kairos

kairos is a 64-bit iOS boot image patcher written in C.

Support for iOS 7 - 15.

Patches include:

RSA signature check removal
boot-arg modification
enabling of kernel debug
command handler modification
NVRAM unlock

Why?

I needed a C-based 64-bit iOS boot image patcher that worked with iOS 13.

Building

make

Example usage

./kairos iBEC.dec iBEC.patched -n -b "-v debug=0x09" -c "go" 0x830000300

Note: the input boot image file must be decrypted and unpacked

Credits

xerub, Pwn20wnd, Sam Bingner for patchfinder64
tihmstar for code, inspiration, and patch methods
Exploit3d for code
iH8sn0w for code
Cryptic for code
moski_dev for testing, bug fixes
AppleDry05 for testing