ra1ntool is a utility application for macOS made to boot untrusted bootchain on an iOS device. It is only possible due to a bootrom exploit, and signature check patch, so loading patched bootchain files is not verified.
Requirements
- macOS (Currently only intel based mac computer supported)
Supported iOS: 13-15
Supported devices: A7 - A11
Get the latest version of ra1ntool
Installing ra1ntool
To install ra1ntool on macOS double-click the downloaded .dmg file, it will open a new window has shown in the image below, then drag and drop ra1ntool.app into /Applications shortcut.
Once the transfer is done, double-click /Applications, find ra1ntool app and double-click again to open ra1ntool.
Optional: Close all opened finder windows, and eject the mounted .dmg
Loading the SSH Ramdisk
- Make sure the computer is connected to the Internet.
- Now start by connecting a device via USB cable and entering DFU Mode.
- More about DFU Mode at theiphonewiki.com wiki
In the app click SSH Ramdisk button, ra1ntool does all the loading automatically after the button is clicked, it might take a minute for the device to boot. PS: OK message should be displayed on the verbose boot screen.
ra1ntool has been tested on macOS 10.15 Catalina for iPhone9,3 (A10)
Connecting via SSH
To connect to a iOS device booted with SSH Ramdisk simply use your favorite Terminal,
use port 2222 and password alpine for the connection.
