Jailbreak iPhone, iPod Touch, iPad

iH8Sn0w released Sn0wBreeze 2.9.4 with the ability to perform an untethered jailbreak of A4 devices on iOS 5.1.1. Sn0wbreeze can be used to create a custom firmware with jailbreak and preserve iPhone modem (baseband) version for unlock.

Sn0wbreeze 2.9.4 supports iPhone 3GS, iPhone 4, iPad 1, iPod Touch 3G, iPod Touch 4G and Apple TV 2G. It does not work with A5 devices, like iPad 2, iPad 3 and iPhone 4S.

You can download Sn0wBreeze 2.9.4 from here.

Our step-by-step tutorials for Sn0wBreeze 2.9.5 are available here:

• iPhone 4
• iPhone 3GS

InteVyDis has released an untethered jailbreak for A4 devices on iOS 5.1.1 as part of Vulndisco Mobile 1.7. The module is vd_ios_untether_5_1_1. It works by creating a custom bundle you have to install via RedSn0w. Evgeny Legerov posted in twitter:

vulndisco mobile 1.7 is out with untethered 5.1.1

This jailbreak is not free and costs big money. It works only on A4 devices -- iPhone 3GS, iPhone 4, iPad 1, iPod Touch 3G and iPod Touch 4G. It is not yet tested by other hackers. So this might be fake. However famous hacker I01nc notes that the company is a legit source of exploits:

@legerov runs a company: Intevydis that sell exploit packs for many years. If that JB were fake he would hurt his own business.

The unfortunate thing is that now two sets of exploits may be revealed to Apple and some people may pay for the expensive exploit pack despite it being available free in a few days from pod2g.

MuscleNerd tweets:

the most troublesome part is that (potentially) close to 2x as many exploits will be burned now with 2 A4 JBs.

We recommend that you wait the extra day or two for a free jailbreak from pod2g that should work on all devices.

Here is a video demo of this jailbreak.

The iPhone Dev-Team released RedSn0w 0.9.11b4 with support for the tethered jailbreak of A4 devices on iOS 5.1.1 – iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G and iPod Touch 4G.

Version 0.9.11b4 completes the tethered JB support for 5.1.1 on A4 devices and earlier, including proper “Stitching” and “Custom” creation of NO_BB IPSWs.

You can download RedSn0w 0.9.11b4 here.

We will update our tutorials soon.

The iPhone 4S and iPad 2 jailbreak utilities are undergoing testing and polishing before the public release. According to ‘Dream Team’ member planetbeing:

We’re testing & fixing problems with the jb app (that @pimskeks finished the majority of at incredible speed). Still needs to be polished.

P0sixninja also tweeted it should not be much longer before the jailbreak gets released.

not much longer now

We hope to see the utilities soon, because more than a week ago there were tweetes that jailbreak should have been ready in few days.

iPhone Dev Team has posted a blog entry about upcoming public release. If you have iPad 2 or iPhone 4S go ahead and read it:

But we’re now near the final stages of testing the public version of the jailbreak.  Please allow time to clean up any remaining bugs in the jailbreak clients.Jailbreak programs:

To be as flexible as possible, the A5 version of the corona jailbreak will take multiple forms:

• Chronic Dev have incorporated the overall flow into a GUI that runs on your Mac or PC.  The goal is for the GUI to be enough for most cases.
• iPhone Dev have also incorporated the exact same flow into an alternative command-line interface (CLI). This will allow us to help users through individual steps of the jailbreak manually, to both help the user and help improve the overall flow.  Although the CLI will also allow the user to perform the entire jailbreak from beginning to end, we anticipate it will be more useful in debugging the occasional errors.  The CLI currently has over 20 individual options (in addition to the single “jailbreak” option) that should be useful during debug after the GUI release.
• Once all the bugs in the flow are worked out, we’ll also incorporate it into the redsn0w GUI (but still leave the CLI freely available too).  In order to maximize the chances of the jailbreak working for everyone, the redsn0w GUI will use native Apple iTunes libraries — this technique is slightly different than how the Chronic Dev GUI handles communications, and should provide nice combined coverage for all the odd computer configurations out there.

Firmware:

The supported firmware versions will be:

• iPhone4S: 5.0 (9A334), 5.0.1 (9A405) and the “other” 5.0.1 (9A406)
• iPad2: 5.0.1 (9A405)

iPhone4S owners looking to maximize their chances of achieving an eventual software-based carrier unlock should be staying at 5.0. Everyone else should be at 5.0.1.  If you’re an iPhone4S owner who already updated to 5.0.1, it’s too late to go back down to 5.0, but if you’re on 9A406 it is possible to downgrade the BB by going to the 9A405 version of 5.0.1 while the window is still open.

Support:

The overall flow used by the GUI and CLI to inject the A5 corona jailbreak has never been done before, and there may be unforeseen problems once it’s released to the public.  It’s very important for you to sync your data, photos, and music before attempting any version of this jailbreak.  We’ll be watching the comments section below for signs of any widespread problems, but please be aware that you jailbreak at your own risk!

When:

As mentioned at the start of this post: when testing has shown most of the bugs have been fixed!

Saurik has announced that an update to the Corona Untethered Jailbreak has been released in Cydia.

The update fixes issues for iBooks and launchd and it’s recommended that users who previously jailbroke their A4 devices install the Corona package from Cydia.

Corona (5.0.1 untether) 1.0-4 is now out: users of redsn0w or the older packages should install. This fixes both iBooks and launchd (again).

As many users don’t realize that untethers only affects boot, I just released 1.0-5 of the Corona package, which forces a reboot on upgrade.

You can find instructions on how to install Corona here.

Pod2g has recently announced that Planetbeing, MuscleNerd, and P0sixninja have joined his effort to release an iOS 5.0.1 untethered jailbreak for the iPhone 4S and iPad 2.

@planetbeing, the legendary hacker behind iPhone Linux and lot of jailbreaks has joined the A5 research! The famous @MuscleNerd, the leader of the iPhone Dev Team, who did a lot of tests for Corona and whom integrated it and made it simple in redsn0w is willing to help also. And last, but not least @p0sixninja, the leader of the Chronic Dev Team, and my partner for years on iPhone security research has started to code and fuzz the Apple sandbox.

That means that we now have a dream team to create a public release of the A5 jailbreak.

Several day ago pod2g posted information why the A5 jailbreak had not been released yet. The key reason being that the exploit used for A4 devices (called limera1n) doesn’t work on A5 devices. The untethered iPhone 4S and iPad 2 jailbreak that we have seen on videos and photos was created relying on having a developer account.

We are sure that planetbeing, MuscleNerd, p0sixninja and pod2g is just a great team. Hopefully they will find necessary exploit and implement it fast, because Apple might release 5.0.2 or 5.1 and fix untathered.

iPhone 3GS jailbreak can be either tethered or untethered. Tethered jailbreak means that each time you restart your device you will need to connect it to a computer and run redsn0w. If you have iPhone 3GS with an old bootrom version 359.3, the jailbreak is untethered. If your device has bootrom version 359.3.2 and higher, iOS 5/4.3.5 jailbreak will be tethered.

You can read tutorial to detect if your iPhone 3GS has new or old bootrom version here.

iH8Sn0w has released Sn0wBreeze 2.8b10. Here is a changelog:

• Supports iOS 5.0 (9A334)/5.0.1-b2 (9A404)
• Fixed iBooks sandbox crashing issues.
• Fixed location services issues with iPhone 3GS users running the iPad baseband (06.15).
• Re-added iPad baseband (06.15) install option to iPhone 3GS.
• Removes UDID requirement/Beta timer in 5.0.1.
• Tethered devices are booted via iBooty which is extracted to the Desktop after running sn0wbreeze.

As usual the jailbreak is semi-tethered for iPhone 4, iPad, iPhone 3GS with new bootrom, iPad Touch 3G, iPod Touch 4G and untethered for iPhone 3GS with old bootrom.

You can download Sn0wBreeze 2.8b10 here.

UPDATE: Sn0wBreeze 2.8b10 step-by-step jailbreak and unlock tutorials:

• iPhone 4 - Sn0wBreeze (Windows)
• iPhone 3GS - Sn0wBreeze (Windows)

Apple recently released iOS 5 beta and iTues 10.5 beta. It is available only for Apple registered developers. But you can try it too. Remember that you do it at your own risk. Below you will find iOS 5 download links for iPhone 3GS, iPhone 4, iPod Touch 3G, iPod Touch 4G, iPad 1, iPad 2, Apple TV 2G and download links to iTunes 10.5 Mac and Windows.

Keep in mind that your iDevice will need to be activated, your UUID needs to be registered in Apple. Installing iOS beta on a non-activated device will render it useless. If you need help with registering UUID – write us, we will try to help..

Remember that currently there is no jailbreak for iOS 5 released.

You can download iOS 5.0 beta 1 and iTunes 10.5 beta here.

The iPhone DevTeam have probably found a new method to jailbreak Apple devices with the A4 chip. This includes such devices as iPhone, iPad, iPod and Apple TV. This is great news!

MuscleNerd tweeted.

Think we’ve figured out a way to extend PwnageTool+limera1n+@comex hacks to untethered JBs for all future A4 firmwares