Apple iOS General Guidance

Mobile Penetration Testing

Jailbreaking

Before you start:

You’ll need an Apple ID/ Apple Developer Account via https://appleid.apple.com/ and https://developer.apple.com

I believe that Impactor needs a full developer account at this point.

unc0ver Jailbreak for iOS 11.0 – 12.2

Cydia Impactor:

  • Download Cydia Impactor onto your PC from here
  • Extract to a folder and run the impactor.exe

Unc0ver.ipa:

  • Download the latest .ipa from here
  • Assets are located at the bottom of the page

Installing Unc0ver
Make sure you create a backup in iTunes and/or iCloud before doing this, just to be safe

Steps:

  • Run Cydia Impactor and plug your device into your computer
  • Generate an app-specific password, which can be done here
    • After you sign in, it is located in the “Security” section
    • Click “Generate Password” and type whatever you want into the box that appears
    • It will generate a password, copy and paste that into a text document and keep it somewhere safe
  • Drag and drop the .ipa onto the Impactor window
  • Enter your apple id information but use your newly generated app-specific password as the password for impactor
    • ​​​​​​​Tip: If it doesn’t work then you need to install iTunes (if its not already)
  • ​​​​​​​After the installation completes, go into Settings -> General -> Profiles & Device Management
  • Click on your apple id and verify the profile

Using Unc0ver

Steps:

  • Turn off Siri (optional)
  • Turn on airplane mode
  • Reboot your phone
  • Open Unc0ver
  • Click the settings tab and make sure (Re)Install OpenSSH is toggled on
  • Click the Jailbreak button, then wait
  • If it fails, repeat from step 3 until success
  • If it succeeds, it will rename system snapshot and reboot
  • Open unc0ver again once your phone reboots
  • Click the Jailbreak button again
  • If success, a window will appear that says the jailbreak is complete

Frida: https://build.frida.re

SSLKillSwitch: https://github.com/nabla-c0d3/ssl-kill-switch2

Leave a Reply

Your email address will not be published. Required fields are marked *