Blog Archives

How to Jailbreak iPhone 4, 3GS on 4.2.1 with PwnageTool & Unlock with Ultrasn0w

iOS hacker Nadeem Ateyeh has released PwnageTool Bundles for iPhone 4 and iPhone 3GS to jailbreak the device on iOS 4.2.1 without upgrading its baseband. This is an untethered bundle for use with PwnageTool to create custom iPSW preserving the Baseband and also booting untethered and Jailbroken. Ultrasn0w unlockers can use these bundles for later unlocking it using iPhone Dev Teams ultrasn0w tool.

 

How to Jailbreak iOS 4.2.1 iPhone 4, 3GS using PwnageTool

Requirements:

  • Download PwnageTool 4.1.3 for Mac
  • iOS 4.2.1 original firmware of your device saved on your computer
  • iTunes 10.1.2 installed on your Mac

Modifying PwnageTool

Step 1: Download PwnageTool bundle (via) for your iPhone 4 device. Extract the .zip folder, and copy iPhone3,1_4.2.1_8C148.bundle (for iPhone 4) oriPhone2,1_4.2.1_8C148a.bundle (for iPhone 3GS) to your desktop.
Step 2: Download PwnageTool 4.1.2 and copy it to your desktop. Right click, and then click on “Show Package Contents”
Step 3: Copy the .bundle files to PwnageTool.app/Content/Resources/FirmwareBundles/

Step 4: Copy info.plist goes inside PwnageTool.app/Content/Resources/CustomPackages/CydiaInstaller.bundle/   (IMPORTANT IF YOU WANT CYDIA IN YOUR IPSW)

Building a Custom Firmware

Step 1: Launch latest version of iTunes 10.1.2 and sync your iPhone 4 with your Mac for backup.
Step 2: Double click to start PwnageTool. Click Ok, if prompted with a warning. Click to select Expert Mode from the top menu bar and then select your iPhone 4 or 3GS. Click Blue arrow button at the bottom right to continue.

Step 3: Click the Browse for IPSW… button and then select your firmware from the Pwnage folder (refer Step 2).

Step 4: You will be prompted to select one of the option from following window. Select General then click the blue arrow button to continue.

Step 5: Under General settings “DO NOT” check Activate the phone. This bundle supports legit activation only

Step 6: Now the Cydia settings window will allows you to create custom packages. Double click any of the packages to select. For example, double click on OpenSSH, it will then appear under Select Packages tab.

Step 7: Click Select Packages Tab and then select OpenSSH as shown in the screen below.

Step 8: You are now ready to begin the pwnage process! Click the Build button to select it then click the Blue arrow button to begin.

Step 9: PwnageTool will now create the custom .ipsw file for your iPhone. You will be prompted to save custom .ipsw firmware file. Save it to the desktop. It might take 10-15 minutes for building custom firmware.

Step 10: Now its time to restore your iPhone 4 or iPhone 3GS to this custom firmware iOS 4.2.1.

  • Click on your phone icon from the sidebar in iTunes.
  • Press and hold left “alt” button (“Shift” button on Windows) on the keyboard and then click on “Restore” (Not “Update” or “Check for Update”) button in the iTunes
  • Now, release the “Shift” button.

Step 11: iTunes will now prompt you to select the location for your custom firmware 4.2.1 Once your iPhone 4 / 3GS is successfully in DFU mode.

Step 12: Once In iTunes, hold the Alt/Option key and click Restore.

Step 13: Now select the custom IPSW that was created and click the Choose button. Wait for a while till iTunes installs the new firmware 4.2.1 on your iPhone. After the installation is done, iPhone 4 or iPhone 3GS will restart automatically. You have now successfully jailbroken iPhone running iOS 4.2.1.

Step 14: After jailbreaking iPhone 4 / 3GS on iOS 4.2.1, you can now restore all your settings, apps, contacts and photos to the newly installed firmware version iOS 4.2.1 by restoring the backup that you made in Step 1 from iTunes.

How to Jailbreak iPhone 4 (1.59.00 Baseband) on 4.2.1 with PwnageTool & Unlock with Ultrasn0w

Untethered iPhone 4 PwnageTool Bundle (unofficial) has been released that will jailbreak your iPhone 4 on iOS 4.2.1 without upgrading its baseband. This is an untethered bundle for use with PwnageTool to create custom iPSW preserving the Baseband and also booting untethered and Jailbroken. Ultrasn0w unlockers can use these bundles for later unlocking it with ultrasn0w tool.

 

How to Jailbreak iOS 4.2.1 iPhone 4 using PwnageTool

Requirements:

  • Download PwnageTool 4.1.3 for Mac
  • iOS 4.2.1 original firmware of your device saved on your computer
  • iTunes 10.1.2 installed on your Mac

Modifying PwnageTool

Step 1: Download PwnageTool bundle (via) for your iPhone 4 device. Extract the .zip folder, and copyiPhone3,1_4.2.1_8C148.bundle to your desktop.
Step 2: Download PwnageTool 4.1.2 and copy it to your desktop. Right click, and then click on “Show Package Contents”
Step 3: Copy the .bundle files to PwnageTool.app/Content/Resources/FirmwareBundles/

Step 4: Copy info.plist goes inside PwnageTool.app/Content/Resources/CustomPackages/CydiaInstaller.bundle/   (IMPORTANT IF YOU WANT CYDIA IN YOUR IPSW)

Building a Custom Firmware

Step 1: Launch latest version of iTunes 10.1.2 and sync your iPhone 4 with your Mac for backup.
Step 2: Double click to start PwnageTool. Click Ok, if prompted with a warning. Click to select Expert Mode from the top menu bar and then select your iPhone 4. Click Blue arrow button at the bottom right to continue.

Step 3: Click the Browse for IPSW… button and then select your firmware from the Pwnage folder (refer Step 2).

Step 4: You will be prompted to select one of the option from following window. Select General then click the blue arrow button to continue.

Step 5: Under General settings “DO NOT” check Activate the phone. This bundle supports legit activation only

Step 6: Now the Cydia settings window will allows you to create custom packages. Double click any of the packages to select. For example, double click on OpenSSH, it will then appear under Select Packages tab.

Step 7: Click Select Packages Tab and then select OpenSSH as shown in the screen below.

Step 8: You are now ready to begin the pwnage process! Click the Build button to select it then click the Blue arrow button to begin.

Step 9: PwnageTool will now create the custom .ipsw file for your iPhone. You will be prompted to save custom .ipsw firmware file. Save it to the desktop. It might take 10-15 minutes for building custom firmware.

Step 10: Now its time to restore your iPhone 4 to this custom firmware iOS 4.2.1.

  • Click on your phone icon from the sidebar in iTunes.
  • Press and hold left “alt” button (“Shift” button on Windows) on the keyboard and then click on “Restore” (Not “Update” or “Check for Update”) button in the iTunes
  • Now, release the “Shift” button.

Step 11: iTunes will now prompt you to select the location for your custom firmware 4.2.1 Once your iPhone 4 is successfully in DFU mode.

Step 12: Once In iTunes, hold the Alt/Option key and click Restore.

Step 13: Now select the custom IPSW that was created and click the Choose button. Wait for a while till iTunes installs the new firmware 4.2.1 on your iPhone. After the installation is done, iPhone 4 will restart automatically. You have now successfully jailbroken iPhone running iOS 4.2.1.

Step 14: After jailbreaking iPhone 4 on iOS 4.2.1, you can now restore all your settings, apps, contacts and photos to the newly installed firmware version iOS 4.2.1 by restoring the backup that you made in Step 1 from iTunes.

Jailbreak iOS 4.2.1 with Greenpois0n RC5_2 on Mac OS X Leopard

Many iPhone users are finding hard to untether jailbreak on iOS 4.2.1 using Greenpois0n 1.0 RC5, to run on Mac OS X 10.5.x. The Greenpois0n tool open and then close immediately. It is because GreenPois0n RC tries to call version 6.0.0 of libcurl.4.dylib, but gets 5.0.0 in return. Due to this the application closes out immediately. Follow the simple steps listed below to make the jailbreak run on Mac OS X Leopard.

How to make GreenPois0n RC5_2 work on Mac OS X Leopard 10.5.x

Step 1. Download this filelibcurl.4.dylib v6.0.0
Step 2. Extract the file in your downloads folder.
Step 3. Launch Terminal.app
Step 4. Type: sudo rm /usr/lib/libcurl.4.dylib
Step 5. Enter password and hit enter.
Step 6. Type: sudo cp ~/Downloads/libcurl.4.dylib /usr/lib
Step 7. Close Terminal.app and launch greenpois0n.app

 

Geohot Has Untethered Limera1n for iOS 4.2.1 / 4.3 and Limesn0w to Unlock iPhone 4?

Veeence, was able to held an interview with Geohot -the well know smart hacker- via the irc chat, they talked about some major items concerning the unlock and jailbreak for all iOS devices running iOS 4.2.1, now let’s see this amazing interview after the jump.

Veeence: are u the real geohot?
Geohot: yes
Geohot: i think im real
Veeence: heh
Veeence: what function called sony’s downfall of the ps ?
Geohot: fail over st0rming
Geohot: 😀
Geohot: ill be back
Veeence: stay
Veeence: just leave the room lol
Geohot: 😀
Geohot: even if im mr hotz ?
Veeence: yeah
Veeence: i dont care what those haters say
Veeence: you’ve only done good for me
Geohot: 😀
Veeence: and them in fact, i dont see their problem personally
Geohot: di dont care im in germany right now
Geohot: -d
Geohot: on vacation
Veeence: sweet
Geohot: after all this trouble
Veeence: hows the court case going?
Geohot: media …
Geohot: all fine
Veeence: chances?
Geohot: 100%
Veeence: awesome
Geohot: i didnt agree to any sony terms
Geohot: so what ?
Geohot: just becasue i own a ps3 ?
Veeence: haha true
Veeence: if you never registered on psn then there’s nothing they can do right?
Veeence: how have the dev team been with you about the whole limera1n exploit stuff and releasing it before them?
Veeence: which i only see as a good thing because SHAtter doesnt work with gs according to posix
Geohot: sorry im busy right now
Veeence: ok no worrys
Geohot: i got about 100 querys
Veeence: haha yeah i bet heh
Veeence: yes/no questions only then? heh
Geohot: r u on saurik irc ?
Veeence: yeah
Geohot: ok
Geohot: lets continue this interview
Veeence: ok
Geohot: will u pusblish it ?
Geohot: somewhere ?
Veeence: if you want me to
Geohot: do i need to be careful what i say ?
Veeence: your choice entirely
Geohot: i have enough trouble
Veeence: ok
Veeence: i wont publish then
Geohot: why are you interested
Geohot: about dev team and geohot relation?
Veeence: i’ve heard everyone’s side of the story apart from yours
Veeence: in think most people have
Veeence: not heard your side
Geohot: no one asked
Geohot: 😀
Veeence: and then people base their opinions on that
Veeence: haha
Veeence: well here’s me asking
Geohot: i think some people was mad on me
Geohot: after i released limera1n
Geohot: thats becasue i didnt announce it
Geohot: nowadays people announce
Geohot: on xmas
Geohot: on sunday
Geohot: on january
Geohot: after 4.1
Geohot: 😀
Veeence: heh
Veeence: are you gonna release your iBoot exploit onto 4.3 ?
Geohot: and if i would release right now
Geohot: again all people would be mad on me
Geohot: of course not why should i ?
Geohot: as long people develop stuff i dont need to waste it
Geohot: the time for my exploit will come
Veeence: ok
Veeence: when do you think the time will come? im not asking months im asking criteria
Geohot: btw i got a 4.3 b1 untethered running over here
Veeence: niiice
Veeence: any shots of it?
Geohot: 😀
Geohot: yes i have some but i didnt upload them and i wont send anything from here
Veeence: ok
Geohot: the time will come very soon
Veeence: we talking weeks or months?
Geohot: apple did lot of integrity and software checks to firmwares
Geohot: soon it wont be possible to flash any custom ipsw
Veeence: or is this an apple “white iphone…coming soon” soon?
Veeence: really?
Geohot: well
Geohot: soon
Geohot: 😀
Veeence: haha ok
Geohot: u know this ?
Geohot: http://limera1n.com/
Geohot: u know that ?
Geohot: http://limesn0w.com/
Veeence: i used it yeah
Geohot: its still empty
Veeence: yeah
Geohot: strange ? isnt it
Veeence: haha
Veeence: oh
Veeence: soon?
Geohot: what if there will be a download ?
Geohot: yes
Veeence: interesting
Veeence: for iphone 4?
Geohot: no
Veeence: ok
Geohot: ALL APPLE FAMILY
Veeence: 😀
Geohot: okay my friend
Geohot: we had a nice talk
Veeence: we did
Geohot: i have to leave
Veeence: ok
Veeence: can i publish?
Geohot: feel free
Geohot: btw im not fake
Veeence: great thanks
Veeence: yeah i gathered that
Veeence: enjoy your holiday mate

Conclusion: If we suppose that this is the real Geohot, so it looks like Geohot has the Limera1n untethered jailbreak for iOS 4.2.1 and 4.3, and the big surprise is that he may has the unlock ready for iPhone 4 on higher basebands with Limesn0w, anyway we can’t confirm if this is the real Geohot or not, I will keep you informed with any updates.

iBooty: Upcoming 1 Click Tool To Boot Into Your Tethered Jailbroken iPhone/iPad/iPod Touch Running iOS 4.2.1 [video]

The jailbreak for 4.2.1 has been out for a while, and for most of you, its whats know as a “tethered” jailbreak. Meaning you need a tool to boot the jailbroken device back up overtime it loses power or needs a restart. There are a couple of ways to accomplish this, redsn0w or if you made your own custom firmware with a modified pwnage tool, tethered Boot tool and terminal/cmd.

 

Now theres another way. iBooty from iH8sn0w. We’re not entirely sure if or when this will be made public, but the tool is basically a 1 button boot tool. You just need to add a file to your device via AFC2, SSH, or iFile, then run iBooty whenever you need to boot into the jailbroken kernel. It supports multiple devices, and there is no need to look for firmware first to use it. Good for on the move or portable booting from a computer other than your own.

At the moment its a Windows only tool, and as far as we know its going to stay that way. Mac users will need to continue using redsn0w or the tetheredBoot tool.

Hopefully soon, the untethered jailbreak exploit will be made public, but until then….

Via FSM

 

HOW TO: Jailbreak iOS 4.2.1 Untethered with Redsn0w 0.9.7b1

As promised, the iPhone Dev Team has released the necessary jailbreak tools which can untether the latest iOS 4.2.1 jailbreak on iPhone 4, iPod touch 4G, and iPad. Old-generation iOS devices already have untethered jailbreak on iOS 4.2.1.

For those who don’t know, Apple has already patched the untethered patch in iOS 4.2.1 update so it becomes tethered jailbreak on new-generation devices mentioned above. Being tethered jailbroken means that once your iPhone is successfully jailbroken, you’ll need to connect your iPhone to your computer if you ever need to reboot your iPhone or your iPhone loses battery charge. The updates Redsn0w 0.9.7b1 brings untethered jailbreak for those devices on iOS 4.2.1.

Below is the full step-by-step guide to jailbreak your iOS device using Redsn0w 0.9.7b1 and get untethered jailbreak immediately.

STEP 1: First of all, you have to jailbreak your iOS 4.2.1 device using Redsn0w by following the step by step instructions posted here.

STEP 2: Once jailbroken, tap on Cydia and check if your 4.2b3 SHSH blobs saved or not. You should see “SHSH: 4.2b3” in the status.

STEP 3: Now download Redsn0w 0.9.7b1 from the links given below and connect your iPhone, iPod touch or iPad.

STEP 4: Since this is a beta release, you must have usbmuxd that can be download from here. Now start terminal in python-client directory then type in the following commands:

 

chmod +x tcprelay.py

./tcprelay.py -t 22:2222

 

STEP 5: Now start Redsn0w 0.9.7b1 and point it to the official iOS 4.2.1 .IPSW file.

 

STEP 6: In the next page, check on Jailbreak Monte which untethers your iOS 4.2.1 jailbreak then point it to iOS 4.2 beta 3 firmware.

STEP 7: Final step is to put your iOS device in DFU Mode using Redsn0w instructions on the screen.

Finally, sit back and let Redsn0w go in bunch of steps and you’ll finally get untethered jailbreak on your new-generation iOS device.

Please note that this is a beta release, and upcoming versions will bring support for Windows users and will have built-in usbmuxd for easy process.

 

Cydia Now Saving iOS 4.2.1 SHSH Blobs for Untethered Jailbreak Today ! Get Ready !

Earlier today, Cydia started saving SHSH blobs of iOS 4.2.1 on new-generation devices only since I couldn’t see the SHSH blobs on my iPhone 3G but it’s been saved on iPhone 4. This happens because you’ll get the untethered jailbreak after few hours !

 

This may be useful to get the untethered jailbreak. To save SHSH blobs of iOS 4.2.1, just tap on Cydia from your new-generation iOS device and hit on the Make my life easier button to save your blobs immediately.

For those who don’t know, the iPhone Dev Team will release untethered Redsn0w 0.9.6b7 jailbreak for iOS 4.2.1 or what’s known by the backup plan today. We’ll of course be posting this as soon as it’s available for download and will be back with full how-to guides quickly. Stay tuned !

%d bloggers like this: