kenkit / iRevive

passcode bypass for ios 14-16

iRevive

Passcode bypass for iOS 14-16 on macOS (If you are on Linux use the Linux branch)

releases • Twitter • Website

!!! Warning! This is for educational purposes only !!!

Here you can donate to the developer: buymeacoffee

How it works: It boots the device with multiple patches required. On first run, it'll boot a ramdisk which dumps your onboard blob, creates a fakefs (if using semi tethered), installs the loader app, and patches your kernel.

Installing (macOS)

Install here the dependencies of Sliver, it should work for iRevive also: https://www.appletech752.com/dependencies.sh

Run bash (drag and drop here the file)

Download the ZIP file from the releases and extract it

Drag and drop the iRevive.app to the Applications folder

Run these commands:

sudo xattr -r /Applications/iRevive.app
sudo xattr -rd com.apple.quarantine /Applications/iRevive.app
sudo xattr -d com.apple.quarantine /Applications/iRevive.app
sudo xattr -r com.apple.quarantine /Applications/iRevive.app
chmod 755 /Applications/iRevive.app

Now open the iRevive app

Now for iOS 12-14 click "start checkra1n" and for iOS 15-16 click "start palera1n"

When the device is jailbroken, you can click bypass iOS 12-16

The bypass is now done

Install with python3 if the steps above didn't work for you (macOS)

Install the dependencies of Sliver, it should work for iRevive also: https://www.appletech752.com/dependencies.sh

Run bash (drag and drop here the file)

download iRevive and unzip it

Open a terminal window and cd to the directory that iRevive was downloaded to.

Run these commands:

git init -b main
sudo xattr -rd com.apple.quarantine ./*
sudo xattr -d com.apple.quarantine ./*
sudo chmod 755 ./*

Now cd to the device and ramdisk folder inside the iRevive folder and run the last 3 commands above again

cd the iRevive directory again

to launch the app, run this in terminal:

python3 iRevive.py

Now for iOS 12-14 click "start checkra1n" and for iOS 15-16 click "start palera1n"

When the device is jailbroken, you can click bypass iOS 12-16

Save the activation files and restore them after iTunes restore

Credits

• veast-network : pull request

Original palera1n credits:

• Nathan
  • The ramdisk that dumps blobs, installs pogo to tips app, and duplicates rootfs is a slimmed down version of SSHRD_Script
  • For modified restored_external
  • Also helped Mineek getting the kernel up and running and with the patches
  • Helping with adding multiple device support
  • Fixing issues relating to camera.. etc by switching to fsboot
  • iBoot64Patcher fork
• Mineek
  • For the patching and booting commands
  • Adding tweak support
  • For patchfinders for RELEASE kernels
  • Kernel15Patcher
  • Kernel64Patcher
• Amy for the Pogo app
• checkra1n for the base of the kpf
• nyuszika7h for the script to help get into DFU
• the Procursus Team for the amazing bootstrap
• F121 for helping test
• m1sta for pyimg4
• tihmstar for pzb/original iBoot64Patcher/original liboffsetfinder64/img4tool
• xerub for img4lib and restored_external in the ramdisk
• Cryptic for iBoot64Patcher fork, and liboffsetfinder64 fork
• libimobiledevice for several tools used in this project (irecovery, ideviceenterrecovery etc), and nikias for keeping it up to date
• Nick Chan general help with patches.
• Sam Bingner for Substitute
• Serena for helping with boot ramdisk.