It finally happened, iCloud Bypass Exploit/Jailbreak for iPhone 5S-X on iOS 12.3-13.2.3

[Mnky313]

Obviously this is for if you or someone you know forgot their iCloud login info and should NOT be used on devices obtained illegally and is offered with absolutely 0 warranty, if you brick your iDevice it isn't my fault or the developer of Checkra1n's fault.
With that said if you follow this guide you should be fine and most likely if there is a problem you can restore via iTunes.
Once this is completed it is semi-permanent, the jailreak is untethered and so is the iCloud bypass. BUT your device will be locked and you will lose the jailbreak if you factory reset or update. 
There are still some limitations, mainly Cellular data is hit or miss, there are methods to get it working but they are spotty and sometimes require another jailbroken phone of the same model that is activated legitmately to complete...

Things you will need:
A supported iDevice (any iPhone from the 5S to the X should work and iPods/iPads from around the same time should also work but I haven't tested or seen any proof of this working on anything other than iPhones), the device should be running the latest iOS for the best experience as Checkra1n supports all current iOS versions (iOS 13.2.3 as of the time of writing this) but this works on any iOS version 12.3 or later.
UPDATE: Checkra1n has said the iCloud Bypass DOES NOT WORK in iOS 13.3, they are working on a fix. The Jailbreak DOES however still work.
Access to a macOS environment (checkra1n's tool is currently only available on macOS therefore you need access to a mac or a virtual machine of macOS which you can connect a USB device (your phone) to)
A cable to connect your phone to your pc/mac

Steps:
1. download the checkra1n tool from here
2. Connect your iDevice to your macOS environment.

3. Open the checkra1n installer and install the app.

4. Run Checkra1n app
5. Click Start on the Checkra1n window. (it should reboot your phone to recovery mode, if iTunes prompts you to restore the device CLOSE IT)

6. Press start and follow the instructions in checkra1n to enter DFU mode.
7. you should see a verbose boot with checkra1n logo on top of the Apple logo once it is successful. (it might not work the first time, this is normal. Just repeat steps 5 and 6)

8. Once your device is booted back up, open Terminal on your macOS environment.

bash <(curl -s https://gitlab.com/snippets/1912596/raw)

9. Enter the above command into the terminal and press enter, after a few seconds you should see a screen that says 'Please jailbreak using checkra1n, connect your device to your Mac, and press enter/return...'

10. Hit enter again

10.5 (Skip this if you don't see an SSH error) If you see an error that looks like:

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!    @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Don't worry, all you should need to do is open Finder and press UP + COMMAND + G (or select Go > Go to Folder...) and enter '~./ssh' (no quotes). Finder should open a folder with a single file called 'known_hosts', delete it and close all terminal instances and repeat steps 8-10)
11. If  your device resprings and lands at the lock screen, that's it! checkm8 Apple (wait, wrong exploit...)

 

Steps to use your own Apple ID:

1. Open the Checkra1n Loader App on your iDevice
2. Install Cydia from the loader
3. Open Cydia and install 'Filza File Manager' tweak
4. Open Filza and use the back arrow to go all the way to the root of the phone ( / )
5. From there navigate to /var/root/Library/Lockdown

6. There should be one file called 'data_ark.plist', open it
7. tap the (i) icon in the top right

8. scroll down to the bottom and select 'add item'

9. make the name:

com.apple.mobile.lockdown_cache-ActivationState

10. leave type as string and set the value to:

FactoryActivated

11. Once that is done hit the back arrow twice and hit save, then done.

12. Reboot your iDevice
That's it, now you can sign in to your Apple ID and use it normally (barring cellular data probably)

 

Q & A:

Q: What if my device isn't updated? Can I still use this?
A: If your device is running iOS 12.3 or later it should still work, BUT it is recommended to update to the latest iOS. This can be done by downloading the latest firmware for your device from here and installing it via iTunes (if you don't know how to manually install ipsw files via iTunes you can follow this guide (this also allows you to update your device even if it running an iOS before 12.3!)

 

Q: I can't seem to enter DFU mode, tried several times, help!?
A: If you are using a Lightning to USB C cable, don't. Try using a Lightning to USB A cable instead. (Apparently some cables including ones included with devices are physically unable to be used to enter DFU mode). IF that doesn't work, make sure iTunes is installed (This is because of the iPhone USB and recovery driver afaik)

 

Q: I have an iOS device running 13.3, can I still use this to bypass Activation Lock!?
A: Maybe! There are supposedly way to downgrade devices using SHSH(2) Blobs, I personally don't have an experience with this so I don't know how reliable it is. BUT it is still worth a try.

Q: I have an iOS device running 13.3, can I still use this to Jailbreak my device if there is NOT an Activation Lock!?

A: Yes, Checkra1n Jailbreak still works for 13.3, but the iCloud Bypass does not currently.
 

You ask me!

[BuckGup]

Apple picking just became a thing again

[wasab]

If your phone is stolen, you can still tell your carrier to blacklist the imei or if you really wanna get your phone back, get the carriers to report the geographic location of the phone with that IMEI numbers when it connects to a cell tower. 

 

I seriously do not understand why people like to steal phones in a day and age when location tracking and privacy is such a concern. The government and law enforcements can track you phone thieves down. 

[Mnky313]

18 hours ago, wasab said:

If your phone is stolen, you can still tell your carrier to blacklist the imei or if you really wanna get your phone back, get the carriers to report the geographic location of the phone with that IMEI numbers when it connects to a cell tower. 

 

I seriously do not understand why people like to steal phones in a day and age when location tracking and privacy is such a concern. The government and law enforcements can track you phone thieves down. 

Yes, this is more than likely the reason for the spotty support for cell service. Most likely the devices people are testing are blacklisted and some aren't.

I don't get why people steal phones either, but people are dumb (tell that to the guy that has gone through our car twice now and realized we don't keep anything in it (they didn't even look in the change thing, just dug through the center console and didn't take anything))

[tavifak847]

will we be able to see the files from the jailbreak iphone with a bypass lock

[Mnky313]

On 1/30/2021 at 3:07 PM, tavifak847 said:

will we be able to see the files from the jailbreak iphone with a bypass lock

probably not, I believe this only works once to bypass the initial setup (meaning the device was reset). I don't think it bypasses the lockscreen, though I haven't looked into this in over a year so maybe something has changed.

[cyberbishop]

Hey, its 2022 I know, please I got an iPhone 5 from my cousin I was able to bypass it with activation unlocker, so I have access to the home screen, when I follow this tutorial ssh shows ssh: connect to host localhost port 2222: Connection refused and the script stops there, I am trying to get cellular access etc, thank you.

[Mnky313]

5 minutes ago, cyberbishop said:

Hey, its 2022 I know, please I got an iPhone 5 from my cousin I was able to bypass it with activation unlocker, so I have access to the home screen, when I follow this tutorial ssh shows ssh: connect to host localhost port 2222: Connection refused and the script stops there, I am trying to get cellular access etc, thank you.

I'd look for an updated tutorial. I'm sure something has changed since I originally posted this.

[cyberbishop]

15 minutes ago, Mnky313 said:

I'd look for an updated tutorial. I'm sure something has changed since I originally posted this.

Please can you point me to any tutorial I have been searching before I found this one

[Mnky313]

1 hour ago, cyberbishop said:

iPhone 5

 

53 minutes ago, cyberbishop said:

Please can you point me to any tutorial I have been searching before I found this one

No idea, the method I talked about here only works on 64 bit devices (the 5 is still 32 bit).

[cyberbishop]

58 minutes ago, Mnky313 said:

 

No idea, the method I talked about here only works on 64 bit devices (the 5 is still 32 bit).

5s

[cyberbishop]

iphone 5s is 64bit

 

[Mnky313]

9 minutes ago, cyberbishop said:

iphone 5s is 64bit

 

ah, yes. I thought you were using an iPhone 5.

Checkra1n's site says the SSH server is on port 44 so try that instead of port 2222.

after running checkra1n you should just have to run these commands in separate terminal windows.
 

iproxy 2222 44 2> /dev/null

sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 44 "$1" > /dev/null
mount -o rw,union,update / && mv /Applications/Setup.app /Applications/Setup.app.bypass && killall Setup && uicache --all && killall backboardd

 

[cyberbishop]

1 minute ago, Mnky313 said:

ah, yes. I thought you were using an iPhone 5.

Checkra1n's site says the SSH server is on port 44 so try that instead of port 2222.

after running checkra1n you should just have to run these commands in separate terminal windows.
 

iproxy 2222 44 2> /dev/null

sshpass -p alpine ssh -o StrictHostKeyChecking=no root@localhost -p 44 "$1" > /dev/null
mount -o rw,union,update / && mv /Applications/Setup.app /Applications/Setup.app.bypass && killall Setup && uicache --all && killall backboardd

 

alright, I have bypassed activation lock screen, I am asking about cellular and the rest

[Mnky313]

6 minutes ago, cyberbishop said:

alright, I have bypassed activation lock screen, I am asking about cellular and the rest

I don't think its possible to make calls or basically anything relating to cellular networks. It also might not be possible to use your own Apple ID anymore according to frpfile.

[cyberbishop]

2 hours ago, Mnky313 said:

I don't think its possible to make calls or basically anything relating to cellular networks. It also might not be possible to use your own Apple ID anymore according to frpfile.

alright thanks