Achilles

Achilles is a checkm8 utility for macOS and Linux that offers a selection of tools for vulnerable devices.

If you want to read more about the checkm8 exploit, check out my blog post.

Linux support is currently experimental - failing to send the overwrite (and thus exploit failure) is a common issue that is yet to be resolved.

Features

• Patch signature checks with gaster payloads
• Boot PongoOS on supported devices
• Jailbreak with supplied kernel patchfinder, ramdisk and overlay

Tested devices

• iPhone 7, A10
• iPhone X, A11
• iPad Pro 10.5", A10X

Usage

➜  ~ Achilles -h  
Options:
        -d - enable debug logging
        -v - enable verbose logging
        -q - enable quiet logging (removes all logging except for errors)
        -s - remove signature checks
        -p - boot to PongoOS and exit
        -j - jailbreak the device (requires -K)
        -V - enable verbose boot
        -S - enable serial output

        -u <UDID> - specify a device UDID
        -b <arguments> - additional boot arguments
        -k <Pongo.bin> - override PongoOS image
        -K <kpf> - override kernel patchfinder
        -R <ramdisk.dmg> - ramdisk to boot
        -O <overlay.dmg> - overlay to boot

        -h - print this help message
Examples:
        Achilles -p
        Achilles -j -K kpf -R ramdisk.dmg -O overlay.dmg
        Achilles -s

Building

Achilles requires the following dependencies:

• libimobiledevice
• libusb

To build, run make in the root directory. This will output the final product to build/Achilles.

To install to /usr/local/bin, run make install (you will be prompted for your password).

Credits

• checkra1n - YoloDFU payloads and PongoOS (license)
• 0x7ff - gaster (license)
• Mineek - openra1n (unlicensed)
• axi0mX - checkm8 exploit (license)
• palera1n - DFU helper, libimobiledevice code (license)