DevTeam released update to their PwnageTool jailbreak utility. New version 4.01 supports iOS 4 jailbreak for iPhone 3GS (old bootrom), iPhone 3G and iPod Touch 2G (non-MC).
You can download the latest version here.
We recommend to read DevTeam instructions before you start.
DevTeam successfully jailbreaked new iOS 4. They updated jailbreak utility redsn0w to version 0.9.5b5-3. Supported devices are iPhone3G and iPod Touch 2G (not MC). New redsn0w is also able to hacktivate iOS 4.0 for iPhone3G.
You can download redsn0w 0.9.5b5-3 here:
For latest version we recommend to use our utilities page.
Good news from DevTeam. They just announced via twitter that unlock for firmwares 3.1.3 and 4.0 is ready:
RT @MuscleNerd: ultrasn0w tips: 1) Works for all basebands since 3.0 FW 2) Remember to disable 3G on T-Mobile USA
ultrasn0w 0.93 released! Cydia repo is repo666.ultrasn0w.com. Works with basebands 04.26.08 thru 05.13.04
This means, that all users with basebands 04.26.08, 05.11.07, 05.12.01 and 05.13.04 can use ultrasn0w 0.93.
There is no jailbreak for , so you need to wait a bit. Firmware 3.1.3 who need unlock can update ultrasn0w and use their iPhones with any carrier.
Hackers who created the Spirit jailbreak have successfully been able to run flash content on the iPhone. Hopefully an acceptable Flash player will arrive soon for jailbreaked iPhones, iPads and iPod Touches.
Hacker msftguy created unofficial PwnageTool which allows to upgrade to the pre-release of iOS 4.0 GM while keeping your jailbreak and old baseband.
This is not an official release by Devteam, so we recommend to wait for the final versions of both iOS 4.0 and PwnageTool.
For the advanced users who want to experiment here is a .
Msftguy also provided a video:
Apple recentrly released new version of iPhone OS 4. it is called iOS 4.0 GM. Here is an update from DevTeam about iOS 4 jailbreak:
For those who can legitimately activate to the iPhone3G 4.0GM seed, the “point to previous IPSW” redsn0w trick works and will jailbreak your 4.0GM. The “trick” is to point redsn0w at the 4.0beta4 IPSW instead of 4.0GM (do this after you’ve updated to 4.0GM and activated through the new iTunes 9.2 on your Mac). Since the carrier unlocks aren’t yet supported at 4.0, don’t do this if you use yellowsn0w/ultrasn0w/blacksn0w. Many JB apps are still pretty buggy in 4.0, so again this is mostly useful only for developers of those JB apps.
Note: If you’re experiencing MobileSafari crashes, double check that you’re running the version at the bottom of this page.
For those without legit iPhone3G 4.0GM seed access, please wait until the full public 4.0 release for updates to the jailbreak tools.
You can download redsn0w 0.9.5.b4 here.
Last week Apple has released its iPhone Os 4.0 beta 4 and redsn0w is finally updated to support this as well as beta 1. New version of jailbreak is 0.9.5.b4 and it can be applied on iPhone 3G only(!).
Redsn0w 0.9.5.b4 is targeted at developers who make jailbroken apps, and will not work if you are already using blacksn0w, ultrasn0w or yellowsn0w.
iPhone Dev-Team warns:
“You should stay clear of this beta software if you rely on a carrier unlock.”
To use the jailbreak, follow the guide below:
The first release of Spirit had a bug that accidently could delete all of your photos from the device that was jailbroken. If you have a backup which you made before jailbreaking your iPhone/iPod Touch/iPad, here is a quick guide how to recover deleted photos.
1. Open Cydia and search for “OpenSSH” and then install it. Reboot your device.
2. Download and then install iPhone Backup Extractor.
3. Run iPhone BackUp Extractor. Select your last backup (that was made before jailbreak)
4. Navigate to Media/Media and select DCIM folder. Click “Next” and program will save the files locally.
5. Download and then istall or . Open it and enter the following data to login to your device.
WinSCP for Windows
Cyberduck for Mac OS X
6. Go to /User/Media directory and then copy over the DCIM folder.
7. Reboot your device.
After that you’ll have all your backuped photos back.
iPad USB Camera Connection Kit is much more useful as it seems. Max Sha, an experienced user, was able to access external hard drive with this kit. All you need is a jailbroken iPad, an external drive, a split-USB cable to give the drive some power and a terminal of some sort (f.e. MacBook) to mount the external storage. While it is a little unwieldy, it shows that Terabytes of external storage for iPad is possible.
Here is a complete step-by-step guide from Max Sha:
For starters, you will need to do the following:
1. Have an external hard drive formatted to either HFS or FAT32. NOTE: All data will be erased!
2. Perform the Spirit Jailbreak.
3. In Cydia, install iFile ($4.00 for full version, but there is also a free trial) and OpenSSH (free)
4. As well, install the “Nano” terminal text edit from Cydia.
5. For this particular example Max used GoodReader app for iPad ($0.99).
Now you can begin the process of mounting your hard drive. You will need external power for the drive. If you have an external drive with power (one that has a USB port and an external power supply) you won’t need to worry about this. If you have external drive with just an USB cord you will need a .
1. Open “Settings” on your iPad to find your IP address (make sure you’re on the same network as your iPad).
2. Open Terminal, on your Mac (/Applications/Utilities/Terminal.app). On Windows you can use .
3. At the prompt, SSH into your iPad with the IP address you found in the “Settings” app (make sure OpenSSH is installed!), with the following:
ssh root@[iPad IP address]
For you first time users, the password for your root account will be “alpine”. NOTE: Please change your password ASAP. To do this, once you’ve logged in VIA Terminal, type the following into the command prompt:
passwd root
You will then be prompted for a new password. Please do the same for your “mobile” user as well, by doing the following:
passwd mobile
4. Now, type the following, in Terminal:
mkdir /Volumes
mkdir /Volumes/EXT
ln -s /Volumes/EXT /var/mobile/EXT
nano /var/stash/Applications.xxxxxx/iFile.app/Info.plist (“xxxxxx” is a series of numbers after “Applications”. If you type “/var/stash/Applications” and hit the “Tab” key, it will fill in the rest for you).
5. The nano text editor will now open. Please add the following lines below the first “<dict>”, in the document (this makes iFile look much better on the iPad):
<key>UIDeviceFamily</key>
<array>
<integer>1</integer>
<integer>2</integer>
</array>
6. Then hit “Ctrl+x”. Followed by “Y”, and then “Enter”. This will save the changes that you made.
7. Now, reboot your iPad. You will notice that your SSH connection will have closed, in Terminal. Re-open terminal, when the iPad reboots, and follow steps 1-3 (without reseting the passwords again).
8. Open iFile, and go into the settings. It is recommended to have the settings set as shown below. The most important is enabling “Application Names”. Hit “Done”. Close out of iFile by hitting the Home button. Restart iFile.
9. In iFile, navigate to “/Volumes/”. Then, select the “Edit” button, in the top right.
10. Check the circle next to the “EXT” folder you created in “Step 4″.
11. Click the “Box with an arrow”, in the bottom right. In the dialogue box that opens, select “Copy/Link”.
12. In iFile, Navigate to “var/mobile/Applications/”. You should now see the names of applications above the actual folder names. Navigate to the “GoodReader” folder, then the “Documents” folder.
13. Click the “Edit” button again. And then click the “Box with an arrow”, in the bottom right. Click the “Create Link” button. You should now see the “EXT” folder. Hit “Done” in the upper right.
14. Now, connect your iPad Camera Connection Kit.
15. Take your hard drive and plug the secondary port into a power supply (in this case, Macbook Pro). Then, plug the main USB port into the iPad. You may see a message similar to “Insufficient power to mount this drive” error message on the iPad. With an external power supply, it should be much more convenient. NOTE: You MUST plug in the external power supply first, or else the iPad will not mount the drive.
16. Now, lets go back to terminal. Type:
ls /dev
What you’re looking for here is the file “disk1s1″. If that does not show up, try steps 15-16 again. If you see “disk1s1″, proceed to step 17.
17. For a FAT32 formatted drive, type the following, into terminal:
mount -t msdos /dev/disk1s1 /Volumes/EXT
It will take a few seconds, and then return you to the command prompt. For an HFS drive, type the following:
mount -t HFS /dev/disk1s1 /Volumes/EXT
18. You are now good to go! You can now access the files in either iFile, or GoodReader. As an example of how to manipulate the files, watch the video below.
19. To unmount the drive, type the following, in Terminal:
umount /dev/disk1s1
20. That’s all!
Here is a video demonstration:
Many thanks to !
Finally the jailbreak for iPad, iPhone and iPod Touch from the Dev Team is available for download. It’s free and untethered and it’s called “Spirit”. The jailbreak supports every iDevice with firmware version 3.1.2, 3.1.3 or 3.2.
If you have iPhone 3GS or an iPad you should backup your SHSH blobs before using the jailbreak. ECID SHSH or SHSH blob is a unique signature given to every Apple mobile device. When you decide to restore the firmware on your iPhone, iPod Touch or iPad, Apple servers checks this signature.
As you know, if a new firmware is released it becomes impossible to restore the older firmware from iTunes. But Cydia creator tuned up a new server and now it mimics Apple’s verification server and saves your older SHSH blobs so that you can restore back your device to the older firmware. Without having your SHSH blobs saved you may accidentally update new firmware and then you not only lose your jailbreak but also won’t be able to restore the older firmware to re-jailbreak your device.
This is also important because there is a big possibility that Apple will soon find out what exploit is used by the jailbreak and then it will be patched in the form of new firmware.
You can save your SHSH blob in three ways. Here is a guide to make it using AutoSHSH.
If you have some problems with using AutoSHSH to save your blobs, write it in comments or try or instead.
Now, when you saved you SHSH blobs, you can make the jailbreak. It is recommended for you to sync your device with iTunes beforehand. Then use the following guide:
That’s all!
Additionally here is a video tutorial for jailbreaking:
Please note that Spirit is not a carrier unlock so it won’t allow you to use unauthorized wireless carriers. The jailbreak is also “sort of beta”, so it may be buggy. DevTeam notifies that some apps in Cydia that are NOT designed for iPad may crash your system and require you to restore so be careful.