Here are our step-by-step tutorials that will guide you through all the process of jailbreaking iOS 5.0.1 with sn0wbreeze, redsn0w, pwnagetool and absenthe:
iPhone 4S
UnTethered jailbreak iOS 5.0 / iOS 5.0.1:
UnTethered jailbreak iOS 5.0.1:
Archive
Tag: iPad
Untethered jailbreak is available for iOS 5.0.1 firmware on iPhone3GS, , iPhone4-CDMA, iPad1, iPod touch 3G, iPod touch 4G.
1. If you’re already on iOS 5.0.1 with a tethered jailbreak, you have two even choices:
- Run redsn0w 0.9.10 over your current jailbreak (deselect “Install Cydia”)
- Install the Cydia package prepared by the chronic devteam. It is called Corona 5.0.1 Untether. ()
2. If you are not on 5.0.1 yet, update now! If you unlock via ultrasn0w or gevey, make sure you update to 5.0.1 via a custom IPSW! See our guides for sn0wbreeze . Once you’re at 5.0.1, use the latest redsn0w 0.9.10 to both jailbreak and untether.
You can download RedSn0w 0.9.10b1 .
Our step-by-step tutorials for untethered jailbreak using redsn0w 0.9.10:
Hacker pod2g is on iOS 5.0.1 untethered jailbreak. He has recently posted an interesting update:
The jailbreak is near ready for prime time (excluding 4S and iPad 2).
For now the jailbreak is tested on all devices, including , iPhone 3GS, iPad 1, iPod Touch 3G and iPod Touch 4G. iPad 2 and iPhone 4S status is “work in progress”.
pod2g has also published a new video demo of iOS 5.0.1 untethered jailbreak for iPhone 4:
http://www.youtube.com/watch?v=qdF58anFtiQ
iPhone Dev-Team released RedSn0w 0.9.9b9 with full iOS 5.0.1 support (no need to point to iOS 5.0 any more). New version also features support for SHSH and APTickets:
- native support for 5.0.1 (no need to point redsn0w at 5.0 IPSW or use command-line args). Support automatically extends to all of redsn0w’s various functions: “Jailbreak”, “Just boot”, “Fetch blobs”, “Stitch blobs”, “Recovery Fix”
- iBooks fixed in 5.0 and 5.0.1. This is a targeted fix that doesn’t remove entire sandbox mechanism. 5.x users already using redsn0w “Just Boot” can just use the new version without redoing entire jailbreak again
- 3GS old-bootrom owners can now create custom IPSWs without blobs
- ultrasn0w compatability update (i.e. same baseband requirements) for 5.0.1 will be available on Cydia Monday
- support for newer 8GB (which until now had problems with “Fetch blobs”). Thanks to @JKjeepnJeff for loaning us one of these newer i4 units for testing!
- allows Windows users (not just OS X users) to use the “Custom” button to create IPSWs without baseband updates. (Update: please wait for 0.9.9b9b for this!)
- accommodates APTickets in 5.x (until next Apple countermove). APTickets are crypto-verified before submitting to Cydia, just like the main blobs. Cydia server support for sending back the APTickets is upcoming. For now, use stitched IPSWs for 5.x. Due to APTickets, stitched 5.x IPSWs now require user to start in “Pwned DFU” mode
- Support added for stitching 4.x blobs to iPad2-GSM IPSWs. Similar to @notcom’s TinyCFW but doesn’t require lots of RAM or a TSS-assisted restore. Won’t work for iPad2 5.x blobs (or iPhone4S at all) until a bootrom-level exploit is out
- top line now shows whether (and where) a redsn0w update is available, or if the version being run is the latest. Uses DNS TXT record to alleviate any concerns about snooping
- no 5.1 beta support at this time (major apps like Cydia are not yet compatible)
- @pod2g has been doing a great job porting his 5.x untether…check for updates!
- Owners of newer 3GS iPhones must not flash the iPad baseband. The iPad baseband will not work on 3GS iPhones built later than 2011 week 35. You have a week 35 or later device if your serial # starts with xx135.
Update #17b: Version 0.9.9b9b enables the “Custom” button for Windows users, and make the 3GS week 35 warning a more explicit part of the process.
You can download RedSn0w 0.9.9b9b .
UPDATE: redsn0w updated to redsn0w 0.9.9b9d.
UPDATE: official ultrasn0w with iOS 5.0.1 !
This tutorial is for those users of locked iPhone 3GS and , who updated to iOS 5.0.1 and realized that ultrasn0w unlock doesn’t work there.
Indeed DevTeam have not updated software unlock utility ultrasn0w to work with the latest iOS 5.0.1. There are two workarounds, that will make ultrasn0w work on 5.0.1.
Pod2g has recently announced that he has successfully performed an untethered jailbreak on an running iOS 5.0.1.
Got an untethered iPhone 4 running iOS 5.0.1. Feel free to update.
Of course, if you want to SIM unlock, don’t update using Apple’s original FW nor update OTA.
This means jailbreakers can update to iOS 5.0.1. Previously it was recommended to stay on iOS 5. Unlockers as usual should stay away from Apple’s firmwares and from iOS 5.0.1.
We strongly recommend that everyone use TinyUmbrella to save their iOS 5.0.1 SHSH Blobs.
Pod2g writes in his blog, that next devices he will try to untehter jailbreak are iPod 3G, iPod 4G and iPad 1.
Chronic Dev Team is almost done with a much anticipated untethered jailbreak for iOS 5 and iOS 5.0.1. Team member and French hacker pod2g just released a video showing off the jailbreak. It looks to be near-complete and functioning properly. Take a look:
pod2g even , where he plans to post the most recent news about his progress:
Today I succeed in jailbreaking my iPod 3G. The exploit is user-land, rely on a user ROP payload and a kernel write anywhere exploit.
I can’t give much details right now, but here are the next steps :
- upgrade the iPod 3G to iOS 5.0.1
- do the same on / iOS 5.0.1
- then iPad 1 & iPod 4GAt every step, the exploit code needs certainly to be reworked, but I really don’t know right now. Next, I’ll return to the research for iPad 2 and iPhone 4S. I don’t know if I gonna release first for other devices or not. I’ve to think about it. Feel free to give your opinion.
Semi-tethered jailbreak is already available for some devices for both iOS 5 and iOS 5.0.1. But we all want untethered jailbreak and we want jailbreak for iPad 2 and iPhone 4S. So why not help hackers to find new exploits and vulnerabilities?
The Chronic Dev-Team has a released a tool to collect crash reports from iOS devices in order to find vulnerabilities that could lead to an untethered jailbreak.
The idea is very simple. When your iPhone, iPad or iPod Touch crashes it sends data to Apple (you can turn it this off though). Apple uses these reports to update iOS in the future. By the way, it also uses them to fix exploits found by jailbreakers. P0sixninja says that Apple closed several exploits they have found in IOS 5 beta before the final version of the software was released.
In order to find more vulnerabilities as fast as possible, the team has developed a tool which will copy the crash reports from your device and analyze them to locate potential exploits. The tool will also remove the crash reports from your device and modify your iTunes installation to prevent uploading of that diagnostic information to Apple.
iH8Sn0w has released Sn0wBreeze 2.8b11 with support of recently released iOS 5.0.1 firmware.
As usual the jailbreak is semi-tethered for , iPad, iPhone 3GS with new bootrom, iPad Touch 3G, iPod Touch 4G and untethered for iPhone 3GS with old bootrom.
Sn0wBreeze 2.8b11 will create a custom firmware with jailbreak and preserve modem version for unlock. Unlockers will also be able to flash 06.15 iPad modem for unlock.
You can download Sn0wBreeze 2.8b11 .
Here are our step-by-step tutorials that will guide you through all the process of jailbreaking iOS 5.0.1 with sn0wbreeze 2.8b11:
Other tutorials are available .
iH8Sn0w has released Sn0wBreeze 2.8b10. Here is a changelog:
- Supports iOS 5.0 (9A334)/5.0.1-b2 (9A404)
- Fixed iBooks sandbox crashing issues.
- Fixed location services issues with iPhone 3GS users running the iPad baseband (06.15).
- Re-added iPad baseband (06.15) install option to iPhone 3GS.
- Removes UDID requirement/Beta timer in 5.0.1.
- Tethered devices are booted via iBooty which is extracted to the Desktop after running sn0wbreeze.
As usual the jailbreak is semi-tethered for , iPad, iPhone 3GS with new bootrom, iPad Touch 3G, iPod Touch 4G and untethered for iPhone 3GS with old bootrom.
You can download Sn0wBreeze 2.8b10 .
UPDATE: Sn0wBreeze 2.8b10 step-by-step jailbreak and unlock tutorials: