checkm8_toolbox

a toolbox for checkm8 exploit

checkm8 toolbox

This is a checkm8 toolbox (ios 12.x-16.x) form Laurin226

Change Log • Twitter

This gui was made with Python3MacApp LearnerTemplate from @ios_euphoria

On ios 16.x you have to enable developer mode (before you can enable it, you must sideload an app)

On A11 and A10 devices you must disable passcode, on ios 16 you must never set a passcode, if you had a passcode you have to restore with itunes

Here you can download the Palera1n loader ipa: Palera1n.ipa

How does it work: It boots the device with multiple patches required. On first run, it'll boot a ramdisk which dumps your onboard blob, creates a fakefs (if using semi tethered), installs the loader app, and patches your kernel.

launch

Step 1. unzip the checkm8 toolbox folder and drag and drop it to the desktop

Step 2. Run this in terminal: cd DRAG_AND_DROP_checkm8 toolbox_folder_here

Step 3. run: bash ./install.sh, if it ask you to reinstall something press N

Run git init -b main

Run sudo xattr -rd com.apple.quarantine ./*

Run sudo xattr -d com.apple.quarantine ./*

Run sudo chmod 755 ./*

Now cd the folders inside the checkm8 toolbox folder and run the last 3 commands above again

cd the directory again

Step 4. Last to launch the app, run this in terminal: python3 checkm8.py

Press: start bypass

Credits

Python3MacApp LearnerTemplate creator: ios_euphoria

• Nathan

  • The ramdisk that dumps blobs, installs pogo to tips app, and duplicates rootfs is a slimmed down version of SSHRD_Script
  • For modified restored_external
  • Also helped Mineek getting the kernel up and running and with the patches
  • Helping with adding multiple device support
  • Fixing issues relating to camera.. etc by switching to fsboot
  • iBoot64Patcher fork

• Mineek

  • For the patching and booting commands
  • Adding tweak support
  • For patchfinders for RELEASE kernels
  • Kernel15Patcher
  • Kernel64Patcher

• Amy for the Pogo app

• checkra1n for the base of the kpf

• nyuszika7h for the script to help get into DFU

• the Procursus Team for the amazing bootstrap

• F121 for helping test

• m1sta for pyimg4

• tihmstar for pzb/original iBoot64Patcher/original liboffsetfinder64/img4tool

• xerub for img4lib and restored_external in the ramdisk

• Cryptic for iBoot64Patcher fork, and liboffsetfinder64 fork

• libimobiledevice for several tools used in this project (irecovery, ideviceenterrecovery etc), and nikias for keeping it up to date

• Nick Chan general help with patches.

• Sam Bingner for Substitute

• Serena for helping with boot ramdisk.

• Thanks to Checkra1n for the checkra1n jailbreak