Jailbreak iPhone, iPod Touch, iPad

Untethered jailbreak is available for iOS 5.0.1 firmware on iPhone3GS, iPhone4, iPhone4-CDMA, iPad1, iPod touch 3G, iPod touch 4G.

1. If you’re already on iOS 5.0.1 with a tethered jailbreak, you have two even choices:

1. Run redsn0w 0.9.10 over your current jailbreak (deselect “Install Cydia”)
2. Install the Cydia package prepared by the chronic devteam. It is called Corona 5.0.1 Untether. (tutorial)

2. If you are not on 5.0.1 yet, update now! If you unlock via ultrasn0w or gevey, make sure you update to 5.0.1 via a custom IPSW! See our guides for sn0wbreeze here. Once you’re at 5.0.1, use the latest redsn0w 0.9.10 to both jailbreak and untether.

You can download RedSn0w 0.9.10b1 here.

Our step-by-step tutorials for untethered jailbreak using redsn0w 0.9.10:

• iPhone 4
• iPhone 3GS
• iPod Touch 4G
• iPod Touch 3G
• iPad 1

Great news!!! Much anticipated untethered jailbreak for iOS 5.0.1 released.

We will publish details shortly!

UPDATE: How to use untethered iOS 5.0.1 jailbreak

Hacker pod2g is currently busy working on iOS 5.0.1 untethered jailbreak. He has recently posted an interesting update:

The jailbreak is near ready for prime time (excluding 4S and iPad 2).

For now the jailbreak is tested on all devices, including iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G and iPod Touch 4G. iPad 2 and iPhone 4S status is “work in progress”.

pod2g has also published a new video demo of iOS 5.0.1 untethered jailbreak for iPhone 4:

http://www.youtube.com/watch?v=qdF58anFtiQ

Pod2g has recently announced that he has successfully performed an untethered jailbreak on an iPhone 4 running iOS 5.0.1.

Got an untethered iPhone 4 running iOS 5.0.1. Feel free to update.

Of course, if you want to SIM unlock, don’t update using Apple’s original FW nor update OTA.

This means jailbreakers can update to iOS 5.0.1. Previously it was recommended to stay on iOS 5. Unlockers as usual should stay away from Apple’s firmwares and from iOS 5.0.1.

We strongly recommend that everyone use TinyUmbrella to save their iOS 5.0.1 SHSH Blobs.

Pod2g writes in his blog, that next devices he will try to untehter jailbreak are iPod 3G, iPod 4G and iPad 1.

Chronic Dev Team is almost done with a much anticipated untethered jailbreak for iOS 5 and iOS 5.0.1. Team member and French hacker pod2g just released a video showing off the jailbreak. It looks to be near-complete and functioning properly. Take a look:

pod2g even created a blog, where he plans to post the most recent news about his progress:

Today I succeed in jailbreaking my iPod 3G. The exploit is user-land, rely on a user ROP payload and a kernel write anywhere exploit.

I can’t give much details right now, but here are the next steps :
- upgrade the iPod 3G to iOS 5.0.1
- do the same on iPhone 4 / iOS 5.0.1
- then iPad 1 & iPod 4G

At every step, the exploit code needs certainly to be reworked, but I really don’t know right now. Next, I’ll return to the research for iPad 2 and iPhone 4S. I don’t know if I gonna release first for other devices or not. I’ve to think about it. Feel free to give your opinion.

Semi-tethered jailbreak is already available for some devices for both iOS 5 and iOS 5.0.1. But we all want untethered jailbreak and we want jailbreak for iPad 2 and iPhone 4S. So why not help hackers to find new exploits and vulnerabilities?

The Chronic Dev-Team has a released a tool to collect crash reports from iOS devices in order to find vulnerabilities that could lead to an untethered jailbreak.

The idea is very simple. When your iPhone, iPad or iPod Touch crashes it sends data to Apple (you can turn it this off though). Apple uses these reports to update iOS in the future. By the way, it also uses them to fix exploits found by jailbreakers. P0sixninja says that Apple closed several exploits they have found in IOS 5 beta before the final version of the software was released.

In order to find more vulnerabilities as fast as possible, the team has developed a tool which will copy the crash reports from your device and analyze them to locate potential exploits. The tool will also remove the crash reports from your device and modify your iTunes installation to prevent uploading of that diagnostic information to Apple.

Read the rest of this entry »

Apple has recently released iOS 5.0.1. It is still tethered jailbreakable. However if you want untethered jailbreak or unlock – you should stay away from 5.0.1

Earlier this week pod2g reported that a code signing bug found in iOS 5.0 will make it easier for hackers to develop a full jailbreak for iOS 5 firmware version. That bug might have been closed in iOS 5.0.1. UPDATE: According to pod2g the bug is still present, but harder to exploit because another exploit found by Charlie Miller is fixed in iOS 5.0.1.

Also, MuscleNerd via twitter has warned iOS users that there is no downgrade from iOS 5.0.1 to iOS 5.0 yet and he recommends to wait until downgrade mechanism is available.

Jailbreakers and unlockers should avoid today’s 5.0.1 until a flow for downgrading to 5.0 is developed.

Downgrade flow needs to be modified for AP “nonce” http://is.gd/b3G0io … saved SHSH blobs are not enough to downgrade to 5.0

Here are our step-by-step tutorials that will guide you through all the process of jailbreaking iOS 5 with redsn0w 0.9.9 and sn0wbreeze 2.8:

iPhone 4

Semi-Tethered jailbreak iOS 5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)
• Sn0wBreeze (Windows)

Read the rest of this entry »

The iPhone Dev-Team has released an update to their UltraSn0w unlock bringing support for iOS 5. Remember that NO new basebands are supported in this release. It only adds support for iOS 5 with old basebands.

Here is the list of supported basebands:

• iPhone 4: 01.59.00
• iPhone 3G/3GS: 04.26.08, 05.11.07, 05.12.01, 05.13.04, 06.15.00.

If have one of the above baseband version and need unlock you can upgrade to iOS 5 without updating your baseband using RedSn0w 0.9.9b5.

Ultrasn0w 1.2.4 is available in Cydia.

We’ve updated ultrasn0w to be compatible with iOS5, which came out a few days ago. While ultrasn0w 1.2.4 (available now in Cydia) doesn’t add support for any new basebands, the update is required for any ultrasn0w unlockers trying out iOS5 (it remains backwards compatible though, so you should be able to use it no matter what firmware you have).

The supported basebands for the iPhone 3G and 3GS are 04.26.08, 05.11.07, 05.12.01, 05.13.04, and 06.15.00. The baseband supported for the iPhone4 is 01.59.00.

Remember, the only way to get to iOS5 while preserving your ultrasn0w-compatible baseband is by using a custom IPSW. redsn0w now has the ability to create such a custom IPSW for you (at least on Macs…the same capability for Windows will be coming soon).

The majority of people who use ultrasn0w at iOS5 right now will probably be those with old-bootrom iPhone3GS devices, since they already have an untethered jailbreak via redsn0w. For everyone else, the iOS5 jailbreak is currently tethered and you need to “Just boot” tethered with redsn0w every time your phone reboots. That’s not always easy to do if your phone reboots while away from home!

Note: there’s a special “trick” that iPhone3GS owners with baseband 06.15 need for iOS5. During the new setup screens you see when you start iOS5 for the first time, you’ll be asked about Location Services. Be sure to select “Disable Location Services” when asked! Later on in the setup, you’ll have the chance to turn on Location Services again when asked if you want to use “Find my iPhone”. It’s fine to turn it back on at that point, if that’s your desire (or you can always go in and enable it in Settings.app).

Also, some iPhone3GS users with the 06.15 baseband may have tried to install iOS5 using a stock IPSW (even though you should never ever try to use a stock IPSW if you’re an ultrasn0w unlocker). If you did try this, your baseband is probably in an inconsistent state, and you’ll need to reflash the 06.15 baseband again (using redsn0w). Be very careful if you use redsn0w to reflash the iPad baseband — don’t interrupt the process! And please avoid using stock IPSWs in the future Unlockers should never go near stock IPSWs.

UPDATE: Apple latest firmware is iOS 5.1.1. Apple has stopped signing all other firmwares, including iOS 5.0.1, iOS 4.3.3 and iOS 4.3.5. This means you can NOT restore to 5.0.1/4.3.3/4.3.5 any more (both original and custom), unless you have saved your SHSH keys for it.

If you have decided to perform an untethered jailbreak and unlock, you need to get the following information:

1. What type of device do you have (iPhone 3G/3GS/4, iPod Touch 3G/4G, iPad 1/2, Apple TV)?
2. Do you need unlock (if your iPhone locked to one carrier and you want to use it with another)?
   The answer is NO, if the device is not iPhone, if it was purchased as factory unlocked and can be used with any cellular carrier (f.e. in Canada, France, etc).
   If the answer is YES, you need to find out your modem version (Setting-General-About-Modem).
3. What firmware version do you have? Take a look at Setting-General-About-Version. For example it could be iOS 4.3.3.
4. What operating system do you use on your desktop (Windows, Mac OS)?

How to perform jailbreak, when you do NOT need an unlock

For iPhone 3G the latest is iOS 4.2.1. You can perform jailbreak with any utility. For iOS 4.2.1 you can also use them or GreenPois0n (Windows, Mac OS).

iPad 2 jailbreak is available only for iOS 4.3.3 via JailbreakMe and and iOS 5.0.1 via Absenthe.

iPhone 4S jailbreak is available for iOS 5.0 / iOS 5.0.1 via Absenthe.

iOS 4.3.3

Apple stopped signing iOS 4.3.3, so you cannot update to iOS 4.3.3 without SHSH keys saved (in advance some time ago). If you have iPhone 4, iPhone 3GS, iPad 1, iPod Touch 3G or iPod Touch 4G that run iOS 4.3.3 – use JailbreakMe or RedSn0w to untether jailbreak your device.

If you have saved SHSH keys for iOS 4.3.3 you can use PwnageTool (Mac OS) or Sn0wBreeze (Windows).

iOS 4.3.4/4.3.5

For iOS 4.3.4/4.3.5 only tethered jailbreak is possible with redsn0w. Tethered means that each time you restart your device you will have to connect it to a computer and run redsn0w. The untethered iOS 4.3.5 jailbreak is possible only for iPhone 3GS with old bootrom. You can detect your bootrom version using this tutorial.

iOS 5

To jailbreak and unlock iOS 5 use latest version of redsn0w 0.9.9 or sn0wbreeze 2.8. You can jailbreak tethered or semi-tethered.

The untethered iOS 5 jailbreak is possible only for iPhone 3GS with old bootrom. You can detect your bootrom version using this tutorial.

iOS 5.0.1

For iPhone 4/3GS, iPad 1, iPod Touch 3G/4G an untethered jailbreak is available for iOS 5.0.1. For untethered jailbreak use the latest redsn0w 0.9.10 or Corona – package from Cydia to untether currently installed tethered jailbreak.

Tutorial how to untether installed tethered jailbreak is available here.

For iPhone 4S and iPad 2 use Absenthe.

For tethered iOS 5.0.1 jailbreak you an use redsn0w 0.9.9 and sn0wbreeze 2.8.

iOS 5.1 / iOS 5.1.1

For now only tethered jailbreak is available for iPhone 4/3GS, iPad 1 and iPod Touch 3G/4G for iOS 5.1 and iOS 5.1.1.

You can download all firmwares here.

Tutorials

Here are our step-by-step tutorials that will guide you through the jailbreak process:

iPhone 4S

UnTethered jailbreak iOS 5.0 / iOS 5.0.1:

• Absinthe (Windows)
• Absinthe (Mac)

iPhone 4

Tethered jailbreak iOS 5.1.1:

• RedSn0w (Windows)

Tethered jailbreak iOS 5.1:

• RedSn0w (Windows)
• Custom firmware and jailbreak using Sn0wBreeze (Windows)

UnTethered jailbreak iOS 5.0.1:

• RedSn0w (Windows)
• Custom firmware using RedSn0w
• Custom firmware using Sn0wBreeze (Windows)
• Custom firmware using PwnageTool (Mac)

Semi-Tethered jailbreak iOS 5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)
• Sn0wBreeze (Windows)

Tethered jailbreak iOS 4.3.5:

• RedSn0w (Windows)
• RedSn0w (Mac OS)

UnTethered jailbreak iOS 4.3.3:

• RedSn0w (Windows)
• RedSn0w (Mac OS)
• PwnageTool (Mac OS)
• Sn0wBreeze (Windows)
• JailbreakMe (works without a computer)

Read the rest of this entry »