Ios 9.3.5 | Untethered Jailbreak
iOS 9 introduced KPP (Kernel Patching Protection) – a hardware/software monitor that checks the kernel’s integrity every few milliseconds. On iOS 9.0-9.1, Pangu9 used an off-by-one bug in kernel task port naming to disable KPP permanently without crashing. By 9.3.5, Apple had hardened KPP significantly.
To be untethered, you need:
No known public chain exists for 9.3.5 that satisfies #1. The last known bootloader vulnerability (iBoot) was for iOS 4. Post-iOS 8, Apple moved to secure boot chains with hardware verification (Secure Enclave on A7+). ios 9.3.5 untethered jailbreak
To understand the legend of 9.3.5, you have to look at what came before. For years, the jailbreak scene was dominated by "untethered" tools. You ran the software once, and your device was free forever. You could reboot, turn it off, and turn it back on, and it would boot up already jailbroken.
But by 2016, the landscape had changed. Apple had hardened the kernel. The "Golden Age" was ending. As iOS 9 gave way to iOS 10, the legendary development teams began to go quiet. iOS 9 introduced KPP (Kernel Patching Protection) –
Then, a tragedy shifted the tectonic plates of the community. In October 2016, a brilliant hacker known as "Moonshine" passed away. He was a key figure in the community, and his death left a void. But in the world of hacking, data never truly dies.
Consider this: An untethered jailbreak means any kernel panic (caused by a bad tweak) will bootloop your device. You’d need to restore. With semi-untethered, you simply reboot into safe mode (volume up) or stock OS, then re-run the jailbreak app. For legacy devices where tweak compatibility is poor, semi-untethered is actually safer. No known public chain exists for 9
Important Note on Reboots: If your device runs out of battery or you restart it:
Compatible Devices: iPhone 4s, iPhone 4, iPad 2, iPad 3, iPad 4, iPad Mini 1 (specifically A5/A6 devices). Prerequisite: Your device must be running iOS 9.3.6. If you are on 9.3.5, you must use the "Degrade" tool to upgrade and patch the installation.
Why do this? This installs the Kok3r9 jailbreak, which is fully untethered. You can reboot your device, and the jailbreak will still be active. No computer needed after installation.
If you are sitting on an iPhone 4s, 5, or 5c running iOS 9.3.5, here is your realistic path: