Jailbreak iPhone, iPod Touch, iPad

Planetbeing has confirmed that their untethered jailbreak works with new iOS 6.1 final firmware released by Apple today.

iOS 6.1 appears to be vulnerable to the exploits we are planning on using.

In terms of code, we have two proof of concepts that we need to merge and polish, so we will not be ready to release until that and testing.

Notably, MuscleNerd has hinted that the team might release the jailbreak on Superbowl Sunday.

Hey, did everyone know the Super Bowl is this Sunday? What will you be doing? /cc @evad3rs http://evad3rs.com

Pod2g confirmed that the Evad3rs Dev-Team is ready with a jailbreak for iOS 6.1 and credits Planetbeing and Pimskeks for the accomplishment in an interview with iDigitalTimes.

“For your information and this is important to me that everybody knows about it also, this jailbreak will be @planetbeing and @pimskeks. I arrived at the end, gave ideas that pushed them to their maximum, I kinda unblocked the situation, but it would certainly have happened without me helping.”

“Now I am helping as much as I can in terms of communication, websites, and also development, but I was not involved the same way as previous, focused on my work and all… Yes, in order @planetbeing, @pimskeks, then me.”

According to the hacker, iOS 6.0 is jailbroken as is iOS 6.1 Beta 4. The team is now waiting for iOS 6.1 GM to drop after which they can confirm there is no new security measures introduced. Once everything has been tested successfully the team will release the jailbreak. The public jailbreak will be free. It is rumored that all devices will are supported: iPhone 3GS, iPhone 4, iPhone 4S, iPhone 5, iPod Touch 4G, iPod Touch 5G, iPad Mini, iPad 2, iPad 3 and iPad 4.

“6.0 is jailbroken, 6.1 beta 4 also. Now we are waiting 6.1 to confirm and release.”

The new Evad3rs Dev-Team consists of Pod2g, MuscleNerd, Planetbeing, and Pimskeks.

Chpwn has posted an image showing Cydia running on a jailbroken iPad 4.

It doesn’t look any different than on the iPad (3rd generation), but here’s Cydia running on the iPad (4th generation): pic.twitter.com/zhrii6uX

Recently, MuscleNerd posted to show that the jailbreak discovered by chpwn was working for the iPad mini.

Last month, chpwn revealed that his jailbreak would be reserved as a failbreak. That means it will be limited to jailbreak developers and won’t be released to the public. This is being done to make it easier to discover new exploits (which will be used for public release) in the future.

MuscleNerd has announced that the jailbreak developed by chpwn and phoenixdev works on the iPad mini.

the “failbreak” from @phoenixdev @chpwn in action on an iPad-mini http://twitpic.com/ba1ega (why failbreak? see @planetbeing’s timeline)

Last month, chpwn revealed that his jailbreak for the iPhone 5 would be reserved as a failbreak. That means it will be limited to jailbreak developers and won’t be released to the public. This is being done to make it easier to discover new exploits (which will be used for public release) in the future.

MuscleNerd has announced the successful jailbreak of his iPod touch 4G on iOS 6 Beta.

Here’s ioreg of my tethered-JB ipt4g 6.0: http://is.gd/1qOwvW ..MANY things including Cydia are broken, don’t expect beta JB for a while!

Here’s some clips of the jailbreak dream team presenting at HITBSecConf last week posted by JailbreakCon.

MuscleNerd, Pod2g, P0sixninja, Planetbeing, and Pimskeks can be seen presenting. Full video will be posted by HITBSecConf soon.

Tomorrow is the first conference day at famous hacker event HITBSecConf2012. The conference schedule shows that Chronic Team members Joshua Hill (@p0sixninja), Cyril (@pod2g), Nikias Bassen (@pimskeks) and David Wang (@planetbeing) will speak about Corona jailbreak and Absinthe jailbreak for iOS 5.0.1. iPhone Dev-Team member MuscleNerd will speak about “Evolution of the iPhone Baseband and Unlocks”.

The iOS 5.1.1 untethered jailbreak is rumored to be announced during this conference during Chronic Dev Team keynote. Stay tuned.

The HITBSecConf2012 schedule is available here.

InteVyDis has released an untethered jailbreak for A4 devices on iOS 5.1.1 as part of Vulndisco Mobile 1.7. The module is vd_ios_untether_5_1_1. It works by creating a custom bundle you have to install via RedSn0w. Evgeny Legerov posted in twitter:

vulndisco mobile 1.7 is out with untethered 5.1.1

This jailbreak is not free and costs big money. It works only on A4 devices -- iPhone 3GS, iPhone 4, iPad 1, iPod Touch 3G and iPod Touch 4G. It is not yet tested by other hackers. So this might be fake. However famous hacker I01nc notes that the company is a legit source of exploits:

@legerov runs a company: Intevydis that sell exploit packs for many years. If that JB were fake he would hurt his own business.

The unfortunate thing is that now two sets of exploits may be revealed to Apple and some people may pay for the expensive exploit pack despite it being available free in a few days from pod2g.

MuscleNerd tweets:

the most troublesome part is that (potentially) close to 2x as many exploits will be burned now with 2 A4 JBs.

We recommend that you wait the extra day or two for a free jailbreak from pod2g that should work on all devices.

Here is a video demo of this jailbreak.

MuscleNerd from the iPhone Dev-Team has posted some details on the upcoming untethered jailbreak from pod2g.

All info below is tentative and subject to last minute refinements

@pod2g’s 5.1.1 jailbreak+untether is working out great. All devices are covered except for AppleTV3,1, which currently has no path for jailbreaking.
- the initial 5.1.1 plan used a kernel exploit from @westbaer which unfortunately precluded use in iPod3,1 and iPhone2,1
- @planetbeing stepped up and provided a kernel exploit that covers both of those. Those two JBers are the bomb!

The 5.1.1 A5 JB is very similar to the A5 5.0.1 JB. @pimskeks has done a tremendous job supporting both 5.0.1 and 5.1.1 in absinthe

Similar to 5.0.1, there will also be a 5.1.1 CLI “cinject” binary and redsn0w version of the 5.1.1 JB+untether. Absinthe, cinject, and redsn0w will all provide the same JB in different fashions.
- timing is indeterminate. Plans are for this week, but a number of factors can influence that.

For those wishing to donate, we’ve set up a new 5.1.1 paypal URL: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=4U6DQGJ2NRVUN

Please don’t pirate AppStore apps (seriously, please do not).

A new unlock has been discovered that works for all iPhones and all 5.x firmware versions, all basebands are supported.

The method discovered by Loktar_Sun appears to exploit a logical bug in Apple’s server and can be performed on any jailbroken iOS device. His procedure involves using Sam Bingner’s SAM (Subscriber Artificial Module) package to perform a series of steps that unlocks your phone to use a specific SIM.

It has been confirmed working by iPhone Dev-Team member MuscleNerd who notes an update may be coming to SAM from @sbingner to make the procedure simpler.

We will post detailed step by step unlock instructions soon.

UPDATE: Tutorial is ready! You can find it here.