mkdir build
cd build
cmake ..
make

With this cable, connect:

• [GPIO1] L1n (Purple)
• [GPIO2] L1p (Orange)
• [GND] GND (Black)
• [GPIO3] ID1 (Blue)
• [GPIO4] ID0 (Yellow)
• [5V] 5V (Red)

Note: The colors might be different for your cable. I recommend checking the pinout using a voltmeter.

Another cable was observed to have the following pinout:

• [GPIO1] L1n (Green)
• [GPIO2] L1p (White)
• [GND] GND (Black)
• [GPIO3] ID1 (Orange)
• [GPIO4] ID0 (Red)
• [5V] 5V (Yellow)

Tamarin Cable provides three USB endpoints, of which two are serial ports.

Serial port 1 is the control serial port, use it to configure DCSD/JTAG mode.

Serial port 2 is the DCSD port, when Tamarin Cable is in DCSD mode the serial output will be provided here.

To use Tamarin as a JTAG adapter you need to use our OpenOCD fork that includes support for the Tamarin probe.

To enable JTAG on production iPhones they need to be demoted. For checkm8 vulnerable iPhones this can be done using ipwndfu.

Once the phone is successfully demoted the bonobo configs can be used to connect to the iPhone like so:

openocd -f interface/tamarin.cfg -f t8015.cfg