<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>https://www.theiphonewiki.com/w/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=Anima</id>
	<title>The iPhone Wiki - User contributions [en]</title>
	<link rel="self" type="application/atom+xml" href="https://www.theiphonewiki.com/w/api.php?action=feedcontributions&amp;feedformat=atom&amp;user=Anima"/>
	<link rel="alternate" type="text/html" href="https://www.theiphonewiki.com/wiki/Special:Contributions/Anima"/>
	<updated>2026-04-13T08:49:01Z</updated>
	<subtitle>User contributions</subtitle>
	<generator>MediaWiki 1.31.14</generator>
	<entry>
		<id>https://www.theiphonewiki.com/w/index.php?title=N72AP&amp;diff=2071</id>
		<title>N72AP</title>
		<link rel="alternate" type="text/html" href="https://www.theiphonewiki.com/w/index.php?title=N72AP&amp;diff=2071"/>
		<updated>2008-09-11T01:57:01Z</updated>

		<summary type="html">&lt;p&gt;Anima: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;This is the 2nd Generation iPod Touch&lt;br /&gt;
&lt;br /&gt;
Model: n72ap&lt;br /&gt;
Application Processor (OS Chip): s5l8720x&lt;br /&gt;
&lt;br /&gt;
== Decryption of it's Ramdisks, iBoot, LLB, Kernel, and friends ==&lt;br /&gt;
The application processor has a new [[GID]] key in it, so you can't decrypt kbags from it on any other device than itself. So, you pretty much will not even be able to make a pwned IPSW, let alone decrypt the RootFS, unless a low level (like, bootrom/kernel/iBoot) exploit is found. From there, it can be used to run code to decrypt the kbags so that we can in turn decrypt the files, and then to run code to actually pwn the device.&lt;br /&gt;
&lt;br /&gt;
== Notes ==&lt;br /&gt;
-It has a new [[GID]] key.&lt;br /&gt;
-[[iBoot]] seems to map itself at 0xFF00000.&lt;br /&gt;
-[[LLB]] is encrypted, which is new.&lt;br /&gt;
-The s5l8900 [[WTF]] is still in the firmware strangely enough, but there is no [[n72ap]] WTF.&lt;br /&gt;
-It uses the same [[KBAG]] method, but as previously stated, it has a new [[GID]] key so nothing can be decrypted at the time without allowing unsigned code.&lt;br /&gt;
&lt;br /&gt;
==Internals==&lt;br /&gt;
&amp;lt;i&amp;gt;See: [[n72ap (Internals)]]&amp;lt;/i&amp;gt; - Remarkably it has a Bluetooth Chip, shown by iFixit, but apparently it may only be used for Rf transmission to the Nike+ kit.&lt;/div&gt;</summary>
		<author><name>Anima</name></author>
		
	</entry>
	<entry>
		<id>https://www.theiphonewiki.com/w/index.php?title=N72AP&amp;diff=2060</id>
		<title>N72AP</title>
		<link rel="alternate" type="text/html" href="https://www.theiphonewiki.com/w/index.php?title=N72AP&amp;diff=2060"/>
		<updated>2008-09-11T01:30:58Z</updated>

		<summary type="html">&lt;p&gt;Anima: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;This is the 2nd Generation iPod Touch&lt;br /&gt;
&lt;br /&gt;
Model: n72ap&lt;br /&gt;
Application Processor (OS Chip): s5l8720x&lt;br /&gt;
&lt;br /&gt;
== Decryption of it's Ramdisks, iBoot, LLB, Kernel, and friends ==&lt;br /&gt;
The application processor has a new [[GID]] key in it, so you can't decrypt kbags from it on any other device than itself. So, you pretty much will not even be able to make a pwned IPSW, let alone decrypt the RootFS, unless a low level (like, bootrom/kernel/iBoot) exploit is found. From there, it can be used to run code to decrypt the kbags so that we can in turn decrypt the files, and then to run code to actually pwn the device.&lt;br /&gt;
&lt;br /&gt;
== Notes ==&lt;br /&gt;
-It has a new [[GID]] key.&lt;br /&gt;
-[[iBoot]] seems to map itself at 0xFF00000.&lt;br /&gt;
-[[LLB]] is encrypted, which is new.&lt;br /&gt;
-The s5l8900 [[WTF]] is still in the firmware strangely enough, but there is no [[n72ap]] WTF.&lt;br /&gt;
-It uses the same [[KBAG]] method, but as previously stated, it has a new [[GID]] key so nothing can be decrypted at the time without allowing unsigned code.&lt;br /&gt;
&lt;br /&gt;
==Internals==&lt;br /&gt;
&amp;lt;i&amp;gt;See: [[n72ap (Internals)]]&amp;lt;/i&amp;gt;&lt;/div&gt;</summary>
		<author><name>Anima</name></author>
		
	</entry>
	<entry>
		<id>https://www.theiphonewiki.com/w/index.php?title=N45AP&amp;diff=304</id>
		<title>N45AP</title>
		<link rel="alternate" type="text/html" href="https://www.theiphonewiki.com/w/index.php?title=N45AP&amp;diff=304"/>
		<updated>2008-07-28T06:58:47Z</updated>

		<summary type="html">&lt;p&gt;Anima: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;This is the iPod touch. It was released on September ?28, 2007 with a price tag of ?US$299 for 8GB and ?US$399 for 16GB. A 32GB model has also now been released.&lt;br /&gt;
&lt;br /&gt;
==Internals==&lt;br /&gt;
* [http://www.ifixit.com/Parts/stream/5/large/16-1.jpg iFixit image: &amp;quot;The bottom of the logic board, with the attached display processing board.&amp;quot;]&lt;br /&gt;
* [http://www.ifixit.com/Parts/stream/5/large/17-1.jpg iFixit image: &amp;quot;The top of both boards.&amp;quot;]&lt;br /&gt;
* [http://www.ifixit.com/Guide/First-Look/iPod/iPod-Touch iFixit page for iPod touch]&lt;/div&gt;</summary>
		<author><name>Anima</name></author>
		
	</entry>
	<entry>
		<id>https://www.theiphonewiki.com/w/index.php?title=N45AP&amp;diff=303</id>
		<title>N45AP</title>
		<link rel="alternate" type="text/html" href="https://www.theiphonewiki.com/w/index.php?title=N45AP&amp;diff=303"/>
		<updated>2008-07-28T06:54:43Z</updated>

		<summary type="html">&lt;p&gt;Anima: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;This is the iPod touch. It was released on September ?28, 2007 with a price tag of ?US$299 for 8GB and ?US$399 for 16GB.&lt;br /&gt;
&lt;br /&gt;
==Internals==&lt;br /&gt;
* [http://www.ifixit.com/Parts/stream/5/large/16-1.jpg iFixit image: &amp;quot;The bottom of the logic board, with the attached display processing board.&amp;quot;]&lt;br /&gt;
* [http://www.ifixit.com/Parts/stream/5/large/17-1.jpg iFixit image: &amp;quot;The top of both boards.&amp;quot;]&lt;br /&gt;
* [http://www.ifixit.com/Guide/First-Look/iPod/iPod-Touch iFixit page for iPod touch]&lt;/div&gt;</summary>
		<author><name>Anima</name></author>
		
	</entry>
	<entry>
		<id>https://www.theiphonewiki.com/w/index.php?title=N45AP&amp;diff=302</id>
		<title>N45AP</title>
		<link rel="alternate" type="text/html" href="https://www.theiphonewiki.com/w/index.php?title=N45AP&amp;diff=302"/>
		<updated>2008-07-28T06:50:14Z</updated>

		<summary type="html">&lt;p&gt;Anima: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;This is the iPod touch. It was released on September ?28, 2007 with a price tag of ?US$299 for 8GB and ?US$399 for 16GB.&lt;br /&gt;
&lt;br /&gt;
==Internals==&lt;br /&gt;
* [http://www.ifixit.com/Parts/stream/5/large/16-1.jpg iFixit]&lt;br /&gt;
* [http://www.ifixit.com/Parts/stream/5/large/17-1.jpg iFixit]&lt;/div&gt;</summary>
		<author><name>Anima</name></author>
		
	</entry>
	<entry>
		<id>https://www.theiphonewiki.com/w/index.php?title=N45AP&amp;diff=301</id>
		<title>N45AP</title>
		<link rel="alternate" type="text/html" href="https://www.theiphonewiki.com/w/index.php?title=N45AP&amp;diff=301"/>
		<updated>2008-07-28T06:48:08Z</updated>

		<summary type="html">&lt;p&gt;Anima: New page: This is the iPod touch. It was released on September ?28, 2007 with a price tag of ?US$299 for 8GB and ?US$399 for 16GB.  ==Internals== * [http://www.ifixit.com/Parts/stream/5/thumb/16-1.j...&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;This is the iPod touch. It was released on September ?28, 2007 with a price tag of ?US$299 for 8GB and ?US$399 for 16GB.&lt;br /&gt;
&lt;br /&gt;
==Internals==&lt;br /&gt;
* [http://www.ifixit.com/Parts/stream/5/thumb/16-1.jpg iFixit]&lt;br /&gt;
* [http://www.ifixit.com/Parts/stream/5/thumb/17-1.jpg iFixit]&lt;/div&gt;</summary>
		<author><name>Anima</name></author>
		
	</entry>
	<entry>
		<id>https://www.theiphonewiki.com/w/index.php?title=Main_Page&amp;diff=300</id>
		<title>Main Page</title>
		<link rel="alternate" type="text/html" href="https://www.theiphonewiki.com/w/index.php?title=Main_Page&amp;diff=300"/>
		<updated>2008-07-28T06:11:31Z</updated>

		<summary type="html">&lt;p&gt;Anima: /* Hardware */&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;&amp;lt;table border=1 width=100%&amp;gt;&amp;lt;tr&amp;gt;&lt;br /&gt;
&amp;lt;td bgcolor=#64ff64 width=50%&amp;gt;&amp;lt;center&amp;gt;&amp;lt;b&amp;gt;[[PwnageTool|Jailbreak]]&amp;lt;/b&amp;gt;&amp;lt;/center&amp;gt;&amp;lt;/td&amp;gt;&lt;br /&gt;
&amp;lt;td bgcolor=#ff6464 width=50%&amp;gt;&amp;lt;center&amp;gt;&amp;lt;b&amp;gt;[[Unlock 2.0|Unlock]]&amp;lt;/b&amp;gt;&amp;lt;/center&amp;gt;&amp;lt;/td&amp;gt;&lt;br /&gt;
&amp;lt;/tr&amp;gt;&lt;br /&gt;
&amp;lt;tr&amp;gt;&lt;br /&gt;
&amp;lt;td colspan=2&amp;gt;&lt;br /&gt;
  [[Disclaimer]]&lt;br /&gt;
&amp;lt;/td&amp;gt;&lt;br /&gt;
&amp;lt;/tr&amp;gt;&lt;br /&gt;
&amp;lt;/table&amp;gt;&lt;br /&gt;
&lt;br /&gt;
Welcome to the iPhone wiki. This is a conglomerate work of everything done by everyone on the iPhone. Anyone can post here, just create an account. This is needed to avoid spam.&lt;br /&gt;
&lt;br /&gt;
Read the [[constitution]] to understand why this wiki was created. &lt;br /&gt;
&lt;br /&gt;
Read [[Up to speed|this]] to get up to speed in the iPhone community. Read the [[timeline]] to see where we are.&lt;br /&gt;
&lt;br /&gt;
If you have notes on something you did, post them here. Even if it isn't pretty.&lt;br /&gt;
&lt;br /&gt;
If you have a fix for a problem people are having, post it here.&lt;br /&gt;
&lt;br /&gt;
==Hardware==&lt;br /&gt;
* [[m68ap|iPhone(m68ap)]]&lt;br /&gt;
* [[n82ap|iPhone 3G(n82ap)]]&lt;br /&gt;
* [[n45ap|iPod touch(n45ap)]]&lt;br /&gt;
&lt;br /&gt;
==App Processor(Jailbreak)==&lt;br /&gt;
* [[S5L8900]]&lt;br /&gt;
&lt;br /&gt;
===Exploits===&lt;br /&gt;
* [[Restore Mode]]&lt;br /&gt;
* [[jailbreakme]]&lt;br /&gt;
* [[symlinks]]&lt;br /&gt;
* [[Ramdisk Hack]]&lt;br /&gt;
* [[pwnage]]&lt;br /&gt;
* [[diags]]&lt;br /&gt;
* [[pwnage 2.0]]&lt;br /&gt;
&lt;br /&gt;
===Boot Chain===&lt;br /&gt;
[[VROM]]-&amp;gt;[[iBoot]]-&amp;gt;[[Kernel]]-&amp;gt;[[System|System Software]]&lt;br /&gt;
&lt;br /&gt;
===Upgrade Process===&lt;br /&gt;
[[VROM]]-&amp;gt;[[DFU]]-&amp;gt;[[WTF]]-&amp;gt;[[iBoot]]-&amp;gt;[[Kernel]]-&amp;gt;[[Ramdisk]]-&amp;gt;[[Restore Mode|Restore]]&lt;br /&gt;
&lt;br /&gt;
==Baseband(Unlock)==&lt;br /&gt;
* [[S-Gold 2]]&lt;br /&gt;
* [[X-Gold 608]]&lt;br /&gt;
&lt;br /&gt;
===Exploits===&lt;br /&gt;
* [[SIM hacks]]&lt;br /&gt;
* [[Fakeblank|Hardware Fakeblank]]&lt;br /&gt;
* [[IPSF]]&lt;br /&gt;
* [[Minus 0x400]]&lt;br /&gt;
* [[Jerrysim]]&lt;br /&gt;
* [[Minus 0x20000 with Back Extend Erase]]&lt;br /&gt;
&lt;br /&gt;
===Theoretical Attacks===&lt;br /&gt;
* [[NCK Brute Force]]&lt;br /&gt;
* [[Baseband JTAG]]&lt;br /&gt;
&lt;br /&gt;
===Boot Chain===&lt;br /&gt;
[[Baseband Bootrom|bootrom]]-&amp;gt;[[Baseband Bootloader|bootloader]]-&amp;gt;[[Baseband Firmware|firmware]]&lt;br /&gt;
&lt;br /&gt;
==File formats==&lt;br /&gt;
* [[8900 File Format]]&lt;br /&gt;
* [[IMG2 File Format]]&lt;br /&gt;
* [[IMG3 File Format]]&lt;br /&gt;
* [[secpack]]&lt;br /&gt;
* [[secpack 2.0]]&lt;br /&gt;
* [[seczone]]&lt;br /&gt;
&lt;br /&gt;
==Protocols==&lt;br /&gt;
* [[Recovery Mode 0x1280]]&lt;br /&gt;
* [[Recovery Mode 0x1281]]&lt;br /&gt;
* [[DFU 0x1222]]&lt;br /&gt;
* [[WTF 0x1227]]&lt;br /&gt;
* [[Normal Mode 0x1290]]&lt;br /&gt;
* [[Restore Mode]]&lt;br /&gt;
* [[Baseband Bootrom Protocol]]&lt;br /&gt;
* [[Interactive Mode|Baseband Bootloader Protocol]]&lt;br /&gt;
&lt;br /&gt;
==Keys==&lt;br /&gt;
* [[AES Keys]]&lt;br /&gt;
* [[Apple Certificate]]&lt;br /&gt;
* [[Baseband RSA Keys]]&lt;br /&gt;
* [[Baseband TEA Keys]]&lt;br /&gt;
* [[VFDecrypt Keys|Root Filesystem DMG Keys]]&lt;br /&gt;
&lt;br /&gt;
==Application Development==&lt;br /&gt;
* [[Toolchain]]&lt;br /&gt;
* [[Frameworks]]&lt;br /&gt;
* [[Apple Certification Process]]&lt;br /&gt;
* [[Distribution Methods]]&lt;br /&gt;
&lt;br /&gt;
==Tutorials==&lt;br /&gt;
* [[Toolchain Tutorial]]&lt;/div&gt;</summary>
		<author><name>Anima</name></author>
		
	</entry>
	<entry>
		<id>https://www.theiphonewiki.com/w/index.php?title=User:Anima&amp;diff=299</id>
		<title>User:Anima</title>
		<link rel="alternate" type="text/html" href="https://www.theiphonewiki.com/w/index.php?title=User:Anima&amp;diff=299"/>
		<updated>2008-07-28T05:13:08Z</updated>

		<summary type="html">&lt;p&gt;Anima: New page: Yo&lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;Yo&lt;/div&gt;</summary>
		<author><name>Anima</name></author>
		
	</entry>
	<entry>
		<id>https://www.theiphonewiki.com/w/index.php?title=Firmware&amp;diff=298</id>
		<title>Firmware</title>
		<link rel="alternate" type="text/html" href="https://www.theiphonewiki.com/w/index.php?title=Firmware&amp;diff=298"/>
		<updated>2008-07-28T05:11:16Z</updated>

		<summary type="html">&lt;p&gt;Anima: &lt;/p&gt;
&lt;hr /&gt;
&lt;div&gt;This is the Mac OS X system the iPhone runs.&lt;br /&gt;
&lt;br /&gt;
The Apple download links can be found at http://ax.phobos.apple.com.edgesuite.net/WebObjects/MZStore.woa/wa/com.apple.jingle.appserver.client.MZITunesClientCheck/version&lt;br /&gt;
&lt;br /&gt;
==Versions==&lt;br /&gt;
 iPhone  	1.0.0  	Heavenly 1A543a  	03.12.06_G  	UserBundle  	iPhone1,1_1.0_1A543a_Restore.ipsw  	Initial US shipment.&lt;br /&gt;
 iPhone  	1.0.1 	Heavenly 1C25 	        03.12.06_G 	UserBundle 	iPhone1,1_1.0.1_1C25_Restore.ipsw 	&lt;br /&gt;
 iPhone  	1.0.2 	Heavenly 1C28 	        03.14.08_G 	UserBundle 	iPhone1,1_1.0.2_1C28_Restore.ipsw 	&lt;br /&gt;
 iPhone  	1.1.1 	Snowbird 3A109a 	04.01.13_G 	UserBundle 	iPhone1,1_1.1.1_3A109a_Restore.ipsw 	&lt;br /&gt;
 iPhone  	1.1.2 	Oktoberfest 3B48a 	04.02.13_G 	??? 	        No download available 	                Initial Euro shipment&lt;br /&gt;
 iPhone  	1.1.2 	Oktoberfest 3B48b 	04.02.13_G 	UserBundle 	iPhone1,1_1.1.2_3B48b_Restore.ipsw 	&lt;br /&gt;
 iPhone  	1.1.3 	Little Bear 4A93 	04.03.13_G 	UserBundle 	iPhone1,1_1.1.3_4A93_Restore.ipsw 	&lt;br /&gt;
 iPhone  	1.1.4 	Little Bear 4A102 	04.04.05_G 	UserBundle 	iPhone1,1_1.1.4_4A102_Restore.ipsw 	&lt;br /&gt;
 iPhone  	2.0 	Big Bear 5A347 			                        iPhone1,1_2.0_5A347_Restore.ipsw 	&lt;br /&gt;
 iPhone 3G 	2.0 	Big Bear 5A347 			                        iPhone1,2_2.0_5A347_Restore.ipsw 	&lt;br /&gt;
 iPod touch 	1.1.0 	Snowbird 3A100a 	N/A 	        ??? 	        No download available 	                Initial shipment.&lt;br /&gt;
 iPod touch 	1.1.0 	Snowbird 3A101a 	N/A 	        N45Bundle 	iPod1,1_1.1_3A101a_Restore.ipsw 	&lt;br /&gt;
 iPod touch 	1.1.1 	Snowbird 3A110a 	N/A 	        N45Bundle 	iPod1,1_1.1.1_3A110a_Restore.ipsw 	&lt;br /&gt;
 iPod touch 	1.1.2 	Oktoberfest 3B48b 	N/A 	        N45Bundle 	iPod1,1_1.1.2_3B48b_Restore.ipsw 	&lt;br /&gt;
 iPod touch 	1.1.3 	Little Bear 4A93 	N/A 	        N45Bundle 	iPod1,1_1.1.3_4A93_Restore.ipsw 	&lt;br /&gt;
 iPod touch 	1.1.4 	Little Bear 4A102 	N/A 	        N45Bundle 	iPod1,1_1.1.4_4A102_Restore.ipsw 	&lt;br /&gt;
 iPod touch 	1.1.5 	Little Bear 4B1 	N/A 		                iPod1,1_1.1.5_4B1_Restore.ipsw 	&lt;br /&gt;
 iPod touch 	2.0 	Big Bear 5A347 	        N/A	                        iPod1,1_2.0_5A347_Restore.ipsw&lt;br /&gt;
&lt;br /&gt;
==Resources==&lt;br /&gt;
[http://www.trejan.com/projects/ipod/ Firmware List]&lt;/div&gt;</summary>
		<author><name>Anima</name></author>
		
	</entry>
</feed>