https://b17fr13nds.github.io/tags/ios/Recent content in Ios on bitfriends' blogHugoenTue, 01 Mar 2022 14:02:26 +0200https://b17fr13nds.github.io/posts/ios_935_jb/Tue, 01 Mar 2022 14:02:26 +0200https://b17fr13nds.github.io/posts/ios_935_jb/<p><em>In this article, I&rsquo;ll present a detailed iOS jailbreak writeup and some basic tips and tricks on how to set up an environment for exploiting. The bug I am exploiting is in the iOS kernel. I hope this is a helpful reference for anyone who wants to start with iOS pwn</em></p> <h5 id="now-let-us-begin"> Now let us begin! <a class="heading-link" href="#now-let-us-begin"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h5> <p>Short story:</p> <blockquote> <p>A few weeks ago, I found an old iPad 3,1 by my dad. I wanted to set it up for homeschooling for my sister, but the iOS version was so old, that I was unable to download anything from the AppStore. So I decided to jailbreak it to make it somewhat usable again. However, I didn&rsquo;t use my own jailbreak at first. I used the Phoenix jailbreak from <a href="https://phoenixpwn.com/" class="external-link" target="_blank" rel="noopener">https://phoenixpwn.com/</a>, which worked like a charm. Now I can install some packages and tweaks to be able to download older app versions from the App Store. But I wasn&rsquo;t satisfied. In fact, I used an exploit that other people wrote and I didn&rsquo;t know exactly what it was doing. That&rsquo;s why I decided to do some research, to understand how the Phoenix jailbreak worked and maybe write a jailbreak or at least a demo by ourselves.</p>