Jailbreak iPhone, iPod Touch, iPad

UPDATE: Apple latest firmware is iOS 5.1.1. Apple has stopped signing all other firmwares, including iOS 5.0.1, iOS 4.3.3 and iOS 4.3.5. This means you can NOT restore to 5.0.1/4.3.3/4.3.5 any more (both original and custom), unless you have saved your SHSH keys for it.

If you have decided to perform an untethered jailbreak and unlock, you need to get the following information:

1. What type of device do you have (iPhone 3G/3GS/4, iPod Touch 3G/4G, iPad 1/2, Apple TV)?
2. Do you need unlock (if your iPhone locked to one carrier and you want to use it with another)?
   The answer is NO, if the device is not iPhone, if it was purchased as factory unlocked and can be used with any cellular carrier (f.e. in Canada, France, etc).
   If the answer is YES, you need to find out your modem version (Setting-General-About-Modem).
3. What firmware version do you have? Take a look at Setting-General-About-Version. For example it could be iOS 4.3.3.
4. What operating system do you use on your desktop (Windows, Mac OS)?

How to perform jailbreak, when you do NOT need an unlock

For iPhone 3G the latest is iOS 4.2.1. You can perform jailbreak with any utility. For iOS 4.2.1 you can also use them or GreenPois0n (Windows, Mac OS).

iPad 2 jailbreak is available only for iOS 4.3.3 via JailbreakMe and and iOS 5.0.1 via Absenthe.

iPhone 4S jailbreak is available for iOS 5.0 / iOS 5.0.1 via Absenthe.

iOS 4.3.3

Apple stopped signing iOS 4.3.3, so you cannot update to iOS 4.3.3 without SHSH keys saved (in advance some time ago). If you have iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G or iPod Touch 4G that run iOS 4.3.3 – use JailbreakMe or RedSn0w to untether jailbreak your device.

If you have saved SHSH keys for iOS 4.3.3 you can use PwnageTool (Mac OS) or Sn0wBreeze (Windows).

iOS 4.3.4/4.3.5

For iOS 4.3.4/4.3.5 only tethered jailbreak is possible with redsn0w. Tethered means that each time you restart your device you will have to connect it to a computer and run redsn0w. The untethered iOS 4.3.5 jailbreak is possible only for iPhone 3GS with old bootrom. You can detect your bootrom version using this tutorial.

iOS 5

To jailbreak and unlock iOS 5 use latest version of redsn0w 0.9.9 or sn0wbreeze 2.8. You can jailbreak tethered or semi-tethered.

The untethered iOS 5 jailbreak is possible only for iPhone 3GS with old bootrom. You can detect your bootrom version using this tutorial.

iOS 5.0.1

For iPhone 4/3GS, iPad 1, iPod Touch 3G/4G an untethered jailbreak is available for iOS 5.0.1. For untethered jailbreak use the latest redsn0w 0.9.10 or Corona – package from Cydia to untether currently installed tethered jailbreak.

Tutorial how to untether installed tethered jailbreak is available here.

For iPhone 4S and iPad 2 use Absenthe.

For tethered iOS 5.0.1 jailbreak you an use redsn0w 0.9.9 and sn0wbreeze 2.8.

iOS 5.1 / iOS 5.1.1

For now only tethered jailbreak is available for iPhone 4/3GS, iPad 1 and iPod Touch 3G/4G for iOS 5.1 and iOS 5.1.1.

You can download all firmwares here.

Tutorials

Here are our step-by-step tutorials that will guide you through the jailbreak process:

iPhone 4S

UnTethered jailbreak iOS 5.0 / iOS 5.0.1:

• Absinthe (Windows)
• Absinthe (Mac)

iPhone 4

Tethered jailbreak iOS 5.1.1:

• RedSn0w (Windows)

Tethered jailbreak iOS 5.1:

• RedSn0w (Windows)
• Custom firmware and jailbreak using Sn0wBreeze (Windows)

UnTethered jailbreak iOS 5.0.1:

• RedSn0w (Windows)
• Custom firmware using RedSn0w
• Custom firmware using Sn0wBreeze (Windows)
• Custom firmware using PwnageTool (Mac)

Semi-Tethered jailbreak iOS 5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)
• Sn0wBreeze (Windows)

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

UnTethered jailbreak iOS 4.3.3:

• RedSn0w (Windows)
• RedSn0w (Mac OS)
• PwnageTool (Mac OS)
• Sn0wBreeze (Windows)
• JailbreakMe (works without a computer)

Read the rest of this entry »

We are receiving more and more questions about JailbreakMe supporting particular iOS version and device. Here is a useful table that shows which firmwares can be jailbroken by JailbreakMe and which are not supported. Take a look:

Here our step by step JailbreakMe tutorials:

• iPad 1
• iPad 2
• iPhone 3GS
• iPhone 4
• iPod Touch 3G
• iPod Touch 4G

Other jailbreak tutorials including iOS 4.3.5 jailbreak can be found here.

The iPhone Dev-Team has released RedSn0w 0.9.8b3 which can perform a tethered jailbreak on iOS 4.3.4. This means that you will have to connect your device to a computer and run redsn0w each time you restart.

For the convenience of kernel hackers like @comex and @i0n1c, we have a new redsn0w 0.9.8b3 that supports a TETHERED jailbreak for iOS 4.3.4 on all devices that have 4.3.4 except the iPad2. The vast majority of people will want to stay back at 4.3.3 because that’s where the untethered jailbreak is! There are no new features in 4.3.4 – only fixes for jailbreak exploits.

Also, this is a good time to remind everyone (since we’re still seeing confusion about this): iPad2 owners with a baseband (3G or CDMA) cannot currently use saved blobs to go back to 4.3.3 once the signing window is closed. This is unlike every other device, so don’t be confused! iPad2 owners with basebands should stay away from all updates to maintain your jailbreak!

This jailbreak works with iPhone 3GS, iPhone 4, iPad 1, iPod Touch 3G and iPod Touch 4G. It does not work with iPad 2.

You can download RedSn0w 0.9.8b3 from here: (Mac, Windows)

Apple have recently released iOS 4.3.4 for iPhone 4, iPhone 3GS, iPad 1, iPad 2, iPod Touch 3G and iPod Touch 4G. Here are the direct links for each device that is supported by the update:

• iPhone 4 GSM
• iPhone 4 CDMA
• iPhone 3GS
• iPad
• iPad 2 WiFi
• iPad 2 GSM
• iPad 2 CDMA
  
• iPod touch 3rd generation
• iPod touch 4th generation

Apple has released iOS 4.3.4 to block the PDF exploit used by comex in JailbreakMe utility. JailbreakMe can wireless jailbreak all devices on iOS 4.3.3.

iOS 4.3.4 Software Update
Fixes security vulnerability associated with viewing malicious PDF files.

Products compatible with this software update:
• iPhone 4 (GSM model)
• iPhone 3GS
• iPad 2
• iPad
• iPod touch (4th generation)
• iPod touch (3rd generation)

For iPhone 4 Verizon Apple released iOS 4.2.9.

The official information is available here: http://support.apple.com/kb/HT1222

iOS 5 beta 3 is jailbreakable by RedSn0w 0.9.8 b1. DevTeam hacker MuscleNerd has confirmed that the RedSn0w 0.9.8 b1 jailbreak works on recently released iOS 5 Beta 3. All you have to do is to point it to a downloaded iOS 5 beta 1 firmware ipsw.

Today’s 5.0b3 can be jailbroken with last month’s redsn0w http://is.gd/6eek4Y (point it at 5.0b1 IPSW..devs only please!)

RedSn0w 0.9.8 b1 jailbreak works on all devices, exect iPad 2. This means you can get a tethered jailbreak on Windows and Mac OS for iPhone 3GS, iPhone 4, iPod Touch 3G, iPod Touch 4G and iPad 1.

You can download RedSn0w 0.9.8 b1 for Windows and Mac OS here.

Take a Look at the video demonstration of the new Comex iOS 4.3.3 jailbreak on Apple iPad 2:

Here’s another video showing iPhone 4 jailbreak:

ih8sn0w released Sn0wBreeze 2.5 – utility to untether jailbreak iOS 4.3 for Windows. It uses the same method as Redsn0w 0.9.6 rc9 and Pwnagetool 4.3.

Sn0wbreeze also preserves your baseband, which is very useful for unlockers. That is why it is so-called Pwnagetool for Windows. With Sn0wbreeze you can update to firmware iOS 4.3.1, while preserve old unlockable baseband. It also works with iPhone 3GS with 06.15 baseband.

Sn0wBreeze 2.5 does not support iPhone 4 Verizon and iPad 2.

You can download Sn0wBreeze 2.5 for Windows here.

Comex, famous iPhone hacker, tweeted today that the kernel exploit for jailbreak he had found long ago was closed by Apple in recent iOS 4.3.1. This exploit could be used to jailbreak iPad 2.

As noticed by @0naj, my kernel exploit was fixed in 4.3.1.

I try not to be paranoid, but it is really hard to explain this as anything but a leak.

The funny thing is that my “new” kernel exploit is actually the kernel exploit used by JailbreakMe 2.0. It was never properly fixed.

It stayed there from 4.0.2 through 4.3, but was magically found in time for 4.3.1. well, go go @MuscleNerd and @i0n1c I guess

This is not good news. However we have recently seen working untethered jailbreak video. There are other vulnerabilities in iOS 4.3.1.

BGR have got their hands on the next iOS release – iOS 4.3.1. This new firmware will contain mostly minor bug fixes. Here are the changes from iOS 4.3:

• Baseband updates for the 3GS and iPad (original)
• Fixed memory hang that results in memory corruption when reading large files from USIM filesystem
• Fixed problem with NTLM authentication in apps and on websites
• Fixed issue with the Springboard and 3rd party apps not recognizing the gyroscope on the iPad 2
• Fixed iPad 2 jailbreak vulnerability

This is not the final changelog, but still quite interesting. No information on whether or not it will be available for Verizon iPhone 4.

The new iOS 4.3.1 firmware is expected to be released in 1-2 weeks.