Semi-untethered jailbreak for 9.3.5-9.3.6.
All 32-bit devices supported.


bash$ shasum -a 256 Phoenix6.ipa d7e5e84e4081b6e138d2f3ed5bb68ff944164e7483a9962c32b08b37e57fa161 Phoenix6.ipa

Exploit by Siguza and tihmstar.
Special thanks to mbazaliy and qwertyoruiop.
Extensive contributions by jk9357.


  1. Download the IPA.
  2. Download Cydia Impactor.
  3. Connect your device to your computer.
  4. Start Cydia Impactor and drag the IPA onto the top field.
  5. Enter your Apple ID credentials.
  6. On your device, go to "Settings > General > Device Management" and trust the certificate.
  7. Run the app and tap on "Prepare For Jailbreak".
  8. Wait for it to respring, then launch Cydia from the Home Screen.
  9. Whenever you reboot, open the app again and tap on "Kickstart Jailbreak".
  10. Whenever the app expires, install it again with Cydia Impactor.

Exploit might fail a few times, if it does just try again.


If for whatever reason you need to manually specify offsets for 9.3.5/9.3.6, you can get the default ones here:

iPad 2/3, iPad mini, iPhone 4s, iPod 5g: A5
iPad 4, iPhone 5/5c: A6


v6 (22. Mar 2021)

v5b (29. Sep 2020)

v5 (23. Jul 2019)

v4 (7. Oct 2017)

v3 (8. Aug 2017)

v2 (7. Aug 2017)

v1 (7. Aug 2017)


If you'd like to throw money at your screen, we kindly ask you
to consider donating to a charity of your choice instead. :)

If you have no charities in mind, here are a few of our picks:
EDRi (EU) | EFF (USA) | LetsEncrypt |