The latest manufactured iPhone 3GS devices seem to contain new bootloaders, which can not be compromised using the 24k bug. Although Musclenerd of the iPhone Dev Team paints a dark future, Mathieu Hervais expects that there are still ways thru the chain of trust in order to jailbreak.
P.S. To find out which Bootrom your iPhone got, just get yourself a Mac and check system profiler while your iPhone is in DFU mode.
Update July 5th, 2009: GeoHot now also provides a Mac OS X version of the jailbreak tool. Windows and Mac versions ready for download at purplera1n.com…
That’s it with the 3.0 firmware and the iPhone jailbreaks. Apple has been beaten again. This time by GeoHot. Although the iPhone Dev Team seems to have their programs already prepared they preferred to wait with the release of an updated PwnageTool. GeoHot did not wanna wait and decided to release a Windows based jailbreak tool for the iPhone 3Gs called PurpleRa1n.
Status
All three iPhone generations can now be activated, jailbroken and unlocked with the current firmware 3.0. Currently for the iPhone 3Gs there is only a Windows version available that is under strong beta testing. Anyway you can give it a try. The security whole that gets exploited in the iPhone 3Gs is well known as the 24k bug that has been found in january in the iPod Touch 2nd generations.
After jailbreaking, the iPhone Dev Team’s UltraSn0w should unlock your baseband.
Our recommendations
By now you know we are the conservative ones. We recommend: wait a couple of days. PurpleRa1n is still beta. But can hacks ever become stable? ;-)
More information to be found here:
» GeoHot accounces jailbreak for iPhone 3Gs…
» iPhone Dev Team confirm unlock of iPhone 3Gs…
» Get iPhone 3Gs jailbreak tool (PurpleRa1n.exe) here…
The release of the 3G unlock software (currently going under the name yellosn0w) is due to december 31., 2008. The unlock will currently only available for baseband version 2.11.07 or lower.
Between Chrismas and new year’s eve members of the team (planetbeing, MuscleNerd and pytey) will be giving a lecture about the security systems in both the iPhone 2G and 3G on the Chaos Computer Conference 2008.
Welcome to Berlin, guys. Enjoy the most interesting and inconsistent town in Europe, today :-)
I. Abstract
This is a short HowTo since all of you by now know how to use QuickPwn, don’t you? in short: QuickPwn is an Après-Tool. Means: you let iTunes 8 do the update process and use QuickPwn afterwards to “open” your device. Note:
Our article will not cover the iPod Touch, but the iPhone.
II. Requirements
III. Warning
Jailbreaking and unlocking is illegal to be performed with iPhone devices that are part of a current agreement (mostly 12 or 24 months). You would violate your contract by jailbreaking and unlocking! Don’t do it.
IV. Update iPhone firmware
shift-key (on your keyboard) and do a mouse-click on the Update Button – a file-open window will pop up like this:
iPhone1,1_2.1_5F136_Restore.ipsw) and open it
IV. QuickPwning it :-)
Device Detection screen, click the right-arrow to proceed:
click the Browse button to locate your iPhone1,1_2.1_5F136_Restore.ipsw firmware:
click the right-arrow):
Cydia and Installer.app. If your iPhone has not been unlocked until now, here you can also choose to simunlock it. As we are quite conservative: we never change the boot logos, but this seems to be a matter of taste. After having selected, click the right-arrow button to proceed.
click the right-arrow button to proceed
After having rebooted your iPhone will be perfectly jailbroken and unlocked
V. Final words
Guys, we hope we could clarify some more things here than others did. We appreciate your comments on this. Kudos to all of you and remember to consider our sponsors, they really got the coolest offers ;-) Kudos fly out to the iPhone Dev Team! Live long and prosper, guys.
Our fellow iPhone Dev Team yesterday finally released QuickPwn for MacOS X. Sadly the Dev Team in the first place only provided a .torrent link (get torrent here) for distribution. We will come up with further details soon. For now: there are no reports about bugs about this version for Mac ,yet. Use “Archive Utility” to unpack, otherwise permission may be screwed up. Thumbs up for the Dev Team.
SHA1 sum: QuickPwn_1.0.0.tbz (via torrent) = 22ee0d6814a6bac9b1b9a8c7715dd714bd6bb449
[Update] Download QuickPwn 1.0 for Mac from these mirror locations now: RapidShare and iPhone-Hacks.com.
The Microsoft Windows division of users can be glad again. WinPwn 2.0 has just been released by its creator and maintainer CMW. It features activating, jailbreaking and unlocking iPhone 2G and activating and jailbreaking of iPhone 3G.
Because of the overwhelming demand for a Windows version of Pwnage, the website http://www.winpwn.com is currently not easily available. Anyway you can try to download WinPwn 2 here.
Kudos fly out to CMW, standing work :-)
Article is outdated. Find newest Jailbreak and Unlock HowTo for iPhone Firmware 3.0 here.
Note
We need to stress: respect the laws of the country you live in. For instance as german citizen with a T-Mobile Germany plan and iPhone you are not allowed to jailbreak or unlock your iPhone. T-Mobile is not kidding in this topic, as we’ve all seen with the sipgate sue (we reported here). This tutorial is in no way meant as an invitation to do things that are in violation of your contracts. We cannot be held responsible for bricking your devices. You do everything at your own risk and responsibility. Thanks.
I. Abstract
Pwnage Tool 2.0 is the newest tool to unlock and jailbreak “old” iPhones (iPhone 2G) and jailbreak “new” iPhones (iPhone 3G). It is developed, maintained and provided for free by the iPhone Dev Team. The Dev Team already provided Pwnage Tool 1.0 (see recent tutorial here).
This tutorial is for Mac users only who previously activated and unlocked their iPhones using Pwnage Tool 1.0. The release of Pwnage Tool 2.0 has been delayed in the last few days because of several bugfixes and issues that occurred during latest test. As we’ve used Pwnage Tool 2.0 in the last hours on some old iPhones, we can say: in contrast to Pwnage Tool 1.0, we encountered some problems with Pwnage Tool 2.0. Keeping that in mind it is your own risk to prolly brick your iPhone. We cannot be held responsible for your actions.
II. Preparations
A Microsoft Windows version of Pwnage 2.0 has not yet been released. Get yourself a Mac, it really is time to switch :-)
You need to download and install a couple of programs
III. Fasten your seatbelts
Before taking off, we highly recommend to do the following preparations on your iPhone:
In case you didnot, we highly recommend you read our tutorial about activating and unlocking iPhones with firmware 1.1.4 (see here).
IV. Take off
…into the wide open world of unlocked and jailbroken iPhones.
click OK.
Expert Mode
click the blue arrow
Note: we encountered errors when browsing for the IPSW firmware that we manually downloaded several times:
We circumvented this error by letting iTunes download the firmware. But be careful let iTunes only download the firmware. Don’t choose download and install!!!
Cydia packages. We even leave the pictures the same.
OpenSSH, Cydia Installer, and Cydia's Source Set. These files will automatically become downloaded in the background.
Select packages you can check them, in case the packages are not pre-chosen for including into your custom IPSW. Then click the blue arrow again.
choose new logos. We recommend to leave these as they are and click the blue arrow again.
blue arrow again and can already smell the pwrn.
clicking No to search the web for them (we only show the 4.6 bootloader question, in fact there will be same question for the 3.9 bootloader).
save the custom IPSW file. It will show a picture similar to this:
After having chosen the target filename and folder, Pwnage will submissively begin its work.
At a specific point of work, Pwnage will require your admin password. This is due to a limitation of access to the filesystem.
wants to be quitted:
V. Approach for Landing
start iTunes (we have our iPhones connected!). And we choose the iPhone menu in iTunes (looks like this picture:)
hold the ALT key and press Restore Button. We will get a dialog, where we can choose our custom firmware:
VI. Baggage Claim Area
choose to restore your old settings (like eMail-accounts, calendar, photos, muzaq, and videos):
Continue you will see this picture. It depends on how many things you had saved on your iPhone and how much space it’s got. Our 4GB testmodel only took about 5 minutes to get all settings restored:
VII. Final words
Congratulations. You’re finished now. In case any of you got questions, don’t hesitate to ask below in our comments section. We hope you enjoyed this tutorial. Thanks for your attention. Big shouts fly out to the iPhone Dev Team. You guys simply rock our hearts…
Update 15.07.2008: iPhone 3G allegedly unlocked using SIM Adapter (read here)
Update 15.07.2008: XPwn command line utility released by iPhone Dev Team (read here)
Update 14.07.2008: Geohot confirms that iPhone 3G got a new bootloader (read here)
It is rumored, the Pwnage Tool for firmware 2.0 (= firmware 1.2) will not be released this weekend. Enjoy youself and don’t play around until we tell you.
Anyway the iPhone Dev Team has released a video of Pwnage Tool 2.0. See here:
empty line
Update July 20th, 2008: Pwnage Tool 2.0 has been released. Read our tutorial here.
Read german version below!
Deutsche Übersetzung hier entlang…
Ok it is time to do it. The elite is talking about it, so we’re gonna do it, pwn our iPhones and show you (hopefully) some hints you can’t read anywhere else.
start Pwnage (accept the question, if you really wanna start that app that you just downloaded from the net. As long as you loaded it from the location I provided above everything should be all right)Browse .ipsw (click to enlarge picture)
restore mode: plug the iPhone into the docking station (which is of course connected to your Mac), hold power-buttom (at the top) and the round button with the printed square (bottom, below the touch screen), keep holding until screen turns black (off) and on again – showing the Apple logo then, then release the power-button, but keep on holding the round buttron for some more seconds (maybe 10 or more). The restore mode picture will appear (click picture to enlarge)
iPwner, Pwnage Tool will report, that your iPhone is beeing pwned now. On the screen of your iPhone there will be loads of lines of commands running thru.
IPSW Builder
click ok
bootloaders (you should have copied them to your desktop!)click ok.save the whole custom .ipsw to your desktopadministrator's password
start iTunesalt key and choose restore, the following file dialog will appear
extracting the firmware“, “Preparing iPhone for restore” and “Restoring iPhone Software” – this will take some minutes
Say thanks to the iPhone Dev Team. This is standing work!!
We’d be glad to read your feedback about this “how to”: here in the comments (scroll down) or in this hackin0sh thread (link)…
Loading ...Ok Leute, es ist Zeit, das Ding zu rocken. Die Elite spricht drüber, also schauen wir uns das mal genauer an. Im Folgenden findet Ihr ein HowTo, das hoffentlich Hinweise enthält, die Ihr woanders so nicht lesen könnt
startet Pwnage (die Sicherheitsfrage, ob Ihr wirklich Pwnage starten wollt, müsst Ihr akzeptieren)Browse .ipsw (zum Vergrößern auf das Bild klicken)Restore-Modus: steckt das iPhone in die Dockingstation (die selbstverständlich mit Eurem Mac verbunden ist!), haltet den Power-Knopf (ganz oben) und den runden Knopf mit dem aufgedruckten Quadrat (der unter dem Touch-Screen), haltet die beiden Knöpfe solange, bis der Bildschirm schwarz wird (sich also ausschaltet) und wieder angeht und dabei das Apple Logo zeigt. Dann lasst Ihr den Power-Knopf bitte los und haltet nur noch den runden Knopf für einige weitere Sekunden. Wenn das Restore-Modus Bild erscheint, ist alles richtig gelaufen (zum Vergrößern auf das Bild klicken)iPwner-KnopfIPSW BuilderEnable baseband update, Neuter bootloader, Unlock baseband, Activate phone” und wenn Ihr wollt: “Use DevTeam custom pictures“, uns hat die angebissene Ananas nicht so recht gefallen (zum Vergrößern auf das Bild klicken)OK klickenOK klickenspeichert Ihr das "custom .ipsw" (die angepasste iPhone Firmware) auf Euren SchreibtischAdministrator Passwort, gebt es an, sonst geht es nicht weiterstartet iTunesalt Taste gedrückt und wählt wiederherstellen ausFirmware zu extrahieren, das iPhone für die Wiederherstellung vorzubereiten und die iPhone Software wiederherzustellenEin großen Dank solltet Ihr nun an das iPhone Dev Team richten. Die Arbeit von den Jungs ist einzigartig!!!
Über Feedback zu diesem Tutorial sind wir natürlich dankbar. Entweder unten als Kommentar (deutsch oder english) oder in diesem hackin0sh Thread (bitte nur in englisch).
Search Terms: deutsches HowTo, How To, german, Tutorial, Tut
Loading ...There has been a plenty of rumor about this new tool called “Pwnage”. But it seems like it’s right before becoming released within the next two weeks. The official iPhone Dev Team wiki pages indicate at least a delay of the release date. However a video has been released to Youtube showing how easy Pwnage works. The whole process of patching and completely unlocking via pre-modifying the bootloader seem to become more foolproof.
Features will include:
» See that amazing Pwnage video here…
» iPhone Dev Team Wiki here…
» How Pwnage works…
See how Pwnage works here:
Es gab ja schon einiges an Gerüchten über das neue Tool “Pwnage” und es scheint so, als würde es tatsächlich kurz vor der Veröffentlichung stehen. Die Foren der Welt berichten, dass es innerhalb der nächsten zwei Wochen soweit sein wird. Im offiziellen iPhone Dev Team Wiki finden sich jedoch keine genaueren Zeitangaben. Dennoch wurde vor einigen Tagen ein Video auf Youtube veröffentlicht, das zeigt, wie einfach Pwnage funktionieren wird. Der ganze Prozess des Patchens und Unlockens wird dank des vor-modifzierten Bootloaders erheblich einfacher werden.
Folgende Features wird Pwnage haben:
» Pwnage Video gibt es hier…
» iPhone Dev Team Wiki hier…
» Wie funktioniert Pwnage…