使用checkra1n进行越狱是出现:
解决办法(使用命令行进行越狱):
1. cd /Applications/checkra1n.app/Contents/MacOS
2. ./checkra1n -cv
3. 先进入恢复模式
a .可使用爱思助手
b. 或者长按home,出现关机的滑条,同时按住home和电源键,出现苹果,松开电源键,继续长按home键
4. 进入DFU模式
a. 同时长按5-8秒的home和slider,再松开slider,持续按住home键(自行调整时长,找感觉)
期间会有报错,多尝试几次,最终一定是ok的
➜ MacOS ./checkra1n -cv
#
# Checkra1n beta 0.12.4
#
# Proudly written in nano
# (c) 2019-2021 Kim Jong Cracks
#
#======== Made by =======
# argp, axi0mx, danyl931, jaywalker, kirb, littlelailo, nitoTV
# never_released, nullpixel, pimskeks, qwertyoruiop, sbingner, siguza
#======== Thanks to =======
# haifisch, jndok, jonseals, xerub, lilstevie, psychotea, sferrini
# Cellebrite (ih8sn0w, cjori, ronyrus et al.)
#==========================
- [04/09/25 09:57:10] <Info>: Waiting for DFU devices
- [04/09/25 09:57:50] <Verbose>: DFU mode device found
- [04/09/25 09:57:50] <Info>: Exploiting
- [04/09/25 09:57:50] <Verbose>: Attempting to perform checkm8 on 8003 1...
- [04/09/25 09:57:50] <Info>: Checking if device is ready
- [04/09/25 09:57:50] <Verbose>: == Checkm8 Preparation stage ==
- [04/09/25 09:57:50] <Verbose>: DFU device disconnected
- [04/09/25 09:57:50] <Verbose>: DFU mode device found
- [04/09/25 09:57:50] <Error>: Unable to open device: e00002c5 (error code: -10)
- [04/09/25 09:58:16] <Error>: Timed out in state 1, assuming we are back to square one with this device. (error code: -31)
- [04/09/25 09:58:21] <Verbose>: DFU device disconnected
- [04/09/25 10:02:46] <Verbose>: DFU mode device found
- [04/09/25 10:02:46] <Info>: Exploiting
- [04/09/25 10:02:46] <Verbose>: Attempting to perform checkm8 on 8003 1...
- [04/09/25 10:02:46] <Info>: Checking if device is ready
- [04/09/25 10:02:46] <Verbose>: == Checkm8 Preparation stage ==
- [04/09/25 10:02:47] <Verbose>: DFU device disconnected
- [04/09/25 10:02:47] <Verbose>: DFU mode device found
- [04/09/25 10:02:47] <Info>: Setting up the exploit (this is the heap spray)
- [04/09/25 10:02:47] <Verbose>: == Checkm8 Setup stage ==
- [04/09/25 10:02:47] <Info>: Right before trigger (this is the real bug setup)
- [04/09/25 10:02:47] <Verbose>: Entered initial checkm8 state after 3 steps, issuing DFU abort..
- [04/09/25 10:02:47] <Verbose>: DFU device disconnected
- [04/09/25 10:02:47] <Verbose>: DFU mode device found
- [04/09/25 10:02:47] <Verbose>: == Checkm8 Trigger stage ==
- [04/09/25 10:02:47] <Verbose>: Checkmate!
- [04/09/25 10:02:48] <Verbose>: DFU device disconnected
- [04/09/25 10:02:48] <Verbose>: DFU mode device found
- [04/09/25 10:02:48] <Verbose>: == Checkm8 Trying to run payload... ==
- [04/09/25 10:02:48] <Verbose>: If everything went correctly, you should now have code execution.
- [04/09/25 10:02:48] <Verbose>: DFU device disconnected
- [04/09/25 10:02:49] <Info>: Entered download mode
- [04/09/25 10:02:49] <Verbose>: Download mode device found
- [04/09/25 10:02:49] <Info>: Booting...
- [04/09/25 10:02:49] <Verbose>: Setting bootargs to: rootdev=md0
- [04/09/25 10:02:50] <Verbose>: Download mode device disconnected
- [04/09/25 10:03:32] <Verbose>: DFU mode device found
- [04/09/25 10:03:32] <Error>: Unable to open device: e00002c5 (error code: -10)
- [04/09/25 10:03:53] <Verbose>: DFU device disconnected
- [04/09/25 10:04:18] <Error>: Timed out waiting for bootstrap upload (error code: -20)
^C
➜ MacOS ./checkra1n -cv
#
# Checkra1n beta 0.12.4
#
# Proudly written in nano
# (c) 2019-2021 Kim Jong Cracks
#
#======== Made by =======
# argp, axi0mx, danyl931, jaywalker, kirb, littlelailo, nitoTV
# never_released, nullpixel, pimskeks, qwertyoruiop, sbingner, siguza
#======== Thanks to =======
# haifisch, jndok, jonseals, xerub, lilstevie, psychotea, sferrini
# Cellebrite (ih8sn0w, cjori, ronyrus et al.)
#==========================
- [04/09/25 10:05:10] <Info>: Waiting for DFU devices
- [04/09/25 10:05:32] <Verbose>: DFU mode device found
- [04/09/25 10:05:32] <Info>: Exploiting
- [04/09/25 10:05:32] <Verbose>: Attempting to perform checkm8 on 8003 1...
- [04/09/25 10:05:32] <Info>: Checking if device is ready
- [04/09/25 10:05:32] <Verbose>: == Checkm8 Preparation stage ==
- [04/09/25 10:05:32] <Verbose>: DFU device disconnected
- [04/09/25 10:05:32] <Verbose>: DFU mode device found
- [04/09/25 10:05:32] <Info>: Setting up the exploit (this is the heap spray)
- [04/09/25 10:05:32] <Verbose>: == Checkm8 Setup stage ==
- [04/09/25 10:05:32] <Info>: Right before trigger (this is the real bug setup)
- [04/09/25 10:05:32] <Verbose>: Entered initial checkm8 state after 3 steps, issuing DFU abort..
- [04/09/25 10:05:32] <Verbose>: DFU device disconnected
- [04/09/25 10:05:32] <Verbose>: DFU mode device found
- [04/09/25 10:05:33] <Verbose>: == Checkm8 Trigger stage ==
- [04/09/25 10:05:33] <Verbose>: Checkmate!
- [04/09/25 10:05:33] <Verbose>: DFU device disconnected
- [04/09/25 10:05:33] <Verbose>: DFU mode device found
- [04/09/25 10:05:33] <Verbose>: == Checkm8 Trying to run payload... ==
- [04/09/25 10:05:33] <Verbose>: If everything went correctly, you should now have code execution.
- [04/09/25 10:05:33] <Verbose>: DFU device disconnected
- [04/09/25 10:05:35] <Info>: Entered download mode
- [04/09/25 10:05:35] <Verbose>: Download mode device found
- [04/09/25 10:05:35] <Info>: Booting...
- [04/09/25 10:05:35] <Verbose>: Setting bootargs to: rootdev=md0
- [04/09/25 10:05:37] <Verbose>: Download mode device disconnected
- [04/09/25 10:05:57] <Info>: Uploading bootstrap...
- [04/09/25 10:05:57] <Verbose>: Uploading bootstrap... 6
- [04/09/25 10:05:57] <Info>: All Done
- [04/09/25 10:05:57] <Verbose>: Bootstrap upload done
附录:checkra1n for mac下载
如果出现误删Cydia(apt remove cydia)需要在手机上的checkra1n软件中restore iphone