pyLera1n (pronounced as py-le-rain) is a python adaptation of palera1n - Meaning for a list of supported devices please refer to the original authors. This project aims to make the jailbreak much more accessible and maintainable.
Perquisites:
- Install python3
- Install blacktop/ipsw
git clone [email protected]:doronz88/pylera1n.git
cd pylera1n
git submodule update --init --recursive
python3 -m pip install -e .
Usage: python -m pylera1n [OPTIONS] COMMAND [ARGS]...
Options:
--help Show this message and exit.
Commands:
jailbreak Perform full jailbreak
put-file Put file over ssh
ramdisk Boot into ramdisk
ssh Connect via ssh
- Execute from shell:
# for first time only python3 -m pylera1n ramdisk -v <iOS-Version> --dump-blobs --kernelcachd pongokpf --install-pogo --reboot # if the first command was successful, you can now simply run the following for the given device: python3 -m pylera1n jailbreak -v <iOS-Version> --fsboot
- Open
Tips
application. - Click the
Install
button - Either:
- Click the
Do All
button - Execute the Launch Daemons to start
rpcserver
- Click the
# boot into ramdisk, IPSW can also be downloaded automatically from internet
python3 -m pylera1n ramdisk --ramdisk-ipsw '~/Downloads/iPhone10,3,iPhone10,6_14.8_18H17_Restore.ipsw'
# connect to ssh
python3 -m pylera1n ssh
# mount /private
/usr/bin/mount_filesystems
# now you can access /private from /mnt2
ls /mnt2
Use the following snippet to stop the annoying Finder pop-ups when device is in Recovery:
defaults write -g ignore-devices -bool true
defaults write com.apple.AMPDevicesAgent dontAutomaticallySyncIPods -bool true
killall Finder
On iPhone X use the following disk map:
disk0s1s1
-/
disk0s1s2
-/private
(SEP Protected)- iPhone10,3:
disk0s1s6
-/private/var/preboot
- iPhone10,6:
disk0s1s7
-/private/var/preboot