Uploaded August 2017 | Updated September 2026, 7 hours ago
This video is a preview of iMultiBoot, a software to install and manage multiple operating systems on 32-bit iOS devices. An alpha version is planned to be publicly released soon. Since it's an alpha build, it will have many bugs pretty much everywhere. Some features are interactive partition management and custom boot images for additional operating systems. In order to boot additional operating systems, iMultiBoot uses kloader by @winocm (improved by @xerub). Actually, iMultiBoot only supports the iOS 6.1.6 (latest) with 5.1 (9B176) dual-boot combination on iPod Touch 4 (N81AP). However, some other combinations might work if proper decryption keys and patches are provided. Data-Protection hacks are not implemented yet, iOS 7.x and newer as main with iOS 6.x and lower combination will won't work. Reverse combination, iOS 6.x and older as main with 7.x might be possible since system bag is properly updated when secondary iOS boot for the first time.
Do not try iMultiBoot on A6 devices (iPhone 5 and iPad 4th) because it needs to restore your device in order to flash additional boot images in the firmware. Actually, the latest signed iOS version for A6 devices can't be jailbroken. So, iMultiBoot won't be able to continue the setup once the restore process is finished because it requires jailbreak to complete it. Jailbreak must also have tfp0 enabled to properly execute kloader.
The soundtrack of this video is a mix made by me with the following tracks :
A) DJ ASSASS1N - Frag Out [NCS Release],
youtube.com/watch?v=gWapX12pHPQ
B) DEAF KEV - Invincible [NCS Release],
youtube.com/watch?v=J2X5mJ3HDYE
C) Syn Cole - Feel Good [NCS Release],
youtube.com/watch?v=q1ULJ92aldE
D) Tobu & Itro - Sunburst [NCS Release],
youtube.com/watch?v=4lXBHD5C8do
E) Spektrem - Shine (Gabriel Drew & Bloom Remix) [NCS Release],
youtube.com/watch?v=rWVjht-MIto
F) Waysons - Daydream [NCS Release],
youtube.com/watch?v=ZynbJWCjJxg
G) Lensko - Cetus [NCS Release],
youtube.com/watch?v=i3vrV-WNmsc
H) Tobu - Candyland [NCS Release],
youtube.com/watch?v=IIrCDAV3EgI
I) Jim Yosef - Eclipse [NCS Release],
youtube.com/watch?v=1WP_YLn1D1c
This video is a preview of iMultiBoot, a software to install and manage multiple operating systems on 32-bit iOS devices. An alpha version is planned to be publicly released soon. Since it's an alpha build, it will have many bugs pretty much everywhere. Some features are interactive partition management and custom boot images for additional operating systems. In order to boot additional operating systems, iMultiBoot uses kloader by @winocm (improved by @xerub). Actually, iMultiBoot only supports the iOS 6.1.6 (latest) with 5.1 (9B176) dual-boot combination on iPod Touch 4 (N81AP). However, some other combinations might work if proper decryption keys and patches are provided. Data-Protection hacks are not implemented yet, iOS 7.x and newer as main with iOS 6.x and lower combination will won't work. Reverse combination, iOS 6.x and older as main with 7.x might be possible since system bag is properly updated when secondary iOS boot for the first time.
Do not try iMultiBoot on A6 devices (iPhone 5 and iPad 4th) because it needs to restore your device in order to flash additional boot images in the firmware. Actually, the latest signed iOS version for A6 devices can't be jailbroken. So, iMultiBoot won't be able to continue the setup once the restore process is finished because it requires jailbreak to complete it. Jailbreak must also have tfp0 enabled to properly execute kloader.
The soundtrack of this video is a mix made by me with the following tracks :
A) DJ ASSASS1N - Frag Out [NCS Release],
youtube.com/watch?v=gWapX12pHPQ
B) DEAF KEV - Invincible [NCS Release],
youtube.com/watch?v=J2X5mJ3HDYE
C) Syn Cole - Feel Good [NCS Release],
youtube.com/watch?v=q1ULJ92aldE
D) Tobu & Itro - Sunburst [NCS Release],
youtube.com/watch?v=4lXBHD5C8do
E) Spektrem - Shine (Gabriel Drew & Bloom Remix) [NCS Release],
youtube.com/watch?v=rWVjht-MIto
F) Waysons - Daydream [NCS Release],
youtube.com/watch?v=ZynbJWCjJxg
G) Lensko - Cetus [NCS Release],
youtube.com/watch?v=i3vrV-WNmsc
H) Tobu - Candyland [NCS Release],
youtube.com/watch?v=IIrCDAV3EgI
I) Jim Yosef - Eclipse [NCS Release],
youtube.com/watch?v=1WP_YLn1D1c
![De Rebus Antiquis - iPad 4 (P102AP) iOS 7.x iBoot Exploit [Demo]](https://i.ytimg.com/vi/d6b_G1gxu-Q/mqdefault.jpg "De Rebus Antiquis - iPad 4 (P102AP) iOS 7.x iBoot Exploit [Demo]
This is a demo of a complete De Rebus Antiquis iBoot exploit setup running on iPad 4 (P102AP). Once iBoot re-runs after the exploitation, it mounts a secondary HFS+ volume that contains a new bootloader image and executes it. In this demo, I simply used the same iBoot as the signed one, except running unsigned with custom patches and verbose boot enabled.
Im currently working on a complete write-up about De Rebus Antiquis iBoot exploit. Once it will be released, you should get most of the necessary knowledge to implement what you see in this video. See my personal blog here, https://www.pmbonneau.com/ for more details.
Many thanks to @dora2ios (Twitter) for help with some issues I had while debugging.")
![HFS+ Heap Buffer Overflow - iPad 2 (K94AP) iOS 5.x iBoot Exploit [Demo]](https://i.ytimg.com/vi/dJbakxWSy18/mqdefault.jpg "HFS+ Heap Buffer Overflow - iPad 2 (K94AP) iOS 5.x iBoot Exploit [Demo]
This is a post-exploitation demo of an HFS+ heap buffer overflow in iOS 5.x iBoot, running on iPad 2nd (K94AP). One particular use case of an iBoot exploit such as this one is the ability to downgrade or upgrade the device to any iOS version as long as it can run on it. This iPad 2nd is downgraded to iOS 5.x using previously saved SHSH blobs, so when powered-on, the signed iOS 5.x iBoot is executed. An HFS+ volume is specifically crafted to trigger an heap buffer overflow when iBoot attempts to mount it. Then, we get control over the PC register and eventually execute a custom payload which jumps to a completely new patched iBoot image. From there, additional unsigned bootchain images are executed and so, to fully boot iOS. In this video, iPad start up with the iOS 5.0.1 signed bootchain, exploit is triggered, then jumps to an iOS 7.1.2 bootchain.
See the complete write-up I did about this iBoot exploit on my personal blog here, https://www.pmbonneau.com/ios5-iboot-hfs-hbo/
This video was originally posted on X (Twitter) here, https://x.com/ShadowLee19/status/1074533504610918400?s=20")
![Futurama - Holophonor Sonnet for Leela [Piano]](https://i.ytimg.com/vi/nnynLpZVWno/mqdefault.jpg "Futurama - Holophonor Sonnet for Leela [Piano]
Here is a piano arrangment of the holophonor song played by Fry for Leela in the Parasite Lost (S03E04) episode of Futurama.
There are five softwares used in the making of this arrangement.
1 - Nero Recode (probably, I dont remember exactly): To extract the audio from the original video. Then, I cut all the audio except the holophonor part and exported to WAV format using audacity.
2 - AnthemScore: To reverse the song. This software allows me to see a visual representation of the actual song and guess notes, plus it uses an IA to automatically do a part of this work. The final product is a sheet music in MusicXML file format.
3 - MuseScore: To re-encode the MusicXML output of AnthemScore to a more versatile MusicXML format. I dont know why, but using AnthemScores MusicXML output in Synthesia doesnt work well, the BPM isnt the right one. Converting the file with Musescore will produce a MusicXML file that will be better with Synthesia.
4 - Synthesia: To get this nice piano roll and also to practice the song on a real piano.
Album : N/A
Title : Holophonor Sonnet for Leela
Arrangment type : Reversed from soundtrack
Download sheet music from my blog here : https://www.pmbonneau.com/music/arrangements/")
