Achilles

Achilles is a checkm8 utility for macOS and Linux that offers a selection of tools for vulnerable devices.

If you want to read more about the checkm8 exploit, check out my blog post.

Linux support is currently experimental - failing to send the overwrite (and thus exploit failure) is a common issue that is yet to be resolved.

Features

Patch signature checks with gaster payloads
Boot PongoOS on supported devices
Jailbreak with supplied kernel patchfinder, ramdisk and overlay

Tested devices

iPhone 7, A10
iPhone X, A11
iPad Pro 10.5", A10X

Usage

➜  ~ Achilles -h  
Options:
        -d - enable debug logging
        -v - enable verbose logging
        -q - enable quiet logging (removes all logging except for errors)
        -s - remove signature checks
        -p - boot to PongoOS and exit
        -j - jailbreak the device (requires -K)
        -V - enable verbose boot
        -S - enable serial output

        -u <UDID> - specify a device UDID
        -b <arguments> - additional boot arguments
        -k <Pongo.bin> - override PongoOS image
        -K <kpf> - override kernel patchfinder
        -R <ramdisk.dmg> - ramdisk to boot
        -O <overlay.dmg> - overlay to boot

        -h - print this help message
Examples:
        Achilles -p
        Achilles -j -K kpf -R ramdisk.dmg -O overlay.dmg
        Achilles -s

Building

Achilles requires the following dependencies:

libimobiledevice
libusb

To build, run make in the root directory. This will output the final product to build/Achilles.

To install to /usr/local/bin, run make install (you will be prompted for your password).

Credits

checkra1n - YoloDFU payloads and PongoOS (license)
0x7ff - gaster (license)
Mineek - openra1n (unlicensed)
axi0mX - checkm8 exploit (license)
palera1n - DFU helper, libimobiledevice code (license)

alfiecg24 / Achilles