Skip to content
Switch branches/tags

Latest commit


Git stats


Failed to load latest commit information.
Latest commit message
Commit time


A (currently) early prototype concept for an Apple Watch Jailbreak. Uses the v0rtex kernel exploit, and therefore supports watchOS3. Exactly compatbility across OS versions and hardware is unknown. Most things are unknown.

Offsets can be found using my fork of tihmstar's offsetfinder, watch_offsetfinder. OTA updates (containing kernel caches) can be obtained from the iPhoneWiki's OTA Updates page, here.

To enable proper NSLog functionality you may need to use this provisioning profile (make sure to install it to your Apple Watch, not your iPhone)

I'm unsure if v0rtex even runs as-is - the process of finding offsets still needs work.

Feel free to play around with this and let me know if you find anything interesting.

Post-exploitation shouldn't be too difficult, as the Watch is 32bit, therefore no KPP.

Please remember to work from the 'develop' branch, and submit PR's there. NOT master.


  • Fix watch_offsetfinder to correctly find sizeof_task and iouserclient_ipc
  • Get v0rtex to run correctly
  • Patch the shit out of the kernel
  • Disable codesigning
  • Mount '/' as r/w
  • Spawn dropbear/shell

In the future:

  • Find reliable way to transfer files to Watch
  • Subtitute port to watchOS
  • Full package manager for Watch tweaks
  • Get dough

These resources may provide useful:

RIP Apple Watch, April 2015 - January 2018 💀


A watchOS3 Jailbreaking tool.



No releases published


No packages published