LiberTV - Now liberating TvOS 11.0 and 11.1 on the ATV 4 and 4K

0. Before you get started:

MAKE SURE TO GET ONLY THE IPA AT THIS LINK! Though various "YaluJailbreak" websites, "JailbreakTV" and other middle men will surely try to mirror this - DO NOT USE MIRRORS. It is fine if they want to link to here, but this link here is the only official link.

Me, I don't care where you download from , but


IF YOUR TvOS Version is NOT 11.0 or 11.1 - sorry.
If you're 10.x, there's hope yet - I may backport at some point.
If you're 11.2 - I can't help you at the moment.

1. Sideloading

The LiberTV.ipa is an unsigned binary. This means you have to sign it yourself. You have two options at the moment:

The latter is actually easier to use. Grab the IPA , and then sign it with your AppleID. You are now ready to sideload. Doing so requires XCode, and is performed thus:

XCode "Window" → Devices & Simulators (also accessible by ⇧ ⌘ 2) gets you to here:

You select the LiberTV.ipa like so:

And let it load. Congratulations. You're ready to run

2. Running

This is foolproof. Believe me. One button, No options

If it runs correctly, you will get a note saying you can exit the app. So you can exit the app. (If you experience weird behavior, just background the app rather than exiting - it won't take any CPU anyway but will keep the process lineage intact)

3. SSH

Give LiberTV a couple of seconds AFTER the note to complete and set up the code signing bypass, and you can ssh to yourself - either over USB-C or (in the case of the 4k) over TCP/IP. YOU HAVE A DIFFERENT IP ADDRESS THAN SHOWN HERE:

4. In case this worked for you...

You're welcome. Some people have been asking to donate. Please do - but not to me. Pick any charity of YOUR choice, and donate them any sum of YOUR choice. If you want to spread the good karma, post a screenshot (details redacted, whatever) with a #LiberTV.

4b. If it doesn't...

Then tell me about it through The forum. It won't help to bitch on Reddit since I won't know. And it certainly won't help on Twitter where I can't follow dozens of notifications! This JB should be rock solid though, since it is not only kernel-patch-protected region free, it also does only the bare minimum to get task ports, and continues in user mode from there.

5. Future work

Remains, most notably to allow arbitrary injection. I intend to put that out for LiberiOS (a universal JB coming up as well), and then put it into LiberTV as well. Hence, use only the official link and please watch this page.



12/25/17 - Added AppleTV 5,x for 11.0. Sorry about that. My oversight. Had to correct "Darwin17.2" to "Darwin17." to get all versions..
1/31/18 - 11.0.3 - with bug fixes, immortal amfidebilitate, HSP4 settable as an option, and fixes AppleTV 4k offsets.. and restores topshelf image

Enjoy! Happy Holidays, everyone!

And - if you actually read till here, thank you :-) So here's The download link for 11.0.0
For the brave: 11.0.3 - with bug fixes, immortal amfidebilitate, HSP4 settable as an option, and fixes AppleTV 4k offsets.. and restores topshelf image

[root@Qilin libertv]# openssl sha1 LiberTV11.0.3.ipa 
SHA1(LiberTV11.0.3.ipa)= 1b0f469c1e4f9c859a9109a9700163b99dbfffea
[root@Qilin libertv]# md5sum !$ 
acfdb2a0f3907b3afd5a94d8d0ea9b19  LiberTV11.0.3.ipa