Remember, the new usbliter8 BootROM exploit works on A12 and A13 devices, so if you have an iPhone 11, iPhone XS, XR, etc. avoid plugging it in dodgy charging stations especially those that pop a “Trust computer” alert on the phone. Ramdisks based on this exploit that can steal files already exist!
ForenZes Labs@ForenZesLabs
Aug 22
The new usbliter8 iOS BootROM exploit is particularly powerful and we have already identified several cases of tools build with Ramdisk utilities + usbliter8 used to bypass the passcode and clone files. We highly recommend not plugging your phone into random charging stations.
Image credit: @matteyeux on X

ALT Image credit: @matteyeux on X

Aug 22, 2026 · 9:57 AM UTC

6
20
217
33,842
Sort replies: Relevant Recent Liked
Replying to @FCE365
You mean there’s a way to enter DFU from a trusted computer?
2
12
2,566
Not really, but I've seen charging stations before that ask you to put the device in DFU mode to charge it faster (they advertise it as the phone not doing anything that drains battery in DFU mode so it chargers faster). Those kind of stations usually have a raspberry pi or similar device inside that 100% has AFC support. But they don't have to be in DFU mode. If you are jailbroken with usbliter8 and you plug the device in for charging and happen to click Trust, a rogue charging station could easily install malware by replacing one of the base binaries or bootstrap binaries from the jailbreak via either dropbear or AFC and then every time you re-jailbreak you re-activate their malware without even knowing. To be honest, even if you don't use usbliter8 or your device is not vulnerable to it, seeting the "Trust Computer" alert on the phone when you connect it to a public or hotel charging station is a huge red flag. Even without the exploit it can make a backup of the entire phone...
2
2
15
1,882
more replies
Replying to @FCE365
can copy DCIM from ramdisk?? 🙃
1
131
Once ramdisk is used to mount the user partition, yeah
1
161
more replies
Replying to @FCE365
Exqctly why I never released any ramdisks! Finally someone that understands.
2
438
Replying to @FCE365
the more dangerous one is handing out your phone for someone to charge it in a restaurant etc, where they plug it in in a place u cant see
1
165
Replying to @FCE365
Yip. Watched it happened verbosely
55
Replying to @FCE365
@FCE365 it seems that apple has been hitting a new ban wave for non dev accounts that resign their sideloaded apps within their 7 day window…
28