I found a kernal use after free bug and a sptm bypass vulnerability using IOKit but I haven’t figured out how to access the bug from a userland app yet

i’ve been using it for over a year now. and not too long ago it updated. and this is the new (imo) worse version. can we somehow use the old one?

Tethera is out on Havoc. It enables Personal Hotspot on your iPhone, with Apple's own switch and Wi-Fi password in Settings, and adds a page that shows what your hotspot is doing.

Personal Hotspot, as Apple made it

• Apple's own Personal Hotspot page in Settings: Allow Others to Join, your Wi-Fi password, Maximize Compatibility.
• Share over Wi-Fi with your laptop, tablet or another phone, as usual.
• A shortcut on Tethera's page goes straight to Personal Hotspot in Settings.
• Turn Tethera off and the phone behaves exactly as before: the network changes it made are undone.

See what's happening

• Connected Clients: whether the hotspot is on, how many devices are connected and over what, how long it has been on and what it shares from, live.
• Hotspot data: what it carried this session, today, and over the last 7 and 30 days.
• The devices that joined in the last 30 days, which you can rename.

Join in a moment

• Join Hotspot shows the network name and password with a QR code another device can scan, and copies the password.

Turn it on and off your way

• Automatically off when no device has been connected for a while, when the battery runs low, or after a daily amount of data you choose.
• From Shortcuts, Activator or the app icon's quick actions, and from Control Center with the Tethera control (iOS 15 to 17, with CCSupport).

Choose what to share

• Share From: your cellular data (the default), the Wi-Fi network your iPhone is on, or a VPN running on the phone.
• With a VPN, the hotspot doesn't start while the VPN is down, so nothing leaves unprotected.

Light and private

• Optional Control Center control.
• Your traffic is never recorded or sent anywhere. The data totals and the device list stay on your iPhone, 30 days at most, and you can turn either off or clear them.

Good to know

• Tethera doesn't give you free or extra data, and your carrier's terms still apply: your carrier can see, count and charge for hotspot use.
• Wi-Fi sharing only: USB and Bluetooth sharing aren't supported.
• Results vary by iPhone, iOS version and carrier.

Works on iOS 15 to 26, rootless (Dopamine, palera1n). Tethera is on the home screen, and in Settings up to iOS 17.

Get it: havoc.app/package/tethera

More info: tethera.aadios.dev

?

There is a setting called "Background Security Improvements" hiding far away from the software update area, under Settings -> Privacy & Security, near the bottom of the list. This setting is described as "provide additional protection to your iPhone in between software updates". This setting started appearing after 26.0.1 and it seems we should turn this off if we are sitting on a particular iOS version hoping for a jailbreak.

I do have some questions about this setting.
1) Does the TVOS profile prevent it from operating?
2) Does the DNS update blocker prevent it from operating?
3) Is there any way to find out if any updates have been pushed out this way?
4) Is there any way to detect if your particular device has one of these updates?

New: Ad Block

• Block ads and trackers inside apps and their in-app web views, for all apps or per app ("Block Ads" / "Allow Ads").
• Control Center toggle, and works alongside DNS blockers such as AdGuard.
• Filter lists (AdGuard DNS filter, Peter Lowe's List, StevenBlack hosts) downloaded on demand.

New: Hide Jailbreak (Dopamine)

• Automatically execute "Hide/Unhide Jailbreak" in Dopamine on a per-app basis.
• Tap a marked app to hide the jailbreak while you use it; it cold-launches the app and restores the jailbreak automatically when you leave.
• Please note that this may not work with all apps.
• Using "Unhide" will cause your jailbreak apps to become scattered across the home screen, so please use the backup feature in IconOrder.

New: Clean Jailbreak Traces (Dopamine) varClean

• Remove leftover jailbreak junk under /var that can make detection apps fail even after the jailbreak is removed. Review the list and delete only what you pick; updatable rules.

New: Per-app language

• Set a different language per app; the app keeps the system language everywhere else.

Improvements

• Hide/unhide are much faster (parallel app re-registration) and show the progress HUD immediately.
• Pull to refresh in Clean Jailbreak Traces.
• Blue switches throughout; larger Control Center icon.
• All 17 languages updated.

The Havoc team responded quickly, allowing us to release immediately.

Please feel free to leave a comment if you have any questions or feedback.

Horythia - Havoc Repo

https://havoc.app/package/horythia

I feel like recently its just a competition of who is worse at reading comprehension.

(Bit of a shitpost but GAWD my feed is filled with should i update when there are literal flowcharts made for this exact purpose)

Hi, Thanks to your support, I have been able to release PrimalFolderPro.

For those who are not yet familiar with the feature, I will provide a brief explanation.

Compatibility

• iOS 14–26 (iPhone and iPad)
• Supports rootful, rootless, and roothide (packages for roothide are handled separately)
• IconOrder is required (it will be installed automatically)
• Includes the features of PrimalFolder 2, Bolders Reborn, and FolderX; please remove these before installation

Key Features

• Bigger folders: 4x5 on iPhone, 5x6 on iPad
• Five folder icon styles: default, TapTapFolder (first app large), app icon, 2x2, or hidden
• Exsto menu: long press a folder to open a circular menu and launch an app without opening the folder
• Colors for folder names, app names, folder icons and the folder background

The beta version is available until the deadline of November 11.

The price is $2.99

Please check the Havoc page for more details:

PrimalFolderPro - Havoc Repo

https://havoc.app/package/primalfolderpro

CamHop is out on Havoc. It makes the webcam and microphone of your Mac or PC your iPhone or iPad's own, live over Wi-Fi. Open a link on the computer, type the PIN, and the Camera app, FaceTime, video calls and every other app see your computer's camera. Nothing to install on the computer.

Connect in seconds

• Switch on Desktop Camera, and Desktop Microphone for the computer's sound too.
• AirDrop or copy the link to the computer, or scan the QR code. It opens in Chrome, Edge or Safari with your iPhone filled in.
• Type the six-digit PIN the iPhone shows, and you're live.
• Another phone or a tablet can be the camera too: open the link in its browser.

Your camera, in a browser tab

• Pick the webcam and microphone, see the picture before you connect, and switch either while live.
• Up to 1080p, or 720p and 480p for slower Wi-Fi.
• Sound tuned for voice, or high quality for music.
• Mute or pause in one click, with the connection's speed and frame rate live.

You choose where it goes

• Replace the front camera, the back camera, or both.
• Keep the iPhone's own camera in the apps you pick.
• Choose which apps hear the computer's microphone, alone or mixed with the iPhone's.
• Fill, fit or stretch, rotate, mirror, zoom and pan.
• The Preview shows exactly what apps receive.

Back in one tap

• Return to the iPhone's camera and microphone from Control Center, a floating button, or both volume buttons together. The computer stays connected, so switching back is instant.

Why it's different

• No app on the computer. It's a browser tab: any Mac or PC with Chrome, Edge or Safari.
• Private, and on your Wi-Fi: picture and sound go straight from the browser to the iPhone, encrypted. They never pass through a server.
• A PIN for every computer, one computer at a time.
• Works without internet: the iPhone serves the page itself.
• Live cameras only: CamHop carries a live camera from your own computer. No video files, photos, screen mirroring or overlays.
• No account, no tracking.

Works on iOS 15 to 26, rootless (Dopamine, palera1n), iPhone and iPad. Settings are in CamHop's app on the home screen, and in Settings up to iOS 17.

Get it: havoc.app/package/camhop

More info: camhop.app

Haven’t been around since the unc0ver days and super out of the loop on jailbreaking but why do people want to jailbreak?

I get the broad appeal of having pure access to your device and being able to tweak things but can you guys give me specifics? Why do you really want to jailbreak? What is something you’re missing right now that you will get? Is it anything in particular?

• FYI, if you pair an Apple Watch on 11.4+ with an iPhone on 18.3 or later, the Messages app will be removed automatically everytime it syncs with your phone.
• This shouldn't be a problem since Legizmo already had a solution. However, Legizmo doesn't support roothide (arm64e), and I don't see any indication that it will in the near future. That's why I created WatchMessages18.
• This does not make an iPhone pair with a newer watchOS; pairing is a separate problem. Use watched; Nugget, or Legizmo TrollStore.
• If Messages is already gone from the watch, reinstall it from the App Store on the watch after installing the tweak.
• I’ve only tested this on iOS 17.1.1 and watchOS 11.6.1 (since I only have one Apple Watch - no surprise there, lol). If you’re using other versions, I’d appreciate your help testing: install the tweak, make sure Messages is on your watch, then resync with your phone by toggling Bluetooth off/on. Let me know if Messages stays installed.
• Free and Open source. Get it from my repo (rootless & roothide)

Hey guys, I'm Carter, and I'm really excited to show you my tweak, CarterEQ! Thanks to everyone who checked out Mountaineer, you all were awesome.

CarterEQ is an equalizer for everything your iPhone plays: Spotify, Apple Music, YouTube, TikTok and games, on the speaker, AirPods or wired headphones. No per-app setup, you just turn it on and everything sounds the way you want.

What you get

• 10-band graphic EQ with a preamp, plus 12 built-in presets (Bass Boost, Vocal Boost, Spoken Word…) and your own saved presets
• Compressor, headphone crossfeed and a 0 dB limiter so boosting bass doesn't clip
• Floating EQ chip on the Home and Lock Screens: tap it for the full panel with a volume slider and live meters (optionally in apps too)
• iPhone 15 Pro and later: hold the Action button to flip the EQ on or off
• A CarterEQ app, a Settings pane and a cartereq command for the terminal crowd

Built to stay out of the way: the audio thread only does the DSP, and a flat curve passes audio through untouched. Screen recordings with the EQ on and off showed the same 60 fps and no audio dropouts.

Honest notes

• Tested on iOS 16.3.1 (iPhone 14 Pro Max) and iOS 17.1 (iPhone 15 Pro Max). iOS 15 should work but I haven't had a device on it.
• On iOS 17 the EQ usually attaches by itself; if the sound doesn't change, the app's Enable System EQ button fixes it in one tap. EQ Status tells you whether it's running.

• Run one system-wide EQ at a time.

• Price: $0.99 one-time (also in the CarterWare Tweak Pass). One purchase covers up to 3 devices.

• Works on: Dopamine rootless, iOS 15–17

• Repo: https://tweaks.carterware.net/

• Page + guide: https://tweaks.carterware.net/cartereq.html

Buying: add the repo in Sileo, tap Buy, sign in with your email, pay through Stripe checkout. If anything breaks, Settings → CarterEQ → Report a Bug fills in your version, iOS and device for you. I read every single one.

I hope you guys enjoy it! I'll be in the comments, so ask me anything.

Hey everyone, currently I am studying for my bar exam and I just want to do something new for a while instead of law.
I was curious which language I should learn to make maybe my own tweak for an jaikbroken device.
I don’t know how hard this will be for me and maybe I will never be able to program my own tweak.
But maybe I could just understand it better?
I am hyped about the possibility to get an Jailbreak and want to do something for the community.
I really don’t wanna underestimate the devs for tweaks. I think programming is really hard and you need certain skills.
But I don‘t know; I just wanna help the community grow.

Not any actual jailbreak but since you can use finder sync to option click update and select firmware file.

Does anyone know how to update/restore Apple Watch to a older signed watchOS if the iPhone device is at 27.0.1 and you want update it to 27.0.1 but 27.2 is released.

I’m assuming upgrading watchOS to 27.2 not work with the phone.

I apologize in advance for this as I know most of us are sick of the “should I update” questions. I have a 17 pro, and I’m on 26.1. I know with Calif’s announcement recently, there has been a lot of chatter about a possible jb, so my questions is, what are the pros/cons of updating to 27, and would you update if you were me? I appreciate you all!

iOS 27.2 supports facial age estimation to help verify users’ ages and comply with laws requiring age checks for certain features and services. Embedding these checks into iOS raises privacy concerns and gives Apple greater control over what users can access. This could make jailbreaking more appealing to people who want greater control over their devices and fewer software restrictions. I bet all you people updating to 27.2 for “better battery life” didn’t know about this 🤣

as you can see in on 27.0 but a beta release and i dont have options to go to 27.0 official release neither 27.0.1

If some of us that are going get our duo in November can we still Ipsw the the new iOS 28.1 or will we be stuck at the 28.1 it ships with also will we only be able to update to iOS 28.2 and iOS 28.1 be closed and not be able to jailbreak

Could someone share details on working repositories for iOS 16? Please include the relevant links.

Hi, I have been out of the jailbreaking game for a long time since my iPhone 5 was still brand new from apple and I was a teen.. but I seen the IOS 27.0.1 update was getting a jailbreak soon and I still could update it since its signed but I am on IOS 18.7.8 on an iPhone 16. I'm mainly just seeing if its worth staying where I'm at on IOS 18.7.8 and waiting for a Jailbreak (If there isn't already one I don't know about!) or if I should jump the gun and update.. Thanks in advance!!

jailbroken on IOS 12 & IOS 15 & IOS16...want to get newer device with newer os,

is IOS18.7.1 iPone11 good to get for jailbreak?

I’m sharing Tinge 26. An iOS 26 compatibility port of Tinge 1.2.2 by P2KDev (@p2kdev). He’s not around these days, so I had his well made tweak to work on iOS 26.

It customizes notification badges with adaptive and static backgrounds, text colors and borders.

What changed:

• ⁠Restored adaptive backgrounds using the app icon already rendered by SpringBoard, including themed icons.

• ⁠Folder badge colors follow the app with the highest badge count inside the folder.

• ⁠Preserved static backgrounds, text colors, border width and border color options.

• ⁠Reworked the settings pane with Apple’s native color picker and verified saves, fixing the issue where selected colors wouldn’t persist.

• ⁠Included SpringBoard compatibility fixes and separate rootless and native RootHide packages.

A lot of work by ChatGPT and then codex. I instructed and tested 12-13 iterations within a few hours while doing other things and I hope I tested it enough on roothide before the release.

Testing has been limited to an iPhone 11 Pro Max running iOS 26.0.1 with Dopamine 3 roothide. The rootless build is also included but hasn’t been device-tested by this project. Other setups are untested and the final footer/link polish still needs an on-device check.

Download:

https://github.com/sahinkaa/Tinge26

Both packages are version 1.0. Port source, build instructions, checksums and full installation notes are included in the release.

One known limitation: some folders may need to be opened once before their badge color becomes available.

Original Tinge credit goes to P2KDev. The rendered-icon sampling approach was informed by w1tu’s ntfy.