The iPhone Wiki - User contributions [en]

PwnageTool

2008-07-28T13:53:33Z

Cmw: /* Version 1.0 */

This is the dev team's jailbreak tool. It goes much further than a traditional jailbreak and compromises the bootchain from the start. It was released April 3, 2008 but largely unused until version 2.0 was released July 19, 2008. It is currently the only tool capable of jailbreaking 2.0

==Exploits Used==
===Version 2.0===
* [[pwnage 2.0]]
* [[pwnage]]

===Version 1.0===
* [[pwnage]]
* [[Ramdisk Hack]]
* [[LibTiff]]

==Download==
[http://xs1.iphwn.org/video_assets/PwnageTool_2.0.1.zip PwnageTool 2.0.1]

LibTiff Exploit

2008-07-28T13:52:37Z

Cmw:

The LibTiff exploit was discovered by [http://taviso.decsystem.org Tavis Ormandy (Taviso)]. 
It was originally exploited by [http://www.cmw.me cmw] Aka Niacin and [http://www.toc2rta.com/ dre]. 
It was later modified by [http://www.metasploit.com MetaSploit] then adbopted by [http://www.jailbreakme.com Jailbreakme.com].
 
Cmw was also responsible for creating the similar libtiff exploit for the PSP platform.

LibTiff Exploit

2008-07-28T13:51:32Z

Cmw:

LibTiff Exploit

2008-07-28T13:51:04Z

Cmw:

The LibTiff exploit was discovered by [http://taviso.decsystem.org Tavis Ormandy (Taviso)]. 
It was originally exploited by [http://www.cmw.me cmw] Aka Niacin and [http://www.toc2rta.com/ dre]. 
It was later modified by [http://www.metasploit.com] MetaSploit] then adbopted by [http://www.jailbreakme.com Jailbreakme.com].

LibTiff Exploit

2008-07-28T13:50:39Z

Cmw:

The LibTiff exploit was discovered by [http://taviso.decsystem.org Tavis Ormandy (Taviso)]. 
It was originally exploited by [http://www.cmw.me cmw] and [http://www.toc2rta.com/ dre]. 
It was later modified by [http://www.metasploit.com] MetaSploit] then adbopted by [http://www.jailbreakme.com Jailbreakme.com].

LibTiff Exploit

2008-07-28T13:50:14Z

Cmw:

LibTiff Exploit

2008-07-28T13:49:50Z

Cmw: New page: The LibTiff exploit was discovered by [http://taviso.decsystem.org Tavis Ormandy (Taviso)]. It was originally exploited by [http://www.cmw.me cmw] and [http://www.toc2rta.com/ dre]. It was...

The LibTiff exploit was discovered by [http://taviso.decsystem.org Tavis Ormandy (Taviso)]. It was originally exploited by [http://www.cmw.me cmw] and [http://www.toc2rta.com/ dre]. It was later modified by [http://www.metasploit.com] MetaSploit] then adbopted by [http://www.jailbreakme.com Jailbreakme.com].

Main Page

2008-07-28T13:47:22Z

Cmw:

<table border=1 width=100%><tr>
<td bgcolor=#64ff64 width=50%><center>[[PwnageTool|Jailbreak]]</center></td>
<td bgcolor=#ff6464 width=50%><center>[[Unlock 2.0|Unlock]]</center></td>
</tr>
<tr>
<td colspan=2>
[[Disclaimer]]
</td>
</tr>
</table>

Welcome to the iPhone wiki. This is a conglomerate work of everything done by everyone on the iPhone. Anyone can post here, just create an account. This is needed to avoid spam.

Read(and edit) the [[constitution]] to understand what purpose this wiki serves.

Read [[Up to speed|this]] to get up to speed in the iPhone community. Read the [[timeline]] to see where we are.

If you have notes on something you did, post them here. Even if it isn't pretty.

If you have a fix for a problem people are having, post it here.

==Hardware==
* [[m68ap|iPhone(m68ap)]]
* [[n82ap|iPhone 3G(n82ap)]]
* [[n45ap|iPod touch(n45ap)]]

==App Processor(Jailbreak)==
* [[S5L8900]]

===Exploits===
* [[Restore Mode]]
* [[LibTiff]]
* [[symlinks]]
* [[Ramdisk Hack]]
* [[pwnage]]
* [[diags]]
* [[pwnage 2.0]]

===Boot Chain===
[[VROM]]->[[LLB]]->[[iBoot]]->[[Kernel]]->[[System|System Software]]

===Upgrade Process===
[[VROM]]->[[DFU]]->[[WTF]]->[[iBoot]]->[[Kernel]]->[[Ramdisk]]->[[Restore Mode|Restore]]

==Baseband(Unlock)==
* [[S-Gold 2]]
* [[X-Gold 608]]

===Exploits===
* [[SIM hacks]]
* [[Fakeblank|Hardware Fakeblank]]
* [[IPSF]]
* [[Minus 0x400]]
* [[Jerrysim]]
* [[Minus 0x20000 with Back Extend Erase]]

===Theoretical Attacks===
* [[NCK Brute Force]]
* [[Baseband JTAG]]

===Boot Chain===
[[Baseband Bootrom|bootrom]]->[[Baseband Bootloader|bootloader]]->[[Baseband Firmware|firmware]]

==File formats==
* [[8900 File Format]]
* [[IMG2 File Format]]
* [[IMG3 File Format]]
* [[secpack]]
* [[secpack 2.0]]
* [[seczone]]

==Protocols==
* [[Recovery Mode 0x1280]]
* [[Recovery Mode 0x1281]]
* [[DFU 0x1222]]
* [[WTF 0x1227]]
* [[Normal Mode 0x1290]]
* [[Restore Mode]]
* [[Baseband Bootrom Protocol]]
* [[Interactive Mode|Baseband Bootloader Protocol]]

==Keys==
* [[AES Keys]]
* [[Apple Certificate]]
* [[Baseband RSA Keys]]
* [[Baseband TEA Keys]]
* [[VFDecrypt Keys|Root Filesystem DMG Keys]]

==Application Development==
* [[Toolchain]]
* [[Frameworks]]
* [[Apple Certification Process]]
* [[Distribution Methods]]

==Tutorials==
* [[Toolchain Tutorial]]
* [[Decrypt iPhone ipsw Beta 4-7 ramdisk]]

==Definitions==
* [[jailbreak]]
* [[activation]]
* [[unlock]]
* [[baseband]]
* [[Baseband Bootloader|bootloader]]