Skip to content

v1.4.0

Latest

Choose a tag to compare

@kaffeindecaf kaffeindecaf released this 01 Sep 13:44
· 96 commits to main since this release

universal build. one ipa, jailbroken and not.

  • verified full chain on iPhone 14 (26.0.1): sandbox escaped, /var browsable, SSV writes on
  • fixed the kr=4 race rejection. two self-inflicted bugs were killing the write primitive on 26.x: a destructive dealloc in the race thread, and a non-page-aligned readonly scan read. both removed
  • fixed a false "thread offset mismatch" - the offset was right, the guard was reading the wrong thing
  • xpf kstackptr finder updated for 26.x (panic string changed)
  • bundle id is com.kaffeindecaf.w0lfsword.filza so it sideloads anywhere (plumeimpactor/altstore/trollstore)

jailbroken devices get helper mode. non-jailbroken runs the kernel exploit. reboot = clean slate, nothing persistent.