Filza Jailed Darksword – supports iOS 17.0–18.0.1 (except 18.7.2–18.7.7).
This repository open-sources the tweak injected into the Filza IPA (version 4.0.0 and earlier; 4.0.2 appears to cause crashes).
Now includes SSV-protected area write access with root privileges.
- Sandbox escape via kernel exploit
- Root helper bypass
- Zip/unzip hooks
- License/integrity bypass
- Bypass Filza padlock: lets you try to create and edit files even without privileges (Broken?)
- SSV-protected area write access: Allows writing to system-protected areas
- Root privileges on created files: Automatically chown files created in protected areas to root with write permissions
- Filza may take 2–3 attempts before working (you can check the logs in "/tmp" inside the Filza sandbox)
- Bypass Filza padlock doesn't work
This is a pre-release build. Most exploits are still unstable and do not always work.
This build is for testing purposes only. Do not expect it to work perfectly.
If it works for you, please contact me with your logs.
If it doesn’t work, feel free to open an issue on GitHub, but do not contact me directly — this is a testing build.
Note about iPhone 17 series and iPad M5: It will not work because of MTE. Starting with the iPhone 17 and M5 chips, Apple added MTE which blocks kernel read/write access.
- Duy Tran – sandbox hook token
- wh1te4ever – darksword-kfun with offset/XPF
- opa334 – XPF/krw
- CrazyMind90 – idea to get sbx token with krw only
- Huy Nguyen – original repo
- Grok and Claude – assistance with the implementation
- And me