The iPhone Wiki - User contributions [en]

NonUI builds

2018-02-05T11:06:49Z

JPS: /* = Some interesting facts about factory firmwares */

{{internal software}}
{{see also|Beta Firmware|Internal OTA Updates}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
[[File:newsblogo.png|thumb|125px|right|"Skankwerk" logo on 7.x and up]]
[[File:oldswblogo.png|thumb|125px|left|"Skankwerk" logo on 6.x and below]]
[[File:newswblogo.jpg|thumb|125px|right|Prototype showing Skankwerk logo during boot]]
[[File:oldswblogodevice.jpg|thumb|125px|left|Prototype showing Skankwerk logo during boot]]
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed both IPSWs and "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).
{{clear}}
= Some interesting facts about factory firmwares =
* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one.
Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and most likely others. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on [https://en.wikipedia.org/wiki/Skunkworks_project Wikipedia].

== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="3" | Alpine
| 03.06.01_G<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| 04.02.13_G
| -
|-
| rowspan="1" | 1.1.2
| [[Alpine 3B48|3B48]]
| 04.02.13_G
| -
|-
| rowspan="2" | 1.1.3
| [[Alpine 4A102a|4A102a]]
| Alpine
| 04.04.05_G
| -
|-
|}

== [[N82AP|iPhone 3G]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 05.16.05
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 05.16.06
| -
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 4.0
| [[Apex 8A133|8A133]]
| Apex?
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 04.12.01
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 04.12.02
| -
|-
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 1.0.10
| -
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
| SundanceNanshan
| 2.0.0.2
| -
|}

== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A23941s|10A23941s]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A316|10A316]]
| Sundance
| 1.7.00
| -
|-
|}
== [[iPhone 5c]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.1
| [[Sochi 11D31620l|11D31620l]]
| Sochi?
| ?
| -
|}

== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| 1.00.05
| -
|-
| [[InnsbruckNanshan 11A24581c|11A24581c]]
| InnsbruckNanshan
| ?
| -
|-
| [[Innsbruck 11A93840f|11A93840f]]
| Innsbruck?
| ?
| Originally found on a [https://forums.macrumors.com/threads/unusual-iphone-possible-engineering-sample-os.1885755/ Macrumors] post.
|-
|}

== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 8.0
| [[Okemo 12A22121a|12A22121a]]
| Okemo?
| ?
| -
|-
| [[Okemo 12A93311h|12A93311h]]
| Okemo?
| 1.00.01
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| 1.00.05
| This build is pretty obscure, but it is in the wild.
|-
| [[OkemoAni 12A93651a|12A93651a]]
| OkemoAni
| 1.00.05
| -
|-
| [[OkemoAni 12A93651b|12A93651b]]
| OkemoAni
| 1.00.05
| -
|-
|}

== [[iPhone 6s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 9.0
| [[Monarch 13A22120w|13A22120w]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93051l|13A93051l]]
| Monarch?
| 0.37.08
| -
|-
| [[Monarch 13A93420d|13A93420d]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93420m|13A93420m]]
| Monarch?
| 1.00.05
| -
|-
|}

== [[D10AP|iPhone 7]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 10.0
| [[Whitetail 14A22580n|14A22580n]]
| Whitetail?
| ?
| -
|-
| [[Whitetail 14A22881a|14A22881a]]
| Whitetail?
| ?
| -
|-
| [[Whitetail 14A92340t|14A92340t]]
| Whitetail?
| ?
| -
|-
| [[WhitetailAni 14A93012r|14A93012r]]
| WhitetailAni
| ?
| -
|-
| [[WhitetailAni 14A93013a|14A93013a]]
| WhitetailAni
| ?
| -
|-
|}

== [[D20AP|iPhone 8]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 11.0
| [[TigrisAni 15A93261h|15A93261h]]
| TigrisAni
| ?
| -
|}

== [[K48AP|iPad]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.2
| [[Wildcat 7B3341e|7B3341e]]
| Wildcat?
| ?
| -
|-
| [[Wildcat 7B5286a|7B5286a]]
| Wildcat?
| ?
| Found by SonnyDickson, documented on [https://9to5mac.com/2017/05/15/ipad-1-prototype/ 9to5mac]
|-
|}

== [[K93AP|iPad 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.3
| [[Durango 8F3178a|8F3178a]]
| Durango?
| ?
| -
|-
| [[Durango 8F3191d|8F3191d]]
| Durango?
| ?
| -
|-
|}

== [[P106AP|iPad mini]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[SundanceTaosTianshan 10A63970m|10A63970m]]
| SundanceTaosTianshan
| ?
| -
|-
| [[SundanceTaosTianshan 10A63970v|10A63970v]]
| SundanceTaosTianshan
| ?
| -
|-
| [[SundanceTaosTianshan 10A63971b|10A63971b]]
| SundanceTaosTianshan
| ?
| -
|-
|}

== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| ?
| -
|}

== [[J96AP|iPad mini 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 8.4
| [[Donner 12H60160o|12H60160o]]
| Donner?
| ?
| -
|-
| 9.0
| [[Monarch 13A62950o|13A62950o]]
| Monarch?
| ?
| -
|-
|}

== [[J71AP|iPad Air]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.1
| [[Innsbruck 11B34640l|11B34640l]]
| Innsbruck?
| ?
| -
|}

== [[N18AP|iPod touch (3rd generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 3.1
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| ?
| -
|-
| [[Inferno 7C1095a|7C1095a]]
| Inferno?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
|}

== [[N81AP|iPod touch (4th generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|}

[[Category:Firmware]]

NonUI builds

2018-02-05T11:06:20Z

JPS: /* Some interesting facts about factory firmwares */

{{internal software}}
{{see also|Beta Firmware|Internal OTA Updates}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
[[File:newsblogo.png|thumb|125px|right|"Skankwerk" logo on 7.x and up]]
[[File:oldswblogo.png|thumb|125px|left|"Skankwerk" logo on 6.x and below]]
[[File:newswblogo.jpg|thumb|125px|right|Prototype showing Skankwerk logo during boot]]
[[File:oldswblogodevice.jpg|thumb|125px|left|Prototype showing Skankwerk logo during boot]]
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed both IPSWs and "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).
{{clear}}
== Some interesting facts about factory firmwares =
* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one.
Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and most likely others. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on [https://en.wikipedia.org/wiki/Skunkworks_project Wikipedia].

== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="3" | Alpine
| 03.06.01_G<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| 04.02.13_G
| -
|-
| rowspan="1" | 1.1.2
| [[Alpine 3B48|3B48]]
| 04.02.13_G
| -
|-
| rowspan="2" | 1.1.3
| [[Alpine 4A102a|4A102a]]
| Alpine
| 04.04.05_G
| -
|-
|}

== [[N82AP|iPhone 3G]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 05.16.05
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 05.16.06
| -
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 4.0
| [[Apex 8A133|8A133]]
| Apex?
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 04.12.01
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 04.12.02
| -
|-
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 1.0.10
| -
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
| SundanceNanshan
| 2.0.0.2
| -
|}

== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A23941s|10A23941s]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A316|10A316]]
| Sundance
| 1.7.00
| -
|-
|}
== [[iPhone 5c]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.1
| [[Sochi 11D31620l|11D31620l]]
| Sochi?
| ?
| -
|}

== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| 1.00.05
| -
|-
| [[InnsbruckNanshan 11A24581c|11A24581c]]
| InnsbruckNanshan
| ?
| -
|-
| [[Innsbruck 11A93840f|11A93840f]]
| Innsbruck?
| ?
| Originally found on a [https://forums.macrumors.com/threads/unusual-iphone-possible-engineering-sample-os.1885755/ Macrumors] post.
|-
|}

== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 8.0
| [[Okemo 12A22121a|12A22121a]]
| Okemo?
| ?
| -
|-
| [[Okemo 12A93311h|12A93311h]]
| Okemo?
| 1.00.01
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| 1.00.05
| This build is pretty obscure, but it is in the wild.
|-
| [[OkemoAni 12A93651a|12A93651a]]
| OkemoAni
| 1.00.05
| -
|-
| [[OkemoAni 12A93651b|12A93651b]]
| OkemoAni
| 1.00.05
| -
|-
|}

== [[iPhone 6s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 9.0
| [[Monarch 13A22120w|13A22120w]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93051l|13A93051l]]
| Monarch?
| 0.37.08
| -
|-
| [[Monarch 13A93420d|13A93420d]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93420m|13A93420m]]
| Monarch?
| 1.00.05
| -
|-
|}

== [[D10AP|iPhone 7]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 10.0
| [[Whitetail 14A22580n|14A22580n]]
| Whitetail?
| ?
| -
|-
| [[Whitetail 14A22881a|14A22881a]]
| Whitetail?
| ?
| -
|-
| [[Whitetail 14A92340t|14A92340t]]
| Whitetail?
| ?
| -
|-
| [[WhitetailAni 14A93012r|14A93012r]]
| WhitetailAni
| ?
| -
|-
| [[WhitetailAni 14A93013a|14A93013a]]
| WhitetailAni
| ?
| -
|-
|}

== [[D20AP|iPhone 8]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 11.0
| [[TigrisAni 15A93261h|15A93261h]]
| TigrisAni
| ?
| -
|}

== [[K48AP|iPad]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.2
| [[Wildcat 7B3341e|7B3341e]]
| Wildcat?
| ?
| -
|-
| [[Wildcat 7B5286a|7B5286a]]
| Wildcat?
| ?
| Found by SonnyDickson, documented on [https://9to5mac.com/2017/05/15/ipad-1-prototype/ 9to5mac]
|-
|}

== [[K93AP|iPad 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.3
| [[Durango 8F3178a|8F3178a]]
| Durango?
| ?
| -
|-
| [[Durango 8F3191d|8F3191d]]
| Durango?
| ?
| -
|-
|}

== [[P106AP|iPad mini]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[SundanceTaosTianshan 10A63970m|10A63970m]]
| SundanceTaosTianshan
| ?
| -
|-
| [[SundanceTaosTianshan 10A63970v|10A63970v]]
| SundanceTaosTianshan
| ?
| -
|-
| [[SundanceTaosTianshan 10A63971b|10A63971b]]
| SundanceTaosTianshan
| ?
| -
|-
|}

== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| ?
| -
|}

== [[J96AP|iPad mini 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 8.4
| [[Donner 12H60160o|12H60160o]]
| Donner?
| ?
| -
|-
| 9.0
| [[Monarch 13A62950o|13A62950o]]
| Monarch?
| ?
| -
|-
|}

== [[J71AP|iPad Air]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.1
| [[Innsbruck 11B34640l|11B34640l]]
| Innsbruck?
| ?
| -
|}

== [[N18AP|iPod touch (3rd generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 3.1
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| ?
| -
|-
| [[Inferno 7C1095a|7C1095a]]
| Inferno?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
|}

== [[N81AP|iPod touch (4th generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|}

[[Category:Firmware]]

NonUI builds

2018-02-05T11:04:56Z

JPS: Grammar change 1

{{internal software}}
{{see also|Beta Firmware|Internal OTA Updates}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
[[File:newsblogo.png|thumb|125px|right|"Skankwerk" logo on 7.x and up]]
[[File:oldswblogo.png|thumb|125px|left|"Skankwerk" logo on 6.x and below]]
[[File:newswblogo.jpg|thumb|125px|right|Prototype showing Skankwerk logo during boot]]
[[File:oldswblogodevice.jpg|thumb|125px|left|Prototype showing Skankwerk logo during boot]]
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed both IPSWs and "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).
== Some interesting facts about factory firmwares ==
{{clear}}
* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one.
Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and most likely others. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on [https://en.wikipedia.org/wiki/Skunkworks_project Wikipedia].

== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="3" | Alpine
| 03.06.01_G<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| 04.02.13_G
| -
|-
| rowspan="1" | 1.1.2
| [[Alpine 3B48|3B48]]
| 04.02.13_G
| -
|-
| rowspan="2" | 1.1.3
| [[Alpine 4A102a|4A102a]]
| Alpine
| 04.04.05_G
| -
|-
|}

== [[N82AP|iPhone 3G]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
| rowspan="2" | 4.0
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 05.12.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 05.16.05
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 05.16.06
| -
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 4.0
| [[Apex 8A133|8A133]]
| Apex?
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[ApexNanshan 8A2130h|8A2130h]]
| ApexNanshan
| ?
| -
|-
| [[ApexNanshan 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 04.12.01
| -
|-
| 6.0
| [[Sundance 10A316|10A316]]
| Sundance
| 04.12.02
| -
|-
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| 1.0.10
| -
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
| SundanceNanshan
| 2.0.0.2
| -
|}

== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A23941s|10A23941s]]
| Sundance?
| ?
| -
|-
| [[Sundance 10A316|10A316]]
| Sundance
| 1.7.00
| -
|-
|}
== [[iPhone 5c]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.1
| [[Sochi 11D31620l|11D31620l]]
| Sochi?
| ?
| -
|}

== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| 1.00.05
| -
|-
| [[InnsbruckNanshan 11A24581c|11A24581c]]
| InnsbruckNanshan
| ?
| -
|-
| [[Innsbruck 11A93840f|11A93840f]]
| Innsbruck?
| ?
| Originally found on a [https://forums.macrumors.com/threads/unusual-iphone-possible-engineering-sample-os.1885755/ Macrumors] post.
|-
|}

== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 8.0
| [[Okemo 12A22121a|12A22121a]]
| Okemo?
| ?
| -
|-
| [[Okemo 12A93311h|12A93311h]]
| Okemo?
| 1.00.01
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| 1.00.05
| This build is pretty obscure, but it is in the wild.
|-
| [[OkemoAni 12A93651a|12A93651a]]
| OkemoAni
| 1.00.05
| -
|-
| [[OkemoAni 12A93651b|12A93651b]]
| OkemoAni
| 1.00.05
| -
|-
|}

== [[iPhone 6s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="4" | 9.0
| [[Monarch 13A22120w|13A22120w]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93051l|13A93051l]]
| Monarch?
| 0.37.08
| -
|-
| [[Monarch 13A93420d|13A93420d]]
| Monarch?
| ?
| -
|-
| [[Monarch 13A93420m|13A93420m]]
| Monarch?
| 1.00.05
| -
|-
|}

== [[D10AP|iPhone 7]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="5" | 10.0
| [[Whitetail 14A22580n|14A22580n]]
| Whitetail?
| ?
| -
|-
| [[Whitetail 14A22881a|14A22881a]]
| Whitetail?
| ?
| -
|-
| [[Whitetail 14A92340t|14A92340t]]
| Whitetail?
| ?
| -
|-
| [[WhitetailAni 14A93012r|14A93012r]]
| WhitetailAni
| ?
| -
|-
| [[WhitetailAni 14A93013a|14A93013a]]
| WhitetailAni
| ?
| -
|-
|}

== [[D20AP|iPhone 8]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 11.0
| [[TigrisAni 15A93261h|15A93261h]]
| TigrisAni
| ?
| -
|}

== [[K48AP|iPad]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 3.2
| [[Wildcat 7B3341e|7B3341e]]
| Wildcat?
| ?
| -
|-
| [[Wildcat 7B5286a|7B5286a]]
| Wildcat?
| ?
| Found by SonnyDickson, documented on [https://9to5mac.com/2017/05/15/ipad-1-prototype/ 9to5mac]
|-
|}

== [[K93AP|iPad 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 4.3
| [[Durango 8F3178a|8F3178a]]
| Durango?
| ?
| -
|-
| [[Durango 8F3191d|8F3191d]]
| Durango?
| ?
| -
|-
|}

== [[P106AP|iPad mini]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 6.0
| [[SundanceTaosTianshan 10A63970m|10A63970m]]
| SundanceTaosTianshan
| ?
| -
|-
| [[SundanceTaosTianshan 10A63970v|10A63970v]]
| SundanceTaosTianshan
| ?
| -
|-
| [[SundanceTaosTianshan 10A63971b|10A63971b]]
| SundanceTaosTianshan
| ?
| -
|-
|}

== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| ?
| -
|}

== [[J96AP|iPad mini 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 8.4
| [[Donner 12H60160o|12H60160o]]
| Donner?
| ?
| -
|-
| 9.0
| [[Monarch 13A62950o|13A62950o]]
| Monarch?
| ?
| -
|-
|}

== [[J71AP|iPad Air]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.1
| [[Innsbruck 11B34640l|11B34640l]]
| Innsbruck?
| ?
| -
|}

== [[N18AP|iPod touch (3rd generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 3.1
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| ?
| -
|-
| [[Inferno 7C1095a|7C1095a]]
| Inferno?
| ?
| -
|-
| [[Northstar 7C144|7C144]]
| Northstar?
| ?
| -
|-
|}

== [[N81AP|iPod touch (4th generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 5.1
| [[HoodooYabuli 9B3145a|9B3145a]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176b|9B3176b]]
| HoodooYabuli
| ?
| -
|-
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|}

[[Category:Firmware]]

XInternalApps

2017-09-08T18:26:54Z

JPS: Created page with "Internal Apps is an application which appears to Launch other internal applications. Not much is known about it."

Internal Apps is an application which appears to Launch other internal applications. Not much is known about it.

HoodooYabuli 9B3176n

2017-09-03T16:34:48Z

JPS: /* Background */

This is a 5.1 version based internal firmware. It is known to run on iPhone 3Gs, iPhone 4 and iPod Touch 4G. Due to the fact that it contains kernels for other devices (something which is common for most SwitchBoard filesystems) it can possibly be installed onto other devices.

== Background ==

This firmware was leaked most likely as a root filesystem dump.IPSWs for iPhone 3Gs, iPhone 4 and iPod Touch 4G have since appeared and can be restored to these devices via bootrom exploits. The Firmware has also appeared as an Encrypted restore bundle for the iPhone 4, which keys were eventually found for.

== SwitchBoard Applications ==

This build contains the following applications applications launched through SwitchBoard.app:

* [[ATCommand]]
* [[CameraFA]]
* [[GrapeCal]]
* [[LDCMura]]
* [[LCMFlicker]] - an apparently renamed version of the [[BurnIn]] application.
* [[LcdUTest]]
* [[Operator]]
* [[Rumble]]
* [[SkankPhone]]
* [[Soundwave]]
* [[WiPASmini]]
* [[ThermalDOE]]
* [[Reliability]]

PurpleConsole

2017-08-31T15:56:51Z

JPS: created page

PurpleConsole is an app used to view Logs from an iOS Device. It can read what an attached iOS device is currently outputting, or it can read logs from the Crash Report Copier which is installed when other internal Mac OS tools are installed.

Scam Jailbreaks and Unlocks

2017-08-31T15:52:25Z

JPS: Added a new scamsite

This is an ''incomplete'' list of community-reported '''scam sites''' that pretend to distribute or sell jailbreaking and unlocking tools/services. (There are many other scam sites not listed here yet.)

If you see a site selling jailbreaking or unlocking software (or asking you to do a survey before downloading), it's a scam. (Companies make money when you fill out surveys, so they promise a jailbreak to get you to fill them out.) Scam sites may also provide free fake tools that actually install adware or other kinds of malware in order to make money from you. Some legitimate forms of unlocking are not free - third-party IMEI unlocks and SIM interposer devices both cost money - but ultrasn0w is always free.

In general, please consider: '''is what the site promises too good to be true?''' Does it promise a new jailbreak for the latest iOS version, when nobody from trusted sources (such as well-known blogs or Reddit or developers on Twitter) is talking about this new jailbreak? When a real new jailbreak gets released, huge numbers of people talk about it - so if you find something people aren't talking about, be very skeptical and check trusted sources.

=== You can contribute to this list ===

Please contribute to this list if you find a scam site. By listing them here, we can help people find good information when they search Google for more information about these sites. If your site is listed here and you believe that's a mistake, you may contact an administrator to request removal.

Be sure not to link to these pages, as all links will boost their Google ranking.

== Jailbreak fakes ==
{| class="wikitable"
|-
! Domain !! Notes
|-
| 3kjailbreak.com || Fake
|-
| 4na.weebly.com || Fake
|-
| 7evasi0n.com || Fake
|-
| 7jailbreak.com || On-device survey scam
|-
| 71jailbreak.com || Fake
|-
| 8jailbreak.net || Fake
|-
| alphajailbreak.com || Survey scam
|-
| alpinejb.blogspot.com || Fake
|-
| apps.appshed.com/[various #] || On-device fake, webclips and profiles
|-
| celtikios7.com || Survey scam
|-
| cyberelevat0r.net || Fake
|-
| cyberelevat0r.us || Fake
|-
| cydia8jailbreak.com || Fake has you download multiple free-to-play apps hoping for in-app purchases
|-
| cydiaappdownloader.wordpress.com || Fake. Virustotal.com analysis: 39 of 56 scanners detect malware.
|-
| cydia-download.us || On-device scam, cost is unknown as it wants to install a profile and I'm not willing to go that far ;p
|-
| cydiadownloaders.com || On-device webclip scam offering $14.99 & $19.99 memberships
|-
| cydiainstall9.weebly.com || Fake, makes you download apps from the AppStore, promo video has obvious edit.
|-
| cydiajailbreak.org || Scam. Offers links to taig-download.com offering $14.99 & $19.99 memberships
|-
| cydiapro.com || Scam. On-device webclip offers membership for donations of $14.99 & $19.99
|-
| cyrooting.com || Affiliated with cydia-download.us which installs a profile from cyrooting.com
|-
| downgradeios7.com || Fake on-device downgrade tool
|-
| downgradeios8.com || Fake on-device downgrade tool
|-
| downgradeiphone.com || Sells a false promise (universal iOS/baseband downgrade) for $29
|-
| downloadcydiainstaller.weebly.com || Scam, part of cydiapro.com group
|-
| downloadpangu.org || Fake
|-
| ecydia.com || Sells an unspecified tool for $24.99
|-
| en-pangu.com || Fake, affiliated with i0n1c.com and taig9.com
|-
| equsi0n.com || Survey scam
|-
| evad3rs.me || No survey, not selling anything, just has downloads of evasi0n 1.0.7, calling it 1.0.8 and saying it works on iOS 7.1.x. Pointless.
|-
| evad3rsdevteam.com || Survey scam, copy of evasi0n.com
|-
| evad3rs-devteam.com || Copy of evasi0n.com
|-
| evad3rsjb.com || Fake
|-
| evad3rsteam.com || Survey scam
|-
| evasi0nblog.com || Repackaged evasi0n
|-
| evasi0ndevteam.com || Sells evasi0n for $15
|-
| evasi0njb.net || Copy of evasi0n.com
|-
| evasion-jailbreak.com || Survey scam
|-
| evasion-jailbreak7.com || Survey scam
|-
| evasi0n-jailbreak.net || Survey scam, copy of evasi0n.com
|-
| evasi0njailbreak.com || Fake
|-
| evasion7.com || Fake
|-
| evasion7download.info/pangu || Malware. See [https://www.virustotal.com/en/file/fb64d5934ebd946c0a4cd49bb8adb13005a57c0ffb04b77e94d40563b6e001e2/analysis/1418953850/ VirusTotal results]
|-
| evasioniosjailbreak.com || Survey scam
|-
| evasionjailbreak.net || Survey scam, copy of evasi0n.com
|-
| evasionjailbreak.us || Copy of evasi0n.com
|-
| evasionjailbreak7.com || Survey scam
|-
| evasi0n-official.com || Survey scam, loosely copied from evasi0n.com
|-
| evasl0n.blogspot.com || Survey scam, copy of evasi0n.com
|-
| evasi0n7.com/pangu || Fake
|-
| evasion7download.info || Malware. See [https://www.virustotal.com/en/file/fb64d5934ebd946c0a4cd49bb8adb13005a57c0ffb04b77e94d40563b6e001e2/analysis/1418953850/ VirusTotal results]
|-
| evasion7-jailbreak.com || Fake
|-
| evazi0n.net || Fake
|-
| ex0dus-jailbreak.com || Unspecified tool, claims to be developed by @planetbeing and @pimskeks. Survey scam after being strung along downloading a fake tool which requires a patch, said patch download requiring survey completion.
|-
| factory-directme.com || Sells redsn0w for $14.95
|-
| firest0rm.net || Survey scam
|-
| freed0md00r.com || Survey scam
|-
| future7ios7.com || Survey scam
|-
| geeksn0w.net || Copy of geeksn0w.it
|-
| geeksn0w.net/pangu || Fake
|-
| geeksn0wdownload.com || Copy of Geeksn0w.it
|-
| getthebest365.com || Sells unspecified tool for $27.00
|-
| greenpois0n-gc.blogspot.com || Survey scam
|-
| icysn0w.com || Survey scam
|-
| idevicehacker07.com || Fake, claims to install R4m0n JB for iOS 9
|-
| idowngrade.com || Survey scam
|-
| iemu.org || Fake; previous site for [[iEmu]]
|-
| ievad3rs.com || Survey scam
|-
| ijailbreak-iphone.com || Sells an unspecified tool for $19.95
|-
| ijailbreaking.com || Fake, see iosjailbreakings.com entry
|-
| ijailbreakpro.com || Sells an unspecified tool for $29.90, $39.90 and $49.90
|-
| ijailbreakpro.net || Sells an unspecified tool (for $29.90, $39.90, and $49.90), to which the most expensive purchase is required to use the tool more than once.
|-
| ijailbreaktool.com || Sells an unspecified tool for $24.99
|-
| imessagewin.com || Claims to have iMessage for Windows platform; Survey scam
|-
| ineedjailbreak.com || Sells evasi0n / redsn0w for $24.95
|-
| inj3ct3d.klikkit.co.uk || asking for donations to publish a non-existent jailbreak
|-
| insanelyios.blogspot.com || Downgrade fake, survey scam
|-
| instajailbreaker.com || Sells unspecified tool(s) for $29.95
|-
| installcydia.mobi || Fake. Takes you to appial.com for freemium appstore games
|-
| instantjb.com || Fake. Installs multiple profiles. Sells "premium" cydia for $9.99
|-
| ios-6-1-4-jailbreak.com || Survey scam
|-
| ios-jailbreak.com || Provides fake iOS 9.3 jailbreak tool that includes malware
|-
| ios8jailbreak.org || Fake
|-
| ios8jailbreak.tk || Fake (alternate domain name is ios8-jailbreak.weebly.com)
|-
| ios8jailbreakdownload.net || Survey scam
|-
| ios8pangu.com || Fake, webclip. Wants to install unsigned profile that cannot be removed
|-
| ios9.semijb.com || See semijb.com entry
|-
| iosjailbreak.org || Scam. Links to webclip sites with $14.99 & $19.99 memberships for fake cydia
|-
| iosjailbreakings.com || Fake, sends you to ijailbreaking.com
|-
| iosjailbreakpangu.com || Survey scam. Good copy of real pangu site
|-
| ipadjailbreak3.com || Forwards to jailbreakunlock.org
|-
| ipangu.net || Fake. Passworded zip files
|-
| iphone5break.com || Sells unspecified tool for $49.99
|-
| iphonejailbreakplus.com || Sells evasi0n / redsn0w for $29.95
|-
| iphonejailbreak-unlock.com || Sells unspecified tool for $27.00
|-
| irevert.wordpress.com/ || Claims to be able to downgrade firmware
|-
| i0n1c.com/jailbreak-ios-9.1 || Fake browser-based tool
|-
| jail-ios.com || App Store app download scam, also a survey scam. They should sell it outright for the trifecta.
|-
| jailbreak.cc || Sells jailbreaking tools
|-
| jailbreak-7.com || App Store app download+play time required, artificially inflating its popularity
|-
| jailbreak-absinthe.com || Survey scam
|-
| jailbreak-ios-7.com || Tells people to go to thejailbreakshop.com
|-
| jailbreak-ios7.net || Sells unspecified tools for $29.95 and $39.95
|-
| jailbreak-my-ipad.org || Sells evasi0n / redsn0w for $29.95 '''per month'''
|-
| jailbreak-my-iphone.com || Sells unspecified tool for $29.97
|-
| jailbreak-official.com || Sells "jailbreak membership" for $19.99
|-
| jailbreak-team.com || Sells an unspecified tool for $29.99
|-
| jailbreak71.com || Fake
|-
| jailbreak7wizz.com || Links to jailbreakthings.com, which in turn links to instajailbreaker.com, which sells unspecified tools for $29.95
|-
| jailbreakandunlock1.pressdoc.com || Blog that is about jailbreak and unlock which uses fake tools.
|-
| jailbreakbj.com || Survey scam
|-
| jailbreakgenie.com || Scam. Sells unspecified jailbreak tool for $9.99
|-
| jailbreakios7untethered.com || Survey scam, all set up in advance for iOS 7
|-
| jailbreakiosnewversion.elitegamershub.com || Survey scam, copied/modified verion of evasi0n7
|-
| jailbreakiphone5s.com || Tells people to go to thejailbreakshop.com
|-
| jailbreakme10.com || ICU's attempt to cash in on Yalu
|-
| jailbreakmenow.net || Sells unspecified tools for $19.95, $29.95, and $39.95
|-
| jailbreaknewiphone.com || Survey scam after being strung along downloading a fake tool
|-
| jailbreaktheipad2.com || Sells unspecified tool for $14.95
|-
| jailbreakthings.com || Exists solely to promote instajailbreaker.com, a scam site
|-
| jailbreakunlock.info || Sells unspecified tools for $19.95, $29.95, and $39.95
|-
| jailbreakunlock.org || Sells evasi0n / redsn0w for $14.95
|-
| jailbroke.info || Sells jailbreaking "solutions"
|-
| k33n.mobi || Survey scam
|-
| k33nweb.com || Fake
|-
| latestiphoneunlock.com || Sells an unspecified tool for $9.95 or $29.95
|-
| linxijb.weebly.com || Fake
|-
| newios7jailbreak.com || Directs visitors to unlock-jailbreak.net
|-
| opensn0w.net || Survey scam
|-
| overcast7.com || Survey scam
|-
| pangu8.com || Fake. Installs webclip from semijb.com
|-
| pangu8.us || Scam. Part of the cydiapro.com group of on-device webclip scams with $14.99 & $19.99 "memberships"
|-
| pangu9.net || Scam. Charges paid "memberships"
|-
| pangu9.mobi || Fake
|-
| pangudownload.com || Fake
|-
| pangu-jailbreak.com || Fake
|-
| pangujailbreak.info || Fake, survey scam, poor things can't even pay their hosting bill :)
|-
| pangujb.blogspot.com || Fake
|-
| pangunow.com || Fake
|-
| pod2gblog.blogspot.com || Copy of pod2g's blog
|-
| p0sixspwn.co || Windows version is a malware downloader that eventually downloads the real [[p0sixspwn]]
|-
| posixspwndownload.com || Copy of [[p0sixspwn]]
|-
| ppjailbreak.com || Copy of [[PPJailbreak]] and copyright infringement
|-
| ppjailbreakdownload.com || Fake. Has links to real tools.
|-
| premiumjailbreak.com || Sells jailbreaking tools
|-
| purpletools.wordpress.com || (and all the other sites/people offering similar stuff)<br />Scam - Claims access to Apple's internal VPN
|-
| redpois0n.net || Survey scam
|-
| red-snow.com || Sells unspecified tools for $29.95 and $39.95
|-
| redsn0w-r9-new.blogspot.com || Survey scam, text is ripped from Dev-Team Blog
|-
| rocky-racoon.com || Survey scam, copy of Dev-Team Blog
|-
| safera1n.com || Sells an unspecified tool for $24.99
|-
| silv3rwind.com || Sells an unspecified tool for $20
|-
| semijb.com || Fake. Does not install "the cydia."
|-
| semirestore.org || Fake redistributions of SemiRestore and SemiRestore7
|-
| spirit-jb.com || Survey scam
|-
| spiritjb.net || Survey scam
|-
| synergyjailbreak.com || Survey scam
|-
| taig-download.com || Scam. On-device webclip offers membership for $14.99 & $19.99
|-
| taig-nc.blogspot.com || Survey scam
|-
| taig8.net || Fake
|-
| taig9.com || Fake
|-
| taig9.mobi || Fake. AppStore app download scheme to boost app rankings and profit scammer via in-app advertising.
|-
| taig10.mobi || Fake. AppStore app download scheme.
|-
| taigremote.com || On-device app-download scam, basically a survey scam
|-
| team7jailbreak.com || On-device survey scam (redirects to 7jailbreak.com). [https://twitter.com/search?q=It%27s%20easy.%20%20Follow%20this%20realy%20simple%20guide%20from%20%40teamjailbreak7&src=typd&f=realtime Known to spam on Twitter]
|-
| theios7jailbreaker.com || Directs people to scam sites (ijailbreakpro.com, appleunlocker.com, ijailbreaktool.com)
|-
| theios8jailbreak.com || Fake
|-
| thejailbreakshop.com || Sells an unspecified tool for $29.97 and $49.97
|-
| trianglejailbreak.com || Sells jailbreaking tool
|-
| u7xjailbreak.com || Survey scam
|-
| unja1l.com || Survey scam
|-
| untetheredjailbreakios8.com || Survey scam
|}

== Scam jailbreak and unlock sites ==

{| class="wikitable"
|-
! Domain !! Notes
|-
| appleunlocker.com || Sells unspecified jailbreaking + unlocking software for $19.95
|-
| bestra1n.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| cheapestiphoneunlock.com || Sells unspecified jailbreaking + unlocking software for $9.99
|-
| deblocage-iphone-fr.com || Sells unspecified unlocking software for €29.99
|-
| desbloquear-iphone-pro.com || Sells unspecified unlocking software for €29.99
|-
| e-imeiunlock.com || Survey scam
|-
| easyiphoneunlocking.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| easyunlockiphone.net || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| easyunlockingsolutions.com || Sells unspecified unlocking software for $19.99
|-
| how-jailbreak-iphone.com || Sells unspecified jailbreaking + unlocking software for $19.95
|-
| ih8sn0w.mobi || Sells who knows what for 20 Euros. Quite funny, but don't be a sucker.
|-
| ijailbreakpro.com || Sells redsn0w for $29.90, $39.90, or $49.90
|-
| ijailbreaktool.com || Sells unspecified jailbreaking software for $24.99
|-
| ios7jailbreaker.net || Survey scam
|-
| ios7jailbreak.fr || Survey scam
|-
| iphone-unlocker.org || Survey scam
|-
| iphone-instant-unlock.com || Sells unspecified unlocking software for $14.95
|-
| iphone-unlock-pro.com || Redirects to unlock4iphone.com, desbloquear-iphone-pro.com, and deblocage-iphone-fr.com
|-
| iphone-unlocker-pro.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| iphone-unlock-me.com || Sells unspecified unlocking software for $14.95
|-
| iphone-unlockme.com || Sells unspecified unlocking software for $14.95
|-
| iphone5break.com || Sells unspecified jailbreaking + unlocking software for $49.99
|-
| iphoneimei.net || Fake
|-
| iphoneunlocker.org.uk || Sells unspecified jailbreaking + unlocking software for £14.99
|-
| iphoneunlockersoftware.com || Sells unspecified jailbreaking + unlocking software for $24.97
|-
| iphoneunlockplus.com || Sells unspecified unlocking software for $22.99
|-
| iphoneunlockwiz.com || Sells unspecified jailbreaking + unlocking software for $29.97
|-
| jailbreakandunlockiphones.com || Glowing reviews of, and links to, scam sites which are mostly offline now
|-
| jailbreakiphone5express.com || Links to ijailbreakpro.com, appleunlocker.com and ijailbreaktool.com
|-
| myappledownload.com || Sells undefined non-existing jailbreaks, unlocks, downgrades for $19.99
|-
| mydowngrade.com || Sells undefined non-existing jailbreaks, unlocks, downgrades for $19.99
|-
| myunlocker.org || On-device survey / app download scam
|-
| officialiphoneunlock.co.uk || Fake
|-
| phoneunlockguy.com || Sells unspecified jailbreaking + unlocking software for $14.95
|-
| solutions-directme.com || Sells unspecified jailbreaking software for $14.95
|-
| superiorsim.com || Sells SIM interposers, reported to be a scam by various websites
|-
| superunlockiphone.com || Sells unspecified jailbreaking + unlocking software for £14.99
|-
| tracyandmatt.co.uk || Refers victims to unlock-jailbreak.net
|-
| transx-solutions.com || Sells software for $14.95 which does not say what it is. Also requires a download
|-
| trusted-iphone-unlocker.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| ultimateiphoneunlocker.com || Sells unspecified unlocking software for $19.95
|-
| unlock-your-phones.com || Sells evasi0n as an unlock for €8.99
|-
| unlock-apple-iphone.com || Sells unspecified jailbreaking + unlocking software for $29.99
|-
| unlock-appleiphone.com || Sells IMEI unlocks for ANY carrier (including Singtel, which is factory unlocked, and including Sprint, which is nearly impossible, and certainly not done for that price) for $29.95
|-
| unlock-ijailbreak.net || Added a letter to the URL, otherwise it's the same site as unlock-jailbreak.net
|-
| unlock-iphone.info || Fake. Claims that donating will expedite your request.
|-
| unlock-jailbreak.net || Sells unspecified unlocking software for $24.99
|-
| unlock-jailbreak-iphone.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlock-the-iphone.com || Sells unspecified jailbreaking + unlocking software for $29.95, $37.95, or $49
|-
| unlock4iphone.com || Sells unspecified unlocking software for $29.99
|-
| unlockimeiiphone.com || Sells unspecified jailbreaking + unlocking tool for $19.95
|-
| unlockingfox.com || Survey scam
|-
| unlockiphone.net || Sells unspecified jailbreaking + unlocking tool
|-
| unlockiphone.org || Sells unspecified unlocking software for $24.95
|-
| unlockiphoneios5.com || Sells unspecified jailbreaking + unlocking software for $14.95
|-
| unlockiphonenow.org || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockiphonepro.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockjailbreaktool.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockmecentral.com || Sells jailbreaking "membership"
|-
| ultrasn0wtool.com || Claims to unlock via a GUI app
|-
| ziphone.org || Directs visitors to iphone-unlocker-pro.com
|-
| pangu10.mobi || Claims to have "injected" cydia into App Store apps, makes money off of you installing the apps.
|}

Alloc8 Exploit

2017-08-31T15:48:43Z

JPS:

{{lowercase}}
The '''alloc8 exploit''' is a [[bootrom]] exploit used to run unsigned code on the both the [[Bootrom 359.3.2|new bootrom]] and the [[Bootrom 359.3|old bootrom]] [[N88AP|iPhone 3GS]] (and thereby [[jailbreak]] it). It is the first public [[Untethered jailbreak|untethered]] [[bootrom]] exploit for the [[Bootrom 359.3.2|new bootrom]] iPhone 3GS, and the last publicly disclosed [[bootrom]] exploit of all devices (as of this article's writing).

[[User:axi0mX|axi0mX]] published a detailed analysis of alloc8 at [https://github.com/axi0mX/alloc8/blob/master/README GitHub] following his discovery of the exploit.

[[ipwndfu]] is currently the primary and most simple way of using the alloc8 exploit.

[[Category:Exploits]]
[[Category:Bootrom Exploits]]

ScreenShotr

2017-08-31T14:34:22Z

JPS: Created page with "ScreenShotr is an Internal Mac OS X Application used for taking screenshots of prototype devices/ devices running internal SwitchBoard.app firmwares. It appears to take th..."

ScreenShotr is an Internal Mac OS X Application used for taking screenshots of prototype devices/ devices running internal [[SwitchBoard.app]] firmwares. It appears to take the screenshots at the device's native resolution.

NonUI builds

2017-06-03T12:06:15Z

JPS:

{{see also|Beta Firmware}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* Contain DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Contain DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Contain Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Have the /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed in "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).

== Some interesting facts about factory firmwares ==

* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one. Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For example, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For example, the new "skankwerk" boot logo is likely a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For example, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and probably some other. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on Wikipedia https://en.wikipedia.org/wiki/Skunkworks_project.

{{clear}}
== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="2" | Alpine
| [[03.06.01_G]]<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| [[04.02.13_G]]
| -
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| 5.1
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|-
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 4.0
| [[ Apex 8A133|8A133]]
| DeathStar
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[Apex 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| 5.1
| [[Hoodoo 9B3176h|9B3176h]]
| HoodooYabuli
| 04.12.01
| -
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
|SundanceNanshan
| 2.0.0.2
| -
|}
== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|}
== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| ?
| -
|}
== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 8.0
| [[Okemo 12A9331h|12A9331h]]
| Okemo?
| ?
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| ?
| This build is pretty obscure, but it is in the wild.
|}
== [[iPhone 6s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 9.0
| [[13A342]]
| ?
| ?
| -
|}

== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| -
| -
|}
== [[N18AP|iPod touch (3rd generation)]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Comments
|-
| rowspan="2" | 3.1
| [[Northstar 7C144|7C144]]
| Northstar?
| -
|-
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| -
|}

[[Category:Firmware]]

NonUI builds

2017-01-27T19:25:21Z

JPS:

{{see also|Beta Firmware}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* Contain DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Contain DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Contain Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Have the /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed in "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).

== Some interesting facts about factory firmwares ==

* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one. Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For exemple, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For exemple, the new "skankwerk" boot logo is likely a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For exemple, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and probably some other. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on Wikipedia https://en.wikipedia.org/wiki/Skunkworks_project.

{{clear}}
== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="2" | Alpine
| [[03.06.01_G]]<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| [[04.02.13_G]]
| -
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| 5.1
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|-
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 4.0
| [[ Apex 8A133|8A133]]
| Apex?
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[Apex 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| 5.1
| [[Hoodoo 9B3176h|9B3176h]]
| HoodooYabuli
| 04.12.01
| -
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
|SundanceNanshan
| 2.0.0.2
| -
|}
== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|}
== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| ?
| -
|}
== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 8.0
| [[Okemo 12A9331h|12A9331h]]
| Okemo?
| ?
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| ?
| This build is pretty obscure, but it is in the wild.
|}
== [[iPhone 6S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 9.0
| [[13A342]]
| ?
| ?
| -
|}
== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| -
| -
|}
== [[N18AP|iPod touch 3G]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Comments
|-
| rowspan="2" | 3.1
| [[Northstar 7C144|7C144]]
| Northstar?
| -
|-
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| -
|}

[[Category:Firmware]]

NonUI builds

2017-01-27T18:50:05Z

JPS: /* iPhone 3GS */

{{see also|Beta Firmware}}
<div class="toclimit-3">{{float toc|left}}</div>
This (will be) a documented list of known '''factory firmwares''', used by Apple workers in California to do engineering tests on prototype devices and also by factory workers on production ones during manufacturing. Factory firmwares are based on production iOS ones, but adapted for internal engineering tests, development and debugging. {{clear}}
They are also known as "NonUI (No User Interface)" builds, probably because most applications are command line ones. The SpringBoard replacement, named SwitchBoard, allow launching a GUI of some of those applications. Unlike production iOS firmwares, factory ones have the following differences :
* Contain DEVELOPMENT Fused bootloaders in \Firmware\dfu\ and \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Contain DEVELOPMENT Fused kernel cache with more symbols, and with individual kexts in /System/Library/Extensions
* Contain Skankwerk (gear) logo image file in \Firmware\all_flash\all_flash.[board codename].factoryfa\.
* Have the /AppleInternal folder, which the hierarchy inside get priority over hierarchy in /.
* No SpringBoard, requires the use of daemons to launch [[SwitchBoard.app]] as a multi-app launcher instead.
* /usr and subfolders contain many UNIX command line utilities.
* SSH daemon is pre-installed - as dropbear
* Boot loader passes arguments to kernel (unlike RELEASE boot loaders as of iOS 5.0) which makes it easy to disable AMFI
* It has some Private Frameworks in /System/Library/PrivateFrameworks for internal GUI apps and command line utilities.
* Most internal applications require the use of SkankKit to produce special layers such as text on the framebuffer.
Unlike regular iOS Firmwares, factory ones are distributed in "restore bundles". Those are unzipped IPSW files which can be restored on devices using an internal restore software such as [[PurpleRestore]]. Release and factory firmwares "restore bundles" have the same packaging structure (bootloaders, kernel, restore ramdisk, update ramdisk and root filesystem).

== Some interesting facts about factory firmwares ==

* '''Design:''' Apple seems to use the same GUI design from the production firmware to the factory one. Production iOS 1.x to 6.x skeuomorphism design is also present on 1.x to 6.x factory firmwares, but seems really more excessive than production ones. For exemple, the "skankwerk" boot logo represents a real gear and many GUI icons are realistic or simply photos of real life things (especially in [[Operator]]). For newer versions, production iOS 7.x to 9.x flat design is mostly used in 7.x to 9.x factory firmwares. For exemple, the new "skankwerk" boot logo is likely a flat, simple white gear. Some newer internal applications like Earthbound also use a "flat" design.
* '''Other:''' The "skank" word is used to name multiple elements of factory firmwares. For exemple, there is "skankphone", "skankbattery" (the green battery shown in SwitchBoard), "skankwerk" logo, "skankkit" framework, "purpleskank" (used by BurnIn) and probably some other. The "skank" word seems to be a reference to "Skunkworks" projects, which are secrecy projects that are usually innovative. Read more about "Skunkworks" on Wikipedia https://en.wikipedia.org/wiki/Skunkworks_project.

{{clear}}
== [[M68AP|iPhone]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 1.0
| [[Alpine 1A420|1A420]]
| rowspan="2" | Alpine
| [[03.06.01_G]]<sup>[http://web.archive.org/web/20110730023951/http://imageshack.us/photo/my-images/399/iphone2go0.jpg/]</sup>
| Originally available [http://forums.macrumors.com/showpost.php?p=7249071&postcount=85 here], but was soon taken down.
|-
| [[Alpine 4A57|4A57]]
| [[04.02.13_G]]
| -
|}

== [[N88AP|iPhone 3GS]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 3.1b
| [[Sierra 7C108b|7C108b]]
| Sierra?
| ?
| -
|-
| 5.1
| [[HoodooYabuli 9B3176n|9B3176n]]
| HoodooYabuli
| ?
| -
|-
|}

== [[iPhone 4]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="3" | 4.0
| [[ Apex 8A133|8A133]]
| Apex?
| 01.32.01
| -
|-
| [[Apex 8A2062a|8A2062a]]
| Apex?
| ?
| -
|-
| [[Apex 8A2180g|8A2180g]]
| ApexNanshan
| 01.42.01
| -
|-
| 5.1
| [[Hoodoo 9B3176h|9B3176h]]
| HoodooYabuli
| 04.12.01
| -
|}

== [[N94AP|iPhone 4S]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 6.0
| [[SundanceNanshan 10A23941a|10A23941a]]
|SundanceNanshan
| 2.0.0.2
| -
|}
== [[iPhone 5]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 6.0
| [[Sundance 10A23110z|10A23110z]]
| Sundance?
| ?
| -
|}
== [[iPhone 5s]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0
| [[InnsbruckNanshan 11A24580o|11A24580o]]
| InnsbruckNanshan
| ?
| -
|}
== [[N61AP|iPhone 6]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| rowspan="2" | 8.0
| [[Okemo 12A9331h|12A9331h]]
| Okemo?
| ?
| -
|-
| [[OkemoAni 12A93650o|12A93650o]]
| OkemoAni
| ?
| This build is pretty obscure, but it is in the wild.
|}
== [[J86AP|iPad mini 2]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Baseband
! Comments
|-
| 7.0.3
| [[InnsbruckTaos 11B64940j|11B64940j]]
| InnsbruckTaos?
| -
| -
|}
== [[N18AP|iPod touch 3G]] ==
{| class="wikitable"
|-
! Version
! Build
! Codename
! Comments
|-
| rowspan="2" | 3.1
| [[Northstar 7C144|7C144]]
| Northstar?
| -
|-
| [[Inferno 7C1023e|7C1023e]]
| Inferno?
| -
|}

[[Category:Firmware]]