A relatively well-known developer and security researcher – Niklas Baumstark – has taken to Twitter to confirm that a bug released into the community is exploitable via Safari, information which could theoretically lead to the creation of a new JailbreakMe jailbreak experience for iOS 11.3.1 devices.
Niklas’ tweet confirms that he has “just exploited @i41nbeer’s bug via Safari RCE,” which suggests that someone with the relevant interest and skill set could take this knowledge and process further to build a web-based solution and release it into the community as JailbreakMe 5.0.
Further tweets from the security researcher then go on to mention the bug by its reference – CVE-2018-4233 – which is extremely interesting as Apple references that number as a WebKit bug raised by Samuel Groß of Trend Micro’s Zero Day Initiative, and not Ian Beer of Project Zero.
As clarified to me by Niklas himself, it seems that the process involves the exploiting of two bugs back-to-back, one by the aforementioned Samuel Groß and then the Ian Beer bug.
Regardless, it seems that there is a bug which is attributable to iOS 11.3.1 which, due to its nature, can be exploited via Safari, meaning that it could be possible for a very easy-to-use jailbreak to be released which doesn’t actually require an individual to sideload an IPA to their device or re-sign the app every seven days. Out of all of the jailbreaks ever released into the community, the original Safari-based JailbreakMe solution has most definitely been the most popular and easiest to use. In fact, it’s simplicity made it probably one of the most beautiful pieces of work and software architecture ever released into the jailbreak community.
Currently, other than a tweet and a few follow-up tweets, little is known about the intentions of Niklas and whether or not it will actually go any further. He is a well-known individual in security research circles having been present and highly successful at multiple Pwn2Own competitions. However, to the best of our knowledge, he hasn’t been credited or actively involved in any recent jailbreak activity. Maybe this is the time that someone else puts their head above the parapet and pushes something miraculous out into the jailbreak community.
Stay tuned for more on this one, as or if it develops.
You may also like to check out:
- Live Stream FIFA World Cup 2018 On iPhone, iPad, Apple TV, Android, Web, Here’s How
- How To Buy iPhone X On iOS 11.3.1 For Jailbreak Purposes
- 100+ iOS 12 Hidden Features For iPhone And iPad [Running List]
- Download iOS 12 Beta OTA Configuration Profile File Without Developer Account
- Download iOS 12 Beta 1 IPSW Links & Install On iPhone X, 8, 7, Plus, 6s, 6, SE, 5s, iPad, iPod [Tutorial]
- iOS 12 Beta 1 Download IPSW Links, OTA Update For iPhone And iPad
- How To Downgrade iOS 12 Beta To iOS 11.4 [Tutorial]
You can follow us on Twitter, add us to your circle on Google+ or like our Facebook page to keep yourself updated on all the latest from Microsoft, Google, Apple and the Web.