Jailbreak iPhone, iPod Touch, iPad

iH8sn0w, developer of sn0wbreeze and iFaith, has found a way to downgrade the firmware on A5 devices – iPhone 4S, iPad 2.

Using saved SHSH blobs, iH8sn0w was able to downgrade his A5 iPad 2 from iOS 5.1 to iOS 5.0.1. He says his method will also work with the A5X processor once firmware updates are released for the new iPad. That means that it’s possible to restore to any firmware you want on A5 devices, as long as you have the SHSH blobs saved.

This is great news for those with the iPhone 4S and newer iPads. As it stands now, if you have to restore for any reason, you will be forced to upgrade to the latest firmware. This could leave you without the ability to jailbreak for some time.

Found a loophole in Apple’s apticket system. Restored my iPad 2 to 5.0.1 from 5.1. Works on all A5 devices.

A5X devices will work too once Apple pushes a new firmware for it.

Hope we will see update to current utilities soon.

iH8sn0w has released new version of popular jailbreak utility Sn0wBreeze 2.9.3.

What is New?

• Added Apple TV 2 support for iOS 4.4.3/4.4.4.
• Fixed rare issues with iOS 5.0.1 where it would halt on the Apple upon boot.

Just adding this in mainly for users who dumped their SHSH blobs. On the initial boot, the Apple TV may have a black screen for 60 seconds after setting up the Apple TV. This is normal.

You can download Sn0wBreeze 2.9.3 here.

Gevey has announced the Gevey Ultra S SIM interposer which unlocks iPhone 4S without the need for dialing 112 or jailbreaking. The makers claim to be using a new exploit that ‘fully unlocks’ the device.

Pre-Order ONLY (Shipping ETA Between March 3-March 7)

GEVEY Ultra S for GSM iPhone 4S

• No Need to Dial International Emergency Number 112
• Untethered Unlock with no Jailbreak Required
• Compatible with all GSM iPhone 4S SIM Cards (Does not work on CDMA iPhone)
• Complete Unlock with all 2G and 3G data services
• No SIM Card Cutting or Physical Modifications
• Works on iOS 5.0, 5.0.1
• Works on Baseband 1.0.11, 1.013, 1.0.14
• Guaranteed Better Reception than Previous
• Decreased Power Consumption

Gevey Ultra S is available for $54.99 here.

Take a look at video demonstration:

New version of Corona Untethered Jailbreak for iOS 5.0.1 has been released in Cydia. Corona v1.0-8 features recent iBooks fix from planetbeing (the one that was recently released in redsn0w 0.9.10b5).

Saurik tweeted that all users jailbroken on iOS 5.0.1 should install the update. UPDATE: This doesn’t apply to “old bootrom” iPhone 3GS users.

@planetbeing put a lot of work into solving iBooks image loading bugs. All users (however jailbroken) on 5.0.1 should install.

So, most of the feedback I have received from “all users (however jailbroken) running 5.0.1″ has been “even me? I did X.”: yes, even you. ;P

You can find the Corona package in the System section of Cydia.

The Chronic Dev-Team has released an update to their Absinthe jailbreak utility for iPhone 4S and iPad 2. So users who failed to jailbreak can try with new version Absinthe 0.3. Chronic Dev-Team also released a version for Linux users.

@pimskeks announced the release over Twitter:

Linux version (x86/x86_64) of #Absinthe #A5 #jailbreak is done!

Also version 0.3 of #Absinthe #A5 #jailbreak is available for OSX and Windows. Nothing really new, so no need to re-apply

#Absinthe 0.3 only has some cosmetic changes, and a potential bug fix for win32 (only really few people seem affected)

You can download Absinthe for Windows, Mac OS X and Linux from here.

Here are our step-by-step tutorials:

• HowTo untether jailbreak iPad 2 with iOS 5.0.1 (Mac OS X)
• HowTo untether jailbreak iPhone 4S with iOS 5.0/5.0.1 (Mac OS X)
  

• HowTo untether jailbreak iPad 2 with iOS 5.0.1 (Windows)
• HowTo untether jailbreak iPhone 4S with iOS 5.0/5.0.1 (Windows)

The iPhone 4S and iPad 2 jailbreak utilities are undergoing testing and polishing before the public release. According to ‘Dream Team’ member planetbeing:

We’re testing & fixing problems with the jb app (that @pimskeks finished the majority of at incredible speed). Still needs to be polished.

P0sixninja also tweeted it should not be much longer before the jailbreak gets released.

not much longer now

We hope to see the utilities soon, because more than a week ago there were tweetes that jailbreak should have been ready in few days.

iPhone Dev Team has posted a blog entry about upcoming public release. If you have iPad 2 or iPhone 4S go ahead and read it:

But we’re now near the final stages of testing the public version of the jailbreak.  Please allow time to clean up any remaining bugs in the jailbreak clients.Jailbreak programs:

To be as flexible as possible, the A5 version of the corona jailbreak will take multiple forms:

• Chronic Dev have incorporated the overall flow into a GUI that runs on your Mac or PC.  The goal is for the GUI to be enough for most cases.
• iPhone Dev have also incorporated the exact same flow into an alternative command-line interface (CLI). This will allow us to help users through individual steps of the jailbreak manually, to both help the user and help improve the overall flow.  Although the CLI will also allow the user to perform the entire jailbreak from beginning to end, we anticipate it will be more useful in debugging the occasional errors.  The CLI currently has over 20 individual options (in addition to the single “jailbreak” option) that should be useful during debug after the GUI release.
• Once all the bugs in the flow are worked out, we’ll also incorporate it into the redsn0w GUI (but still leave the CLI freely available too).  In order to maximize the chances of the jailbreak working for everyone, the redsn0w GUI will use native Apple iTunes libraries — this technique is slightly different than how the Chronic Dev GUI handles communications, and should provide nice combined coverage for all the odd computer configurations out there.

Firmware:

The supported firmware versions will be:

• iPhone4S: 5.0 (9A334), 5.0.1 (9A405) and the “other” 5.0.1 (9A406)
• iPad2: 5.0.1 (9A405)

iPhone4S owners looking to maximize their chances of achieving an eventual software-based carrier unlock should be staying at 5.0. Everyone else should be at 5.0.1.  If you’re an iPhone4S owner who already updated to 5.0.1, it’s too late to go back down to 5.0, but if you’re on 9A406 it is possible to downgrade the BB by going to the 9A405 version of 5.0.1 while the window is still open.

Support:

The overall flow used by the GUI and CLI to inject the A5 corona jailbreak has never been done before, and there may be unforeseen problems once it’s released to the public.  It’s very important for you to sync your data, photos, and music before attempting any version of this jailbreak.  We’ll be watching the comments section below for signs of any widespread problems, but please be aware that you jailbreak at your own risk!

When:

As mentioned at the start of this post: when testing has shown most of the bugs have been fixed!

iH8sn0w has released new version of popular jailbreak utility Sn0wBreeze 2.9. Sn0wbreeze is used to create a custom firmware with jailbreak and preserve iPhone modem (baseband) version for unlock. New version 2.9 adds support for untethered iOS 5.0.1 jailbreak as well as support for all firmwares supported by previous versions of sn0wbreeze.

For now Sn0wBreeze 2.9 supports untethered jailbreak for iOS 3.1.3, 3.2.x, 4.0.x, 4.1, 4.2.1 – 4.2.8, 4.3 – 4.3.3 and 5.0.1. Supported devices are: iPhone 2G, iPhone 3G, iPhone 3GS, iPhone 4, iPad 1, iPod Touch 2G, iPod Touch 3G, iPod Touch 4G.

UPDATE: sn0wbreeze updated to 2.9.1

You can download Sn0wBreeze 2.9.1 here.

Here is official changelog:

sn0wbreeze v2.9 [Two year anniversary]

• Happy birthday sn0wbreeze!
• Brought back old firmware support in one release!
• GUI Improvements
• You can now build IPSWs with TinyUmbrella/iFaith blobs!
• Removes OTA Updates/badge on iOS 5.x.x+ devices.
• Added an IPSW Downloader
• Built-in iREB functionality updated from newest iREB r5 module.
• Custom Packages in Expert actually works now.
• All supported firmwares in this release are untethered.
• A5 devices are NOT supported at this time due to no public DFU/iBoot exploit.

Supported iOS Revisions:

• iOS 3.1.3
• iOS 3.2.x
• iOS 4.0.x
• iOS 4.1
• iOS 4.2.1 – 4.2.8
• iOS 4.3 – 4.3.3
• iOS 5.0.1
• iOS 4.3.4/4.3.5/4.4.x/5.0 support coming soon

The ‘dream team‘ of iPhone hackers has made more progress on the A5 jailbreak with planetbeing just announcing that they’re out of Apple’s sandbox.

And we’re out of the sandbox with @saurik’s invaluable help! (well, at least there’s a PoC) Turning out more complex than X-Gold 618.

pod2g also mentioned progress in twitter:

@planetbeing escaped from the sandbox with the help of @saurik. Thanks to their awesome work, there should be nothing left blocking for the A5 jailbreak. Now it should be a matter of days. Still no precise ETA of course.

Now that the team has been successful in breaking out of Apple’s sandbox (which lets them run unsigned code) they’ll focus their attention on writing the Mac OS X and Windows software utilities.

“Now it should be a matter of days” means that jailbreak utilities will be released very soon, maybe next week.

It looks like iPad 2 and iPhone 4S untethered jailbreak will truly be a team effort. Recently another hacker Saurik joined the team and made “some major contributions” yesterday.

Last week Pod2g announced that Planetbeing, MuscleNerd, and P0sixninja joined his effort to release an untethered iOS 5.0.1 jailbreak of the iPhone 4S and iPad 2 (A5 CPU devices).

Today, MuscleNerd noted that the team has received some major contributions from saurik:

props to @saurik for major contributions to the A5 version of @pod2g’s untether yesterday! (still no ETA, but moving forward)

Pod2g also thanked planetbeing for his help in escaping from the sandbox.

And greetings to @planetbeing for the coding + research. Really great stuff to escape from the sandbox.

Good news, that means that there is progress and we might see utility sometime this month.

UPDATE:
Pod2g has also addressed the request that the untethered jailbreak be released to developers. He previously revealed that there is a working jailbreak that requires a developer account.

Sorry, we can’t release the A5 for the developers, the exploit used have to be kept secret. I know this is unfair.

The iPhone Dev-Team has updated PwnageTool with support for the iOS 5.0.1 untethered jailbreak. PwnageTool lets you easily create a custom ipsw for upgrading to iOS 5.0.1.

Unlockers can use custim firmware to preserve baseband version and unlock with ultrasn0w or gevey. Depending on your device you can also configure the ipsw with boot logos and Cydia packages.

PwnageTool 5.0.1 supports iPhone 3GS, iPhone 4, iPad 1, Apple TV 2G, iPod Touch 3G, iPod Touch 4G.

You can download the new version of PwnageTool 5.0.1 from here.

UPDATE: Here are our step-by-step tutorials that will guide you through all the process of untethered jailbreaking iOS 5.0.1 with PwangeTool 5.0.1:

iPhone 4

iPhone 3GS