After years of digging through private exploit hoards and legacy research, a working untethered jailbreak for iOS 9.3 – 9.3.5 on 64-bit devices (including the iPhone 6) was quietly released by a team known as Axi0mX (building on the infamous “Trident” and “Pegasus” vulnerabilities).
Developed by staturnz, kok3shiX is a newer semi-untethered jailbreak specifically for 32-bit devices on iOS 9.3.3 up to 9.3.6. ios 9.3 6 jailbreak untethered
Neither of these are untethered. If your battery dies or you manually reboot, you lose the jailbreak until you relaunch the app. After years of digging through private exploit hoards
A true untether for 9.3.6 would require modifying the boot files (launchd or similar daemons) to execute the exploit payload during the system initialization phase. Neither of these are untethered
On 32-bit devices running iOS 9, the kernel is not encrypted in a way that prevents runtime patching (unlike KPP on 64-bit devices). The exploit performs the following actions:
The exploit chain uses three core components:
When combined, this allows a true bootROM-level persistence – meaning even a hard reboot retains full root access.