Difference between revisions of "Pangu"

From The iPhone Wiki
Jump to: navigation, search
m (Download)
m
 
(28 intermediate revisions by 7 users not shown)
Line 1: Line 1:
{{other|untethered jailbreak for iOS 7.1.x|semi-tethered jailbreak for iOS 7.1.x|Geeksn0w}}
+
{{about|the untethered jailbreak for iOS 7.1.x|the semi-tethered jailbreak for iOS 7.1.x|Geeksn0w|the untethered jailbreak for iOS 8.x|Pangu8}}
 
{{Infobox software
 
{{Infobox software
 
| name = Pangu
 
| name = Pangu
 
| title = Pangu
 
| title = Pangu
 
| screenshot = [[File:Pangu-v1.1.0-interface.png|310px]]
 
| screenshot = [[File:Pangu-v1.1.0-interface.png|310px]]
| caption = Pangu v1.1.0 on Windows 7
+
| caption = Pangu v1.1.0 on Windows
 
| author = Pangu Team
 
| author = Pangu Team
 
| developer = Pangu Team
 
| developer = Pangu Team
 
| released = {{Start date|2014|06|23|df=yes}}
 
| released = {{Start date|2014|06|23|df=yes}}
 
| discontinued =
 
| discontinued =
| latest release version = 1.1.0
+
| latest release version = Windows: 1.2.1 / {{Start date|2014|08|09|df=yes}}<br />OS X: 1.2.0 / {{Start date|2014|08|11|df=yes}}
| latest release date = {{Start date and age|2014|06|29|df=yes}}
+
| latest release date =
  +
| programming language = [[wikipedia:C (programming language)|C]]
| latest preview version =
 
| latest preview date =
 
| programming language = C?
 
 
| operating system = [[wikipedia:Microsoft Windows|Windows]] / [[wikipedia:OS X|OS X]]
 
| operating system = [[wikipedia:Microsoft Windows|Windows]] / [[wikipedia:OS X|OS X]]
| size =
+
| size = Windows: 34.14&nbsp;MiB [EXE]<br />OS X: 31.14&nbsp;MiB [DMG]
 
| platform =
 
| platform =
 
| language = [[wikipedia:English language|English]] / [[wikipedia:Chinese language|Chinese]]
 
| language = [[wikipedia:English language|English]] / [[wikipedia:Chinese language|Chinese]]
| status = Active
+
| status = Deprecated
 
| genre = Jailbreaking
 
| genre = Jailbreaking
 
| license = [[wikipedia:Freeware|Freeware]]
 
| license = [[wikipedia:Freeware|Freeware]]
| website = [http://pangu.io pangu.io]
+
| website = [http://en.7.pangu.io en.7.pangu.io] (English)
 
}}
 
}}
   
'''Pangu''' is a [[jailbreak]] program. It performs an [[untethered jailbreak]] for all devices on iOS 7.1.x, except the [[Apple TV]]. It was initially released on 23 June 2014, and became subject to [[#Controversy|controversy and criticism]].
+
'''Pangu''' is an [[untethered jailbreak]] for all devices on iOS 7.1.x, except the [[List of Apple TVs|Apple TV]]. It was initially released on {{date|2014|06|23}}, and became subject to [[#Controversy|controversy and criticism]].
   
 
== Controversy ==
 
== Controversy ==
Pangu installs 25PP, a Chinese cracked app store, if the user ticks the checkbox to install it. iH8sn0w confirmed that Pangu does not install spyware or phishing viruses onto the device.
+
Pangu used to install 25PP, a Chinese cracked app store, if the user ticked the checkbox to install it. As of version 1.1.0, the 25PP checkbox is not included unless the device language is set to Chinese. iH8sn0w confirmed that Pangu does not install anything else on the device apart from Cydia.
   
Pangu also uses a revoked enterprise certificate in order to inject the jailbreak, which is removed after the jailbreak is complete.
+
Pangu also uses a revoked enterprise certificate in order to inject the jailbreak, which is removed after the jailbreak is complete. (See [[misuse of developer certificates]] for other uses of similar techniques.)
   
  +
Originally (in v1.0.0), Pangu used code taken from [[i0n1c]]'s jailbreak training sessions, as well as an info leak vulnerability from said sessions. Version 1.1.0 kept most of the code, but swapped i0n1c's info leak with another one, which disclosed another vulnerability to Apple.
As of version 1.1.0, the 25PP checkbox is not included unless the device language is set to Chinese.
 
   
 
== Supported Devices ==
 
== Supported Devices ==
The only unsupported devices are those of the [[Apple TV]] family. All other devices capable of running [[iOS]] 7.1.x are supported.
+
The only unsupported devices are those of the [[List of Apple TVs|Apple TV]] family. All other devices capable of running [[iOS]] 7.1.x are supported.
   
 
== Download ==
 
== Download ==
Line 41: Line 39:
 
! OS
 
! OS
 
! SHA-1 Hash
 
! SHA-1 Hash
! Download
+
! colspan="2" | Download
 
! Changes
 
! Changes
 
|-
 
|-
Line 48: Line 46:
 
| <code>7d66f1f939cbf877f1e90480571f92b238245fab</code>
 
| <code>7d66f1f939cbf877f1e90480571f92b238245fab</code>
 
| [http://dl.pangu.25pp.com/jb/Pangu_v1.0.exe 25PP]
 
| [http://dl.pangu.25pp.com/jb/Pangu_v1.0.exe 25PP]
  +
| {{n/a}}
 
| Initial release
 
| Initial release
 
|-
 
|-
 
| rowspan="2" | 1.1.0
 
| rowspan="2" | 1.1.0
| [[wikipedia:Microsoft Windows|Windows]]
+
| Windows
 
| <code>732e5fca772e6fd6f29ab56d2e39df21bf1cbe5f</code>
 
| <code>732e5fca772e6fd6f29ab56d2e39df21bf1cbe5f</code>
 
| [http://dl.pangu.25pp.com/jb/Pangu_v1.1.exe 25PP]
 
| [http://dl.pangu.25pp.com/jb/Pangu_v1.1.exe 25PP]
  +
| [https://mega.co.nz/#!vB8yiDhI!TNmvwa0my_OvURXVzpUVhGE2QPZQsWitXy6nFRCKO_k MEGA]
 
| rowspan="2" |
 
| rowspan="2" |
*Reduce application size
+
* Reduce application size
*English translation
+
* English translation
*Improved user interface and networking
+
* Improved user interface and networking
*Replaces i0n1c's infoleak exploit with a different one
+
* Replaces i0n1c's infoleak exploit with a different one
*Remove the choice to install the Chinese piracy store unless device language is set to Chinese
+
* Chinese piracy store is only installed if device language is set to Chinese
*First OS X release
+
* First OS X release
 
|-
 
|-
 
| [[wikipedia:OS X|OS X]]
 
| [[wikipedia:OS X|OS X]]
 
| <code>a0158e29a4b064913e976c869e49c54c8a53fa75</code>
 
| <code>a0158e29a4b064913e976c869e49c54c8a53fa75</code>
| class="rborderplz nobrradiusplz" | [http://dl.pangu.25pp.com/jb/Pangu_v1.1.dmg 25PP]
+
| [http://dl.pangu.25pp.com/jb/Pangu_v1.1.dmg 25PP]
  +
| class="rborderplz" | [https://mega.co.nz/#!DV1AwQjD!jaYJ5OuIlpc2pbURDaIHh-4Abeybam-OILD9oNNWeXw MEGA]
  +
|-
  +
| rowspan="2" | 1.2.0
  +
| Windows
  +
| <code>d2143ad652da7cc0e356f19c4a9dc59335a14b0b</code>
  +
| [http://dl.pangu.25pp.com/jb/Pangu_v1.2.exe 25PP]
  +
| [https://mega.co.nz/#!2FNnFS6S!w4NIhIEYUq07Peu4MW58t0415KfpvuE3ePwmblcZVBI MEGA]
  +
| rowspan="2" |
  +
* Fix boot loop bug for some iPhone 4 and 4S devices.
  +
* Fix sandbox log issue.
  +
* afc2 is included now.
  +
* Add patch for task_for_pid.
  +
* Added a notification if the jailbreak fails.
  +
|-
  +
| OS X
  +
| <code>b523f0e4d8e96e224685a8934acc225ce3cf70fd</code>
  +
| [http://dl.pangu.25pp.com/jb/Pangu_v1.2.dmg 25PP]
  +
| class="rborderplz" | [https://mega.co.nz/#!vVlHTSpb!F4q1mbQWKdPRgSHO2jCmrNf13NtzJDouLMBBroWTOOg MEGA]
  +
|-
  +
| 1.2.1
  +
| Windows
  +
| <code>77e964304aea897ee9226d7f0521638d29ec8bbf</code>
  +
| [http://dl.pangu.25pp.com/jb/Pangu_v1.2.1.exe 25PP]
  +
| [https://mega.co.nz/#!eY8RxRKb!2UYPogxuerqHdbpXiYUWWP4Wb90KdjXrRvn0poZcbFA MEGA]
  +
|
  +
* Fixes a crash in the Windows version.
 
|}
 
|}
  +
  +
== Analysis ==
  +
Members of the Pangu team [http://www.syscan360.org/en/speakers.html#windknown%20&%20dm557 presented about their work at the SyScan360 conference] in {{date|2014|07}}, although notes about this don't appear to be available on the web.
  +
  +
== Installed Packages ==
  +
* APR (/usr/lib) (<code>apr-lib</code>)
  +
* APT 0.7 (apt-key) (<code>apt7-key</code>)
  +
* APT 0.7 Strict (lib) (<code>apt7-lib</code>)
  +
* Base Structure (<code>base</code>)
  +
* Big Boss Icon Set (<code>org.thebigboss.repo.icons</code>)
  +
* Bourne-Again SHell (<code>bash</code>)
  +
* bzip2 (<code>bzip2</code>)
  +
* Core Utilities (/bin) (<code>coreutils-bin</code>)
  +
* Cydia Installer (<code>cydia</code>)
  +
* Cydia Translations (<code>cydia-lproj</code>)
  +
* Darwin Tools (<code>darwintools</code>)
  +
* Debian Packager (<code>dpkg</code>)
  +
* Debian Utilities (<code>debianutils</code>)
  +
* Diff Utilities (<code>diffutils</code>)
  +
* Find Utilities (<code>findutils</code>)
  +
* GNU Privacy Guard (<code>gnupg</code>)
  +
* grep (<code>grep</code>)
  +
* gzip (<code>gzip</code>)
  +
* LZMA Utils (<code>lzma</code>)
  +
* New Curses (<code>ncurses</code>)
  +
* PAM (Apple) (<code>pam</code>)
  +
* PAM Modules (<code>pam-modules</code>)
  +
* Pangu 7.1-7.1.x Untether (<code>io.pangu.axe7</code>)
  +
* pcre (<code>pcre</code>)
  +
* Profile Directory (<code>profile.d</code>)
  +
* readline (<code>readline</code>)
  +
* sed (<code>sed</code>)
  +
* shell-cmds (<code>shell-cmds</code>)
  +
* system-cmds (<code>system-cmds</code>)
  +
* Tape Archive (<code>tar</code>)
  +
* UIKit Tools (<code>uikittools</code>)
   
 
[[Category:Jailbreaks]]
 
[[Category:Jailbreaks]]
  +
[[Category:Jailbreaking]]

Latest revision as of 13:31, 17 September 2021

This page is about the untethered jailbreak for iOS 7.1.x. For the semi-tethered jailbreak for iOS 7.1.x, see Geeksn0w. For the untethered jailbreak for iOS 8.x, see Pangu8.

Pangu
Pangu-v1.1.0-interface.png
Pangu v1.1.0 on Windows
Original author(s) Pangu Team
Developer(s) Pangu Team
Initial release 23 Jun 2014 (2014-06-23)
Stable release Windows: 1.2.1 / 9 Aug 2014 (2014-08-09)
OS X: 1.2.0 / 11 Aug 2014 (2014-08-11)
Development status Deprecated
Written in C
Operating system Windows / OS X
Size Windows: 34.14 MiB [EXE]
OS X: 31.14 MiB [DMG]
Available in English / Chinese
Type Jailbreaking
License Freeware
Website en.7.pangu.io (English)

Pangu is an untethered jailbreak for all devices on iOS 7.1.x, except the Apple TV. It was initially released on 23 June 2014, and became subject to controversy and criticism.

Controversy

Pangu used to install 25PP, a Chinese cracked app store, if the user ticked the checkbox to install it. As of version 1.1.0, the 25PP checkbox is not included unless the device language is set to Chinese. iH8sn0w confirmed that Pangu does not install anything else on the device apart from Cydia.

Pangu also uses a revoked enterprise certificate in order to inject the jailbreak, which is removed after the jailbreak is complete. (See misuse of developer certificates for other uses of similar techniques.)

Originally (in v1.0.0), Pangu used code taken from i0n1c's jailbreak training sessions, as well as an info leak vulnerability from said sessions. Version 1.1.0 kept most of the code, but swapped i0n1c's info leak with another one, which disclosed another vulnerability to Apple.

Supported Devices

The only unsupported devices are those of the Apple TV family. All other devices capable of running iOS 7.1.x are supported.

Download

Version OS SHA-1 Hash Download Changes
1.0.0 Windows 7d66f1f939cbf877f1e90480571f92b238245fab 25PP N/A Initial release
1.1.0 Windows 732e5fca772e6fd6f29ab56d2e39df21bf1cbe5f 25PP MEGA
  • Reduce application size
  • English translation
  • Improved user interface and networking
  • Replaces i0n1c's infoleak exploit with a different one
  • Chinese piracy store is only installed if device language is set to Chinese
  • First OS X release
OS X a0158e29a4b064913e976c869e49c54c8a53fa75 25PP MEGA
1.2.0 Windows d2143ad652da7cc0e356f19c4a9dc59335a14b0b 25PP MEGA
  • Fix boot loop bug for some iPhone 4 and 4S devices.
  • Fix sandbox log issue.
  • afc2 is included now.
  • Add patch for task_for_pid.
  • Added a notification if the jailbreak fails.
OS X b523f0e4d8e96e224685a8934acc225ce3cf70fd 25PP MEGA
1.2.1 Windows 77e964304aea897ee9226d7f0521638d29ec8bbf 25PP MEGA
  • Fixes a crash in the Windows version.

Analysis

Members of the Pangu team presented about their work at the SyScan360 conference in July 2014, although notes about this don't appear to be available on the web.

Installed Packages

  • APR (/usr/lib) (apr-lib)
  • APT 0.7 (apt-key) (apt7-key)
  • APT 0.7 Strict (lib) (apt7-lib)
  • Base Structure (base)
  • Big Boss Icon Set (org.thebigboss.repo.icons)
  • Bourne-Again SHell (bash)
  • bzip2 (bzip2)
  • Core Utilities (/bin) (coreutils-bin)
  • Cydia Installer (cydia)
  • Cydia Translations (cydia-lproj)
  • Darwin Tools (darwintools)
  • Debian Packager (dpkg)
  • Debian Utilities (debianutils)
  • Diff Utilities (diffutils)
  • Find Utilities (findutils)
  • GNU Privacy Guard (gnupg)
  • grep (grep)
  • gzip (gzip)
  • LZMA Utils (lzma)
  • New Curses (ncurses)
  • PAM (Apple) (pam)
  • PAM Modules (pam-modules)
  • Pangu 7.1-7.1.x Untether (io.pangu.axe7)
  • pcre (pcre)
  • Profile Directory (profile.d)
  • readline (readline)
  • sed (sed)
  • shell-cmds (shell-cmds)
  • system-cmds (system-cmds)
  • Tape Archive (tar)
  • UIKit Tools (uikittools)