Alloc8 Bootrom Exploit Forever Jailbreaks the iPhone 3GS

POST

MAIL

Posted April 12, 2017 at 4:21am by Shalom Levytam

Alloc8, a bootrom exploit for the iPhone 3GS, has been released by axi0mX. The exploit makes all iPhone 3GS devices, including those with the new bootrom, forever jailbreakable.

alloc8 brings freedom to millions of iPhone 3GS devices, forever, by exploiting a powerful vulnerability in function malloc in the bootrom. Both revisions of iPhone 3GS bootrom are vulnerable, but old bootrom is also vulnerable to 24Kpwn, which is faster than alloc8.

A new jailbreak tool called ipwndfu has been released via GitHub. Here's a look at its features...

Features
● Jailbreak iPhone 3GS (new bootrom) with alloc8 untethered bootrom exploit. :-)
● Pwned DFU Mode exploit for S5L8920 devices using limera1n exploit, and compatible with Yosemite, El Capitan, and Sierra.
● Dump SecureROM on S5L8920 devices.
● Dump NOR on S5L8920 devices.
● Flash NOR on S5L8920 devices.
● Encrypt or decrypt hex data on a connected device in pwned DFU Mode using its GID or UID key.

Coming soon
● Reorganize and refactor code and fix issues with tabs/spaces.
● Easier setup: remove requirement to patch libusb, download iBSS automatically using partial zip.
● Pwned DFU Mode exploit for S5L8720/S5L8922/S5L8930 devices compatible with Yosemite, El Capitan, and Sierra.
● Dump SecureROM on S5L8720/S5L8922/S5L8930 devices.
● Install custom boot logos on devices jailbroken with 24Kpwn and alloc8.
● Enable verbose boot on devices jailbroken with 24Kpwn and alloc8.

We'll post more details on how to use ipwndfu in the near future. Please follow iClarified on Twitter, Facebook, or RSS for updates.

Alloc8 Bootrom Exploit Forever Jailbreaks the iPhone 3GS

Get the iClarified Daily Newsletter

Apple news, rumors, tutorials, price drop alerts, in your inbox every evening, free.

Unsubscribe at any time.

m_thoroughbred - April 13, 2017 at 1:58am

It's a forever jailbreak! Of course it is Apple doesn't update the 3GS or even support it anymore.

Pter - April 13, 2017 at 12:33am

Is apple updating the 3gs?

Bugs119 - April 12, 2017 at 11:12pm

What we very need is jb the 32bit iOS 9.3.5.

leo za - May 11, 2017 at 4:00pm

mehm your needs are one thing, what it can be done is another thing

The Dude - April 12, 2017 at 7:17pm

The point here is not the 3GS. The breakthrough is that the jailbreak is permanent.

Ed - April 12, 2017 at 7:06pm

Can't even download 99% of the apps which requires iOS 8.0 and up!!!

The Dude - April 12, 2017 at 7:18pm

You can change majority of the apps payload ios requirement by unpacking the app and changing it to ios 6 or whatever. Google it. But again it works on most apps

Andras - April 12, 2017 at 3:19pm

Ultrasn0w sim unlock works with the latest iOS (6.1.3) too, or i should stay on 5.0.1?

pollo - April 12, 2017 at 3:14pm

Really, iPhone 3GS? Where is the iPhone 7 jailbreak?

drigomarki - April 12, 2017 at 1:24pm

Would be sweet if it's for iphone 7 :-)

MUKAI - April 12, 2017 at 5:03am

Lol 7 years a little too late don't you think? My 3GS is just collecting dust in my shelf of apple collections. Why would I take it out of its glass display case. It's all obsolete

D4xM4Nx - April 12, 2017 at 4:31am

Missing the good old days of profile-less, untethered jailbreaks... Specially the ones Apple can't patch with a software update, people with an iPhone 3GS laying around may want to mess with the new tool 4 Teh lulz or sell it for moar on eBay :P

The Dude - April 12, 2017 at 6:57am

Yeah I cannot stand the new profile jailbreaks. For simple tweaks it works ok but serious jailbroken apps like ppsspp and retroarch works sluggish on profile jb's. But on an untethered jailbreak, these apps run fast. Ppsspp on my iphone 5s on ios 7 untethered is faster than my iphone 6s on profiled jb 10.2.