iOS 15 checkra1n gets stuck on iPad 6 Wi-FI and iPhone 6s

[CE1CECL]

#

Checkra1n beta 0.12.4

#

Proudly written in nano

(c) 2019-2021 Kim Jong Cracks

#

======== Made by =======

argp, axi0mx, danyl931, jaywalker, kirb, littlelailo, nitoTV

never_released, nullpixel, pimskeks, qwertyoruiop, sbingner, siguza

======== Thanks to =======

haifisch, jndok, jonseals, xerub, lilstevie, psychotea, sferrini

Cellebrite (ih8sn0w, cjori, ronyrus et al.)

==========================

• [07/04/22 17:20:29] : Waiting for DFU devices
• [07/04/22 17:20:29] : using libusb hotplug API
• [07/04/22 17:20:29] : libusb: waiting for USB events
• [07/04/22 17:20:45] : DFU device connected: 1d64142833e0a6
• [07/04/22 17:20:45] : Exploiting
• [07/04/22 17:20:45] : Attempting to perform checkm8 on 8003 1...
• [07/04/22 17:20:45] : Checking if device is ready
• [07/04/22 17:20:45] : == Checkm8 Preparation stage ==
• [07/04/22 17:20:45] : Setting up the exploit (this is the heap spray)
• [07/04/22 17:20:45] : == Checkm8 Setup stage ==
• [07/04/22 17:20:45] : Disabled probabilistic mode since we encountered a partial xfer
• [07/04/22 17:20:45] : Deterministic approach was successful!
• [07/04/22 17:20:45] : Right before trigger (this is the real bug setup)
• [07/04/22 17:20:45] : Entered initial checkm8 state after 0 steps, issuing DFU abort..
• [07/04/22 17:20:46] : DFU device connected: 1d64142833e0a6
• [07/04/22 17:20:46] : == Checkm8 Trigger stage ==
• [07/04/22 17:20:46] : Checkmate!
• [07/04/22 17:20:46] : DFU device connected: 1d64142833e0a6
• [07/04/22 17:20:46] : == Checkm8 Trying to run payload... ==
• [07/04/22 17:20:47] : If everything went correctly, you should now have code execution.

[konradybcio]

you can't boot pongo on iOS 15 yes afaik, upstream issue

[RokeJulianLockhart]

https://github.com/SoMainline/linux-apple-resources/issues/6#issuecomment-1181994604

@konradybcio, is that being tracked upstream?

[tak2hu]

You can boot into PongoOS 2.6 first then boot into PongoOS 2.5 with bootr

[CE1CECL]

You can boot into PongoOS 2.6 first then boot into PongoOS 2.5 with bootr

clear && sleep 2s && ./palera1n-linux-x86_64 -p && sleep 2s && python3 ./pongoOS-master/scripts/upload_data.py ./Pongo.bin && sleep 2s && python3 ./pongoOS-master/scripts/issue_cmd.py bootr && sleep 2s && python3 ./pongoOS-master/scripts/load_linux.py -k Image.lzma-16k -d dtbpack -r ./debug_initrd.img && sleep 2s IT WORKS!: (note: this is without the -r ./debug_initrd.img option)