Jailbreak iPhone, iPod Touch, iPad

Hackers from the Chronic Dev Team recently announced that they have found 5 userland exploits in iOS 5. To us this means that it is very likely that an untethered jailbreak will be available for the upcoming firmware release.

P0sixninja made the announcement at MyGreatFest jailbreak conference held in London, England.

While this is a “record breaking number of exploits found”, userland exploits can be easily fixed via a minor software update. The exploits are kept in secret, so hopefully Apple won’t fix them before the expected iOS 5 launch next month.

The jailbreak is expected for all devices, including iPhone 3GS, iPhone 4, iPad, iPad 2, iPod Touch and even future iPhone 4S and iPhone 5.

The iPhone Dev-Team has released RedSn0w 0.9.8b7b to bring two new main features:

• explicit tethered jailbreak support for iOS 5 Beta 7
• untethered jailbreak for iPhone 3GS with old bootrom (iOS 4.3.5 or iOS 5 Beta 7)

Musclenerd posted via twitter:

New redsn0w is.gd/6eek4Y explicitly supports iOS5b7 (no need to point at b6 IPSW). Also brings back old-bootrom 3GS goodies.

This is great news for both developers and owners of old bootrom iPhone 3GS’s who accidentally updated to iOS 4.3.5.

DevTeam posted:

About 12 hours after we released redsn0w 0.9.8b7 with some improvements for iOS5b6, Apple went and released iOS5b7 (what are the odds of that?!?). Even though that redsn0w could still jailbreak iOS5b7, you needed to point it at the iOS5b6 IPSW to do so. Today’s redsn0w 0.9.8b7b lets you point redsn0w directly at the iOS5b7 IPSW instead.

We’ve also added some overall improvements for old-bootrom 3GS owners (where the 24kpwn exploit applies): on those devices, you can tell redsn0w to untether 4.3.5 and lower, or iOS5b7. Old-bootrom 3GS owners can once again choose custom logos, and/or verbose booting (for the really nerdy iPhone3GS fans out there!). And it allows 4.3.4 or 4.3.5 users to use ultrasn0w again (if they have a compatible baseband).

Last but not least, we fixed some lingering Verizon iPhone4 4.2.10 JB issues.

We will update our tutorials shortly.

You can download RedSn0w 0.9.8b7b here.

Here are links to our RedSn0w 0.9.8b7b iOS 4.3.5 jailbreak tutorials:

• Mac OS: iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G, iPod Touch 4G
• Windows: iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G, iPod Touch 4G

The iPhone Dev-Team recently released RedSn0w 0.9.8b7 which brings explicit support for a tethered 4.3.5 jailbreak as well as new iOS 5.0b6 iPad 1 jailbreak:

Apple updated the iPad1 iOS5b6 IPSW without changing its version number or filename, so we’re releasing redsn0w 0.9.8b7 to handle both the original and changed IPSW. We’ve also added explicit support for a tethered 4.3.5/4.2.10 jailbreak (instead of pointing at the 4.3.4/4.2.9 IPSWs) and fixed a 4.2.10 problem.

You can download RedSn0w 0.9.8b7 here.

You can find our instructions on how to jailbreak your device here:

iPhone 3GS

Tethered and UnTethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

iPhone 4

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

iPad 1

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

iPod Touch 3G

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

iPod Touch 4G

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

Apple TV 2G jailbreak utility Seas0nPass has been updated to support an un-tethered jailbreak of the latest firmware 4.3 build 8F455. Seas0nPass is one of the simplest jailbreaking tools available for the AppleTV, and is the first to support the new 4.3 build 8F455 software version.

You can download Seas0nPass here: Mac [10.6 or later] | Windows [XP or later].

You can read our step-by-step tutorial for Apple TV 2G jailbreak using Seas0nPass here.

Famous iPhone hacker Stefan Esser, also known as i0n1c, recently wrote on twitter that we should not expect untether jailbreak for iOS 4.3.4 anytime soon. i0n1c was the one who created untether for iOS 4.3.3 firmware.

Our advice is simple – save your 4.3.3 SHSH keys asap. With these SHSH keys you will be able to restore to iOS 4.3.3 anytime, without – only iOS 4.3.4. Here are tutorials for you.

• How to Save Your SHSH Blobs Mac
• How to Save Your SHSH Blobs Windows

Gevey has released a new hardware unlock for iPhone 4 called Gevey Ultra SIM.

The main difference compared to the old Gevey unlock method is that you don’t have to dial 112. dialing 112/911 and hanging up is illegal in most countries, now this problem is gone.

Gevey Ultra works with

• iOS 4.0, 4.1, 4.2.1, 4.3, 4.3.1, 4.3.2, 4.3.3
• Basebands 1.59, 2.10, 3.10.1, 4.10, 4.10.1

Some sources claim that Gevey Ultra works even with the latest iOS 5 beta 1.

If you have 01.59 baseband you can still use free software ultrasn0w unlock. For everything else -- just buy Gevey Ultra for $35 here.

The installation is simple, but requires jailbreak. Good luck iOS 4.3.3 is jailbreakable. See our jailbreak instructions here (Mac OS) and here (Windows).

Take a look at the Gevey Ultra video demo:

Hacker iH8Sn0w released Sn0wBeeze 2.8 beta 2 with ability to perform untethered jailbreak of the old bootrom iPhone 3GS on iOS 5.0b1. For other devices the jailbreak is still tethered.

Sn0wBreeze is a Windows application that creates a custom ipsw with jailbreak. It also preserves your baseband if you need unlock, but UltraSn0w has not yet been updated to work with iOS 5.

You can download Sn0wBeeze 2.8 beta 2 here.

The iPhone Dev team has just released PwnageTool 4.3.2 which adds support for iOS 4.3.2. The jailbreak uses i0n1c’s untether, which Apple did not fix in 4.3.2. Ultrasn0w has also been updated to 1.2.2 adding support for the new firmware.

You can download PwnageTool 4.3.2 here. Ultrasn0w 1.2.2 is available in Cydia.

Update #3: PwnageTool 4.3.2 now includes the iOS 4.3.2 untether from @i0n1c. (And look, the PwnageTool and iOS version numbers actually match!).

Note that there’s a corresponding update to ultrasn0w, which has been bumped up to v1.2.2 to get along with iOS 4.3.2 (the ultrasn0w update does not include any new baseband support!). Please reboot your iPhone using the normal “slide to power off” swipe after installing ultrasn0w 1.2.2.

DevTeam released a new version of RedSn0w 0.9.6 rc10. Short after that they released a fix for that – RedSn0w 0.9.6 rc11.

DevTeam have added boot animation logo, removed some unnecessary settings, and fixed some bugs.

Everything else is the same – untethered jailbreak for iOS 4.3.1 for all devices and both Windows and Mac OS X users.

You can download the latest RedSn0w here.

Those running redsn0w may have noticed we enabled too many Settings options in some versions of the jailbreak (for instance, what you want your side switch to do, even if you have no side switch because you’re not using an iPad). Release rc10 of redsn0w corrects that (you can just run it over your existing jailbreak…be sure to de-select Cydia to avoid package conflicts).

Along the way, we’ve also added the option to enable boot animations…these animations can be installed via Cydia, but be sure to select which animation to use via the Settings->Bootlogo setting after you’ve downloaded an animation (and again, you can just run rc10 rc11 over your existing jailbreak…be sure to de-select Cydia to avoid package conflicts).

(The boot animation we tested against was “Android Boot Logo”. It correctly installs all the dependencies needed to run the animation at each boot).

redsn0w_0.9.6rc11: (rc11 makes the boot animation a bit more robust across all devices)

ih8sn0w released Sn0wBreeze 2.5 – utility to untether jailbreak iOS 4.3 for Windows. It uses the same method as Redsn0w 0.9.6 rc9 and Pwnagetool 4.3.

Sn0wbreeze also preserves your baseband, which is very useful for unlockers. That is why it is so-called Pwnagetool for Windows. With Sn0wbreeze you can update to firmware iOS 4.3.1, while preserve old unlockable baseband. It also works with iPhone 3GS with 06.15 baseband.

Sn0wBreeze 2.5 does not support iPhone 4 Verizon and iPad 2.

You can download Sn0wBreeze 2.5 for Windows here.