Claude Code
Install "tweaks"
Pick one or more. Selected payloads run together in a single chain execution.
Supported: every arm64e iPhone (A12 – A18 Pro) running iOS 18.4 – 18.6.2.
Fine-tune the SpringBoard dock and home screen grid at runtime: number of icons in the dock, home columns, and home rows. Runtime patch only — no on-disk changes.
Persistence: lives only inside SpringBoard, so it clears on respring/reboot.
Going wide: pushing home columns or rows well above stock can cause icons to clip. If something looks wrong after install, respring.
Going wide: pushing home columns or rows well above stock can cause icons to clip. If something looks wrong after install, respring.
Underclocks the CPU/GPU for longer battery, at the cost of speed. Port of rpetrich's Powercuff. Lasts until reboot.
Patches MobileGestalt to set InternalInstall + InternalStorage, enabling the 3-app sideloading bypass. Persists until MobileGestalt cache is regenerated (reboot or system update). Same mechanism as Nugget.
Tip: takes up to 60 seconds. Keep Safari in the foreground while it runs — don't switch apps or lock the device. If it works, don't press your luck.
If it fails (page flash, "A problem repeatedly occurred", or "webpage crashed" banner): your best bet is to clear Safari's cache and retry — not just kill Safari. Tap the book icon in Safari's bottom tab bar, then Clear, then reload this page. If it still fails after a couple of tries, reboot the device, clear the cache again, and try once more.
If it fails (page flash, "A problem repeatedly occurred", or "webpage crashed" banner): your best bet is to clear Safari's cache and retry — not just kill Safari. Tap the book icon in Safari's bottom tab bar, then Clear, then reload this page. If it still fails after a couple of tries, reboot the device, clear the cache again, and try once more.
Not tweak injection — runtime JS modification only
This is JavaScript injection during the exploit chain that modifies processes at runtime. While changes persist until respring or reboot, this is not a standard dylib injection found with a full jailbreak — it is limited in nature and only some things can be done with it.
Compatibility warning — may conflict with Nugget
This may cause compatibility issues with modifications made by Nugget and other similar tools. While I will work on resolving this, keep this in mind in the interim.
Use caution — unstable, not for daily drivers
Derived from the DarkSword exploit chain with all malware communication stripped and fully open source, but this is an inherently unstable chain and is not recommended for deployment on a daily driver unless you are willing to accept the risk. The chain may take several tries to succeed, SpringBoard may crash, the kernel may panic. Use at your own risk — I am not liable for any damage or data loss.
Thanks to
34306 & khanhduytran0, whose site design helped stabilize payload delivery on this project, @cro4js for UI suggestions, and anonymous contributors for help stabilizing the exploit chain.
34306 & khanhduytran0, whose site design helped stabilize payload delivery on this project, @cro4js for UI suggestions, and anonymous contributors for help stabilizing the exploit chain.
v0.0.91