LightSaber is moving to Cyanide. Built on the kernel exploit — far more reliable than this userland chain. Open repo ›
LightSaber
iOS research tool(s)? 👀
@0xjohnny
Open source on GitHub
Built with Codex and Claude Code

iPhone · iOS 18.4–18.6.2

disabled.plist backup and restore Export copies the source bytes without modification to /private/var/mobile/Media/Downloads/disabled.plist.original Restore fetches the repository file /stock/disabled.plist for iPhone17,2 on build 22G100 only. It always creates a new plist inode, even when the bytes already match. It verifies the exact 898-byte payload, rebuilds root:wheel ownership with mode 0644, and first saves the current bytes in Downloads as disabled.plist.pre-restore.<timestamp>. A restore needs a reboot before launchd fully uses the stock file.
SpringBoard
SBCustomizertap for options
Dock icons 4
Home columns 4
Home rows 6
Hide icon labels
Drop the name under every home screen app
Heads up: the grid is patched once during the chain, so moving icons to or from the dock after install can reset some of the layout preferences you set. Respring and rerun if it looks off.
StatBartap for options
Drops a small black pill under the Dynamic Island showing live battery temperature + free RAM, refreshed every second.
Use Celsius
Off shows degrees Fahrenheit (default); on shows Celsius
Hide network speed
Off shows live download / upload KB/s in the pill (default). On hides them and narrows the pill.
System
MobileGestalt Patchertap for options
Warning: Enabling features your hardware does not support may cause UI glitches, crashes, or in rare cases a bootloop requiring a restore. Only enable features you understand. Uncheck to revert. Use at your own risk.
Powercufftap for options
Underclocks the CPU/GPU for longer battery, at the cost of speed. Port of rpetrich's Powercuff. Lasts until reboot.
Level
Sideloading
3-App Limit Bypassin development
In development for lightsaber. Use rooootdev's Lara for 3-App Limit Bypass right now.
In development for lightsaber. Use rooootdev's Lara for 3-App Limit Bypass right now.
Note: A respring may be needed before SpringBoard reflects the updated app state.
WebContent Log
Shows all browser-side messages received before WebKit freezes.
WebContent log lines will appear here when a run starts.
What to expect when you press Install
1 The page will freeze. That is the WebKit handoff to native code. Don’t switch apps or lock the phone.
2 The freeze lasts about 45–60 seconds. No UI progress while WebKit is paused — that is normal.
3 Safari will crash to the home screen after the freeze. That is the good signal — tweaks are about to install.
4 Just wait 10–20 seconds after the crash. Then check the home screen for the tweak you installed.
Extra debugging — capture device logs from a Mac
Requires Homebrew + brew install libimobiledevice (provides idevicesyslog) and Python 3 (preinstalled on macOS). Download syslog.py (source), connect and trust your iPhone, then run python3 syslog.py from Terminal. Press Ctrl+C after a run; the filtered log is saved under lightsaber-logs/.
Not tweak injection — runtime JS modification only
This is JavaScript injection during the exploit chain that modifies processes at runtime. While changes persist until respring or reboot, this is not a standard dylib injection found with a full jailbreak — it is limited in nature and only some things can be done with it.
Compatibility warning — may conflict with Nugget
This may cause compatibility issues with modifications made by Nugget and other similar tools. While I will work on resolving this, keep this in mind in the interim.
Use caution — unstable, not for daily drivers
Derived from the DarkSword exploit chain with all malware communication stripped and fully open source, but this is an inherently unstable chain and is not recommended for deployment on a daily driver unless you are willing to accept the risk. The chain may take several tries to succeed, SpringBoard may crash, the kernel may panic. Use at your own risk — I am not liable for any damage or data loss.
Credits
iVerify & Google GTIG — DarkSword chain documentation
leminlimez — Nugget (MobileGestalt + BookRestore)
khanhduytran0 — SparseBox (3-app limit bypass)
rpetrich — Powercuff tweak
34306 & khanhduytran0 — site design reference
@cro4js — UI suggestions

v0.0.133

Before it runs

After you press Proceed, keep Safari open and do not lock the phone. The full run usually takes about 1 minute, approximately.

✓Page freezes for ~45–60s: WebKit handoff — no UI updates after that.
✓Safari crashes to home screen: good signal — tweaks about to install.
✓Wait 10–20 seconds: then check the home screen.

Force-close Safari

Safari is in a dirty state from a previous run. From the app switcher, swipe up on Safari to kill it, then reopen this page and try again.

If this keeps happening, clear Safari's cache (Settings → Apps → Safari → Clear History and Website Data) and/or reboot your device before retrying. A reboot gives you a fresh kernel state and the cleanest chance of success.