diff --git a/README.md b/README.md
index ab08615..40441df 100644
--- a/README.md
+++ b/README.md
@@ -140,11 +140,13 @@ In a separate terminal, start iproxy tunnels:
 ```bash
 iproxy 22222 22222   # SSH
 iproxy 5901 5901     # VNC
+iproxy 5910 5910     # RPC
 ```
 
 Connect via:
 - **SSH:** `ssh -p 22222 root@127.0.0.1` (password: `alpine`)
 - **VNC:** `vnc://127.0.0.1:5901`
+- [**RPC:**](http://github.com/doronz88/rpc-project) `rpcclient -p 5910 127.0.0.1`
 
 ## All Make Targets
 
diff --git a/scripts/cfw_install.sh b/scripts/cfw_install.sh
index 0c8f88d..e062803 100755
--- a/scripts/cfw_install.sh
+++ b/scripts/cfw_install.sh
@@ -423,7 +423,7 @@ cp "$TEMP_DIR/vphoned" "$VM_DIR/.vphoned.signed"
 echo "  [+] vphoned installed (signed copy at .vphoned.signed)"
 
 # Send daemon plists (overwrite on re-run)
-for plist in bash.plist dropbear.plist trollvnc.plist; do
+for plist in bash.plist dropbear.plist trollvnc.plist rpcserver_ios.plist; do
     scp_to "$INPUT_DIR/jb/LaunchDaemons/$plist" "/mnt1/System/Library/LaunchDaemons/"
     ssh_cmd "/bin/chmod 0644 /mnt1/System/Library/LaunchDaemons/$plist"
 done
diff --git a/scripts/patchers/cfw.py b/scripts/patchers/cfw.py
index 29ca9d0..61b8b19 100755
--- a/scripts/patchers/cfw.py
+++ b/scripts/patchers/cfw.py
@@ -1018,7 +1018,7 @@ def inject_daemons(plist_path, daemon_dir):
     with open(plist_path, "rb") as f:
         target = plistlib.load(f)
 
-    for name in ("bash", "dropbear", "trollvnc", "vphoned"):
+    for name in ("bash", "dropbear", "trollvnc", "vphoned", "rpcserver_ios"):
         src = os.path.join(daemon_dir, f"{name}.plist")
         if not os.path.exists(src):
             print(f"  [!] Missing {src}, skipping")