Hey r/jailbreak,

Today I’m finally releasing something I’ve been burying myself in for the past month, losing sleep over, and honestly almost gave up on more than once:

MetalFG — a real-time, driver-level GPU Frame Generation & Optical Flow Interpolation engine for ProMotion iOS devices (arm64 / arm64e rootless), inspired by PC tools like Lossless Scaling (LSFG), DLSS 3, and SMFG (Super-Motion).

It intercepts Metal games running at 60 FPS (or 30 FPS) and synthesizes true intermediate optical-flow frames directly on the Apple Silicon GPU to drive your 120Hz ProMotion display at 120 FPS.

Note on Beta Status & Compatibility: MetalFG is still considered in Beta as I continue refining edge cases across different games, though this v2.3.0 build is by far the best, smoothest, and most accurate algorithm we've achieved. I have tested it extensively on iOS 16 (iPhone 13 Pro Max on Dopamine); I haven't personally tested iOS 15 ProMotion devices yet, so I'm really looking forward to iOS 15 testers as well!

My Story: Months of Research, Ghosting, and Bootlooping the JB (and why the heck you get it ONLY now at 2.3.0)

I daily-drive an iPhone 13 Pro Max on iOS 16 (Dopamine). It’s an amazing phone with a 120Hz ProMotion panel, yet heavy 3D games either lock you to 60 FPS or cook your battery/thermals if you try to brute-force 120 FPS natively.

On PC, Frame Generation completely changed gaming. I kept thinking: Apple’s A15+ GPUs have ultra-fast tile memory and compute shaders—why doesn't iOS have a real frame generator? Even cheap-ass Androids got it!! If a tweak like this existed, I would have bought it in a heartbeat. Since it didn't exist, I decided to build it myself.

I had no idea how brutal the journey was going to be:

1. The "Fake FPS" & Rubberbanding Nightmare (v1.0 – v2.0): My early builds tried to extrapolate frames forward in time. The FPS counter said 120, but the screen looked like a smeary, juddering mess. Text wobbled, HUD icons smeared across the screen, and worse—fighting the game's render loop tanked 60 FPS native down to 28 FPS (14+14).
2. Freezing the Entire Jailbreak on the Apple Logo: At one point, hooking MTLCommandBuffer and CAMetalLayer too broadly meant ellekit injected into system daemons during userspace reboots. Every time I rebooted and re-jailbroke with Dopamine, my phone froze solid on the Apple logo. The only way back in was jailbreaking with tweak injection disabled, opening Sileo, ripping my own tweak out, and starting over.
3. The Final Boss — Why 120 FPS Still Felt Like 60 FPS (v2.1 – v2.2): Even after switching to a true 1-Frame Latency Midpoint Interpolator (caching Frame N, computing bidirectional optical flow between Frame N-1 and Frame N, and presenting the synthesized midpoint S(N-0.5) first), it still didn't feel smooth! I almost threw in the towel. Instead, I sat down and studied everything more thoroughly until we found the two smoking guns:
   • A holdover sign flip (uv - mv * t instead of uv + mv * t) was warping Frame N ahead of itself (0.40 -> 0.55 -> 0.50), making every moving object take 1.5 steps forward and 0.5 steps backward at 120Hz!
   • CoreAnimation (CARenderServer) was dropping our midpoint frames because addCompletedHandler: timing + bare presentDrawable: caused both the synthetic frame and the ground-truth frame to collide on the same 120Hz VSYNC tick instead of pacing cleanly with afterMinimumDuration: (8.33ms per tick).

When I compiled v2.3.0 (I switched versions to 2.x when I had a major breakthrough), opened Genshin Impact in a 60 FPS room, and panned the camera... it finally clicked. Buttery-smooth 120Hz motion, crisp static UI/text, and zero performance tanking. It literally changed the game for me (pun intended lol).

It makes me more satisfied with my personal iPhone 13 Pro Max than just buying a newer device.

⚙️ What MetalFG Does Under the Hood

• True 1-Frame Latency Midpoint Synthesis (S(N-0.5)): Just like LSFG and DLSS 3, MetalFG holds Ground Truth Frame N for half a refresh cycle (8.33ms), presents a synthesized midpoint frame between Frame N-1 and Frame N on VSYNC Tick 1, and hardware-paces Ground Truth Frame N onto VSYNC Tick 2.
• SMFG 1.1 Coarse-to-Fine Optical Flow + Parabolic Sub-Pixel Fit: Multi-radius seed search + 3-level hierarchical refinement + analytical parabolic sub-pixel fitting (80x45 RGBA16Float grid running in < 0.5ms on GPU).
• 5x5 Bilateral Fluid Filter & Sub-Block Silhouette Resolver: Fills flat/cel-shaded regions (like anime skin/walls in Genshin) from surrounding textured blocks while resolving sharp foreground/background silhouettes without ghost halos.
• Clamped Catmull-Rom 5-Tap Sharp Reconstruction & HUD Protection: Keeps damage numbers, minimaps, crosshairs, and text 100% stationary while preserving native texture sharpness.
• Live In-Game Frosted Glass Tuning Panel: Drag the floating FPS pill anywhere, tap to toggle FG on/off on the fly (with haptics), or tap ⚙️ to switch presets (Clear, Balanced, Fluid) and tune Motion Warp Scale, Ghost Rejection, and UI Protection live in-game.
• 100% Dopamine Userspace-Reboot Safe: Strictly whitelisted at constructor time to /var/containers/Bundle/Application/ .app bundles—never touches SpringBoard, backboardd, or system daemons.

🎁 Why MetalFG is 100% Free & Open-Source Forever

I want to make this crystal clear: I will NEVER charge money for MetalFG.

Even though I think it's well worth buying (and I myself would have bought a tweak like this in a second), I don't want to wrap my work in DRM only to find this gem "cracked" on a Telegram group a day later. I believe in giving this gift as a... gift.

🤝 Contributions, Ideas, Testers & Buying Me a Beer!

I study overtime, so my free time is tight. Because MetalFG is 100% open-source, I would love your help, ideas, tips, and contributions:

• Devs & Shader Wizards: Have ideas to push the optical flow even further, optimize shaders, or add per-game profiles? PRs and issues are super welcome!
• Testers (iOS 16 & iOS 15!): Let me know how it runs on your device (especially if you test it on iOS 15 ProMotion!) and your favorite tuning slider combinations.

I have learnt A LOT and I still am learning...

However, just because I poured my heart into this for so long - if MetalFG changes how you enjoy your phone the way it did for mine, I would be super grateful for any help and donations! (Buy me a beer, half a beer, or drop a new idea in the repo 🍺☕):

• ☕ Ko-fi (Buy Me a Beer): https://ko-fi.com/dnullptr
• 💙 PayPal: https://paypal.me/dnullptr

🔗 Links & Download

• GitHub Repository (Source Code): https://github.com/dnullptr/MetalFG
• Download Rootless .deb (Latest Build): https://github.com/dnullptr/MetalFG/releases/tag/nightly

Enjoy the 120Hz smoothness, and let me know what you think in the comments!

Screenshots with the UI:
https://ibb.co/mF4R7vj2
https://ibb.co/RZVtLV3

i’ve been using it for over a year now. and not too long ago it updated. and this is the new (imo) worse version. can we somehow use the old one?

Lasso is out on Havoc. Press the screenshot buttons and the screen freezes: drag across just the part you want, then pin it, read it, mark it up, share it or record it. It also records both sides of your calls and the sound your apps play.

What it does

• Snap a region, not the whole screen: from the screenshot buttons, AssistiveTouch, Back Tap, Siri, a Shortcut or a swipe in from the edge. The camera button still takes an ordinary screenshot.
• Record calls, both sides: from the Phone app, FaceTime or apps that call, with a tap or on their own for the kinds of call, apps and people you choose. Transcribed on the phone, line by line, Them and You. In the Phone app's Recents, a recorded call's time turns amber: tap it to listen.
• Record system audio: what your apps play, the microphone, or both mixed, even with the phone locked in your pocket.
• Pins that float above every app: move, resize and turn them, lock them in place, let touches pass through, tuck them into the edge, or keep one live to watch a timer or a download.
• Read it: text and every common barcode, on the phone, in more than 50 languages. Copy a line, open a link, translate it, or pin it as a note.
• Mark it up: pen, marker, pixelate and a colour picker.
• Long snaps that scroll themselves: Lasso scrolls the page and stitches it into one image.
• Record a region of the screen, with the microphone, the system's audio or both, or as a GIF.
• Live captions and transcripts, translated on the phone if you like, and Translate Call: an interpreter for your calls, both ways.
• One library for snaps, recordings and calls, searchable by what was on screen or what was said, with favourites, folders and Face ID lock.

Why it's different

• It snaps from a frozen frame drawn by the GPU, so nothing moves while you choose and it's instant.
• Nothing of Lasso's runs in SpringBoard until you use it. Text and speech engines start when you need them, then quit and give back their memory.
• No Activator or other tweaks needed. It uses the buttons and gestures your iPhone already has.
• Your snaps and recordings stay on your phone. Reading and transcribing happen on the device, and so does translating captions, transcripts and calls; your snaps and recordings go only where you send them. Translating a snap uses iOS's own Translate, which works offline with the languages downloaded in the Translate app.
• Shortcuts and Siri (iOS 16 and later): snap, record, pin an image, get the latest transcript, and more.

Works on iOS 15 to 26, rootless (Dopamine, palera1n).

Get it: havoc.app/package/lasso

More info: lasso.aadios.dev

Tethera is out on Havoc. It enables Personal Hotspot on your iPhone, with Apple's own switch and Wi-Fi password in Settings, and adds a page that shows what your hotspot is doing.

Personal Hotspot, as Apple made it

• Apple's own Personal Hotspot page in Settings: Allow Others to Join, your Wi-Fi password, Maximize Compatibility.
• Share over Wi-Fi with your laptop, tablet or another phone, or over USB or Bluetooth with a computer, as usual
• A shortcut on Tethera's page goes straight to Personal Hotspot in Settings.
• Turn Tethera off and the phone behaves exactly as before: the network changes it made are undone.

See what's happening

• Connected Clients: whether the hotspot is on, how many devices are connected and over what, how long it has been on and what it shares from, live.
• Hotspot data: what it carried this session, today, and over the last 7 and 30 days.
• The devices that joined in the last 30 days, which you can rename.

Join in a moment

• Join Hotspot shows the network name and password with a QR code another device can scan, and copies the password.

Turn it on and off your way

• Automatically off when no device has been connected for a while, when the battery runs low, or after a daily amount of data you choose.
• From Shortcuts, Activator or the app icon's quick actions, and from Control Center with the Tethera control (iOS 15 to 17, with CCSupport).

Choose what to share

• Share From: your cellular data (the default), the Wi-Fi network your iPhone is on, or a VPN running on the phone.
• With a VPN, the hotspot doesn't start while the VPN is down, so nothing leaves unprotected.

Light and private

• Optional Control Center control.
• Your traffic is never recorded or sent anywhere. The data totals and the device list stay on your iPhone, 30 days at most, and you can turn either off or clear them.

Good to know

• Tethera doesn't give you free or extra data, and your carrier's terms still apply: your carrier can see, count and charge for hotspot use.
• Shares over Wi-Fi, USB, and Bluetooth.
• Results vary by iPhone, iOS version and carrier.

Works on iOS 15 to 26, rootless (Dopamine, palera1n). Tethera is on the home screen, and in Settings up to iOS 17.

Get it: havoc.app/package/tethera

More info: tethera.aadios.dev

New: Ad Block

• Block ads and trackers inside apps and their in-app web views, for all apps or per app ("Block Ads" / "Allow Ads").
• Control Center toggle, and works alongside DNS blockers such as AdGuard.
• Filter lists (AdGuard DNS filter, Peter Lowe's List, StevenBlack hosts) downloaded on demand.

New: Hide Jailbreak (Dopamine)

• Automatically execute "Hide/Unhide Jailbreak" in Dopamine on a per-app basis.
• Tap a marked app to hide the jailbreak while you use it; it cold-launches the app and restores the jailbreak automatically when you leave.
• Please note that this may not work with all apps.
• Using "Unhide" will cause your jailbreak apps to become scattered across the home screen, so please use the backup feature in IconOrder.

New: Clean Jailbreak Traces (Dopamine) varClean

• Remove leftover jailbreak junk under /var that can make detection apps fail even after the jailbreak is removed. Review the list and delete only what you pick; updatable rules.

New: Per-app language

• Set a different language per app; the app keeps the system language everywhere else.

Improvements

• Hide/unhide are much faster (parallel app re-registration) and show the progress HUD immediately.
• Pull to refresh in Clean Jailbreak Traces.
• Blue switches throughout; larger Control Center icon.
• All 17 languages updated.

The Havoc team responded quickly, allowing us to release immediately.

Please feel free to leave a comment if you have any questions or feedback.

Horythia - Havoc Repo

https://havoc.app/package/horythia

Hi,

so I used the DelayOTA method to supervise my device and the install the appropriate profile from the known page.

My issue is that my iPhone and iPad (both on iOS 26) are showing me a main upgrade to iOS 26.7 and below that an upgrade to “iOS 27”. The latter does not specify the iOS 27 version.

What are your devices offering you? because iOS 27 could end up being the latest iOS 27.2 since it does not say 27.0. or 27.01

Edit: A few days ago there was only a profile for iOS 27.0. Now that iOS 27.2 is out, a profile was added for 27.0.1. If you want to see iOS 27.0.1 offered as Software Update, you need this new profile. But somehow it‘s only valid for 30 days instead of 40+.

Hi, I know people are sick of people asking questions like this, but I’m completely new to this, so I apologize greatly. But I want to know for certain if nugget iOS works on iOS 26.6. I mainly care about the wallpapers. Another question is do u recommend me to do this on my main phone? Can I permanently brick it if I do it wrong or no. Thank u greatly guys 🙏

There is a setting called "Background Security Improvements" hiding far away from the software update area, under Settings -> Privacy & Security, near the bottom of the list. This setting is described as "provide additional protection to your iPhone in between software updates". This setting started appearing after 26.0.1 and it seems we should turn this off if we are sitting on a particular iOS version hoping for a jailbreak.

I do have some questions about this setting.
1) Does the TVOS profile prevent it from operating?
2) Does the DNS update blocker prevent it from operating?
3) Is there any way to find out if any updates have been pushed out this way?
4) Is there any way to detect if your particular device has one of these updates?

my device is currently on iOS 26.6.1RC and I was trying to prepare it for delayOTA to 27.0.1 potentially depending on the news we receive about the potential upcoming jailbreak, but there was a problem. CowabungaLite would crash on my MacBook Pro as soon as I connected my phone. it would open and seem to function fine without the device connected, but as soon as I plugged in my phone it would crash every time. since it doesn't support iOS 26 technically, I'm guessing this was because of a handshake issue because of the instant nature of the crash.

Nugget however does not have this issue, and doesn't require a device wipe like Apple Configurator or iMazing does.

so here's the step by step if anyone needs it like I did:

1. Download either the EXE for windows or DMG for Mac from LeminLimez GitHub and install it
2. disable FindMy in settings
3. open Nugget, go to Settings on the program, check "Enable Supervision," and click apply. device will restart.
4. open Safari on your device, and download the delayOTA profile you need from Rambling's GitHub
5. check in Settigs-General-Software Update and confirm that the iOS you wish to update to later is shown as available, and go ahead and update to that.

----------

OPTIONAL THINGS THAT IM DOING:

im not updating right now, I just want the process ready to go when info comes, so I downloaded the TvOS beta profile to block any updates and re-enabled FindMy while I wait. now I can't accidentally update to a newer iOS or have one randomly pushed in the middle of the night like I've read happens to some people. I also have left the phone in Supervised mode because the delayOTA profile requires it to be able to actually work. I'll remove the TvOS profile before updating using the delayOTA profile.

----------

6) head back into Nugget, uncheck Supervise Device, and restart your phone.

7) turn FindMy back on

hope this helps someone out facing the same issue I did with CowabungaLite

?

I made FlickKey for rootless iOS 17. Flick a key to type its secondary number or symbol without switching keyboard layouts. Includes character hints and a numbers-and-symbols-only option.

Tested on my iPhone 13 mini running iOS 17.3.1.

Available on Havoc.

CamHop is out on Havoc. It makes the webcam and microphone of your Mac or PC your iPhone or iPad's own, live over Wi-Fi. Open a link on the computer, type the PIN, and the Camera app, FaceTime, video calls and every other app see your computer's camera. Nothing to install on the computer.

Connect in seconds

• Switch on Desktop Camera, and Desktop Microphone for the computer's sound too.
• AirDrop or copy the link to the computer, or scan the QR code. It opens in Chrome, Edge or Safari with your iPhone filled in.
• Type the six-digit PIN the iPhone shows, and you're live.
• Another phone or a tablet can be the camera too: open the link in its browser.

Your camera, in a browser tab

• Pick the webcam and microphone, see the picture before you connect, and switch either while live.
• Up to 1080p, or 720p and 480p for slower Wi-Fi.
• Sound tuned for voice, or high quality for music.
• Mute or pause in one click, with the connection's speed and frame rate live.

You choose where it goes

• Replace the front camera, the back camera, or both.
• Keep the iPhone's own camera in the apps you pick.
• Choose which apps hear the computer's microphone, alone or mixed with the iPhone's.
• Fill, fit or stretch, rotate, mirror, zoom and pan.
• The Preview shows exactly what apps receive.

Back in one tap

• Return to the iPhone's camera and microphone from Control Center, a floating button, or both volume buttons together. The computer stays connected, so switching back is instant.

Why it's different

• No app on the computer. It's a browser tab: any Mac or PC with Chrome, Edge or Safari.
• Private, and on your Wi-Fi: picture and sound go straight from the browser to the iPhone, encrypted. They never pass through a server.
• A PIN for every computer, one computer at a time.
• Works without internet: the iPhone serves the page itself.
• Live cameras only: CamHop carries a live camera from your own computer. No video files, photos, screen mirroring or overlays.
• No account, no tracking.

Works on iOS 15 to 26, rootless (Dopamine, palera1n), iPhone and iPad. Settings are in CamHop's app on the home screen, and in Settings up to iOS 17.

Get it: havoc.app/package/camhop

More info: camhop.app

Hey guys, I'm Carter, and I'm really excited to show you my tweak, CarterEQ! Thanks to everyone who checked out Mountaineer, you all were awesome.

CarterEQ is an equalizer for everything your iPhone plays: Spotify, Apple Music, YouTube, TikTok and games, on the speaker, AirPods or wired headphones. No per-app setup, you just turn it on and everything sounds the way you want.

What you get

• 10-band graphic EQ with a preamp, plus 12 built-in presets (Bass Boost, Vocal Boost, Spoken Word…) and your own saved presets
• Compressor, headphone crossfeed and a 0 dB limiter so boosting bass doesn't clip
• Floating EQ chip on the Home and Lock Screens: tap it for the full panel with a volume slider and live meters (optionally in apps too)
• iPhone 15 Pro and later: hold the Action button to flip the EQ on or off
• A CarterEQ app, a Settings pane and a cartereq command for the terminal crowd

Built to stay out of the way: the audio thread only does the DSP, and a flat curve passes audio through untouched. Screen recordings with the EQ on and off showed the same 60 fps and no audio dropouts.

Honest notes

• Tested on iOS 16.3.1 (iPhone 14 Pro Max) and iOS 17.1 (iPhone 15 Pro Max). iOS 15 should work but I haven't had a device on it.
• On iOS 17 the EQ usually attaches by itself; if the sound doesn't change, the app's Enable System EQ button fixes it in one tap. EQ Status tells you whether it's running.

• Run one system-wide EQ at a time.

• Price: $0.99 one-time (also in the CarterWare Tweak Pass). One purchase covers up to 3 devices.

• Works on: Dopamine rootless, iOS 15–17

• Repo: https://tweaks.carterware.net/

• Page + guide: https://tweaks.carterware.net/cartereq.html

Buying: add the repo in Sileo, tap Buy, sign in with your email, pay through Stripe checkout. If anything breaks, Settings → CarterEQ → Report a Bug fills in your version, iOS and device for you. I read every single one.

I hope you guys enjoy it! I'll be in the comments, so ask me anything.

I feel like recently its just a competition of who is worse at reading comprehension.

(Bit of a shitpost but GAWD my feed is filled with should i update when there are literal flowcharts made for this exact purpose)

[ Removed by Reddit on account of violating the content policy. ]

Hi, Thanks to your support, I have been able to release PrimalFolderPro.

For those who are not yet familiar with the feature, I will provide a brief explanation.

Compatibility

• iOS 14–26 (iPhone and iPad)
• Supports rootful, rootless, and roothide (packages for roothide are handled separately)
• IconOrder is required (it will be installed automatically)
• Includes the features of PrimalFolder 2, Bolders Reborn, and FolderX; please remove these before installation

Key Features

• Bigger folders: 4x5 on iPhone, 5x6 on iPad
• Five folder icon styles: default, TapTapFolder (first app large), app icon, 2x2, or hidden
• Exsto menu: long press a folder to open a circular menu and launch an app without opening the folder
• Colors for folder names, app names, folder icons and the folder background

The beta version is available until the deadline of November 11.

The price is $2.99

Please check the Havoc page for more details:

PrimalFolderPro - Havoc Repo

https://havoc.app/package/primalfolderpro

Good evening! Does anyone know of a GPS spoofing app that works on iOS 18? GPS Master by Joe Bruce hasn’t been updated and doesn’t work on iOS 18. Thanks!

Just updated to iOS 27.0.1 and still the same.

At least the flags at the button have survived.

I want to jailbreak the „old“ iPhone from my mother with 27.0.1. installed on it but I want to factory reset it first.

Will it automatically update to 27.2. during the process?

Haven’t been around since the unc0ver days and super out of the loop on jailbreaking but why do people want to jailbreak?

I get the broad appeal of having pure access to your device and being able to tweak things but can you guys give me specifics? Why do you really want to jailbreak? What is something you’re missing right now that you will get? Is it anything in particular?

Hey Reddit! I’m a guy from Russia named Andrey, and I’m 17. I’ve recently become really keen on the idea of ​​running NetBSD on my old iPhone 6s. How can I go about doing this? I’m aware of how to boot Linux using checkm8, but this is a bit different—it’s actually for a bet with a friend. I have one year to get NetBSD running on the iPhone. As for tools, I have an old 2007 Mac mini and a 2010–2011 Mac mini, and I’ll soon have a DCSD cable for UART access and "purple mode." Please help me out, Reddit community! Much love to you all—peace to everyone!