pa7r0n/ich_a12_plus_ramdisk — explained in plain English
Analysis updated 2026-05-18
Boot a research SSH ramdisk on an A12 or A13 device already in pwned DFU mode.
Mount and inspect a device's system, preboot, and xART partitions for security research.
Choose between a patched or stock kernel when booting the ramdisk.
Build a boot image for a specific signed iOS version listed by the tool.
| pa7r0n/ich_a12_plus_ramdisk | agricidaniel/gogh | betta-tech/harness-sdd | |
|---|---|---|---|
| Stars | 46 | 46 | 46 |
| Language | Python | Python | Python |
| Setup difficulty | hard | moderate | easy |
| Complexity | 5/5 | 3/5 | 2/5 |
| Audience | researcher | developer | developer |
Figures from each repo's GitHub metadata at analysis time.
Requires a device already in pwned DFU via usbliter8 and RP2350 hardware, plus a Mac with the right USB cable.
ICH_A12+ Ramdisk is a research tool that sets up an SSH-accessible ramdisk on iPhone and iPad models using Apple's A12 or A13 chip, after the device has already been put into a special exploited DFU (Device Firmware Update) mode using a separate tool called usbliter8. The README is explicit that this is not a jailbreak, and is intended only for research on devices you personally own. Once a device is in the required pwned DFU state and connected to a Mac by USB cable, this project's scripts handle the rest of the process automatically: checking the connection, building a customized boot image for the specific iOS version installed, sending it to the device, and finally opening an SSH connection into the device using a default password. From there, a user can mount the device's system, preboot, and other internal partitions to inspect them, though the project notes that fully mounting the main user data partition is not solved on iOS 17 and newer due to additional Apple security protections. The tool supports a range of iOS versions and lets the user choose between a patched kernel, which relaxes some Apple security checks for research purposes, or the stock unmodified kernel. It also includes flags to skip certain firmware steps or change boot behavior. The project is built on top of other open-source tools in this space, including usbliter8 and several patch-finding utilities credited in the README, and is released under the MIT license.
ICH_A12+ Ramdisk is a research tool that boots an SSH-accessible ramdisk on A12/A13 iPhones and iPads already in a pwned DFU state, for inspecting the device you own.
Mainly Python. The stack also includes Python, Bash, SSH.
MIT license: free to use and modify, but upstream tool licenses this depends on also apply.
Setup difficulty is rated hard, with roughly 1h+ to a first successful run.
Mainly researcher.
This repo across BitVibe Labs
Verify against the repo before relying on details.