Chekra1n iphone xs max

Убийца iOS: джейлбрейк с помощью checkra1n в вопросах и ответах

Итальянский исследователь Лука Тодеско, известный тем, что протяжении последних нескольких лет ищет уязвимости в iOS, выпустил checkra1n, новую утилиту для джейлбрейка, основанную на эксплоите, использующем уязвимость в загрузчике устройств на процессорах A5-A11. Опасность в том, что он использует «дыру в защите», которую Apple не сможет устранить с помощью обновления программного обеспечения.

Подробнее об опасности checkra1n и как ее могут использовать злоумышленники, рассказал Сергей Никитин, заместитель руководителя Лаборатории компьютерной криминалистики Group-IB. Бонусом — видео с джелбрейком iPhone 7.

Вышел джейлбрейк checkra1n, что это значит?

Это значит, что пользователи всех устройств под управлением iOS со старыми процессорами теперь могут чувствовать себя значительно менее защищенными. Если предметно, то уязвимы все мобильные устройства Apple ниже iPhone 10 включительно.

Какая версия iOS уязвима?

Дело в том, что найденная уязвимость аппаратная и не зависит от версии iOS. Уязвимый код находится в той части «железа» устройства, которое записывается однократно при производстве. Поэтому закрыть эту уязвимость программно невозможно.

В чем заключается опасность?

Зная код-пароль и имея физический доступ к устройству, можно провести полное извлечение данных из него, скопировав всю файловую систему. Обычно, без джейлбрейка возможно скопировать только малую часть данных посредством iTunes Backup.

Что-то еще?

Да, так как теперь возможна не доверенная загрузка произвольного кода, можно загрузить устройство в «особую» зараженную версию iOS, и до перезагрузки пользователь будет пользоваться такой скомпрометированной версией iOS, которая может делать с данными пользователя, что угодно.

Получается джейлбрейк работает только до перезагрузки?

Верно, так как используется уязвимость в загрузчике, то после перезагрузки исполнение недоверенного кода больше невозможно. Необходимо повторять процедуру взлома при каждой загрузке.

Что это дает обычному пользователю?

Можно установить неофициальный магазин приложений, изменять операционную систему, ставить пиратские приложения и так далее. Само собой при этом теряется и основная функция безопасности iOS – система отключает все свои средства безопасности и там может исполняться недоверенный код, в том числе и вредоносное ПО.

Что это дает исследователю безопасности?

Это уникальная возможность исследовать любую версию iOS, находить уязвимости и сообщать о них через bug hunting программы. Раньше исследователи были ограничены только некоторыми версиями iOS, под которые уже нашли какие-то уязвимости и есть возможность получить полный доступ. Но теперь, так как это аппаратная уязвимость, можно устанавливать любую версию iOS и изучать её, в том числе и самую актуальную 13.2.2. раньше такое было возможно только на специальных «прототипах», которые обычный исследователь безопасности получить не мог.

Как этим могут воспользоваться мошенники?

В iOS была встроена замечательная система защиты от кражи. Если даже сбросить устройство в изначальное состояние, то его невозможно было активировать без знания Apple ID и пароля. Таким образом украденное устройство максимум могло уйти на запчасти (и то не все его элементы). Теперь же можно программно «обойти» эту активацию, и попытаться продать такое устройство. К сожалению, при таком обходе невозможно будет привязать свой Apple ID и пользоваться сервисами Apple и сотовой связью. Таким образом iPhone превращается в некое подобие iPod. Однако это значит что на досках объявлений скоро появится огромное количество мошенников, которые будут пытаться продать такие «псевдоактивированные» телефоны. Будьте бдительны!

Что делать?

К сожалению, так как уязвимость аппаратная, единственный вариант это сменить устройство на свежее. Не подвержены уязвимости девайсы 2018 года и новее. Такие как iPhone XR, XS и тд.

Источник

Checkra1n Jailbreak iOS 12 — iOS/iPadOS 14.8.1

Checkra1n Tool ( Lifetime Jailbreak ) released iPhone 5s to iPhone X running iOS 12 to the latest iOS/iPadOS 14.7.1, iOS/iPadOS 14.8 , iOS/iPadOS 14.8.1 running A9/A9x/A10/A10x/A11 Devices.

At this time Checkra1n is the only solution for latest iOS 14.8 / 14.8.1 Jailbreak / Jailbreak iOS 14.7.1 / 14.7 / 14.6 /14.5.1 /14.5 and 14.4, but not for iOS 15 Jailbreak and 15.2 Jailbreak

Update Message — If you are running iOS 14.4 to iOS 14.5.1 ( A12 / A13 / A14 )

You can use Fugu14 + Unc0ver 14 to install Cydia as an untethered jailbreak solution.

Select Checkra1n Jailbreak Method

Follow below Checkra1n jailbreak tool guides to jailbreak your Device and install Cydia

Checkra1n Tool Compatibility iOS 14 — iOS/iPadOS 14.8.1

Checkra1n latest 0.12.1 Beta version released for A10/A11 and A11 Devices and 0.12.3 version updated for iOS 14.5 but iOS 14.5.1 / iOS 14.6 and iOS 14.7/ 14.7.1 / 14.8 / 14.8.1 users also can use this version.. Here it is Checkra1n Tool support Device list.

• iPhone 6s, 6s Plus, SE, 7 and 7 Plus
• iPad 5th, 6th and 7th generations
• iPad Air 2
• iPad mini 4
• iPad Pro 1st and 2nd generations
• iPod touch 7

A11 Support Device list

Unsupported Devices for checkra1n

Checkra1n tool does not support A13 and A14 Jailbreak, such as iPhone 11 Pro, iPhone 11, iPhone 11 Pro Max, iPhone XR, iPhone XS Max, iPhone XS, iPhone XS Max, iPhone 12 / iPhone 12 Mini / iPhone 12 Pro / iPhone 12 Pro Max

—> Please note :- Unc0ver jailbreak and Taurine Jailbreak tool now support all latest A13 Devices running iOS 14 to iOS 14.3

Please note :- iOS/iPadOS 14.4 to iOS/iPadOS 14.8 / 14.8.1 running A13 and 14 Devices users can use Tweak App stores to install Jailbreak applications.

Please note :- A11 Devices users such as iPhone X , iPhone 8 and 8 Plus users should enable Skip A11 BPR check before start jailbreak.

Checkra1n Tool Compatibility iOS 12 to iOS 13.7

iPhone 5C , iPhone 5S, iPhone 6 , iPhone 6+ , iPhone 6S , iPhone 6S+ iPhone SE, iPhone 7, iPhone 7+ , iPhone 8 / iPhone 8+, iPhone X

iPad Mini 2, iPad Mini 3, iPad Mini 4, iPad Air, iPad Pro (12.9 in), iPad Pro (9.7 in) , iPad Pro (10.5 in), iPad 6G, iPad 7G

Please Note :- Unc0ver jailbreak and Taurine Jailbreak tool now support all latest A13 Devices

Checkra1n does not support iOS 12.4.5 / 12.4.6 and iOS 12.4.7 versions officially But Rootless Jailbreak support to this versions. Download Rootless Jailbreak IPA and jailbreak your Device. Read More about Rootless Jailbreak.

Checkra1n Tool Mac Guide

Please note — iOS/iPadOS 14.6/14.7 / 14.7.1 / 14.8 and 14.8.1 users should enable “ Allow untrusted iOS/iPadOS/tvOS Versions

Please note — iPhone X , iPhone 8 and 8 Plus users should enable Skip A11 BPR check before start jailbreak.

Step 06. Tap Next button to enter DFU mode.

Step 07 — Now put your Device to DFU mode. Just follow on screen instructions to put your Device to DFU mode.

Step 08 — You will have Checkra1n app once you Device booted.

Step 09 — Now check your Device for Checkra1n app.

Step 10 — Now tap Checkra1n app to open the Checkra1n app.

Step 11 — Now you will have Cydia name on Checkra1n main interface and tap on it.

Step 12. Now you can see Cydia Downloading.

Step 13. Once all process doen, you will have Cydia application on your Device.

Checkra1n 3uTools ( Windows ) Guide

Now iOS 12.3 to iOS/iPadOS 14.8 / 14.8.1 users can use 3uTools for install Checkra1n Jailbreak tool for install Cydia.
Follow the below guide completely.

• Step 01. Get USB flash drive ( above 1GB )
• Step 02. Connect your USB flash drive to Windows
• Step 03. Download the latest 3UTools version

Step 04. Open 3uTools from Windows > Go to Flash&JB-Jailbreak > Jailbreak

Step 05. Select > «Make Checkra1n jailbreak USB flash drive.»

Step 06. Choose your USB drive from drop-down menu > Click start making button

Step 07. Wait for complete jailbroken USB flash drive

Step 08. Tap Yes for the popup message

Step 09. Wait for complete the process > Congratulation popup message

Step 10. Tap Close > Close 3uTools

Step 11. Connect your iPhone to PC

Step 12. Restart your PC now

Step 13. After restart Done > Go To Boot Manager

Step 14. Select USB drive > Press Enter

Step 15. After a few minutes, you can see Checkra1n jailbreak latest app interface

Step 16. Tap Start, For 14.6 to iOS 14.8 / 14.8.1 > Tap options > Tap allow untested Device

Step 17. Tap the Ok button again for the next window

Step 18. Follow onscreen instructions for DFU mode

Step 19. Once Device restart > Open Home screen and find the Checkra1n app

Step 20. Open the Checkra1n app and tap Cydia Button to install

Checkra1n Android Guide

Checkra1n tool still officially supports the Mac operation system. But at this time, Android users can run the Checkrain tool and Jailbreak their iOS Device.

Follow below how-to guide to use Android Device to jailbreak your iOS Device.

Requirements before start

• iOS/iPadOS Device should compatible for Checkra1n.
• Root access Android Device.
• Android support terminal app > Recommended.
• The cable needs to connect the iOS Device to the Android.

Once you complete the above requirements, you can start the below steps.

• Step 01. Now you should download checkra1n binary for Linux and exact match Android µarch.
• Step 02. Now put in a directory that execution is allowed.
• Step 03. Now connect your Device to it.
• Step 04. Now open the terminal app and should gain root access. su
• Step 05. Your Device should recognized now
• Step 06. USB ID should be 05ac:12a8.
• Step 07. Now put your Device to DFU mode. Tap this link to how to enter your Device to DFU mode.
• Step 08. Your iDevice is still should be recognized mode. lsusb.
• Step 09. In this step, USB ID should be 05ac:1227. If is not > unplug the USB-C cable from the Android and plug it.
• Step 10. Now Run checkra1n in CLI mode. ./checkra1n -c.
• Step 11. Done

Reddit video guide about How to use Android for jailbreak iOS

Chekra1n Online ( Without PC ) portable Solution

Ra1nbox is a newly released portable solution to use Checkra1n Jailbreak without PC support. Checkra1n is a tethered jailbreak solution, and it is only for Mac operating system. This is a significant disadvantage for other operating system users.
Ra1nbox team gives a solution for it. Follow the below guide to use Ra1nbox Online portable solution to Jailbreak your Devices.
You can build Ra1nbox using a Linux board yourself or buy it from the Ra1nbox website.

How to build Ra1nbox portable device?

Checkra1n pinera1n Guide

A new way to run checkra1n jailbreak tool without using PC or Mac. For this method, you must use Pinephone Smartphone. This method is somewhat easy When compare with the Checkra1n android guide.

Checkra1n Jailbreak By PinePhone — Written guide

Checkra1n Jailbreak By PinePhone — Video guide

Important news for Apple Silicon Macs users

Chekcra1n 0.12.3 version officially supports Apple Silicon Macs, but you should unplug and replicate lightning cable while on the Jailbreaking process.

Chekra1n Jailbreak macOS M1 Guide

Some users complained Checkra1n latest version does not support macOS M1 chip. So follow the below guide to run Checkra1n Jailbreak on M1 Chip.

• Step 01. Open the mac Application folder
• Step 02. Right-click on Checkra1n App and «show package contents.» Tap it
  
• Step 03. Open contents and then MacOS
  
• Step 04. Run the Checkra1n
  

Checkra1n patched version support — iOS 14 > A10 / A11 Devices

Checkra1n patched version released by iOS Jailbreak Developer ( @exploit3dguy ) supports iOS 14 running A10 and A11 Devices.
Checkra1n patched version can be used to install Cydia for iOS 14 A10 and A11. But recommended, do not use this and wait for Checkra1n official release.

A10 Devices List

• iPhone 7 and 7 Plus
• iPad (2018, 6th generation)
• iPad (2019, 7th generation)
• iPod touch (2019, 7th generation)

A11 Devices List

Download Checkra1n patched version
https://github.com/Exploite-d/checkra1n_patch_A10_A11

Betelguese — Install Odysseyra1n on a checkra1n device

Checkra1n Jailbroken Device holders now you can install Odysseyra1n bootstrap via Betelguese. Once you install Odysseyra1n bootstrap will remove the Cydia third party app manager and allows to install Sileo.

Follow below Betelguese guide to install Odysseyra1n for Checkra1n Device.

• Step 01. Install Betelguese from here. Betelguese only supports Mac operating system.
• Step 02. Now you have to remove Cydia. Use Restore System Checkra1n feature to remove Cydia.
• Step 03. Now re-jailbreak your Device using Checkra1n Jailbreak tool. Please do not tap Cydia install button
• Step 04. Now Double tap for unzip Betelguese file

Step 05. Double tap to open Betelguese

Step 06. Plug your Device to Mac

Step 07. Tap install Odysseyra1n

Step 08. Tap continue button and Now you can see the process running

Step 09. Wait for Done message

Step 10. Successfully Installed Sileo

Checkra1n Jailbreak for Apple TV

Checkra1n tool also supports to Jailbreak your Apple TV 4th Generation. You can follow our Video guide and written step guide from below.

Checkra1n jailbreak released for Apple TV fourth-generation . This news officially announced by @nitoTV with their official Twitter account.

Still, Checkra1 only supports fourth generation (HD) Apple TV. Apple TV 4K also compatible with Checkra1n, but it doesn’t have to get to DFU mode. So if you are on 4K Apple TV stay on the same firmware version and do not upgrade.

Checkra1n Apple TV Jailbreak Step guide

• Step 01. Download Checkra1n Apple TV support version from here. Make sure to use Macos computer

https://assets.checkra.in/tv/

Step 02. Drag and drop Checkra1n Apple TV file to MacOS Application folder

Step 03. Connect Your Apple tv to Mac and Power source

Step 04. Once Apple TV connected, Checkra1n will identify your Apple TV

Step 05. Tap Checkra1n Start button and tap next button to send your Apple Tv to recovery mode

Step 06. Once your Apple tv Detected as recovery mode, you have to put your Device to DFU mode.

Step 07. Grab your Apple TV remote controler and follow up on screen instructions to put your Apple TV to recover mode.

Step 08. Now going to boot process.

Step 09. Now diconnect your Apple tv HDMI and reconnect.

Step 10. After few seconds you can see Checkra1n RC1 installer showing up on your Apple Tv. Also you can see progress bar running.

Step 11. Once progress complete tap Done.

Step 12. Now you can respring your Device.

Step 13. Congratulations. You scuessfully Jailbreak your Tv through Checkra1n and sucessfully installed NitoTV.

Checkra1n Windows .exe Version coming soon

Checkra1n Developer @DanyL931 ( DanyL ) posted this on Twitter and hinted about Checkra1n Windows version release

Checkra1n tool for iOS 15

Checkra1n Does not support for latest iOS 15 Beta versions. So stay away from iOS 15 Beta if you want to Jailbreak your device.

Apple released so many new features along with iOS 15. You can install iOS 15 from Silzee without a Developer account.

Checkra1n support iOS 14.5 Beta

iOS Researcher successfully jailbroken iPhone 6s running iOS 14.5 Beta

Checkra1n support iOS 14.4 / iPadOS 14.4

iOS Jailbreak Tweaks developer confirmed that Checkra1n Support latest iOS 14.4 and iPadOS 14.4

Checkra1n support iOS 14.1 / iPadOS 14.1 OTA

Several Jailbreak experts confirmed the Checkra1n jailbreak tool is supporting the latest iOS 14.1 OTA and iPadOS 14.1 OTA.

Checkra1n not compatible with iOS 14.2 Developer Beta 4

Please do not update your device to iOS 14.2 Developer Beta if you wish to jailbreak. According to some jailbreak experts, Checkra1n not compatible with iOS 14.2 Developer beta 4

Step 01. Download Checkra1n Apple tool (Only for Mac)

Step 02. Drag and Drop Checkra1n app to the Application folder.

Step 03. Open Checkra1n app

Step 04. Connect your TV Device to Mac using USB cable

Step 05. Click Start Button

Step 06. Wait for the process

—>

Checkra1n Support Cydia Tweak List

Tap spreadsheet to get all support Cydia tweak list for Checkra1n

How to Migrate to Unc0ver / Taurine from Checkra1n ( iOS 14 to iOS 14.3 )

You can migrate to Unc0ver or Taurine jailbreak from Checkra1n with easy steps.

• Step 01. Open Checkra1n app from home Screen.
• Step 02. Tap Restore System.
  
• Step 03. Tap again Restore System ( Bottom notification ) again.
  
• Step 04. Device will be reboot now and Checkrain removed successfully.

Now Install Unc0ver or Taurine tools as you prefer and Jailbreak your Device. You can get Unc0ver and Taurine guies from here.

Chimra1n tool for Install Sileo for Checkra1n Jailbroken Devices

Chimara Jailbreak Tool Developer CoolStar Just released Chimera1n tool for Install Sileo Package manager for Checkra1n jailbroken Devices.
Chimera1n Jailbreak Guide

Checkra1n Vs Unc0ver ( Differences )

Checkra1n

• Only for Mac
• No support for A13
• Tethered Jailbreak
• No Revoke
• Lifetime Jailbreak
• Need Mac for re jailbreak
• Hardware based Jailbreak
• Apple cannot patch

Unc0ver

• Support Mac / Windows / Online ( Without PC )
• Support A9 to A13
• Semi-Untethered Jailbreak
• Apple can revoke app anytime
• Can be patch from iOS 13.5.1
• Can use Unc0ver app for re jailbreak
• Software based jailbreak
• Can patch from iOS 13.5.1 update

How to Remove Checkra1n Jailbreak

• Step 01. Open Checkra1n app from home Screen.
• Step 02. Tap Restore System.
  
• Step 03. Tap again Restore System ( Bottom notification ) again.
  
• Step 04. Device will be reboot now and Checkrain removed successfully.

Checkrain Scam

Checkrain.com is a scam website. This scam site launches a website and claims that they just released a No PC ( Online ) Jailbreak method for iOS Device. According to this site Coolstar, Jamie Bishops, Ninjaprawn & Brandon Azad & Ian beer mentation as exploit developers. This site is only installing mobile config. So stay away from Checkrain scam site.

See below images for Checkrain.com Scam site

Checkra1n Name relate Cydia apps

Package Link — https://repo.twickd.com/get/com.twickd.ray-delvalle.checkra1nswitches

Package Link — https://repo.packix.com/package/com.shadows.checkra1nRespring/

Checkra1n Respring Logo

Package Link — https://repo.twickd.com/get/com.twickd.firethefried.checkra1n-respring-logo

Feel free to contact us if you have any problem.

Источник

Читайте также:  Как снимать незаметно айфон