‘tfp0’ iOS 11.1.2 Exploit That Can Be Used to Develop Jailbreak Released

BY Gautam Prabhu

Published 12 Dec 2017

iOS 11 Jailbreak

As promised, Ian Beer, a security researcher at Google, has released the tfp0 exploit for iOS 11.1.2 – iOS 11. The good news is that Beer has confirmed that the tfp0 exploit works on all iOS 11 – iOS 11.1.2 compatible devices.

Though he has tested the exploit on iPhone 7, iPhone 6s and iPod touch 6G, he has confirmed that it should work on the latest iPhone models such as iPhone X, iPhone 8 and iPhone 8 Plus. He has also released a PoC local kernel debugger.

The tfp0 exploit isn’t a jailbreak, but it could be used to develop an iOS 11 – iOS 11.1.2 jailbreak. If you’re interested in a jailbreak then you should downgrade to iOS 11.1.2 before Apple stops signing iOS 11.1.2 firmware file. If you need help then you can check our step-by-step guide on how to downgrade to iOS 11.1.2.

It is also recommended to save iOS 11.1.2 SHSH blobs using the online TSS Saver tool. If you need help then you can check our step-by-step guide on how to save iOS 11.1.2 SHSH blobs.

The iOS 11.1.2 exploit released by Ian Beer should now allow hackers like the Pangu team to develop the elusive iOS 11 jailbreak. It remains to be seen if the jailbreak will be an untethered jailbreak but Jonathan Lovine points out that “there can be no untethering without blowing a major 0-day in code signing. This also likely requires mounting the root filesystem r/w , which requires patching.”

He also goes on to explain why it isn’t it a full jailbreak:

Because doing a full JB with Cydia and third party tweaks requires bypassing Apple’s formidable (but still imperfect) code signing. One of the trivial ways of doing so is patching kernel code (specifically AMFI hooks and/or that despicable amfid) , and that’s no longer trivially possible on iPhone 7 and later due to hardware protections (a.k.a AMCC or KTRR).

There has been a lot of talk about iOS jailbreak being dead. But based on the jailbreak news in the last one week, I would say that though Apple has made it more difficult, jailbreaking is certainly not dead. An iOS 11 jailbreak would be a perfect Christmas gift for jailbreakers.

Have you been waiting for the iOS 11 jailbreak? Let us know in the comments.