axi0mX/ipwndfu
Ipwndfu
ipwndfu is a collection of software utilities designed to exploit the iOS bootrom to enable unsigned code execution and firmware manipulation. The project provides tools to place Apple devices into a pwned DFU state, allowing the system to bypass secure boot signatures.
The toolkit includes capabilities for hardware-based decryption, using a connected device's unique keys to decrypt data while in a restricted update mode. It also provides utilities for extracting system ROM and flash memory from the hardware for offline security analysis.
The software covers broader hardware exploitation areas including firmware downgrading by bypassing signature checks and the delivery of exploits via USB to trigger memory corruption.
Features
- Bootrom Exploits - Implements bootrom-level hardware exploits to execute unsigned code on iOS devices in DFU mode.
- Boot-Level Code Executions - Allows running unauthorized code for research by exploiting vulnerabilities in the boot process.
- Pwned DFU Activations - Triggers a hardware exploit to enable unsigned code execution while in firmware upgrade mode.
- Pwned DFU States - Enables placing Apple devices into a pwned DFU state to bypass secure boot signatures.
- Jailbreak Tools - Acts as a specialized utility to remove restrictions and execute unsigned code via DFU mode.
- Unsigned Payload Executions - Allows loading and running custom machine code in system memory by bypassing signature checks.
- ROM Extraction - Dumps system ROM and flash memory from iOS hardware for offline security analysis.
- iOS USB Communication - Establishes raw USB communication channels with iOS devices for memory dumping and exploit delivery.
- Firmware Downgrades - Provides the capability to revert devices to earlier firmware versions by bypassing signature checks.
- Firmware Dumping Utilities - Offers a utility for extracting system ROM and flash memory from iOS hardware.
- Hardware-Keyed Decryption Tools - Provides a tool that uses connected device hardware keys to decrypt encrypted hex data.
- Data Decryption - Reverts ciphertext back into original format using unique device hardware keys.
- Hardware-Keyed Decryptions - Uses the device's unique secure enclave keys to decrypt data during restricted update modes.
- Firmware Image Decryption - Decrypts protected system images and firmware using extracted hardware keys.
- Jailbreak Tools - Bootrom exploit tool for various Apple devices.
- iOS Jailbreaking - Open-source jailbreaking tool for various iOS devices.
