- As I mentioned in the previous lesson,
you can historically jailbreak iOS devices
by using one of the several tools that are available online
or in some cases, by even visiting a particular website.
Basically, the goal is actually you perform
a privilege escalation attack
to install custom themes,
install applications, or extensions to applications.
You can also configure the device to allow remote access
either via SSH
or via VNC.
You can also install other arbitrary software
or even compile software directly on the device.
In some cases,
threat actors and, you know, folks out there
also a use it to actually pirate applications like games
and actually play them for free
in their mobile devices.
And as a matter of fact,
that's how most of the iOS devices actually get infected
after they, you know, they go to stores, right?
Versus the actual Apple store,
to download, you know, pirated applications
and you know, those games out there.
Now, jailbreaking iOS devices have actually evolved
to be harder to do over the most recent years.
This was particularly harder
after Apple released iOS version 11.
On the other hand, folks out there have created tools
like LiberiOS that allows you to jailbreak
iPhone X and later models,
things like iPads and different gadgets
using iOS 11 or later.
Now, jailbreaking an iOS device is a lot easier
than you'd think.
But before I show you these tools,
I want to give you the disclaimer
that these procedures
may be illegal depending on where you live.
Now, at the time of recording,
the law was actually pretty ambiguous, right?
And definitely in different countries out there.
But something to pay attention to,
especially if you're in the United States,
is the Digital Millennium Copyright Act.
Now that I got that out of the way,
let me show you a few of the tools
that people use to jailbreak their devices.
This is the LiberiOS,
a tool that can be used to jail break the devices
running iOS 11 or later.
And also you have Cydia Impactor,
which is another tool
created by a security researcher named Jay Freeman,
otherwise known as Saurik.
And actually, he has done a ton of research
on iOS security and created different tools
that are used by many security researchers,
and in some cases, by pentesters out there.
In the next lesson,
we will look at several tools
for performing reverse engineering
and for dissembling iOS applications.