Dopamine dopamine all versions download

2.4.5

• Compiler optimizations for libjailbreak have been withdrawn because the update broke arm64 support in version 15.x. Fixes regressions in version 2.4.4

2.4.4

• Improve the fix in version 2.4.3 so that it also works in processes that have tuning injection disabled
• Fix in-app restart button not working when jailbreak is hidden
• Improved error message when libgrabkernel2 doesn't work
• Add password verification when changing cell phone password (contributed by @khcrysalis)
• Add compiler optimizations to some jailbreak components
• Update ChOma and XPF

2.4.3

• Fix issue where calling dlopen in a fork subprocess would fail (on iOS 15) or cause the process to crash (on iOS 16) (fixed on iOS 16)perl(Runtime crash problem) [2.4 Returns]apt-file search

2.4.2

• Extended library validation bypass to make it work even when fcntl is called manually in dyld_shared_cache
• Removing stray macho magics from patched dylds solves the problem of third-party software (e.g., Frida) mistaking the wrong page for the beginning of a dyld, causing it to fail in unpredictable ways (there's still an issue with Frida that conflicts with the spinlock panic fix, but I don't think I can do anything on the Dopamines side to do anything to fix it, the issue is being tracked) (thanks to @tihmstar for helping with debugging)
• Update the bootloader tarball.

2.4.1

- Fixed support for iOS 16.0.x (fixed regression in version 2.4).

2.4 Updates

Important Tip:

- If you update to this version via OTA, the device will reboot and will need to be jailbroken again. This is unavoidable because Dopamine 2.3 and below uses a tethered mount that cannot be uninstalled without crashing the device.

Version 2.4 Updates:

- Added a solution for iOS 15 arm64e devices that completely prevents spinlock panic (deadlock problems), except for one special case (see below).

- The "Hide Jailbreak" feature now hides the jailbreak completely, making it virtually undetectable (see below).

- Applying a sandbox patch before linking solves a problem that occurs when some processes link directly to libraries in /var/jb.

- Improved and optimized library validation bypass functionality.

- Minor optimizations to forkfix.

- Fixed and re-enabled WebContent injection on iOS 16.

- Fixed a rare system deadlock issue that occurred during the "Initialize Jailbreak" process.

A note about "hidden jailbreaks":

- Once you hide the jailbreak after the last userspace reboot, the spinlock panic (deadlock issue) may reappear, especially on iOS 15 arm64e devices. The reason for this is that the solution to prevent panic relies on the dyld hook, which must be disabled when hiding the jailbreak, which can cause problems. There aren't many solutions to this problem at the moment.

- Some apps crash when hiding jailbreaks, especially those that have tweak injection disabled via Choicy. I've tried to work around this by changing the /usr/lib bindings mounts in favor of a namecache-based solution, but this caused strange crashes on iOS 16, so if a suitable solution can't be found, this is not fixable for now.

Potential problems regarding jailbreak detection:

- Since Dopamine 2.4 introduces the dyld hook and redirects dyld to a different folder via symbolic links, it may become slightly easier to detect even if an app has tweak injection disabled. There's not much of a workaround for this, but as the changelog says, the "hidden jailbreak" feature has been made more effective by these changes.

2.2.2

Fixes

• Discontinue all execve The call redirects to the posix_spawn, which solves the problem with certain sandbox profiles (such as the configd) related issues, these profiles prevent posix_spawn solventventventventventventventventventventventventventive execve. This fix also resolves issues with WPA2/3 enterprise networks not working (these issues started with version 2.2, but are not regression bugs; in earlier versions, theexec (The calls were not hooked properly, which is why the problems were not noticed before).

2.2.1

Updated: July 30, 2024

Rolled back the default jetsam multiplier to 3x because apparently some people don't read the changelog and that's why we can't have a better user experience (most people should still be using the 2x multiplier, but now it's up to them to figure it out ......)

2.2

Updated: July 29, 2024

• Remove DYLD_INTERPOSE: We switched to other hooking techniques, as DYLD_INTERPOSE seemed to lead to higher memory usage than expected.
• Configurable memory multiplier: The memory multiplier can now be configured within the Dopamine application. In previous versions, this multiplier defaulted to 3x and could not be changed. With the removal of DYLD_INTERPOSE, the default setting is now reduced to 2x.
• Full support for NSTask: NSTask is now supported everywhere by default, no longer only when tweaking dylib or calling dopamine_fix_NSTask on its own as before.
• Better hooking technology: We removed a lot of unnecessary code due to improved hooking techniques.
• fix::
  • Fixed kcall not working in libkrw and iDownload on iOS 15 arm64.
  • Fixed frida-ps -U crashing devices (we're not actually sure exactly which modification solved this problem, only that it existed in older versions and disappeared in 2.2).

6. Improvements to launchd crash reporter: Various improvements have been made to the launchd crash reporter.

7. Code cleanup: Optimization and organization of the code was carried out.

2.1.7

• Remove libkrw plugin dependency on libkrw0: This change is intended to address issues that may be encountered when libkrw0 is uninstalled and another jailbreak attempt is made, improving the independence and compatibility between software components.
• Enhanced detailed logging: Now, not only the regular log information is recorded, but also the standard error output (stderr) is included in the logging system, which helps developers and advanced users to diagnose and troubleshoot problems in a more comprehensive way, and improves the efficiency of troubleshooting.

2.1.6

1. Fixed an issue that prevented jailbreaking on arm64 devices with iOS versions 16.0 to 16.3.1 after turning off developer mode. This means that these devices can now be successfully jailbroken even without turning on developer mode.
2. Solved the problem that the weightBufs feature did not work properly under certain combinations of devices and system versions. This fix allows users who were previously experiencing problems due to incompatible devices or system versions to now use the feature properly.
3. Fixed a condition where the physrw function of libkrw did not work when kcall was not available. This means that even if kcall is not available in some special cases, the operation can be carried out without any problems.
4. Upgraded libkrw's packaging and error handling mechanisms. This makes libkrw more stable in use and makes it easier for the user to understand the cause of the error should a problem occur.
5. If a newer version of the bundle is already installed, the repeat installation will be skipped. This improvement avoids wasting resources and ensures that users always have the latest version and do not install old software.
6. When the device is not jailbroken and there are available updates, if the TrollStore URL scheme is enabled, the updates will be opened directly in the TrollStore. This makes it easier for users to get and install updates without having to manually look for them.

2.1.5

• Allows binary files to be passed through thejb.pmap_cs_custom_trustAuthorization to obtain a customized pmap_cs trust level, possible values include {"PMAP_CS_PROFILE_PREFLIGHT", "PMAP_CS_COMPILATION_SERVICE ", "PMAP_CS_OOP_JIT" (iOS 16 only), "PMAP_CS_LOCAL_SIGNING", "PMAP _CS_PROFILE_VALIDATED", "PMAP_CS_APP_STORE", "PMAP_CS_IN_LOADED_TRUST_CACHE ", "PMAP_CS_IN_STATIC_TRUST_CACHE"}. The lower trust level makes the process less restricted by pmap_cs, which actually solves the problem of EQE applications and their LUA recompilers not working (but only if the application has this authorization, so make sure to use the latest EQE build).
• fixedposix_spawnattr_setarchpref_npIssues not supported by code signature bypass

2.1.4

• Automatically repair permissions only in the relevant directories within /var/jb/var/mobile, not the entire /var/jb/var/mobile directory.
• If /var/jb/var or /var/jb/var/mobile is a symbolic link, the permission fix is skipped. Previously, there was a bootloop risk when either of them pointed to a real /var or /var/mobile

2.1.3

• Fix watchdogd timeout due to system deadlocks on some devices [2.0 release issue]
• Recursively fix /var/jb/var/mobile permissions on userspace reboot and re-jailbreak (fixing file sharing with jb apps still doesn't work for some people)
• Fix co-design bypass does not apply to binaries with armv6 slices (although there may not be a binary with such slices) [2.1 regression]
• Fix multicast_bytecopy doesn't work on iPad Mini 6

2.1.2

• Fix the issue that the app switcher doesn't show the preview images of jailbroken apps in some cases [version 2.1 issue]
• Sandbox:Allow writing to /var/jb/var/mobile system-wide

2.1.1

• Fix code signature bypass failure when executing on binaries/libraries with armv7s slices (fix Designer not working) [2.1 release issue]
• Fix the issue of not being able to share files to jailbroken apps in some cases [2.1 version issue]
• Fix string corruption in sandbox bypass, the fact that I didn't notice this before probably means it's not a serious problem (don't use strcat on uninitialized stack buffers!)

2.1

• Added support for A8(X) devices
• Fixed immediate crash when installing Dopamine app using TrollStore on A8 devices
• Added kcall implementation to arm64 iOS 15.x (this is required for A8 support)
• Use kcall to allocate page tables when available
• Improved the performance of certain parts of the jailbreak process by ~1000x (because the A8 would get stuck for minutes on those parts)
• Fixed support issues with some out-of-the-way device/version combinations (e.g., A9 15.0.1, early 15.0 beta, etc.)
• Add weightBufs and multicast_bytecopy as kernel utilization options
• Protects system files in the pre-boot partition to prevent users from deleting them and causing the device to fall into a recovery mode loop
• Added "Allow JIT in applications" toggle, enabled by default, will add CS_DEBUGGED to applications when enabled (note: this does not affect applications that have tuning injection disabled via Choicy)
• Fixed the existence of certain jailbreak files in /var/mobile/Library/Application Support/Containers/, /var/mobile/Library/SplashBoard/Snapshots/
• Fixed issue where jailbroken apps disappeared after the system (or TrollStore) reloaded the icon cache
• Re-add the "Change mobile password" option in Dopamine settings
• Redesigned jbctl trust cache management, new commands: jbctl trustcache info, jbctl trustcache clear, jbctl trustcache add
• Switching to libgrabkernel2 (@alfiecg24, @dhinakg) removes the requirement that Dopamine needs to be installed via TrollStore on the beta version
• Fixed issue with smith not working on iOS 15
• Sort the utilization by the recommended score and add "(Recommended)" to the best utilization.
• April 30, 2024 at 21:13 UTC : reuploaded the version to fix an issue with OTA updates on arm64 iOS 15.x. Users who have already updated don't need it, so I decided not to consider it a new update!

2.0.11

• as a matter of factFixed related file path permissions during jailbreak (this method existed before, but was never called), which should now actually automatically fix things like NewTerm / SSH not working!

2.0.10

• Fix for jailbreak not working when disabling developer mode (developer mode will now be automatically enabled on current boot in a non-persistent way)
• Fix NECP connection failing after a while on arm64 (Apple Watch, VPN...)
• fixesterminusdcrash on arm64, re-enable injection andnesessionmanager
• auto-repair/privatejailbreak (an iOS device etc)/private/prebootError privileges at the time of
• Fix for app icons disappearing or no longer opening on OTA updates (fix for future updates only, does not apply to version 2.0.10, also requires TrollStore 2.0.13)

2.0.9

• Fixed a super bad security issue that allowed app store apps to get full system functionality (root + phys r/w) that would otherwise only be accessible by root processes, as a result of Dopamine 2.0.0 - 2.0. It has been removed and is no longer recommended for anyone to use
• Fixed arm64-related fixes for 2.0.7 and 2.0.8 that only worked when ellekit was installed and tuning injection was enabled
• Disabled injection of terminusd and nesessionmanager on arm64 to try to resolve the crash loop and the VPN application still not working for some users
• Immediately allow invalid pages to pass on all processes that are spawnedPOSIX_SPAWN_START_SUSPENDEDThis fixes an issue where several Frida features were not working correctly.
• Actually fixes support for early iOS 15.0 betas

2.0.8

• Fix VPN not working on arm64
• Fix iCloud settings partially grayed out on arm64
• Fix apps not showing up in settings on arm64
• Fix support for iOS 15.0b1 - 15.0b3

Due to serious security issues fixed in 2.0.9, this version should no longer be used for

2.0.7

• Fixed several issues on arm64 (battery section not loading, camera app not working, ...)
• Improve hidden jailbreaks to remove jailbroken apps from the icon cache when hiding jailbreaks
• Fix idownloadd starting during userspace reboot even if iDownload is disabled in settings
• Fix jailbreak not working when /var/jb is an actual directory instead of a symbolic link, and improve error handling related to it

Due to a serious security issue fixed in 2.0.9, this version should no longer be used for

2.0.6

• More kfd tweaks, should be more reliable now
• Fix random panic due to launchd crash when trusting certain files
• Fix boomerang zombie process created on userspace reboot
• Resolved an inventory bug that caused the Nano startup daemon to fail to register after a userspace reboot, causing certain Apple Watch functions to be interrupted
• Various UI improvements
• Fix competing conditions that cause apps to crash during jailbreaks
• Fix support for iOS 16.4b1 - 16.4b3
• If the creation of /var/jb fails, it aborts correctly with an error
• Prioritize physpuppet over landa on physpuppet-enabled devices
• Fix smith and physpuppet being selectable on iOS 15.x, even on versions they don't support

2.0.5

• Improved kfd reliability through memory footprint, also fixed support for 16GB RAM devices, contributor@dhinakg
• Fix /var/jb/var/mobile getting wrong file permissions on new bootloader (retroactively fixed in next jailbreak)
• Improvements to block injection of problematic processes
• blocking injection.dataaccessdBecause it seems to be a crash loop for some users
• Fix detailed log not showing in error log when not enabled
• Actually print the error that caused the failure in the error log ......
• Fix app crash when sharing logs on iPad
• Fix random app crashes when jailbreaking

Due to a serious security issue fixed in 2.0.9, this version should no longer be used for

2.0.4

• Actually fixes the problem where libkrw doesn't work

Due to a serious security issue fixed in 2.0.9, this version should no longer be used for

2.0.3

• Fix for localization fallback not working correctly (placeholders are shown instead of English when no localization is available for the selected language)
• Do not try jbupdate if your phone is not jailbroken.
• Fixed issue where PAC primitives were lost during jbupdate, causing the launch of sideloaded Dopamine applications to trigger a kernel panic on <15.2

Due to a serious security issue fixed in 2.0.9, this version should no longer be used for

2.0.2

• Fix new bootloader being created every time you jailbreak (super stupid 2.0.1 regression...)

Due to a serious security issue fixed in 2.0.9, this releaseShould not be used again

2.0.1

• Fix XPF not running on 15.0.x arm64e
• Fix app crashes during jailbreak
• Fixed an app crash that occurred when launching apps in a non-dopamine jailbreak (this is still not really supported)

Due to a buggy bootloader error fixed in 2.0.2, this version of theShould not be used again

2.0.0

• Add support for arm64e iOS 15.5 - 16.5.1
• Add support for arm64 15.0 - 16.6.1 (no A8 support for now)
• Support for installing via sideload (currently only available for non-beta iOS versions using libgrabkernel, and only supports some features when installed via TrollStore)
• Rewriting Jailbreak Apps in Objective C with Flexibility in Mind
• Add exploit selector (currently kfd only, more exploits for older versions will be added later)
• Add a theme to the application (in the application + icon)
• Add support for using NSTask via a tweak, which was previously unsupported, or call it from applications and other processes, but you have todopamine_fix_NSTask()Call yourself beforehand.
• Remove libfilecom and switch to XPC for communication instead
• Deprecating jailbreakd in favor of launchd hooks
• All jailbreak-related information is now stored in launchd instead of boot_info.plist, and can be retrieved via XPC
• Redo the kcall switch to stateless.
• Redesigning the trust cache to be stateless
• Replace kernel patchfinder with XPF
• Fixing various issues with the trust cache
• Includes the libroot provider library
• Getting libkrw to actually work (yes, it was broken throughout 1.x and no one noticed)

Due to a serious security issue fixed in 2.0.9, this version should no longer be used for

• Add support for arm64e iOS 15.5 - 16.5.1
• Add support for arm64 15.0 - 16.6.1 (no A8 support for now)
• Fix VPN not working on arm64
• Fix iCloud settings partially grayed out on arm64
• Fix apps not showing up in settings on arm64
• Fix support for iOS 15.0b1 - 15.0b3
• Fixed arm64 battery section not loading
• Fixed several issues such as the arm64 camera app not working
• Fix support for iOS 16.4b1 - 16.4b3
• Fixed support for 16GB RAM devices

1.1.9

1. Fixed an issue where jailbreakd previously crashed when parsing malformed MachO files containing empty dependency paths. This issue also made it impossible to re-jailbreak if such a file existed in the /var/jb directory.
2. LC_LAZY_LOAD_DYLIB and LC_LOAD_UPWARD_DYLIB are now also resolved when scanning for dependencies to add to TrustCache.
3. Improved the reimplementation of the execvp and execvP functions to be closer to the behavior of the original implementation.
4. KFDopamine-BETA.tipa: This is an experimental beta version of Dopamine that uses kfd instead of oobPCI. Currently, this is a secondary release, as PAC (Command Verification Code) bypasses seem to be more unstable, and progress updates and detailed logs are not available during PAC and PPL (Processor Protection) bypasses. This release adds support for iOS 15.5b1 - 15.5b3 and also eliminates the need for a Wi-Fi fix on 15.0 - 15.1.1. The upcoming version of Dopamine will add a vulnerability selector, and this release is just a transitional solution as that version is still some time away.

Please note: this version is not as stable as the final version of the vulnerability selector version and is only a transitional version.

1.1.8

• Fix for trust cache macho with both old and new ABI arm64e slices
• Fix multiple bugs in system wide exec(cve/cle/lp/v/vp/vP) hooks that could result in incorrectly formatted parameters and environment variables
• Fix path finding error in execvP hooks
• Add missing execl hooks

All the changes in this update were contributed by @RootsHide

1.1.7

• Add a workaround to make spinlock timeout panics less likely, thanks to @RootHide

1.1.6

• Update Sileo and Zebra bundles to the latest versions

1.1.5

• Secondary PPLRW improvements (better address translation, preventing process crashes when passing invalid physical addresses)
• Cleared some residual debug logs left in the launchdhook during the 1.1.3 development phase.

1.1.4

• Fix instability when jailbreaking on A14 chip (degradation issue in version 1.1.3).
• Make forkfix load only when absolutely necessary, rather than within every process that can fork (this should reduce the frequency of spinlock panics since the old version 1.1, but plugins with C function hooks apparently still cause the problem. (The effect of this change has not been confirmed, but at least it won't make things worse).

1.1.3

Note: When you update to this version via OTA (over-the-air), your device will reboot instead of doing a userspace reboot like other versions. This is normal and you will need to manually re-jailbreak after the update.

• A new PPLRW methodology is used which maps the entire physical address space of the kernel to user space processes. This solves all the problems of PPLRW, such as multithreading support and TLB issues. Unfortunately, however, it also results in previous versions of jbupdate (jailbreak update) not being able to be used simply when doing a user-space-only reboot, as the original language from earlier versions cannot be easily transferred to this version.
• Re-enabled the launchd crash reporter, but it now runs in a way that the app can't detect.
• Fixed an issue where the iDownload option did not work. The problem may have existed since version 1.1 because of a silly issue related to the signature of idownloadd binaries.

1.1.2

• Disable the launchd crash reporter again, as it may have triggered a lot of jailbreak detection
• Jailbreak button no longer available in case of unsupported device/version combinations

1.1.1

• Added a crash reporter to the startup daemon crash report, now when the startup daemon crashes you will receive a detailed separate crash log, along with an (extremely obscure) "initproc exited" panic log.
• Fixed multiple incorrect offsets related to ptrace hooks.
• Fixed an error in the macho parser when parsing dependencies for certain libraries.
• Improved reliability of Wi-Fi re-enablement.
• Update opainject to version 1.0.6.

1.1.0

• Improved PPLRW performance by a factor of about 1000.
• Fix all remaining forkfix issues, now fully reliable and faster to fork, thanks to the PPLRW improvements mentioned above.
• Fix some competing conditions between kcall and PPLRW.
• Add watchdogd hooks to intercept userspace panics due to watchdog timeouts, disable tweak injection and trigger userspace restarts
• Add ptrace hook to unconditionally allow debugging processes (via debugserver or other tools) even if tweak injection is disabled.
• Refactoring iDownload and putting it into its own daemon now works properly on userspace reboots, the daemon can be enabled/disabled in real time in the Dopamine app, and a fix for the deep hibernation panic when enabling iDownload.
• Fix the "opainject not found" error that may occur when re-jailbreaking.
• Refactor systemhook to improve maintainability.
• Deprecate /usr/lib/sandbox.plist in favor of storing sandbox extensions in the spawned process environment for improved security.
• Add the JB_ROOT_PATH environment variable to inject into all tweak-enabled processes, and in the future possibly make /var/jb symbolic links optional to better protect against jailbreak-free detection. This environment variable will be used to know the root directory location of the rootless jailbreak if that goal is actually achieved.
• Fix jbctl not setting debug flags correctly (thanks @XsF1re).
• Injecting tweaks into the Dopamine app itself is prohibited, as some jailbreak detection tweaks prevent it from checking if the device is jailbroken.
• Discontinue the use of the installed ellekit dylib as a launchd hook to prevent installation of corrupt ellekit builds from causing full jailbreak interruptions.
• Fix libKRW kalloc/kfree not working properly due to signature mismatch.
• Enable compiler optimization for multiple base binaries.
• Add mechanism to not automatically remove xina symlinks (e.g. /var/LIY) on re-jailbreak if the file /var/.keep_symlinks exists.
• Improved code for disabling Wi-Fi to better preserve Wi-Fi state before jailbreak attempts (thanks to @singlekeycap for the suggestion).
• Updated several localizations.

1.0.5

• Fixed a problem with forkfix where it would interrupt the reinstallation of dpkg
• /private/preboot/Automatically fixes permission errors when jailbreaking (wrong permissions can cause SSH / NewTerm to not work)

1.0.4

• Fix forkfix leaking file descriptors under certain conditions.
• Adjust forkfix to be more similar to regular fork.
• Solved the problem of dpkg-deb randomly failing when using forkfix, which didn't make any sense (using the same fork implementation as the system triggers the problem, but not on the system itself, there's a real bit of a mystery here) so I solved it by preventing tweak from being injected into dpkg-deb.
• Add IPC hook to support system wide access to Mach services prefixed with cy: or lh:.
• Updated fallback ellekit version to 0.6.3.
• Improve the UI issue of shrinking detailed log text after removing bootstrap.
• Improved UI issue with cropped and stretched Sileo and Zebra icons
• Improved UI issue where detailed logs would not scroll down automatically

1.0.3

• Optimize jailbreakd's memory efficiency and fix some small memory leaks
• Remove the hacky way of disabling jailbreakd Jetsam, which may solve the spin lockup problem (edit: may not actually work), but this approach is risky and therefore not recommended!
• Updated Dopamine option now works on non-jailbroken devices
• (For versions 15.0-15.3.1) Increase the delay time after disabling wifi, as some users have reported that this improves the success rate.

1.0.2

• Fix system instability caused by forkfix regression (fix system freeze when connecting to WPA Enterprise endpoints)
• Rename the download option to clarify that it is a developer shell

1.0.1

• Fixed user space reboot stuck when disabling adjustments in Dopamine App settings
• Trying to fix an application crash

1.0

• initial version