Meridian
A Jailbreak for iOS 10.x, supporting all 64-bit devices.
Created by the community, pieced together by PsychoTea.
Supported Devices
Meridian supports all 64-bit devices, running any iOS version between 10.0 and 10.3.3, including:
- iPhone 7 & 7+
- iPhone 6S & 6S+
- iPhone 6 & 6+
- iPhone SE
- iPhone 5S
- iPad Air 1 and 2
- iPad (2017)
- iPad Mini 2, 3, and 4
- iPad Pro 1 and 2 (12.9" and 10.5")
- iPod Touch 6th Gen
If offsets are missing for your device (eg you are running a beta build), feel free to find them and DM them to me on Twitter so I can add them in.
Installation Instructions
1. Download the IPA using the Download button above.
2. Install the IPA to your device using Cydia Impactor.
3. Trust the certificate in Settings -> General -> Profiles & Device Management
4. Open the app, and click the 'go' button.
5. Wait.
6. ???
7. Profit.
FAQ
What's your Twitter?
@iBSparkes. Here.Is my device supported?
Read the 'Supported Devices' section above.Things aren't working!
Read this FAQ thoroughly and make sure you can't answer the question yourself. Then take to the forums, Twitter, or the r/Jailbreak Discord to see if someone else can answer your question. If not, feel free to Tweet me, but bear in mind I won't respond if the question has been asked a thousand times before.Is this KPPless?
Yup.Can I haz some tweaks yet?
You'll have them when I decide you will.Will this be more stable than yalu/extra_recipe/g0blin?
Most likely. Said jailbreaks rely on a KPP bypass which inherently provides instability in the system, often leading to random crashes and kernel panics. Meridian is kppless, which means it won't suffer from this. That's not to say it will never crash - there may be issues, but on the whole, it should be a little more stable.Why does Subsrate need updating?
KPPless is a new style of jailbreaking which avoids writing to certain protected areas of the kernel. Substrate currently 'assumes' that it already has full access to those areas (which in this case, it doesn't), which causes issues when combined with kppless. Hence, Substrate requires an update before it will work properly.How do I use SSH?
Run the JB, and when it has worked successfully, open your SSH client and connect to your device on port 2222.Cydia is on my homescreen but won't open, what do I do?
Run through the Jailbreak process, and click the 'Done' button. Then click 'extract dpkg'. Cydia should then be happy to open.My things aren't working, is it because I ran x other Jailbreak tool?
Please let me know if you are having issues after using g0blin/yalu/extra_recipe. If you're having issues with Cydia/jailbreak apps, use the Reinstall Cydia and try reinstalling said jailbreak apps.I'm trying to run my own binary, and I'm getting a killed 9 error
Firstly, make sure your binary has been fakesigned with jtool. You'll need to sign with SHA1 for pre-10.3, but on 10.3 and newer SHA256 is fine too. Also check your entitlements. You can use these entitlements if you don't know what to use. If you monitor syslog you may see an 'i_can_has_debugger' message, in that case add the 'platform-binary' entitlement to your bin and you should be OK. It's worth noting that if you ran your binary before fakesigning it you may need to reboot and re-jailbreak first.Changelog
Public Beta 6 [2018-1-23]
Fixed the root r/w patch for <10.3 - Meridian now works on all 10.x 64-bit devices! Thanks @stek29!
Updated dropbear to use /meridian/bins/sh - fixes issues with other JB's (Saigon, Yalu)
Tidied up the installation/running process
Fixed the lack of constraints on DRM ViewController
Public Beta 5 [2018-1-16]
Fixed the 'Delete Cydia' option not working
Added an 'Uninstall Meridian' option under the advanced options
Moved the amfi patch back over to a separate bin - it will now re-patch amfid if it's ever killed
Added a couple sets of offsets for some random beta versions
Added containermanagerd patch
Fuck signing services.
Public Beta 4 [2018-1-7]
Fixed Cydia not showing up for some users
Added a 'Delete Cydia' option under the advanced options menu
Public Beta 3 [2018-1-6]
Fixed the r/w remount check
Fixed the 'done' button popup on iPads
Public Beta 2 [2018-1-5]
Added 'done' button menu options
Fixed Cydia crashing on launch (use 'Reinstall Cydia' on done screen)
Fixed error for r/w remount failure not showign
Fixed uicache entitlements
Added options to reinstall Cydia, install dpkg, and re-extract the bootstrap
Public Beta 1 [2018-1-4]
Initial release.
Credits
Meridian was pieced together by PsychoTea, using open-source resources available from the community. A huge thankyou to everyone who helped make this possible. Click each persons name to be taken to their Twitter. Make sure to give them a follow!
Ian Beer: the fundamental exploit
Siguza: packaging the exploit into a useable format
xerub: libjb, kppless, the r/w remount, patchfinder, and the trust-cache based amfi 'bypass'
stek29: endless help including with amfi and the r/w remount
theninjaprawn: full AMFI patch (based off Ian Beer's) & a wealth of assistance
ARX8x: finding and formatting all possible offsets needed
cheesecakeufo: help in getting Cydia running and with entitlements
FoxletFox: Meridian logo(s) & bits and pieces with the website
Sticktron: UI & original v0rtex-S fork this project was based on (click)
nullpixel: for answering some of my annoying questions :^)
arpolix: general help, moral support, exploit research, and testing
EthanRDoesMC: both the Meridian and original v0rtex-S logos, OlayTeam founder
CydiaBen:: for being an absolute lifesaver and compiling dropbear-ios for me
Comsecuris UG: for creating dropbear-ios
Big up the Discord gang: arpolix, bren, Lepidus, Cryptic, uroboro, sticktron, EthanRDoesMC, ARX8x, CydiaBen, FoxletFox, Samg_is_a_Ninja, M1sta
If you believe your work was used and you have not been correctly credited, please contact me and I will amend this page immediately. I present my sincerest apologies in advance.
etcetera, etcetera
My Twitter: click
My Keybase: click
r/Jailbreak: click
r/Jailbreak Discord: click
