and Cydia Impactor from the above links.

2. Plug your iDevice into your computer.

3. Open Cydia Impactor on your computer with your iDevice plugged in and drag the .ipa file on the Cydia Impactor window.

4. Type your Apple ID and Password in. This is only sent to Apple to sign the ipa. No One gets this but Apple.

5. Wait for it to side load the app on your device.

6. You no longer need a computer for the rest of the steps, you can aswell unplug your device.

7. Go to Settings -> General -> Profile and Device Management. Click the Yalu profile and trust it

8. Go on to you iDevice and Open the Yalu app that Cydia Impactor Installed.

9. Press the "Go" button and wait for the jailbreak to finish. It is normal for the "Storage almost full" pop up to appear. Just click done and wait. If Cydia doesnt appear the first time just repeat Steps 7 through 8 again until it does.

How to Upgrade off a previous Beta:

1. Reboot Device and delete the yalu102 app.

2. Download the Beta 3 and Plug your device in your computer.

3. Drag the new ipa on to Cydia Impactor again and type your Apple ID and Password in.

4. When Impactor is done doing its thing unlock your Device and go to Settings -> General -> Profile and Device Management. Trust the Yalu app and click the new Yalu app.

5. Click the "Go" button and your done. All of your tweak will be there.

Useful Information:

Before downloading anything check the iOS 10.2 compatibility sheet found here: https://docs.google.com/spreadsheets/d/14e9GB-PNhDJuKI799InVFWrUQc-qn-Wd3zRJHKGkKr0/htmlview?sle=true#

My tweak list:

• Alkaline
• Bloard
• BlurryBadges
• BlurryLaunch
• CircleIcons
• Cream 2
• Cylinder
• NoSlowAnimations
• PM, really?
• RoundDock
• StatusModifier
• SwipeForMore

Other:

• MTerminal
• Filza
• Anemone and Lotus Theme

Tweaks to Stay Away From:

• Appsync Unified: Causes Bootloop
• Biolockdown: Causes Bootloop
• Protect My Privacy: Causes Bootloop

Mobile Substrate Works too btw :)

Edit: Use the new beta found here:https://yalu.qwertyoruiop.com/yalu102_beta7.ipa

Same steps apply

IF YOU DO NOT KNOW WHAT THIS IS, PLEASE READ BELOW!

It's Cydia Impactor but on the iPhone itself, that only works in Jailbroken mode. So you can resign yalu, which is the app that let's you respring into jailbroken state, with no computer.

Tutorial is below.

I saw a ton of posts telling how, they never worked for me. But I'm sure most of you tried and it worked. If it didn't work. Please try these steps and see if it works for you as it did for me. :)

0.) If you have already installed the Cydia Extender Installer from this repo and have attempted the terminal code and it didn't work, then you should go into your recent installed and uninstall of the dependencies it installs for you, and make sure to uninstall Appsync Unified, and no need to delete the Cydia Extender Installer or MTerminal or Filza fyi.

1.) Install MTerminal and this and Filza File Manager.

2.) Next, get your TeamID by going into /var/containers/Bundle/Application/[the UUID with your yalu app in it]/yalu102.app in Filza. Open embedded.mobileprovision with the built-in text editor. Your Team ID is the 10-digit string under the ApplicationIdentifierPrefix key.

3.) After that go into MTerminal and type "su".

4.) The default password/what to type after that is "alpine".

5.) Then type "cyextender YOUR ID YOU JUST COPIED"

6.) Then press return and see all of the stuff fly by until it says Done and Cleaning up or something.

7.) Open Cydia Extender app on your homescreen.

8.) Then once there it should want to install a VPN, let it.

9.) Once back in Cydia Extender, close it down in multitasking and load it back up, then wait a little bit.

10.) Now it wants a Profile, so it will open safari to some IP adress and then to the profile page in settings. Install it and type in your passcode.

11.) It should go back to Extender and then safari will open.

12.) DO NOT CLOSE SAFARI. Get to qwertyoruiopz website for Yalu, googling yalu should bring it up.

13.) Tap on the IPA link and it should load a new page that wants to open it with Extender. Tap on it and then it should load Extender with a apple ID and passcode, if it does not, open safari again and tap on open in Extender again.

14.) After typing in your email and pass, wait a bit on that Extender screen, Do not tap on Installed at all, that crashes Extender for me and broke everything for me.

15.) Now it should ask to install Yalu102 or whatever, click install and then it's on your homescreen installing.

16.) Next week, when it expires, Go into Settings>General>Profile and delete the Cydia Extender profile.

17.) Open Cydia Extender again and it will want to install another profile.

18.) GO TO STEP 11.

TIPS: 

• If MTerminal does not show on your homescreen, please run iCleaner.

• This only works if your Yalu has expired, not if it has been deleted, if you want to delete it and do this. Open Cydia Impactor and then click on XCode and then click on Revoke Certificates and then type in your shiz.

Thanks /u/wafuu for step 2.

If any questions, please ask. I wrote this really quickly, so I'm sure I left some stuff out. But hopefully, having the steps numbered and me trying to make it easier to understand helps. :)

EDIT 1: I will release a video tutorial on this tomorrow after school, for now I'll try to help as much as I can through comments. :)

EDIT 2: Others have said this works great with Mach_Portal, so I would imagine that this will also work great with any other IPA. :)

EDIT 3: Alrighty! I'm going to go to sleep! So I'll help out people when I wake up! But don't worry. I only have 4 hours of sleep ahead of me. :)

EDIT 4: Still awake, but, this is not just a repost of /u/xPreeks tutorial. His did not work for me and I am showing what I did to get it working. It has similar steps but yeah. Mine was meant to help people who couldn't get it working from his tutorial or wanted easier step-by-steps. :)

This guide explains how the feature works, how the exploit operates under the hood, and how to apply the patch. It also includes Legal Overview: When Disabling This Alert Is Illegal.

https://onejailbreak.com/blog/how-to-disable-the-call-recording-alert-on-ios-26/

Jailbreak your Iphone using "unc0ver" by pwn20wnd. **12.0 - 12.1.2 support for A8X-A11 devices only**

- Important Notes:

- Delete OTA file from Settings - Storage if present and reboot before attempting the jailbreak to prevent a possible bootloop.

- This versions contains full-fledged Cydia and Substrate support for iOS 12 on compatible devices that are listed above. This means that Cydia and Tweaks are fully functional.

- Some repos may not function with Cydia/APT yet due to a bug in Apple's code on iOS 12 (See https://twitter.com/sbingner/status/1099050396557893632)

- This is considered to be safe to try as long as you make sure you have no downloaded OTA file.

- It is still possible to restore or downgrade your device to iOS 12.1.1~b3 to use this jailbreak even if you are on iOS 12.1.3 or up (See https://twitter.com/Pwn20wnd/status/1093191940831567872).

- Reboot and re-attempt the jailbreak if it gets stuck at "Extracting Cydia...".

If you’re having issues with loading tweaks, turn off "Reload System Daemons" .

#pwn20wnd

- Head to https://github.com/pwn20wndstuff/Undecimus/releases.

- Scroll down until you reach to this part:

- Download the latest version. (b29 is the latest within upper image).

- Download the lastest version of Cydia Impactor from here http://www.cydiaimpactor.com/.

- After downloading extract the .zip file to your desktop.

- Plug your iphone using your charging cable into your PC.

- Run Impactor.

- Click and hold the file you've download from Pwn20wnd's github page and drop it into impactor.

- Enter your iTunes Email & App Password "THIS IS SAFE." if you have 2 factor authentication enabled get your app password from here: https://appleid.apple.com/account/manage

- Wait for a bit.

- After the loading finishes follow the following instructions.

Now:

- Open your Iphone device.

- Head to Settings > General > Profiles & Device Management > "Developer App" > click on your icloud email.

- Press Trust "YOUR ICLOUD EMAIL SHOULD BE HERE," Trust again.

- Now press your home button and scroll left until you see the unc0ver app installed.

- Run it, Click on Jailbreak.

- Once it's finished, you should see that BROWN LIT APP called Cydia.

- DONE!

Some issues solving: https://www.reddit.com/r/jailbreak/comments/atv5xw/tutorial_how_to_fix_unc0vers_jailbreak_installing/?st=JSHHLIVB&sh=bb6fba85

THANK'S TO Pwn20wnd.

His twitter: https://twitter.com/Pwn20wnd

Support him on Patron: https://www.patreon.com/Pwn20wnd

check out his great stuff on github: https://github.com/pwn20wndstuff

Hi! I know I'm a bit late but I decided to create a post for useful activator actions/menus and update it as I come across more cool/useful stuff because I didn't find anything for Activator in FAQ (and the other posts are quite old) and Activator is a super powerful but unfortunately underrated tweak. Also I thought it would be useful for new jailbroken users that have joined us since unc0ver v5.

Please share your actions/suggestions and I will add them to this post and try to make an all-round post.

Updates will be added to the bottom of the post.

You can turn off notifications in Action Banners section in Activator’s main page.

Anywhere:

• Activates Low Power Mode when your phone is locked:

Locked -> +LPM

Unlocked -> -LPM

How to activate LPM if battery is lower than x%?

Install these two tweaks: Truecuts and StopShortcutsNotifications. I decided to create a video for the steps in the shortcuts app. imgur link

First install the 'bc' package (It's a very small calculator ~100KB) from Bingner's repo and 'sbutils' Link. Then create a file named lpmactivator.sh (or any name you want) in /usr/bin. Add the following script to it.

A=$(sbdevice -l) if (( $(echo "$A > 0.5" |bc -l) )); then activator send switch-off.com.a3tweaks.switch.low-power fi

The default value is 50% but if you want to change it you have to change the '0.5' to what you want. Make sure it's executable by running chmod +x /usr/bin/lpmactivaotr.sh. Now go to Activator and select 'Unlocked' event and go to the Build Actions menu. Choose 'Run Command' and choose any title you want. The command has to be lpmactivator.sh. Replace the -LPM action with the action you just created.

BOUNS: Turning off LPM while using your phone if your device is being charged. Add the following lines to the lpmactivator.sh file.

B=$(sbdevice -s) if [ "$B" = "Charging" ]; then activator send switch-off.com.a3tweaks.switch.low-power fi

• Useful as your device won't enable hotspot if you connect it to your PC/Mac over USB:

Join a Wi-Fi network -> -Hotspot

• Never lose your internet connection:

Join a Wi-Fi network -> -LTE

Left the Wi-Fi network -> +LTE

• Absolute life saver when an incompatible/outdated tweak freezes/slows down your device:

Triple Press Home Button/Press Both Volume Buttons -> SafeMode

• Automatically sets volume for your headphone:

Wired/BT Headset Connected -> SetVolume to X%

Wired/BT Headset Disconnected -> SetVolume to 0%

• Music Shortcuts, Super useful when exercising:

Volume Down Short Hold -> Previous Track

Volume Up Short Hold -> Next Track

Volume Up,Down -> Play/Pause

• Disables Vibrations when using your phone:

Locked -> +Vibration

Unlocked -> -Vibration

• Useful when your phone is silent and is lost in home/...:

Receive Message "activateringer" -> +Ringer & -DND & SetRingerVolume to 100%

• Great toggle for flashlight, works when the screen is off:

Press Volume Down,Up -> Toggle Flashlight

In Applications:

• Useful if you don't want to keep location services always on:

Open Camera -> +Location

Close Camera -> -Location

Open Google Maps -> +Location

Close Google Maps -> -Location

Tutorial

(Thanks to u/ArtificialSugar for the awesome script)

Script Link (the one in the tutorial seems to be broken)

• Same thing for rotation lock:

Open YT -> -RotationLock

Close YT -> +RotationLock

This is the action to turn on Rotation Lock when exiting the app:

checkapp.sh && activator send switch-on.com.a3tweaks.switch.rotation-lock

• Lock your phone in apps by sliding two fingers from top:

Two Finger Slide in From Top -> Sleep Button

At HomeScreen/Applications:

• Easy action for taking screenshots

TouchID Sensor Double Press -> Take Screenshot

At HomeScreen:

• Useful icon shortcuts:

Safari Icon Flick Down -> New Private Tab

Phone Icon Flick Down -> Contacts

Phone Icon Flick Up -> Keypad

AppleTV Icon Flick Up/Down -> Start/Sleep ‏‏AppleTV (You have to create a shortcut and run the shortcut through Activator)

Home App Icon Hold -> Turning Lights on/off

At LockScreen:

• Easily turn the screen off after receiving a notification/checking clock:

Slide in from Top -> Sleep Button

• Disable Power off option in LS(Hard resets are still possible):

Short Hold Sleep Button -> Lock Device

UPDATE 1:

Anywhere:

• Get notified when your battery is fully charged:

BuildEvent(Battery Charges to 100%) -> Play Audio

• Creating a Pop-Up Menu (for Music,YT,...) when you connect your headset:

Go to Menus tap, Add New Menu, Choose all actions you want.

Now go back to Anywhere and select the event you want like connecting headsets and then select the menu as your action.

In Applications:

• If you use spotlight a lot you can set an in-app shortcut for it:

Slide In From Top-Left -> Spotlight

• Added a way to enable LPM when battery is lower than x%. Instructions at top of the post.

UPDATED ON 9th of Feb 2017

EDIT: THIS POST IS A LITTLE BIT OUTDATED, I WILL UPDATE IT LATER WHEN I HAVE TIME, FOR THE TIME BEING FOLLOW TIHMSTAR ON TWITTER TO USE THE LATEST ONE.

VIDEO ILLUSTRATION: https://www.youtube.com/watch?v=fDAeVZ7-N_w

by the gentleman: iPodHacks142

a link to his channel: https://www.youtube.com/channel/UCztj52EbDSOu8FrP9HNtBfQ

UNJAILBROKEN METHOD: https://redd.it/5ro66c

I know in the title I said it's for newbies.. but apparently I mis-estimated the difficulty level of this tutorial..to be fair it's fairly complicated and full of spaghetti, specially if you've never done things on terminals before.. or have no idea what any of the terms used mean ><.. so proceed with your own risk.. (edit added on 31st jan 2017).

Hi guys, in this tutorial I will be walking you through the requirements and the steps needed to use Prometheus to easily upgrade to 10.2 when it's no longer signed by Apple. Also, keep in mind that this tutorial is for MacOS users only.

This is particularly useful for people who are willing to hold onto their current jailbroken firmware, until a 10.2 jb is released to the public and confirmed working. It allows you to basically update to 10.2 (in this case at least, when it's no longer signed by apple) I know I sound redundant at this point, but just some clarification for those who haven't been in the scene for a while, only do this if you know what you're doing :D!

I myself am a windows user, but had no dice in getting futurerestore to work on windows, so I installed MacOS on a VM and proceeded from there.

** VM MIGHT NEED SOME DEPENDENCIES FOUND IN : this thread https://redd.it/5lhby9 made by u/li0nic**

As the title says, this method is for jailbroken users only (means you have to be upgrading from a jailbroken OS that has task_for_pid0 enabled. So if you're on 9.1, 9.3.3 (with luca's jbme website) or 10.1.1 (yalu jailbreak mach_portal) you're good to go. Don't know about any other jailbroken firmwares that have taskforpid0 enabled. Also, of course this is going to be for 64 bit devices only (preferably below 7 and 7 plus since updating to 10.2 on them is useless). ** ***IIRC, Pangu 9.0-9.0.2 doesn't enable tfp0, but Pangu 9.1 does Also remember that 9.2-9.3.3 only has tfp0 if you jailbreak with jbme.qwertyoruiop.com after the initial jailbreak. * (EDIT ADDED BY u/Samg_is_a_Ninja , thanks to him)

***BEFORE YOU BEGIN, keep in mind this is a full restore! it won't retain your data! so make sure you back-up your phone through itunes before you do any of the steps below! and restore your backup later!*

Requirements:

YOU HAVE TO BE JAILBROKEN WITH TFP0 ENABLED AS AFOREMENTIONED

1)Shsh2 blobs for 10.2 (you can get them from telegram or by following this reddit thread https://redd.it/5ps4u2 )

2)Futurerestore obviously, you can get it from here: http://api.tihmstar.net/builds/futurerestore/futurerestore-latest.zip

3)Nonceenabler, since we're going to be using the jailbreak method. You can get it from here: https://www.dropbox.com/s/ghv44y0h4uoko8w/nonceEnabler.zip

4)iOS 10.2.1 IPSW file, you can get it from: https://ipsw.me/ for your particular device.

5)OpenSSH installed on your phone from cydia. DEFAULT PW FOR IT IS alpine

6)iOS 10.2 IPSW file also.

*********7)Baseband file, SEP file, buildmanifest.plist file. TO GET THOSE: Change the name of ios 10.2.1 Ipsw file you downloaded from .ipsw to .zip THEN extract it, Copy the buildmanifest.plist file and put it in some folder you create, then go into Firmware and Copy the .bbfw file from there into the folder you created with buildmanifest.plist, there might be 2 .bbfw files. copy the one with "Mav10-5.32.00.Release.bbfw" in it if you're on: iPad Air 2, iPad Pro (12.9 inch), iPad mini 4, iPhone 6, iPhone 6 Plus and iPhone SE. OR COPY the one with Mav13-2.41.00.Release.bbfw in it if you're on: iPhone 6s, iPhone 6s Plus and iPad Pro (9.7 inch) and paste the respective file in the folder with the others. *(Check THE BBFW SOURCES BELOW IF I DIDN'T LIST YOUR PHONE, YOU WILL FIND THE CORRECT BBFW UNDER EACH MODEL (the 10.2 or 10.2.1 ones, they're identical anyway), I LINKED IPHONE WIKI, DOUBLE CHECK TO SEE :))**********

Then, go into all_flash then into all_flash.n66map.production (notice you have to go into the folder with your boardid configuration, which you can find on the iphone wiki). in my case I was using a 6s plus TSMC (so n66map). then, copy sep-firmware.n66m.RELEASE.im4p file and paste it in the folder you created earlier with buildmanifest+bbfw files.**

How I got the bbfw file for each device:

MDM9615: iPhone 5s, iPad Air, iPad mini 2, iPad mini 3

• iOS 10.0.1/10.0.2/10.1(.1): 7.01.00
• iOS 10.2: 7.21.00

MDM9625: iPhone 6, iPhone 6 Plus, iPhone SE, iPad Air 2, iPad Pro (12.9"), iPad mini 4

• iOS 10.0.1/10.0.2: 5.24.00
• iOS 10.1(.1): 5.26.00
• iOS 10.2: 5.32.00

MDM9635: iPhone 6s, iPhone 6s Plus, iPad Pro (9.7")

• iOS 10.0.1/10.0.2: 2.30.00
• iOS 10.1(.1): 2.36.00
• iOS 10.2: 2.41.00

MDM9645: iPhone 7

• iOS 10.0(.1): 1.00.02
• iOS 10.0.2: 1.00.03
• iOS 10.0.3: 1.00.05
• iOS 10.1 1.02.13
• iOS 10.1.1: 1.02.15
• iOS 10.2: 1.02.15

MDM9645: iPhone 7 Plus

• iOS 10.0: 1.00.02
• iOS 10.0.1: 1.00.03
• iOS 10.0.2: 1.00.04
• iOS 10.0.3: 1.00.05
• iOS 10.1(.1): 1.25.00
• iOS 10.2: 1.33.00

We should note that Wi-Fi devices such as the iPod Touch 6G and the Wi-Fi iPads do not have a baseband file. Since we have no test devices, we aren't sure how to proceed. You can try omitting the baseband file from the Terminal command at your own risk, but there's no guarantee that would work.

Special thanks to /u/Stoppels for pointing this out and providing the list and source.

Then, put the nonceenabler+futurerestore+the shsh2 file of your device+ iOS 10.2 IPSW file into the same folder. Finally now you would have a folder with the following if you did everything right.

A) buildmanifest.plist

B) the bbfw file.

C)the im4p file (the SEP file).

D) Nonceenabler+ ios 10.2 IPSW file + Futurerestore (unzipped ofc) +the shsh2 file of your device.

I advise renaming that folder to Prometheus Downgrade (or any name of your choice really).

NOW BEFORE YOU PROCEED, Make sure you delete any tweaks that tamper with system plists.. like karen's tweaks "norecoverypls(?) or mikoto" or so.. and turn any daemons you turned off by icleaner back on and turn low power mode off if it's on.

Steps:

First of all you should do this in the jailbroken state of your phone!

1- Open terminal and cd into the folder you created, an example if it's on the desktop, you type in the terminal: cd desktop (hit enter) then cd (foldername). For simplicity we'll call this Terminal (A).

2-Ssh into your device by typing this in your terminal "ssh root@ipadress" (your phone's ipadress can be found in settings>wifi> hit the ! mark next to the wifi you're connected to and you will find it) example : ssh root@192.144.1.5

then hit enter,

you will be prompted to enter a pw, default pw is alpine if you've never played with ssh before.

now leave that terminal after you've entered the pw, and follow the following

3-open new terminal tab (we'll call it terminal B) and cd into the folder you created. you need to push the nonceEnabler binary into device. To do so type in the same terminal “ scp nonceEnabler root@ipaddress: “ and enter the password. (take note that at the end of the ipadress theres a colon(:) )

4-switch back to the first tab (terminal A) then you have to set a specific variable, and in order to do that you have to patch the kernel first with nonceEnabler. Do so by executing (typing in terminal) “ ./nonceEnabler “ Enter in the terminal you just switched to (first one).

Now to set a new variable run “ nvram com.apple.System.boot-nonce=generator (the generator is a value you can get from your shsh2 file by making a copy of it, then changing the extension from shsh2 to .plist of the copy then open it up and scroll down, you will see a string underneath the generator with numbers and letters in between > and < an example : http://prntscr.com/dzjxqh so you replace the generator with that value in the command " nvram com.apple.System.boot-nonce=generator "

-if anyone is still having trouble writing generator to nvram "nvram: Error setting variable - 'com.apple.System.boot-nonce': (iokit/common) general error". try running the command from the device via either [[Mterminal]] or any other terminal app. (edit added by /u/syto203) or check https://www.reddit.com/r/jailbreak/comments/5ladq5/discussion_futurerestore_has_been_updated/dbuasjt/

5- In the same terminal (terminal A), type in "nvram auto-boot=false" this will essentially disable the autoboot (booting up into your ios, so you can proceed with prometheus instead)

(Also there's an optional step: check that auto boot is false by running “ nvram -p and hit enter, you should see a bunch of lines, one of which is auto boot is set to false, if so, you're good to go).

In the same terminal again (terminal A) type in “ reboot “ and enter.

Device now should be in recovery (go ahead and plug it in into your computer if you had not done so already, and close iTunes if it launches)

6- Device should already be in recovery mode (the itunes screen with the cable on your device).

now run: chmod +x futurerestore_macos (in terminal A, and hit enter then proceed to the next step).

now run “ ./futurerestore_macos -t blob.shsh2 -b baseband.bbfw -p BuildManifest.plist -s SEP.im4p -m BuildManifest.plist -w targeted.ipsw “

ofc, in terminal A.

targeted.ipsw = the iOS version you want to RESTORE TO not the one you pulled sep, and other files from.

note that you replace each of those with their names, an example baseband.bbfw will be Mav10-5.32.00.Release.bbfw, and so on for every other parameter.

Full example:

./futurerestore_macos -t 4795253457241214_iPhone8,2_n66map_10.2-14C92.shsh2 -b Mav10-5.32.00.Release.bbfw -p BuildManifest.plist -s sep-firmware.n66m.RELEASE.im4p -m BuildManifest.plist -w iPhone_5.5_10.2_14C92_Restore.ipsw

hit enter and let it restore.. (if your screen turns green during the process, it's a good sign ;)).

if you run into any errors after this step, it's either you have messed something up, or the shsh2 file you used was incorrect.. in any case, to exit the recovery mode; download reiboot and exit it through it... and try again if you desire.

ALSO IT'S important to note that your device reboots every 15 mins in recovery mode, meaning that it will lose the nonce you set it to, the "generator" so you will have to redo the steps.. so it's better to just make sure everything is ok before entering the recovery by "reboot" command, like make sure all the dependencies are installed and everything is running right, then restore.

Since this can be used for any iOS 10 version (and 9, but let's not make it too difficult), any "iOS 10.2" should refer to "targetVersion" (or so) and all "10.2.1"'s should refer to the currently signed version 🤔 Since 10.2.1 might be the final with a compatible SEP, we could just note it beforehand edit We should note beforehand that downgrading from 10.2.1 to 10.2 will keep Touch ID functional, but downgrading to 10.0.x and 10.1.x will result in the loss of this functionality for Touch ID devices.

note: we only needed terminal B once, sorry for confusing y'all :D

EDIT1: I am by no means professional at doing this at all, it took me a lot of attempts and research, also some people helped me to get through the countless errors I had on the VM. So a native mac is your best bet if you're new to this..

Also, I advise waiting until 10.2 is no longer being signed to try this tutorial, since it's pointless to do it now as you can't downgrade to your jailbroken firmware. I used a burner device to try this and touchid worked (thanks to a friend).

If someone wants to add anything, feel free to comment below and I will add it to the tutorial if it's beneficial.. I tried making it concise.. and I am really busy so sorry for the horrible format and the hurried up typing! I apologize! I have finals and stuff wish me luck ;D!

and goodluck everyone ;D

EDIT2: OSX only, I tested on sierra (the latest one).

EDIT3: Since everyone is wondering whether this breaks Touch ID or not, it doesn't folks. The sep file from 10.2.1 is compatible if not identical to that of 10.2, so no issues ensue when upgrading this time with prometheus; unlike the last time where 10.2 sep wasn't identical to that of ios 10.1.1, and hence the touch id issues. Hope this makes it clear. And also more confirmation will emerge when 10.2 stops being signed, I will make sure to let you know if this causes any issues afterwards. As for now you don't have to be worrying about it, specially if you want to update to 10.2, it's still being signed so you can do it through iTunes. If you're torn between waiting for the 10.2 jailbreak then updating through this method but afraid of touch id issues, or hesitant to update now, I'll wait myself on 9.3.3 if that says anything. After all it's your choice.

TL;DR: it doesn't break touch id.

A topic about it:

https://redd.it/5psau6

if you are stuck in recovery mode and want to exit, downlod reiboot from google and exit using it.

Also,

if you encounter any errors check this thread https://redd.it/5lhby9 made by u/li0nic

he included a bunch of other necessities and requirements so yeah!