v1.4.2

jailbreakit v1.4.2

Summary

This release exposes the existing external-signer capability as a general local IPA sideload command for authorized iOS lab workflows.

New command

jailbreakit sideload ./App.ipa
jailbreakit sideload ./App.ipa --login --apple-id tester@example.com
jailbreakit sideload ./App.ipa --dry-run

sideload detects a supported external signer or accepts a custom command template containing {ipa}. Apple ID passwords and 2FA responses remain handled by the external signer; jailbreakit does not read or store them.

Host-side ApplicationVerificationFailed errors now point users to either the explicit sideload workflow or the device-side AppSync and appinst route.

Safety posture

jailbreakit remains an authorized iOS pentest lab setup helper. It does not provide jailbreak exploit code, bypass app DRM, distribute decrypted IPAs, store credentials, or bypass iOS trust controls.

Sideloading does not guarantee support for private entitlements used by specialized jailbreak applications. Those packages must follow their upstream-supported installation route.

Validation

test -z "$(gofmt -l .)"
go test ./...
go vet ./...
go build ./cmd/jailbreakit

Upgrade notes

Existing install, lab readiness, Frida, Burp CA, evidence, and recommendation commands keep their previous behavior. The new sideload command is additive.

v1.4.1

jailbreakit v1.4.1

Summary

This release adds device-aware Frida readiness checks, local Burp CA verification, and read-only IPA metadata inspection for authorized iOS security testing workflows.

New commands

jailbreakit lab-check --device
jailbreakit frida-check --device
jailbreakit burp-ca verify --cert cacert.der --profile burp-ca.mobileconfig
jailbreakit install ./App.ipa --inspect

frida-check --device runs frida-ps -U with a short timeout. It does not install or download frida-server.

burp-ca verify validates the local certificate and checks whether a local mobileconfig contains the same certificate. It cannot prove that iOS installed the profile or enabled Full Trust.

install --inspect reads IPA metadata, including bundle identifier, versions, minimum iOS, executable architecture, provisioning profile presence, and available entitlement keys. It does not modify, decrypt, or install the IPA.

lab-check --ssh-interactive can use an SSH password prompt for the harmless readiness command. The password is handled by the system ssh process and is not read or stored by jailbreakit.

Safety posture

jailbreakit remains an authorized iOS pentest lab setup helper. It does not provide jailbreak exploit code, bypass app DRM, distribute decrypted IPAs, store credentials, or bypass iOS certificate trust.

Validation

gofmt -w cmd internal
go test ./...
go vet ./...
go build ./cmd/jailbreakit

Upgrade notes

The existing frida-check, burp-ca, and install commands keep their previous behavior. The new flags are opt-in. This release does not require a connected device for host-side checks or IPA inspection.

Release engineering

• Fixed the tag-driven GitHub Release job by checking out the tagged repository before loading release notes.
• Added explicit repository selection for GitHub CLI release creation.

v1.3.2

Release Notes: v1.3.2

Summary

jailbreakit v1.3.2 is a distribution polish release. It makes the project easier to install from GitHub Releases without requiring users to clone and build from source.

Changes

• Added install.sh for installing the latest or a pinned GitHub Release binary.
• Added checksum verification against release SHA256SUMS when available.
• Updated README install instructions for release binaries.
• Bumped the local version to v1.3.2.

Install

Install latest release binary:

curl -fsSL https://raw.githubusercontent.com/Waariss/jailbreakit/main/install.sh | sh

Install a pinned release:

curl -fsSL https://raw.githubusercontent.com/Waariss/jailbreakit/main/install.sh | JAILBREAKIT_VERSION=v1.3.2 sh

Safety Posture

This release only changes distribution and installation ergonomics. jailbreakit remains an authorized iOS security testing and lab setup helper. It does not create a new jailbreak, exploit third-party devices, bypass app DRM, distribute decrypted IPAs, store credentials, or provide jailbreak exploit code.

Test Commands Run

gofmt -w cmd internal
sh -n install.sh
go test ./...
go build -o /private/tmp/jailbreakit-v1.3.2 ./cmd/jailbreakit

Known Limitations

• Homebrew support is not included in this release; a clean Homebrew tap can be added later if a separate tap repository is acceptable.
• apt repository support is not included in this release.
• macOS release binaries are still not notarized.

Upgrade Notes

Tag and release as:

git tag v1.3.2
git push origin v1.3.2

The auto-release workflow can also create the missing v1.3.2 tag and release from internal/version/version.go when changes are pushed to main.

v1.3.1

Release Notes: v1.3.1

Summary

jailbreakit v1.3.1 is a patch release for the first public lab-readiness line. It adds Burp CA profile generation/installation support and keeps the project scoped to authorized iOS pentest lab preparation.

Changes

• Added jailbreakit burp-ca --cert <path> to generate an iOS Burp CA .mobileconfig profile from a local certificate.
• Added burp-ca --install installer detection for ideviceprofile, pymobiledevice3, and macOS cfgutil.
• Improved the missing-installer message with pymobiledevice3, cfgutil, and manual profile transfer hints.
• Kept generated .mobileconfig files usable even when no USB profile installer is installed.
• Bumped the local version to v1.3.1.

Safety Posture

This release does not auto-enable iOS certificate trust. After installing the Burp CA profile, the user must still manually enable full trust in iOS Settings.

jailbreakit remains an authorized iOS security testing and lab setup helper. It does not create a new jailbreak, exploit third-party devices, bypass app DRM, distribute decrypted IPAs, store credentials, or provide jailbreak exploit code.

Test Commands Run

gofmt -w cmd internal
go test ./...
go build -o /private/tmp/jailbreakit-v1.3.1 ./cmd/jailbreakit

Known Limitations

• USB profile installation requires one supported host tool in PATH: pymobiledevice3, ideviceprofile, or cfgutil on macOS.
• iOS full certificate trust must be enabled manually by the device owner.
• The Burp CA certificate must come from the tester's own Burp instance; jailbreakit does not download it.

Upgrade Notes

Tag and release as:

git tag v1.3.1
git push origin v1.3.1

The auto-release workflow can also create the missing v1.3.1 tag and release from internal/version/version.go when changes are pushed to main.

v1.3.0

Release Notes: v1.3.0

Summary

jailbreakit v1.3.0 is the initial public lab-readiness release for authorized iOS pentest environment preparation and MASTG-style dynamic analysis workflows.

New Commands

• jailbreakit lab-check checks host dependencies, connected device metadata, IPA install readiness, Frida/Objection readiness, and optional SSH readiness.
• jailbreakit frida-check checks host-side Frida and Objection tooling and prints safe next steps.
• jailbreakit evidence --format markdown|json generates a lab readiness evidence report for pentest notes.

Safety Posture

This release keeps the project scoped to authorized iOS security testing and lab setup. It does not create a new jailbreak, exploit third-party devices, bypass app DRM, distribute decrypted IPAs, store Apple ID credentials, or download Frida server binaries.

Test Commands Run

gofmt -w cmd internal
go test ./...
go build -o /private/tmp/jailbreakit-v1.3.0 ./cmd/jailbreakit

Smoke checks:

./jailbreakit help
./jailbreakit lab-check
./jailbreakit frida-check
./jailbreakit evidence --format markdown
./jailbreakit evidence --format json

Known Limitations

• frida-check does not install or download frida-server.
• SSH checks are skipped unless explicit SSH flags are provided.
• SSH checks use BatchMode=yes and do not prompt for or guess credentials.
• Device-side installer checks for appinst and ipainstaller are informational unless available in the active path.
• Evidence reports may include local tool paths and should be reviewed before sharing.

Upgrade Notes

Existing commands remain available. The local version now reports v1.3.0.

For release:

git tag v1.3.0
git push origin v1.3.0

When changes are pushed to main, .github/workflows/auto-release.yml can also create the missing version tag and GitHub Release automatically from internal/version/version.go.

v1.2.0

Release v1.2.0

v1.1.0

Polish README and workflows