search

checkra1n / BugTracker

checkra1n bug tracker
729 stars 104 forks source link

checkra1n 0.10.0 beta is not able to enable jailbreak #1090

Open xorpix opened 4 years ago

xorpix commented 4 years ago
  1. What iDevice are you using? iPhone 8 Plus
  2. On what version of iOS is it? iOS 13.4
  3. What version of checkra1n are you using? GUI or CLI? GUI
  4. What is your host system (OS version? Hackintosh? VM? etc.)? macOS 10.15.3, vmra1n
  5. How are you connecting to the device (USB-A? USB-C? Apple/3rd party cable? Through a USB hub?)? USB-A What are the steps to reproduce the issue? Just trying to enable jailbreak.

Description: So, I've update my checkra1n utility to 0.9.10 and it simply can't enable my jailbreak anymore. I'm getting -20 error and it's just getting stuck on a boot screen (Apple Logo, it doesn't even pass to checkra1n verbose screen). Safe Mode doesn't help and it's still impossible to boot into jailbroken state with having "Safe Mode" option enabled. Downgraded to 0.9.9 and now everything works fine.

Siguza commented 4 years ago

There is no 0.9.10. Are you talking about 0.10.0?

xorpix commented 4 years ago

Oh, crap, my bad. Yea. The latest experimental build

xorpix commented 4 years ago

Also I’m not the only one. Some people on Twitter replied they were having the same issue

justjohn101 commented 4 years ago

Having the same issue on iPad Po 12.9 1st 13.4 and got 6111 segmentation fault from running cli in verbose.

I still had a version of 0.9.9 and tested with that and worked first time on 13.4.

Siguza commented 4 years ago

@xorpix Hm, I see them. This is gonna get really annoying to debug.

Out of curiousity, could you try invoking checkra1n with -e 'serial=3' and see if that makes a difference?

xorpix commented 4 years ago

Nah, it didn't change anything. Still got stuck on Apple Logo and on "Booting..." at cheackra1n app. And -20 error popped up afterwards.

theblaggy commented 4 years ago

I have the same problem on iPhone X iOS 13.4 Where can I get 0.9.9? Thank you

justjohn101 commented 4 years ago

So, using the arguments -e 'serial=3' on version 0.10.0 does nothing as far as I can see, still fails with error -20. But, using the same arguments on 0.9.9 and it is a little more promising. Checkra1n displays All Done and "done!" is shown on device screen but the device enters a reboot loop and while it does eventually boot, it is not jailbroken. I think one of the reboots is undoing the jailbreak similar to a restart.

justjohn101 commented 4 years ago

I have successfully jailbroken but had to DFU restore a fresh 13.4 and used 0.9.9 with arguments -e 'serial=3' Might be worth re-releasing 0.9.9?

xorpix commented 4 years ago

Here's the link to 0.9.9: http://www.mediafire.com/file/g53i0vujpvesdce/checkra1n_beta_0.9.9.dmg/file

ProfMertes commented 4 years ago

What iDevice are you using? iPad Pro 9.7" (MLMV2FD/A, A9X) On what version of iOS is it? iPadOS 13.4 What version of checkra1n are you using? GUI or CLI? GUI Checkra1n v0.10.0 (source: https://assets.checkra.in/test/checkra1n%20beta%200.10.0.dmg) What is your host system (OS version? Hackintosh? VM? etc.)? MacBook Pro (15", End 2008), macOS 10.11.9 How are you connecting to the device (USB-A? USB-C? Apple/3rd party cable? Through a USB hub?)? MFI-certified and original USB-A/lightning cable What are the steps to reproduce the issue? iOS 13.1 (jailbroken with checkra1n) --> iOS 13.4 update via iTunes (no OTA) w/o deleting Cydia/cheackra1n --> checkra1n jailbreak (w/o any success)

After entering DFU mode successfully, it seems to jailbreak but ends quickly with booting up. No lines of code visible like I used to see. Afterwards the iPad only boots up with Power + Home (Hold). Finally I receive a -20 error (SafeMode couldn't help me) on the macBook. Restore from old backup and re-jeailbreak showed the same result.

ProfMertes commented 4 years ago

Here's the link to 0.9.9: http://www.mediafire.com/file/g53i0vujpvesdce/checkra1n_beta_0.9.9.dmg/file

Thanks for sharing, unfortunatelly iPadOS 13.4 is not supported with 0.9.9, even 0.10.0 ist not working (-20 error, details see above).

hans2003 commented 4 years ago

What iDevice are you using? iPad Pro 9.7" (MLMV2FD/A, A9X) On what version of iOS is it? iPadOS 13.4 What version of checkra1n are you using? GUI or CLI? GUI Checkra1n v0.10.0 (source: https://assets.checkra.in/test/checkra1n%20beta%200.10.0.dmg) What is your host system (OS version? Hackintosh? VM? etc.)? MacBook Pro (15", End 2008), macOS 10.11.9 How are you connecting to the device (USB-A? USB-C? Apple/3rd party cable? Through a USB hub?)? MFI-certified and original USB-A/lightning cable What are the steps to reproduce the issue? iOS 13.1 (jailbroken with checkra1n) --> iOS 13.4 update via iTunes (no OTA) w/o deleting Cydia/cheackra1n --> checkra1n jailbreak (w/o any success)

After entering DFU mode successfully, it seems to jailbreak but ends quickly with booting up. No lines of code visible like I used to see. Afterwards the iPad only boots up with Power + Home (Hold). Finally I receive a -20 error (SafeMode couldn't help me) on the macBook. Restore from old backup and re-jeailbreak showed the same result.

i have the same problem

enkiusz commented 4 years ago

It worked for me just now, in case you need some debug traces from a working device to compare please say so.

What iDevice are you using? iPhone 8 (MQ6J2PM/A) On what version of iOS is it? iOS 13.4 What version of checkra1n are you using? GUI or CLI? GUI Checkra1n v0.10.0 (source: https://assets.checkra.in/test/checkra1n%20beta%200.10.0.dmg) What is your host system (OS version? Hackintosh? VM? etc.)? MacBook Pro (Retina, 15-inch, Late 2013), osx 10.14.6 (18G4032) How are you connecting to the device (USB-A? USB-C? Apple/3rd party cable? Through a USB hub?)? USB-A/lightning cable What are the steps to reproduce the issue? None, it works.

ProfMertes commented 4 years ago

It worked for me just now, in case you need some debug traces from a working device to compare please say so.

What iDevice are you using? iPhone 8 (MQ6J2PM/A) On what version of iOS is it? iOS 13.4 What version of checkra1n are you using? GUI or CLI? GUI Checkra1n v0.10.0 (source: https://assets.checkra.in/test/checkra1n%20beta%200.10.0.dmg) What is your host system (OS version? Hackintosh? VM? etc.)? MacBook Pro (Retina, 15-inch, Late 2013), osx 10.14.6 (18G4032) How are you connecting to the device (USB-A? USB-C? Apple/3rd party cable? Through a USB hub?)? USB-A/lightning cable What are the steps to reproduce the issue? None, it works.

Thanks for your reply. I think there are more difficulties to jailbreak iPadOS rather than an iOS (iPhone). Anyway I would appreciate it if you could share your debug traces.

enkiusz commented 4 years ago

I ran with Contents/MacOS/checkra1n -l ~/checkrain.log -Vv -e serial=3 but the log contents are pretty modest:

 - [04/03/20 10:40:47] <Info>: Waiting for DFU devices
 - [04/03/20 10:40:47] <Verbose>: DFU mode device found
 - [04/03/20 10:40:47] <Info>: Exploiting
 - [04/03/20 10:40:47] <Verbose>: Attempting to perform checkm8 on 8015 11...
 - [04/03/20 10:40:47] <Info>: Checking if device is ready
 - [04/03/20 10:40:47] <Verbose>: == Checkm8 Preparation stage ==
 - [04/03/20 10:40:47] <Verbose>: Stalled input endpoint
 - [04/03/20 10:40:47] <Verbose>: DFU mode device found
 - [04/03/20 10:40:47] <Info>: Setting up the exploit (this is the heap spray)
 - [04/03/20 10:40:47] <Verbose>: == Checkm8 Setup stage ==
 - [04/03/20 10:40:47] <Info>: Right before trigger (this is the real bug setup)
 - [04/03/20 10:40:47] <Verbose>: Entered initial checkm8 state after 3 steps, issuing DFU abort..
 - [04/03/20 10:40:48] <Verbose>: DFU device disconnected
 - [04/03/20 10:40:48] <Verbose>: DFU mode device found
 - [04/03/20 10:40:48] <Verbose>: == Checkm8 Trigger stage ==
 - [04/03/20 10:40:49] <Verbose>: Checkmate!
 - [04/03/20 10:40:49] <Verbose>: DFU device disconnected
 - [04/03/20 10:40:49] <Verbose>: DFU mode device found
 - [04/03/20 10:40:50] <Verbose>: == Checkm8 Trying to run payload... ==
 - [04/03/20 10:40:50] <Verbose>: If everything went correctly, you should now have code execution.
 - [04/03/20 10:40:50] <Verbose>: DFU device disconnected
 - [04/03/20 10:40:55] <Info>: Entered download mode
 - [04/03/20 10:40:55] <Verbose>: Download mode device found
 - [04/03/20 10:40:56] <Info>: Booting...
 - [04/03/20 10:40:56] <Verbose>: Setting bootargs to: rootdev=md0 serial=3
 - [04/03/20 10:40:57] <Verbose>: Download mode device disconnected
 - [04/03/20 10:41:14] <Info>: All Done
 - [04/03/20 10:41:14] <Verbose>: Bootstrap already installed, done

Are there any other flags I need to add?

ProfMertes commented 4 years ago

What iDevice are you using? iPad Pro 9.7" (MLMV2FD/A, A9X) On what version of iOS is it? iPadOS 13.4 What version of checkra1n are you using? GUI or CLI? GUI Checkra1n v0.10.0 (source: https://assets.checkra.in/test/checkra1n%20beta%200.10.0.dmg) What is your host system (OS version? Hackintosh? VM? etc.)? MacBook Pro (15", End 2008), macOS 10.11.9 How are you connecting to the device (USB-A? USB-C? Apple/3rd party cable? Through a USB hub?)? MFI-certified and original USB-A/lightning cable What are the steps to reproduce the issue? iOS 13.1 (jailbroken with checkra1n) --> iOS 13.4 update via iTunes (no OTA) w/o deleting Cydia/cheackra1n --> checkra1n jailbreak (w/o any success)

After entering DFU mode successfully, it seems to jailbreak but ends quickly with booting up. No lines of code visible like I used to see. Afterwards the iPad only boots up with Power + Home (Hold). Finally I receive a -20 error (SafeMode couldn't help me) on the macBook. Restore from old backup and re-jeailbreak showed the same result.

checkra1n 0.10.1 beta did the job. jb was successful on the first run. You guys rock like hell. Again: I fully appreciate your motivation, enthusiasm and the time you spent. Keep up the good work!