The iPhone Wiki - User contributions [en]

User:GreySyntax

2013-05-23T02:02:10Z

GreySyntax: /* Sites */

Im GreySyntax,
an iOS developer. I'm also familiar with many C based languages (C/C++/C#/PHP/JAVA/SQL/Javascript). I've been developing software for around 3 years, I'm currently doing freelance work. I am also an experienced *nix admin.

== Projects ==

:[[Pneumonia]]

:[[IRecovery|iRecovery++]]

:[[AlpineUSB]]

== Contributions ==

:[[IRecovery|iRecovery]]

== Sites ==

:[http://www.nspwn.com NSPwn]

:[http://github.com/GreySyntax Github]

== Contact ==

:[http://twitter.com/GreySyntax Twitter]

:[irc://irc.expl0it.com/chat IRC] (Ask for me or private message me)

Talk:/

2011-07-14T23:39:08Z

GreySyntax:

== Remove 'tildes' ==
I vote that the tildes (~) should be removed from the page, as these imply that they're inside the user's home directory. I realise that in the context of this page, they indicate symlinks, but can they be replaced with something else? Eg '>'.
Originally I was confused as to where the folders were until I realised that the tilde indicated a symlink. --[[User:Beau|Beau]] 04:44, 19 November 2010 (UTC)

Can we add the Apple Internal Files to here?
:Sure posting copyrighten content without permission is perfectly legal... oh wait it's not --[[User:GreySyntax|GreySyntax]] 23:39, 14 July 2011 (UTC)

Talk:Main Page

2011-07-05T23:28:13Z

GreySyntax: /* Main Page Orange Bar */

{{Talk Archive|2010|2011}}

== Main Page Orange Bar ==
I'm getting kind of sick of looking at it, as those things will probably never be done. Anyone want to be bold and replace it with a nice colored jailbreak/unlock status for each device on the latest version(include newest jailbreakable/unlockable if latest isn't). I'd do it but I'm lazy and don't know mediawiki. --[[User:Geohot|geohot]] 07:40, 4 July 2011 (UTC)
:I just changed it. I hope this table's good. :P --[[User:Dialexio|Dialexio]] 16:06, 4 July 2011 (UTC)
::Good start. I would change this: a) iPhone 4 can be unlocked (mine is). This is not mentioned (requires baseband 1.59.00) b) I thought of having a table with one row and each column represents a device with its status (group some together). Maybe a second row for unlock. c) Instead of Firmware page, I would link to Jailbreak page (and Unlock page, but that's outdated). -- [[User:Http|http]] 20:16, 4 July 2011 (UTC)
Can you change the spaces on the first line to &nbsp; to keep it on one line? Can you also change ''iPhone'' to ''device'' as the iPad 1G can be unlocked. Also change N/A to <code><nowiki>{{partial|iPad 1G only}}</nowiki></code> or similar --[[User:Balloonhead66|Balloonhead66]] 17:34, 5 July 2011 (UTC)
:Thanks --[[User:Balloonhead66|Balloonhead66]] 21:07, 5 July 2011 (UTC)
Is it just me or does everyone see it like [http://img215.imageshack.us/img215/6827/wikih.png this]? I am on a netbook, so my small screen might show it different. --[[User:JacobVengeance|JakeAnthraX]] 22:34, 5 July 2011 (UTC)
:Google Chrome! It is because of all of the other stuff on the left two columns. IF it could be summarized better, it world look better. --[[User:Balloonhead66|Balloonhead66]] 23:23, 5 July 2011 (UTC)
:It's because your on a device with a smaller screen, with a low resolution you can't fit as much content, looks just fine on mine. --[[User:GreySyntax|GreySyntax]] 23:28, 5 July 2011 (UTC)

Mojave 8M89 (AppleTV2,1)

2010-12-30T02:34:47Z

GreySyntax: /* Decryption Keys */

This is iOS 4.1 on the [[k66ap|Apple TV 2G]]. On the TV screen (Setting/General/About) this version appears as Software Version 4.0.

== Decryption Keys ==
=== Main Filesystem (018-8609-066.dmg) ===
* '''[[VFDecrypt]] Key''': 31c700a852f1877c88efc05bc5c63e8c7f081c4cb28d024ed7f9b0dbc98c7e1406e499c6

===[[Restore Ramdisk]] (018-8613-062.dmg)===
* '''IV''': 193f5c4a3a8fb0643e9cac4020b67e1c
* '''Key''': 1cdaede20dfc5f2299f23c237688b341390088c71b8aa63793770e5c1f3e6dc9

===[[Update Ramdisk]] (018-8618-062.dmg)===
* '''IV:''' 5fe67aa4b1ad60114ed6c661f3e3fd64
* '''Key:''' 5fa15fe83e35b0a6ec1e4fccd70bced808037f42966425f7f6b499feae3772b8

===AppleLogo===
* '''IV:''' b33700bd5540efdfbca317b9a1fd9a4c
* '''Key:''' 0fea871e64de2cddb336b2507dd19bc9a8a1af64132d963faec19acf7b8fb20d

===BatteryCharging0===
* '''IV:''' 8de0d6cd248ef395510e1d20230cd941
* '''Key:''' 5a65719d006a92c3901053eec73cec66a9da95fe99e5ffb95038ca162d854b9d

===BatteryCharging1===
* '''IV:''' f821980de89219774dd173b624594dc1
* '''Key:''' 52d7917543c7308203093d2fa829fd8b6ce788928673d51fef3904555695e616

===BatteryFull===
* '''IV:''' f8bc23e80494d0bde741c7e221ebaa8e
* '''Key:''' f7256c36141a0a3fb68ae633432351dbbfb3e3c5891aa332e4247a5d42a49a44

===BatteryLow0===
* '''IV:''' 8e9df3bcaa54837361a5ed6328a6326a
* '''Key:''' 2b0ef27340d2e3137491ebc7fbba578e519e013b48dc2b14ce87f12282bc89d1

===BatteryLow1===
* '''IV:''' 847395a8f78da69696ea16900137e537
* '''Key:''' ed90a51d8a3a2ab07ec80ba50cfc3e030e8efd850833354678773e7c0a9502a6

===DeviceTree===
*'''IV:''' d0b28f3d1370c3c3042bf96b18e93078
*'''Key:''' faeb30db4b35e53ec76cf9ef159f331bd2902fa0d71075b7a1d31689cab666b6

===GlyphCharging===
* '''IV:''' 91bd8d68e794de15b72113fa8f3c1e33
* '''Key:''' c37986feb1fd83c9cb1d5e9009c9002f2b1ae41b69587ea6b0f45fe30cdcfe69

===GlyphPlugin===
* '''IV:''' 083fdf7a566bfef613512f50907fab43
* '''Key:''' 58b4719aa449b469d0d6f76cbb149b3758673a329f9d1d0bd266034d64a2915c

===[[iBEC]]===
* '''IV:''' 56f018315b461bfce4b9f38b990544b9
* '''Key:''' e8735b92311930b5ea7ddeea3455af21944454daf03f67216aefb0384e10a6cc

===[[iBoot (Bootloader)|iBoot]]===
* '''IV:''' c9fc3b7f612911c2626a08a532d3e726
* '''Key:''' d978ace5459d666602efd53a1b24a5837d350f33e91bad31a739bd742a9be813

===[[iBSS]]===
* '''IV:''' 921a1405543996714f80d2fb1f8d0242
* '''Key:''' e31d511699eb9564c7174932e595e75f08aaa11d392d9026f28fe60ede336fc2

=== [[Kernelcache]] ===
* '''IV:''' 04211b55ba007f32c15d49526bacf4b4
* '''Key:''' 35be9d8e7b2a3a0f004e8fff51de4415348f476acd3a094a5961e929f8b79f17

===[[LLB]]===
* '''IV:''' ca059d2e76f9fa549843c51e796cc210
* '''Key:''' 2c4c14d24f629f8d66d16e63fe5a24f091ee450c98fbfa48ab871ecb92a6e02e

===RecoveryMode===
*'''IV:''' fdb039259f52d102694953d8a35cb13a
*'''Key:''' 04b565f72e2f5117dc171c782ef6199294e1bdff2c98bbad6caea2a0ca52a24f

==Thanks==
Thanks to GreySyntax

Talk:Main Page

2010-11-24T23:52:16Z

GreySyntax: /* Protection on Main Page/Welcome */

{{Talk Archive|Start to November 12, 2010}}

== Posting [[KBAG]]s ==
Is there really a need to post [[KBAG]]s, if we already have decryption keys? Hell better yet instead of posting [[KBAG]]'s post missing keys. --[[User:GreySyntax|GreySyntax]] 16:57, 12 November 2010 (UTC)
: i agree, [[KBAG]]'s are practically useless after you have got the keys from them but [[User:liamchat|liamchat]] seems to post them anyway... --[[User:Cj|cj]] 17:01, 12 November 2010 (UTC)
:: i added them because i didn't have that device and on some pages the [[KBAG]]'s are there with the keys so why not do that on all pages --[[User:Liamchat|liamchat]] 20:38, 12 November 2010 (UTC)
:::Posting the [[KBAG]] and not saying what there from is useless. --[[User:GreySyntax|GreySyntax]] 20:40, 12 November 2010 (UTC)
:::the layout was confusing i grab them in one big lump and it follows a generic system ( see [[User_talk:Liamchat#KBAGs|KBAG layout ]] ) --[[User:Liamchat|liamchat]] 20:45, 12 November 2010 (UTC)
::::The least you could do is place them appropriately, and not force someone like me to clean up after you. --[[User:Dialexio|Dialexio]] 21:10, 12 November 2010 (UTC)

== Protection ==
Can someone inform me why the main page was protected from all users? Not just newly created users? Cheers. --[[User:Beau|Beau]] 03:19, 8 November 2010 (UTC)
:An edit war took place earlier, and unfortunately there's no option to protect it from just newly created users. If you want to make a change, Http and I will be more than happy to carry it out (pending approval, but we're pretty reasonable). --[[User:Dialexio|Dialexio]] 03:46, 8 November 2010 (UTC)
::There kindof is, you just need to update to 1.16, but i guess only geohot can do that... :( --[[User:Balloonhead66|Balloonhead66]] 03:49, 8 November 2010 (UTC)
:::What was the war about? --[[User:Balloonhead66|Balloonhead66]] 00:22, 17 November 2010 (UTC)
:::Thanks [[User:Dialexio|Dialexio]], just thought that it was strange that Wiki pages are starting to be put together for [[:/Applications]] yet there's no link present on the main page - if anything it might fit best atop the Software list. --[[User:Beau|Beau]] 03:58, 8 November 2010 (UTC)
::::It's actually already there, under the name "Filesystem" (which links to the root directory of iOS). :) --[[User:Dialexio|Dialexio]] 04:33, 8 November 2010 (UTC)

== Protection on [[Main Page/Welcome]] ==

I think you should protect [[Main Page/Welcome]] as it is editable by anyone... That is how I added the info on an IRC chatroom... --[[User:Balloonhead66|Balloonhead66]] 18:51, 24 November 2010 (UTC)
:does this work on any other part's of this page and do we need an irc channel for a wiki --[[User:Liamchat|liamchat]] 23:18, 24 November 2010 (UTC)
::No reason not to have an IRC, just leave it be and people can go there to discuss things like formatting and what not. --[[User:JacobVengeance|JakeAnthraX]] 23:41, 24 November 2010 (UTC)
:::It would be better to have it on a more iOS centered network such as Chronic's irc or OSx86. --[[User:GreySyntax|GreySyntax]] 23:52, 24 November 2010 (UTC)
::The Main Page is protected for three years only because n00bs kept adding themselves as iPhone hackers. Otherwise, it'd be open for editing by users like you. I see no need to protect [[Main Page/Welcome]] as long as there's no edit war, vandalism, or spam. :) --[[User:Dialexio|Dialexio]] 23:27, 24 November 2010 (UTC)

Firmware

2010-11-17T19:21:12Z

GreySyntax: Reverted liamchat's changes 4.2 isn't out yet, no usefull information was added.

Latest Apple download links can be found [http://www.itunes.com/version here].

==Comparison of firmware versions==

===[[K66ap|Apple TV (2nd generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="40"| [[IBoot (Bootloader)|iBoot]]
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="100"| Publicly available virgin [[jailbreak]]?
!width="70"| File Size
|-
| 4.1
| [[Mojave 8M89 (Apple TV 2G)|Mojave 8M89]]
| [[IBoot-931.44.21|931.44.21]]
| [http://appldnld.apple.com/AppleTV/061-8940.20100926.Tvtnz/AppleTV2,1_4.1_8M89_Restore.ipsw AppleTV2,1_4.1_8M89_Restore.ipsw]
| <code>68647d6ce163fc20891ca5bcff647c8eecc2b8d9</code>
| Initial shipment.
| {{yes}}
| 253,759,976
|}

===[[K48ap|iPad]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| [[X-Gold 608#Known iPad Firmware Versions|Baseband]] (3G only)
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="100"| Publicly available virgin [[jailbreak]]?
!width="70"| File Size
|-
| 3.2
| [[Wildcat 7B367 (iPad)|Wildcat 7B367]]
|rowspan="3" | [[6.15.00]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPad/061-7987.20100403.mjiTr/iPad1,1_3.2_7B367_Restore.ipsw iPad1,1_3.2_7B367_Restore.ipsw]
| <code>172e8297af74b91971a802e6ad137c891f553099</code>
| Initial shipment.
| {{yes}}
| 478,959,325
|-
| 3.2.1
| [[Wildcat 7B405 (iPad)|Wildcat 7B405]]
| [http://appldnld.apple.com/iPad/061-8282.20100713.vgtgh/iPad1,1_3.2.1_7B405_Restore.ipsw iPad1,1_3.2.1_7B405_Restore.ipsw]
| <code>de0a2b64cd335d48fb4abc9ed8700f5dbdf768ca</code>
|
| {{yes}}
| 479,012,625
|-
| 3.2.2
| [[Wildcat 7B500 (iPad)|Wildcat 7B500]]
| [http://appldnld.apple.com/iPad/061-8801.20100811.CvfR5/iPad1,1_3.2.2_7B500_Restore.ipsw iPad1,1_3.2.2_7B500_Restore.ipsw]
| <code>68b613f78581d36eab96aa5a007001dff142baa3</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| 479,001,595
|-
| 4.2
| [[Jasper 8C (iPad)|Jasper 8C]]
| not out yet
| ?
| ?
|
| {{no}}
| ?
|}

===[[M68ap|iPhone]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| [[Baseband Firmware]]
!width="210"| IPSW Download URL
!width="220"| SHA1 Hash
!width="140"| Comments
!width="99"| Publicly available virgin [[jailbreak]]?
!width="91"| Publicly available virgin [[unlock]]?
!width="70"| File Size
|-
| 1.0
| [[Alpine 1A420]]
| [http://img399.imageshack.us/i/iphone2go0.jpg/ 03.06.01_G]
| iphoneproto.zip
| <code>6e798e906c6590a7521ef89b731569be6d05b3aa</code>
| Prototype; [http://forums.macrumors.com/showthread.php?t=627449 macrumors]
| {{no}}
| {{no}}
| 109,813,128
|-
| 1.0.0
| Heavenly 1A543a
| 03.11.02_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3538.20070629.B7vXa/iPhone1,1_1.0_1A543a_Restore.ipsw iPhone1,1_1.0_1A543a_Restore.ipsw]
| <code>fb8bb3ee2e9a997affbb97868599f2995c78209c</code>
| Initial US shipment.
| {{yes}}
| {{yes}}
| 95,604,348
|-
| 1.0.1
| Heavenly 1C25
| 03.12.06_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3614.20070731.Nt6Y7/iPhone1,1_1.0.1_1C25_Restore.ipsw iPhone1,1_1.0.1_1C25_Restore.ipsw]
| <code>a00b85a7a55d62a94be5fbf5effbc42fd63f3097</code>
|
| {{yes}}
| {{yes}}
| 95,627,958
|-
| 1.0.2
| Heavenly 1C28
| 03.14.08_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3823.20070821.vormd/iPhone1,1_1.0.2_1C28_Restore.ipsw iPhone1,1_1.0.2_1C28_Restore.ipsw]
| <code>7f5c0ff1f84a0202b75a55c3fcb362e415334d1e</code>
|
| {{yes}}
| {{yes}}
| 95,627,324
|-
| 1.1.1
| Snowbird 3A109a
| 04.01.13_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3883.20070927.In76t/iPhone1,1_1.1.1_3A109a_Restore.ipsw iPhone1,1_1.1.1_3A109a_Restore.ipsw]
| <code>d441dd1c71ce18f25d8fc4faa71c1e6eaa02d02c</code>
|
| {{yes}}
| {{yes}}
| 159,668,150
|-
| 1.1.2
| Oktoberfest 3B48b
| 04.02.13_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4037.20071107.5Bghn/iPhone1,1_1.1.2_3B48b_Restore.ipsw iPhone1,1_1.1.2_3B48b_Restore.ipsw]
| <code>797c02e7d660940e8d9a16cc7229ccf3f67dd8b1</code>
| Initial Euro shipment.
| {{yes}}
| {{yes}}
| 167,927,501
|-
| 1.1.3
| Little Bear 4A93
| 04.03.13_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4061.20080115.4Fvn7/iPhone1,1_1.1.3_4A93_Restore.ipsw iPhone1,1_1.1.3_4A93_Restore.ipsw]
| <code>b3dec7580bd00dc4faf28449d9618ef40aeacc96</code>
|
| {{yes}}
| {{yes}}
| 169,950,551
|-
| 1.1.4
| Little Bear 4A102
| 04.04.05_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4313.20080226.Sw39i/iPhone1,1_1.1.4_4A102_Restore.ipsw iPhone1,1_1.1.4_4A102_Restore.ipsw]
| <code>000811bac096011b50ebf6ec1ec2285b62fda4cb</code>
|
| {{yes}}
| {{yes}}
| 169,946,442
|-
| 2.0
| [[Big Bear 5A347 (iPhone)|Big Bear 5A347]]
|rowspan="11"| 04.05.04_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4956.20080710.V50OI/iPhone1,1_2.0_5A347_Restore.ipsw iPhone1,1_2.0_5A347_Restore.ipsw]
| <code>9c510a3cfce789fa5f92a8f763c231bac82ff6d4</code>
|
| {{yes}}
|rowspan="11" {{yes|[[BootNeuter]]}}
| 228,768,637
|-
| 2.0.1
| [[Big Bear 5B108 (iPhone)|Big Bear 5B108]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5135.20080729.Vfgtr/iPhone1,1_2.0.1_5B108_Restore.ipsw iPhone1,1_2.0.1_5B108_Restore.ipsw]
| <code>61de6a2bd6ceddc9ecabad1671b91a59b3824bc4</code>
|
| {{yes}}
| 254,048,068
|-
| 2.0.2
| [[Big Bear 5C1 (iPhone)|Big Bear 5C1]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5246.20080818.2V0hO/iPhone1,1_2.0.2_5C1_Restore.ipsw iPhone1,1_2.0.2_5C1_Restore.ipsw]
| <code>b84b57bea919bdc720287ec908c1378e7d7b5e1b</code>
|
| {{yes}}
| 253,589,000
|-
| 2.1
| [[Sugar Bowl 5F136 (iPhone)|Sugar Bowl 5F136]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5202.20080909.gkbEj/iPhone1,1_2.1_5F136_Restore.ipsw iPhone1,1_2.1_5F136_Restore.ipsw]
| <code>353b7745767b85932e14e262e69463620939bdf7</code>
|
| {{yes}}
| 242,171,241
|-
| 2.2
| [[Timberline 5G77 (iPhone)|Timberline 5G77]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5779.20081120.Pt5yH/iPhone1,1_2.2_5G77_Restore.ipsw iPhone1,1_2.2_5G77_Restore.ipsw]
| <code>cbfc6ff886ce89868a55547b9fb980dbf92e6418</code>
|
| {{yes}}
| 257,576,980
|-
| 2.2.1
| [[SUTimberline 5H11 (iPhone)|SUTimberline 5H11]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5830.20090127.Mmni6/iPhone1,1_2.2.1_5H11_Restore.ipsw iPhone1,1_2.2.1_5H11_Restore.ipsw]
| <code>43b95ebe1e51f8d30eae916053396595c08440d3</code>
|
| {{yes}}
| 257,593,705
|-
| 3.0
| [[Kirkwood 7A341 (iPhone)|Kirkwood 7A341]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6580.20090617.XsP76/iPhone1,1_3.0_7A341_Restore.ipsw iPhone1,1_3.0_7A341_Restore.ipsw]
| <code>2afd3f8ede17390737f508473ed205506a0bd23f</code>
|
| {{yes}}
| 240,394,111
|-
| 3.0.1
| [[Kirkwood 7A400 (iPhone)|Kirkwood 7A400]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6974.20090731.Cf4Tg/iPhone1,1_3.0.1_7A400_Restore.ipsw iPhone1,1_3.0.1_7A400_Restore.ipsw]
| <code>34c391fbbc7b31b159372766de39ce5c9cc26ebb</code>
| Hotfix for an SMS exploit.
| {{yes}}
| 240,439,502
|-
| 3.1
| [[Northstar 7C144 (iPhone)|Northstar 7C144]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6605.20090909.PQ3ws/iPhone1,1_3.1_7C144_Restore.ipsw iPhone1,1_3.1_7C144_Restore.ipsw]
| <code>b7b5f436f81c6f855410e8b44a3d432ccaacd6fc</code>
|
| {{yes}}
| 252,536,460
|-
| 3.1.2
| [[Northstar 7D11 (iPhone)|Northstar 7D11]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7268.20091008.32pNe/iPhone1,1_3.1.2_7D11_Restore.ipsw iPhone1,1_3.1.2_7D11_Restore.ipsw]
| <code>e4a1171542dbbd3093516d9c02047b9f7e143050</code>
|
| {{yes}}
| 252,515,888
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPhone)|SUNorthstarTwo 7E18]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7481.20100202.4orot/iPhone1,1_3.1.3_7E18_Restore.ipsw iPhone1,1_3.1.3_7E18_Restore.ipsw]
| <code>eab23a7f8d2a17cb71046c50fc5f67ec390a3c2b</code>
|
| {{yes}}
| 238,319,275
|}

===[[N82ap|iPhone 3G]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| [[X-Gold 608#Known iPhone Firmware Versions|Baseband]]
!width="210"| IPSW Download URL
!width="220"| SHA1 Hash
!width="140"| Comments
!width="99"| Publicly available virgin [[jailbreak]]?
!width="90"| Publicly available virgin [[unlock]]?
!width="70"| File Size
|-
| 2.0
| [[Big Bear 5A345 (iPhone 3G)|Big Bear 5A345]]
|rowspan="2" | [[1.45.00]]
| No download available
|
| Initial shipment.
| {{yes}}
|rowspan="5" {{partial|Upgrade to 2.2}}
|
|-
| 2.0
| [[Big Bear 5A347 (iPhone 3G)|Big Bear 5A347]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4955.20080710.bgt53/iPhone1,2_2.0_5A347_Restore.ipsw iPhone1,2_2.0_5A347_Restore.ipsw]
| <code>af9506ca0034e462674f9f59c5406f159eaf9fc1</code>
|
| {{yes}}
| 235,957,125
|-
| 2.0.1
| [[Big Bear 5B108 (iPhone 3G)|Big Bear 5B108]]
| [[1.48.02]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5134.20080729.Q2W3E/iPhone1,2_2.0.1_5B108_Restore.ipsw iPhone1,2_2.0.1_5B108_Restore.ipsw]
| <code>e81c7ac7e334a3e9d81b3b47894bfaa1ec495482</code>
|
| {{yes}}
| 261,224,227
|-
| 2.0.2
| [[Big Bear 5C1 (iPhone 3G)|Big Bear 5C1]]
| [[2.08.01]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5241.20080818.t5Fv3/iPhone1,2_2.0.2_5C1_Restore.ipsw iPhone1,2_2.0.2_5C1_Restore.ipsw]
| <code>bef7fef954293046420fbcf947379839178a195b</code>
|
| {{yes}}
| 260,761,030
|-
| 2.1
| [[Sugar Bowl 5F136 (iPhone 3G)|Sugar Bowl 5F136]]
| [[2.11.07]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5198.20080909.K3294/iPhone1,2_2.1_5F136_Restore.ipsw iPhone1,2_2.1_5F136_Restore.ipsw]
| <code>c6957dcbf2a95ccfd6dce374a727b1b7700a9043</code>
|
| {{yes}}
| 249,341,655
|-
| 2.2
| [[Timberline 5G77 (iPhone 3G)|Timberline 5G77]]
| [[2.28.00]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5778.20081120.Aqw4R/iPhone1,2_2.2_5G77_Restore.ipsw iPhone1,2_2.2_5G77_Restore.ipsw]
| <code>f67f8b2b842428bf89456cda0c2d5cf954d111a4</code>
|
| {{yes}}
| {{yes|[[Ultrasn0w|yellowsn0w]]}}
| 258,342,348
|-
| 2.2.1
| [[SUTimberline 5H11 (iPhone 3G)|SUTimberline 5H11]]
| [[2.30.03]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5828.20090127.aQLi8/iPhone1,2_2.2.1_5H11_Restore.ipsw iPhone1,2_2.2.1_5H11_Restore.ipsw]
| <code>e0098e6fab5c90b59e067e03ae3ccd4a7cd0f39c</code>
|
| {{yes}}
| {{partial|Upgrade to 3.0}}
| 258,359,073
|-
| 3.0
| [[Kirkwood 7A341 (iPhone 3G)|Kirkwood 7A341]]
|rowspan="2" | [[4.26.08]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6578.20090617.VfgtU/iPhone1,2_3.0_7A341_Restore.ipsw iPhone1,2_3.0_7A341_Restore.ipsw]
| <code>94f1fb43de12bff0f168ce690b7e794cc6220ae3</code>
|
| {{yes}}
|rowspan="2" {{yes|[[ultrasn0w]]}}
| 241,229,233
|-
| 3.0.1
| [[Kirkwood 7A400 (iPhone 3G)|Kirkwood 7A400]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6972.20090731.Zx3Rr/iPhone1,2_3.0.1_7A400_Restore.ipsw iPhone1,2_3.0.1_7A400_Restore.ipsw]
| <code>a148ff39fa4dea499e7a9dd007b63e90c4f56666</code>
| Hotfix for an SMS exploit.
| {{yes}}
| 241,274,617
|-
| 3.1
| [[Northstar 7C144 (iPhone 3G)|Northstar 7C144]]
|rowspan="2" | [[5.11.07]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6600.20090909.AwndZ/iPhone1,2_3.1_7C144_Restore.ipsw iPhone1,2_3.1_7C144_Restore.ipsw]
| <code>9b3b3c148170b012012278efda9ff5c38282d559</code>
|
| {{yes}}
|rowspan="2" {{yes|[[blacksn0w]] or [[ultrasn0w]]}}
| 253,361,339
|-
| 3.1.2
| [[Northstar 7D11 (iPhone 3G)|Northstar 7D11]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7265.20091008.Xsd32/iPhone1,2_3.1.2_7D11_Restore.ipsw iPhone1,2_3.1.2_7D11_Restore.ipsw]
| <code>b1a6ab2771bb5da372ba75a8fa3e1d72b71359d0</code>
|
| {{yes}}
| 253,340,786
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPhone 3G)|SUNorthstarTwo 7E18]]
| [[5.12.01]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7468.20100202.pbnrt/iPhone1,2_3.1.3_7E18_Restore.ipsw iPhone1,2_3.1.3_7E18_Restore.ipsw]
| <code>f5950afca546f93e281ba3cdb08bc0cfed7f0896</code>
|
| {{yes}}
| {{yes|[[ultrasn0w]]}}
| 239,139,281
|-
| 4.0
| [[Apex 8A293 (iPhone 3G)|Apex 8A293]]
|rowspan="3" | [[5.13.04]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7436.20100621.58Yt4/iPhone1,2_4.0_8A293_Restore.ipsw iPhone1,2_4.0_8A293_Restore.ipsw]
| <code>ee1eba9281b902d7ff3f24d50f9aebff0df27f92</code>
|
| {{yes}}
|rowspan="3" {{yes|[[ultrasn0w]]}}
| 306,274,631
|-
| 4.0.1
| [[Apex 8A306 (iPhone 3G)|Apex 8A306]]
| [http://appldnld.apple.com/iPhone4/061-8616.20100715.phnt4/iPhone1,2_4.0.1_8A306_Restore.ipsw iPhone1,2_4.0.1_8A306_Restore.ipsw]
| <code>940bd2b36c646f6673419eab661ac1f13248e592</code>
| New formula to calculate bars. Otherwise, it's the same as 4.0.
| {{yes}}
| 320,237,975
|-
| 4.0.2
| [[Apex 8A400 (iPhone 3G)|Apex 8A400]]
| [http://appldnld.apple.com/iPhone4/061-8802.20100811.XcfpR/iPhone1,2_4.0.2_8A400_Restore.ipsw iPhone1,2_4.0.2_8A400_Restore.ipsw]
| <code>ee2bc74719170a7a2440b593b6f300727c930c69</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| 320,216,794
|-
| 4.1
| [[Baker 8B117 (iPhone 3G)|Baker 8B117]]
| [[5.14.02]]
| [http://appldnld.apple.com/iPhone4/061-7932.20100908.3fgt5/iPhone1,2_4.1_8B117_Restore.ipsw iPhone1,2_4.1_8B117_Restore.ipsw]
|<code>d87bab469dd1146ab83ddcc23f03b3164d7e09d4</code>
|
| {{Yes}}
| {{No}}
| 323,137,556
|-
| 4.2
| [[Jasper 8C (iPhone 3G)|Jasper 8C]]
| ?
| not out yet
| ?
| ?
| {{no}}
| {{yes}}
| ?
|}

===[[N88ap|iPhone 3GS]]===
Units with the new bootrom began shipping around September 2009.

{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| [[X-Gold 608#Known iPhone Firmware Versions|Baseband]]
!width="210"| IPSW Download URL
!width="220"| SHA1 Hash
!width="140"| Comments
!width="95"| Publicly available virgin [[jailbreak]]? ([[IBoot-359.3|old bootrom]])
!width="100"| Publicly available virgin [[jailbreak]]? ([[IBoot-359.3.2|new bootrom]])
!width="80"| Publicly available virgin [[unlock]]?
!width="70"| File Size
|-
| 3.0
| [[Kirkwood 7A341 (iPhone 3GS)|Kirkwood 7A341]]
|rowspan="2" | [[4.26.08]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6582.20090617.LlI87/iPhone2,1_3.0_7A341_Restore.ipsw iPhone2,1_3.0_7A341_Restore.ipsw]
| <code>d8534408c8679c830fd0c4e36ef9762c11ef73df</code>
| Initial shipment.
| {{yes}}
|rowspan="2" {{no|[[SHSH]]s unavailable at release}}
|rowspan="2" {{yes|[[ultrasn0w]]}}
| 312,292,933
|-
| 3.0.1
| [[Kirkwood 7A400 (iPhone_3GS)|Kirkwood 7A400]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6976.20090731.Vgbt5/iPhone2,1_3.0.1_7A400_Restore.ipsw iPhone2,1_3.0.1_7A400_Restore.ipsw]
| <code>30006575af931e3da0521febace005152cdb8853</code>
| Hotfix for an SMS exploit.
| {{yes}}
| 312,330,244
|-
| 3.1b
| [[Sierra 7C108b]]
| Unknown
| Not available to public
| Unknown
| Used for testing.
| {{no}}
| {{no}}
| {{no}}
|
|-
| 3.1
| [[Northstar 7C144 (iPhone 3GS)|Northstar 7C144]]
|rowspan="2" | [[5.11.07]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6609.20090909.mwws4/iPhone2,1_3.1_7C144_Restore.ipsw iPhone2,1_3.1_7C144_Restore.ipsw]
| <code>527c74f87588afa1d69c1e2c08eedc88f113013a</code>
|
| {{yes}}
| {{yes|Yes1}}
|rowspan="2" {{yes|[[blacksn0w]] or [[ultrasn0w]]}}
| 321,011,474
|-
| 3.1.2
| [[Northstar 7D11 (iPhone 3GS)|Northstar 7D11]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7270.20091008.phn32/iPhone2,1_3.1.2_7D11_Restore.ipsw iPhone2,1_3.1.2_7D11_Restore.ipsw]
| <code>6998bb7d9e869b2d89a08853312f9457d070fb1f</code>
|
| {{yes}}
| {{yes}}
| 321,015,700
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPhone 3GS)|SUNorthstarTwo 7E18]]
| [[5.12.01]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7472.20100202.8tugj/iPhone2,1_3.1.3_7E18_Restore.ipsw iPhone2,1_3.1.3_7E18_Restore.ipsw]
| <code>8cb3775e62c6f72059a962bf891b4e145b965052</code>
|
| {{yes}}
| {{yes}}
| {{yes|[[ultrasn0w]]}}
| 305,122,343
|-
| 4.0
| [[Apex 8A293 (iPhone 3GS)|Apex 8A293]]
|rowspan="3" | [[5.13.04]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7437.20100621.5urG8/iPhone2,1_4.0_8A293_Restore.ipsw iPhone2,1_4.0_8A293_Restore.ipsw]
| <code>e065245874c73510ceb8fa4bd9388b60d46eb252</code>
|
| {{yes}}
| {{yes}}
|rowspan="3" {{yes|[[ultrasn0w]]}}
| 396,281,280
|-
| 4.0.1
| [[Apex 8A306 (iPhone 3GS)‎|Apex 8A306]]
| [http://appldnld.apple.com/iPhone4/061-8618.20100715.Zapn4/iPhone2,1_4.0.1_8A306_Restore.ipsw iPhone2,1_4.0.1_8A306_Restore.ipsw]
| <code>c2b6fb9a158547ce726baa1bf8f0558a71518fec</code>
| New formula to calculate bars. Otherwise, it's the same as 4.0.
| {{yes}}
| {{yes}}
| 396,322,891
|-
| 4.0.2
| [[Apex 8A400 (iPhone 3GS)|Apex 8A400]]
| [http://appldnld.apple.com/iPhone4/061-8805.20100811.Dcr4e/iPhone2,1_4.0.2_8A400_Restore.ipsw iPhone2,1_4.0.2_8A400_Restore.ipsw]
| <code>61d21363ced6e006cc226f9a0a0e9c6ed8e048ab</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| {{yes}}
| 396,310,640
|-
| 4.1
| [[Baker 8B117 (iPhone 3GS)|Baker 8B117]]
| [[5.14.02]]
| [http://appldnld.apple.com/iPhone4/061-7938.20100908.F3rCk/iPhone2,1_4.1_8B117_Restore.ipsw iPhone2,1_4.1_8B117_Restore.ipsw]
|<code>2d1657cd33ae23b8d4e79e41fe758d09d3c52e30</code>
|
| {{yes}}
| {{yes}}
| {{no}}
| 400,572,133
|}
1 [[Tethered jailbreak]] only.

===[[N90ap|iPhone 4]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| [[XMM 6180#Known Firmware Versions|Baseband]]
!width="40"| [[IBoot (Bootloader)|iBoot]]
!width="210"| IPSW Download URL
!width="220"| SHA1 Hash
!width="140"| Comments
!width="95"| Publicly available virgin [[jailbreak]]?
!width="95"| Publicly available virgin [[unlock]]?
!width="70"| File Size
|-
| Inf1
| [[Inferno 8A2062a]]
| Unknown
| ?
| Not available to public
| Unknown
| Used for testing.
| {{no}}
| {{no}}
| Unknown
|-
| 4.0
| [[Apex 8A293 (iPhone 4)|Apex 8A293]]
|rowspan="3" | [[1.59.00]]
| ?
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7380.20100621,Vfgb5/iPhone3,1_4.0_8A293_Restore.ipsw iPhone3,1_4.0_8A293_Restore.ipsw]
| <code>171c2a3995fa149f2a369ccd87f82c5c30da3f88</code>
| Initial shipment.
| {{yes}}
|rowspan="3" {{Yes|[[ultrasn0w]]}}
| 607,363,121
|-
| 4.0.1
| [[Apex 8A306 (iPhone 4)|Apex 8A306]]
| ?
| [http://appldnld.apple.com/iPhone4/061-8619.20100715.4Pnsx/iPhone3,1_4.0.1_8A306_Restore.ipsw iPhone3,1_4.0.1_8A306_Restore.ipsw]
| <code>a9cf20679273b7e502ab384854ba96cc2a54d532</code>
| New formula to calculate bars. Otherwise, it's the same as 4.0.
| {{yes}}
| 607,380,127
|-
| 4.0.2
| [[Apex 8A400 (iPhone 4)|Apex 8A400]]
| ?
| [http://appldnld.apple.com/iPhone4/061-8807.20100811.3Edre/iPhone3,1_4.0.2_8A400_Restore.ipsw iPhone3,1_4.0.2_8A400_Restore.ipsw]
| <code>19eb071cdb9f1601b106825d0a16b1449c6eef8c</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| 607,375,880
|-
| 4.1
| [[Baker 8B117 (iPhone 4)|Baker 8B117]]
| [[2.10.04]]
| [[IBoot-931.18.27|931.18.27]]
| [http://appldnld.apple.com/iPhone4/061-7939.20100908.Lcyg3/iPhone3,1_4.1_8B117_Restore.ipsw iPhone3,1_4.1_8B117_Restore.ipsw]
|<code>a3f8a333ca181146b862ca6a59c9a6e7c27eba0b</code>
|
| {{yes}}
| {{No}}
| 618,501,195
|}

===[[N45ap|iPod touch (1st generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="100"| Publicly available virgin [[jailbreak]]?
!width="70"| File Size
|-
| 1.1
| Snowbird 3A100a
| No download available
|
| Initial shipment.
| {{no}}
|
|-
| 1.1
| Snowbird 3A101a
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-3882.20070910.N8uyT/iPod1,1_1.1_3A101a_Restore.ipsw iPod1,1_1.1_3A101a_Restore.ipsw]
| <code>9b0d83c7f8b4328174a3f31e0e93f60e591ae143</code>
|
| {{no}}
| 157,890,186
|-
| 1.1.1
| Snowbird 3A110a
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-3932.20070927.p23dD/iPod1,1_1.1.1_3A110a_Restore.ipsw iPod1,1_1.1.1_3A110a_Restore.ipsw]
| <code>84bbc6ea8bf29745195bc9926c1874f7c2a36f32</code>
|
| {{yes}}
| 157,906,686
|-
| 1.1.2
| Oktoberfest 3B48b
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4036.20071107.9g3DF/iPod1,1_1.1.2_3B48b_Restore.ipsw iPod1,1_1.1.2_3B48b_Restore.ipsw]
| <code>108d8ffe9ea75e61cd5e57170ad388b7fa00d923</code>
|
| {{yes}}
| 165,567,897
|-
| 1.1.3
| Little Bear 4A93
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/061-4060.20080115.9Iuh5/iPod1,1_1.1.3_4A93_Restore.ipsw iPod1,1_1.1.3_4A93_Restore.ipsw]
| <code>8dca23eec69d5ae58fbf3d4a23276e46cbb2e3c6</code>
|
| {{yes}}
| 173,511,411
|-
| 1.1.4
| Little Bear 4A102
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4312.20080226.Btu45/iPod1,1_1.1.4_4A102_Restore.ipsw iPod1,1_1.1.4_4A102_Restore.ipsw]
| <code>c148d1eb1c979bb6434175411d4a372103a4fdd2</code>
|
| {{yes}}
| 173,519,589
|-
| 1.1.5
| Little Bear 4B1
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4841.20080714.bgy8O/iPod1,1_1.1.5_4B1_Restore.ipsw iPod1,1_1.1.5_4B1_Restore.ipsw]
| <code>1b818911316e4248ee01d3ec67f9d39afc3db240</code>
|
| {{yes}}
| 173,519,637
|-
| 2.0
| [[Big Bear 5A347 (iPod touch 1G)|Big Bear 5A347]]
| Download Link Prohibited
| <code>ae82798e85f9953b0f4798bad36187cb020c9d22</code>
| 2.0+ is a paid upgrade series
| {{yes}}
| 233,409,573
|-
| 2.0.1
| [[Big Bear 5B108 (iPod touch 1G)|Big Bear 5B108]]
| Download Link Prohibited
| <code>a81b6e7af4b85ef436d047f9da57c0f694d8964a</code>
|
| {{yes}}
| 258,660,321
|-
| 2.0.2
| [[Big Bear 5C1 (iPod touch 1G)|Big Bear 5C1]]
| Download Link Prohibited
| <code>c8b6f9fefa3f3777c56285dfe4c735b1e08a81a2</code>
|
| {{yes}}
| 258,201,218
|-
| 2.1
| [[Sugar Bowl 5F137 (iPod touch 1G)|Sugar Bowl 5F137]]
| Download Link Prohibited
| <code>fc7f6d0972927df502ffca47438ca75dcccffaf3</code>
|
| {{yes}}
| 251,155,156
|-
| 2.2
| [[Timberline 5G77 (iPod touch 1G)|Timberline 5G77]]
| Download Link Prohibited
| <code>081a7de363230fb38d0ce092cbbe42f2a50c8a5f</code>
|
| {{yes}}
| 260,186,851
|-
| 2.2.1
| [[SUTimberline 5H11 (iPod touch 1G)|SUTimberline 5H11]]
| Download Link Prohibited
| <code>fc69be9e421bc0630567184506ab771f6b7ef68b</code>
|
| {{yes}}
| 260,166,688
|-
| 3.0
| [[Kirkwood 7A341 (iPod touch 1G)|Kirkwood 7A341]]
| Download Link Prohibited
| <code>dff2bd14931225908a360fb8e60a336f17d2dd6d</code>
| 3.0+ is a paid upgrade series
| {{yes}}
| 242,458,552
|-
| 3.1.1
| [[Northstar 7C145 (iPod touch 1G)|Northstar 7C145]]
| Download Link Prohibited
| <code>c6270780c166db4c9f4f0a7fa945754a1f9fe7e8</code>
|
| {{yes}}
| 249,755,862
|-
| 3.1.2
| [[Northstar 7D11 (iPod touch 1G)|Northstar 7D11]]
| Download Link Prohibited
| <code>7367dd9ba58a3b9777307368a0128e696fdfc9a6</code>
|
| {{yes}}
| 249,780,497
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPod touch 1G)|SUNorthstarTwo 7E18]]
| Download Link Prohibited
| <code>5f897990f19d2f093b35e0813d7d77806404fb1f</code>
|
| {{yes}}
| 235,678,189
|}

===[[N72ap|iPod touch (2nd generation)]]===
Units with the new bootrom have model numbers that start with "MC."

{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="95"| Publicly available virgin [[jailbreak]]? ([[IBoot-240.4|old bootrom]])
!width="100"| Publicly available virgin [[jailbreak]]? ([[IBoot-240.5.1|new bootrom]])
!width="70"| File Size
|-
| 2.1.1
| [[Sugar Bowl 5F138 (iPod touch 2G)|Sugar Bowl 5F138]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-5494.20080909.8i9o0/iPod2,1_2.1.1_5F138_Restore.ipsw iPod2,1_2.1.1_5F138_Restore.ipsw]
| <code>c3c700be49ad227d1152188e7c1e46b8958fd1e4</code>
| Initial shipment.
| {{yes|Yes1}}
|rowspan="4" {{no|Incompatible device/
firmware match}}
| 282,083,944
|-
| 2.2
| [[Timberline 5G77a (iPod touch 2G)|Timberline 5G77a]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/061-5358.20081120.Gtghy/iPod2,1_2.2_5G77a_Restore.ipsw iPod2,1_2.2_5G77a_Restore.ipsw]
| <code>34a0a489605f34d6cc6c9954edcaaf9a050deedc</code>
|
| {{no}}
| 291,123,491
|-
| 2.2.1
| [[SUTimberline 5H11a (iPod touch 2G)|SUTimberline 5H11a]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5863.20090127.rt56K/iPod2,1_2.2.1_5H11a_Restore.ipsw iPod2,1_2.2.1_5H11a_Restore.ipsw]
| <code>9af5625ea34acdd8abeb6fce71a72651d0c815d5</code>
|
| {{yes}}
| 291,140,244
|-
| 3.0
| [[Kirkwood 7A341 (iPod touch 2G)|Kirkwood 7A341]]
| Download Link Prohibited
| <code>0f7fc76d9b9aa826b5ab14be9821a315d3d9dc42</code>
| 3.x is a paid upgrade series
| {{yes}}
| 270,315,364
|-
| 3.1.1
| [[Northstar 7C145 (iPod touch 2G)|Northstar 7C145]]
| Download Link Prohibited
| <code>e0d8800a4fc7cc5be6976ddbceb43c2d2a7120d7</code>
| Initial shipment for units with the new bootrom.
| {{yes}}
| {{yes|Yes1}}
| 277,753,989
|-
| 3.1.2
| [[Northstar 7D11 (iPod touch 2G)|Northstar 7D11]]
| Download Link Prohibited
| <code>e7c83d4a5baec0e81816ae1cd1caf9a4dc38ebf0</code>
|
| {{yes}}
| {{yes}}
| 277,794,671
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPod touch 2G)|SUNorthstarTwo 7E18]]
| Download Link Prohibited
| <code>5f4f5c01eda2f811f73167e7d1f82dbeed82367b</code>
|
| {{yes}}
| {{yes}}
| 263,275,211
|-
| 4.0
| [[Apex 8A293 (iPod touch 2G)|Apex 8A293]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7435.20100621.tr49t/iPod2,1_4.0_8A293_Restore.ipsw iPod2,1_4.0_8A293_Restore.ipsw]
| <code>c026c373bc535496a6f901de2ba37d4a487413bf</code>
|
| {{yes}}
| {{yes}}
| 330,278,777
|-
| 4.0.2
| [[Apex 8A400 (iPod touch 2G)|Apex 8A400]]
| [http://appldnld.apple.com/iPhone4/061-8551.20100811.Xcder/iPod2,1_4.0.2_8A400_Restore.ipsw iPod2,1_4.0.2_8A400_Restore.ipsw]
| <code>06a42297d94461264eb64d7c8640cc5d1c19edeb</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| {{yes|Yes1}}
| 344,248,876
|-
| 4.1
| [[Baker 8B117 (iPod touch 2G)|Baker 8B117]]
| [http://appldnld.apple.com/iPhone4/061-7937.20100908.ghj4f/iPod2,1_4.1_8B117_Restore.ipsw iPod2,1_4.1_8B117_Restore.ipsw]
|<code>97abde6207660bd876fd476275dd526d0dcf3d19</code>
|
| {{Yes}}
| {{yes}}
| 348,027,174
|}
1 [[Tethered jailbreak]] only.

===[[N18ap|iPod touch (3rd generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="99"| Publicly available virgin [[jailbreak]]?
!width="70"| File Size
|-
| 3.1.1
| [[Northstar 7C145 (iPod touch 3G)|Northstar 7C145]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-7163.20090909.NtstR/iPod3,1_3.1.1_7C145_Restore.ipsw iPod3,1_3.1.1_7C145_Restore.ipsw]
| <code>a3eddbe2cf77858bae7087dc8b2035f0d3097e57</code>
| Initial shipment.
| {{yes|Yes1}}

| 311,702,789
|-
| 3.1.1
| [[Northstar 7C146 (iPod touch 3G)|Northstar 7C146]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7238.20090918.23GhT/iPod3,1_3.1.1_7C146_Restore.ipsw iPod3,1_3.1.1_7C146_Restore.ipsw]
| <code>f66a7286b261137f25ddbbd84047f9a7ea181904</code>
|
| {{yes|Yes1}}
| 311,690,768
|-
| 3.1.2
| [[Northstar 7D11 (iPod touch 3G)|Northstar 7D11]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7271.20091008.Tch23/iPod3,1_3.1.2_7D11_Restore.ipsw iPod3,1_3.1.2_7D11_Restore.ipsw]
| <code>02dcee28d788d594a2939ab564f4f183af6ccdf2</code>
|
| {{yes}}
| 311,740,034
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPod touch 3G)|SUNorthstarTwo 7E18]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7473.20100202.4i44t/iPod3,1_3.1.3_7E18_Restore.ipsw iPod3,1_3.1.3_7E18_Restore.ipsw]
| <code>375fd469b18bfc0b74c7cfa5b4d5945197b1d106</code>
|
| {{yes}}
| 295,870,806
|-
| 4.0
| [[Apex 8A293 (iPod touch 3G)|Apex 8A293]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7381.20100621.AzSP9/iPod3,1_4.0_8A293_Restore.ipsw iPod3,1_4.0_8A293_Restore.ipsw]
| <code>36fe02b83f87d6305db572e1644841e3cd64cc7d</code>
|
| {{yes}}
| 384,178,784
|-
| 4.0.2
| [[Apex 8A400 (iPod touch 3G)|Apex 8A400]]
| [http://appldnld.apple.com/iPhone4/061-8554.20100811.Bgt54/iPod3,1_4.0.2_8A400_Restore.ipsw iPod3,1_4.0.2_8A400_Restore.ipsw]
| <code>481b21044130125b117d53207f725b70fb061855</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| 384,203,993
|-
| 4.1
| [[Baker 8B117 (iPod touch 3G)|Baker 8B117]]
| [http://appldnld.apple.com/iPhone4/061-7941.20100908.sV9KE/iPod3,1_4.1_8B117_Restore.ipsw iPod3,1_4.1_8B117_Restore.ipsw]
|<code>3162bad4060b7a58c9942ddb483e5bd9bcc5269f</code>
|
| {{yes}}
| 388,255,189
|}

1 [[Tethered jailbreak]] only.

===[[N81ap|iPod touch (4th generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="99"| Publicly available virgin [[jailbreak]]?
!width="70"| File Size
|-
| 4.1
| [[Baker 8B117 (iPod touch 4G)|Baker 8B117]]
| [http://appldnld.apple.com/iPhone4/061-8490.20100901.hyjtR/iPod4,1_4.1_8B117_Restore.ipsw iPod4,1_4.1_8B117_Restore.ipsw]
| <code>a464492bf6ad25d65b378c85d8b181f973ede38a</code>
| Initial shipment.
| {{yes}}
| 608,360,672
|-
| 4.1
| [[Baker 8B118 (iPod touch 4G)|Baker 8B118]]
| [http://appldnld.apple.com/iPhone4/061-9344.20100922.Urgt43/iPod4,1_4.1_8B118_Restore.ipsw iPod4,1_4.1_8B118_Restore.ipsw]
| <code>331fb1342f5dab8c04cead74384a1e0fc1145952</code>
|
| {{yes}}
| 608,360,927
|}

==See also==
* [[VFDecrypt]]
* [[VFDecrypt Keys]]

==Resources==
*[http://www.trejan.com/projects/ipod/ Firmware List]
*[http://itunes.com/version Apple Firmware XML]

Jasper 8C134b (iPad1,1)

2010-11-13T15:41:35Z

GreySyntax:

This is iOS 4.2 GM v2 for [[K48ap|iPad]].
==Keys==
=== Root Filesystem (018-9933-001.dmg) ===
*'''[[VFDecrypt]] Key''': 8df8ebc5a47e60baa66dc66f8b4cdbcbe2f8591c67a287c122a66d45f0152d49838b1392

=== [[Update Ramdisk]] (018-9899-005.dmg) ===
* '''IV''': 51aa4923caebae78ee01c0f1bf1c5e94
* '''K''': 423abc716a2936b27507d7517e630bbd20763731edd17174c759588f8e4cf2ad

=== [[Restore Ramdisk]] (018-9900-005.dmg) ===
* '''IV''': 782aeaf86c926fd3e17af0c6f7e04728
* '''K''': f233379f1c8b595b1b2cdf79a6e8c7467cebba80457733b0049c2489725690ee

=== AppleLogo ===
* '''IV''': d108bbfc6e3e4d6d3c9fec1d19fe1769
* '''K''': 3359842bed66e5f2b942f60ac30667a36a86f049b8cb33bd101c1caf5cb422e8

=== BatteryCharging0 ===
* '''IV''': 52bdca92e1e24cdf3017377726a48ce7
* '''K''': 529ce7b5621568657fe66c3d5124947528f684edefcc3cc800054c91f78c18eb

=== BatteryCharging1 ===
* '''IV''': 2739e3e8297be8030f11538170b69ff2
* '''K''': 831697c2f43d8b8e570f293d87fcd2693885851b07a953754caf3a1eb6465961

=== BatteryFull ===
* '''IV''': a4a9809547412fc0e7b67e4d2a451325
* '''K''': 0f1cd6526c4e82413695cf4740752b515ddb37c97f0f379cb465a85028773b89

=== BatteryLow0 ===
* '''IV''': 3f76fc42175ad76091069eadee14aa6d
* '''K''': 1fda5c1b458a120b6938349e77017c9e0761464ce0d92d407f9336d6d660de8f

=== BatteryLow1 ===
* '''IV''': 7a60bd06f3c9aabf608dfda2779796ac
* '''K''': 53062d36fb3e5abe9c56d7900a4963979f3d78873f958fc0149f56c1955f404b

=== DeviceTree ===
* '''IV''': 3c08f9cc37c776247f3d329a745635a4
* '''K''': 011cdb85511a8b5bf233d748e43f032502786a649e698604713132a67a96c214

=== GlyphCharging ===
* '''IV''': 79c49644291fb3463fba5300b27b8a82
* '''K''': f2f8a2c1f259aee33ddbb0edd52065edfefff2826d91d0fe00c7fb10ac36f32e

=== GlyphPlugin ===
* '''IV''': c5a595594ff4a1b719d4aaf5d4543c26
* '''K''': e6a26d36c0c4698761c77faa0229468e2a08f1ec2739ef3d467ae02046ed228b

=== [[iBEC]] ===
* '''IV''': 9c7917260ca97dec3ecd32e75567cc77
* '''K''': 8f76f35e9cce90a13f1efb56d9e12152c41bacf797a0c3b662050bca00b434e5

=== [[IBoot (Bootloader)|iBoot]] ===
* '''IV''': 6ae99830ab64997ad7426d3342ba3bec
* '''K''': 74476c5215f0b1e4204bf2f748b2adc660a7139e9b57a129ac4cfd3ae86476e8

=== [[iBSS]] ===
* '''IV''': 873ca0583dbfd0b40d42bd86bca09a07
* '''K''': 619a29ff91bf924bd1edf8efe48d280f5ec85865dd55dfe5f8989a1077f71a0e

=== [[Kernelcache]] ===
* '''IV''': 4fb28574ab4e691bb6756f695e416f4d
* '''K''': c6eabf5c35c5ea765020802aed88688701396b12b1d6a2792fdfea2aaef1adb1

=== [[LLB]] ===
* '''IV''': a4e10301bb038b5fc6a66792ef1e2892
* '''K''': 1f675ad80b3f5c8a509fe47a1730a94cd5f4f38cc5571924e9ab694129e9021d

=== RecoveryMode ===
* '''IV''': 0b3af425ffa427e79a994297e8e216b5
* '''K''': be98b31bde94a4896c8dce2b252a6c2c26391221f2bdbe173c9d54ad0b2118f5
</pre>

==Credits==
*Grabbed with greenpois0n
*Special thanks to [[User:Posixninja|posixninja]]

Talk:Main Page

2010-11-12T20:40:31Z

GreySyntax: /* Posting KBAGS */

== Posting [[KBAGS]] ==
Is there really a need to post [[KBAGS]], if we already have decryption keys? Hell better yet instead of posting [[KBAG]]'s post missing keys. --[[User:GreySyntax|GreySyntax]] 16:57, 12 November 2010 (UTC)
: i agree, [[KBAG]]'s are practically useless after you have got the keys from them but [[User:liamchat|liamchat]] seems to post them anyway... --[[User:Cj|cj]] 17:01, 12 November 2010 (UTC)
:: i added them because i didn't have that device and on some pages the [[KBAG]]'s are there with the keys so why not do that on all pages --[[User:Liamchat|liamchat]] 20:38, 12 November 2010 (UTC)
:::Posting the [[KBAG]] and not saying what there from is useless. --[[User:GreySyntax|GreySyntax]] 20:40, 12 November 2010 (UTC)

== "robert" ==
Hacking a wiki is like stealing a c00kie from a kid. BAD. (cookies ftw, aka i'm a kid :O) --[[User:Qwertyoruiop|Qwertyoruiop]] 19:03, 1 November 2010 (UTC)
:Well, it's fixed :) --[[User:Balloonhead66|Balloonhead66]] 19:26, 1 November 2010 (UTC)

== Apple TV ==
We could add the Apple TV to the hardware section on the main page as we have other pages for it in the wiki as well --[[User:M2m|M2m]] 07:42, 28 September 2010 (UTC)
:Done [[User:Balloonhead66|Balloonhead66]] 15:19, 3 October 2010 (UTC)

== firmware keys ==
We need a "standard" for firmware key posting so that we can stay organized. Who likes this method?
* [[Kirkwood 7A341 (iPhone 3G)]]
* [[Kirkwood 7A341 (iPod touch 2G)]]
{{unsigned|ChronicDev|02:28, June 18, 2009}}
-----

Love it. -drg

anything is better then what we got now --[[User:Posixninja|posixninja]] 05:16, 18 June 2009 (UTC)

Nice job with the reorganization --[[User:Geohot|geohot]]

I know this thread is old, but I like the template on [[Apex 8A400 (iPod touch 3G)]] frankly because I helped to make it, and it links to all parts of the FW so people know what the **** a kernelcache or VFDecrypt is. :P --drake

== [[Talk:Main Page/Should iH8sn0w be listed as a hacker?|Should iH8sn0w be listed as a hacker?]] ==

== Hardware section names ==

Chronic, you started a name change in the hardware section. Such changes should be agreed on first. It's not even complete. Either we change it everywhere or revert back to how it was (my opinion). I also never liked the iAbc2,6 notation. Nobody knows what that is. Other opinions? -- [[User:Http|http]] 12:08, 28 September 2010 (UTC)

:Would prefer the old naming (ipod touch 2g, 3g, etc..) Would name the iOS Apple TV Apple TV 2G - even though this is not official name. Just my opinion. --[[User:M2m|M2m]] 14:56, 28 September 2010 (UTC)

::Personally I would say leave it with the Prod#,# as, lets face it, if you're looking for info on it here you probably know what it is by any name, and if not it doesn't take a whole lot to figure it out. Worst someone would have to do is follow the link to check. -- [[User:OMEGA_RAZER|OMEGA_RAZER]]

:::I'd prefer if every device was referred to by name (i.e.- "iPod touch 3G"). One thing is certain, though: it looks bizarre to have the iPhones listed by name, while the other devices are not. --[[User:Dialexio|Dialexio]] 18:50, 28 September 2010 (UTC)

::::Ok, so 3:1 to change it back to full names. -- [[User:Http|http]] 23:40, 30 September 2010 (UTC)

== SHAtter ==

I was thinking we should add SHAtter to the Jailbreak tools [[User:Balloonhead66|Balloonhead66]] 02:11, 8 October 2010 (UTC)
:SHAtter is the name of the exploit, not a jailbreak tool. :) --[[User:Dialexio|Dialexio]] 02:31, 8 October 2010 (UTC)
::Greenpois0n will be added when it is released and more is known about it I hope. --[[User:JacobVengeance|JakeAnthraX]] 04:45, 8 October 2010 (UTC)
:::Ok, well what about adding Limera1n? {{unsigned|Balloonhead66|23:25, October 8, 2010 (UTC)}}

== The colored boxes ==

Why are there colored boxes and what do they represent as color? {{unsigned|Balloonhead66|18:26, October 9, 2010 (UTC)}}
:The colored boxes are supposed to represent progress made in each category. Orange (previously red, but changed due to readability issues) means it's nowhere near the goal. Yellow means progress is being/was made. Green means it's done and publicly available. --[[User:Dialexio|Dialexio]] 18:52, 9 October 2010 (UTC)

== VFDecrypt ==

I think we should have a section on VFDecrypt and the keys... --{{unsigned|Balloonhead66|18:28, 23 October 2010 (UTC)}}
:For the pages you just added exists a deletion request (see [[Talk:VFDecrypt_Keys#Remove_Request]]). So I don't think it's a good idea to put them to the main page. --[[User:Http|http]] 21:50, 23 October 2010 (UTC)
::I think that they should just be deleted or cached as HTML or protected as I like having the keys --[[User:Balloonhead66|Balloonhead66]] 00:39, 24 October 2010 (UTC)
Why are the keys listed on front page? Wouldn't it be better to not have the front page bloated with unimportant information? --[[User:JacobVengeance|JakeAnthraX]] 00:56, 27 October 2010 (UTC)
:I suppose we can put [[VFDecrypt Keys]] under "Keys" (so it would be alongside [[AES Keys]], [[CERT|Apple Certificate]], [[Baseband RSA Keys]], et. al.). --[[User:Dialexio|Dialexio]] 01:07, 27 October 2010 (UTC)
::I just don't think the front page should be bloated up with random things like 6 lines of VFDecrypt --[[User:JacobVengeance|JakeAnthraX]] 01:21, 27 October 2010 (UTC)

== Protection ==
Can someone inform me why the main page was protected from all users? Not just newly created users? Cheers. --[[User:Beau|Beau]] 03:19, 8 November 2010 (UTC)
:An edit war took place earlier, and unfortunately there's no option to protect it from just newly created users. If you want to make a change, Http and I will be more than happy to carry it out (pending approval, but we're pretty reasonable). --[[User:Dialexio|Dialexio]] 03:46, 8 November 2010 (UTC)
::There kindof is, you just need to update to 1.16, but i guess only geohot can do that... :( --[[User:Balloonhead66|Balloonhead66]] 03:49, 8 November 2010 (UTC)
:: Thanks [[User:Dialexio|Dialexio]], just thought that it was strange that Wiki pages are starting to be put together for [[/Applications]] yet there's no link present on the main page - if anything it might fit best atop the Software list. --[[User:Beau|Beau]] 03:58, 8 November 2010 (UTC)
:::It's actually already there, under the name "Filesystem" (which links to the root directory of iOS). :) --[[User:Dialexio|Dialexio]] 04:33, 8 November 2010 (UTC)

Talk:Main Page

2010-11-12T16:57:20Z

GreySyntax:

== Posting [[KBAGS]] ==
Is there really a need to post [[KBAGS]], if we already have decryption keys? Hell better yet instead of posting [[KBAG]]'s post missing keys. --[[User:GreySyntax|GreySyntax]] 16:57, 12 November 2010 (UTC)

== "robert" ==
Hacking a wiki is like stealing a c00kie from a kid. BAD. (cookies ftw, aka i'm a kid :O) --[[User:Qwertyoruiop|Qwertyoruiop]] 19:03, 1 November 2010 (UTC)
:Well, it's fixed :) --[[User:Balloonhead66|Balloonhead66]] 19:26, 1 November 2010 (UTC)

== Apple TV ==
We could add the Apple TV to the hardware section on the main page as we have other pages for it in the wiki as well --[[User:M2m|M2m]] 07:42, 28 September 2010 (UTC)
:Done [[User:Balloonhead66|Balloonhead66]] 15:19, 3 October 2010 (UTC)

== firmware keys ==
We need a "standard" for firmware key posting so that we can stay organized. Who likes this method?
* [[Kirkwood 7A341 (iPhone 3G)]]
* [[Kirkwood 7A341 (iPod touch 2G)]]
{{unsigned|ChronicDev|02:28, June 18, 2009}}
-----

Love it. -drg

anything is better then what we got now --[[User:Posixninja|posixninja]] 05:16, 18 June 2009 (UTC)

Nice job with the reorganization --[[User:Geohot|geohot]]

I know this thread is old, but I like the template on [[Apex 8A400 (iPod touch 3G)]] frankly because I helped to make it, and it links to all parts of the FW so people know what the **** a kernelcache or VFDecrypt is. :P --drake

== [[Talk:Main Page/Should iH8sn0w be listed as a hacker?|Should iH8sn0w be listed as a hacker?]] ==

== Hardware section names ==

Chronic, you started a name change in the hardware section. Such changes should be agreed on first. It's not even complete. Either we change it everywhere or revert back to how it was (my opinion). I also never liked the iAbc2,6 notation. Nobody knows what that is. Other opinions? -- [[User:Http|http]] 12:08, 28 September 2010 (UTC)

:Would prefer the old naming (ipod touch 2g, 3g, etc..) Would name the iOS Apple TV Apple TV 2G - even though this is not official name. Just my opinion. --[[User:M2m|M2m]] 14:56, 28 September 2010 (UTC)

::Personally I would say leave it with the Prod#,# as, lets face it, if you're looking for info on it here you probably know what it is by any name, and if not it doesn't take a whole lot to figure it out. Worst someone would have to do is follow the link to check. -- [[User:OMEGA_RAZER|OMEGA_RAZER]]

:::I'd prefer if every device was referred to by name (i.e.- "iPod touch 3G"). One thing is certain, though: it looks bizarre to have the iPhones listed by name, while the other devices are not. --[[User:Dialexio|Dialexio]] 18:50, 28 September 2010 (UTC)

::::Ok, so 3:1 to change it back to full names. -- [[User:Http|http]] 23:40, 30 September 2010 (UTC)

== SHAtter ==

I was thinking we should add SHAtter to the Jailbreak tools [[User:Balloonhead66|Balloonhead66]] 02:11, 8 October 2010 (UTC)
:SHAtter is the name of the exploit, not a jailbreak tool. :) --[[User:Dialexio|Dialexio]] 02:31, 8 October 2010 (UTC)
::Greenpois0n will be added when it is released and more is known about it I hope. --[[User:JacobVengeance|JakeAnthraX]] 04:45, 8 October 2010 (UTC)
:::Ok, well what about adding Limera1n? {{unsigned|Balloonhead66|23:25, October 8, 2010 (UTC)}}

== The colored boxes ==

Why are there colored boxes and what do they represent as color? {{unsigned|Balloonhead66|18:26, October 9, 2010 (UTC)}}
:The colored boxes are supposed to represent progress made in each category. Orange (previously red, but changed due to readability issues) means it's nowhere near the goal. Yellow means progress is being/was made. Green means it's done and publicly available. --[[User:Dialexio|Dialexio]] 18:52, 9 October 2010 (UTC)

== VFDecrypt ==

I think we should have a section on VFDecrypt and the keys... --{{unsigned|Balloonhead66|18:28, 23 October 2010 (UTC)}}
:For the pages you just added exists a deletion request (see [[Talk:VFDecrypt_Keys#Remove_Request]]). So I don't think it's a good idea to put them to the main page. --[[User:Http|http]] 21:50, 23 October 2010 (UTC)
::I think that they should just be deleted or cached as HTML or protected as I like having the keys --[[User:Balloonhead66|Balloonhead66]] 00:39, 24 October 2010 (UTC)
Why are the keys listed on front page? Wouldn't it be better to not have the front page bloated with unimportant information? --[[User:JacobVengeance|JakeAnthraX]] 00:56, 27 October 2010 (UTC)
:I suppose we can put [[VFDecrypt Keys]] under "Keys" (so it would be alongside [[AES Keys]], [[CERT|Apple Certificate]], [[Baseband RSA Keys]], et. al.). --[[User:Dialexio|Dialexio]] 01:07, 27 October 2010 (UTC)
::I just don't think the front page should be bloated up with random things like 6 lines of VFDecrypt --[[User:JacobVengeance|JakeAnthraX]] 01:21, 27 October 2010 (UTC)

== Protection ==
Can someone inform me why the main page was protected from all users? Not just newly created users? Cheers. --[[User:Beau|Beau]] 03:19, 8 November 2010 (UTC)
:An edit war took place earlier, and unfortunately there's no option to protect it from just newly created users. If you want to make a change, Http and I will be more than happy to carry it out (pending approval, but we're pretty reasonable). --[[User:Dialexio|Dialexio]] 03:46, 8 November 2010 (UTC)
::There kindof is, you just need to update to 1.16, but i guess only geohot can do that... :( --[[User:Balloonhead66|Balloonhead66]] 03:49, 8 November 2010 (UTC)
:: Thanks [[User:Dialexio|Dialexio]], just thought that it was strange that Wiki pages are starting to be put together for [[/Applications]] yet there's no link present on the main page - if anything it might fit best atop the Software list. --[[User:Beau|Beau]] 03:58, 8 November 2010 (UTC)
:::It's actually already there, under the name "Filesystem" (which links to the root directory of iOS). :) --[[User:Dialexio|Dialexio]] 04:33, 8 November 2010 (UTC)

Talk:VFDecrypt

2010-11-10T22:15:17Z

GreySyntax: New page: Since this is now a VFDecrypt page can we remove the links to the GUI's? --~~~~

Since this is now a [[VFDecrypt]] page can we remove the links to the GUI's? --[[User:GreySyntax|GreySyntax]] 22:15, 10 November 2010 (UTC)

Talk:Main Page

2010-11-03T20:37:40Z

GreySyntax: Wouldnt let me undo multiple versions

IRecovery

2010-11-02T22:13:09Z

GreySyntax: /* Updates */ Removed Alpine, updated iRecovery++ link.

{{DISPLAYTITLE:iRecovery}}
iRecovery is a libusb-based CLI utility for Mac OS X, Linux, and Windows. It is able to talk to [[iBoot]] and [[iBSS]] via USB. It's completely open source; the source code is released under the terms of the GNU GPL v3. The full license text can be found in the LICENSE file on github.

It currently connects to:
* [[DFU 0x1227|0x1227]] ([[DFU Mode]]/[[WTF]] Mode 2.0)
* [[Recovery Mode (Protocols)#Recovery_Mode_2.x_.28DevID.3D0x1281.29|Recovery Mode 0x1281]] (Recovery Mode/iBSS)

==Credits==
westbaer

==Thanks==
[[User:Pod2g|pod2g]], [[tom3q]], [[User:Planetbeing|planetbeing]], [[User:Geohot|geohot]] and [[User:posixninja|posixninja]].

==Features==

===DFU 2.0 (0x1227)===
It can upload a file, such as an [[iBSS]], so that you can unplug and spawn a shell with 0x1281.

===Recovery 2.0 (0x1281)===
====File Uploading====
You can upload a file to 0x9000000 with the following syntax:
./iRecovery -f file
In newer builds that use libusb-1.0 this is now
./iRecovery -u file

====Two-Way Shell====
You can spawn a shell to do all sorts of neat things with the syntax:
./iRecovery -s
Once it has spawned, you can type 'help' and iBoot will respond with its built-in command list.

====Single Command====
./iRecovery -c "command"
Sends a single command to the device *without* spawning a shell.

====usb_control_msg(0x21, 2) Exploit Command====
./iRecovery -k
Sends Chronic Dev's + Geohot's latest usb exploit. Implemented into blackra1n.
This was updated near October 17, 2009. [http://github.com/posixninja/irecovery posixninja's fork]
In newer builds this is now -e

====Auto Boot====
You can now enable auto-boot by running:
./iRecovery -a
or by sending /auto-boot in a shell.

====USB Reset====
Reset USB
./iRecovery -r

====Batch Scripting====
iRecovery now supports batch scripting, this allows you to send commands to iBoot from a pre written list of commands, this also suports scripting such as /auto-boot and /upload <file>
./iRecovery -b <file>
or in a shell:
/batch <file>

====Raw Commands====
You can now send raw commands via the -x21 -x40 or -xA1 flags

==Example Output==

iRecovery -s
<pre>
======================================
::
:: iBSS for n82ap, Copyright 2009, Apple Inc.
::
:: BUILD_TAG: iBoot-596.24
::
:: BUILD_STYLE: RELEASE
::
:: USB_SERIAL_NUMBER: CPID:8900 CPRV:30 CPFM:03 SCEP:05 BDID:04 ECID:000003293C113D76 IBFL:00
::
=======================================

Entering recovery mode, starting command prompt
] printenv
build-style = "RELEASE"
build-version = "iBoot-596.24"
config_board = "n82ap"
loadaddr = "0x9000000"
boot-command = "fsboot"
bootdelay = "0"
auto-boot = "true"
idle-off = "true"
boot-device = "nand0"
boot-partition = "0"
boot-path = "/System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8900x"
display-color-space = "RGB888"
display-timing = "optC"
framebuffer = "0xfd00000"
secure-boot = "0x1"
</pre>

==Forks==
[http://github.com/iH8sn0w/irecovery iH8sn0w/irecovery]

[http://github.com/GreySyntax/irecovery GreySyntax/irecovery]

==Updates==
A C++ port is also in the works dubbed iRecovery++ (by [[User:GreySyntax|GreySyntax]]). [http://github.com/NSPwn/iRecoveryplusplus]]

A VB.NET port (by [[User:Fallensn0w|Fallensn0w]] )can be found at [http://github.com/fallensn0w/vbiRecovery vbiRecovery]

A GUI (Graphical User Interface) has been made for Windows under the name [[GiRecovery|Zeratul]] and it's developed by [[User:Fallensn0w|Fallensn0w]] and available at [http://github.com/fallensn0w/Zeratul @github]
(or compiled binary files [http://fallensn0w.host22.com here].)

==Download==
[http://github.com/chronicdev/libirecovery Offical Repository (Maintained) / Download here]
[http://www.mediafire.com/?nmn25bnjzy3 Win32 binary]

Jasper 8C134 (iPhone3,1)

2010-11-02T21:44:25Z

GreySyntax: New page: == Decryption Keys == === Root Filesystem (018-9740-004.dmg) === *'''VFDecrypt Key''': === Update Ramdisk (018-9743-004.dmg) === * '''IV''': e08ad9813f68c660c546cdddb4...

== Decryption Keys ==
=== Root Filesystem (018-9740-004.dmg) ===
*'''[[VFDecrypt Keys|VFDecrypt]] Key''':

=== Update Ramdisk (018-9743-004.dmg) ===
* '''IV''': e08ad9813f68c660c546cdddb4931846
* '''Key''': 42033ee3b23af570568a335b29642292683769fd709d9267a9111b8019720153

=== Restore Ramdisk (018-9746-004.dmg) ===
* '''IV''': 420a5d6eb57765fa8ffebf5cda3d6f88
* '''Key''': a9f7322cd85eedfeb19dd26ed69cc6c72a46e90f1eb0539afef21ee9b074d2a0

=== AppleLogo ===
* '''IV''': 0dcee7d1b9982793558d588d84c44af0
* '''Key''': 91866d7b929b971c72fa6e90530a5b2a361bed9486f2cb884b632f61253ed204

=== BatteryCharging0 ===
* '''IV''': bf594f1948cfe699ed81978da918c9a2
* '''Key''': 6059d6622dc37946e52d2fe87d64541b2142362a9f33576647d0e4210bd98d1b

=== BatteryCharging1 ===
* '''IV''': 55fbd7a9c6b27af1edc3d79a1e4a7a5e
* '''Key''': e4b8dd16397ce416a6309b594034c8e024c245dcff046014331d71e307047939

=== BatteryFull ===
* '''IV''': 6ea98a78db9deca4cc1d37ab2b01bf72
* '''Key''': 311b3abb89083cd245b2c00bb9207b3fa721435b4f53836a97c38cfde4b20268

=== BatteryLow0 ===
* '''IV''': 411cf59c075aed7412eac6cb209b635f
* '''Key''': 809a6d52d5ed34d6d35397c1bce23190a09e353418394b33e60b5257de1ee117

=== BatteryLow1 ===
* '''IV''': 76d3f38f8badef93c8a243f4e96e739e
* '''Key''': fdacba0a29f3b650cd135864ee95cb088cb905342912de93fd5a7bf288c99d75

=== DeviceTree ===
* '''IV''': ea8153bd8ef0b7965e1855959f8706ed
* '''Key''': 91fb8c543820ad313578a175d28e74caac973759a766167e423d872dae361ca7

=== GlyphCharging ===
* '''IV''': 604dfca9640b9f800a3b478adbe63aa0
* '''Key''': 3fa0ae7d2411725bfbffff4e06adcf24373d641703a0cd24d2fa34c64544f90a

=== GlyphPlugin ===
* '''IV''': 746787d5ea62187e084c2d0c1f9399cc
* '''Key''': edc4ee23eff28d4b021e23d986972558bc9d108b7332abff1600e0e01eac23bf

=== [[iBEC]] ===
* '''IV''': 5125bb86e2139b3f4cfb3a470c699df2
* '''Key''': 9aa1f074b26ae75bd394e7138f1195dc784bd774c81f9cc4d80f9b3eedd60edf

=== [[iBoot]] ===
* '''IV''': dadfae4f4967eff4f149b606cbe34060
* '''Key''': 65b69a67acc72771aea43b15b70a566139a42257bdab7659cdab1ab25377

=== [[iBSS]] ===
* '''IV''': 45bbf0fa98573425fa21dc6e529eba6b
* '''Key''': 32398d3d1328ed3f0e1949446a1357585ae1973b3c8434b83df49ac55cf45d06

=== [[Kernelcache]] ===
* '''IV''': e94422a4abd17b504c612749be3e3f23
* '''Key''': b0a50e8512da7453583a9ef71663a106bc1ced67ae551f84a4352a0db390f406

=== [[LLB]] ===
* '''IV''': e0514f26e05ab9db509033f36d7440e8
* '''Key''': 3c135743c32306664125a9e07cc280ee8fd014830353e385fb13a85b28698d05

=== RecoveryMode ===
* '''IV''': 9a59ae16a84808e8d7546269e36a21c0
* '''Key''': ff278adcb52647785fd58ad689739fdcdace7acd08d932b4c32d54ea2c2032d8

Talk:Jailbreak

2010-10-30T11:45:11Z

GreySyntax: /* Limera1n/Greenpois0n */

Actually, I believe redsn0w (normal version) still loads a 2.1.1 iBoot & uses the arm7_go exploit to bootstrap the ramdisk that flashes the NOR, including an LLB with the 24kpwn exploit. Can someone confirm this? --[[User:Cool name|Cool name]] 01:33, 27 July 2009 (UTC)

==Limera1n/Greenpois0n==

We should really try to get a name for the exploit or find a way to add it to exploits used post 2.0 --[[User:JacobVengeance|JakeAnthraX]] 05:13, 30 October 2010 (UTC)
:Apparenttly, limera1n uses SHAtter as it is unmatchable. Also google it --[[User:Balloonhead66|Balloonhead66]] 05:15, 30 October 2010 (UTC)
:: SHAtter was not used and was saved. This is the iPhone wiki, usually people come here before googling and after all it should be here. --[[User:JacobVengeance|JakeAnthraX]] 05:20, 30 October 2010 (UTC)
:::the exploit is used differently on both jailbreaks on [[limera1n]] it creates a command called geohot then reboots to recovery mode and boots a [[ramdisk]] however on [[Greenpois0n]] it injects [[IBSS]] and then uses the exploit to inject a pwnd [[IBEC]] in the description of shatter it did say it rebooted --[[User:Liamchat|liamchat]] 11:31, 30 October 2010 (UTC)
::[SHAtter] was saved, [greenpois0n] uses the same exploit as [limera1n]. Also can someone stem the flow of crap coming from liamchat? It's getting annoying now. --[[User:GreySyntax|GreySyntax]] 11:45, 30 October 2010 (UTC)

JasperVail 8C5115c (iPhone3,1)

2010-10-30T01:33:11Z

GreySyntax:

JasperVail 8c5115c is iOS 4.2b3.

== Decryption Keys ==
=== Root Filesystem (018-9705-005.dmg) ===
*'''[[VFDecrypt Keys|VFDecrypt]] Key''': ee8c534a2cb539385c787092bd2e43dcb4040392b223d9d01d840b32348144a39f9898ef

=== [[Update Ramdisk]] (018-9686-004.dmg) ===
* '''IV''': b4c3de2c9b86936f1571c3ae9b46cdcc
* '''Key''': a0ca320bfdb29138826e7f0b66920888abee3e666dfbacc9c2d5ba13d7cae8a0

=== [[Restore Ramdisk]] (018-9690-004.dmg) ===
* '''IV''': 24d1a423b59bbccb67f1dd02ec464582
* '''Key''': 51a7d13de60e442b957f1e141a6d20e1db54ab88b284ab722ab9bc844ad97cb8

=== AppleLogo ===
* '''IV''': 5246b6e3544308f5454bf4fa1d7a04e7
* '''Key''': 8c2cbe257bd15824142200546b7ad0368832b95ad9ff0756f915c8a0fb3f87b1

=== BatteryCharging0 ===
* '''IV''': d583695709430288c528f03c5b2bca97
* '''Key''': fa5fe34350cf63d6674ca463a3f1a464905afa7d1c23abed44e58eca03d8b80c

=== BatteryCharging1 ===
* '''IV''': 401199060e56abb97c29d8ba1707fb4f
* '''Key''': 55415e867656e574304d577708b2801830445d938c242ec48ba6c5b9fce592dd

=== BatteryFull ===
* '''IV''': fce4fef1253ecfd26b98fda4a8ae9d2d
* '''Key''': e2216952ee754fe10275386b96a6d1a12fe2c327741349f79c50e9aa68a9c8d1

=== BatteryLow0 ===
* '''IV''': cdb6c5f13bbdeb4ce485fc4b1bf4ee03
* '''Key''': d82c2d843a6ccdc757f7ae541b9dbe5571257e37cc12f8d24f87d1ecd97392a4

=== BatteryLow1 ===
* '''IV''': 3c6bd8407ddd6e6beccb85dfd9fea84d
* '''Key''': e7b20dc0b85b0251e7ce92693593a1364865d911472282746da4c7e214b911cb

=== DeviceTree ===
* '''IV''': 43f9486d6323b1432634ff364f323032
* '''Key''': d843e86cdcfd91f3fafea1abd6ac3629f724c0720aaab5c874e3c9b79e3c63f2

=== GlyphCharging ===
* '''IV''': 253d6ef409f7bd12e2ace6e6fb432d3b
* '''Key''': 0f861d4f8cc7b4a0d28e86bf80026332d0a6352abad5d69e288b8f569aa52f14

=== GlyphPlugin ===
* '''IV''': 89153c7eb1f456c999cb4554d3b60907
* '''Key''': 62fe13dfd91b514d5e7d5ff1ecd12d7cc95b7046926e683fda88578bcf8e266a

=== [[iBEC]] ===
* '''IV''': 2cdf153fd172bb7b7aaef2d15ba28563
* '''Key''': 7eb03cedd352d8816ac716789b067931c89682e9bc1ccd6e96bde526433e1df4

=== [[iBoot]] ===
* '''IV''': 8bda3dd77c6edb7ffe746938c2d1f2e5
* '''Key''': 456316956551519b5b1caf5a432a7c2ad6920f3af1fc51077cf7f698b0b82f7f

=== [[iBSS]] ===
* '''IV''': d7b4d36a47b374944191df9f7edb9647
* '''Key''': ee44e660c54cf0c6839a221534cec753099d61e71fb9c805b140d11f53613675

=== [[Kernelcache]] ===
* '''IV''': 24cad80afa35a9a2d12e750919d9e2d0
* '''Key''': 8502a1b843defbbee1a9279f1dcc602cb0b295569c93b1fa9f6fa7c1d8e4cffc

=== [[LLB]] ===
* '''IV''': 96bad1ae060412dbe5c6bfae5034f137
* '''Key''': 488a3d72af06f710ba72c9f258228cee78da4bb9e7460d33a0ca7a92617dcbe7

=== RecoveryMode ===
* '''IV''': 438d20a2ef35b9e37fc6f3202a6670c9
* '''Key''': 0ea3d593ce300b5ed9e1bfb47a1622e1a1ff4586ca2ce8f88204a736a6744bb0

Talk:Sandbox

2010-10-28T13:44:32Z

GreySyntax: /* Incorrect info */

== Movement of this page ==

This page is to be moved to User:liamchat/Sandbox so it is not in the Main Namespace and counted as an article... --[[User:Balloonhead66|Balloonhead66]] 00:17, 27 October 2010 (UTC)
:Why have you moved it I did not make [[Sandbox]] and editing my personal pages without asking me is not alowed --[[User:Liamchat|liamchat]] 11:09, 27 October 2010 (UTC)
::When I was on recent changes, it zsaid liamchat made the page and it looked like a personal page, so I moved it... If it changes to look like a wiki page, contact dialexio of http to move it to sandbox... --[[User:Balloonhead66|Balloonhead66]] 15:54, 27 October 2010 (UTC)
:::How can something made by apple look personal I have made lots of pages and you have not explained why you edited my user page and then you filed my talk page ( with how to have save space ) --[[User:Liamchat|liamchat]] 16:01, 27 October 2010 (UTC)
::::I don't know how it did, but the title sandbox sounds like, well, a sandbox. As in it is under construction and not ready for a spot on the Main Namespace. Also, I edited your talk page as a way to help with your fomatting issues... --[[User:Balloonhead66|Balloonhead66]] 20:00, 27 October 2010 (UTC)

== Incorrect info ==
There was no app store before 2.0. The device sandboxes applications it does not use a hypervisor. "A jail is a set of resource limits imposed on programs by the operating system kernel. It can include I/O bandwidth caps, disk quotas, network access restrictions and a restricted filesystem namespace. Jails are most commonly used in virtual hosting." (from [http://en.wikipedia.org/wiki/Sandbox_(computer_security)|Sandbox_(computer_security)]). --[[User:GreySyntax|GreySyntax]] 21:06, 27 October 2010 (UTC)
:ok i just noticed the difference between 2 files ( from an ipsw [http://pastebin.com/6C55pTxf] ) ( from an appstore app [http://pastebin.com/E1aSybSJ] ) and i thought the files described what the apps are allowed to do ( because there are lots of exploits on appstore apps that could be used with a kernel exploit ) --[[User:Liamchat|liamchat]] 00:39, 28 October 2010 (UTC)
::All applications are ran sandboxed under the 'mobile' account, things like cydia break out of the sandbox and run as root. --[[User:GreySyntax|GreySyntax]] 13:44, 28 October 2010 (UTC)

Talk:Sandbox

2010-10-28T13:44:09Z

GreySyntax:

Talk:Sandbox

2010-10-27T21:06:03Z

GreySyntax: /* Movement of this page */

Talk:SHSH

2010-10-19T19:13:00Z

GreySyntax: /* Soft-SHSH checks */

== iDevices affected ==

Just to make sure (I don't have these devices): The [[N82ap|iPhone 3G]] (even the newer MC model) and the [[N72ap|iPod Touch 2nd generation]] (also newer models) don't have shsh checks. (I'm not talking about the new "soft" check.) Can someone confirm this? I always thought these mentioned newer devices also have this certificate check in the [[Bootrom]] built-in. But as someone removed my listed 3G (with a question mark), I assume no [[N82ap|3G]] has this check. What is actually the difference between the old and the new [[Bootrom]] then? Maybe someone can explain how this certificate check works exactly and which software part is doing it. Thanks. -- [[User:Http|http]] 11:25, 20 July 2010 (UTC)
:There's definitely no SHSH checking in the [[N82ap|iPhone 3G]] bootrom. If I'm not mistaken, its bootrom can't even read IMG3 files.

:I'm pretty sure the iPod touch 2G bootrom ''does'' check SHSHs, but only the one supplied in the IPSW; its restore process doesn't require getting a new SHSH from Apple's server. --[[User:Dialexio|Dialexio]] 20:08, 20 July 2010 (UTC)

== Firmware 3.1(.1) ==

What's the difference between 3.1 and 3.1.1? Were both released at the same time? Or is 3.1 just a "short form" for 3.1.1? If yes, we should always write the full name. -- [[User:Http|http]] 21:58, 20 July 2010 (UTC)
:3.1 was released for iPhones, while 3.1.1 was released for iPod touches. Other than that (and the build numbers), they're basically the same thing. --[[User:Dialexio|Dialexio]] 23:25, 20 July 2010 (UTC)

== Apple still signing 4.0.1 -- conspiracy? ==

It seems very un-apple for them to continue signing this firmware. Does anyone have any technical reasons/guesses as to why they are doing this?

I think it's sort of a truce -- in fear of yet another security problem being exploited and requiring a 4.0.3, and possibly de-incentivize the search for exploits. Possibly even more far fetched is an experiment to see if there is a boost in sales of people trying to get jailbreakable devices. Anyone have ideas? [[User:Iemit737|Iemit737]] 17:50, 15 August 2010 (UTC)

:My guess is that because many users upgrade without thinking or saving shsh try to jailbreak at some point in time. Because very many users did a jailbreak by this simple page, Apple would create lots of unsatisfied users. After Antennagate having more unsatisfied users, or those returning their device just to try again wouldn't be good for Apple. Also, I think 4.1 will be released soon (less than a month probably), so they can close signing then. -- [[User:Http|http]] 18:56, 15 August 2010 (UTC)

Good point -- lots of first time jail breakers and possible device returns and otherwise angry people. It still seems very unorthodox for them, being the evil iEmpire and all. I can't wait to see what exploits will be uncovered in 4.1. [[User:Iemit737|Iemit737]] 20:43, 15 August 2010 (UTC)

:It seems like Apple continues signing for the previously-issued firmware if the update is of a hotfix nature. (Remember that 3.0.1 was a hotfix for an SMS character vulnerability, and Apple continued signing for both 3.0 and 3.0.1 until 3.1 came along.) The only reason I can think of is they probably rushed the fix out of the door without testing thoroughly, so perhaps their attitude is "we tested this but not rigorously, so feel free to downgrade if it botches something up?" --[[User:Dialexio|Dialexio]] 21:13, 15 August 2010 (UTC)

==4.1 - Apple signing now?==
I believe they are signing the 4.1 GM seed and it does not have expirations or UDID restrictions, and works with windows iTunes, no? Which means if the final ipsw is the same, they will have been signing it since September 1. Albeit the GM is still considered apple confidential... But at the same time they are surely signing some kind of 4.1 for foxconn to put on touch 4G's... [[User:Iemit737|Iemit737]] 19:39, 4 September 2010 (UTC)

:Yes, they are probably signing 4.1 already, but we cannot confirm that, as we don't have any ipt4 yet and d/l of 4.1 is not possible for any other device yet. That's why I've put the product release date as start date. Regarding GM and final: even if the code is the same, it's probably a different ipsw and therefore a different shsh required. I don't know how beta signing works in detail. -- [[User:Http|http]] 22:06, 4 September 2010 (UTC)

::They're signing 4.1 GM. Just make sure to backup your SHSHs. --[[User:desertsn0w|desertsn0w]] 22:48, 4 September 2010 (UTC)

== Soft-SHSH checks ==

Since iTunes 9.2 (I think) SHSH are checked for iPhones 3G also, but only through iTunes, not by the phone's bootrom. iTunes 9.2 (I think) was the version that was introduced together with iOS 4.0. But I have a report that iOS 3.1.3 can be installed with iTunes 10. I don't know what his hosts file looks like, but he cannot have SHSH backup on Cydia, because those were issued only since iOS 4.0 (correct?). Does this mean that iTunes checks SHSH only if firmware is >= 4.0? If yes, this would mean that you could downgrade a 3G to any pre-4.0 firmware without using redsn0w. -- [[User:Http|http]] 18:40, 19 October 2010 (UTC)
:These were introduced at the same time as [[iOS] 4.0. I believe they kernel checks they are present and valid. If i'm correct this may mean system's like [[PwnageTool]] can patch out the checks. --[[User:GreySyntax|GreySyntax]] 19:13, 19 October 2010 (UTC)

RiPDev

2010-10-19T18:54:28Z

GreySyntax:

RiPDev (Russian iPhone Developers) was a popular group of iPhone software developers, created in 2007 by Slava Karpenko aka [https://twitter.com/slavikus @slavikus]. First product of that team was free Russian Keyboard as part of commercial Russian Project for iPhone OS 1.x.x. Later RiPDev made many very useful applications such as 'Hood,' an SBSettings alternative. They made Icy, a popular [[APT]] package installer. As of iOS 4, most of their iOS projects no longer work.

They made an application called InstallerApp that allowed users to install jailbroken apps on a device via the computer. It worked for some time than slowly faded away since not many users wanted to pay for it. It was a very well made application and soon enough RipDev gave up on the project. They have several language packages and most of their software had language options for over 30 languages.

RiPDev was heavily criticised by well-known Russian blogger Eldar Murtazin for illegal enterprise since they never paid any taxes for their revenues.

The team was dismissed in the late 2009, when it became obvious that it had no working business model.

==Icy==
[[Image:IcyIcon.png|75px|right]]
Icy is a lightweight APT package installer that was both themeable and produced in over 30 languages. It works perfectly on 2.x-3.1.2, and it is being updated by many for iOS 4. Icy was a very advanced installer but had its issues. RiPDev tried to reinvent APT and in return lost a lot of popular features and made the repository owners have to do a lot more work then repository owners would have for [[Cydia]]. [[Saurik]] explained this when Icy was released some time back.

Talk:RiPDev

2010-10-19T18:45:35Z

GreySyntax: /* Separate Icy page */

==Separate Icy page==
Wouldn't it be better to separate Icy and RiPDev content? -- [[User:Http|http]] 18:19, 19 October 2010 (UTC)
:It would make sense as they made a variety of applications / tools. --[[User:GreySyntax|GreySyntax]] 18:45, 19 October 2010 (UTC)

Talk:Limera1n

2010-10-11T19:49:32Z

GreySyntax:

== Drop size on image ==
Has anyone else noticed that on the picture, the lime raindrop us bigger than the rest of them? Could be nothing but could also mean that [[User:Geohot|geohot]] has worked out [[SHAtter]] and use it on the three A4 devices that are there and just used the photos app for the [[N88ap|3GS]].
Also (if it's real) why is [[User:Geohot|Geohots]] exploit not used and keep [[SHAtter]] for when there are more A4 devices around? --[[User:Shengis14|Shengis14]] 07:16, 9 October 2010 (UTC)
:I did see that and assume it's just the same image everywhere, but on retina display it's just smaller due to higher resolution. --[[User:Http|http]] 09:00, 9 October 2010 (UTC)
::I also saw that and would ask you to look at the image again. iPod Touch 4g and iPhone 4, both retina, have smaller... This could be because [[geohot]] has a problem with the program as he didn't create a @2x.png image... I believe this is a true jailbreK. [[User:Balloonhead66|Balloonhead66]] 13:57, 9 October 2010 (UTC)
:::In the dump, I found the lime drop and it is a 320x480 image. Therfore, when you jailbreak a retina device with a 320x480 it shrinks the image because there is no lime@2x.png file...

== Misc. ==
I think some more info may be needed. What is some background on it? I thought Limera1n was a fake from the 3.x days? --[[User:OMEGA RAZER|OMEGA RAZER]] 22:09, 8 October 2010 (UTC
:It was never fake see [http://theiphonewiki.com/limera1n http://theiphonewiki.com/limera1n] (a cached copy). --[[User:GreySyntax|GreySyntax]] 22:45, 8 October 2010 (UTC)
::Thanks for the clarification. Not sure where I heard that. --[[User:OMEGA RAZER|OMEGA RAZER]] 23:09, 8 October 2010 (UTC)
Geohot made the web page when 3.1.3 come out but he said it used a bootrom exploit for untetherdness that he was saving for the iPhone 4 --[[User:Liamchat|liamchat]] 22:53, 8 October 2010 (UTC)
Anything else we should mention? :P --[[User:Dra1nerdrake|dra1nerdrake]] 23:14, 8 October 2010 (UTC)
:Why the insane secrecy of it? I'm not deep in the scene but this is the first I'm hearing more than the name lol. --[[User:OMEGA RAZER|OMEGA RAZER]] 23:18, 8 October 2010 (UTC)

== Release ==

I thought geohot had no plans to release it... [[User:Balloonhead66|Balloonhead66]] 23:22, 8 October 2010 (UTC)
:Correct. Read the controversy section of this page. It should answer as to why the sudden change in heart. ~Drake

== SIGN YOUR COMMENTS ON THE TALK PAGE ==
Please press the button on top of the exit box or type <nowiki>~~~~</nowiki> manually. This will give you the basic signature. It's also acceptable to just identify yourself. Just make sure we know who you are. ;P ~Drake

== Latest edit to [[Limera1n]] ==

How does it look like a tethered? -- Balloonhead66|23:34, October 8, 2010 (UTC)
:They're all plugged in with USB cables. --[[User:OMEGA RAZER|OMEGA RAZER]] 23:35, 8 October 2010 (UTC)
::They could just be charging and he is in the photos app -- Balloonhead66|23:41, October 8, 2010 (UTC)

== Who is John Galt? ==

Look at the HTML source of the page. Is this comment new? [[User:Angelo|Angelo]] 23:42, 8 October 2010 (UTC)
:Yep. I've looked at the source of this page before and after this update. The John Galt is probably meant to throw us off. Geohot does that. :P But, yes, it's new. ~Drake
::Where did you see that? [[User:Balloonhead66|Balloonhead66]] 23:50, 8 October 2010 (UTC)
:::Type in Firefox URL bar: view-source:http://limera1n.com/ [[User:Angelo|Angelo]] 23:47, 8 October 2010 (UTC)
::::Or google chrome for that matter :D . Anyway, I thought you meant the source of this page or the [[Limera1n]] page, not the website... *stupid* Thanks for explaining that! [[User:Balloonhead66|Balloonhead66]] 23:50, 8 October 2010 (UTC)
:::::[http://en.wikipedia.org/wiki/John_Galt Who is John Galt] Kind of funny actually when you read it and what's going on right now --[[User:alpineflip|alpineflip]]
:::::: yes I see why "learns that all of the stories have an element of truth to them." maybe it will ra1n again but not today --[[User:Liamchat|liamchat]] 00:35, 9 October 2010 (UTC)

== Explanation ==

So, I'm sure most, if not all, of you are confused. This Limera1n is nothing more than a plot by geohot to get the chronic dev team to incorporate the exploit used in limera1n into greenpois0n. This is not plausible because the exploit in limera1n is a bootrom level exploit, which can be used to make a jailbreak (albeit [[tethered]]) on its own. To make greenpois0n untethered, chronic dev has used a tweak by comex (in userland) to patch the kernel. The exploit in Limera1n can be used at a later date to make another untethered jailbreak, but it's better to leave the lower level exploits until later, after all, either way, it produces the same affect. To implement the limera1n exploit into greenpois0n, they'd have to rewrite the entire jailbreak, which would offset the release. This should clear up confusion. ~Drake

I reckon it was the iphone dev teams fault if they just had to release spirit after the iphone 4 was released there would be no drama because the ipod touch 4 would hav been jailbroken via star. --[[User:Robinhood|robinhood]]

I think Geohot told someone about his exploit and apple attempted to patch it in a4 bootrom [http://mobile.twitter.com/musclenerd/status/26801617164] --[[User:Liamchat|liamchat]] 01:54, 9 October 2010 (UTC)

===UPDATE:===
A [http://twitter.com/#!/p0sixninja/status/26799962302 recent tweet] from iPhone hacker p0sixninja has just confirmed that the date WILL NOT be changed. If they can implement geohot's exploit before 10/10, they will use that. If they can't they won't. --[[User:Dra1nerdrake|dra1nerdrake]] 00:53, 9 October 2010 (UTC)
: This has nothing to-do with Limera1n. -- [[User:Shorty|Shorty]] 01:06, 9 October 2010 (UTC)
::It does. If they can integrate it into GP then there's not going to be a Limera1n. If they can't in time then there will be two jailbreaks released... --[[User:OMEGA RAZER|OMEGA RAZER]] 01:11, 9 October 2010 (UTC)
::: This is a grand waste of a bootrom exploit though. ~Drake
:::: Geohot will not waste the exploit's used in limera1n but greenpois0n is using a bootrom exploit to inject a userland exploit that is odd --[[User:Liamchat|liamchat]] 01:20, 9 October 2010 (UTC)
:::::Yes it does limera1n will use an untetherd bootrom and iboot exploit but Why does Geohot not want us to use comex's kernel patch just for 4.1 then when 4.2 is out we can use shatter to reuse the iboot exploit --[[User:Liamchat|liamchat]] 01:20, 9 October 2010 (UTC)
::::::@[[User:Dra1nerdrake|dra1nerdrake]] - Sorry if I didn't make myself more clear, I was basically on about the first part, not the last bit. -- [[User:Shorty|Shorty]] 01:25, 9 October 2010 (UTC)
the exploit used by [[limera1n]] is a [[24kPwn]] like [[bootrom]] exploit and a [[IBoot]] exploit ( read the second to last paragraph [http://posixninja.blogspot.com/2010/06/latest-progress-and-new-updates.html] ) --[[User:Liamchat|liamchat]] 12:55, 9 October 2010 (UTC)

== Image Taken Down ==

I'm just speculating here. With all this controversy, I am on the edge of believing... Also, the image was taken down from the site... It gives you a bitly link that takes you back to the bitty link... --[[User:Balloonhead66|Balloonhead66]] 14:20, 9 October 2010 (UTC)

:It is now very real [[greenpois0n]] will be cancelled (said by [[MuscleNerd]] [http://twitter.com/MuscleNerd/status/26860163077 Twitter Status]) and [[Limera1n]] will be used to jailbreak on 4.1 but [[wikipedia:Apple Inc.|Apple]] knows about both exploit's but [[Geohot]]'s has already being patched (patched in 4.2 beta 2 iboot [http://twitter.com/MuscleNerd/status/26860634891]) --[[User:Liamchat|liamchat]] 19:21, 9 October 2010 (UTC)

::The exploit has not been patched though, but because of the code similarities geohot can tell his exploit will be patched anyway by iPad2,1 so he wants it to be used instead of wasted, greenpois0n and SHAtter should be kept as they will affect a larger crowd of iOS devices (assuming apple continue to use the A4 chip. --[[User:Shengis14|Shengis14]] 19:36, 9 October 2010 (UTC)

:::[[Geohot]]'s exploit will be used in [[greenpois0n]] if it can be utilised in time. Otherwise both exploits will be burned. In relation to the image being taken down, it was proving to be too popular, so imageshack moved it. --[[User:Mushroom|Mushroom]] 19:47, 9 October 2010 (UTC)

::::I dont think so we said a lot about [[SHAtter]] (if apple patch one of the three BSS+Heap+Stack the exploit wont work) so it may be to late to protect [[SHAtter]] but [[Geohot]]'s exploit was fixed in [[iBoot]] so [[wikipedia:Apple Inc.|Apple]] knows 100% what his exploit is --[[User:Liamchat|liamchat]] 20:06, 9 October 2010 (UTC)

== He did it==
It's in the wild. Thoughts? ~Drake
:It's just BETA2 though... --[[User:Balloonhead66|Balloonhead66]] 22:28, 9 October 2010 (UTC)
::Has anyone being able to grab information about the exploit we need to delete shatter and name the new dfu exploit --[[User:Liamchat|liamchat]] 23:22, 9 October 2010 (UTC)
:::BETA2 naming means nothing. We need to delete SHAtter? Wtf? And also this exploit will either be named by Geohot or by it's technical name (like Environment Variable Overflow). [[User:Iemit737|Iemit737]] 00:03, 10 October 2010 (UTC)
::::I'd like to disassemble this and see what's in that exe of his. Anyone take a gander into this magical land of software yet? The payload's bound to be in there somewhere. ~Drake
:::::A dump has been released by ih8sn0w, see links. So much for the protection he put on it. It uses the ramdisk from purplera1n ( lulz). You'll need IDA Pro... [[User:Pwnd-v1|Pwnd-v1]] 13:12, 10 October 2010 (UTC)

== Pwnage ==

Does limera1n flash the NOR? I never managed to install a custom firmware after using limera1n.
:Sign your posts, please. And, limera1n leaves your NOR untouched. All it does is patch the kernel (which is on your NAND). Theoretically, one might be able to restore to a custom firmware by jumping to a pwned iBSS or iBEC through the limera1n exploit and using that to trick the device into accepting the firmware, but I'm probably mistaken. --[[User:Dra1nerdrake|dra1nerdrake]] 19:28, 11 October 2010 (UTC)
:It leave's the NOR un-touch'd otherwise the signature checks would fail during boot. Hence the kernel exploit from [[User:comex|comex]] is used to patch the kernel at runtime. --[[User:GreySyntax|GreySyntax]] 19:49, 11 October 2010 (UTC)

Limera1n

2010-10-11T15:45:53Z

GreySyntax: Added more information (commands for 'recovery 2' and debug messages)

[[Image:Ra1ndrop.png|right]]
This is [[User:Geohot|geohot's]] latest [[jailbreak]] utility. It uses his undisclosed exploit, along with [[User:Comex|comex]]'s [[userland exploit]], to achieve an [[untethered jailbreak]] on newer devices.
* [[N88ap|iPhone 3GS]]
* [[N90ap|iPhone 4]]
* [[N72ap|iPod touch 2G]] (support announced, not released)
* [[N18ap|iPod touch 3G]]
* [[N81ap|iPod touch 4G]]
* [[K48ap|iPad]]
* [[K66ap|AppleTV]] ([http://www.tuaw.com/2010/10/09/limera1n-jailbreak-released-greenpois0n-jailbreak-delayed/ However it's current usefulness is debatable])

It has been demonstrated multiple times by [[User:Geohot|geohot]], using blog posts on his now private blog. [[User:Geohot|Geohot]] [http://1.bp.blogspot.com/_NJ4JFBfr1tY/TDgkAsTQEmI/AAAAAAAAAcw/ZNHDxMNNL4Y/s1600/iphone4.png showed off a high-res picture of Cydia on an iPhone 4]. He [http://www.youtube.com/watch?v=__TR86PLiHw displayed an iPod touch 3G with an untethered jailbreak] that met MuscleNerd's requirements for a good video. In addition, he took a [http://4.bp.blogspot.com/_NJ4JFBfr1tY/S7_OvGMqJMI/AAAAAAAAAcE/R5WLrCizGw0/s1600/ipad_jb.jpg picture of Cydia and blackra1n icons on his iPad's SpringBoard].

limera1n was released to the public on October 9, 2010, delaying the release of [[greenpois0n]], because [[greenpois0n]] has to be rewritten to use the limera1n exploit instead of [[SHAtter]]. It only supports Windows at the moment, and there are some devices with issues.

==Release text==
<center>limera1n, 6 months in the making 
iPhone 3GS, iPod Touch 3G, iPad, iPhone 4, iPod Touch 4G 
4.0-4.1 and beyond+++ 
limera1n is unpatchable 
untethered thanks to jailbreakme star '''comex''' 
released today to get chronicdev to do the right thing 
brought to you by '''geohot''' 
hacktivates 
Mac coming soon 
follow the instructions in the box, sadly limera1n isn't one click 
that's the price of unpatchability 
as usual, donations appreciated but not required 
still in beta, pardon my ragged edges 
AppleTV is technically supported, but theres no apps yet 
zero pictures of my face</center>

==Credit==
*[[User:Geohot|geohot]] - the program itself, and [[bootrom exploit]].
*[[User:Comex|comex]] - [[userland exploit]] that allows limera1n to run [[untethered jailbreak|untethered]].

==Changelog==
{| class="wikitable" style="border-collapse:collapse;" border="1"
|-
|<center>'''Version'''</center>
|<center>'''Release time'''</center>
|<center>'''MD5 Hash'''</center>
|<center>'''Change comment'''</center>
|-
|RC1 beta 1
|9 Oct 2010 XX:XX GMT
|2f2b09a6ed5c5613d5361d8a9d0696b6
|First release.
|-
|RC1 beta 2
|9 Oct 2010 XX:XX GMT
|a70dccb3dfc0e505687424184dc3d1ce
|Fixed kernel patching magic. Rerun BETA2+ over BETA1.
|-
|RC1 beta 3
|9 Oct 2010 XX:XX GMT
|81730090f7de1576268ee8c2407c3d35
|Fixed an issue with [[N88ap|iPhone 3GS]] ([[iBoot-359.3.2|new bootrom]])
|-
|RC1 beta 4
|9 Oct 2010 XX:XX GMT
|d901c4b3a544983f095b0d03eb94e4db
|Uninstall fixed, respring fixed
|}

==Technical Information==
=== Basics ===
* limera1n does not use [[SHAtter]].
* limera1n uses a [[bootrom exploit]] to achieve the [[tethered jailbreak]] and [[unsigned code execution]].
* limera1n uses a userland exploit to make the jailbreak [[Untethered jailbreak|untethered]], which was developed by [[User:Comex|comex]].

=== Exploits ===
Details of the [[bootrom exploit]] to follow.

=== Process ===
The jailbreak appears to execute something like the following (in no particular order):
* In [[recovery1]],
"setenv debug-uarts 1
setenv auto-boot false
saveenv"
* In [[DFU]], it uploads a [[payload]].
* In [[recovery2]], it uploads another [[payload]] and its [[ramdisk]].
"setenv auto-boot true
reset
geohot done"

=== Interesting Messages ===
*
"geohot black is the new purple"
*
"blackra1n start: %d current IRQ mask is %8.8X
usb irq disabled...shhh
fxns found @ %8.8X %8.8X
found iBoot @ %8.8X
i'm back from IRQland...
3g detected, kicking nor
nor kicked
memcpy done
iBoot restored!!!
found command table @ %8.8X
cmd_geohot added
time to pray...%8.8X"
*
"2.2X send command(%d): %s
send exploit!!!
sent data to copy: %X
sent shellcode: %X has real length %X
never freed: %X
sent fake data to timeout: %X
sent exploit to heap overflow: %X
sending file with length: 0x%X Mingw runtime failure:
VirtualQuery failed for %d bytes at address %p Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d."

==Controversy==
The release of this jailbreak is specifically designed to pressure [[Chronic Dev]] into not releasing the SHAtter exploit, instead implementing the limera1n exploit into [[greenpois0n]]. Now that [[User:Geohot|geohot]] has released limera1n, releasing [[SHAtter]] would uselessly disclose another [[bootrom exploit]] to Apple.

[[User:Geohot|geohot]]'s rationale is that Apple has already discovered, through internal testing, the limera1n exploit, making it very likely that it will be fixed in the next bootrom. Because [[iBoot]] code is present both in the bootrom and firmware, and because firmware is refreshed much more often that bootrom code, any fix in this code branch would appear first in firmware. geohot observed his limera1n exploit was closed in firmware and concluded that it would almost certainly be fixed in the next bootrom revision, whereas SHAtter still has a chance of remaining useful in the 5th generation iPhone should it not be disclosed at this time.

limera1n's [[Untethered jailbreak|untethered]] userland exploit was obtained by [[User:Geohot|geohot]] under questionable circumstances from [[User:Comex|comex]]. [[User:Comex|comex]] did in fact end up giving his approval for the exploit to be included in limera1n.

==External Links==
* [http://loadingchanges.com/wp-content/uploads/2010/10/limetime.jpg Picture of limera1n in action]
* [http://limera1n.com/ limera1n.com Official limera1n site]
* [http://theiphonewiki.com/limera1n Mirror Site http://theiphonewiki.com/limera1n]
* [http://www.mediafire.com/?5sovoo41rbcdspw Limera1n RC Beta2 Dump on Mediafire]
* [http://www.pastie.org/1210054 Veence's explanation for release]
* [http://theiphonewiki.com/wiki/index.php?title=Limesn0w Limesn0w unlock?]

Talk:Limera1n

2010-10-08T22:45:47Z

GreySyntax:

I think some more info may be needed. What is some background on it? I thought Limera1n was a fake from the 3.x days? --[[User:OMEGA RAZER|OMEGA RAZER]] 22:09, 8 October 2010 (UTC)
:It was never fake see [[http://theiphonewiki.com/limera1n]]. --[[User:GreySyntax|GreySyntax]] 22:45, 8 October 2010 (UTC)

The iPhone Wiki:Site support

2010-10-06T20:22:50Z

GreySyntax: Undo revision 9973 by Keps (Talk)

Paid for by http://iphonejtag.blogspot.com/

Donations will never be accepted on this wiki.

User:GreySyntax

2010-10-01T00:12:29Z

GreySyntax: Updated and added contact section

Im GreySyntax,
an iOS developer. I'm also farmiliar with many C based languages (C/C++/C#/PHP/JAVA/SQL/Javascript). I've been developing software for around 3 years, I'm currently doing freelance work. I am also an experienced *nix admin.

== Projects ==

:[[Pneumonia]]

:[[IRecovery|iRecovery++]]

:[[AlpineUSB]]

== Contributions ==

:[[IRecovery|iRecovery]]

== Sites ==

:[http://www.expl0it.com expl0it]

:[http://www.nspwn.com NSPwn]

:[http://github.com/GreySyntax Github]

== Contact ==

:[http://twitter.com/GreySyntax Twitter]

:[irc://irc.expl0it.com/chat IRC] (Ask form me or private message me)

PurpleRestore

2010-09-30T23:57:12Z

GreySyntax: Not sure why someone though they were my notes

''PurpleRestore'' is a cross-platform tool used for flashing iDevices. Barely anything is known about it, this tool provides far more customization than [[iTunes]].

== Reverse Engineering ==

+354 003d7808 c70424bc01d700 movl $0x00d701bc,(%esp) com.apple.PurpleRestore
+361 003d780f e80c65c3ff calll 0x10000dd20
+366 003d7814 84c0 testb %al,%al
+368 003d7816 7409 je 0x003d7821
+370 003d7818 c704246c8ba400 movl $0x00a48b6c,(%esp) PurpleRestore is running, ignoring device
+377 003d781f ebd3 jmp 0x003d77f4
+379 003d7821 8d5de0 leal 0xe0(%ebp),%ebx
+382 003d7824 895c2404 movl %ebx,0x04(%esp)

Talk:KBAG

2010-09-13T15:53:17Z

GreySyntax:

If someone would be able to open the iBSS.n90ap.RELEASE.dfu from 4.0.1 and 4.1 and highlight the KBAG and post screen shots of it. I'm just not sure exactly how long they are. I have some ideas I would like to try. Thanks. ---OMEGA_RAZER
:Read the explanation on the page, it explains how to find the kbag :) --[[User:GreySyntax|GreySyntax]] 15:53, 13 September 2010 (UTC)

Star

2010-09-01T13:20:38Z

GreySyntax: /* Payloads */

[[Image:Star.jpg|thumb|Star on an [[N72ap|iPod touch 2G]].]]
Star is a userland [[jailbreak]] from [[User:Comex|comex]] that utilizes two new exploits to jailbreak iOS 3.1.2 through 4.0.1 (except for 3.2.2). Star warns that 3.1.2 and 3.1.3 are known to fail on [[N18ap|iPod touch 3G]], and that performing a fresh restore to 4.0(.1) is recommended. It can be used via [[Jailbreakme]]. With the release of iOS 4.0.2 (and iOS 3.2.2 for [[K48ap|iPad]]s) on 11 August 2010, the vulnerabilities were fixed so that it doesn't work anymore.

==Payloads==
The first payload is deployed via a HTTP redirect to a PDF file. The PDF contains a CFF font with a malformed type 2 charstring, which contains commands to repeatedly push and duplicate random numbers onto an "argument stack". This allows arbitrary code execution due to stack overflow in CFF parser inside FreeType 2 library used by iPhone.

The second payload (wad.bin) use an integer overflow in IOSurface.framework to get root access and privileges in order to jailbreak.[http://support.apple.com/kb/HT4291]

==PDF Patch==
Because this jailbreak revealed a new security hole, malicious people could also make use of this. Therefore it is recommended to install [http://twitter.com/saurik/status/20958834996 the patch] [[saurik]] put onto Cydia, to keep your device safe.

==Links==
*[http://github.com/comex/star Sourcecode for Star]

Apex 8A293 (iPhone3,1)

2010-08-19T19:07:41Z

GreySyntax: Undo revision 8502 by Twalker (Talk) (Users re-added fake keys)

Apex 8A293 is iOS 4.0 Gold Master/Final release and introduces multitasking, background wallpapers, and 100+ new user features, as well as over 1000 new developer APIs.

==Decryption Keys==
=== Root Filesystem ===
* '''VFDecrypt''':

===Update Ramdisk (018-6305-405.dmg)===
* '''IV''':
* '''Key''':

===Restore Ramdisk (018-6306-403.dmg)===
* '''IV''':
* '''Key''':

===applelogo===
* '''IV''':
* '''Key''':

===batterycharging0===
* '''IV''':
* '''Key''':

===batterycharging1===
* '''IV''':
* '''Key''':

===batteryfull===
* '''IV''':
* '''Key''':

===batterylow0===
* '''IV''':
* '''Key''':

===batterylow1===
* '''IV''':
* '''Key''':

===DeviceTree===
* '''IV''':
* '''Key''':

===glyphcharging===
* '''IV''':
* '''Key''':

===glyphplugin===
* '''IV''':
* '''Key''':

===iBEC===
* '''IV''':
* '''Key''':

===iBoot===
* '''IV''':
* '''Key''':

===iBSS===
* '''IV''':
* '''Key''':

===kernelcache===
* '''IV''':
* '''Key''':

===LLB===
* '''IV''':
* '''Key''':

===recoverymode===
* '''IV''':
* '''Key''':

Apex 8A293 (iPhone3,1)

2010-08-19T18:26:14Z

GreySyntax: /* iBoot */ Confirmed fake by posixninja. Tested myself and same result.

Talk:CoreTelephony

2010-08-19T01:07:21Z

GreySyntax:

hi,
has anyone tried this on iPad os 3.2?
I can compile and run, but the console outputs an error:
/var/mobile/Applications/05B0EDB7-CDFA-4715-8E52-ADE7E24B1324/SMSiPad.app/SMSiPad[3354] <Error>: mms: error sending message: -1

I'm about to try myself but get errors with the dumped headers. @above chmod 4755 SMSiPad and move the app to /Applications. --[[User:GreySyntax|GreySyntax]] 01:07, 19 August 2010 (UTC)

User:GreySyntax

2010-08-18T20:13:59Z

GreySyntax:

I’m Jordan,
I’ve been developing software for about 3 years. I’m fluent in multiple languages (C/C++/C#/PHP/JAVA/SQL/Javascript) and know enough Objective-C to get around.

I currently do freelance coding in my spare time. I run a few web servers. I’m a experienced *nix admin. However i am proficient in web development i prefer to work on servers side applications (cant stand GUI work).

'''Developed:'''

:[[Pneumonia]]

:[[IRecovery|iRecovery++]]

:[[AlpineUSB]]

'''Contributed:'''

:[[IRecovery|iRecovery]]

'''Site:'''

:[http://www.nspwn.com NSPwn]

:[http://github.com/GreySyntax Github]

Zeratul

2010-08-18T20:05:07Z

GreySyntax: /* Credits */

[[Image:Zeratul.PNG|right|Zeratul GUI for version 0.1 To 0.2 ( '''Not 0.2.5+''' )]]

Zeratul is a graphical interface for [[iRecovery]]. It's completely open source and the source code is released under the terms of the GNU GPL. Currently the program is '''only''' for Windows. The program is currently pretty much stable, but some minor fixes would be appreciated.

== Credits ==
*[[User:Fallensn0w|Fallensn0w]] for making it available for Windows.
*[[User:Gojohnnyboi|Gojohnnyboi]] for inspiring [[User:Fallensn0w|Fallensn0w]] about making it. He made a Mac version called [[giBootUtil]].
*[[Chronic_Dev_(team)|Chronic Dev Team]] - iRecovery

== Goal of Zeratul ==
Making it easy for users to interact with [[iRecovery]] without having any problems by using [[Terminal]] or such.

== Other ==
Since this program is being updated a lot, an updater will be implemented. It will connect to [[User:Fallensn0w|Fallensn0w]]'s homepage and read different files. Check out the source code for a better understanding about this.

== Downloads / Resources ==
* [http://fallensn0w.host22.com Compiled .exe]
* [http://github.com/fallensn0w/Zeratul source-code on github]
* [http://www.youtube.com/watch?v=1GRsg60sbvo&fm=18 A preview video on YouTube]

Chronic Dev (team)

2010-08-15T02:39:19Z

GreySyntax: /* Projects */

{{DISPLAYTITLE:Chronic Dev Team}}
[[Chronic Dev (team)|Chronic Dev]] is not the same as the [[iPhone Dev Team]]. [[Chronic Dev (team)|Chronic Dev]] is a team of hackers. Actually they cannot be distinctly assigned with such a "team", some just work losely together and might also be in another team. According to their [http://chronic-dev.org/blog/who-we-are/ Blog page] the following members are currently in the team:

== Official Members ==
*[[posixninja]]
*[[User:ChronicDev|chronic]]
*[[pod2g]]
*[[OPK]]
*[[semaphore]]
*[[User:DHowett|DHowett]]
*[[AriX]]
*[[westbaer]]
*[[ius]]
*[[User:Jaywalker|Jaywalker]]
*[[User:NerveGas|NerveGas]]

== Associates ==
*[[bugout]]
*[[User:Bushing|bushing]]
*[[c1de0x]]
*[[chpwn]]
*[[User:Comex|comex]]
*[[copumpkin]]
*[[CPICH]]
*[[User:MuscleNerd|MuscleNerd]]
*[[User:Planetbeing|planetbeing]]
*[[psp250]]
*[[saurik]]

==Projects==
*[http://theiphonewiki.com/wiki/index.php?title=IRecovery iRecovery] / [http://theiphonewiki.com/wiki/index.php?title=IRecovery libirecovery]
*[[greenpois0n]]
*[[GenPass]]

==Links==
*[http://chronic-dev.org/blog/ Chronic Dev Blog]
*[http://chronicdev.googlecode.com/ Chronic Dev google code]
*[http://twitter.com/chronicdevteam Chronic Dev Team on Twitter]
[[Category:Hackers]]

IBooty

2010-08-12T17:18:14Z

GreySyntax: /* Theory */

{{DISPLAYTITLE:iBooty}}
iBooty is a utility created by [[iH8sn0w]] to aid in jailbreaking [[N18ap|iPod touch 3G]] and [[N88ap|iPhone 3GS]] ([[iBoot-359.3.2|new bootrom]]) devices. The [[jailbreak]] is [[tethered]]. It has been reverse-engineered and is being ported to Linux. See [http://forums.openpwn.org/viewtopic.php?f=15&t=107] for information on booting your tethered device on Linux.

This application has been ported along with Payload Pwner to Mac OS X 10.4+ under the name [[Pneumonia]].

Also there's a application which includes Payload Pwner and iBooty called [[Nephron]]. (available [http://github.com/fallensn0w/Nephron @github])

== "Boot it!" Function ==
Reverse-engineered in a collaborative effort between [[User:Dra1nerdrake|dra1nerdrake]] and [[User:Fallensn0w|Fallensn0w]]: iBooty uploads the payload (nothing more than a pwned 3.1.2 iBoot), then uploads 4.0 [[iBEC]] and jumps to it. It resets the connection and then uploads and sets up the device tree. Now it uploads and sets up iH8sn0w's logo. Finally, it uploads the kernelcache for iOS 4.0 and boots the device.

== "Prepare" Function ==
Although I can not be sure yet, I believe that the program uploads the payload, then the 4.0 [[iBEC]], and uploads and prepares the logo, which notifies you to begin the restore process.

== Resources ==
There's a open-source version of iBooty by [[User:Fallensn0w|Fallensn0w]] available at [http://github.com/fallensn0w/openiBooty @github]

== Theory ==
This application has caused me to realize that provided one with a late-bootrom device has their SHSH blobs for iOS 3.1.2, they can jailbreak their device indefinitely, using this tethered method. --[[User:Dra1nerdrake|dra1nerdrake]] 15:37, 12 August 2010 (UTC)

Not true this seems to have been fixed since 4.0.1 when apple rewrote the USB handling. --[[User:GreySyntax|GreySyntax]] 17:18, 12 August 2010 (UTC)

Talk:JailbreakMe

2010-08-03T15:25:49Z

GreySyntax:

With the release of Jailbreakme i have began decompiling it. All credits go to comex for the below.

The source code of the website(only bottom is useful)

Since with trouble pasting here i have uploaded it onto mediafire.com

Open the html file with a text editor

http://www.mediafire.com/?g8bepd6h1q44f04

{{unsigned|Petrol|06:56, August 3, 2010}}

:We appreciate the contribution, but anyone can easily obtain the page's source code by spoofing the user agent. The main thing everyone's interested in is how the exploit works (it's known to use a PDF vulnerability). --[[User:Dialexio|Dialexio]] 15:00, 3 August 2010 (UTC)

::The vulnerability used to get unsigned code running is in FreeType. Which is used to exploit IOKit. JailbreakMe used a PDF file to exploit FreeType but it could have been implemented in other ways. --[[User:GreySyntax|GreySyntax]] 15:25, 3 August 2010 (UTC)

User:GreySyntax

2010-07-30T17:40:11Z

GreySyntax:

Im Jordan 'GreySyntax',
I develop software in a variety of languages (C/C#/C++/Java/PHP/Obj-C) i firmly belive in open source software.

'''Developed:'''

[[Pneumonia]]

[[iRecovery++]]

[[AlpineUSB]]

'''Contributed:'''

[[IRecovery]]

'''Site:'''

[http://www.nspwn.com NSPwn]

[http://github.com/GreySyntax Github]

User:GreySyntax

2010-07-30T17:38:44Z

GreySyntax: New page: Im Jordan 'GreySyntax', I develop software in a variety of languages (C/C#/C++/Java/PHP/Obj-C) i firmly belive in open source software. '''Developed:''' Pneumonia iRecovery++ [...

IRecovery

2010-07-30T17:35:18Z

GreySyntax: /* Updates */

{{DISPLAYTITLE:iTunes}}
iRecovery is a libusb-based CLI utility for Mac OS X, Linux, and Windows. It is able to talk to [[iBoot]] and [[iBSS]] via USB. It's completely open source; the source code is released under the terms of the GNU GPL v3. The full license text can be found in the LICENSE file on github.

It currently connects to:
* [[DFU 0x1227|0x1227]] ([[DFU]]/[[WTF]] Mode 2.0)
* [[Recovery Mode (Protocols)#Recovery_Mode_2.x_.28DevID.3D0x1281.29|Recovery Mode 0x1281]] (Recovery Mode/iBSS)

==Credits==
westbaer

==Thanks==
[[pod2g]], [[tom3q]], [[planetbeing]], [[User:Geohot|geohot]] and [[posixninja]].

==Features==

===DFU 2.0 (0x1227)===
It can upload a file, such as an [[iBSS]], so that you can unplug and spawn a shell with 0x1281.

===Recovery 2.0 (0x1281)===
====File Uploading====
You can upload a file to 0x9000000 with the following syntax:
./iRecovery -f file
In newer builds that use libusb-1.0 this is now
./iRecovery -u file

====Two-Way Shell====
You can spawn a shell to do all sorts of neat things with the syntax:
./iRecovery -s
Once it has spawned, you can type 'help' and iBoot will respond with its built-in command list.

====Single Command====
./iRecovery -c "command"
Sends a single command to the device *without* spawning a shell.

====usb_control_msg(0x21, 2) Exploit Command====
./iRecovery -k
Sends Chronic Dev's + Geohot's latest usb exploit. Implemented into blackra1n.
This was updated near October 17, 2009. [http://github.com/posixninja/irecovery posixninja's fork]
In newer builds this is now -e

====Auto Boot====
You can now enable auto-boot by running:
./iRecovery -a
or by sending /auto-boot in a shell.

====USB Reset====
Reset USB
./iRecovery -r

====Batch Scripting====
iRecovery now supports batch scripting, this allows you to send commands to iBoot from a pre written list of commands, this also suports scripting such as /auto-boot and /upload <file>
./iRecovery -b <file>
or in a shell:
/batch <file>

====Raw Commands====
You can now send raw commands via the -x21 -x40 or -xA1 flags

==Example Output==

iRecovery -s
<pre>
======================================
::
:: iBSS for n82ap, Copyright 2009, Apple Inc.
::
:: BUILD_TAG: iBoot-596.24
::
:: BUILD_STYLE: RELEASE
::
:: USB_SERIAL_NUMBER: CPID:8900 CPRV:30 CPFM:03 SCEP:05 BDID:04 ECID:000003293C113D76 IBFL:00
::
=======================================

Entering recovery mode, starting command prompt
] printenv
build-style = "RELEASE"
build-version = "iBoot-596.24"
config_board = "n82ap"
loadaddr = "0x9000000"
boot-command = "fsboot"
bootdelay = "0"
auto-boot = "true"
idle-off = "true"
boot-device = "nand0"
boot-partition = "0"
boot-path = "/System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8900x"
display-color-space = "RGB888"
display-timing = "optC"
framebuffer = "0xfd00000"
secure-boot = "0x1"
</pre>

==Maintained Forks==
[http://github.com/iH8sn0w/irecovery iH8sn0w/irecovery]

[http://github.com/GreySyntax/irecovery GreySyntax/irecovery]

==Updates==
[[Chronic Dev]] Team is working on converting iRecovery to a library. [http://github.com/chronicdev/libirecovery].

A C++ port is also in the works dubbed iRecovery++ (by [[User:GreySyntax|GreySyntax]]. [http://github.com/GreySyntax/iRecoveryplusplus]

A C# port using LibUSBDotNET can be found at (by [[User:GreySyntax|GreySyntax]]. [http://github.com/GreySyntax/Alpine]

A VB.NET port is current under development (by [[User:Fallensn0w|Fallensn0w]]. [http://github.com/fallensn0w/vbiRecovery]

==Download==
[http://github.com/westbaer/irecovery Offical Repository / Download here]

IRecovery

2010-07-30T17:34:51Z

GreySyntax: /* Updates */

{{DISPLAYTITLE:iTunes}}
iRecovery is a libusb-based CLI utility for Mac OS X, Linux, and Windows. It is able to talk to [[iBoot]] and [[iBSS]] via USB. It's completely open source; the source code is released under the terms of the GNU GPL v3. The full license text can be found in the LICENSE file on github.

It currently connects to:
* [[DFU 0x1227|0x1227]] ([[DFU]]/[[WTF]] Mode 2.0)
* [[Recovery Mode (Protocols)#Recovery_Mode_2.x_.28DevID.3D0x1281.29|Recovery Mode 0x1281]] (Recovery Mode/iBSS)

==Credits==
westbaer

==Thanks==
[[pod2g]], [[tom3q]], [[planetbeing]], [[User:Geohot|geohot]] and [[posixninja]].

==Features==

===DFU 2.0 (0x1227)===
It can upload a file, such as an [[iBSS]], so that you can unplug and spawn a shell with 0x1281.

===Recovery 2.0 (0x1281)===
====File Uploading====
You can upload a file to 0x9000000 with the following syntax:
./iRecovery -f file
In newer builds that use libusb-1.0 this is now
./iRecovery -u file

====Two-Way Shell====
You can spawn a shell to do all sorts of neat things with the syntax:
./iRecovery -s
Once it has spawned, you can type 'help' and iBoot will respond with its built-in command list.

====Single Command====
./iRecovery -c "command"
Sends a single command to the device *without* spawning a shell.

====usb_control_msg(0x21, 2) Exploit Command====
./iRecovery -k
Sends Chronic Dev's + Geohot's latest usb exploit. Implemented into blackra1n.
This was updated near October 17, 2009. [http://github.com/posixninja/irecovery posixninja's fork]
In newer builds this is now -e

====Auto Boot====
You can now enable auto-boot by running:
./iRecovery -a
or by sending /auto-boot in a shell.

====USB Reset====
Reset USB
./iRecovery -r

====Batch Scripting====
iRecovery now supports batch scripting, this allows you to send commands to iBoot from a pre written list of commands, this also suports scripting such as /auto-boot and /upload <file>
./iRecovery -b <file>
or in a shell:
/batch <file>

====Raw Commands====
You can now send raw commands via the -x21 -x40 or -xA1 flags

==Example Output==

iRecovery -s
<pre>
======================================
::
:: iBSS for n82ap, Copyright 2009, Apple Inc.
::
:: BUILD_TAG: iBoot-596.24
::
:: BUILD_STYLE: RELEASE
::
:: USB_SERIAL_NUMBER: CPID:8900 CPRV:30 CPFM:03 SCEP:05 BDID:04 ECID:000003293C113D76 IBFL:00
::
=======================================

Entering recovery mode, starting command prompt
] printenv
build-style = "RELEASE"
build-version = "iBoot-596.24"
config_board = "n82ap"
loadaddr = "0x9000000"
boot-command = "fsboot"
bootdelay = "0"
auto-boot = "true"
idle-off = "true"
boot-device = "nand0"
boot-partition = "0"
boot-path = "/System/Library/Caches/com.apple.kernelcaches/kernelcache.s5l8900x"
display-color-space = "RGB888"
display-timing = "optC"
framebuffer = "0xfd00000"
secure-boot = "0x1"
</pre>

==Maintained Forks==
[http://github.com/iH8sn0w/irecovery iH8sn0w/irecovery]

[http://github.com/GreySyntax/irecovery GreySyntax/irecovery]

==Updates==
[[Chronic Dev]] Team is working on converting iRecovery to a library. [http://github.com/chronicdev/libirecovery].

A C++ port is also in the works dubbed iRecovery++ can be found at (by [[User:GreySyntax|GreySyntax]]. [http://github.com/GreySyntax/iRecoveryplusplus]

A C# port using LibUSBDotNET can be found at (by [[User:GreySyntax|GreySyntax]]. [http://github.com/GreySyntax/Alpine]

A VB.NET port is current under development (by [[User:Fallensn0w|Fallensn0w]]. [http://github.com/fallensn0w/vbiRecovery]

==Download==
[http://github.com/westbaer/irecovery Offical Repository / Download here]

Pneumonia

2010-07-27T19:01:25Z

GreySyntax:

{{DISPLAYTITLE:Pneumonia}}
Pneumonia is a application created by [http://www.theiphonewiki.com/wiki/index.php?title=User:GreySyntax GreySyntax] and [http://www.theiphonewiki.com/wiki/index.php?title=User:GRMrGecko GRMrGecko]] to aid in booting and preparing the iPhone2,1/iPod2,1/iPod3,1 for restore. This utility is a port of [[iBooty]] & [[Payload Pwner]]. This utility replaces the old method described on OpenPwn (See notes).

== Requirements ==
To use this utility you must have saved 3.1.2 SHSH's or be on 3.1.2.
A Mac running OS X 10.4+
A custom 4.0+ restore with the NOR flash disabled.

== About ==
This application will extract both the 3.1.2 & custom IPSW and saved your patched files in "~/Library/Application Support/Pneumonia" + stock firmware md5 sum. This allows the application to support multiple devices and prevents it from having to extract the IPSW upon every application launch.

== Download ==
[http://cdn.nspwn.com/Pneumonia.zip NSPwn (Pre compiled)]

[http://www.github.com/GreySyntax/Pneumonia Github (Source)]

=== Notes ===
[http://forums.openpwn.org/viewtopic.php?f=8&t=75 Old method]

Pneumonia

2010-07-27T19:01:04Z

GreySyntax: New page: {{DISPLAYTITLE:Pneumonia}} Pneumonia is a application created by [http://www.theiphonewiki.com/wiki/index.php?title=User:GreySyntax GreySyntax] and [http://www.theiphonewiki.com/wiki/index...

{{DISPLAYTITLE:Pneumonia}}
Pneumonia is a application created by [http://www.theiphonewiki.com/wiki/index.php?title=User:GreySyntax GreySyntax] and [http://www.theiphonewiki.com/wiki/index.php?title=User:GRMrGecko GRMrGecko]] to aid in booting and preparing the iPhone2,1/iPod2,1/iPod3,1 for restore. This utility is a port of [[iBooty]] & [[Payload Pwner]]. This utility replaces the old method described on OpenPwn (See notes).

== Requirements ==
To use this utility you must have saved 3.1.2 SHSH's or be on 3.1.2.
A Mac running OS X 10.4+
A custom 4.0+ restore with the NOR flash disabled.

== About ==
This application will extract both the 3.1.2 & custom IPSW and saved your patched files in "~/Library/Application Support/Pneumonia" + stock firmware md5 sum. This allows the application to support multiple devices and prevents it from having to extract the IPSW upon every application launch.

== Download ==
[http://cdn.nspwn.com/Pneumonia.zip NSPwn (Pre compiled)]
[http://www.github.com/GreySyntax/Pneumonia Github (Source)]

=== Notes ===
[http://forums.openpwn.org/viewtopic.php?f=8&t=75 Old method]

IBooty

2010-07-27T18:50:44Z

GreySyntax:

{{DISPLAYTITLE:iBooty}}
iBooty is a utility created by [[iH8sn0w]] to aid in jailbreaking [[N18ap|iPod Touch 3G]]'s and [[N88ap|iPhone 3GS]] (new bootroms). The jailbreak is tethered, meaning that to boot up your device, you have to run iBooty. It has been reverse-engineered and is being ported to linux. See [http://forums.openpwn.org/viewtopic.php?f=15&t=107] for information on booting your tethered device on linux.

This application has been ported along with payload pwner to Mac OS X 10.4+ see [http://www.theiphonewiki.com/wiki/index.php?title=Pneumonia Pneumonia].

IRecovery

2010-05-15T23:16:15Z

GreySyntax: /* Features */

{{DISPLAYTITLE:iTunes}}
iRecovery is a libusb-based CLI utility for Mac OS X, Linux, and Windows. It is able to talk to [[iBoot]] and [[iBSS]] via USB. It's completely open source; the source code is released under the terms of the GNU GPL v3. The full license text can be found in the LICENSE file on github.

It currently connects to:
* [[DFU 0x1227|0x1227]] ([[DFU]]/[[WTF]] Mode 2.0)
* [[Recovery Mode (Protocols)#Recovery_Mode_2.x_.28DevID.3D0x1281.29|Recovery Mode 0x1281]] (Recovery Mode/iBSS)

==Credits==
westbaer

==Thanks==
pod2g, tom3q, planetbeing, geohot and posixninja.

==Features==

===DFU 2.0 (0x1227)===
It can upload a file, such as an iBSS, so that you can unplug and spawn a shell with 0x1281.

===Recovery 2.0 (0x1281)===
====File Uploading====
You can upload a file to 0x9000000 with the following syntax:
./iRecovery -f file
In newer builds that use libusb-1.0 this is now
./iRecovery -u file

====Two-Way Shell====
You can spawn a shell to do all sorts of neat things with the syntax:
./iRecovery -s
Once it has spawned, you can type 'help' and iBoot will respond with its built-in command list.

====Single Command====
./iRecovery -c "command"
Sends a single command to the device *without* spawning a shell.

====usb_control_msg(0x21, 2) Exploit Command====
./iRecovery -k
Sends Chronic Dev's + Geohot's latest usb exploit. Implemented into blackra1n.
This was just updated a few days ago. (10/17/09) [http://github.com/posixninja/irecovery posixninja's fork]
In newer builds this is now -e

====Auto Boot=====
You can now enable auto-boot by running:
./iRecovery -a
or by sending /auto-boot in a shell.

====USB Reset=====
Reset USB
./iRecovery -r

====Batch Scripting====
iRecovery now supports batch scripting, this allows you to send commands to iBoot from a pre written list of commands, this also suports scripting such as /auto-boot and /upload <file>
./iRecovery -b <file>
or in a shell:
/batch <file>

====Raw Commands====
You can now send raw commands via the -x21 -x40 or -xA1 flags

==Maintained Forks==
[http://github.com/iH8sn0w/irecovery iH8sn0w/irecovery]

[http://github.com/GreySyntax/irecovery GreySyntax/irecovery]

==Updates==
Chronic-Dev are working on converting iRecovery to a library more info here [http://github.com/chronicdev/libirecovery chronicdev/libirecovery].

A C++ port is also in the works dubbed iRecovery++ more info here [http://github.com/GreySyntax/iRecoveryplusplus GreySyntax/iRecoveryplusplus]

==Download==
[http://github.com/westbaer/irecovery Offical Repository / Download here]

IRecovery

2010-05-15T23:11:00Z

GreySyntax: /* Recovery 2.0 (0x1281) */

IRecovery

2010-05-15T23:05:44Z

GreySyntax: /* File Uploading */

IRecovery

2010-05-15T23:04:43Z

GreySyntax: /* Credits */