Semi-untethered jailbreak for 9.3.5-9.3.6.
All 32-bit devices supported.


bash$ shasum -a 256 Phoenix5b.ipa a7c8f604dbb04232851d3614b63743cb6f7548d78093395db4eb64eb255118fb Phoenix5b.ipa

Exploit by Siguza and tihmstar.
Special thanks to mbazaliy and qwertyoruiop.
Extensive contributions by jk9357.


  1. Download the IPA.
  2. Download Cydia Impactor.
  3. Connect your device to your computer.
  4. Start Cydia Impactor and drag the IPA onto the top field.
  5. Enter your Apple ID credentials.
  6. On your device, go to "Settings > General > Device Management" and trust the certificate.
  7. Run the app and tap on "Prepare For Jailbreak".
  8. Wait for it to respring, then launch Cydia from the Home Screen.
  9. Whenever you reboot, open the app again and tap on "Kickstart Jailbreak".
  10. Whenever the app expires, install it again with Cydia Impactor.

Exploit might fail a few times, if it does just try again.


If for whatever reason you need to manually specify offsets for 9.3.5/9.3.6, you can get the default ones here:

iPad 2/3, iPad mini, iPhone 4s, iPod 5g: A5
iPad 4, iPhone 5/5c: A6


v5b (29. Sep 2020)

v5 (23. Jul 2019)

v4 (7. Oct 2017)

v3 (8. Aug 2017)

v2 (7. Aug 2017)

v1 (7. Aug 2017)


If you'd like to throw money at your screen, we'd kindly ask you
to consider donating to a charity of your choice instead. :)

If you have no charities in mind, here are a few of our picks:
EDRi (EU) | EFF (USA) | LetsEncrypt |