palera1n/palera1n
Palera1n
palera1n is an iOS jailbreak tool that exploits a permanent hardware vulnerability in the bootrom of A8 through A11 Apple devices running iOS 15.0 or later, granting root access for system customization and third-party software installation. The tool also extends this jailbreak technique to Apple T2-equipped Macs running bridgeOS 5.0 or later, providing system-level access and modification capabilities on those devices.
The tool offers two distinct jailbreak environments: a Rootless mode that provides system access without modifying the root filesystem, and a Full-root mode that grants unrestricted root filesystem access for complete system modification. Users can choose between these environments to control the level of system access and package compatibility. For recovery and troubleshooting, palera1n includes a Safe Mode that boots the device with all tweaks and extensions disabled, as well as the ability to remove the jailbreak entirely and restore the device to a stock state.
Beyond the core jailbreak functionality, palera1n provides low-level device debugging through a PongoOS shell environment, remote command-line access via Dropbear SSH, and the ability to install Sileo or Zebra package managers for managing third-party software. The tool also supports printing detailed device information and booting directly into the PongoOS shell for custom image loading and direct hardware interaction.
Features
- iOS Jailbreaking - Exploits a hardware vulnerability to gain root access on A8 through A11 devices running iOS 15.0 or later.
- Hardware Vulnerability Exploits - Exploits a hardware-level vulnerability to gain root access on A8 through A11 devices running iOS 15.0 or later.
- Bootrom Exploits - Exploits a permanent hardware vulnerability in the bootrom to gain initial code execution on A8-A11 devices.
- Overlay Filesystems - Creates a writable overlay on the read-only root filesystem to install jailbreak components without modifying system partitions.
- iOS Bootloaders - Loads a custom boot environment that provides low-level hardware access and debugging capabilities.
- BridgeOS Jailbreaking - Extends the same jailbreak technique to Apple T2-equipped Macs running bridgeOS 5.0 or later.
- BridgeOS Compatibility Layers - Extends the jailbreak mechanism to Apple T2 chips by adapting kernel patches and boot processes for bridgeOS.
- Bootrom Exploits - Exploits a permanent hardware vulnerability in the bootrom of A8 through A11 devices.
- Kernel Patchfinders - Dynamically locates and patches kernel memory regions to disable code signing and entitlements.
- iOS Package Manager Installers - Adds Sileo or Zebra as default package managers for installing and managing third-party software.
- Device Shell Access - Opens a command-line shell on the device via dropbear or telnet, enabling direct system interaction.
- PongoOS Shell Environments - Starts the device into a PongoOS shell environment for low-level debugging and custom image loading.
- Jailbreak Removals - Restores the device to a stock state by removing all jailbreak modifications and reverting system changes.
- Full-Root Jailbreak Environments - Provides a Full-root mode that grants unrestricted root filesystem access for complete system modification.
- Jailbreak Environment Managers - Selects between Rootless and Full-root jailbreak environments to control system access levels and package compatibility.
- Jailbreak Environment Selectors - Selects between Rootless and Full-root jailbreak environments to control the level of system access.
- Jailbreak Recovery Tools - Booting into Safe Mode or removing the jailbreak entirely to recover from crashes or restore the device to a stock state.
- Rootless Jailbreak Environments - Provides a Rootless mode that provides system access without modifying the root filesystem.
- T2 BridgeOS Jailbreaks - Extends the same jailbreak technique to Apple T2-equipped Macs running bridgeOS 5.0 or later.
- PongoOS Debugging Environments - Booting into PongoOS shell for low-level debugging, custom image loading, and direct hardware interaction on jailbroken devices.
- Multi-Architecture Support - Handles both ARM64 and x86_64 architectures with a unified exploit and patching pipeline.
- Safe Modes - Boots the jailbroken device with all tweaks and extensions disabled to troubleshoot or recover from a crash.
