LightSaber is moving to Cyanide. Built on the kernel exploit — far more reliable than this userland chain. Open repo ›
LightSaber
iOS research tool(s)? 👀
@zeroxjf
Open source on GitHub
Built with Codex and Claude Code

iPhone · iOS 18.4–18.6.2

SpringBoard
SBCustomizertap for options
Dock icons 4
Home columns 4
Home rows 6
Hide icon labels
Drop the name under every home screen app
Heads up: the grid is patched once during the chain, so moving icons to or from the dock after install can reset some of the layout preferences you set. Respring and rerun if it looks off.
StatBartap for options
Drops a small black pill under the Dynamic Island showing live battery temperature + free RAM, refreshed every second.
Use Celsius
Off shows degrees Fahrenheit (default); on shows Celsius
Hide network speed
Off shows live download / upload KB/s in the pill (default). On hides them and narrows the pill.
System
MobileGestalt Patchertap for options
Warning: Enabling features your hardware does not support may cause UI glitches, crashes, or in rare cases a bootloop requiring a restore. Only enable features you understand. Uncheck to revert. Use at your own risk.
Powercufftap for options
Underclocks the CPU/GPU for longer battery, at the cost of speed. Port of rpetrich's Powercuff. Lasts until reboot.
Level
Sideloading
3-App Limit Bypassin development
In development for lightsaber. Use rooootdev's Lara for 3-App Limit Bypass right now.
In development for lightsaber. Use rooootdev's Lara for 3-App Limit Bypass right now.
Note: A respring may be needed before SpringBoard reflects the updated app state.
What to expect when you press Install
1 The page will freeze. That is the WebKit handoff to native code. Don’t switch apps or lock the phone.
2 The freeze lasts about 45–60 seconds. No UI progress while WebKit is paused — that is normal.
3 Safari will crash to the home screen after the freeze. That is the good signal — tweaks are about to install.
4 Just wait 10–20 seconds after the crash. Then check the home screen for the tweak you installed.
WebContent Log
Waiting to start
Phases 3–5 run while WebKit is frozen — no live log updates here.
Expected
WebContent log lines will appear here when a run starts.
Extra debugging — capture device logs from a Mac
Requires Homebrew + brew install libimobiledevice (provides idevicesyslog) and Python 3 (preinstalled on macOS). Download syslog.py (source), connect and trust your iPhone, then run python3 syslog.py from Terminal. Press Ctrl+C after a run; the filtered log is saved under lightsaber-logs/.
Not tweak injection — runtime JS modification only
This is JavaScript injection during the exploit chain that modifies processes at runtime. While changes persist until respring or reboot, this is not a standard dylib injection found with a full jailbreak — it is limited in nature and only some things can be done with it.
Compatibility warning — may conflict with Nugget
This may cause compatibility issues with modifications made by Nugget and other similar tools. While I will work on resolving this, keep this in mind in the interim.
Use caution — unstable, not for daily drivers
Derived from the DarkSword exploit chain with all malware communication stripped and fully open source, but this is an inherently unstable chain and is not recommended for deployment on a daily driver unless you are willing to accept the risk. The chain may take several tries to succeed, SpringBoard may crash, the kernel may panic. Use at your own risk — I am not liable for any damage or data loss.
Credits
iVerify & Google GTIG — DarkSword chain documentation
leminlimez — Nugget (MobileGestalt + BookRestore)
khanhduytran0 — SparseBox (3-app limit bypass)
rpetrich — Powercuff tweak
34306 & khanhduytran0 — site design reference
@cro4js — UI suggestions

v0.0.132

LightSaber is moving to Cyanide

Please read this before continuing.

LightSaber will be discontinued soon. Active development has moved to Cyanide, which is built on a full kernel exploit instead of this WebKit + sandbox-escape chain. Cyanide is dramatically more reliable: no Safari freezes, no multi-try chain runs, no kernel panics from a flaky userland exploit, and tweaks persist properly instead of being JS injected at runtime.
Why switch. LightSaber is a userland chain stitched together from DarkSword — it works, but SpringBoard crashes, page freezes, and "webpage crashed" retries are inherent to it. Cyanide runs from a signed app via the kernel exploit, so the same tweaks (SBCustomizer, Powercuff, StatBar, App Library, etc.) install in one shot and survive cleanly. Same author, same tweaks, far better foundation.
If you still want to use LightSaber: this is JavaScript injection during an exploit chain that modifies processes at runtime; changes persist until respring or reboot. The chain may take several tries to succeed, SpringBoard may crash, the kernel may panic. Use at your own risk — I am not liable for any damage or data loss.

Before it runs

After you press Proceed, keep Safari open and do not lock the phone. The full run usually takes about 1 minute, approximately.

✓Page freezes for ~45–60s: WebKit handoff — no UI updates after that.
✓Safari crashes to home screen: good signal — tweaks about to install.
✓Wait 10–20 seconds: then check the home screen.

Force-close Safari

Safari is in a dirty state from a previous run. From the app switcher, swipe up on Safari to kill it, then reopen this page and try again.

If this keeps happening, clear Safari's cache (Settings → Apps → Safari → Clear History and Website Data) and/or reboot your device before retrying. A reboot gives you a fresh kernel state and the cleanest chance of success.