how-to-jailbreak-ios-15

How to Jailbreak iOS 15 & Setup for Pentesting

Hi everyone! Welcome to Pentestguy. In this article, we are going to see how to jailbreak iOS 15, as we know for iOS application penetration testing we need full access to the device. Well, this is not the article only about how to jailbreak iOS 15 or iPhone, here we are also focusing on the installation of openssh and frida which means we are preparing our iPhone for iOS penetration testing.

Prerequisites:

  • iPhone which having A8-A11 processor.(for this demonstration we used iPhone 7 plus)
  • Linux or macOS on your laptop/desktop
  • palera1n

Download the Palera1n:

First thing you need to download the palera1n from the github and make sure that download it according to your laptop/desktop requirements.

palera1n-jailbreak-download

Perform Jailbreak:

Now connect the iPhone to your system and make sure that it is detected or not.

Open the terminal change the directory where you download palera1n and give the execution permissions to the program.

chmod +x palera1n-macos-universal

Run palera1n:

Run the palera1n using the below command

./palera1n-macos-universal

During the process, it will ask you to press and hold the power and volume down buttons for 4 seconds and after that again need to hold the volume down button for 10 seconds.

After a successful jailbreak, you will find one application named palera1n on your iPhone, as given in the below picture.

iOS-15-jailbreak-completed

Setup SSH connection:

Open palera1n and install the Sileo and Zebra app

iOS-jailbreak-install-sileo

Install SSH packages via Sileo.

Go to the search options in sileo and search for openssh, install the packages(openssh, openssh-client, openssh-server, openssh-sftp-server)

install-openssh-on-jailbreak-iOS

After installing all the packages check the IP address of your phone and try to connect via ssh.

ssh [email protected] 

Please remember the default password is alpine but if that doesn’t work then follow the below steps to reset the root user password.

Install NewTerm, which is nothing but a terminal.

install-terminal-on-jailbreak-iOS

Run the passwd command to reset the root user password. Make sure to provide the password for sudo which you set while installing the application.

sudo passwd root

Install Frida on the iPhone

Open Sileo and add Frida repository – https://build.frida.re

add-frida-repo-in-sileo

Go to the search options search for frida and install it.

install-frida-on-jailbreak-iOS

That’s all for this article, but there are lots of things you can do with it.

Many thanks to Vijay Kodag, who help to complete this whole article.

If you found this post helpful, please share it with your co-workers and friends. Please provide your valuable comments and let us know if there are any suggestions. Now you can also collaborate with us please check our collaboration page, thank you!