checkra1n 0.10.0 doesn't boot into jailbroken mode nor safe mode

[theblaggy]

Tell us about your setup:

1. What iDevice are you using? iPhone X
2. On what version of iOS is it? iOS 13,4
3. What version of checkra1n are you using, and GUI or CLI? 0.10.0 GUI and CLI
4. What is your host system (OS version? Hackintosh? VM? etc.)? MacBook 12" 2016 macOS 10.15.4
5. How are you connecting to the device (USB-A? USB-C? Apple/3rd party cable? Through a USB hub?)? USB-C Port + 3rd party USB-C to USB-A adapter + 3rd lightning cable

What are the steps to reproduce the issue?

1. Just try to jailbreak. Both GUI and CLI aren't working

What do you expect, and what is happening instead? I expect the device to go into jailbroken mode but it hangs on Apple logo which disappears after awhile for a part of a second and then comes back again and boots up unjailbroken. The first time I used 0.10.0 after upgrading from 0.9.8.2/iOS 13.3.0 it worked fine. Since then today was the first time I tried to rejailbreak and it isn't working anymore. I tried it several times. checkra1n tool says everything worked fine and it's all done.

Does the issue also occur if you enable Safe Mode? Yes it does

Any other info, error logs, screenshots, ...? One time I tried to use '-e serial=3' (don't know what it is supposed to do, but someone suggested it) Edit: I can ssh into it, maybe that's important to know

• [03/29/20 21:33:09] : Waiting for DFU devices
• [03/29/20 21:33:09] : DFU mode device found
• [03/29/20 21:33:09] : Exploiting
• [03/29/20 21:33:09] : Attempting to perform checkm8 on 8015 11...
• [03/29/20 21:33:09] : Checking if device is ready
• [03/29/20 21:33:09] : == Checkm8 Preparation stage ==
• [03/29/20 21:33:09] : Stalled input endpoint
• [03/29/20 21:33:09] : DFU mode device found
• [03/29/20 21:33:09] : Setting up the exploit (this is the heap spray)
• [03/29/20 21:33:09] : == Checkm8 Setup stage ==
• [03/29/20 21:33:09] : Right before trigger (this is the real bug setup)
• [03/29/20 21:33:09] : Entered initial checkm8 state after 3 steps, issuing DFU abort..
• [03/29/20 21:33:09] : DFU device disconnected
• [03/29/20 21:33:09] : DFU mode device found
• [03/29/20 21:33:09] : == Checkm8 Trigger stage ==
• [03/29/20 21:33:12] : Checkmate!
• [03/29/20 21:33:12] : DFU device disconnected
• [03/29/20 21:33:12] : DFU mode device found
• [03/29/20 21:33:12] : == Checkm8 Trying to run payload... ==
• [03/29/20 21:33:12] : If everything went correctly, you should now have code execution.
• [03/29/20 21:33:12] : DFU device disconnected
• [03/29/20 21:33:18] : Entered download mode
• [03/29/20 21:33:18] : Download mode device found
• [03/29/20 21:33:18] : Booting...
• [03/29/20 21:33:18] : Setting bootargs to: rootdev=md0 serial=3
• [03/29/20 21:33:19] : Download mode device disconnected
• [03/29/20 21:33:49] : All Done
• [03/29/20 21:33:49] : Bootstrap already installed, done

[lingxu-liu]

same

[Siguza]

If you can SSH, the system is up and running. It must be a tweak breaking SpringBoard and causing a respring loop.

[theblaggy]

Even if I select Safe Mode in checkra1n tool is isn't working! So how can it be a tweak?

[Siguza]

Ok wait, does iOS still boot unjailbroken?

[theblaggy]

Now it worked!!! I wanted to try it again to verify for you. I selected Safe Mode and verbose boot. Then jailbroke, after checkra1n said it's all done and the Apple logo was still shown for quite a long time I ssh'd into it and did a ldrestart. Then it booted up into jailbroken mode (not safe mode! I wasn't even knowing, that you can exit safe mode without rejailbreaking). I already tried the ldrestart while booting a few days ago but I had no luck. Maybe I did it just at the right moment today? I would love to try again and test and verify me results but I'm to afraid of it not working again

Edit: I tried it again and it only successfully booted jailbroken when ldrestarting while booting (not sure whether Safe Mode is needed but I just enabled it)