The iPhone Wiki - User contributions [en]

Bluefreeze

2012-03-22T13:46:34Z

J0ker:

[[iFaith]] has a protection that you don't use it on the wrong firmware to protect you. '''Bluefreeze''', a tool written by a group called The Private Dev Team, modifies the firmware version (and firmware checksum) in the iFaith certificate file, so that this check gets disabled. By doing so, you can install any firmware version on your device, even without having saved the [[SHSH]] files. The problem by doing so is that you actually install a firmware without signatures, with all consequences.

Bluefreeze asks you to build and browse to two ipsw's one signed properly and one not signed. Then Bluefreeze swaps the properly signed img3 files in the properly signed firmware file with the incorrectly signed img3 files in the unsigned ipsw thus resulting in an ipsw file with properly signed img3 files. This firmware file is used for the downgrade.

Having an incorrectly signed firmware installed won't let you boot of course. But because the limera1n exploit ignores incorrect signatures we can use the limera1n exploit (DFU mode, then using redsn0w) to boot up your device. The problem is only that you have to repeat this every time (similar to a tethered jailbreak), so it's not a downgrade you would want. This should be your last resort, and only if you absolutely need a downgrade.

This way a downgrade to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 is possible. Supported devices are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

One common misconception about this downgrade solution is that it may conflict with an untethered jailbreak. This is completely false. If proper exploits are used (anything but a userland one ex: Jailbreakme 3.0) and properly jailbroken this tethered downgrade would become an untethered downgrade.

Another common misconception about this is that you can downgrade and use [[TinyUmbrella]] or [[iFaith]] to get a valid [[SHSH]] blob and use that to restore to that and be untethered. This is false also.

== Purpose ==
With this method you can install a firmware for which you don't have [[SHSH]] saved for some tests, for examle if you're a software developer and need to do some tests on a specific version.

== Alternative ==
A much easier way to do a "tethered downgrade" (unsure if this still works):
* 1. Patch ASR on the Ramdisk (you can just create a custom IPSW and use that.)
* 2. Replace the Rootfs-DMG of the currently signed Firmware with the decrypted Rootfs-DMG of the older Firmware
* 3. After the Filesystem of the old Firmware is installed, use iRecovery and upload a pwned iBSS, iBEC and Kernel from the old Firmware
* 4. Send the device the "bootx"-Command using iRecovery.
* 5. Done! Remember your device will always need to boot tethered.

== Download ==
* [http://www.mediafire.com/?9olh9qd8v1q4xm7 Windows]

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://www.youtube.com/watch?v=UpZKxqLqK7A Guide]
* [http://bluefreeze.weebly.com/index.html Home Page]

[[Category:GUI Tools]]

Bluefreeze

2012-01-22T00:31:09Z

J0ker:

[[iFaith]] has a protection that you don't use it on the wrong firmware to protect you. '''Bluefreeze''', a tool written by a group called [[The Private Dev Team]], modifies the firmware version (and firmware checksum) in the iFaith certificate file, so that this check gets disabled. By doing so, you can install any firmware version on your device, even without having saved the [[SHSH]] files. The problem by doing so is that you actually install a firmware without signatures.

Bluefreeze asks you to build and browse to two ipsw's one signed properly and one not signed. Then Bluefreeze swaps the properly signed img3 files in the properly signed firmware file with the incorrectly signed img3 files in the unsigned ipsw thus resulting in an ipsw file with properly signed img3 files. This firmware file is used for the downgrade.

Having an incorrectly signed firmware installed won't let you boot of course. But because the limera1n exploit ignores incorrect signitures we can use the limera1n exploit (DFU mode, then using redsn0w) to boot up your device. The problem is only that you have to repeat this every time (similar to a tethered jailbreak), so it's not a downgrade you would want. This should be your last resort, and only if you absolutely need a downgrade.

This way a downgrade to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 is possible. Supported devices are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

One common misconception about this downgrade solution is that it may conflict with an untethered jailbreak. This is completely false. If proper exploits are used (anything but a userland one ex: Jailbreakme 3.0) and properly jailbroken this tethered downgrade would become an untethered downgrade.

== Purpose ==
With this method you can install a firmware for which you don't have [[SHSH]] saved for some tests, for examle if you're a software developer and need to do some tests on a specific version.

== Download ==
* [http://www.mediafire.com/?9olh9qd8v1q4xm7 Windows]

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://www.youtube.com/watch?v=UpZKxqLqK7A Guide]
* [http://bluefreeze.weebly.com/index.html Home Page]

[[Category:GUI Tools]]

Bluefreeze

2012-01-15T03:53:41Z

J0ker:

[[iFaith]] has a protection that you don't use it on the wrong firmware to protect you. '''Bluefreeze''', a tool written by a group called [[The Private Dev Team]], modifies the firmware version (and firmware checksum) in the iFaith certificate file, so that this check gets disabled. By doing so, you can install any firmware version on your device, even without having saved the [[SHSH]] files. The problem by doing so is that you actually install a firmware without signatures.

Bluefreeze asks you to build and browse to two ipsw's one signed properly and one not signed. Then Bluefreeze swaps the properly signed img3 files in the properly signed firmware file with the incorrectly signed img3 files in the unsigned ipsw thus resulting in an ipsw file with properly signed img3 files. This firmware file is used for the downgrade.

Having an incorrectly signed firmware installed won't let you boot of course. But because the limera1n exploit ignores incorrect signitures we can use the limera1n exploit (DFU mode, then using redsn0w) to boot up your device. The problem is only that you have to repeat this every time (similar to a tethered jailbreak), so it's not a downgrade you would want. This should be your last resort, and only if you absolutely need a downgrade.

This way a downgrade to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 is possible. Supported devices are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

One common misconception about this downgrade solution is that it may conflict with an untethered jailbreak. This is completely false. If proper exploits are used (anything but a userland one ex: Jailbreakme 3.0) and properly jailbroken this tethered downgrade would become an untethered downgrade.

== Purpose ==
With this method you can install a firmware for which you don't have [[SHSH]] saved for some tests, for examle if you're a software developer and need to do some tests on a specific version.

== Download ==
* [http://www.mediafire.com/?3r3282wxksc6tg8 Windows]

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://www.youtube.com/watch?v=UpZKxqLqK7A Guide]
* [http://bluefreeze.weebly.com/index.html Home Page]

[[Category:GUI Tools]]

XPwn

2011-12-30T17:46:00Z

J0ker:

XPwn is a cross-platform, command line implementation of [[PwnageTool]], maintained by [[User:Planetbeing|planetbeing]]. Currently supported operating systems are Windows, Mac OS X, and Linux. XPwn's source can be found on [http://github.com/planetbeing/xpwn GitHub].

== Tools ==
XPwn consists of many utilities:
* '''[[dfu-util]]''' is like idevice, but does not depend on any proprietary software, instead using [[libUSB]]. It is not recommended on Windows
* '''[[dmg]]''' allows decrypting, and re-encrypting of the root file system
* '''[[hdutil]]''' allows image files to be edited
* '''[[hfsplus]]''' allows the root file system, and the ramdisks to be edited
* '''[[idevice]]''' is a utility for Windows that guides the user into [[DFU Mode]] and then sends the exploit
* '''[[ipsw]]''' creates the patched [[IPSW File Format|IPSW]]
* '''[[itunespwn]]''' is a Windows utility that replaces a file in <code>%APPDATA%\Apple Computer\Device Support</code> allowing the exploit to be uploaded by [[iTunes]] when the device is in [[DFU Mode]]
* '''[[xpwn (XPwn utility)|xpwn]]''' is a utility that allows the bootlogo + recovery logo of an [[IPSW File Format|IPSW]] to be changed
* '''[[xpwntool]]''' allows decrypting and patching of firmware files

== Frontends ==
[[WinPwn]] and [[Sn0wbreeze]] are GUI frontends of XPwn for Windows.

[[Category:Hacking Software]]

0rangefreeze

2011-12-30T03:19:39Z

J0ker:

[[0rangefreeze]] is a [[GenPass]] GUI for Windows written by a group called [[The Private Dev Team]].

== Links ==
* [http://www.mediafire.com/?js3i9ebxy7sc70e 0rangefreeze version 1 - download from Mediafire]
* [https://github.com/ThePrivateDevTeam/0rangefreeze 0rangefreeze on github] ({{wp|GNU General Public License#Version 3|GNU GPL v3}})

[[Category:VFDecrypt]]
[[Category:GUI Tools]]

Bluefreeze

2011-12-30T03:19:23Z

J0ker:

[[iFaith]] has a protection that you don't use it on the wrong firmware to protect you. '''Bluefreeze''', a tool written by a group called [[The Private Dev Team]], modifies the firmware version (and firmware checksum) in the iFaith certificate file, so that this check gets disabled. By doing so, you can install any firmware version on your device, even without having saved the [[SHSH]] files. The problem by doing so is that you actually install a firmware without signatures.

Bluefreeze asks you to build and browse to two ipsw's one signed properly and one not signed. Then Bluefreeze swaps the properly signed img3 files in the properly signed firmware file with the incorrectly signed img3 files in the unsigned ipsw thus resulting in an ipsw file with properly signed img3 files. This firmware file is used for the downgrade.

Having an incorrectly signed firmware installed won't let you boot of course. But because the limera1n exploit ignores incorrect signitures we can use the limera1n exploit (DFU mode, then using redsn0w) to boot up your device. The problem is only that you have to repeat this every time (similar to a tethered jailbreak), so it's not a downgrade you would want. This should be your last resort, and only if you absolutely need a downgrade.

This way a downgrade to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 is possible. Supported devices are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

One common misconception about this downgrade solution is that it may conflict with an untethered jailbreak. This is completely false. If proper exploits are used (anything but a userland one ex: Jailbreakme 3.0) and properly jailbroken this tethered downgrade would become an untethered downgrade.

== Purpose ==
With this method you can install a firmware for which you don't have [[SHSH]] saved for some tests, for examle if you're a software developer and need to do some tests on a specific version.

== Download ==
* [http://www.mediafire.com/?13eax965spa2hph Windows]

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://www.youtube.com/watch?v=UpZKxqLqK7A Guide]
* [http://bluefreeze.weebly.com/index.html Home Page]

[[Category:GUI Tools]]

Bluefreeze

2011-12-24T04:35:54Z

J0ker:

[[iFaith]] has a protection that you don't use it on the wrong firmware to protect you. '''Bluefreeze''' modifies the firmware version (and firmware checksum) in the iFaith certificate file, so that this check gets disabled. By doing so, you can install any firmware version on your device, even without having saved the [[SHSH]] files. The problem by doing so is that you actually install a firmware without signatures.

Bluefreeze asks you to build and browse to two ipsw's one signed properly and one not signed. Then Bluefreeze swaps the properly signed img3 files in the properly signed firmware file with the incorrectly signed img3 files in the unsigned ipsw thus resulting in an ipsw file with properly signed img3 files. This firmware file is used for the downgrade.

Having an incorrectly signed firmware installed won't let you boot of course. But because the limera1n exploit ignores incorrect signitures we can use the limera1n exploit (DFU mode, then using redsn0w) to boot up your device. The problem is only that you have to repeat this every time (similar to a tethered jailbreak), so it's not a downgrade you would want. This should be your last resort, and only if you absolutely need a downgrade.

This way a downgrade to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 is possible. Supported devices are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

One common misconception about this downgrade solution is that it may conflict with an untethered jailbreak. This is completely false. If proper exploits are used (anything but a userland one ex: Jailbreakme 3.0) and properly jailbroken this tethered downgrade would become an untethered downgrade.

== Purpose ==
With this method you can install a firmware for which you don't have [[SHSH]] saved for some tests, for examle if you're a software developer and need to do some tests on a specific version.

== Download ==
* [http://www.mediafire.com/?zzkfhpmca950wk7 Windows]

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://www.youtube.com/watch?v=UpZKxqLqK7A Guide]
* [http://bluefreeze.weebly.com/index.html Home Page]

[[Category:GUI Tools]]

Bluefreeze

2011-12-23T02:33:27Z

J0ker:

[[iFaith]] has a protection that you don't use it on the wrong firmware to protect you. '''Bluefreeze''' modifies the firmware version (and firmware checksum) in the iFaith certificate file, so that this check gets disabled. By doing so, you can install any firmware version on your device, even without having saved the [[SHSH]] files. The problem by doing so is that you actually install a firmware without signatures.

Bluefreeze asks you to build and browse to two ipsw's one signed properly and one not signed. Then Bluefreeze swaps the properly signed img3 files in the properly signed firmware file with the unsigned img3 files in the unsigned ipsw thus resulting in an ipsw file with properly signed img3 files. This firmware file is used for the downgrade.

Having an unsigned firmware installed won't let you boot of course. But using the limera1n exploit (DFU mode, then using redsn0w) you can still boot your device up. The problem is only that you have to repeat this every time (similar to a tethered jailbreak), so it's not a downgrade you would want. This should be your last resort, and only if you absolutely need a downgrade.

This way a downgrade to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 is possible. Supported devices are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

One common misconception about this downgrade solution is that it may conflict with an untethered jailbreak. This is completely false. If proper exploits are used (anything but a userland one ex: Jailbreakme 3) and properly jailbroken this tethered downgrade would become an untethered downgrade.

== Purpose ==
With this method you can install a firmware for which you don't have [[SHSH]] saved for some tests, for examle if you're a software developer and need to do some tests on a specific version.

== Download ==
* [http://www.mediafire.com/?zzkfhpmca950wk7 Windows]

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://www.youtube.com/watch?v=UpZKxqLqK7A Guide]

[[Category:GUI Tools]]

Bluefreeze

2011-12-23T02:32:08Z

J0ker:

[[iFaith]] has a protection that you don't use it on the wrong firmware to protect you. '''Bluefreeze''' modifies the firmware version (and firmware checksum) in the iFaith certificate file, so that this check gets disabled. By doing so, you can install any firmware version on your device, even without having saved the [[SHSH]] files. The problem by doing so is that you actually install a firmware without signatures.

Bluefreeze asks you to build and browse to two ipsw's one signed properly and one not signed. Then Bluefreeze swaps the properly signed img3 files in the properly signed firmware file with the unsigned img3 files in the unsigned ipsw thus resulting in an ipsw file with properly signed img3 files. This firmware file is used for the downgrade.

Having an unsigned firmware installed won't let you boot of course. But using the limera1n exploit (DFU mode, then using redsn0w) you can still boot your device up. The problem is only that you have to repeat this every time (similar to a tethered jailbreak), so it's not a downgrade you would want. This should be your last resort, and only if you absolutely need a downgrade.

This way a downgrade to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 is possible. Supported devices are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

One common misconception about this downgrade solution is that it may conflict with an untethered jailbreak. This is completely false. If proper exploits are used (anything but a userland one ex: Jailbreakme 3) and properly jailbroken this tethered downgrade would become an untethered downgrade.

== Purpose ==
With this method you can install a firmware for which you don't have [[SHSH]] saved for some tests, for examle if you're a software developer and need to do some tests on a specific version.

== Download ==
* [http://www.mediafire.com/?zzkfhpmca950wk7 Windows]

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [hhttp://www.youtube.com/watch?v=UpZKxqLqK7A&feature=channel_video_title Guide]

[[Category:GUI Tools]]

Bluefreeze

2011-12-15T23:49:21Z

J0ker:

[[iFaith]] has a protection that you don't use it on the wrong firmware to protect you. '''Bluefreeze''' modifies the firmware version (and firmware checksum) in the iFaith certificate file, so that this check gets disabled. By doing so, you can install any firmware version on your device, even without having saved the [[SHSH]] files. The problem by doing so is that you actually install a firmware without signatures.

Having an unsigned firmware installed won't let you boot of course. But using the limera1n exploit (DFU mode, then using redsn0w) you can still boot your device up. The problem is only that you have to repeat this every time (similar to a tethered jailbreak), so it's not a downgrade you would want. This should be your last resort, and only if you absolutely need a downgrade.

And also after boot, once you put the device to sleep, the kernel will notice LLB is invalid and reboot again. So you have to do all the procedure again. You can install a [[Cydia.app|Cydia]] tweak called ''Prevent Sleep'' to avoid this problem.

This way a downgrade to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 is possible. Supported devices are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

One common misconception about this downgrade solution is that it may conflict with an untethered jailbreak. This is completely false. If proper exploits are used (anything but a userland one ex: Jailbreakme 3) and properly jailbroken this tethered downgrade would become an untethered downgrade.

== Purpose ==
With this method you can install a firmware for which you don't have [[SHSH]] saved for some tests, for examle if you're a software developer and need to do some tests on a specific version.

== Download ==
* [http://www.mediafire.com/?02y3bl3by41aaa3 Windows]

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html Guide]

[[Category:GUI Tools]]

Bluefreeze

2011-12-15T00:00:10Z

J0ker:

'''Bluefreeze''' is a tethered downgrade solution by a group called the Private Dev Team. It claims to allow the downgrade of a device to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 without [[SHSH]] blobs saved via [[TinyUmbrella]] or [[iFaith]]. iDevices that are supported are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

== Download ==
* [http://www.mediafire.com/?02y3bl3by41aaa3 Windows]

== Usage ==
* Step 1: Use [[iFaith]] to get an iOS 5.0.1 [[SHSH]] blob
* Step 2: Open the [[iFaith]] SHSH file. Bluefreeze will change md5 and iOS version. For example, if downgrading to iOS 5.0 on an iPod touch 3G from iOS 5.0.1:
<ios>5.0.1 (9A405)</ios> -> <ios>5.0 (9A433)</ios>
<ipsw_md5>c13c14abcde18bbdb7d70c8563f56ac1</ipsw_md5> -> <ipsw_md5>989b8327acab76e7632443a0e179250c</ipsw_md5>
* Step 3: Save the modified file, and use it to build an iOS 5.0 custom firmware. Even though the firmware has fake shsh blobs on it, iTunes will still accept it. (iREB will be used to bypass error 16XX)
* Step 4: Since there are no shsh blobs present the device will boot up into DFU mode. A bootrom exploit, known as Limera1n, will be used to bypass Apple's blob checker per se. (Tool used: redsn0w)
* Step 5: Device will boot up, and one will have a tethered downgrade.

== Warning ==
It is highly suggested that you jailbreak your device after you accomplish this process and install a Cydia tweak known as Prevent Sleep. If you do not do so you run the risk of having your device randomly go into DFU mode. (if this tweak is installed this issue will go away).

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html Guide]

[[Category:GUI Tools]]

Talk:Bluefreeze

2011-12-14T23:54:58Z

J0ker:

== Claiming false functionality ==
What? Are you joking? It works, have you tried it yet? I've worked countless hours trying to get this right, and you say it doesn't work? Look, try it before you say such things, I assure you it works. And where did I break the ground rules? These are all false claims. {{unsigned|J0ker|14:45, December 12, 2011 (MST)}}
:[[The iPhone Wiki:Community portal#Regarding the creation of pages for programs|These rules]] may come into play, but I only remembered to add them to the Ground rules page last night. (Previously, they were on [[:Category:GUI Tools]], but still enforced.) This page was created before the addition of these rules, but you were still involved with the program's creation, and creating the page yourself looks a bit like you're just trying to advertise yourself, which conflicts with [[The iPhone Wiki:Community portal#No advertising your website/forum/wiki/etc.|this rule]]. --[[User:Dialexio|Dialexio]] 10:08, 12 December 2011 (MST)
::i just wanna say i thing, stop thinking that you are a hacker. Learn Reverse Enginer, C, C++, Pyhton, Exploitation and etc. After you can say that you made an exploit :) --[[User:Zmaster|Zmaster]] 07:52, 12 December 2011 (MST)
:::I don't think I'm a hacker, I'm learning how to reverse engineer, I know java, I'm gonna start writing my tools in said language (probably). I specifically said it is not an exploit. And anyway that doesn't justify deleting this page. As I said before Bluefreeze works! And I have not broken any rules. {{unsigned|J0ker|15:03, December 12, 2011 (MST)}}
:You say it does work w/o SHSH blobs saved from [[TinyUmbrella]] or [[iFaith]], however, tutorials I have seen say to drag some SHSH file onto iFaith. It may work for yyou because that is an SHSH blob for your device. Have you thought of using a device that isn't yours? I will '''not''' try this out myself as my devices are not for testing, but for everyday use. --[[User:Balloonhead66|Balloonhead66]] 14:07, 12 December 2011 (MST)

:Yes Indeed, It says to drag an ios 5.0.1 shsh blob (which are available to everyone right now), it then generates a ios 5.0 shsh blob (not available to everyone anymore). This new shsh blob is used for the downgrade. Since the old shsh blob is available to everyone to get, that would not be an issue. I have thought of using a device that isn't mine, several! I have downgraded an iPhone 4 that was purchased two weeks ago to ios 4.1! And many, many others. You don't have to try it, but if you don't try it you have no right to say it doesn't work (and I'm not saying you said that). {{unsigned|J0ker|16:38, December 12, 2011 (MST)}}
::Look [[:User:J0ker|J0ker]], the [[:The_iPhone_Wiki:Ground_rules|Ground rules]] (previously stated on the [[:Category:GUI Tools]] page) say that the author of a software is not allowed to add an entry here. But that's only a simple rule and I wouldn't delete an important article just because of that. While we are all happy that you and many others try to contribute something useful to the scene, it distracts beginners if they see such "tools" that don't work. If you understood how [[SHSH]] checking works, then you should know that you need a low-level bootrom exploit to circumvent this check. Even the smartest hackers didn't find any. What you are doing is something different. If you say "it worked", this is simply because you don't understand why. I didn't delete the article right away, because I thought with your tool you could downgrade the user-interface or something. Then we might leave it (with correct explanations). Instead of claiming "it works", "I tried", etc., you would better provide a good technical explanation of what you (your tool) is doing, or how it circumvents the signature verification. And not what you think it's doing. Every claim with a proof please. It is not worth to try anything that cannot work by design. You cannot "generate" [[SHSH]] signatures without having Apple's private key. Please open [[Cydia]] on your "magically downgraded iPhone 4" and look at the listed blobs. You will see the version you downgraded to listed there (or in [[iFaith]]). This is why you can downgrade. And it can be done without your tool much easier. -- [[User:Http|http]] 18:16, 12 December 2011 (MST)

::Wow, that's an intense amount of under-estimating you've just done, you act like I've never even opened cydia before. I'm writing up an explanation of Bluefreeze right now. Is this how pathetic I look? I'm mean I'm ashamed someone would even accuse me of such stupidity{{unsigned|J0ker|17:50, December 12, 2011 (MST)}}
:J0ker, let me explain something here. I just tried your method on my old iPhone 3GS (no SHSH blobs saved whatsoever) to get from 5.0.1 to 5.0. I tried it to see if your method actually works, or, if what the other highly respected nerds on this talk page have been saying, that you just have SHSH for the version you downgraded to. Guess what, they're right. My 3GS in fact couldn't be downgraded by iTunes (and yes, I followed your instructions to the letter) because it just doesn't work. Felt like putting my 2 cents in, so there they are. --[[User:Rdqronos|rdqronos]] 20:44, 12 December 2011 (MST)

:Where did you get stuck? Give me some sort of info so I can work to get it fixed dude. "because it just doesn't work". Do you know what happens to your credibility when you say this? It goes away because it clearly demonstrates that you have a bias opinion against Bluefreeze, I'd love to help you out, but the verbal attack is not going to help you. Which also leads me to think that you actually didn't try it, you just like to troll people, for your sake, I hope that is not the case. Please tell me, where you get stuck.{{unsigned|J0ker|17:50, December 12, 2011 (MST)}}
:iTunes gave me first a "This device is not eligible for the requested build" error (checked my hosts/tinyumbrella, no issues there), so I redid the IPSW and tried it again, this time giving me a corrupted IPSW error. Both times, my iPhone 3GS was in pwnd DFU mode from iFaith. --[[User:Rdqronos|rdqronos]] 13:23, 13 December 2011 (MST)

So in short, all that your tool does is to change to iOS version in the iFaith file so that iFaith accepts it to build a cfw. Why do you think that IH8sn0w added this check into iFaith? For sure not to annoy us. I'll ask him if he can provide some more infos, as I don't know what exactly happens next. -- [[User:Http|http]] 05:25, 13 December 2011 (MST)

Ok, after talking with IH8sn0w and reading your last part, I think it works. But it's completely useless, no real downgrade, and that could be achieved way simpler. But it also means we can remove the deletion request and instead clean up the article. iFaith has a protection that you don't use it with the wrong firmware for your own safety. You actually remove that protection and allow an unsigned firmware to get installed. The device detects this and goes into DFU or recovery loop, which can be overcome to boot by using limera1n exploit (redsn0w). The problem only is that users usually want to downgrade to get an untethered jailbreak. This is not possible, because for every boot you need to get out of that DFU or Recovery loop by entering DFU mode and exploiting with limera1n, even if you haven't jailbroken your system. So I don't see what that could be used for. The devices this works on can have a tethered jailbreak with the latest firmware - always. and that booting is much simpler. And for devices like the iPad 2 or the 4S it cannot work, because there's no bootrom vulnerability. If someone wants to cleanup the article, feel free to remove the deletion request, but also clearly state that it's not a downgrade in the usual sense. -- [[User:Http|http]] 14:10, 13 December 2011 (MST)

:You can jailbreak those tethered firmware with userland jailbreaks like jailbreakme.com--[[User:Marghost|Marghost]] 16:25, 13 December 2011 (MST)

:Thank you very much for clarifying. And it can be made an untethered downgrade with another bootrom exploit (if your missing ios 4.1 shsh and downgrade to that firmware and you run geohot's limera1n tool, you will get an untethered downgrade). I don't however understand what you mean by "no real downgrade". This is a tethered downgrade solution, and one that does not require ios 5.0.1 kernel (so the exploit found by Charlie Miller will work on it). And if in the future we have another bootrom exploit, but is only untethered on ios 5.0, people can downgrade (using bluefreeze) and achieve an untether if they forgot to save their shsh for ios 5.0. Anyway, thanks a lot! {{unsigned|J0ker|15:39, December 13, 2011 (MST)}}

::If we discover another low-level / untethered bootrom vulnerability (like 3GS with old bootrom), the device is jailbroken for live with any firmware - no need to downgrade ever. And according to IH8sn0w: "''After you boot it, once you put the device to sleep, kernel will notice LLB is invalid and reboot. then --> DFU.''" This means it's pretty useless. And the reason that 4.1 works untethered is that Apple still allows its installation (for some devices, see [[SHSH]]), so you can downgrade to that without ANY tool. All this info / warning is missing in the article. -- [[User:Http|http]] 12:44, 14 December 2011 (MST)

::You misunderstood what I meant when I was talking about 4.1, but your right, so I guess I won't clarify what I meant. As for the whole sleep issue there is a cydia tweak called prevent sleep. This completely fixes the whole reboot during in sleep mode issue, I will add that to the guide as well.{{unsigned|J0ker|15:54, December 14, 2011 (MST)}}

IFaith

2011-12-13T23:53:44Z

J0ker:

{{lowercase}}
{{Infobox software
| name = iFaith
| title = iFaith
| logo = 
| screenshot = [[File:IFaithv10.png|300px]]
| caption = iFaith 1.0 on Windows XP
| collapsible =
| author = [[User:ih8sn0w|iH8sn0w]]
| developer = [[User:ih8sn0w|iH8sn0w]]
| released = {{Start date|2011|06|02|df=yes}}
| discontinued =
| latest release version = 1.4
| latest release date = {{Start date and age|2011|12|03|df=yes}}
| latest preview version =
| latest preview date =
| programming language = {{wp|C Sharp (programming language)|C#}}
| operating system = {{wp|Microsoft Windows}} XP or greater
| platform =
| size = ZIP: 6,240,633 bytes (5.95 MB) EXE: 9,562,112 bytes (9.11 MB)
| language = {{wp|English language|English}}
| status = Active
| genre = Backup
| license = {{wp|GNU General Public License#Version 3|GNU GPL v3}}
| website = [http://ih8sn0w.com www.ih8sn0w.com]
}}
'''iFaith''' is an open source [[SHSH]] dumper for the Windows family of operating systems written by [[User:Ih8sn0w|iH8sn0w]]. It works on all devices that are susceptible to the [[limera1n]] exploit (all devices except the [[iPad 2]]). This is useful if you receive a device with old firmware on it that you want to be able to restore. Even if Apple doesn't sign that firmware anymore, you can backup the [[SHSH]] data directly from the device, so that you can install the firmware later again to avoid upgrading the firmware.

=== Credits ===
* [[User:Ih8sn0w|iH8sn0w]] author
* [[User:Geohot|geohot]] for [[limera1n]] exploit

{{clear}}
=== Releases ===
{| class="wikitable" width="100%" style="font-size:smaller;border-collapse:collapse;" border="1"
! style="background-color:#E9E9E9;text-align:center;width:50px;" | Version
! style="background-color:#E9E9E9;text-align:center;width:65px;" | Release date
! style="background-color:#E9E9E9;text-align:center;" | Changes
|-
! 1.0
| style="text-align:center;" | 2-Jun-2011
|
* Official release of [[iFaith]]
|-
! 1.1
| style="text-align:center;" | 2-Jul-2011
|
* Code improvement.
* iFaith now SHA1's the [[SHSH]] blob.
* Now alerts user when iFaith was unable to hook iTunes instead of crashing.
* Minor bug fixes with device / iOS detection.
* [http://pastie.org/2152582 change log]
|-
! 1.2
| style="text-align:center;" | 27-Jul-2011
|
* Added [[N72ap|iPod touch 2G]] dumping capability (MC-Model users recommened)
* IPSW Creation for [[N72ap|iPod touch 2G]] is still a work in progress.
* Fixed exe compression issues (resulting in many DFU loops on IPSW creation)
* Fixed any Windows XP issues
* Source code released
* It is currently not possible to add [[iPad 2]] support
* [http://pastie.org/2282544 change log]
|-
! 1.2.1
| style="text-align:center;" | 27-Jul-2011
|
* Bugfix ("Who knew one last second mod could screw the whole build?")
|-
! 1.2.2
| style="text-align:center;" | 31-Jul-2011 (?)
|
* Contains a minor fix.
|-
! 1.3
| style="text-align:center;" | 9-Aug-2011
|
* For iOS 3.1.x/3.2.x/4.0.x/4.1/4.2.1/4.2.6/4.2.7/4.2.8/4.3/4.3.1/4.3.2/4.3.3
* DFU loops were being caused on devices that had the factory certificate. On this new version, when building the signed [[IPSW]], if you were getting a DFU loop, say "NO" to the prompt about using the standard signing certificate.
* You can now use [[TinyUmbrella]] blobs to build a signed [[IPSW]]. (Change file type in browse dialog to "[[TinyUmbrella]] [[SHSH]] blobs".)
* Now adds [[ECID]] to beginning of the [[SHSH]] filename after dumping.
* Now adds [[ECID]] to beginning of the [[IPSW]] filename after being built.
* Cleaned up code and payload
* It's not possible to add [[iPad 2]] support until a bootrom exploit arises.
* [http://pastie.org/2346028 change log]
|-
! 1.3.1
| style="text-align:center;" | 12-Aug-2011
|
* Used a different method to convert binary plists from TinyUmbrella SHSH Blobs to xml format to parse.
* Fixed minor restore issues on 4.3.x for [[iPad]] 3G models.
|-
! 1.3.2
| style="text-align:center;" | 14-Aug-2011
|
* The .NET framework that came pre-shipped with Windows Vista didn't have an essential resource used in iFaith. A new method has been implemented to get around this requirement.
* Fixed issue where [[iTunes]]' plist utility was unable to be located on international language formatted pcs.
|-
! 1.4
| style="text-align:center;" | 03-Dec-2011 
|
* Now dumps iOS 4.4.x (Apple TV 2)/5.0.x apticket + SHSH blobs!
* Dumping is MUCH faster.
* Full Windows XP support.
* Major code improvements.
* Bug fixes.
|-
|}

== External Links ==

* [http://ih8sn0w.com/index.php/download/file/ifaith/pc Download iFaith] (1.4)
* [http://ih8sn0w.com/index.php/products/view/ifaith.snow iFaith homepage]
* [https://github.com/iH8sn0w/iFaith Sourcecode on github]

== See Also ==
* [[Bluefreeze]]

[[Category:Hacking Software]]

Bluefreeze

2011-12-13T23:40:46Z

J0ker:

'''Bluefreeze''' is a tethered downgrade solution by a group called the Private Dev Team. It claims to allow the downgrade of a device to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 without [[SHSH]] blobs saved via [[TinyUmbrella]] or [[iFaith]]. iDevices that are supported are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

== Download ==
* [http://www.mediafire.com/?02y3bl3by41aaa3 Windows]

== Usage ==
* Step 1: Use [[iFaith]] to get an iOS 5.0.1 [[SHSH]] blob
* Step 2: Open the [[iFaith]] SHSH file. Bluefreeze will change md5 and iOS version. For example, if downgrading to iOS 5.0 on an iPod touch 3G from iOS 5.0.1:
<ios>5.0.1 (9A405)</ios> -> <ios>5.0 (9A433)</ios>
<ipsw_md5>c13c14abcde18bbdb7d70c8563f56ac1</ipsw_md5> -> <ipsw_md5>989b8327acab76e7632443a0e179250c</ipsw_md5>
* Step 3: Save the modified file, and use it to build an iOS 5.0 custom firmware. Even though the firmware has fake shsh blobs on it, iTunes will still accept it. (iREB will be used to bypass error 16XX)
* Step 4: Since there are no shsh blobs present the device will boot up into DFU mode. A bootrom exploit, known as Limera1n, will be used to bypass Apple's blob checker per se. (Tool used: redsn0w)
* Step 5: Device will boot up, and one will have a tethered downgrade.

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html Guide]

[[Category:GUI Tools]]

Talk:Bluefreeze

2011-12-13T23:39:52Z

J0ker:

Talk:Bluefreeze

2011-12-13T23:39:12Z

J0ker:

Talk:Bluefreeze

2011-12-13T04:08:15Z

J0ker:

Bluefreeze

2011-12-13T03:28:33Z

J0ker:

{{delete|Claiming false functionality '''A downgrade is not possible w/o SHSH blobs'''}}

'''Bluefreeze''' is a tethered downgrade solution by a group called the Private Dev Team. It allows the downgrade of an device to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 without [[SHSH]] blobs saved via [[TinyUmbrella]] or [[iFaith]]. iDevices that are supported are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

== Download ==
* [http://www.mediafire.com/?02y3bl3by41aaa3 Windows]

== Explanation ==
* Step 1: Use iFaith to make an ios 5.0.1 shsh blob
* Step 2: Open the iFaith shsh blob (all done in Bluefreeze) and change md5 and ios version to proper ones. (for example, if downgrading to ios 5.0 on an iPod Touch 3G from ios 5.0.1, the following modifications will be made)
Original:
<?xml version="1.0" encoding="utf-8"?>
<iFaith>
<name start="here">
<revision>1.4</revision>
<ios>5.0.1 (9A405)</ios>
<model>iPod Touch 3G</model>
<board>n18ap</board>
lot's of lines of code later...
<cert>0x1</cert>
<md5>b7bbd2e410af8d6386f46c26e328f95c</md5>
<ipsw_md5>c13c14abcde18bbdb7d70c8563f56ac1</ipsw_md5>
</name>
</iFaith>

Modified:
<?xml version="1.0" encoding="utf-8"?>
<iFaith>
<name start="here">
<revision>1.4</revision>
<ios>5.0 (9A433)</ios>
<model>iPod Touch 3G</model>
<board>n18ap</board>
lot's of lines of code later... Same as above, nothing modified here
<cert>0x1</cert>
<md5>b7bbd2e410af8d6386f46c26e328f95c</md5>
<ipsw_md5>989b8327acab76e7632443a0e179250c</ipsw_md5>
</name>
</iFaith>

* Step 3: Save the modified shsh blob, and use said shsh blob to build a ios 5.0 custom firmware. Even though the firmware has fake shsh blobs on it, iTunes will still accept it. (iREB will be used to bypass error 16XX)
* Step 4: Since there are no shsh blobs present the device will boot up into DFU mode. A bootrom exploit, known as Limera1n, will be used to bypass Apple's blob checker per se. (Tool used: redsn0w)
* Step 5: Device will boot up, and one will have a tethered downgrade.

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html Guide]

Bluefreeze

2011-12-13T02:10:02Z

J0ker: /* Explanation */

{{delete|Claiming false functionality '''A downgrade is not possible w/o SHSH blobs'''}}

'''Bluefreeze''' is a tethered downgrade solution by a group called the Private Dev Team. It allows the downgrade of an device to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 without [[SHSH]] blobs saved via [[TinyUmbrella]] or [[iFaith]]. iDevices that are supported are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

== Download ==
* [http://www.mediafire.com/?4bj8mo2lf7lgyja Windows]

== Explanation ==
* Step 1: Use iFaith to make an ios 5.0.1 shsh blob
* Step 2: Open the iFaith shsh blob (all done in Bluefreeze) and change md5 and ios version to proper ones. (for example, if downgrading to ios 5.0 on an iPod Touch 3G from ios 5.0.1, the following modifications will be made)
Original:
<?xml version="1.0" encoding="utf-8"?>
<iFaith>
<name start="here">
<revision>1.4</revision>
<ios>5.0.1 (9A405)</ios>
<model>iPod Touch 3G</model>
<board>n18ap</board>
lot's of lines of code later...
<cert>0x1</cert>
<md5>b7bbd2e410af8d6386f46c26e328f95c</md5>
<ipsw_md5>c13c14abcde18bbdb7d70c8563f56ac1</ipsw_md5>
</name>
</iFaith>

Modified:
<?xml version="1.0" encoding="utf-8"?>
<iFaith>
<name start="here">
<revision>1.4</revision>
<ios>5.0 (9A433)</ios>
<model>iPod Touch 3G</model>
<board>n18ap</board>
lot's of lines of code later... Same as above, nothing modified here
<cert>0x1</cert>
<md5>b7bbd2e410af8d6386f46c26e328f95c</md5>
<ipsw_md5>989b8327acab76e7632443a0e179250c</ipsw_md5>
</name>
</iFaith>

* Step 3: Save the modified shsh blob, and use said shsh blob to build a ios 5.0 custom firmware. Even though the firmware has fake shsh blobs on it, iTunes will still accept it. (iREB will be used to bypass error 16XX)
* Step 4: Since there are no shsh blobs present the device will boot up into DFU mode. A bootrom exploit, known as Limera1n, will be used to bypass Apple's blob checker per se. (Tool used: redsn0w)
* Step 5: Device will boot up, and one will have a tethered downgrade.

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html Guide]

Bluefreeze

2011-12-13T02:09:40Z

J0ker:

{{delete|Claiming false functionality '''A downgrade is not possible w/o SHSH blobs'''}}

'''Bluefreeze''' is a tethered downgrade solution by a group called the Private Dev Team. It allows the downgrade of an device to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 without [[SHSH]] blobs saved via [[TinyUmbrella]] or [[iFaith]]. iDevices that are supported are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.

== Download ==
* [http://www.mediafire.com/?4bj8mo2lf7lgyja Windows]

== Explanation ==
* Step 1: Use iFaith to make a ios 5.0.1 shsh blob
* Step 2: Open the iFaith shsh blob (all done in Bluefreeze) and change md5 and ios version to proper ones. (for example, if downgrading to ios 5.0 on an iPod Touch 3G from ios 5.0.1, the following modifications will be made)
Original:
<?xml version="1.0" encoding="utf-8"?>
<iFaith>
<name start="here">
<revision>1.4</revision>
<ios>5.0.1 (9A405)</ios>
<model>iPod Touch 3G</model>
<board>n18ap</board>
lot's of lines of code later...
<cert>0x1</cert>
<md5>b7bbd2e410af8d6386f46c26e328f95c</md5>
<ipsw_md5>c13c14abcde18bbdb7d70c8563f56ac1</ipsw_md5>
</name>
</iFaith>

Modified:
<?xml version="1.0" encoding="utf-8"?>
<iFaith>
<name start="here">
<revision>1.4</revision>
<ios>5.0 (9A433)</ios>
<model>iPod Touch 3G</model>
<board>n18ap</board>
lot's of lines of code later... Same as above, nothing modified here
<cert>0x1</cert>
<md5>b7bbd2e410af8d6386f46c26e328f95c</md5>
<ipsw_md5>989b8327acab76e7632443a0e179250c</ipsw_md5>
</name>
</iFaith>

* Step 3: Save the modified shsh blob, and use said shsh blob to build a ios 5.0 custom firmware. Even though the firmware has fake shsh blobs on it, iTunes will still accept it. (iREB will be used to bypass error 16XX)
* Step 4: Since there are no shsh blobs present the device will boot up into DFU mode. A bootrom exploit, known as Limera1n, will be used to bypass Apple's blob checker per se. (Tool used: redsn0w)
* Step 5: Device will boot up, and one will have a tethered downgrade.

== External Links ==
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
* [http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html Guide]

Talk:Bluefreeze

2011-12-13T01:50:35Z

J0ker:

Talk:Bluefreeze

2011-12-13T01:49:46Z

J0ker:

Talk:Bluefreeze

2011-12-13T00:39:13Z

J0ker:

Talk:Bluefreeze

2011-12-13T00:38:53Z

J0ker:

Talk:Bluefreeze

2011-12-12T15:03:57Z

J0ker: /* Claiming false functionality */

Talk:Bluefreeze

2011-12-12T14:45:53Z

J0ker:

Talk:Bluefreeze

2011-12-12T14:44:04Z

J0ker: Claiming false functionality

Bluefreeze

2011-12-12T06:42:42Z

J0ker:

A tethered downgrade solution by a group called the Private Dev Team. Allows the downgrade of an iDevice on ios 5.0.1 to ios 5.0, 4.3.5, 4.3 without shsh blobs saved via TU or iFaith. iDevices that are supported are iPhone 4 both CDMA and GSM models, iPhone 3GS, iPod Touch 3G, iPod Touch 4, Apple TV 2G, iPad 1G.

== Guide ==
* [[http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html The Private Dev Team blog]]

== Download ==
* [[http://www.mediafire.com/?4bj8mo2lf7lgyja windows]]
* [[https://github.com/ThePrivateDevTeam/Bluefreeze github]]

Bluefreeze

2011-12-12T06:41:18Z

J0ker:

A tethered downgrade solution by a group called the Private Dev Team. Allows the downgrade of an iDevice on ios 5.0.1 to ios 5.0, 4.3.5, 4.3 without shsh blobs saved via TU or iFaith.

== Guide ==
* [[http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html The Private Dev Team blog]]

== Download ==
* [[http://www.mediafire.com/?4bj8mo2lf7lgyja windows]]
* [[https://github.com/ThePrivateDevTeam/Bluefreeze github]]

Bluefreeze

2011-12-12T06:37:41Z

J0ker: Created page with "A tethered downgrade solution by a group called the Private Dev Team. Allows the downgrade of an iDevice on ios 5.0.1 to ios 5.0, 4.3.5, 4.3 without shsh blobs save via TU or iFa..."

A tethered downgrade solution by a group called the Private Dev Team. Allows the downgrade of an iDevice on ios 5.0.1 to ios 5.0, 4.3.5, 4.3 without shsh blobs save via TU or iFaith.

== Guide ==
* [[http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html The Private Dev Team blog]]

== Download ==
* [[http://www.mediafire.com/?4bj8mo2lf7lgyja windows]]
* [[https://github.com/ThePrivateDevTeam/Bluefreeze github]]

IFaith

2011-12-12T06:32:29Z

J0ker:

{{lowercase}}
{{Infobox software
| name = iFaith
| title = iFaith
| logo = 
| screenshot = [[File:IFaithv10.png|300px]]
| caption = iFaith 1.0 on Windows XP
| collapsible =
| author = [[User:ih8sn0w|iH8sn0w]]
| developer = [[User:ih8sn0w|iH8sn0w]]
| released = {{Start date|2011|06|02|df=yes}}
| discontinued =
| latest release version = 1.4
| latest release date = {{Start date and age|2011|12|03|df=yes}}
| latest preview version =
| latest preview date =
| programming language = {{wp|C Sharp (programming language)|C#}}
| operating system = {{wp|Microsoft Windows}} XP or greater
| platform =
| size = ZIP: 6,240,633 bytes (5.95 MB) EXE: 9,562,112 bytes (9.11 MB)
| language = {{wp|English language|English}}
| status = Active
| genre = Backup
| license = {{wp|GNU General Public License#Version 3|GNU GPL v3}}
| website = [http://ih8sn0w.com www.ih8sn0w.com]
}}
'''iFaith''' is an open source [[SHSH]] dumper for the Windows family of operating systems written by [[User:Ih8sn0w|iH8sn0w]]. It works on all devices that are susceptible to the [[limera1n]] exploit (all devices except the [[iPad 2]]). This is useful if you receive a device with old firmware on it that you want to be able to restore. Even if Apple doesn't sign that firmware anymore, you can backup the [[SHSH]] data directly from the device, so that you can install the firmware later again to avoid upgrading the firmware.

=== Credits ===
* [[User:Ih8sn0w|iH8sn0w]] author
* [[User:Geohot|geohot]] for [[limera1n]] exploit

{{clear}}
=== Releases ===
{| class="wikitable" width="100%" style="font-size:smaller;border-collapse:collapse;" border="1"
! style="background-color:#E9E9E9;text-align:center;width:50px;" | Version
! style="background-color:#E9E9E9;text-align:center;width:65px;" | Release date
! style="background-color:#E9E9E9;text-align:center;" | Changes
|-
! 1.0
| style="text-align:center;" | 2-Jun-2011
|
* Official release of [[iFaith]]
|-
! 1.1
| style="text-align:center;" | 2-Jul-2011
|
* Code improvement.
* iFaith now SHA1's the [[SHSH]] blob.
* Now alerts user when iFaith was unable to hook iTunes instead of crashing.
* Minor bug fixes with device / iOS detection.
* [http://pastie.org/2152582 change log]
|-
! 1.2
| style="text-align:center;" | 27-Jul-2011
|
* Added [[N72ap|iPod touch 2G]] dumping capability (MC-Model users recommened)
* IPSW Creation for [[N72ap|iPod touch 2G]] is still a work in progress.
* Fixed exe compression issues (resulting in many DFU loops on IPSW creation)
* Fixed any Windows XP issues
* Source code released
* It is currently not possible to add [[iPad 2]] support
* [http://pastie.org/2282544 change log]
|-
! 1.2.1
| style="text-align:center;" | 27-Jul-2011
|
* Bugfix ("Who knew one last second mod could screw the whole build?")
|-
! 1.2.2
| style="text-align:center;" | 31-Jul-2011 (?)
|
* Contains a minor fix.
|-
! 1.3
| style="text-align:center;" | 9-Aug-2011
|
* For iOS 3.1.x/3.2.x/4.0.x/4.1/4.2.1/4.2.6/4.2.7/4.2.8/4.3/4.3.1/4.3.2/4.3.3
* DFU loops were being caused on devices that had the factory certificate. On this new version, when building the signed [[IPSW]], if you were getting a DFU loop, say "NO" to the prompt about using the standard signing certificate.
* You can now use [[TinyUmbrella]] blobs to build a signed [[IPSW]]. (Change file type in browse dialog to "[[TinyUmbrella]] [[SHSH]] blobs".)
* Now adds [[ECID]] to beginning of the [[SHSH]] filename after dumping.
* Now adds [[ECID]] to beginning of the [[IPSW]] filename after being built.
* Cleaned up code and payload
* It's not possible to add [[iPad 2]] support until a bootrom exploit arises.
* [http://pastie.org/2346028 change log]
|-
! 1.3.1
| style="text-align:center;" | 12-Aug-2011
|
* Used a different method to convert binary plists from TinyUmbrella SHSH Blobs to xml format to parse.
* Fixed minor restore issues on 4.3.x for [[iPad]] 3G models.
|-
! 1.3.2
| style="text-align:center;" | 14-Aug-2011
|
* The .NET framework that came pre-shipped with Windows Vista didn't have an essential resource used in iFaith. A new method has been implemented to get around this requirement.
* Fixed issue where [[iTunes]]' plist utility was unable to be located on international language formatted pcs.
|-
! 1.4
| style="text-align:center;" | 03-Dec-2011 
|
* Now dumps iOS 4.4.x (Apple TV 2)/5.0.x apticket + SHSH blobs!
* Dumping is MUCH faster.
* Full Windows XP support.
* Major code improvements.
* Bug fixes.
|-
|}

== External Links ==

* [http://ih8sn0w.com/index.php/download/file/ifaith/pc Download iFaith] (1.4)
* [http://ih8sn0w.com/index.php/products/view/ifaith.snow iFaith homepage]
* [https://github.com/iH8sn0w/iFaith Sourcecode on github]

== See also ==
* [[Bluefreeze]]

[[Category:Hacking Software]]

0rangefreeze

2011-12-05T04:45:21Z

J0ker: Created page with "0rangefreeze is a GenPass GUI for windows. It is the first public GenPass GUI. == Credit == * [[http://theiphonewiki.com/wiki/index.php?title=Chronic_Dev_(team) Chronic Dev ..."

0rangefreeze is a [[GenPass]] GUI for windows. It is the first public GenPass GUI.

== Credit ==
* [[http://theiphonewiki.com/wiki/index.php?title=Chronic_Dev_(team) Chronic Dev Team]] for GenPass
* [[The Private Dev Team]] for GUI and code

== Copyright ==
* The code is released under the {{wp|GNU General Public License#Version 3|GNU GPL v3}}

== Links ==
* [[http://www.mediafire.com/?js3i9ebxy7sc70e 0rangefreeze]] version 1 download
* [[https://github.com/ThePrivateDevTeam/0rangefreeze 0rangefreeze]] on github

[[Category:VFDecrypt]]
[[Category:GUI Tools]]

GenPass

2011-12-05T03:22:30Z

J0ker:

GenPass generates the VFDecrypt keys for the filesystem image of an iDevice. It requires either a decrypted restore or update ramdisk.

Note: in the firmwares, the decryption happens in /usr/sbin/asr, which can be found on the ramdisk.

NOTE: I've experienced that running genpass after you've mounted the decrypted ramdisk causes genpass to give a false key.

== GenPass Usage ==
./genpass <platform> <ramdisk> <filesystem>
Platform is the applications processor (i.e.- [[S5L8900]]x, [[S5L8720]]x, [[S5L8920]]x, [[S5L8922]]x, [[S5L8930]]x)

== Source ==
http://github.com/posixninja/genpass

== Downloads ==
* [[0rangefreeze]]
** Creator: [[The Private Dev Team]]
** Interface: {{wp|Graphical user interface|GUI}}
** Download: [http://www.mediafire.com/?js3i9ebxy7sc70e Windows]
** Source: [https://github.com/ThePrivateDevTeam/0rangefreeze Github]

[[Category:VFDecrypt]]
[[Category:Hacking Software]]