Jailbreak iPhone, iPod Touch, iPad

Untethered jailbreak is available for iOS 5.0.1 firmware on iPhone3GS, iPhone4, iPhone4-CDMA, iPad1, iPod touch 3G, iPod touch 4G.

1. If you’re already on iOS 5.0.1 with a tethered jailbreak, you have two even choices:

1. Run redsn0w 0.9.10 over your current jailbreak (deselect “Install Cydia”)
2. Install the Cydia package prepared by the chronic devteam. It is called Corona 5.0.1 Untether. (tutorial)

2. If you are not on 5.0.1 yet, update now! If you unlock via ultrasn0w or gevey, make sure you update to 5.0.1 via a custom IPSW! See our guides for sn0wbreeze here. Once you’re at 5.0.1, use the latest redsn0w 0.9.10 to both jailbreak and untether.

You can download RedSn0w 0.9.10b1 here.

Our step-by-step tutorials for untethered jailbreak using redsn0w 0.9.10:

• iPhone 4
• iPhone 3GS
• iPod Touch 4G
• iPod Touch 3G
• iPad 1

iPhone Dev-Team released RedSn0w 0.9.9b9 with full iOS 5.0.1 support (no need to point to iOS 5.0 any more). New version also features support for SHSH and APTickets:

• native support for 5.0.1 (no need to point redsn0w at 5.0 IPSW or use command-line args).  Support automatically extends to all of redsn0w’s various functions: “Jailbreak”, “Just boot”, “Fetch blobs”, “Stitch blobs”, “Recovery Fix”
• iBooks fixed in 5.0 and 5.0.1.  This is a targeted fix that doesn’t remove entire sandbox mechanism.  5.x users already using redsn0w “Just Boot” can just use the new version without redoing entire jailbreak again
• 3GS old-bootrom owners can now create custom IPSWs without blobs
• ultrasn0w compatability update (i.e. same baseband requirements) for 5.0.1 will be available on Cydia Monday
• support for newer 8GB iPhone4 (which until now had problems with “Fetch blobs”).  Thanks to @JKjeepnJeff for loaning us one of these newer i4 units for testing!
• allows Windows users (not just OS X users) to use the “Custom” button to create IPSWs without baseband updates.  (Update: please wait for 0.9.9b9b for this!)
• accommodates APTickets in 5.x (until next Apple countermove).  APTickets are crypto-verified before submitting to Cydia, just like the main blobs.  Cydia server support for sending back the APTickets is upcoming.  For now, use stitched IPSWs for 5.x.  Due to APTickets, stitched 5.x IPSWs now require user to start in “Pwned DFU” mode
• Support added for stitching 4.x blobs to iPad2-GSM IPSWs.  Similar to @notcom’s TinyCFW but doesn’t require lots of RAM or a TSS-assisted restore. Won’t work for iPad2 5.x blobs (or iPhone4S at all) until a bootrom-level exploit is out
• top line now shows whether (and where) a redsn0w update is available, or if the version being run is the latest.  Uses DNS TXT record to alleviate any concerns about snooping
• no 5.1 beta support at this time (major apps like Cydia are not yet compatible)
• @pod2g has been doing a great job porting his 5.x untether…check his blog for updates!
• Owners of newer 3GS iPhones must not flash the iPad baseband.  The iPad baseband will not work on 3GS iPhones built later than 2011 week 35.  You have a week 35 or later device if your serial # starts with xx135.

Update #17b: Version 0.9.9b9b enables the “Custom” button for Windows users, and make the 3GS week 35 warning a more explicit part of the process.

You can download RedSn0w 0.9.9b9b here.

UPDATE: redsn0w updated to redsn0w 0.9.9b9d.

The Chronic Dev-Team has released CDevReporter, their new tool that lets you help find jailbreak vulnerabilities, for Windows.

You can download the Mac and Windows versions of CDevReporter here:

• cdev_reporter-mac-1.0_beta.zip
• cdev_reporter-win-1.0_beta.zip

More information is available in our recent post “Want untethered iOS 5 jailbreak? Help hackers to find new exploits!“.

Semi-tethered jailbreak is already available for some devices for both iOS 5 and iOS 5.0.1. But we all want untethered jailbreak and we want jailbreak for iPad 2 and iPhone 4S. So why not help hackers to find new exploits and vulnerabilities?

The Chronic Dev-Team has a released a tool to collect crash reports from iOS devices in order to find vulnerabilities that could lead to an untethered jailbreak.

The idea is very simple. When your iPhone, iPad or iPod Touch crashes it sends data to Apple (you can turn it this off though). Apple uses these reports to update iOS in the future. By the way, it also uses them to fix exploits found by jailbreakers. P0sixninja says that Apple closed several exploits they have found in IOS 5 beta before the final version of the software was released.

In order to find more vulnerabilities as fast as possible, the team has developed a tool which will copy the crash reports from your device and analyze them to locate potential exploits. The tool will also remove the crash reports from your device and modify your iTunes installation to prevent uploading of that diagnostic information to Apple.

Read the rest of this entry »

iH8Sn0w has released Sn0wBreeze 2.8b11 with support of recently released iOS 5.0.1 firmware.

As usual the jailbreak is semi-tethered for iPhone 4, iPad, iPhone 3GS with new bootrom, iPad Touch 3G, iPod Touch 4G and untethered for iPhone 3GS with old bootrom.

Sn0wBreeze 2.8b11 will create a custom firmware with jailbreak and preserve modem version for unlock. Unlockers will also be able to flash 06.15 iPad modem for unlock.

You can download Sn0wBreeze 2.8b11 here.

Here are our step-by-step tutorials that will guide you through all the process of jailbreaking iOS 5.0.1 with sn0wbreeze 2.8b11:

• iPhone 4
• iPhone 3GS
• iPad 1
• iPod Touch 3G
• iPod Touch 4G

Other tutorials are available here.

iH8Sn0w has released Sn0wBreeze 2.8b10. Here is a changelog:

• Supports iOS 5.0 (9A334)/5.0.1-b2 (9A404)
• Fixed iBooks sandbox crashing issues.
• Fixed location services issues with iPhone 3GS users running the iPad baseband (06.15).
• Re-added iPad baseband (06.15) install option to iPhone 3GS.
• Removes UDID requirement/Beta timer in 5.0.1.
• Tethered devices are booted via iBooty which is extracted to the Desktop after running sn0wbreeze.

As usual the jailbreak is semi-tethered for iPhone 4, iPad, iPhone 3GS with new bootrom, iPad Touch 3G, iPod Touch 4G and untethered for iPhone 3GS with old bootrom.

You can download Sn0wBreeze 2.8b10 here.

UPDATE: Sn0wBreeze 2.8b10 step-by-step jailbreak and unlock tutorials:

• iPhone 4 - Sn0wBreeze (Windows)
• iPhone 3GS - Sn0wBreeze (Windows)

The iPhone Dev-Team has updated RedSn0w with support for jailbreaking iOS 5.0.1 beta which was recently released for iOS developers.

RedSn0w 0.9.9b8 recognizes 5.0.1 beta and you don’t have to “point at 5.0 IPSW” any more. Since the IPSW isn’t public, you’ll still need to provide it once to redsn0w (Extra -> Select IPSW).

Mac users can also create custom firmware and preserve baseband for unlock. However ultrasn0w doesn’t get updated for betas yet.

This is still a tethered jailbreak for all except old-bootrom 3GS users.

You can download RedSn0w from here.

UPDATE: to jailbreak ioS 5.0.1 beta 2, just point to iOS 5 or iOS 5.0.1 IPSW

The iPhone Dev-Team released jailbreak utility RedSn0w 0.9.9b6 for both Windows and Mac users. The new version offers full iOS 5 jailbreak support for Windows and fixes Location Services issue for iPhone 3GS devices running the 06.15 baseband. This is still a tethered jailbreak for iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G and iPod Touch 4G:

We’ve released version 0.9.9b6 of redsn0w, with both a functional fix and cosmetic fix for iOS5 jailbreakers. For iPhone3GS owners with the 06.15 baseband, this redsn0w eliminates the network crash you saw when using Location Services in iOS5 (in fact, you don’t even need to disable Location Services anymore during the initial setup). The cosmetic fix is to the visual countdown you see when going into DFU mode.

It’s okay to re-run this redsn0w over an existing device jailbroken at iOS5. Just choose “Jailbreak” again and de-select Cydia (in other words, all the checkboxes will be unchecked). If you are lucky enough to have an old-bootrom iPhone3GS, please pre-select the IPSW first (redsn0w can’t yet auto-detect the FW version of your old-bootrom 3GS if it’s already been jailbroken).

Just as redsnow 0.9.9b5 the new version supports creating custom firmwares with preserving baseband (modem) version for unlock. Unfortunately right now custom firmware functionality works only with Mac version.

You can download the latest RedSn0w version here.

UPDATE:
Here are links to our RedSn0w 0.9.9 iOS 5 jailbreak tutorials:

• Windows: iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G, iPod Touch 4G
• Mac OS: iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G, iPod Touch 4G

If for some reason you don’t want to use redsn0w 0.9.9 to jailbreak your iOS 5, here is a good alternative utility – Sn0wBreeze 2.8b8. It can perform a tethered jailbreak for iPhone 3GS, iPhone 4, iPad 1, iPod Touch 3G and iPod Touch 4G.

As usual it will preserve your baseband (modem) version for unlock with ultrasn0w 1.2.4 or Gevey Sim.

You can download Sn0wBreeze 2.8b8 here.

UPDATE: Sn0wBreeze 2.8b8 step-by-step jailbreak and unlock tutorials:

• iPhone 4 - Sn0wBreeze (Windows)
• iPhone 3GS - Sn0wBreeze (Windows)

The iPhone Dev-Team has released RedSn0w 0.9.9b5 – an official tethered jailbreak for iOS 5. Users don’t have to point to downloaded iOS 5 ipws any more. Just run and jailbreak.

Currently only the Mac version has been made available. Windows version is coming soon. However Windows users can still jailbreak iOS 5 with Redsn0w 0.9.9.b4, – just go to “Extras” -> “Select IPWS” and select your iOS 5 ipsw file (can download here).

Good news for users who need carrier unlock (ultrasn0w or Gevey Sim). With RedSn0w 0.9.9b5 you can update to iOS 5 and preserve the baseband (modem) version for unlock:

The new “Custom IPSW” button on the Extras screen will create a custom IPSW without the baseband update for 4.3.3 or 5.0gm (iPhone3GS and iPhone4 only, for now). Remember not to accidentally restore to the stock IPSW after you create the custom one! The custom one begins with NO_BB_ (for “no baseband”).

You must enter “Pwned DFU” mode before trying to use the NO_BB_ IPSW with iTunes (and your hosts file cannot be pointing to Cydia’s servers due to the new blob nonce mechanism they’re using in iOS5).

We will update our step-by-step tutorials soon.

You can download RedSn0w 0.9.9b5 (Mac) and RedSn0w 0.9.9b4 (Windows) here.

PS: RedSn0w 0.9.9 is a bit different from 0.9.8 version. You can learn more about other new redsn0w 0.9.9 features here.
UPDATE: redsn0w 0.9.9b6 released, download here

UPDATE:
Here are links to our RedSn0w 0.9.9 iOS 5 jailbreak tutorials:

• Windows: iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G, iPod Touch 4G
• Mac OS: iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G, iPod Touch 4G