Jailbreak iPhone, iPod Touch, iPad

MuscleNerd has announced via Twitter that jailbreak utility RedSn0w 0.9.9b1 is released with major update and numerous new features:

Major improvements and features added to redsn0w 0.9.9b1! See update #9 at http://is.gd/6eek4Y Feedback: @redsn0w_testers

Indeed the list of new features is quite high. There are two main ones:

• There is no need to download firmware any more. There is no need to push Browse IPWS button any more (but you still can).
• Developers added lots of functionality to work with SHSH keys (extract, submit, download, verify, stitch etc)

However this new version does not bring features like untethered jailbreak for iOS 4.3.5 or iOS 5.

Due to some possible bugs we still recommend to use the old RedSn0w 0.9.8b7b, but the new 0.9.9b1 is worth seeing and playing with.

Here are links to our RedSn0w 0.9.8b7b iOS 4.3.5 jailbreak tutorials:

• Mac OS: iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G, iPod Touch 4G
• Windows: iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G, iPod Touch 4G

You can download RedSn0w 0.9.9b1 here:

Here is the full list of features from DevTeam:

Update #9: A bunch of new features!

• uses DFU mode to try to automatically determine which device and FW you have
• fetches pieces of public IPSWs from Apple (once).  Non-public IPSWs must be provided manually (once).  It then caches those pieces for future use.
• “Just boot” is a tethered boot.  Uses whatever “Preferences” you’ve set for boot logo and kernel boot-args
• “Pwned DFU” puts your device in a pwned DFU state for some of the iTunes stuff detailed below
• “Recovery fix” gets past 1015 types of errors (when baseband portion of restore fails).  Should work on iOS5 beta too
• “Select IPSW” is for picking non-public IPSWs, or overriding auto-detection
• “SHSH blobs” has a bunch of options…
  • “Fetch” – fetch current PARTIAL blobs on device.  Should complete in under 10 or 15 seconds.  Puts the set of PARTIAL of blobs on your computer as a plist.  Checks if Cydia already has a full set for this device and build.  If not, it submits this PARTIAL set and returns Cydia’s acknowledgement or rejection
  • “Verify”  – cryptographically verifies existing blob files from either redsn0w, TinyUmbrella, or Cydia server.  You can select a whole bunch of blobs to verify at once if you want (like the TinyUmbrella directory)
  • “Submit”  – both verifies and submits one or more blob files to Cydia.  This lets you copy your entire TinyUmbrella cache of blobs up to the Cydia server
  • “Query” - queries the Cydia server for all available FULL or PARTIAL blobs for a given set of ECIDs
  • “Stitch” – stitches either FULL or PARTIAL blobs to a STOCK or CUSTOM IPSW

1. Stitching is NOT yet supported on iPhones! Need to work out the baseband part of the restore process.
2. FULL blobs stitched to a STOCK IPSW gives you a completely self-contained signed IPSW that iTunes will accept without any tricks (no need to go into pwned DFU mode, no need to start TinyUmbrella TSS server, no need to redirect to Cydia server for blobs)
3. PARTIAL blobs stitched to any IPSW requires you to go into pwned DFU mode before running iTunes.  No need to start TU or use Cydia though.
4. Stitching either FULL or PARTIAL blobs to a CUSTOM IPSW also requires a pwned DFU start before iTunes restores.  No need to start TU or use Cydia though./li>
5. Will eventually support fetching the blobs directly from Cydia instead of a file on your computer

Hackers from the Chronic Dev Team recently announced that they have found 5 userland exploits in iOS 5. To us this means that it is very likely that an untethered jailbreak will be available for the upcoming firmware release.

P0sixninja made the announcement at MyGreatFest jailbreak conference held in London, England.

While this is a “record breaking number of exploits found”, userland exploits can be easily fixed via a minor software update. The exploits are kept in secret, so hopefully Apple won’t fix them before the expected iOS 5 launch next month.

The jailbreak is expected for all devices, including iPhone 3GS, iPhone 4, iPad, iPad 2, iPod Touch and even future iPhone 4S and iPhone 5.

The iPhone Dev-Team has released RedSn0w 0.9.8b7b to bring two new main features:

• explicit tethered jailbreak support for iOS 5 Beta 7
• untethered jailbreak for iPhone 3GS with old bootrom (iOS 4.3.5 or iOS 5 Beta 7)

Musclenerd posted via twitter:

New redsn0w is.gd/6eek4Y explicitly supports iOS5b7 (no need to point at b6 IPSW). Also brings back old-bootrom 3GS goodies.

This is great news for both developers and owners of old bootrom iPhone 3GS’s who accidentally updated to iOS 4.3.5.

DevTeam posted:

About 12 hours after we released redsn0w 0.9.8b7 with some improvements for iOS5b6, Apple went and released iOS5b7 (what are the odds of that?!?). Even though that redsn0w could still jailbreak iOS5b7, you needed to point it at the iOS5b6 IPSW to do so. Today’s redsn0w 0.9.8b7b lets you point redsn0w directly at the iOS5b7 IPSW instead.

We’ve also added some overall improvements for old-bootrom 3GS owners (where the 24kpwn exploit applies): on those devices, you can tell redsn0w to untether 4.3.5 and lower, or iOS5b7. Old-bootrom 3GS owners can once again choose custom logos, and/or verbose booting (for the really nerdy iPhone3GS fans out there!). And it allows 4.3.4 or 4.3.5 users to use ultrasn0w again (if they have a compatible baseband).

Last but not least, we fixed some lingering Verizon iPhone4 4.2.10 JB issues.

We will update our tutorials shortly.

You can download RedSn0w 0.9.8b7b here.

Here are links to our RedSn0w 0.9.8b7b iOS 4.3.5 jailbreak tutorials:

• Mac OS: iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G, iPod Touch 4G
• Windows: iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G, iPod Touch 4G

The iPhone Dev-Team recently released RedSn0w 0.9.8b7 which brings explicit support for a tethered 4.3.5 jailbreak as well as new iOS 5.0b6 iPad 1 jailbreak:

Apple updated the iPad1 iOS5b6 IPSW without changing its version number or filename, so we’re releasing redsn0w 0.9.8b7 to handle both the original and changed IPSW. We’ve also added explicit support for a tethered 4.3.5/4.2.10 jailbreak (instead of pointing at the 4.3.4/4.2.9 IPSWs) and fixed a 4.2.10 problem.

You can download RedSn0w 0.9.8b7 here.

You can find our instructions on how to jailbreak your device here:

iPhone 3GS

Tethered and UnTethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

iPhone 4

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

iPad 1

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

iPod Touch 3G

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

iPod Touch 4G

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

RedSn0w can perform a tethered jailbreak on iOS 4.3.5 for all devices except the iPad 2, according to MuscleNerd’s tweet:

So those who really do want tethered 4.3.5 can use redsn0w pointed at 4.3.4 (except iPad2)

We strongly recommend NOT to update to iOS 4.3.4 or iOS 4.3.5 to preserve untethered jailbreak. We will soon post step-by-step tutorials on how to perform iOS 4.3.5 tethered jailbreak.

You can download the latest redsn0w here.

UPDATE: Here are latest step-by-step tutorials to jailbreak iOS 4.3.5:

iPhone 3GS

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

iPhone 4

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

The iPhone Dev-Team has released RedSn0w 0.9.8b3 which can perform a tethered jailbreak on iOS 4.3.4. This means that you will have to connect your device to a computer and run redsn0w each time you restart.

For the convenience of kernel hackers like @comex and @i0n1c, we have a new redsn0w 0.9.8b3 that supports a TETHERED jailbreak for iOS 4.3.4 on all devices that have 4.3.4 except the iPad2. The vast majority of people will want to stay back at 4.3.3 because that’s where the untethered jailbreak is! There are no new features in 4.3.4 – only fixes for jailbreak exploits.

Also, this is a good time to remind everyone (since we’re still seeing confusion about this): iPad2 owners with a baseband (3G or CDMA) cannot currently use saved blobs to go back to 4.3.3 once the signing window is closed. This is unlike every other device, so don’t be confused! iPad2 owners with basebands should stay away from all updates to maintain your jailbreak!

This jailbreak works with iPhone 3GS, iPhone 4, iPad 1, iPod Touch 3G and iPod Touch 4G. It does not work with iPad 2.

You can download RedSn0w 0.9.8b3 from here: (Mac, Windows)

Famous iPhone hacker Stefan Esser, also known as i0n1c, recently wrote on twitter that we should not expect untether jailbreak for iOS 4.3.4 anytime soon. i0n1c was the one who created untether for iOS 4.3.3 firmware.

Our advice is simple – save your 4.3.3 SHSH keys asap. With these SHSH keys you will be able to restore to iOS 4.3.3 anytime, without – only iOS 4.3.4. Here are tutorials for you.

• How to Save Your SHSH Blobs Mac
• How to Save Your SHSH Blobs Windows

Hacker iH8Sn0w released Sn0wBeeze 2.8 beta 2 with ability to perform untethered jailbreak of the old bootrom iPhone 3GS on iOS 5.0b1. For other devices the jailbreak is still tethered.

Sn0wBreeze is a Windows application that creates a custom ipsw with jailbreak. It also preserves your baseband if you need unlock, but UltraSn0w has not yet been updated to work with iOS 5.

You can download Sn0wBeeze 2.8 beta 2 here.

DevTeam released the untethered jailbreak for the latest iOS 4.3.3 – utilities RedSn0w 0.9.6 rc15 and PwnageTool 4.3.3.

The 4.3.3 untether works on all Apple devices that support 4.3.2 except for the iPad2:

• iPhone 3GS
• iPhone 4 (GSM)
• iPod Touch 3G
• iPod Touch 4G
• iPad 1
• AppleTV 2G (PwnageTool only for now)

Redsnow is easy to use, it is available for Windows and Mac OS. As usual for unlockers – do not update to 4.3.3, use PwnageTool (MAC) and Sn0wBreeze (Windows) to preserve the baseband.

You can download RedSn0w 0.9.6 rc15 here.

You can download PwnageTool 4.3.3 here.

Ultrasn0w was also updated to support old baseband on new iOS 4.3.3. Ultrasn0w 1.2.3 (for unlockers with old baseband) is available in Cydia.

New tutorials for iOS 4.3.3 are ready:

RedSn0w 0.9.6 rc16 (Windows)

• iPhone 3GS
• iPhone 4
• iPad
• iPod Touch 4G
• iPod Touch 3G

RedSn0w 0.9.6 rc16 (Mac OS)

• iPhone 3GS
• iPhone 4
• iPad
• iPod Touch 4G
• iPod Touch 3G

PwnageTool 4.3.3.1 (Mac OS)

• iPhone 3GS
• iPhone 4
• iPad
• iPod Touch 4G
• iPod Touch 3G
• Apple TV 2G

Sn0wBreeze 2.7.3 (Windows)

• iPhone 3GS
• iPhone 4
• iPad
• iPod Touch 4G
• iPod Touch 3G

The iPhone Dev team has just released PwnageTool 4.3.2 which adds support for iOS 4.3.2. The jailbreak uses i0n1c’s untether, which Apple did not fix in 4.3.2. Ultrasn0w has also been updated to 1.2.2 adding support for the new firmware.

You can download PwnageTool 4.3.2 here. Ultrasn0w 1.2.2 is available in Cydia.

Update #3: PwnageTool 4.3.2 now includes the iOS 4.3.2 untether from @i0n1c. (And look, the PwnageTool and iOS version numbers actually match!).

Note that there’s a corresponding update to ultrasn0w, which has been bumped up to v1.2.2 to get along with iOS 4.3.2 (the ultrasn0w update does not include any new baseband support!). Please reboot your iPhone using the normal “slide to power off” swipe after installing ultrasn0w 1.2.2.