Tech Info

PwnageTool 4.1.2 for Mac OS X (free of charge, blog ads, and donation requests — as always!). Today’s big new addition to the jailbreak family is AppleTV 2G, which was first shown jailbroken in its release week!

[Update: Version 4.1.2 should fix any issues that OS X 10.5.x users were seeing. You only need to run this version if you’re at OS X 10.5.x and were seeing Cydia errors]

ULTRASN0W UNLOCKERS BEWARE!! ULTRASN0W UNLOCKERS BEWARE!! The biggest mistake you can make (and it is a big one!) is lettings iTunes restore to the official IPSW — you’ll lose the unlock and won’t be able to go back! You must use Option-Restore, not just the Restore button by itself. Then navigate to your custom IPSW — not to the stock one! If you accidentally started a restore to the official IPSW, unplug your iPhone immediately before the restore gets to the “Updating Firmware” step!

Through a combination of the recently released geohot limera1n exploit , @comex’s recently released pf kernel exploit, and our original pwnage2 exploit, PwnageTool 4.1 4.1.2 works untethered on these devices at firmware 4.1:

AppleTV 2G
iPad (firmware 3.2.2)
iPod touch 4G
iPod touch 3G
iPhone4
iPhone 3GS
iPhone 3G
PwnageTool allows you to restore to a custom IPSW file. For instance, you can restore to a pre-jailbroken firmware while simultaneously maintaining your current baseband (and thus your ultrasn0w carrier unlock). You can also add whatever packages you want in the “Expert” mode of PwnageTool, if you wish to pre-install Cydia packages. iPhone 3G users get the additional benefit of selecting their own boot and recovery logos, and features like multitasking and battery charge percentage.

PwnageTool’s main advantage to ramdisk-based methods (limera1n, greenpois0n, redsn0w) is for unlockers — those that need to keep their current baseband and preserve their ultrasn0w unlock. But in this new age of both bootrom- and userland-based exploits, it’s an excellent platform for continuing the jailbreak through all future firmwares. More on this later! In the meantime, please enjoy this free software and please provide any usage feedback in our comment section below.

AppleTV 2G users: Welcome to the JB family! Right now, about all you can do is command-line stuff via ssh. You also have afc2 available, so you can use tools like ifunbox to move files around. These are the *very* early days of AppleTV 2G jailbreaking, so it’ll take some time for JB app developers to come up with methods to use your AppleTV 2G from the remote, versus the command line. PS: Your ssh password is “alpine”…please change it when you can :)

Expert mode: By popular demand, the IPSW file selection in Expert mode is now completely manual (doesn’t use Spotlight). Just pick your IPSW file directly instead of waiting for the Spotlight search to complete. In Expert mode, the default is to hacktivate (“Activate the iPhone”), so if you have a legit SIM card be sure to deselect that option in Expert mode.

DFU button: That “DFU” button in PwnageTool is more than it looks like. It guides you through the DFU process, but then also runs the appropriate exploit to convince your device and iTunes that all is legit. The DFU button in PwnageTool is not just your average DFU.

Official Bittorrent Releases

PwnageTool 4.1.2 Torrent - PwnageTool_4.1.2.dmg.5904259.TPB.torrent

If you have an iPhone 3G, iPod Touch 2g (non-MC version) jailbreaking 4.0 is very simple using redsn0w both on mac and windows by the iPhone Dev Team. This guide was made using a mac and the screenies are from a mac but the process is identical on windows so you can follow this guide as well. Before you continue update your iPhone 3G or iPod Touch 2g (old bootrom) to 4.0 using iTunes.

To check your iPod Touch 2g bootrom run f0recast (mac | win). If it says Tethered Yes then you can not currently jailbreak 4.0.

Now download what you need.

Firmware:

iPhone 3G 4.0 (follow this guide if downloading with Safari)

iPod Touch 2G 4.0 (follow this guide if downloading with Safari)

Software:

redsn0w 0.9.5b5-4 OS X

redsn0w 0.9.5b5 Windows

Plug in your device and turn it off. Run redsn0w. Click browse.

Find the 4.0 firmware IPSW you downloaded for your device. Select it and click Open.

redsn0w processes the IPSW.

IPSW successfully identified! Click Next.

redsn0w does its magic.

Choose your options. Click Next

Make sure your device is plugged in and off. Click Next.

Hold down the power button for 3 seconds.

Continue holding down the power button while you press the Home button. Hold both for ten seconds.

Keep holding the Home button but release the power button.

You can release the home button when redsn0w starts working its magic.

All done! click Finish.

This guide provides instruction on how to jailbreak and unlock the iPhone 3GS (old bootrom) firmware 4.0 using Pwnagetool4.01 for OS X by the iphone dev team.

If you are on firmware 3.1.3 and jailbroken with Spirit you can not go directly to jailbroken 4.0. If your iPhone 3GS has the new bootrom you can not currently jailbreak 4.0. You can figure out what bootrom you have by running f0recast, if it says Tethered Yes then you can not currently jailbreak 4.0.

You need to be on 3.1.2 firmware and jailbroken. If you need to downgrade back down to 3.1.2 make sure you have you SHSHs on file in Cydia for 3.1.2 and then follow this guide. Afterwords simply run blackra1n, edit your hosts file back to normal, and you'll be ready to follow this guide.

If you are on 3.1.3 or 4.0 and can't downgrade to 3.1.2 because you don't have your SHSHs on file you currently can't jailbreak your iPhone 3GS to 4.0.

Now that you're on 3.1.2 jailbroken we're ready to start jailbreaking to 4.0!

Lets first download everything needed.

iPhone 3GS 4.0 firmware (if you're using Safari follow this guide)

PwnageTool 4.01

Run PwnageTool 4.01. Click OK.

Select iPhone 3GS, Click the Arrow.

PwnageTool will automatically search your computer for the correct IPSW, if it doesn't find it browse to the one you downloaded earlier, click the arrow.

Click yes to save the custom IPSW on your desktop.

If you are using an iPhone carrier and use iTunes to activate click yes, otherwise if you are unlocking or don't activate with iTunes click no.

PwnageTool does its thing.

PawnageTool will ask you to authenticate, enter in your password and click OK.

Click Ok, then close out of PwnageTool.

Open iTunes. Make sure your phone is off. Plug in your phone while holding the home button. Keep holding the home button until you see the recovery screen on your iPhone 3GS. Option + click Restore.

Browse to and select your custom 4.0 IPSW (on the desktop unless you chose to save it elsewhere). Click OK.

Itunes restores your iPhone.

Click OK.

Set up your phone and you're done!

The iPhone 3.1.2 update that Apple released last week required users of jailbroken iPhones or iPod Touches to wait for a new jailbreak software to be released before updating. There was no jailbreak available until Geohot released his new blackra1n 1 click jailbreak software. The blackra1n software is available for both Windows and Mac users, but it only supports iPhone, iPhone 3G, iPhone 3GS, and iPod Touch. blackra1n does not support the iPod Touch 3rd generation 8 GB models that have a MC in the model number. Many iPhone 3G users reported having a problem with blackra1n on iPhone 3G, if you were one of them please leave a comment telling us what problems you encountered and how you solved them. I will be making a blackra1n troubleshooting guide to help users that have any problem with it. You can jailbreak iPhone 3.1.2 with blackra1n, but you cannot unlock iPhone 3.1.2. To unlock iPhone 3.1.2, you must use PwnageTool 3.1.4 which the Dev-Team recently released.

If you want to just jailbreak iPhone 3.1.2 I recommend you use blackra1n, but if you want to unlock then you have no choice but to use PwnageTool which only works with Mac. If you haven’t already downloaded iPhone 3.1.2 or updated, the download links for it are below.

• iPhone 3.1.2 download (iPhone1,1_3.1.2_7D11_Restore.ipsw, 241 MB)
• iPhone 3G 3.1.2 download (iPhone1,2_3.1.2_7D11_Restore.ipsw, 242 MB)
• iPhone 3GS 3.1 download (iPhone2,1_3.1.2_7D11_Restore.ipsw, 306 MB)

Note: Do no’t use Safari to download iPhone 3.1.2 IPSW files, instead use another browser. Safari downloads this as a .ZIP and iTunes is not able to recognize the firmware that way.

Jailbreak iPhone 3.1.2 with blackra1n

1. Download blackra1n

2. Click the make it ra1n button.

3. Your iPhone or iPod Touch will reboot once blackra1n is done doing it’s thing and you should see the blackra1n icon on there. If you don’t see the blackra1n icon, go to the last page on your iDevice and you should see it.

4. Install your preferred aplication from the blackra1n app. You have the option of choosing Cydia, Icy, or Rock. I don’t recommend you to install them all at once, because that may cause problems. Install them one at a time.

Jailbreak iPhone 3.1.2 with PwnageTool

1. Download PwnageTool 3.1.4 (only works with Mac!)

2. You will be creating a custom IPSW and then restoring it through iTunes. If you don’t know how to do that, read my jailbreak iPhone 3.1 with PwnageTool post which gives step by step instructions