https://www.theiphonewiki.com/w/api.php?action=feedcontributions&feedformat=atom&user=Johnnyfranks67 2026-05-05T16:13:34Z User contributions MediaWiki 1.31.14 https://www.theiphonewiki.com/w/index.php?title=TellurideVail_9A5220p_(iPhone3,3)&diff=18588 2011-06-19T07:41:09Z

<p>Johnnyfranks67: New page: == Decryption Keys == === Root Filesystem (038-1721-016.dmg) === *'''VFDecrypt Key''': '''find me''' === Restore Ramdisk (038-1678-023.dmg) === * '''IV''': 7d5195f9216c7327b15cea6c0...</p> <hr /> <div>== Decryption Keys == <br /> === Root Filesystem (038-1721-016.dmg) === <br /> *'''[[VFDecrypt]] Key''': '''find me'''<br /> <br /> === Restore Ramdisk (038-1678-023.dmg) ===<br /> * '''IV''': 7d5195f9216c7327b15cea6c0abb5637<br /> * '''Key''': d6a218cc74805143d960fdbde7a16bbea497d4aad753af85b7cd7c887c987692<br /> <br /> === [[iBEC]] ===<br /> * '''IV''': 26880ee6b5cc6aaa4a722e767662fb73<br /> * '''Key''': e4981028bb22bf4ed73a448d4eaac43808c519cb49019587acbc664fcd5e6899<br /> <br /> === [[iBSS]] ===<br /> * '''IV''': 787c2971e153124e645a0b60f3cee272<br /> * '''Key''': 21aeb751ce8fb55bc794ff441b7b843a3c1b342a3d053e5c3e4427ec1bafa808<br /> <br /> === [[Kernelcache]] ===<br /> * '''IV''': d37601b2d0a0729795fff18612f2af28<br /> * '''Key''': f93d1ec6d62b46fccb2acb74067e00857163624176ea1482f69056c66c2b8eb8</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=IPad_2&diff=18077 2011-05-11T02:55:38Z

<p>Johnnyfranks67: </p> <hr /> <div>[[Image:Ipad2.png|right|thumb|iPad 2]]<br /> {{lowercase}}<br /> The iPad 2 was announced on March 2, 2011. It was initially released on March 11 in the United States, and March 25 elsewhere. There are three variants of the iPad 2.<br /> <br /> As of May 10, 2011, the iPad 2 does not have any (publicly released) exploits to run unsigned code.<br /> <br /> * [[K93ap|Wi-Fi only]]<br /> * [[K94ap|GSM model]]<br /> * [[K95ap|CDMA model]]<br /> <br /> == Application processor ==<br /> It makes use of the dual-core 1 GHz[http://www.apple.com/ipad/specs/] [[S5L8940]] CPU (A5 chip).<br /> <br /> == Baseband (3G versions) ==<br /> The [[K94ap|GSM model]] uses the [[X-Gold 618]] baseband chip, same as in the [[N90ap|iPhone 4 GSM model]].<br /> <br /> The [[K95ap|CDMA model]] uses Qualcomm's Gobi chipset, like the [[N90ap|iPhone 4 CDMA model]].<br /> <br /> ==Wireless==<br /> The iPad 2 uses the [[BCM4329]] for [[Bluetooth]] and Wi-Fi communication.<br /> <br /> == Specifications ==<br /> * '''Screen:''' 9.7&quot; 1024x768 LED-backlit IPS display at 132 ppi<br /> * '''Size:''' 9.5 inches (241.2 mm) (height) x 7.31 inches (185.7 mm) (width) x 0.34 inch (8.8 mm) (depth)<br /> * '''Weight:''' 1.33 pounds (601 g) [[K93ap|Wi-Fi model]]; 1.35 pounds (613 g) [[K94ap|GSM model]]; 1.34 pounds (607 g) [[K95ap|CDMA model]]<br /> * '''Battery:''' Up to 10 hours of Internet use, one month of standby<br /> * '''3G:''' UMTS/HSDPA/HSUPA (850, 900, 1900, 2100 MHz); GSM/EDGE (850, 900, 1800, 1900 MHz) [[K94ap|GSM model]]; CDMA EV-DO Rev. A (800, 1900 MHz) [[K95ap|CDMA model]]<br /> * '''Rear camera''': 0.7MP, supporting HD video recording @ 30 FPS<br /> * '''Front camera''': VGA photos and video @ 30 FPS, supporting [[FaceTime]] video calls</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=DurangoVail_8F5166b_(iPad1,1)&diff=15857 2011-02-05T10:16:05Z

<p>Johnnyfranks67: </p> <hr /> <div>== Decryption Keys ==<br /> === Root Filesystem (038-0643-002.dmg) ===<br /> *'''[[VFDecrypt]] Key''': 151e95e585f0e91a2670631647c573b5be26acb37ea59eff5339be78499033a5553e03e4<br /> <br /> === [[Update Ramdisk]] (038-0626-002.dmg) ===<br /> * '''IV''': b7bd49e0485f73fae9f5385be204548d<br /> * '''Key''': e7ee8997a9fd68bce0edfd4e1cff22aca30a3e5f4983c171a6fc0ebd27bb6d67<br /> <br /> === [[Restore Ramdisk]] (038-0632-002.dmg) ===<br /> * '''IV''': fb29f188174a77ebda8210e742c4dfe1<br /> * '''Key''': 177e5c25cd340629e4a793694969c6ce190a1187223300df8f72e7489a4f564e<br /> <br /> === AppleLogo ===<br /> * '''IV''': 13ef35d473b11285cd14ee4bd2036e02 <br /> * '''Key''': 6fe70b4a9537f6a3f955c1dfafe69020e7bae153d2958181df3eaf1f9462a9cf<br /> <br /> === BatteryCharging0 ===<br /> * '''IV''': 4c4eab68692960d7feb0b5e701a90ef1 <br /> * '''Key''': 391558b2bc5b4db0dc21597a53b0081992feea0fb1348eb97a2f433169a1bc74<br /> <br /> === BatteryCharging1 ===<br /> * '''IV''': aac32d989c1c564cb000eda64f8f2e94 <br /> * '''Key''': 569349fb1a7117e48f2ba679f2c3e658f406b3e834dee97fd1ef8eb5ac9aaba8<br /> <br /> === BatteryFull ===<br /> * '''IV''': fe77739db313f6dc40aaeb55682d7344<br /> * '''Key''': 0eac094bc2d2142d308432a98033b92eae77bfbbe3dff46bd423333aec1f6a19<br /> <br /> === BatteryLow0 ===<br /> * '''IV''': e2fc34dc2e1d7985744897c34b6a81f5<br /> * '''Key''': d3cb415521475aa2574aadf7aa6263405c66e99c61cec44d578d5594858d7691<br /> <br /> === BatteryLow1 ===<br /> * '''IV''': ff2e7ec112264a088eaadaec5fd44505<br /> * '''Key''': 13d9398afb4a1579012946b6e85c5bfb62b5c97346764ea67a015af7a9faa9ee<br /> <br /> === DeviceTree ===<br /> * '''IV''': e2b69ab77e43e283b500185969b0360b<br /> * '''Key''': d46baa685d455bbb1398c622a7e11c658bde8716004d76cbedb164e255114991<br /> <br /> === GlyphCharging ===<br /> * '''IV''': 49215969a24a16f7a4ce22625e8e4179<br /> * '''Key''': 05ddd0571e1b29ee2c81a6d4da69b8009367b5e03865f64ea8471f0e7d3bf218<br /> <br /> === GlyphPlugin ===<br /> * '''IV''': bc74cac165c81d5ea2655d172d42b231<br /> * '''Key''': 5ed251f5bc9aedbe9a05d5ae8fef0ee5d86da277c677290613d11a250554cc4d<br /> <br /> === [[iBEC]] ===<br /> * '''IV''': 17dbbf6385541cf3803f8a9a71421ec5<br /> * '''Key''': 8afd73cbcffa1401986384f23f926613cf656617381eb11a4e1e009fc73265a4<br /> <br /> === [[iBoot (Bootloader)|iBoot]] ===<br /> * '''IV''': 1776ba9aad46b6c47f6ac76afec2492d<br /> * '''Key''': bfee293ed82fe6d912deeac83b4bebb90a53d873ad5185607dafcc328fe2e206<br /> <br /> === [[iBSS]] ===<br /> * '''IV''': 1fab5924e925acf5b926f394d48431c9<br /> * '''Key''': 4275deeb32b84852ac1d0fb9db7203fc629e5efdae767534f12eaae3b76d809f<br /> <br /> === [[Kernelcache]] ===<br /> * '''IV''': 27db369177ebafd86161d1ecc5679463<br /> * '''Key''': 635830f23c86fe9abf4626bc0bf11e2d17b4cfdcd7de9017daed7360be0cdd08<br /> <br /> === [[LLB]] ===<br /> * '''IV''': 1ef143e9356ac5136713e40efb187c10<br /> * '''Key''': e5af292fca4e33da0f8fa856f3e77d69936a15cb54bb32c99e66ddef1ab47086<br /> <br /> === RecoveryMode ===<br /> * '''IV''': bd01efc0d4723dc5277b2c40003fa9b2<br /> * '''Key''': b3dbc230e03fb7d272f98d1d053ffb1c9d54e9fa898a8ac79ea7c3bd30668d90</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=DurangoVail_8F5166b_(iPad1,1)&diff=15856 2011-02-05T09:55:11Z

<p>Johnnyfranks67: </p> <hr /> <div>== Decryption Keys ==<br /> === Root Filesystem (038-0643-002.dmg) ===<br /> *'''[[VFDecrypt]] Key''': 151e95e585f0e91a2670631647c573b5be26acb37ea59eff5339be78499033a5553e03e4<br /> <br /> === [[Update Ramdisk]] (038-0626-002.dmg) ===<br /> * '''IV''': b7bd49e0485f73fae9f5385be204548d<br /> * '''Key''': e7ee8997a9fd68bce0edfd4e1cff22aca30a3e5f4983c171a6fc0ebd27bb6d67<br /> <br /> === [[Restore Ramdisk]] (038-0632-002.dmg) ===<br /> * '''IV''': fb29f188174a77ebda8210e742c4dfe1<br /> * '''Key''': 9b4208b539b9914036895413ceaa7564 -- Incorrect length of Key for iPad -- FIX THIS!<br /> <br /> === AppleLogo ===<br /> * '''IV''': 13ef35d473b11285cd14ee4bd2036e02 <br /> * '''Key''': 6fe70b4a9537f6a3f955c1dfafe69020e7bae153d2958181df3eaf1f9462a9cf<br /> <br /> === BatteryCharging0 ===<br /> * '''IV''': 4c4eab68692960d7feb0b5e701a90ef1 <br /> * '''Key''': 391558b2bc5b4db0dc21597a53b0081992feea0fb1348eb97a2f433169a1bc74<br /> <br /> === BatteryCharging1 ===<br /> * '''IV''': aac32d989c1c564cb000eda64f8f2e94 <br /> * '''Key''': 569349fb1a7117e48f2ba679f2c3e658f406b3e834dee97fd1ef8eb5ac9aaba8<br /> <br /> === BatteryFull ===<br /> * '''IV''': fe77739db313f6dc40aaeb55682d7344<br /> * '''Key''': 0eac094bc2d2142d308432a98033b92eae77bfbbe3dff46bd423333aec1f6a19<br /> <br /> === BatteryLow0 ===<br /> * '''IV''': e2fc34dc2e1d7985744897c34b6a81f5<br /> * '''Key''': d3cb415521475aa2574aadf7aa6263405c66e99c61cec44d578d5594858d7691<br /> <br /> === BatteryLow1 ===<br /> * '''IV''': ff2e7ec112264a088eaadaec5fd44505<br /> * '''Key''': 13d9398afb4a1579012946b6e85c5bfb62b5c97346764ea67a015af7a9faa9ee<br /> <br /> === DeviceTree ===<br /> * '''IV''': e2b69ab77e43e283b500185969b0360b<br /> * '''Key''': d46baa685d455bbb1398c622a7e11c658bde8716004d76cbedb164e255114991<br /> <br /> === GlyphCharging ===<br /> * '''IV''': 49215969a24a16f7a4ce22625e8e4179<br /> * '''Key''': 05ddd0571e1b29ee2c81a6d4da69b8009367b5e03865f64ea8471f0e7d3bf218<br /> <br /> === GlyphPlugin ===<br /> * '''IV''': bc74cac165c81d5ea2655d172d42b231<br /> * '''Key''': 5ed251f5bc9aedbe9a05d5ae8fef0ee5d86da277c677290613d11a250554cc4d<br /> <br /> === [[iBEC]] ===<br /> * '''IV''': 17dbbf6385541cf3803f8a9a71421ec5<br /> * '''Key''': 8afd73cbcffa1401986384f23f926613cf656617381eb11a4e1e009fc73265a4<br /> <br /> === [[iBoot (Bootloader)|iBoot]] ===<br /> * '''IV''': 1776ba9aad46b6c47f6ac76afec2492d<br /> * '''Key''': bfee293ed82fe6d912deeac83b4bebb90a53d873ad5185607dafcc328fe2e206<br /> <br /> === [[iBSS]] ===<br /> * '''IV''': 1fab5924e925acf5b926f394d48431c9<br /> * '''Key''': 4275deeb32b84852ac1d0fb9db7203fc629e5efdae767534f12eaae3b76d809f<br /> <br /> === [[Kernelcache]] ===<br /> * '''IV''': 27db369177ebafd86161d1ecc5679463<br /> * '''Key''': 635830f23c86fe9abf4626bc0bf11e2d17b4cfdcd7de9017daed7360be0cdd08<br /> <br /> === [[LLB]] ===<br /> * '''IV''': 1ef143e9356ac5136713e40efb187c10<br /> * '''Key''': e5af292fca4e33da0f8fa856f3e77d69936a15cb54bb32c99e66ddef1ab47086<br /> <br /> === RecoveryMode ===<br /> * '''IV''': bd01efc0d4723dc5277b2c40003fa9b2<br /> * '''Key''': b3dbc230e03fb7d272f98d1d053ffb1c9d54e9fa898a8ac79ea7c3bd30668d90</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Limera1n&diff=10404 2010-10-11T03:34:46Z

<p>Johnnyfranks67: </p> <hr /> <div>==Introduction==<br /> [[Image:Ra1ndrop.png|right]]This is [[User:Geohot|geohot's]] [[jailbreak]] utility. It uses his undisclosed exploit, along with [[User:Comex|comex's]] [[userland exploit]], to achieve an [[untethered jailbreak]] on newer devices.<br /> * [[N88ap|iPhone 3GS]] (New [[bootrom]] is now working with Beta 3)<br /> * [[N90ap|iPhone 4]]<br /> * [[N72ap|iPod touch 2G]] (support announced, not released)<br /> * [[N18ap|iPod touch 3G]]<br /> * [[N81ap|iPod touch 4G]]<br /> * [[K48ap|iPad]]<br /> <br /> It has been demonstrated multiple times by [[User:Geohot|geohot]], using blog posts on his now private blog. [[User:Geohot|Geohot]] [http://1.bp.blogspot.com/_NJ4JFBfr1tY/TDgkAsTQEmI/AAAAAAAAAcw/ZNHDxMNNL4Y/s1600/iphone4.png showed off a high-res picture of Cydia on an iPhone 4]. He [http://www.youtube.com/watch?v=__TR86PLiHw displayed an iPod touch 3G with an untethered jailbreak] that met MuscleNerd's requirements for a good video. In addition, he took a [http://4.bp.blogspot.com/_NJ4JFBfr1tY/S7_OvGMqJMI/AAAAAAAAAcE/R5WLrCizGw0/s1600/ipad_jb.jpg picture of Cydia and blackra1n icons on his iPad's SpringBoard].<br /> <br /> [[limera1n]] beta 1 was released on October 9, 2010, delaying the release of [[greenpois0n]], because [[greenpois0n]] has to be rewritten to use the [[limera1n]] exploit instead of [[SHAtter]]. It only supports Windows at the moment and some devices have issues.<br /> <br /> ==Release text==<br /> &lt;center&gt;limera1n, 6 months in the making&lt;br&gt;<br /> iPhone 3GS, iPod Touch 3G, iPad, iPhone 4, iPod Touch 4G&lt;br&gt;<br /> 4.0-4.1 and beyond+++&lt;br&gt;<br /> limera1n is unpatchable&lt;br&gt;<br /> untethered thanks to jailbreakme star '''comex'''&lt;br&gt;<br /> released today to get chronicdev to do the right thing&lt;br&gt;<br /> brought to you by '''geohot'''&lt;br&gt;<br /> hacktivates&lt;br&gt;<br /> Mac coming soon&lt;br&gt;<br /> follow the instructions in the box, sadly limera1n isn't one click&lt;br&gt;<br /> that's the price of unpatchability&lt;br&gt;<br /> as usual, donations appreciated but not required&lt;br&gt;<br /> still in beta, pardon my ragged edges&lt;br&gt;<br /> AppleTV is technically supported, but theres no apps yet&lt;br&gt;<br /> zero pictures of my face&lt;/center&gt;<br /> <br /> ==Credit==<br /> *[[User:Geohot|geohot]] - the program itself, and [[bootrom exploit]].<br /> *[[User:Comex|comex]] - [[userland exploit]] that allows [[limera1n]] to run [[untethered]].<br /> <br /> ==Changelog==<br /> {| class=&quot;wikitable&quot; style=&quot;border-collapse:collapse;&quot; border=&quot;1&quot;<br /> |-<br /> |&lt;center&gt;'''Version'''&lt;/center&gt;<br /> |&lt;center&gt;'''Release time'''&lt;/center&gt;<br /> |&lt;center&gt;'''md5'''&lt;/center&gt;<br /> |&lt;center&gt;'''Change comment'''&lt;/center&gt;<br /> |-<br /> |RC1 beta 1<br /> |9 Oct 2010 XX:XX GMT<br /> |2f2b09a6ed5c5613d5361d8a9d0696b6<br /> |First release.<br /> |-<br /> |RC1 beta 2<br /> |9 Oct 2010 XX:XX GMT<br /> |a70dccb3dfc0e505687424184dc3d1ce<br /> |Fixed kernel patching magic. Rerun BETA2+ over BETA1.<br /> |-<br /> |RC1 beta 3<br /> |9 Oct 2010 XX:XX GMT<br /> |81730090f7de1576268ee8c2407c3d35<br /> |Fixed an issue with [[N88ap|iPhone 3GS]] ([[iBoot-359.3.2|new bootrom]])<br /> |-<br /> |RC1 beta 4<br /> |9 Oct 2010 XX:XX GMT<br /> |d901c4b3a544983f095b0d03eb94e4db<br /> |Uninstall fixed, respring fixed<br /> |}<br /> <br /> ==Technical Information==<br /> === Basics ===<br /> * This does not use [[SHAtter]].<br /> * This uses a [[bootrom exploit]] to achieve the [[tethered jailbreak]] and [[unsigned code execution]].<br /> * This uses a userland exploit to make the jailbreak [[Untethered jailbreak|untethered]], which [[User:Geohot|geohot]] obtained under questionable circumstances from [[User:Comex|comex]].<br /> <br /> === Exploits ===<br /> [[limera1n]] uses an undisclosed [[bootrom exploit]].<br /> <br /> === Process ===<br /> The jailbreak appears to execute something like the following (in no particular order):<br /> * In [[recovery1]],<br /> &quot;setenv debug-uarts 1<br /> setenv auto-boot false<br /> saveenv&quot;<br /> * In [[DFU]], it uploads a [[payload]].<br /> * In [[recovery2]], it uploads another [[payload]] and its [[ramdisk]].<br /> <br /> ==Controversy==<br /> The release of this jailbreak is specifically designed to pressure [[Chronic Dev]] into not releasing the SHAtter exploit, instead implementing the [[limera1n]] exploit into [[greenpois0n]]. Now that [[User:Geohot|geohot]] has released [[limera1n]], releasing[[SHAtter]] would uselessly disclose another [[bootrom exploit]] to Apple.<br /> <br /> [[User:Geohot|geohot]]'s rationale is that Apple has already discovered, through internal testing, the [[limera1n]] exploit, making it very likely that it will be fixed in the next bootrom. Because iBoot code is present both in the bootrom and firmware, and because firmware is refreshed much more often that bootrom code, any fix in this code branch would appear first in firmware. geohot observed his [[limera1n]] exploit was closed in firmware and concluded that it would almost certainly be fixed in the next bootrom revision, whereas SHAtter still has a chance of remaining usefull in iPhone 5 should it not be disclosed at this time.<br /> <br /> Attention: [http://twitter.com/realgeohot This] Twitter account is fake, and is not geohot.<br /> <br /> ==External Links==<br /> * [http://loadingchanges.com/wp-content/uploads/2010/10/limetime.jpg Picture of limera1n in action]<br /> * [http://limera1n.com/ Actual Site http://limera1n.com/]<br /> * [http://theiphonewiki.com/limera1n Mirror Site http://theiphonewiki.com/limera1n]<br /> * [http://www.mediafire.com/?5sovoo41rbcdspw Limera1n RC Beta2 Dump on Mediafire]<br /> * [http://www.pastie.org/1210054 Veence's explanation for release]</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Baker_8B117_(iPod3,1)&diff=9255 2010-09-19T23:27:11Z

<p>Johnnyfranks67: // Grabbed By: demize95 with iKeys 0.1</p> <hr /> <div>This is iOS 4.1. It is Apple's first major upgrade for iOS 4. It features the new GameCenter social gaming network created by Apple.<br /> <br /> ==Decryption Keys==<br /> === Root Filesystem (018-7116-114.dmg) ===<br /> *'''[[VFDecrypt Keys|VFDecrypt]] Key''': 69e2ca7a250765c95a703081d1195e681fbe82f31162b79fd2b70754629b0352694b9eda<br /> <br /> === [[Update Ramdisk]] (018-7108-078.dmg) ===<br /> * '''IV''': 6800a52c8761b30b001327ea9b918653<br /> * '''Key''': 53e72495ea0d5dba53a1eae7529d6a95e8eb1d5d9185298c0f3323bc2c27f26f<br /> <br /> === [[Restore Ramdisk]] (018-7081-078.dmg) ===<br /> * '''IV''': 1edc4378f31ce728a2412ff93c78b8dd<br /> * '''Key''': 425f8a7bdac80a9678c78317a0ddbb91abb52a2fd1ff45f46c3e6db392155db9<br /> <br /> === AppleLogo ===<br /> * '''IV''': ca973250685c36b6844616be183b5c60<br /> * '''Key''': 3bec85837804013e98dba2048e4bd281c613aa6dc783186da72f32415a1caa7f<br /> <br /> === DeviceTree ===<br /> * '''IV''': <br /> * '''Key''': <br /> <br /> === [[iBEC]] ===<br /> * '''IV''': 38a8dc4f47766c8d4124aa5499530d86<br /> * '''Key''': 4b593a863a11961acfbccb5f3448506ac361113e3717cc03890628a071fec26c<br /> <br /> === [[iBoot]] ===<br /> * '''IV''': e070842f5a94e22c5207b06797080618<br /> * '''Key''': 71eaa79911ba68270c4c2cb2df42d99e0aba2b26e54e27357c3871eadb255c40<br /> <br /> === [[iBSS]] ===<br /> * '''IV''': 45e620eb1cabe17cb5e25018e628160e<br /> * '''Key''': 1b45e1726a88d3e89a203a59544b853c531758dd3c6f15fd9fa24cfa4ebc949d<br /> <br /> === [[Kernelcache]] ===<br /> * '''IV''': e37e3ff09da89fbc3e1be899df0cf45d<br /> * '''Key''': 2786c969cef8dfe1088f19f66c3f083c36a38401f80a2e493334af83f3dfa026<br /> <br /> === [[LLB]] ===<br /> * '''IV''': d3c29a93e8c8816fe5b1355675f39f68<br /> * '''Key''': 99962b8f8bacb9bc409a490316e46c5121462dfbe5829218f5aed2a5255ea023<br /> <br /> === RecoveryMode ===<br /> * '''IV''': e767de2c5c9bfef2efda9955e21ab757<br /> * '''Key''': 574584d7a7308c1f7abfe93bccf7553fa472ca48207c9a31c24a96fa37ee5c44</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Firmware&diff=6089 2010-04-17T16:00:40Z

<p>Johnnyfranks67: /* iPad */ Changed &quot;no&quot; to &quot;yes&quot; for the iPad to be jailbroken</p> <hr /> <div>This is the operating system the iPhone/iPod Touch runs. Latest Apple download links can be found [http://www.itunes.com/version here].<br /> <br /> ==Comparison of firmware versions==<br /> <br /> ===[[M68ap|iPhone]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| [[Baseband]]<br /> !width=&quot;210&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;140&quot;| Comments<br /> !width=&quot;95&quot;| Can be [[jailbreak|jailbroken]]?<br /> !width=&quot;95&quot;| Can be [[unlock|unlocked]] OTB?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 1.0<br /> | [[Alpine 1A420]]<br /> | [http://img399.imageshack.us/i/iphone2go0.jpg/ 03.06.01_G]<br /> | iphoneproto.zip<br /> | &lt;code&gt;6e798e906c6590a7521ef89b731569be6d05b3aa&lt;/code&gt;<br /> | Prototype; [http://forums.macrumors.com/showthread.php?t=627449 macrumors]<br /> | {{yes}}<br /> | {{no}}<br /> | 109,813,128<br /> |-<br /> | 1.0.0<br /> | Heavenly 1A543a<br /> | 03.12.06_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3538.20070629.B7vXa/iPhone1,1_1.0_1A543a_Restore.ipsw iPhone1,1_1.0_1A543a_Restore.ipsw]<br /> | &lt;code&gt;fb8bb3ee2e9a997affbb97868599f2995c78209c&lt;/code&gt;<br /> | Initial US shipment.<br /> | {{yes}}<br /> | {{yes}}<br /> | 95,604,348<br /> |-<br /> | 1.0.1<br /> | Heavenly 1C25<br /> | 03.12.06_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3614.20070731.Nt6Y7/iPhone1,1_1.0.1_1C25_Restore.ipsw iPhone1,1_1.0.1_1C25_Restore.ipsw]<br /> | &lt;code&gt;a00b85a7a55d62a94be5fbf5effbc42fd63f3097&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 95,627,958<br /> |-<br /> | 1.0.2<br /> | Heavenly 1C28<br /> | 03.14.08_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3823.20070821.vormd/iPhone1,1_1.0.2_1C28_Restore.ipsw iPhone1,1_1.0.2_1C28_Restore.ipsw]<br /> | &lt;code&gt;7f5c0ff1f84a0202b75a55c3fcb362e415334d1e&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 95,627,324<br /> |-<br /> | 1.1.1<br /> | Snowbird 3A109a<br /> | 04.01.13_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3883.20070927.In76t/iPhone1,1_1.1.1_3A109a_Restore.ipsw iPhone1,1_1.1.1_3A109a_Restore.ipsw]<br /> | &lt;code&gt;d441dd1c71ce18f25d8fc4faa71c1e6eaa02d02c&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 159,668,150<br /> |-<br /> | 1.1.2<br /> | Oktoberfest 3B48b<br /> | 04.02.13_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4037.20071107.5Bghn/iPhone1,1_1.1.2_3B48b_Restore.ipsw iPhone1,1_1.1.2_3B48b_Restore.ipsw]<br /> | &lt;code&gt;797c02e7d660940e8d9a16cc7229ccf3f67dd8b1&lt;/code&gt;<br /> | Initial Euro shipment.<br /> | {{yes}}<br /> | {{yes}}<br /> | 167,927,501<br /> |-<br /> | 1.1.3<br /> | Little Bear 4A93<br /> | 04.03.13_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4061.20080115.4Fvn7/iPhone1,1_1.1.3_4A93_Restore.ipsw iPhone1,1_1.1.3_4A93_Restore.ipsw]<br /> | &lt;code&gt;b3dec7580bd00dc4faf28449d9618ef40aeacc96&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 169,950,551<br /> |-<br /> | 1.1.4<br /> | Little Bear 4A102<br /> | 04.04.05_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4313.20080226.Sw39i/iPhone1,1_1.1.4_4A102_Restore.ipsw iPhone1,1_1.1.4_4A102_Restore.ipsw]<br /> | &lt;code&gt;000811bac096011b50ebf6ec1ec2285b62fda4cb&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 169,946,442<br /> |-<br /> | 2.0<br /> | Big Bear 5A347<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4956.20080710.V50OI/iPhone1,1_2.0_5A347_Restore.ipsw iPhone1,1_2.0_5A347_Restore.ipsw]<br /> | &lt;code&gt;9c510a3cfce789fa5f92a8f763c231bac82ff6d4&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 228,768,637<br /> |-<br /> | 2.0.1<br /> | Big Bear 5B108<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5135.20080729.Vfgtr/iPhone1,1_2.0.1_5B108_Restore.ipsw iPhone1,1_2.0.1_5B108_Restore.ipsw]<br /> | &lt;code&gt;61de6a2bd6ceddc9ecabad1671b91a59b3824bc4&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 254,048,068<br /> |-<br /> | 2.0.2<br /> | Big Bear 5C1<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5246.20080818.2V0hO/iPhone1,1_2.0.2_5C1_Restore.ipsw iPhone1,1_2.0.2_5C1_Restore.ipsw]<br /> | &lt;code&gt;b84b57bea919bdc720287ec908c1378e7d7b5e1b&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 253,589,000<br /> |-<br /> | 2.1<br /> | Sugar Bowl 5F136<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5202.20080909.gkbEj/iPhone1,1_2.1_5F136_Restore.ipsw iPhone1,1_2.1_5F136_Restore.ipsw]<br /> | &lt;code&gt;353b7745767b85932e14e262e69463620939bdf7&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 242,171,241<br /> |-<br /> | 2.2<br /> | Timberline 5G77<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5779.20081120.Pt5yH/iPhone1,1_2.2_5G77_Restore.ipsw iPhone1,1_2.2_5G77_Restore.ipsw]<br /> | &lt;code&gt;cbfc6ff886ce89868a55547b9fb980dbf92e6418&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 257,576,980<br /> |-<br /> | 2.2.1<br /> | SUTimberline 5H11<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5830.20090127.Mmni6/iPhone1,1_2.2.1_5H11_Restore.ipsw iPhone1,1_2.2.1_5H11_Restore.ipsw]<br /> | &lt;code&gt;43b95ebe1e51f8d30eae916053396595c08440d3&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 257,593,705<br /> |-<br /> | 3.0<br /> | [[Kirkwood 7A341 (iPhone)|Kirkwood 7A341]]<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6580.20090617.XsP76/iPhone1,1_3.0_7A341_Restore.ipsw iPhone1,1_3.0_7A341_Restore.ipsw]<br /> | &lt;code&gt;2afd3f8ede17390737f508473ed205506a0bd23f&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 240,394,111<br /> |-<br /> | 3.0.1<br /> | [[Kirkwood 7A400 (iPhone)|Kirkwood 7A400]]<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6974.20090731.Cf4Tg/iPhone1,1_3.0.1_7A400_Restore.ipsw iPhone1,1_3.0.1_7A400_Restore.ipsw]<br /> | &lt;code&gt;34c391fbbc7b31b159372766de39ce5c9cc26ebb&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 240,439,502<br /> |-<br /> | 3.1<br /> | [[Northstar 7C144 (iPhone)|Northstar 7C144]]<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6605.20090909.PQ3ws/iPhone1,1_3.1_7C144_Restore.ipsw iPhone1,1_3.1_7C144_Restore.ipsw]<br /> | &lt;code&gt;b7b5f436f81c6f855410e8b44a3d432ccaacd6fc&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes}}<br /> | 252,536,460<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPhone)|Northstar 7D11]]<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7268.20091008.32pNe/iPhone1,1_3.1.2_7D11_Restore.ipsw iPhone1,1_3.1.2_7D11_Restore.ipsw]<br /> | &lt;code&gt;e4a1171542dbbd3093516d9c02047b9f7e143050&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes}}<br /> | 252,515,888<br /> |-<br /> | 3.1.3<br /> | [[SUNorthstarTwo 7E18 (iPhone)|SUNorthstarTwo 7E18]]<br /> | 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7481.20100202.4orot/iPhone1,1_3.1.3_7E18_Restore.ipsw iPhone1,1_3.1.3_7E18_Restore.ipsw]<br /> | &lt;code&gt;eab23a7f8d2a17cb71046c50fc5f67ec390a3c2b&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes}}<br /> | 238,319,275<br /> |}<br /> <br /> ===[[N82ap|iPhone 3G]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| [[Baseband]]<br /> !width=&quot;210&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;140&quot;| Comments<br /> !width=&quot;95&quot;| Can be [[jailbreak|jailbroken]]?<br /> !width=&quot;95&quot;| Can be [[unlock|unlocked]] OTB?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 2.0<br /> | Big Bear 5A345<br /> | 01.45.00<br /> | No download available<br /> |<br /> | Initial shipment.<br /> | {{yes}}<br /> | {{no}}<br /> | <br /> |-<br /> | 2.0<br /> | Big Bear 5A347<br /> | 01.45.00<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4955.20080710.bgt53/iPhone1,2_2.0_5A347_Restore.ipsw iPhone1,2_2.0_5A347_Restore.ipsw]<br /> | &lt;code&gt;af9506ca0034e462674f9f59c5406f159eaf9fc1&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{no}}<br /> | 235,957,125<br /> |-<br /> | 2.0.1<br /> | Big Bear 5B108<br /> | 01.48.02<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5134.20080729.Q2W3E/iPhone1,2_2.0.1_5B108_Restore.ipsw iPhone1,2_2.0.1_5B108_Restore.ipsw]<br /> | &lt;code&gt;e81c7ac7e334a3e9d81b3b47894bfaa1ec495482&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{no}}<br /> | 261,224,227<br /> |-<br /> | 2.0.2<br /> | Big Bear 5C1<br /> | 02.08.01<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5241.20080818.t5Fv3/iPhone1,2_2.0.2_5C1_Restore.ipsw iPhone1,2_2.0.2_5C1_Restore.ipsw]<br /> | &lt;code&gt;bef7fef954293046420fbcf947379839178a195b&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{no}}<br /> | 260,761,030<br /> |-<br /> | 2.1<br /> | Sugar Bowl 5F136<br /> | 02.11.07<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5198.20080909.K3294/iPhone1,2_2.1_5F136_Restore.ipsw iPhone1,2_2.1_5F136_Restore.ipsw]<br /> | &lt;code&gt;c6957dcbf2a95ccfd6dce374a727b1b7700a9043&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{no}}<br /> | 249,341,655<br /> |-<br /> | 2.2<br /> | Timberline 5G77<br /> | 02.28.00<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5778.20081120.Aqw4R/iPhone1,2_2.2_5G77_Restore.ipsw iPhone1,2_2.2_5G77_Restore.ipsw]<br /> | &lt;code&gt;f67f8b2b842428bf89456cda0c2d5cf954d111a4&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes|[[Ultrasn0w|yellowsn0w]]}}<br /> | 258,342,348<br /> |-<br /> | 2.2.1<br /> | SUTimberline 5H11<br /> | 02.30.03<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5828.20090127.aQLi8/iPhone1,2_2.2.1_5H11_Restore.ipsw iPhone1,2_2.2.1_5H11_Restore.ipsw]<br /> | &lt;code&gt;e0098e6fab5c90b59e067e03ae3ccd4a7cd0f39c&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{no}}<br /> | 258,359,073<br /> |-<br /> | 3.0<br /> | [[Kirkwood 7A341 (iPhone 3G)|Kirkwood 7A341]]<br /> | 04.26.08<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6578.20090617.VfgtU/iPhone1,2_3.0_7A341_Restore.ipsw iPhone1,2_3.0_7A341_Restore.ipsw]<br /> | &lt;code&gt;94f1fb43de12bff0f168ce690b7e794cc6220ae3&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes|[[Ultrasn0w|ultrasn0w]]}}<br /> | 241,229,233<br /> |-<br /> | 3.0.1<br /> | [[Kirkwood 7A400 (iPhone 3G)|Kirkwood 7A400]]<br /> | 04.26.08<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6972.20090731.Zx3Rr/iPhone1,2_3.0.1_7A400_Restore.ipsw iPhone1,2_3.0.1_7A400_Restore.ipsw]<br /> | &lt;code&gt;a148ff39fa4dea499e7a9dd007b63e90c4f56666&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes|[[Ultrasn0w|ultrasn0w]]}}<br /> | 241,274,617<br /> |-<br /> | 3.1<br /> | [[Northstar 7C144 (iPhone 3G)|Northstar 7C144]]<br /> | 05.11.07<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6600.20090909.AwndZ/iPhone1,2_3.1_7C144_Restore.ipsw iPhone1,2_3.1_7C144_Restore.ipsw]<br /> | &lt;code&gt;9b3b3c148170b012012278efda9ff5c38282d559&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes|[[blacksn0w]]}}<br /> | 253,361,339<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPhone 3G)|Northstar 7D11]]<br /> | 05.11.07<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7265.20091008.Xsd32/iPhone1,2_3.1.2_7D11_Restore.ipsw iPhone1,2_3.1.2_7D11_Restore.ipsw]<br /> | &lt;code&gt;b1a6ab2771bb5da372ba75a8fa3e1d72b71359d0&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes|[[blacksn0w]]}}<br /> | 253,340,786<br /> |-<br /> | 3.1.3<br /> | [[SUNorthstarTwo 7E18 (iPhone 3G)|SUNorthstarTwo 7E18]]<br /> | 05.12.01<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7468.20100202.pbnrt/iPhone1,2_3.1.3_7E18_Restore.ipsw iPhone1,2_3.1.3_7E18_Restore.ipsw]<br /> | &lt;code&gt;f5950afca546f93e281ba3cdb08bc0cfed7f0896&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{no}}<br /> | 239,139,281<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> Due to a new bootrom designed to close the [[0x24000 Segment Overflow]], an iPhone 3GS produced around year 2009 week 40/41 or later is currently limited to a '''tethered jailbreak'''.<br /> <br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| [[Baseband]]<br /> !width=&quot;210&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;140&quot;| Comments<br /> !width=&quot;95&quot;| Can be [[jailbreak|jailbroken]]?<br /> !width=&quot;95&quot;| Can be [[unlock|unlocked]] OTB?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 3.0<br /> | [[Kirkwood 7A341 (iPhone 3GS)|Kirkwood 7A341]]<br /> | 04.26.08<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6582.20090617.LlI87/iPhone2,1_3.0_7A341_Restore.ipsw iPhone2,1_3.0_7A341_Restore.ipsw] <br /> | &lt;code&gt;d8534408c8679c830fd0c4e36ef9762c11ef73df&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes}}<br /> | {{yes|[[Ultrasn0w|ultrasn0w]]}}<br /> | 312,292,933<br /> |-<br /> | 3.0.1<br /> | Kirkwood 7A400<br /> | 04.26.08<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6976.20090731.Vgbt5/iPhone2,1_3.0.1_7A400_Restore.ipsw iPhone2,1_3.0.1_7A400_Restore.ipsw]<br /> | &lt;code&gt;30006575af931e3da0521febace005152cdb8853&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes|[[Ultrasn0w|ultrasn0w]]}}<br /> | 312,330,244<br /> |-<br /> | 3.1<br /> | [[Northstar 7C144 (iPhone 3GS)|Northstar 7C144]]<br /> | 05.11.07<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6609.20090909.mwws4/iPhone2,1_3.1_7C144_Restore.ipsw iPhone2,1_3.1_7C144_Restore.ipsw]<br /> | &lt;code&gt;527c74f87588afa1d69c1e2c08eedc88f113013a&lt;/code&gt;<br /> | Installed on phones produced week 37.<br /> | {{yes}}<br /> | {{yes|[[blacksn0w]]}}<br /> | 321,011,474<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPhone 3GS)|Northstar 7D11]]<br /> | 05.11.07<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7270.20091008.phn32/iPhone2,1_3.1.2_7D11_Restore.ipsw iPhone2,1_3.1.2_7D11_Restore.ipsw]<br /> | &lt;code&gt;6998bb7d9e869b2d89a08853312f9457d070fb1f&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes|[[blacksn0w]]}}<br /> | 321,015,700<br /> |-<br /> | 3.1.3<br /> | [[SUNorthstarTwo 7E18 (iPhone 3GS)|SUNorthstarTwo 7E18]]<br /> | 05.12.01<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7472.20100202.8tugj/iPhone2,1_3.1.3_7E18_Restore.ipsw iPhone2,1_3.1.3_7E18_Restore.ipsw]<br /> | &lt;code&gt;8cb3775e62c6f72059a962bf891b4e145b965052&lt;/code&gt;<br /> |<br /> | {{no|No, for OTB phones}}<br /> | {{no}}<br /> | 305,122,343<br /> |}<br /> <br /> ===[[N45ap|iPod touch (1st generation)]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;168&quot;| Build<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;100&quot;| Can be [[jailbreak|jailbroken]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 1.1.0<br /> | Snowbird 3A100a<br /> | No download available<br /> |<br /> | Initial shipment.<br /> | {{yes}}<br /> |<br /> |-<br /> | 1.1.0<br /> | Snowbird 3A101a<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-3882.20070910.N8uyT/iPod1,1_1.1_3A101a_Restore.ipsw iPod1,1_1.1_3A101a_Restore.ipsw]<br /> | &lt;code&gt;9b0d83c7f8b4328174a3f31e0e93f60e591ae143&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 157,890,186<br /> |-<br /> | 1.1.1<br /> | Snowbird 3A110a<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-3932.20070927.p23dD/iPod1,1_1.1.1_3A110a_Restore.ipsw iPod1,1_1.1.1_3A110a_Restore.ipsw]<br /> | &lt;code&gt;84bbc6ea8bf29745195bc9926c1874f7c2a36f32&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 157,906,686<br /> |-<br /> | 1.1.2<br /> | Oktoberfest 3B48b<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4036.20071107.9g3DF/iPod1,1_1.1.2_3B48b_Restore.ipsw iPod1,1_1.1.2_3B48b_Restore.ipsw]<br /> | &lt;code&gt;108d8ffe9ea75e61cd5e57170ad388b7fa00d923&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 165,567,897<br /> |-<br /> | 1.1.3<br /> | Little Bear 4A93<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/061-4060.20080115.9Iuh5/iPod1,1_1.1.3_4A93_Restore.ipsw iPod1,1_1.1.3_4A93_Restore.ipsw]<br /> | &lt;code&gt;8dca23eec69d5ae58fbf3d4a23276e46cbb2e3c6&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 173,511,411<br /> |-<br /> | 1.1.4<br /> | Little Bear 4A102<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4312.20080226.Btu45/iPod1,1_1.1.4_4A102_Restore.ipsw iPod1,1_1.1.4_4A102_Restore.ipsw]<br /> | &lt;code&gt;c148d1eb1c979bb6434175411d4a372103a4fdd2&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 173,519,589<br /> |-<br /> | 1.1.5<br /> | Little Bear 4B1<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4841.20080714.bgy8O/iPod1,1_1.1.5_4B1_Restore.ipsw iPod1,1_1.1.5_4B1_Restore.ipsw]<br /> | &lt;code&gt;1b818911316e4248ee01d3ec67f9d39afc3db240&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 173,519,637<br /> |-<br /> | 2.0<br /> | Big Bear 5A347<br /> | Download Link Prohibited<br /> | &lt;code&gt;ae82798e85f9953b0f4798bad36187cb020c9d22&lt;/code&gt;<br /> | 2.0+ is a paid upgrade series<br /> | {{yes}}<br /> | 233,409,573<br /> |-<br /> | 2.0.1<br /> | Big Bear 5B108<br /> | Download Link Prohibited<br /> | &lt;code&gt;a81b6e7af4b85ef436d047f9da57c0f694d8964a&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 258,660,321<br /> |-<br /> | 2.0.2<br /> | Big Bear 5C1<br /> | Download Link Prohibited<br /> | &lt;code&gt;c8b6f9fefa3f3777c56285dfe4c735b1e08a81a2&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 258,201,218<br /> |-<br /> | 2.1<br /> | Sugar Bowl 5F137<br /> | Download Link Prohibited<br /> | &lt;code&gt;fc7f6d0972927df502ffca47438ca75dcccffaf3&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 251,155,156<br /> |-<br /> | 2.2<br /> | Timberline 5G77<br /> | Download Link Prohibited<br /> | &lt;code&gt;081a7de363230fb38d0ce092cbbe42f2a50c8a5f&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 260,186,851<br /> |-<br /> | 2.2.1<br /> | SUTimberline 5H11<br /> | Download Link Prohibited<br /> | &lt;code&gt;fc69be9e421bc0630567184506ab771f6b7ef68b&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 260,166,688<br /> |-<br /> | 3.0<br /> | Kirkwood 7A341<br /> | Download Link Prohibited<br /> | &lt;code&gt;dff2bd14931225908a360fb8e60a336f17d2dd6d&lt;/code&gt;<br /> | 3.0+ is a paid upgrade series<br /> | {{yes}}<br /> | 242,458,552<br /> |-<br /> | 3.1.1<br /> | Northstar 7C145<br /> | Download Link Prohibited<br /> | &lt;code&gt;c6270780c166db4c9f4f0a7fa945754a1f9fe7e8&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 249,755,862<br /> |-<br /> | 3.1.2<br /> | Northstar 7D11<br /> | Download Link Prohibited<br /> | &lt;code&gt;7367dd9ba58a3b9777307368a0128e696fdfc9a6&lt;/code&gt;<br /> | <br /> | {{yes}} <br /> | 249,780,497<br /> |-<br /> | 3.1.3<br /> | SUNorthstarTwo 7E18<br /> | Download Link Prohibited<br /> | &lt;code&gt;5f897990f19d2f093b35e0813d7d77806404fb1f&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 235,678,189<br /> |}<br /> <br /> ===[[N72ap|iPod touch (2nd generation)]]===<br /> Due to a new bootrom designed to close the [[0x24000 Segment Overflow]], an iPod touch 2G with a model number beginning with &quot;MC&quot; is currently limited to a tethered jailbreak.<br /> <br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;168&quot;| Build<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;100&quot;| Can be [[jailbreak|jailbroken]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 2.1.1<br /> | [[Sugar Bowl 5F138]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-5494.20080909.8i9o0/iPod2,1_2.1.1_5F138_Restore.ipsw iPod2,1_2.1.1_5F138_Restore.ipsw]<br /> | &lt;code&gt;c3c700be49ad227d1152188e7c1e46b8958fd1e4&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes}}<br /> | 282,083,944<br /> |-<br /> | 2.2<br /> | Timberline 5G77a<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/061-5358.20081120.Gtghy/iPod2,1_2.2_5G77a_Restore.ipsw iPod2,1_2.2_5G77a_Restore.ipsw]<br /> | &lt;code&gt;34a0a489605f34d6cc6c9954edcaaf9a050deedc&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 291,123,491<br /> |-<br /> | 2.2.1<br /> | SUTimberline 5H11a<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5863.20090127.rt56K/iPod2,1_2.2.1_5H11a_Restore.ipsw iPod2,1_2.2.1_5H11a_Restore.ipsw]<br /> | &lt;code&gt;9af5625ea34acdd8abeb6fce71a72651d0c815d5&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 291,140,244<br /> |-<br /> | 3.0<br /> | [[Kirkwood 7A341 (iPod touch 2G)|Kirkwood 7A341]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;0f7fc76d9b9aa826b5ab14be9821a315d3d9dc42&lt;/code&gt;<br /> | 3.0+ is a paid upgrade series<br /> | {{yes}}<br /> | 270,315,364<br /> |-<br /> | 3.1.1<br /> | [[Northstar 7C145 (iPod touch 2G)|Northstar 7C145]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;e0d8800a4fc7cc5be6976ddbceb43c2d2a7120d7&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 277,753,989<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPod touch 2G)|Northstar 7D11]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;e7c83d4a5baec0e81816ae1cd1caf9a4dc38ebf0&lt;/code&gt;<br /> | <br /> | {{yes}} <br /> | 277,794,671<br /> |-<br /> | 3.1.3<br /> | [[SUNorthstarTwo 7E18 (iPod touch 2G)|SUNorthstarTwo 7E18]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;5f4f5c01eda2f811f73167e7d1f82dbeed82367b&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 263,275,211<br /> |}<br /> <br /> ===[[N18AP|iPod touch (3rd generation)]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;168&quot;| Build<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;100&quot;| Can be [[jailbreak|jailbroken]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 3.1.1<br /> | [[Northstar 7C145 (iPod touch 3G)|Northstar 7C145]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-7163.20090909.NtstR/iPod3,1_3.1.1_7C145_Restore.ipsw iPod3,1_3.1.1_7C145_Restore.ipsw]<br /> | &lt;code&gt;a3eddbe2cf77858bae7087dc8b2035f0d3097e57&lt;/code&gt;<br /> | Initial shipment.<br /> | style=&quot;background:yellow; color:black;&quot; class=&quot;table-yes&quot; | Tethered<br /> <br /> | 311,702,789<br /> |-<br /> | 3.1.1<br /> | [[Northstar 7C145 (iPod touch 3G)|Northstar 7C146]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7238.20090918.23GhT/iPod3,1_3.1.1_7C146_Restore.ipsw iPod3,1_3.1.1_7C146_Restore.ipsw]<br /> | &lt;code&gt;f66a7286b261137f25ddbbd84047f9a7ea181904&lt;/code&gt;<br /> | <br /> | style=&quot;background:yellow; color:black;&quot; class=&quot;table-yes&quot; | Tethered<br /> | 311,690,768<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPod touch 3G)|Northstar 7D11]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7271.20091008.Tch23/iPod3,1_3.1.2_7D11_Restore.ipsw iPod3,1_3.1.2_7D11_Restore.ipsw]<br /> | &lt;code&gt;02dcee28d788d594a2939ab564f4f183af6ccdf2&lt;/code&gt;<br /> | <br /> | style=&quot;background:yellow; color:black;&quot; class=&quot;table-yes&quot; | Tethered<br /> | 311,740,034<br /> |-<br /> | 3.1.3<br /> | SUNorthstarTwo 7E18<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7473.20100202.4i44t/iPod3,1_3.1.3_7E18_Restore.ipsw iPod3,1_3.1.3_7E18_Restore.ipsw]<br /> | &lt;code&gt;375fd469b18bfc0b74c7cfa5b4d5945197b1d106&lt;/code&gt;<br /> |<br /> | {{no}}<br /> | 295,870,806<br /> |}<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;168&quot;| Build<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;100&quot;| Can be [[jailbreak|jailbroken]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 3.2<br /> | [[Wildcat 7B367 (iPad)|Wildcat 7B367]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPad/061-7987.20100403.mjiTr/iPad1,1_3.2_7B367_Restore.ipsw iPad1,1_3.2_7B367_Restore.ipsw]<br /> | &lt;code&gt;172E8297AF74B91971A802E6AD137C891F553099&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes}}<br /> | 478,959,325<br /> |}<br /> <br /> ==See also==<br /> * [[VFDecrypt Keys]]<br /> <br /> ==Resources==<br /> *[http://www.trejan.com/projects/ipod/ Firmware List]<br /> *[http://pastebin.ca/1209360 A link of interest...]</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=ApexVail_8A230m_(iPod3,1)&diff=6062 2010-04-13T02:07:55Z

<p>Johnnyfranks67: New page: iPod touch 3G firmware 4.0 BETA 1 ==Decryption Keys== === Root Filesystem === * '''VFDecrypt''': 382dee11b9d80387b16ac2030ee1e903b78d9743a31a18bcafc922b7921eca85ab0aebf7 ===LLB=== * '''I...</p> <hr /> <div>iPod touch 3G firmware 4.0 BETA 1<br /> <br /> ==Decryption Keys==<br /> === Root Filesystem ===<br /> * '''VFDecrypt''': 382dee11b9d80387b16ac2030ee1e903b78d9743a31a18bcafc922b7921eca85ab0aebf7<br /> <br /> ===LLB===<br /> * '''IV''': beec9f598c04464ebca346836fd2498b<br /> * '''Key''': 7d14d252a9de202176b9db8e566909bfaf0486b14dee62115ac1c479786f3c5f<br /> <br /> ===iBoot===<br /> * '''IV''': 21b12fb37caa0f07baff9059e10e93cf<br /> * '''Key''': 777d13c2b2298005d65652cf3ae33500b40053cdfa19624bbf711b0f6a7f1ea3<br /> <br /> ===DeviceTree===<br /> * '''IV''': 6a0ab956ab3da8e3c2c035d7a8981ac0<br /> * '''Key''': 36e2e170b5019705f32f06bb73c3a67a6e3c4e7b65d16eca7bfaa225b3e99850<br /> <br /> ===kernelcache===<br /> * '''IV''': 0b458d08d7459a93d5583e1cb218b687<br /> * '''Key''': d1b0fea40f7fba17ce97b22ce3a4c2a53daff84e4d3f6cdfe7ab86c76cf3c7e2<br /> <br /> ===iBEC===<br /> * '''IV''': 6d7323e911c6a8c43f046bf138d94217<br /> * '''Key''': 374dd2a4467099698f71e128e3ed18d3706fff3f6f632f031d5ed3e090d19602<br /> <br /> ===iBSS===<br /> * '''IV''': 369655853e539481c07dbe22e92e88ba<br /> * '''Key''': ce00470661f2a29c865b085291bfce2c13ec51eb171c0066875d5b16f783798a<br /> <br /> ===Restore Ramdisk [018-7264-033.dmg]===<br /> * '''IV''': f1b5adbe2e2fbdce41403121277a2966<br /> * '''Key''': 4dd647b342c87b3732df470e9a1356cff928e48ac63feb3de1efb49f94cb2250<br /> <br /> ===Update Ramdisk [018-7291-032.dmg]===<br /> * '''IV''': 661fc430ba68c41763f4d05ca2955ae0<br /> * '''Key''': b91529e74c531b3fc7f6299f5b6d11c1570caa1687248123092343ed49c5fb0a</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=User:Qwertyoruiop&diff=6048 2010-04-12T02:01:25Z

<p>Johnnyfranks67: </p> <hr /> <div>Of no importance..</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=The_iPhone_Wiki:Community_portal&diff=6004 2010-04-10T18:04:40Z

<p>Johnnyfranks67: /* iPhone Related Requests */</p> <hr /> <div>This is the place to post tasks that need to be done on the wiki. Also this is the place for proposed changes. I heard about people wanting a favicon and arranging the main page into categories.<br /> <br /> == Site Related Requests ==<br /> <br /> === Favicon ===<br /> <br /> Better? - Very nice :-) Damn, [http://www.tdupree.com/2008/06/12/manually-refresh-faviconico-files-in-firefox-3/ firefox bug].<br /> <br /> ==iPhone Related Requests==<br /> &lt;i&gt;See: [[Unsolved problems]]&lt;/i&gt;<br /> <br /> Keys/ivs for 4.0 beta 1 need to be updated. Many of them on are on the Internet, but not on here.</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=K48AP&diff=5999 2010-04-10T01:01:29Z

<p>Johnnyfranks67: /* Application processor */</p> <hr /> <div>[[Image:ipad_hero_20100127.jpg|thumb|right|250px|iPad]]This is the iPad. Announced on January 27, 2010. $499 for WiFi-only variant. Features 1 GHz Apple [[S5L8930]] CPU and 9.7&quot; display. Runs iPhone OS 3.2. <br /> <br /> == Application processor ==<br /> It makes use of the Apple-designed 1 GHz [[A4|A4]] CPU.<br /> <br /> == Specifications ==<br /> '''Screen:''' 1024x768px<br /> <br /> '''Size:''' 9.56 inches (242.8 mm) (height) x 7.47 inches (189.7 mm) (width) x 0.5 inch (13.4 mm) (depth)<br /> <br /> '''Weight:''' 1.5 pounds (0.68 kg) Wi-Fi model; 1.6 pounds (0.73 kg) Wi-Fi + 3G model<br /> <br /> '''Battery:''' Up to 10 hours of Internet use, one month of standby<br /> <br /> '''3G:''' UMTS/HSDPA (850, 1900, 2100 MHz), GSM/EDGE (850, 900, 1800, 1900 MHz), data only</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=The_iPhone_Wiki:Current_events&diff=5978 2010-04-04T08:07:38Z

<p>Johnnyfranks67: </p> <hr /> <div>== Primary Goals ==<br /> * [[X-Gold 608 Unlock|Break Chain of Trust (X-Gold)]]<br /> * Untether the new iPhone 3GS model and iPod touch 2G model with new bootroms.<br /> * Untether the [[iPod Touch 3G]].<br /> * Jailbreak the [[iPad]]<br /> <br /> == Secondary ==<br /> * Get [[iPhoneLinux]] running on [[iPod touch 2G]], [[iPod Touch 3G]] and [[iPhone 3GS]]<br /> * Get kernel extensions working on 2.x<br /> * Get kernel extensions working on 3.x</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=IRecovery&diff=5202 2009-10-18T06:49:45Z

<p>Johnnyfranks67: </p> <hr /> <div>iRecovery is a libusb-based commandline utility for Mac OS X , Linux ,and Windows . It is able to talk to the iBoot/iBSS in Apple's iPhone/iPod touch via USB. <br /> <br /> It's completely open-source, the source-code is released under the terms of the GNU General Public License version 3.<br /> The full license text can be found in the LICENSE file on github.<br /> <br /> It currently connects to 0x1281 (iPhone, iPhone 3G, iPod touch, iPod touch 2G: Recovery Mode/iBSS), 0x1227 (iPhone, <br /> iPhone 3G, iPod touch: WTF Mode; iPod touch 2G: DFU Mode).<br /> <br /> ==Credits==<br /> westbaer<br /> <br /> ==Features==<br /> <br /> ===DFU 2.0 (0x1227)===<br /> It can upload a file, such as an iBSS, so that you can unplug and spawn a shell with 0x1281.<br /> <br /> ===Recovery 2.0 (0x1281)===<br /> ====File Uploading====<br /> You can upload a file to 0x9000000 with the following syntax:<br /> ./iRecovery -f file<br /> <br /> ====Two-Way Shell====<br /> You can spawn a shell to do all sorts of neat things with the syntax:<br /> ./iRecovery -s<br /> Once it has spawned, you can type 'help' and iBoot will respond with its built-in command list.<br /> <br /> ====Single Command====<br /> ./iRecovery -c &quot;command&quot;<br /> Sends a single command to the device *without* spawning a shell.<br /> <br /> ====usb_control_msg(0x21, 2) Exploit Command====<br /> ./iRecovery -k <br /> Sends Chronic Dev's + Geohot's latest usb exploit. Implemented into blackra1n.<br /> This was just updated a few days ago. (10/17/09) [Download Link Updated]<br /> <br /> <br /> ==Download==<br /> [http://github.com/posixninja/irecovery Click for download. (Latest version is always on GitHub)]</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=IRecovery&diff=5201 2009-10-18T06:48:54Z

<p>Johnnyfranks67: </p> <hr /> <div>iRecovery is a libusb-based commandline utility for Mac OS X , Linux ,and Windows . It is able to talk to the iBoot/iBSS in Apple's iPhone/iPod touch via USB. <br /> <br /> It's completely open-source, the source-code is released under the terms of the GNU General Public License version 3.<br /> The full license text can be found in the LICENSE file on github.<br /> <br /> It currently connects to 0x1281 (iPhone, iPhone 3G, iPod touch, iPod touch 2G: Recovery Mode/iBSS), 0x1227 (iPhone, <br /> iPhone 3G, iPod touch: WTF Mode; iPod touch 2G: DFU Mode).<br /> <br /> ==Credits==<br /> westbaer<br /> <br /> ==Features==<br /> <br /> ===DFU 2.0 (0x1227)===<br /> It can upload a file, such as an iBSS, so that you can unplug and spawn a shell with 0x1281.<br /> <br /> ===Recovery 2.0 (0x1281)===<br /> ====File Uploading====<br /> You can upload a file to 0x9000000 with the following syntax:<br /> ./iRecovery -f file<br /> <br /> ====Two-Way Shell====<br /> You can spawn a shell to do all sorts of neat things with the syntax:<br /> ./iRecovery -s<br /> Once it has spawned, you can type 'help' and iBoot will respond with its built-in command list.<br /> <br /> ====Single Command====<br /> ./iRecovery -c &quot;command&quot;<br /> Sends a single command to the device *without* spawning a shell.<br /> <br /> ====usb_control_msg(0x21, 2) Exploit Command====<br /> ./iRecovery -k <br /> Sends Chronic Dev's + Geohot's latest usb exploit. Implemented into blackra1n.<br /> This was just updated a few days ago. (10/17/09) [Download Link Updated]<br /> <br /> <br /> ==Download==[http://github.com/posixninja/irecovery Latest version always on GitHub</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=IRecovery&diff=5200 2009-10-18T06:48:11Z

<p>Johnnyfranks67: </p> <hr /> <div>iRecovery is a libusb-based commandline utility for Mac OS X , Linux ,and Windows . It is able to talk to the iBoot/iBSS in Apple's iPhone/iPod touch via USB. <br /> <br /> It's completely open-source, the source-code is released under the terms of the GNU General Public License version 3.<br /> The full license text can be found in the LICENSE file on github.<br /> <br /> It currently connects to 0x1281 (iPhone, iPhone 3G, iPod touch, iPod touch 2G: Recovery Mode/iBSS), 0x1227 (iPhone, <br /> iPhone 3G, iPod touch: WTF Mode; iPod touch 2G: DFU Mode).<br /> <br /> ==Credits==<br /> westbaer<br /> <br /> ==Features==<br /> <br /> ===DFU 2.0 (0x1227)===<br /> It can upload a file, such as an iBSS, so that you can unplug and spawn a shell with 0x1281.<br /> <br /> ===Recovery 2.0 (0x1281)===<br /> ====File Uploading====<br /> You can upload a file to 0x9000000 with the following syntax:<br /> ./iRecovery -f file<br /> <br /> ====Two-Way Shell====<br /> You can spawn a shell to do all sorts of neat things with the syntax:<br /> ./iRecovery -s<br /> Once it has spawned, you can type 'help' and iBoot will respond with its built-in command list.<br /> <br /> ====Single Command====<br /> ./iRecovery -c &quot;command&quot;<br /> Sends a single command to the device *without* spawning a shell.<br /> <br /> ====usb_control_msg(0x21, 2) Exploit Command====<br /> ./iRecovery -k <br /> Sends Chronic Dev's + Geohot's latest usb exploit. Implemented into blackra1n.<br /> This was just updated a few days ago. (10/17/09) [Download Link Updated]<br /> <br /> <br /> ==Download==<br /> http://github.com/posixninja/irecovery Latest version always on GitHub]</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=IRecovery&diff=5199 2009-10-18T06:47:45Z

<p>Johnnyfranks67: </p> <hr /> <div>iRecovery is a libusb-based commandline utility for Mac OS X , Linux ,and Windows . It is able to talk to the iBoot/iBSS in Apple's iPhone/iPod touch via USB. <br /> <br /> It's completely open-source, the source-code is released under the terms of the GNU General Public License version 3.<br /> The full license text can be found in the LICENSE file on github.<br /> <br /> It currently connects to 0x1281 (iPhone, iPhone 3G, iPod touch, iPod touch 2G: Recovery Mode/iBSS), 0x1227 (iPhone, <br /> iPhone 3G, iPod touch: WTF Mode; iPod touch 2G: DFU Mode).<br /> <br /> ==Credits==<br /> westbaer<br /> <br /> ==Features==<br /> <br /> ===DFU 2.0 (0x1227)===<br /> It can upload a file, such as an iBSS, so that you can unplug and spawn a shell with 0x1281.<br /> <br /> ===Recovery 2.0 (0x1281)===<br /> ====File Uploading====<br /> You can upload a file to 0x9000000 with the following syntax:<br /> ./iRecovery -f file<br /> <br /> ====Two-Way Shell====<br /> You can spawn a shell to do all sorts of neat things with the syntax:<br /> ./iRecovery -s<br /> Once it has spawned, you can type 'help' and iBoot will respond with its built-in command list.<br /> <br /> ====Single Command====<br /> ./iRecovery -c &quot;command&quot;<br /> Sends a single command to the device *without* spawning a shell.<br /> <br /> ====usb_control_msg(0x21, 2) Exploit Command====<br /> ./iRecovery -k <br /> Sends Chronic Dev's + Geohot's latest usb exploit. Implemented into blackra1n.<br /> This was just updated a few days ago. (10/17/09)<br /> <br /> <br /> ==Download==<br /> http://github.com/posixninja/irecovery Latest version always on GitHub]</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=The_iPhone_Wiki:Current_events&diff=5170 2009-10-16T03:16:55Z

<p>Johnnyfranks67: /* Primary Goals */</p> <hr /> <div>== Primary Goals ==<br /> * [[X-Gold 608 Unlock|Break Chain of Trust (X-Gold)]]<br /> * Untether the new iPhone 3GS model w/ new bootrom.<br /> <br /> == Secondary ==<br /> * Get [[iPhoneLinux]] running on [[iPod touch 2G]]<br /> * Get kernel extensions working on 2.x<br /> * Get kernel extensions working on 3.x</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=The_iPhone_Wiki:Current_events&diff=5169 2009-10-16T03:16:39Z

<p>Johnnyfranks67: /* Primary Goals */</p> <hr /> <div>== Primary Goals ==<br /> * [[X-Gold 608 Unlock|Break Chain of Trust (X-Gold)]]<br /> * Untether the new iPhone 3GS models.<br /> <br /> == Secondary ==<br /> * Get [[iPhoneLinux]] running on [[iPod touch 2G]]<br /> * Get kernel extensions working on 2.x<br /> * Get kernel extensions working on 3.x</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=The_iPhone_Wiki:Current_events&diff=5168 2009-10-16T03:16:11Z

<p>Johnnyfranks67: /* Primary Goals */</p> <hr /> <div>== Primary Goals ==<br /> * [[X-Gold 608 Unlock|Break Chain of Trust (X-Gold)]]<br /> * [[Untether the new iPhone 3GS models.]]<br /> <br /> == Secondary ==<br /> * Get [[iPhoneLinux]] running on [[iPod touch 2G]]<br /> * Get kernel extensions working on 2.x<br /> * Get kernel extensions working on 3.x</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Tethered_jailbreak&diff=5161 2009-10-15T23:55:25Z

<p>Johnnyfranks67: New page: A tethered jailbreak is one that requires your computer to boot the device. As of now, the iPod touch 3rd Generation is the only device that has a tethered jailbreak.</p> <hr /> <div>A tethered jailbreak is one that requires your computer to boot the device. As of now, the iPod touch 3rd Generation is the only device that has a tethered jailbreak.</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=IREB&diff=4918 2009-10-02T03:47:40Z

<p>Johnnyfranks67: </p> <hr /> <div>{{DISPLAYTITLE:IREB}}<br /> A program created by iH8sn0w, that is used for [[S5L8900]] devices, which include:<br /> *[[M68ap|iPhone 2G]]<br /> *[[N82ap|iPhone 3G]]<br /> *[[N45ap|iPod touch 1G]]<br /> <br /> == What is iREB? ==<br /> iREB is a GUI application that uses iDevice and dfu-util. It uploads 3 pwned files, so that iTunes can accept custom IPSW firmware/downgrade to lower firmwares.<br /> <br /> iBSS.MODEL.RELEASE.dfu<br /> WTF.MODEL.RELEASE.dfu<br /> WTF.s5l8900xall.RELEASE.dfu<br /> <br /> iREB does '''''NOT''''' jailbreak, it just disables [[iTunes]]'s ability to upload a patch to the ramdisk to block custom firmware made by [[PwnageTool]].<br /> <br /> == Current Developers ==<br /> *iH8sn0w (Windows + Mac)<br /> *w3st05 (Windows)<br /> *JohnnyFranks67 (Mac)<br /> <br /> == Compatible Operating Systems: ==<br /> Windows XP/Vista/7&lt;br /&gt;<br /> Mac OS X 10.4/10.5/10.6<br /> <br /> == Changelog ==<br /> ===3.1-3 (Windows ONLY for now!)===<br /> *Added iPhone 3G[S] 3.1 SHSH Grabber<br /> *More Stable<br /> *Added Credits<br /> ===3.1 (Windows ONLY for now!)===<br /> *Added GUI<br /> *Added Recovery Mode Loop Fixer<br /> *Fixed Bug from 2.2<br /> *Removed Popups<br /> *Removed Command Prompt's<br /> ===2.2===<br /> *Added Support for 3.1(7C144)/3.1.1(7C145)<br /> *This version contains a bug, that will be fixed.<br /> *Improved GUI (Windows)<br /> *Added a bit more User-Friendly GUI (Mac)<br /> *Snow Leopard compatibility (Mac)<br /> <br /> ===2.1===<br /> *Added GUI<br /> *All 3 supported devices are implemented.<br /> <br /> ===2.0===<br /> *No longer required to rename ipsw to ih8sn0w.ipsw (Windows)<br /> *No longer required to move ipsw to C:\ (Windows)<br /> <br /> ===1.0===<br /> *Initial Release</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Northstar_7C145_(iPod2,1)&diff=4824 2009-09-13T21:27:00Z

<p>Johnnyfranks67: </p> <hr /> <div>==Decryption Keys==<br /> === Root Filesystem ===<br /> * '''VFDecrypt''': Genpass is broken. Fix me.<br /> <br /> ===LLB===<br /> * '''IV''': e13f59246bd7c165727d442bb8061db1<br /> * '''Key''': c8239d8284b672a685348549886c2561<br /> <br /> ===iBoot===<br /> * '''IV''': b31c608013ab8980178b79a1d8ba21df<br /> * '''Key''': edebb477d07161edeac17b12c33ba783<br /> <br /> ===DeviceTree===<br /> * '''IV''': 6293813000127aadcd0dc9a61afdf0e3<br /> * '''Key''': 9d5302a7aee09045840ec2d3a3ba7fe5<br /> <br /> ===kernelcache===<br /> * '''IV''': e5e63f072fe983d6615affcb103dc7cd<br /> * '''Key''': 647e06e61b93719f63d1f02bc661b28c<br /> <br /> ===iBEC===<br /> * '''IV''': 5ea1608ce309fd33669f9a0fe691ede0<br /> * '''Key''': 5465ffeaec67bf1d5e47333b6a8525d9<br /> <br /> ===iBSS===<br /> * '''IV''': 9036da1779c8d2a2a3b460b0a52146b<br /> * '''Key''': 1ea15c674bf6086a4a3840c310521dd24<br /> <br /> ===Restore Ramdisk [018-6041-001.dmg]===<br /> * '''IV''': 8E84AFA0B935D969CED792B5C91C4018<br /> * '''Key''': B3978D4668C85B11E9C16628F3BFE96C<br /> <br /> ===Update Ramdisk [018-6048-001.dmg]===<br /> * '''IV''': bbbd60012088d253bf3648285a735e13<br /> * '''Key''': 7b0a441f1b70943461c4444300a8f455<br /> <br /> <br /> <br /> Originally posted by Johnny Franks</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Northstar_7C145_(iPod2,1)&diff=4823 2009-09-13T21:26:31Z

<p>Johnnyfranks67: </p> <hr /> <div>==Decryption Keys==<br /> === Root Filesystem ===<br /> * '''VFDecrypt''': Genpass is broken. Fix me.<br /> <br /> ===LLB===<br /> * '''IV''': e13f59246bd7c165727d442bb8061db1<br /> * '''Key''': c8239d8284b672a685348549886c2561<br /> <br /> ===iBoot===<br /> * '''IV''': b31c608013ab8980178b79a1d8ba21df<br /> * '''Key''': edebb477d07161edeac17b12c33ba783<br /> <br /> ===DeviceTree===<br /> * '''IV''': 6293813000127aadcd0dc9a61afdf0e3<br /> * '''Key''': 9d5302a7aee09045840ec2d3a3ba7fe5<br /> <br /> ===kernelcache===<br /> * '''IV''': e5e63f072fe983d6615affcb103dc7cd<br /> * '''Key''': 647e06e61b93719f63d1f02bc661b28c<br /> <br /> ===iBEC===<br /> * '''IV''': 5ea1608ce309fd33669f9a0fe691ede0<br /> * '''Key''': 5465ffeaec67bf1d5e47333b6a8525d9<br /> <br /> ===iBSS===<br /> * '''IV''': 9036da1779c8d2a2a3b460b0a52146b<br /> * '''Key''': 1ea15c674bf6086a4a3840c310521dd24<br /> <br /> ===Restore Ramdisk [018-6041-001.dmg]===<br /> * '''IV''': 8E84AFA0B935D969CED792B5C91C4018<br /> * '''Key''': B3978D4668C85B11E9C16628F3BFE96C<br /> <br /> ===Update Ramdisk [018-6048-001.dmg]===<br /> * '''IV''': bbbd60012088d253bf3648285a735e13<br /> * '''Key''': 7b0a441f1b70943461c4444300a8f455<br /> <br /> Posted by johnnyfranks67</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Northstar_7C145_(iPod2,1)&diff=4822 2009-09-13T21:21:14Z

<p>Johnnyfranks67: </p> <hr /> <div>==Decryption Keys==<br /> === Root Filesystem ===<br /> * '''VFDecrypt''': Genpass is broken. Fix me.<br /> <br /> ===LLB===<br /> * '''IV''': e13f59246bd7c165727d442bb8061db1<br /> * '''Key''': c8239d8284b672a685348549886c2561<br /> <br /> ===iBoot===<br /> * '''IV''': b31c608013ab8980178b79a1d8ba21df<br /> * '''Key''': edebb477d07161edeac17b12c33ba783<br /> <br /> ===DeviceTree===<br /> * '''IV''': 6293813000127aadcd0dc9a61afdf0e3<br /> * '''Key''': 9d5302a7aee09045840ec2d3a3ba7fe5<br /> <br /> ===kernelcache===<br /> * '''IV''': e5e63f072fe983d6615affcb103dc7cd<br /> * '''Key''': 647e06e61b93719f63d1f02bc661b28c<br /> <br /> ===iBEC===<br /> * '''IV''': 5ea1608ce309fd33669f9a0fe691ede0<br /> * '''Key''': 5465ffeaec67bf1d5e47333b6a8525d9<br /> <br /> ===iBSS===<br /> * '''IV''': 9036da1779c8d2a2a3b460b0a52146b<br /> * '''Key''': 1ea15c674bf6086a4a3840c310521dd24<br /> <br /> ===Restore Ramdisk [018-6041-001.dmg]===<br /> * '''IV''': 8E84AFA0B935D969CED792B5C91C4018<br /> * '''Key''': B3978D4668C85B11E9C16628F3BFE96C<br /> <br /> ===Update Ramdisk [018-6048-001.dmg]===<br /> * '''IV''': bbbd60012088d253bf3648285a735e13<br /> * '''Key''': 7b0a441f1b70943461c4444300a8f455</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Northstar_7C145_(iPod2,1)&diff=4821 2009-09-13T21:18:13Z

<p>Johnnyfranks67: New page: ==Decryption Keys== === Root Filesystem === * '''VFDecrypt''': Genpass is broken. Fix me. ===LLB=== * '''IV''': e13f59246bd7c165727d442bb8061db1 * '''Key''': c8239d8284b672a685348549886c2...</p> <hr /> <div>==Decryption Keys==<br /> === Root Filesystem ===<br /> * '''VFDecrypt''': Genpass is broken. Fix me.<br /> <br /> ===LLB===<br /> * '''IV''': e13f59246bd7c165727d442bb8061db1<br /> * '''Key''': c8239d8284b672a685348549886c2561<br /> <br /> ===iBoot===<br /> * '''IV''': b31c608013ab8980178b79a1d8ba21df<br /> * '''Key''': edebb477d07161edeac17b12c33ba783<br /> <br /> ===DeviceTree===<br /> * '''IV''': 6293813000127aadcd0dc9a61afdf0e3<br /> * '''Key''': 9d5302a7aee09045840ec2d3a3ba7fe5<br /> <br /> ===kernelcache===<br /> * '''IV''': e5e63f072fe983d6615affcb103dc7cd<br /> * '''Key''': 647e06e61b93719f63d1f02bc661b28c<br /> <br /> ===iBEC===<br /> * '''IV''': 5ea1608ce309fd33669f9a0fe691ede0<br /> * '''Key''': 5465ffeaec67bf1d5e47333b6a8525d9<br /> <br /> ===iBSS===<br /> * '''IV''': 9036da1779c8d2a2a3b460b0a52146b<br /> * '''Key''': 1ea15c674bf6086a4a3840c310521dd24<br /> <br /> ===Restore Ramdisk [018-6027-001.dmg]===<br /> * '''IV''': 8E84AFA0B935D969CED792B5C91C4018<br /> * '''Key''': B3978D4668C85B11E9C16628F3BFE96C<br /> <br /> ===Update Ramdisk [018-6041-001.dmg]===<br /> * '''IV''': bbbd60012088d253bf3648285a735e13<br /> * '''Key''': 7b0a441f1b70943461c4444300a8f455</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Greenpois0n_(jailbreak)&diff=4796 2009-09-12T18:36:43Z

<p>Johnnyfranks67: </p> <hr /> <div>The tool that will soon be released for jailbreaking 3.1 on all devices. Even the iPod touch 3G.<br /> <br /> Here is a video made by Chronic of him proving that the exploit does in fact work on the iPod touch 3G: http://qik.ly/f4M8</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=NorthVail_7C106c_(iPod2,1)&diff=4481 2009-07-27T08:02:55Z

<p>Johnnyfranks67: </p> <hr /> <div>== Decryption Keys ==<br /> <br /> === LLB ===<br /> <br /> * '''Key''': 7068352cbd4f9d0fb36b56e4676b3579<br /> * '''IV''': 03d8c473ab73a8395b6123effc05242f<br /> <br /> === iBoot ===<br /> * '''Key''': 7068352cbd4f9d0fb36b56e4676b3579<br /> * '''IV''': 03d8c473ab73a8395b6123effc05242f<br /> <br /> === kernelcache ===<br /> * '''Key''': a773ccb126c9495a188587ef200fdf10<br /> * '''IV''':1c156e56ebb540940d40aac5b692bd2b</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=NorthVail_7C106c_(iPod2,1)&diff=4480 2009-07-27T07:45:41Z

<p>Johnnyfranks67: </p> <hr /> <div>== Decryption Keys ==<br /> <br /> === LLB ===<br /> <br /> * '''Key''': 7068352cbd4f9d0fb36b56e4676b3579<br /> * '''IV''': 03d8c473ab73a8395b6123effc05242f<br /> <br /> === iBoot ===<br /> * '''Key''': 03d8c473ab73a8395b6123effc05242f<br /> * '''IV''': 7068352cbd4f9d0fb36b56e4676b3579</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=NorthVail_7C106c_(iPod2,1)&diff=4475 2009-07-27T01:49:25Z

<p>Johnnyfranks67: /* Decryption Keys */</p> <hr /> <div>== Decryption Keys ==<br /> <br /> === LLB ===<br /> <br /> * '''Key''': 7068352cbd4f9d0fb36b56e4676b3579<br /> * '''IV''': 03d8c473ab73a8395b6123effc05242f<br /> <br /> [Not done yet]<br /> <br /> <br /> === FIX ME. ===</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=NorthVail_7C106c_(iPod2,1)&diff=4474 2009-07-27T01:49:02Z

<p>Johnnyfranks67: /* LLB */</p> <hr /> <div>== Decryption Keys ==<br /> <br /> === LLB ===<br /> <br /> * '''Key''': 7068352cbd4f9d0fb36b56e4676b3579<br /> * '''IV''': 03d8c473ab73a8395b6123effc05242f<br /> <br /> [Not done yet]<br /> <br /> <br /> FIX ME.</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=ARM7_Go&diff=4400 2009-07-22T14:36:33Z

<p>Johnnyfranks67: /* Payload */</p> <hr /> <div>This vulnerability is present in 2.1.1 iPod Touch 2G devices, as well as the iBEC / iBSS if you choose to upload it via DFU. It allows the running of unsigned code on the iPod Touch 2G device's ARM7 coprocessor.<br /> <br /> '''This exploit cannot be used on an [[iPhone]], [[iPhone 3G]], or [[n45ap|iPod touch 1G]], nor is there any reason for it to be as they have already been jailbroken.'''<br /> <br /> ==Credit==<br /> chronic and [[iPhone Dev Team]] (independently)<br /> <br /> ==Exploit==<br /> There is an ARM7 coprocessor in the iPod Touch 2G in addition to the main processor, the ARM11. Like the ADM in the [[S5L8900]] devices, it has access to everything the ARM11 has access to, such as the AES engine, the PKE accelorator, and such. The actual vulnerability is that, in the iPod Touch 2G 2.1.1 firmware, they left behind two commands: arm7_stop and arm7_go. They were promptly removed in 2.2. The arm7_go command had no signature checking, permissions checking, or anything like that. <br /> <br /> ==Payload==<br /> The command gives the ARM7 the load address (default is 0x09000000) of an &quot;image&quot; you sent it, and it will jump to it. The limitation is, unlike the [[diags]] exploit you cannot just pass a patched iBoot or iBEC. You must write a payload for it to run, but one that patches iBEC or iBoot in memory would do fine.<br /> <br /> How to execute your payload: upload ibss 2.1.1, upload payload, run arm7_go command to patch ibss, then upload your patched iboot.<br /> ===Implementations===<br /> Two released payloads are [[RedSn0w]] and [[0wnboot]]<br /> <br /> [[Category:Exploits]]</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=NorthVail_7C106c_(iPod2,1)&diff=4379 2009-07-21T07:00:35Z

<p>Johnnyfranks67: </p> <hr /> <div>== Decryption Keys ==<br /> <br /> ''No longer needed. Beta 2 is out''</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=NorthVail_7C106c_(iPod2,1)&diff=4237 2009-07-15T05:58:39Z

<p>Johnnyfranks67: New page: == Decryption Keys == === LLB === * '''Key''': 7068352cbd4f9d0fb36b56e4676b3579 * '''IV''': 03d8c473ab73a8395b6123effc05242f [Not done yet]</p> <hr /> <div>== Decryption Keys ==<br /> <br /> === LLB ===<br /> <br /> * '''Key''': 7068352cbd4f9d0fb36b56e4676b3579<br /> * '''IV''': 03d8c473ab73a8395b6123effc05242f<br /> <br /> [Not done yet]</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Purplera1n&diff=4196 2009-07-13T19:56:04Z

<p>Johnnyfranks67: /* Phase 1: Signature Grabber */</p> <hr /> <div>== Credit ==<br /> [[geohot]], Arix, and westbaer.<br /> <br /> == Phase 1: Signature Grabber ==<br /> * '''Blog Post''': http://iphonejtag.blogspot.com/2009/06/usbdump-huh-how.html<br /> <br /> Allows anyone with a [[N88AP|3GS]] right now to generate a file that contains:<br /> * The [[ECID|Exclusive Chip ID tag]] for your device<br /> * The new RSA signature for a 3.0GM [[N88AP|iPhone 3GS]] iBSS that includes your ECID<br /> <br /> This way, if Apple tries to pull a fast one and disallow downgrades to earlier versions, you have a backup that can be used to still allow you to boot an older iBSS.<br /> <br /> Apple can not stop you from obtaining the ECID from your phone. But the webapp behind purplera1n calls the same Apple servers which are also used by iTunes for signing your personal iBSS ECID combination. So this will stop working, when<br /> * a new firmware gets released and Apple does not allow downgrading any more or<br /> * Apple finds a way to distinguish between requests from iTunes and purplera1n<br /> <br /> As purplera1n uses a distributed application hosting it is not easy for Apple to filter it using IP addresses.<br /> <br /> == Phase 2: Jailbreak Tool (3.0) ==<br /> * '''Web Site''': http://purplera1n.com<br /> <br /> One-Click, dead simple, jailbreak for the [[iPhone 3GS]]. Currently available for Windows, Mac, and Linux. It utilizes the [[iBoot Environment Variable Overflow]].<br /> <br /> == How purplera1n Works ==<br /> <br /> purplera1n is so simple, that it hides the complex work it's doing from the user. Figured I'd describe it step by step<br /> * purplera1n sends the enter recovery commands using iTunesMobileDevice<br /> * once in recovery(iBoot), it sends the [[IBoot Environment Variable Overflow]] exploit<br /> * the exploit adds a &quot;geohot&quot; command to the phone which runs the payload<br /> * the &quot;geohot&quot; command is run, control is now transferred from iboot to the payload<br /> * the purplera1n client is done<br /> Inside payload<br /> * the payload restores the default environment variable ring buffer and saves the environment to nvram(sets auto-boot to true)<br /> * it patches iBoot to load unsigned img3s and not care about the tags<br /> * it loads the purplera1n picture(sent with payload)<br /> * the nor patcher starts<br /> * llb is decrypted, patched, and increased in size to 0x24200. this is the resident [[0x24000 Segment Overflow]] exploit<br /> * a little loader code is put @ 0x20000 in the LLB to load it and fix the stack<br /> * iboot is decrypted, patched<br /> * everything else is read as is<br /> * nor is written back, nor patcher is done<br /> * kernel is loaded, decrypted, and patched<br /> * ramdisk is loaded(sent with payload) and moved to ramdisk region at 0x44000000, patched kernel is tacked on to the end<br /> * patched kernel is booted<br /> * control is now transferred from payload to ramdisk<br /> Inside ramdisk<br /> * launchd is run, all stuff happens here<br /> * /dev/disk0s1 is mounted<br /> * fstab and services are overwritten here to allow disk0s1 writes and afc2 respectively<br /> * Freeze.app is transferred and Freeze.app loader has SUID bit set<br /> * patched kernel is read from end of ramdisk block device and written to filesystem<br /> * ramdisk is done, rebooting...<br /> Reboots as jailbroken phone</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Purplera1n&diff=4195 2009-07-13T19:54:58Z

<p>Johnnyfranks67: /* Credit */</p> <hr /> <div>== Credit ==<br /> [[geohot]], Arix, and westbaer.<br /> <br /> == Phase 1: Signature Grabber ==<br /> * '''Blog Post''': http://iphonejtag.blogspot.com/2009/06/usbdump-huh-how.html<br /> <br /> Allows anyone with a [[N88AP|3GS]] right now to generate a file that contains:<br /> * The [[ECID|Exclusive Chip ID tag]] for your device<br /> * The new RSA signature for a 3.0GM [[N88AP|iPhone 3GS]] iBSS that includes your ECID<br /> <br /> This way, if Apple tries to pull a fast one and disallow downgrades to earlier versions, you have a backup that can be used to still allow you to boot an older iBSS.<br /> <br /> Apple can not stop you from obtaining the ECID from your phone. But the webapp behind purplera1n calls the same Apple servers which are also used by iTunes for signing your personal iBSS ECID combination. So this will stop working, when<br /> * a new firmware gets released and Apple does not allow downdating any more or<br /> * Apple finds a way to disinguish between requests from iTunes and purplera1n<br /> <br /> As purplera1n uses a distributed application hosting it is not easy for Apple to filter it using IP addresses.<br /> <br /> == Phase 2: Jailbreak Tool (3.0) ==<br /> * '''Web Site''': http://purplera1n.com<br /> <br /> One-Click, dead simple, jailbreak for the [[iPhone 3GS]]. Currently available for Windows, Mac, and Linux. It utilizes the [[iBoot Environment Variable Overflow]].<br /> <br /> == How purplera1n Works ==<br /> <br /> purplera1n is so simple, that it hides the complex work it's doing from the user. Figured I'd describe it step by step<br /> * purplera1n sends the enter recovery commands using iTunesMobileDevice<br /> * once in recovery(iBoot), it sends the [[IBoot Environment Variable Overflow]] exploit<br /> * the exploit adds a &quot;geohot&quot; command to the phone which runs the payload<br /> * the &quot;geohot&quot; command is run, control is now transferred from iboot to the payload<br /> * the purplera1n client is done<br /> Inside payload<br /> * the payload restores the default environment variable ring buffer and saves the environment to nvram(sets auto-boot to true)<br /> * it patches iBoot to load unsigned img3s and not care about the tags<br /> * it loads the purplera1n picture(sent with payload)<br /> * the nor patcher starts<br /> * llb is decrypted, patched, and increased in size to 0x24200. this is the resident [[0x24000 Segment Overflow]] exploit<br /> * a little loader code is put @ 0x20000 in the LLB to load it and fix the stack<br /> * iboot is decrypted, patched<br /> * everything else is read as is<br /> * nor is written back, nor patcher is done<br /> * kernel is loaded, decrypted, and patched<br /> * ramdisk is loaded(sent with payload) and moved to ramdisk region at 0x44000000, patched kernel is tacked on to the end<br /> * patched kernel is booted<br /> * control is now transferred from payload to ramdisk<br /> Inside ramdisk<br /> * launchd is run, all stuff happens here<br /> * /dev/disk0s1 is mounted<br /> * fstab and services are overwritten here to allow disk0s1 writes and afc2 respectively<br /> * Freeze.app is transferred and Freeze.app loader has SUID bit set<br /> * patched kernel is read from end of ramdisk block device and written to filesystem<br /> * ramdisk is done, rebooting...<br /> Reboots as jailbroken phone</div>

Johnnyfranks67 https://www.theiphonewiki.com/w/index.php?title=Purplera1n&diff=4194 2009-07-13T19:54:22Z

<p>Johnnyfranks67: /* Credit */</p> <hr /> <div>== Credit ==<br /> [[geohot]] [[AriX]] [[westbaer]]<br /> <br /> == Phase 1: Signature Grabber ==<br /> * '''Blog Post''': http://iphonejtag.blogspot.com/2009/06/usbdump-huh-how.html<br /> <br /> Allows anyone with a [[N88AP|3GS]] right now to generate a file that contains:<br /> * The [[ECID|Exclusive Chip ID tag]] for your device<br /> * The new RSA signature for a 3.0GM [[N88AP|iPhone 3GS]] iBSS that includes your ECID<br /> <br /> This way, if Apple tries to pull a fast one and disallow downgrades to earlier versions, you have a backup that can be used to still allow you to boot an older iBSS.<br /> <br /> Apple can not stop you from obtaining the ECID from your phone. But the webapp behind purplera1n calls the same Apple servers which are also used by iTunes for signing your personal iBSS ECID combination. So this will stop working, when<br /> * a new firmware gets released and Apple does not allow downdating any more or<br /> * Apple finds a way to disinguish between requests from iTunes and purplera1n<br /> <br /> As purplera1n uses a distributed application hosting it is not easy for Apple to filter it using IP addresses.<br /> <br /> == Phase 2: Jailbreak Tool (3.0) ==<br /> * '''Web Site''': http://purplera1n.com<br /> <br /> One-Click, dead simple, jailbreak for the [[iPhone 3GS]]. Currently available for Windows, Mac, and Linux. It utilizes the [[iBoot Environment Variable Overflow]].<br /> <br /> == How purplera1n Works ==<br /> <br /> purplera1n is so simple, that it hides the complex work it's doing from the user. Figured I'd describe it step by step<br /> * purplera1n sends the enter recovery commands using iTunesMobileDevice<br /> * once in recovery(iBoot), it sends the [[IBoot Environment Variable Overflow]] exploit<br /> * the exploit adds a &quot;geohot&quot; command to the phone which runs the payload<br /> * the &quot;geohot&quot; command is run, control is now transferred from iboot to the payload<br /> * the purplera1n client is done<br /> Inside payload<br /> * the payload restores the default environment variable ring buffer and saves the environment to nvram(sets auto-boot to true)<br /> * it patches iBoot to load unsigned img3s and not care about the tags<br /> * it loads the purplera1n picture(sent with payload)<br /> * the nor patcher starts<br /> * llb is decrypted, patched, and increased in size to 0x24200. this is the resident [[0x24000 Segment Overflow]] exploit<br /> * a little loader code is put @ 0x20000 in the LLB to load it and fix the stack<br /> * iboot is decrypted, patched<br /> * everything else is read as is<br /> * nor is written back, nor patcher is done<br /> * kernel is loaded, decrypted, and patched<br /> * ramdisk is loaded(sent with payload) and moved to ramdisk region at 0x44000000, patched kernel is tacked on to the end<br /> * patched kernel is booted<br /> * control is now transferred from payload to ramdisk<br /> Inside ramdisk<br /> * launchd is run, all stuff happens here<br /> * /dev/disk0s1 is mounted<br /> * fstab and services are overwritten here to allow disk0s1 writes and afc2 respectively<br /> * Freeze.app is transferred and Freeze.app loader has SUID bit set<br /> * patched kernel is read from end of ramdisk block device and written to filesystem<br /> * ramdisk is done, rebooting...<br /> Reboots as jailbroken phone</div>

Johnnyfranks67