Git Product home page Git Product logo

undecimus's Introduction

unc0ver

The most advanced jailbreak tool

unc0ver logo

unc0ver jailbreak for iOS 11.0 - 12.2
by @pwn20wnd & @sbingner
UI by @iOS_App_Dev & @HiMyNameIsUbik

The most outstanding changes over the other jailbreaks

  • One app to jailbreak all firmwares
  • Full-fledged Cydia and Substrate support for ARM64 devices
  • Full-fledged Telesphoreo port for ARM64 (Elucubratus)
  • No private data shared for diagnostics purposes
  • SSH-Only (Dropbear) support
  • Options for the user
  • Utilities for the user
  • No inefficient local jailbreak server (jailbreakd daemon)
  • Native Cydia support with support for the iPhone X screen size
  • Ability to rejailbreak from the jailbroken state
  • Stable kernelspace patches to avoid random crashes caused by kernel data aborts
  • Stable userspace patches to avoid random freezes and crashes caused by watchdog timer timeouts
  • Local APT repo system integrated in the jailbreak to verify the integrity of the core packages and repair them if they are corrupted
  • Extended and improved assertion to prevent unexpected results such as bootloops caused by filesystem corruption
  • Better system security, battery life and performance
  • Significantly faster Cydia
  • Modifications to Cydia were approved by the creator of Cydia (Saurik)
  • Fully working debugserver
  • No DRM
  • No installation restrictions
  • Open source

Switching from the other jailbreaks

  • Dedicated migration support will be used to switch without losing data

Getting support

  • Use the built-in diagnostics tool
  • Tweet @pwn20wnd

Best practices

  • Turn on the AirPlane Mode before starting the jailbreak
  • Turn off Siri before starting the jailbreak

Source code

  • This project is completely open source and it will be kept like it in the future
  • Any kind of contribution is welcome
  • The source code can be found on pwn20wndstuff's GitHub account

Video tutorial

Screenshots

Changelog

Special Thanks

undecimus's People

Contributors

airsquared avatar clarityzzz avatar cryptiiiic avatar jakeajames avatar johncoates avatar kjwamlex avatar midnightchip avatar nn9dev avatar pwn20wndstuff avatar resistor4u avatar samgisaninja avatar sbingner avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

undecimus's Issues

RC 8 Iphone X 11.4 b3

Rc 8 Iphone x ios 11.4 b3

errno: 1
test: rv == 0
filename ViewController.m
Line: 1141
Function exploit
Description: Failed to platformize myself

stuck on step 7 still with latest update

Wifi Issues

Wifi affected after jb.Widespread issue.Commcenter keeps crashing.Wifi disconnects after lock.

[rc5] phone reboots on 1/48

Using a fresh clean ios 11.2.6 version on iphone6
installed with cydia impactor the ipa (rc4)
got in airplanemode, turned even off everything related to siri.

still when i open the app and hit jailbreak it start and stays for 10 seconds on 1/48 then a hard reboot on the phone.

tried it now 30 times.

Unable to jailbreak on iOS 11.4b3 (iPhone 8 Plus)

Every time I try it just stops at 7/48 and gives me a popup saying:

Errno: 1
Test: rv == 0
Filename: ViewController.m
Line: 1100
Function: exploit

It's been the same and I have had about 30 goes.

Jailbreak error (line 1354)

Whilst attempting the MP version of the exploit, I recieve the following error which causes the exploit to fail.

Error
Errno: 22
Test: rv == 0
Filename: ViewController.m
Line: 1354
Function: exploit

fs_snapshot_rename line 1309 error 22

iPhone 8 Plus iOS 11.2.6 unc0ver RC6
Gets stuck at:
Exploiting ... (22/48)
Tip: errno: 22
Test:errno == 2 || rv ==0
Filename:ViewController.m
Line: 1309
Function:exploit

Jailbreakd Bug(Probably webkit related)

iPhone 6, iOS 11.3, Empty_List. Yesterday I had experienced a weird bug. It’s possible that this might be the same as another issue listed but here. When viewing content inside of YouTube for about an hour. The access to the internet was cut off completely and when I exited the application to test and see if it was just not the app itself. I tried opening Twitter and the app froze at it’s loading screen. I did read jailbreakd memory issues from what was listed and it sounds like it could be this one. Just sharing what I experienced.

Jailbroken but no Cydia

I'll try to be as detailed as possible.

ios 11.3.1 iPhone 7 Plus RC8

  1. Had phone jailbroken on Electra before
  2. Downloaded unc0ver and hit Jailbreak
  3. success on the first try
  4. after phone was jailbroken with unc0ver, cydia still showed all the sources and tweak list i had from electra jailbreak.
  5. this included electra's default repos
  6. tweaks from electra were showing in cydia but none of them were actually working etc.
  7. this means? i had the old cydia from electra even after jailbroken with unc0ver
  8. hence i used roll electra to do a full restore of my device
  9. all my data gone like photos etc(i knew this) but..
  10. cydia and some jailbreak apps that i had installed with electra were still present even after roll electra
  11. for eg cocoa top, i cleaner, wifi kill, filza,
  12. what the hell, downloaded unc0ver again and hit jailbreak after all this
  13. again succesfully jailbroken but now my Cydia is gone
  14. checked the discord and they gave me a cydia repo url to add in safari and i could not do so
  15. means cydia is definetely gone
  16. so this is my situation

Storage Calculation Broken

Many devices tested,breaks storage calculation.Needs fix.Apps stop installing.Issue similar to Joseph Shentons breaking storage.

Jailbreak Restarts phone

As I get around 24-30/48 it restarts my phone was I supposed to do anything before trying to jailbreak?

Jetslaam events

JB breaks jetslammed and thus commcenter/webkit/ many stuff crashes.Needs a new jetslam method.

Cant Selecet "MP" In settings?

I downloaded the new IPA from the github RC6, I downloaded the version of uncover off of Tweakbox as well. Doesn't seem to allow me to select it at all. Im running a Iphone 7 on version 11.3.1.

[RC8 - 11.4 b3 iPhone 8] Errno: 1

Stops at step 7 and give you this error message:

Error
Errno: 1
Test: rv == 0
Line: 1141
Function: exploit
Desciption: Failed to platformize myself
img_0817

Cant select "MP" In Settings

I downloaded RC7 fron the github updated the cydia impactor, Put it on my iphone 7 running 11.3.1 I was able to select MP the first time and the phone restarted half way through it (didnt jailbreak) then I was unable to select MP again.

Add link to GitHub in Settings page

In the Settings tab, there is a Utilities section including links to useful resources related to unc0ver:

Utilities section

This could be improved by a link to the GitHub page (“Source Code” button) or to submit a new issue (“Report a Bug”).

Unable to debug any of my own apps with Xcode

Hello. This jailbreak is not allowing me to debug anything, which is quite a problem for me.
Xcode throws this error:

"An error was encountered while attempting to communicate with this device. (The service is invalid.): Please try rebooting and reconnecting the device. (0xE8000022).".

I tried rebooting the device multiple times and jailbreaking again but nothing changed.

Bugs in cydia

  1. While the installation screen is showing tapping on status bar takes it to top thus breaking the large-small tile on top.
  2. DPKG locked issues(add inbuilt command for fix)
  3. hash mismatch for cydia.lists
  4. Uicache not working

Failed to remount RootFS

While jailbreaking, I receive following error:

image

Note that I don't have 'Restore RootFS (Destructive)' option enabled.

[RC4] FBSystemService shutdownWithOptions is restarting instead of shutting down

Even if you try to shut down, it becomes Reboot.

  • When turning off the power manually
  • The following command
pid_t pid;
int status;
const char* args[] = {"/sbin/halt", NULL};
posix_spawn(&pid, args[0], NULL, NULL, (char* const*)args, NULL);
waitpid(pid, &status, WEXITED);

[[%c(FBSystemService) sharedInstance] shutdownWithOptions:0];

Error

Errno: 3
Test: MACH_PORT_VALID(task_port)
Filename: ViewController.m
Line:215
Function: inject_libary

I get this error when i click jailbreak and it gets around 37/48

Collapsed header conflicts with options below it

If you scroll down in the Settings tab of unc0ver, the collapsed header will collide with the options below:

Collapsed header in unc0ver

In contrast, the collapsed header covers the setting panes below it with a translucent cover in the Settings app:

Collapsed header in Settings

App Crash doesn't reopen. iPhone X A1901 iOS 11.4b3

While attempting to Jailbreak. After pressing the "Jailbreak" Button the unc0ver app crashed the device. Then when trying to reopen the app it crashes before it can load anything but a white screen. in order to get the app back open is to download it again. Never gets pas (1/48).
This is using the latest version R7.
Steps such as Siri off, Airplane mode off, Find My iPhone off and having the passcode off. All result in the same problem as stated above.

Note: I am coming from an Electra Jailbreak.

Detailed option descriptions

There should be descriptions of each option or the most important ones (like "Restore RootFS") below in small text, like how Apple does it in sub-menus in Settings.

Warning & bug

When inside of safari and browsing, while being jailbroken with unc0ver. Do not plug in your Idevice for it will completely freeze and render the phone a paper weight till you reboot it. I have tested and found this out on the latest version RC 6. Thanks please look into a fix.

jailbreakd memory issues

A while ago I discovered a way to trigger Electra's freezing by overloading WebKit till it crashed (Twitter zoom-in & out bug; see: coolstar/electra1131#14)

After testing this on unc0ver the first time I observed the same behavior that happens on stock iOS, WebKit crashes and device continues to behave normally. However I got some mentions on Twitter from people who tried it and either got a freeze or respring loop (both happened with Electra). I gave it a few more tries, the second try it indeed freezed and the third it did not.

Then I decided to add some logging on the jailbreakd and got some interesting results. Immediately after the webkit crash, random daemons also crash, jailbreakd gets flooded with requests until it gets restarted due to reaching memory limits. The issue is definitely different and not as bad as Electra but still exists.

Here are the full logs:
https://pastebin.com/raw/xGX5rhs0

Rebooting at 24/48, 30/48 with AW Exploit

Device - iPhone 7 plus
iOS Version - 11.1.2

Previously jailbroken with Electra, however, I did not use any tool to remove the former as I was given the impression that it was helpful, though unnecessary .

I have been making several consecutive attempts to jailbreak with this tool, but was met with the app itself crashing to homescreen or a device reboot (without a notification) on step 12 with the EL exploit. I was on RC1 at the time and still was up until this morning (ET), when I downloaded and installed RC3 and RC4 respectively. Now I am making attempts with the AW exploit since I had seen in a closed issue thread that it was the more reliable of the options. When attempting AW on RC1 I was met with an error on step 27 if I remember correctly, so at least that's no longer an issue. Every attempt so far has had...

  • Wifi off in settings
  • Airplane mode on
  • Waiting at least 20 seconds before pressing "Jailbreak" (Though I'm of the impression this is placebo)

Once it reaches step 24 or step 30, I am given the reboot notification from the tool and I try again.

The specifics of my experience aside, my question is basically "Is this normal behavior?". I've been making attempts for a combined total of what feels like several hours with no success. It's certainly frustrating, but Unc0ver is still preferable to Electra for me if I can get it working.

Thanks in advance

Jailbreak Restarts Phone

As I get around 24-30/48 it restarts my phone was I supposed to do anything before trying to jailbreak?

Stack overflow (EXC_BAD_ACCESS code=2) on unlocknvram - iPhone 8 plus iOS 11.1.2

I am trying mp exploit on iPhone 8 plus (stock iOS 11.1.2) and the app crashes:

(lldb) bt
* thread #9, queue = 'com.apple.root.user-initiated-qos', stop reason = EXC_BAD_ACCESS (code=2, address=0x16bee3fc0)
  * frame #0: 0x00000001040788b8 Undecimus`task_self_addr at kutils.c:16
    frame #1: 0x00000001040443e8 Undecimus`find_port_via_kmem_read(port=259) at find_port.c:233
    frame #2: 0x00000001040444d8 Undecimus`find_port_address(port=259, disposition=19) at find_port.c:250
    frame #3: 0x000000010407891c Undecimus`task_self_addr at kutils.c:18
    frame #4: 0x00000001040443e8 Undecimus`find_port_via_kmem_read(port=259) at find_port.c:233
    frame #5: 0x00000001040444d8 Undecimus`find_port_address(port=259, disposition=19) at find_port.c:250
    frame #6: 0x000000010407891c Undecimus`task_self_addr at kutils.c:18
    frame #7: 0x00000001040443e8 Undecimus`find_port_via_kmem_read(port=259) at find_port.c:233

...

    frame #8829: 0x000000010407891c Undecimus`task_self_addr at kutils.c:18
    frame #8830: 0x00000001040443e8 Undecimus`find_port_via_kmem_read(port=259) at find_port.c:233
    frame #8831: 0x00000001040444d8 Undecimus`find_port_address(port=259, disposition=19) at find_port.c:250
    frame #8832: 0x000000010407891c Undecimus`task_self_addr at kutils.c:18
    frame #8833: 0x00000001040443e8 Undecimus`find_port_via_kmem_read(port=2563) at find_port.c:233
    frame #8834: 0x00000001040444d8 Undecimus`find_port_address(port=2563, disposition=19) at find_port.c:250
    frame #8835: 0x0000000104078bcc Undecimus`fake_host_priv at kutils.c:56
    frame #8836: 0x0000000104078034 Undecimus`kmem_alloc_wired(size=1568) at kmem.c:230
    frame #8837: 0x0000000104049908 Undecimus`unlocknvram at unlocknvram.c:88
    frame #8838: 0x000000010405348c Undecimus`exploit(tfp0=21128963, kernel_base=18446744005396938752, load_tweaks=1, load_daemons=1, dump_apticket=1, run_uicache=0, boot_nonce="0x292dd10b56d87a3a", disable_auto_updates=1, disable_app_revokes=1, overwrite_boot_nonce=1, export_kernel_task_port=0, restore_rootfs=0) at ViewController.m:1170
    frame #8839: 0x0000000104071ae4 Undecimus`__36-[ViewController tappedOnJailbreak:]_block_invoke(.block_descriptor=0x0000000104095f90) at ViewController.m:2142
    frame #8840: 0x000000010429149c libdispatch.dylib`_dispatch_call_block_and_release + 24
    frame #8841: 0x000000010429145c libdispatch.dylib`_dispatch_client_callout + 16
    frame #8842: 0x00000001042a2cd8 libdispatch.dylib`_dispatch_root_queue_drain + 1004
    frame #8843: 0x00000001042a2880 libdispatch.dylib`_dispatch_worker_thread3 + 136
    frame #8844: 0x0000000181183120 libsystem_pthread.dylib`_pthread_wqthread + 1268
    frame #8845: 0x0000000181182c20 libsystem_pthread.dylib`start_wqthread + 4

Install Error

I get this error when installing with cydia impactor. iPhone 8+ ver11.4

http-win.cpp:160
Peer certificate cannot be authenticated with given CA
certificates
SSL certificates problem:self signed certificate in certificate chain

[rc4] Errno 60

iOS Version: 11.2.1
iPhone SE 64GB

Was on Electra jailbreak, rejailbreak with unc0ver rc2 and rc4, keeps rebooting at [1/48]

jb

Rc 7 Iphone x ios 11.4 b3 errno : 2

errno: 2
test: rv == 0
filename: viewController.m
line: 1139
function: exploit

what does this mean, please help me i dont have a jailbreak now, im stuck on stock ios

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.