jailbreak detection bypass with kernel patches

This project requires KPP to be disabled in order to patch the kernel. This means that kernel integrity is not guaranteed and should only be done on development devices.
In the near future, this project will be a module of checkra1n. It will enable kernel integrity protection and will work with A7-A11 devices.

For this project, Apache License 2.0 is used for the kernel patcher. But, The syscall payload used for it is based on GPLv3, so if you want to redistribute it, you need to clarify the source code of the syscall payload.

module/KPPmodule A checkra1n module that disables KPP for 16k devices based on xnuspy by Justin Sherman
src/ A kernel patcher for KPP disabled devices.

Currently it only supports iOS 14 A9 devices (with KPP disabled).

• Support device Lists

A9(X): iOS 14.0 - 14.4 (RELEASE version only)

• clone

git clone https://github.com/dora2-iOS/CPBypass2
cd CPBypass2

• build

cd src/
make

• Boot with checkra1n

/Applications/checkra1n.app/Contents/MacOS/checkra1n -c -p

• Load KPPmodule

cd module/
python module_load.py KPPmodule
python issue_cmd.py disable_kpp

• Install CPBypass2 Tweak on iOS (Mobile Terminal or SSH)

dpkg -i jp.dora2ios.cpbypass64_1.0.1_iphoneos-arm.deb

• Apply kernel patch on iOS (Mobile Terminal or SSH)

CPBypass2

Justin Sherman for xnuspy
bazad for KTRW
0x7ff for maphys