Tech Info

What is it?
A cross-platform jailbreaking, unlocking, and customizing tool for iPhones and iPod touches. Customizations include boot logos, recovery logos, and “verbose” boot. It's a standalone program that doesn't use iTunes (no custom IPSWs are involved).
The download links are at the bottom of this page (but please read the whole page anyway!).
We've been offering redsn0w in various incarnations over the years (including poorlad's Windows version of QuickPwn). The most recent release before this one was redsn0w 0.8, which targeted Apple firmware 3.0/3.0.1.
What devices, platforms, and FW versions are supported?
This release supports:
All iPhones and iPod touches (still a tethered-only JB for late-model devices though)
Apple firmware 3.0 and 3.1.2
Windows and Mac OSX (x86)
It will also soon run on the PPC OSX, and Linux platforms.
If you need a carrier unlock, redsn0w will handle iPhone 2G by itself (by installing our BootNeuter utility). For the 3G and 3GS, use Cydia after you're jailbroken to install ultrasn0w (baseband 04.26, preferred) or blacksn0w (baseband 05.11).
How is it different from PwnageTool?
redsn0w doesn't require a system restore like PwnageTool does (it doesn't even use iTunes at all). On the other hand, PwnageTool can prevent your baseband from being upgraded when you upgrade your firmware, preserving your unlock. (redsn0w doesn't touch your baseband but it doesn't help preserve it during an upgrade either).
redsn0w works by modifying your current filesystem, so your existing baseband, data and applications should remain intact.
ADVICE: DO NOT USE REDSN0W AFTER DOING A STOCK APPLE UPGRADE TO 3.1.2 IF YOU NEED A CARRIER UNLOCK AND ARE CURRENTLY USING BASEBAND 04.26 OR EARLIER. The key part of that advice is “do not do a stock Apple upgrade to 3.1.2”. You really want to keep that 04.26 baseband on there because then you can keep using ultrasn0w. Ultrasn0w doesn't have the wifi issues that some people (10-20%) report when using geohot's blacksn0w unlock on 05.11. If you are at 04.26 or earlier, use a custom IPSW from PwnageTool to update your firmware to 3.1.2, or just stay at 3.0 and use redsn0w there (redsn0w and ultrasn0w work on both 3.0 and 3.1.2, but ultrasn0w needs baseband 04.26).
How is it different from blackra1n?
It differs from blackra1n because:
It offers custom logos and verbose boot
It installs Cydia, afc2, and the IPCC tethering hack without needing separate downloads. Because they're all installed in one go, redsn0w doesn't need the multiple levels of installs that blackra1n requires. (Update: the IPCC hack was pushed off to redsn0w 0.9.3 for beta testers, links are below also).
It uses our original Pwnage bootrom exploit for iPhone 2G, iPhone 3G, and iPod 1G. (Because it's a bootrom exploit, it can't be fixed by Apple without a new hardware release.) Note that redsn0w 0.9 does use the USB exploit for iPhone 3GS and iPod 2G+3G running 3.1.2, but that exploit will be fixed in Apple's next FW release.
What if I have a late-model device?
If you have a late-model iPhone 3GS, or if you have an iPod touch 2G whose serial number begins with “MC”, or any iPod touch 3G, you can use redsn0w to jailbreak but you are currently restricted to “tethered” rebooting. That means you need to connect your device to a computer to complete the boot after a reset. Also, these devices cannot have custom logos.
redsn0w will ask you whether or not you fit in this category when used with the iPhone 3GS or iPod touch 2G+3G. If you have a late-model device and don't give redsn0w the correct answer, you will likely need to do a system restore to recover from the mistake.
To do a tethered boot after your late-model device resets for some reason, either run redsn0w again and select “Just boot tethered right now”, or run blackra1n.
What if I'm already jailbroken?
If you're already jailbroken (by whatever means), redsn0w can still be used to change your boot logos, revert back to the stock logos, or switch verbose booting on and off. By selecting “Already Pwned” you can bypass the steps normally needed to enter the jailbroken state.
What is the IPCC tethering hack?
It allows you to install cellphone Carrier Bundles that aren't officially signed by Apple. This lets you, for instance, install a Carrier Bundle that allows you to use your iPhone as a way to connect your PC to the internet (through your 3G cell connection). This hack is always installed on 3G and 3GS phones by redsn0w 0.9.3 (no selection is required). It isn't included at all in 0.9.2 (it's still in a trial phase). Note that carriers may not like you tethering behind their back so you do so at your own risk.
For some excellent info on Carrier Bundles vs. mobileconfigs, along with a great generator, see http://www.volkspost.info/ipcc_fw3 (and talk about it here). The hack itself is detailed in the 2nd topic on this page. Another generator is available at http://www.benm.at/help/help.php .
How long should it take
You should see a picture of a drive (“Downloading Jailbreak Data”) within 30 seconds of launching the jailbreak (after you've made your custom selections). It should then reboot and you should see a running pwnapple while the process is underway. It should finish within a minute or two after that, and will reboot on its own.
Is it safe?
The Windows version has been tested by small groups of volunteers on IRC and our blog since mid-January. That being said, if things go wrong you may have to do a system restore…so make sure your data and pictures are synced before trying it.
Feedback
Please send any feedback to MuscleNerd (either gmail or iphone-dev.org), or tweet with a #redsn0w tag. Please detail your device, OS, and any problem you find.
Download links

Mac OSX x86