Jailbreak iPhone, iPod Touch, iPad

Совместными усилиями хакеры выпустили новую версию утилиты для отвязанного джейлбрейка прошивки iOS 5.0.1 – RedSn0w 0.9.10b3. Исправлены ошибки, связанные с работой launchctl и MobileSubstrate. Аналогичные обновления были интегрированы и в пакет Corona.

Если у вас после отвязки джейлбрейка возникли проблемы при работе некоторых приложений или выскакивали ошибки, мы рекомендуем обновить Corona или заново запустить RedSn0w (можно поверх старого джейлбрейка, при этом необходимо убрать галку с Install Cydia).

Скачать RedSn0w 0.9.10b3 можно здесь. Обновление Corona доступно в Cydia.

Untethered jailbreak for iOS 5.0.1 has already been released. While there is no reason not to update to iOS 5.0.1, there might be some users who would like to stay on iOS 5 and have untethered jailbreak there too.

Famous hacker Joshua Hill (nickname p0sixninja) has recently posted via twitter that an untethered jailbreak for iOS 5 will be released soon after testing.

@p0sixninja: 5.0 untether will be coming soon, we still have some testing and bugs to work out

Untethered jailbreak is available for iOS 5.0.1 firmware on iPhone3GS, iPhone4, iPhone4-CDMA, iPad1, iPod touch 3G, iPod touch 4G.

1. If you’re already on iOS 5.0.1 with a tethered jailbreak, you have two even choices:

1. Run redsn0w 0.9.10 over your current jailbreak (deselect “Install Cydia”)
2. Install the Cydia package prepared by the chronic devteam. It is called Corona 5.0.1 Untether. (tutorial)

2. If you are not on 5.0.1 yet, update now! If you unlock via ultrasn0w or gevey, make sure you update to 5.0.1 via a custom IPSW! See our guides for sn0wbreeze here. Once you’re at 5.0.1, use the latest redsn0w 0.9.10 to both jailbreak and untether.

You can download RedSn0w 0.9.10b1 here.

Our step-by-step tutorials for untethered jailbreak using redsn0w 0.9.10:

• iPhone 4
• iPhone 3GS
• iPod Touch 4G
• iPod Touch 3G
• iPad 1

Great news!!! Much anticipated untethered jailbreak for iOS 5.0.1 released.

We will publish details shortly!

UPDATE: How to use untethered iOS 5.0.1 jailbreak

Hacker pod2g is currently busy working on iOS 5.0.1 untethered jailbreak. He has recently posted an interesting update:

The jailbreak is near ready for prime time (excluding 4S and iPad 2).

For now the jailbreak is tested on all devices, including iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G and iPod Touch 4G. iPad 2 and iPhone 4S status is “work in progress”.

pod2g has also published a new video demo of iOS 5.0.1 untethered jailbreak for iPhone 4:

http://www.youtube.com/watch?v=qdF58anFtiQ

The iPhone Dev-Team has released UltraSn0w 1.25 which brings iOS 5.0.1 support to the unlock for older compartible basebands.

iPhone Dev Team’s iPhone 4, 3G, and 3GS software unlock, now with added PwnApple. Compatible with iPhone 4 baseband 01.59.00 and iPhone 3G/3GS basebands 04.26.08, 05.11.07, 05.12.01, 05.13.04 and 06.15.00! Thanks to @sherif_hashim and @Oranav for contributing baseband crashes

UltraSn0w 1.2.5 is now available in Cydia.

If you have one of the supported basebands and wish to update to iOS 5.0.1 you will need to do so with a custom ipsw that doesn’t update your baseband.

iPhone Dev-Team released RedSn0w 0.9.9b9 with full iOS 5.0.1 support (no need to point to iOS 5.0 any more). New version also features support for SHSH and APTickets:

• native support for 5.0.1 (no need to point redsn0w at 5.0 IPSW or use command-line args).  Support automatically extends to all of redsn0w’s various functions: “Jailbreak”, “Just boot”, “Fetch blobs”, “Stitch blobs”, “Recovery Fix”
• iBooks fixed in 5.0 and 5.0.1.  This is a targeted fix that doesn’t remove entire sandbox mechanism.  5.x users already using redsn0w “Just Boot” can just use the new version without redoing entire jailbreak again
• 3GS old-bootrom owners can now create custom IPSWs without blobs
• ultrasn0w compatability update (i.e. same baseband requirements) for 5.0.1 will be available on Cydia Monday
• support for newer 8GB iPhone4 (which until now had problems with “Fetch blobs”).  Thanks to @JKjeepnJeff for loaning us one of these newer i4 units for testing!
• allows Windows users (not just OS X users) to use the “Custom” button to create IPSWs without baseband updates.  (Update: please wait for 0.9.9b9b for this!)
• accommodates APTickets in 5.x (until next Apple countermove).  APTickets are crypto-verified before submitting to Cydia, just like the main blobs.  Cydia server support for sending back the APTickets is upcoming.  For now, use stitched IPSWs for 5.x.  Due to APTickets, stitched 5.x IPSWs now require user to start in “Pwned DFU” mode
• Support added for stitching 4.x blobs to iPad2-GSM IPSWs.  Similar to @notcom’s TinyCFW but doesn’t require lots of RAM or a TSS-assisted restore. Won’t work for iPad2 5.x blobs (or iPhone4S at all) until a bootrom-level exploit is out
• top line now shows whether (and where) a redsn0w update is available, or if the version being run is the latest.  Uses DNS TXT record to alleviate any concerns about snooping
• no 5.1 beta support at this time (major apps like Cydia are not yet compatible)
• @pod2g has been doing a great job porting his 5.x untether…check his blog for updates!
• Owners of newer 3GS iPhones must not flash the iPad baseband.  The iPad baseband will not work on 3GS iPhones built later than 2011 week 35.  You have a week 35 or later device if your serial # starts with xx135.

Update #17b: Version 0.9.9b9b enables the “Custom” button for Windows users, and make the 3GS week 35 warning a more explicit part of the process.

You can download RedSn0w 0.9.9b9b here.

UPDATE: redsn0w updated to redsn0w 0.9.9b9d.

UPDATE: official ultrasn0w with iOS 5.0.1 released!

This tutorial is for those users of locked iPhone 3GS and iPhone 4, who updated to iOS 5.0.1 and realized that ultrasn0w unlock doesn’t work there.

Indeed DevTeam have not updated software unlock utility ultrasn0w to work with the latest iOS 5.0.1. There are two workarounds, that will make ultrasn0w work on 5.0.1.

Read the rest of this entry »

Pod2g has recently announced that he has successfully performed an untethered jailbreak on an iPhone 4 running iOS 5.0.1.

Got an untethered iPhone 4 running iOS 5.0.1. Feel free to update.

Of course, if you want to SIM unlock, don’t update using Apple’s original FW nor update OTA.

This means jailbreakers can update to iOS 5.0.1. Previously it was recommended to stay on iOS 5. Unlockers as usual should stay away from Apple’s firmwares and from iOS 5.0.1.

We strongly recommend that everyone use TinyUmbrella to save their iOS 5.0.1 SHSH Blobs.

Pod2g writes in his blog, that next devices he will try to untehter jailbreak are iPod 3G, iPod 4G and iPad 1.

Chronic Dev Team is almost done with a much anticipated untethered jailbreak for iOS 5 and iOS 5.0.1. Team member and French hacker pod2g just released a video showing off the jailbreak. It looks to be near-complete and functioning properly. Take a look:

pod2g even created a blog, where he plans to post the most recent news about his progress:

Today I succeed in jailbreaking my iPod 3G. The exploit is user-land, rely on a user ROP payload and a kernel write anywhere exploit.

I can’t give much details right now, but here are the next steps :
- upgrade the iPod 3G to iOS 5.0.1
- do the same on iPhone 4 / iOS 5.0.1
- then iPad 1 & iPod 4G

At every step, the exploit code needs certainly to be reworked, but I really don’t know right now. Next, I’ll return to the research for iPad 2 and iPhone 4S. I don’t know if I gonna release first for other devices or not. I’ve to think about it. Feel free to give your opinion.