KFD Jailbreak / KFD Exploit

KFD Jailbreak is a newly released project. It is known as Kеrnеl Filе Dеscriptor for read and write kernel memory on iOS devices. It uses different vulnerabilities to get access to certain memory parts called PTEs that are hanging in the system. These are called PUAF primitives, which is short for “physical use-after-free.”

Originally KFD exploit is used for iOS 16 – iOS 16.5 and iOS 16.6 beta 1 running A12+ iOS device customization. Essentially, all the capabilities previously achievable through the MacDirtyCow exploit can also be done using the KFD exploit.

Other than that, KFD jailbreak app installer available for iOS 17 and higher users as partial jailbreak solution to KFD exploit.

What can KFD exploit do right now?

• Revamp the appearance of the Home Screen 
• Adjust concealed system preferences
• Eliminate the Dock background
• Substitute icons
• Transform the visual style of the Control Center 
• Enable Dynamic Island across all iOS 16 devices

What kind of jailbreak would KFD exploit lead to?

• It’s probable that it would result in a Semi-Untethered jailbreak.
•  Exploits based on puaf_physpuppet would need to be manually installed and would require reauthorization. 
• Exploits based on puaf_smith can be accessed through WebContent. If a complete chain of exploits is created, users wouldn’t have to sign or manually install the jailbreak, making it the more favorable choice.

KFD Jailbreak download

KFD Jailbreak IPA is not available to download yet. Currently the KFD Jailbreak project is ongoing. The Dopaminе Jailbrеak team contributed to this project. 

Also, exploit has been released as an open-source project under the permissive MIT license, accessible through a dedicated GitHub Repository.

However still you can customize the iOS devices using KFD exploit based customization methods without jailbreaking.

Compatibility

iOS devices : iPhone XR,iPhone XS, iPhone XS Max, iPhone 11, iPhone 11 Pro, iPhone 11 Pro Max, iPhone SE (2nd gen), iPhone 12, iPhone 12 mini, iPhone 12 Pro, iPhone 12 Pro Max, iPhone 13, iPhone 13 mini, iPhone 13 Pro,iPhone 13 Pro Max, iPhone SE (3rd gen), iPhone 14, iPhone 14 Plus, iPhone 14 Pro, iPhone 14 Pro Max

iOS versions :  iOS 16.6 Beta 1, iOS 16.5, iOS 16.4.1, iOS 16.4,iOS 16.3.1, iOS 16.3, iOS 16.2, iOS 16.1.2, iOS 16.1.1, iOS 16.1, iOS 16.0.3, iOS 16.0.2, iOS 16.0.1, iOS 16,

Note –  KFD exploit was fixed on iOS 16.5.1, So, iOS 16.5.1-iOS 17.2 does not work with KFD exploit. Refer iOS 16.5 / iOS 16.5.1 Jailbreak, iOS 16.6/iOS 16.6.1 Jailbreak, iOS 16.7-iOS 16.7.7 Jailbreak, iOS 17-iOS 17.0.3 Jailbreak, iOS 17.1-iOS 17.1.2 Jailbreak, iOS 17.2/iOS 17.2.1 Jailbreak, iOS 17.3//iOS 17.3.1 Jailbreak, iOS 17.4/iOS 17.4.1 Jailbreak and iOS 17.5 Jailbreak (Beta) pages for other solutions.

Developer’s Suggestion for other iOS users

• iOS 17+ any device users = Downgrade :  Signed 16.5.1 restore > iOS beta 16.6b1
• iOS 16.5.1 arm64e device users = Update to iOS beta ipsw 16.6b1
• iOS 15.5 – iOS 15.6.1 arm64e device users = Update : DelayOTA* > iOS 16.5
• iOS 16.5.1 arm64 device user = Update to iOS beta ipsw 16.6b1
• iOS 15.5 – iOS 15.6.1 arm64 device users = Update : DelayOTA* > iOS 16.5

*How many days are left to DelayOTA: iOS 16.5 (20F66) 9/19/2023, 1:00:00 AM

KFD Exploit based customization methods

1. Misaka Tweak Manager

Misaka version 2.0.2 updated added the KFD exploit support. Now Misaka is compatible with a wide range of devices, both jailbroken and not, including A12-A16 models (iPhone Xs to iPhone 14 Pro Max) running iOS 16.2 to iOS 16.5, as well as iOS 16.6b1. You can download and install additional features that utilize either the MacDirtyCow or kfd exploit to make changes to the system beyond its default settings using Misaka. Read more about Misaka Tweak Manager.

2. Cluckabunga

Cluckabunga is a different tool created to personalize iOS system settings without requiring a jailbreak. It achieves this by utilizing the recently discovered KFD exploit for iOS 16.2 to 16.5 running for A12 to A16 devices, Cluckabunga is developed by LeminLimez. It is also known as Chicken Butt. Cluckabunga was released as an open source project available through GitHub

3. KFDFontOverwrite

KFDFontOverwrite is an application that permits you to replace fonts on iOS. It accomplishes this by utilizing the kfd kernel read/write techniques and building upon xsf1re’s fork, which extends these methods even further. The WDBFontOverwrite application, originally designed for MacDirtyCow, has been adjusted to work with the updated kfd exploit. This version is functional on iOS versions up to iOS 16.5, including the 16.6 beta 1 release.

4. Picasso Beta

Introducing a Jailed toolbox application compatible with all arm64e iPhones running iOS 16 to iOS 16.5, including 16.6b1, utilization of the KFD exploit. This application comes with an array of features tailored to enhance your device’s experience. These features include enabling Dynamic Island functionality on any device, fine-tuning Springboard elements such as Dock color, Folder background color, Control Center background color, Notification banner background color, and Notification shadow color. Moreover, you can now enjoy a personalized touch with system-wide custom Fonts and even add a unique animation to the Face ID lock icon on your Lock Screen. The application extends its capabilities to the Settings app, offering customization options, and provides the flexibility to customize audio effects for charging, screenshot, lock, notifications, and more.

5. Posi0nKFD

Posi0nKFD grants you the ability to effortlessly personalize your iOS 16- iOS 16.5 and iOS 16.6, beta 1 running A12 to A16 deviceS. It provides a range of features including the ability to hide the Dock and Home Bar, enabling iPhone 14 Pro Resolution, and even facilitating the use of custom fonts. Moreover, you can enhance your Control Center with personalized icons and introduce a unique flair to your Lock Screen by employing custom icons as well.

KFD jailbreak app installer for iOS 17 and higher

KFD Jailbreak app installer is a partial alternative solution to KFD exploit. As a project of read and write kernel memory, it helps to build new applications to customize the latest iDevices. iOS 17 to iOS 17.2 users can download and install KFD jailbreak app installer. Then you can partially work with KFD jailbreak apps. 

Download KFD jailbreak app installer

Tap the below download button to install KFD jailbreak app installer to your device through zJailbreak app store.

iOS version Compatibility

Partially compatible with iOS 17, iOS 17.0.1, iOS 17.0.2, iOS 17.0.3, iOS 17.1, iOS 17.1.1, iOS 17.1.2, iOS 17.2

Device Compatibility

All the iOS 17 and higher running devices.

Step guide of KFD Jailbreak app installer

Step 01 – Click the above download button to download KFD jailbreak app installer.

Step 02 – First it will download the zJailbreak app store, you can see it  on your device settings. 

Step 03 – Navigate to your device Settings > Profile download > Enter the Device passcode.

Step 04 – It will take a few seconds for the Install Process, When done, go to device Home screen. You can see the zJailbreak app store there.

Step 05 – Open the zJailbreak app store from your homescreen, then go to Jailbreak solution > Tap KFD Jailbreak app installer > Allow > OK > install > Allow. Now it will download the KFD jailbreak app installer profile.

Step 06 – Again go to your device settings, tap on the profile > Install > Enter device passcode > Install > Done.

Step 07 – Check your device homescreen, KFD jailbreak app installer will be there. 

Step 08 – Open the downloaded KFD jailbreak app installer from our homescreen. 

Step 09 – There are many jailbreak iPAs under KFD jailbreak app installer. Before downloading them, you must trust the profile. Go to General > VPN & Device Management > tap the HDFC profile to trust it. 

Step 10 – Now you can download any number of KFD exploit based jailbreak iPAs to your device. They will work partially. 

How to remove KFD Jailbreak app installer?

Step 01 – Go to the Settings tab > General > VPN and Device management

Step 02 – Find the KFD exploit profile > Tap it > tap on the remove button.