https://www.theiphonewiki.com/w/api.php?action=feedcontributions&feedformat=atom&user=Nannoid The iPhone Wiki - User contributions [en] 2026-05-08T02:00:43Z User contributions MediaWiki 1.31.14 https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17993 Jailbreak (S5L8920+) 2011-05-07T02:23:28Z <p>Nannoid: /* iPhone 4 (CDMA model) */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, [[iBoot (Bootloader)|iBoot]] exploits won't be so useful for [[tethered jailbreak]]s, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in [[bootrom]], an iBoot exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with the [[0x24000 Segment Overflow]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it receives your ECID, saurik's servers will actively cache the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are available.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{yes|2.7}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;14&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{yes|2.7}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{yes|2.7}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |style=&quot;width:100px;&quot;| 4.2.8<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{yes|2.6.1}}<br /> | {{yes|2.7}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;11&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{yes|2.7}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;6&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{yes|2.7}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=07.11.01&diff=17940 07.11.01 2011-05-06T14:58:59Z <p>Nannoid: </p> <hr /> <div>[[X-Gold 608]] baseband supplied with iOS 4.3.1, 4.3.2 and 4.3.3 for [[K48ap|iPad 3G]].<br /> <br /> {{stub|iPad}}</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=2.0.4&diff=17939 2.0.4 2011-05-06T14:58:30Z <p>Nannoid: </p> <hr /> <div>The [[Qualcomm MDM6600]] baseband supplied with iOS 4.3, 4.3.1, 4.3.2 and 4.3.3 for [[K95ap|iPad 2 (CDMA Model)]]. <br /> <br /> {{stub|iPad}}</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=1.0.06&diff=17938 1.0.06 2011-05-06T14:57:56Z <p>Nannoid: </p> <hr /> <div>The [[Qualcomm MDM6600]] baseband supplied with iOS 4.2.7 and 4.2.8 for [[N92ap|iPhone 4 (CDMA Model)]]. <br /> <br /> {{stub|iPhone}}</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=04.10.01&diff=17937 04.10.01 2011-05-06T14:57:35Z <p>Nannoid: </p> <hr /> <div>A new [[XMM 6180]] [[Baseband Firmware|baseband]] in iOS 4.3b3, 4.3GM, 4.3, 4.3.1, 4.3.2 and 4.3.3. There's no public unlock for it.<br /> <br /> {{stub|iPhone}}</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=05.16.02&diff=17936 05.16.02 2011-05-06T14:57:11Z <p>Nannoid: </p> <hr /> <div>An [[X-Gold 608]] baseband in iOS 4.3.2 and 4.3.3. There's no public unlock for it.<br /> <br /> {{stub|iPhone}}</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=PwnageTool&diff=17935 PwnageTool 2011-05-06T14:56:10Z <p>Nannoid: /* 4.x: Fourth Major Release of PwnageTool */</p> <hr /> <div>'''PwnageTool''' is an [[iOS]] [[jailbreak]] tool for Mac OS X that jailbreaks by creating a custom [[IPSW File Format|IPSW]]. You are allowed to change boot logos and add pre-installed packages to the IPSW. After an IPSW is created you can use it for restore using [[iTunes]].<br /> <br /> ==Exploits Used==<br /> ===Version 4.0===<br /> * Bootrom exploit (used by [[limera1n]] and [[Greenpois0n (jailbreak)|greenpois0n]])<br /> <br /> ===Version 2.0===<br /> * [[Pwnage 2.0]]<br /> * [[Pwnage]]<br /> <br /> ===Version 1.0===<br /> * [[Pwnage]]<br /> * [[Ramdisk Hack]]<br /> <br /> == Models Supported ==<br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Model<br /> ! Since<br /> |-<br /> | [[M68ap|iPhone 2G]]<br /> | April 3, 2008<br /> |-<br /> | [[N45ap|iPod touch 1G]]<br /> | April 3, 2008<br /> |-<br /> | [[N82ap|iPhone 3G]]<br /> | Jul 19, 2008<br /> |-<br /> | [[N72ap|iPod touch 2G]]<br /> | Oct 2, 2009<br /> |-<br /> | [[N88ap|iPhone 3GS]]<br /> | Oct 2, 2009<br /> |}<br /> Note that the [[N18ap|iPod touch 3G]] and subsequent devices are not supported. With the iPod touch 2G and iPhone 3GS you must be jailbroken prior to using PwnageTool. The [[S5L8900]] devices you can go into [[DFU Mode]] and restore with [[iTunes]] without being jailbroken.<br /> <br /> ==Versions==<br /> <br /> PwnageTool was released April 3, 2008 but largely unused until version 2.0 was released July 19, 2008.<br /> The following versions that are shown here are not beta, alpha, or in development. <br /> <br /> ===1.x: First release of PwnageTool===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 1.1.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 3, 2008<br /> | |<br /> * Initial release<br /> * Jailbreaks 1.1.4 firmware<br /> * Supports iPod touch 1G and iPhone 2G.<br /> * Add [[BootNeuter]] in the IPSW to unlock iPhone 2G.<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> <br /> === 2.x: Second major release of Pwnagetool ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jul 19, 2008<br /> | |<br /> * Added iPhone 3G support [http://www.engadget.com/2008/07/19/iphone-dev-team-unleashes-pwnage-tool-2-0/]<br /> * Jailbreaks 2.0 Firmware<br /> * Change boot logos<br /> * Adds Cydia by default<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Aug 4, 2008<br /> | |<br /> * Jailbreaks 2.0.1 firmware<br /> * Works for 2.0 and 2.0.1.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Aug 21, 2008<br /> | |<br /> * Jailbreaks 2.0.2 firmware [http://www.iphonehacks.com/2008/08/pwnage-tool-202.html]<br /> * Works for 2.0, 2.0.1, and 2.0.2.<br /> * Bug fixes - for when it doesn't go to the next page when you click on something.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Aug 25, 2008<br /> | |<br /> * Jailbreaks 2.0.2 firmware<br /> * Works for 2.0, 2.0.1, and 2.0.2.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Sep 13, 2008<br /> | |<br /> * Jailbreaks 2.1 firmware<br /> * Removed backwards compatibility<br /> * Download packages from a valid Cydia source, and add them onto your custom IPSW.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Nov 21, 2008<br /> | |<br /> * Jailbreaks 2.2 firmware<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.2.5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jan 30, 2009<br /> | |<br /> * Jailbreaks 2.2.1<br /> * Not updated by [[iPhone Dev Team]] but made official.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> <br /> === 3.x: Third Major Release of PwnageTool ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.0 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jun 19, 2009<br /> | |<br /> * Jailbreaks 3.0 firmware<br /> * DFU mode instructions included<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Sep 15, 2009<br /> | |<br /> * Jailbreaks 3.1 firmware for iPhone 2G and 3G<br /> * Jailbreaks 3.1.1 firmware for iPod touch 1G<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.1.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 2, 2009<br /> | |<br /> * Support for iPhone 3GS with [[iBoot-359.3]] bootrom and iPod touch 2G with [[iBoot-240.4]] bootrom (these devices need to be pwned from 3.0/3.0.1)<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.1.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 13, 2009<br /> | |<br /> * Jailbreaks 3.1.2 firmware for iPhone 2G, 3G, 3GS with [[iBoot-359.3]] bootrom, iPod touch 1G, iPod touch 2G with [[iBoot-240.4]] bootrom<br /> * iPod touch 3G not supported.<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> <br /> ==== 3.1.5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Feb 7, 2010<br /> | |<br /> * Jailbreaks 3.1.3 firmware for devices supported in 3.1.4.<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> === 4.x: Fourth Major Release of PwnageTool ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.0 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jun 22, 2010<br /> | |<br /> * Jailbreaks iOS 4.0 for devices supported in 3.1.4.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.01 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jun 23, 2010<br /> | |<br /> * Fixes iBooks issue.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 20, 2010<br /> | |<br /> * Jailbreaks iOS 4.1 for [[K66ap|Apple TV 2G]], [[K48ap|iPad 1G]], [[N82ap|iPhone 3G]], [[N88ap|iPhone 3GS]] (both bootroms), [[N90ap|iPhone 4]], [[N18ap|iPod touch 3G]], and [[N81ap|iPod touch 4G]].<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 22, 2010<br /> | |<br /> * Fixes issues with Leopard.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 22, 2010<br /> | |<br /> * Fixes more issues with Leopard.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Nov 28, 2010<br /> | |<br /> * Enables installing the [[6.15.00]] baseband on the [[n82ap|iPhone 3G]] and [[n88ap|iPhone 3GS]]<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Feb 15, 2010<br /> | |<br /> * Support for iOS 4.2.1 on every device that is compatible, except for the [[n72ap|iPod touch 2G]].<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Apr 3, 2011<br /> | |<br /> * Support for iOS 4.3.1 on every device that is compatible, except for the [[iPad 2]].<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.3.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Apr 24, 2011<br /> | |<br /> * Support for iOS 4.3.2 on every device that is compatible, except for the [[iPad 2]].<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.3.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | May 06, 2011<br /> | |<br /> * Support for iOS 4.3.3 on every device that is compatible, except for the [[iPad 2]].<br /> |<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> <br /> ==Creating the Firmware==<br /> PwnageTool takes the IPSW file and patches it, creating a custom version. This enables a lot more features such as pre-installed packages, [[BootNeuter]] ([[M68ap|iPhone]] software unlock), custom packages and boot logos. This method is usually less secure than the quick exploits such ([[redsn0w]], [[QuickPwn]], [[purplera1n]], [[blackra1n]], etc.).<br /> <br /> ==How to create Custom Firmware Bundles==<br /> {{main|Making PwnageTool Bundles}}<br /> <br /> ==Problems==<br /> This method does have negative aspects. The most common errors are the [[ITunes Errors#Errors 16xx|16xx range of errors]], which mean that the either the firmware file is corrupt or you didn't put it in the right mode (Recovery, DFU Mode). Sometimes the problems could just be a computer problem such as the memory is full or the USB port is broken. The most common error is [[ITunes Errors#Error 1604|Error 1604]] which means that the firmware file is corrupted.<br /> <br /> ==Windows==<br /> PwnageTool is expected to remain exclusive to Mac OS X. As of October 2009, [[User:ih8sn0w|iH8sn0w]], et. al. has announced that they made a project that will bring PwnageTool's functionality to Windows, called [[sn0wbreeze]]. [http://ih8sn0w.com/]<br /> <br /> == License ==<br /> PwnageTool is freeware.<br /> <br /> [[Category:Hacking Software]]<br /> [[Category:GUI Tools]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Redsn0w&diff=17934 Redsn0w 2011-05-06T14:54:14Z <p>Nannoid: /* Versions */</p> <hr /> <div>{{DISPLAYTITLE:redsn0w}}<br /> [[Image:Redsn0w.png|thumb|redsn0w on Mac OS X]]<br /> redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.<br /> <br /> Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.<br /> <br /> Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.<br /> <br /> Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.<br /> <br /> redsn0w [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] can jailbreak iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.<br /> <br /> == Credit ==<br /> [[iPhone Dev Team]]<br /> <br /> == Versions ==<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreak for the [[n72ap|iPod touch 2G]].<br /> |-<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.7 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.8 ====<br /> | style=&quot;white-space: nowrap;&quot; | July 2009<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3GS]] only.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports 3.0-3.1.2 on all iPhones and iPod touches ([[tethered jailbreak|tethered]] for newer devices with [[0x24000 Segment Overflow]] closed)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.3 beta ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | June 21, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Resolved a problem with iBooks.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supposed to fix any APN or MMS issues that users were seeing.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | September 21, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | October 31, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72ap|iPod touch 2G]] with [[iBoot-240.5.1|new bootrom]]) .<br /> ** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.<br /> * The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports the installation of custom bundles<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 23, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 28, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 1, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> * Allows you to &quot;deactivate&quot; a hacktivated phone, so sbinger's [http://www.bingner.com/SAM.html Subscriber Artificial Module] (SAM) can trick your iPhone and [[iTunes]] into creating legitimate activation tickets.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 7 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 2, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Introduced command-line arguments to bypass some screens.<br /> ** -b &lt;filename&gt; to specify your own boot logo PNG<br /> ** -i &lt;filename&gt; to specify your reference IPSW<br /> ** -j to ask redsn0w to “Just boot now tethered for now”<br /> ** -o for [[N88ap|iPhone 3GS]] and [[N72ap|iPod touch 2G]] units vulnerable to [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 8 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 5, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Informs users if a boot logo PNG is invalid, and why.<br /> * Introduced the &quot;-a&quot; command-line argument to eliminate clicking.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 9 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 3, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[k66ap|Apple TV 2]].<br /> * New command line parameters k and d [http://twitpic.com/4gg8n1]:<br /> ** -k --kernelcache=&lt;str&gt; use specified kernelcache (advanced)<br /> ** -d --devicetree=&lt;str&gt; use specified devicetree (advanced)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 10 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Added boot animations<br /> * Removed misleading Settings<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 11 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Makes the boot animation a bit more robust<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 12 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 8, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Fix any lingering issues with the boot animation<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 13 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 19, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.2 on all compatible devices except the [[iPad 2]] and [[N90ap|iPhone 4 (GSM)]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 14 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 19, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.2 on all compatible devices except the [[iPad 2]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 15 ====<br /> | style=&quot;white-space: nowrap;&quot; | May 06, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.3 on all compatible devices except the [[iPad 2]].<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 [[IPSW File Format|IPSW]].<br /> *** This version of &quot;Jailbreak Monte&quot; has quite a number of bugs, particularly app switcher crashes and disabled [[Bluetooth]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs on GUI apps.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 27, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs completely.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 31, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * ubsmuxd integrated.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 8, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Issues related to [[Bluetooth]] and the sandbox are resolved.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 10, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * fixes Skype<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |}<br /> <br /> == Exploits used ==<br /> For [[M68ap|iPhone]], [[N45ap|iPod touch]], and [[N82ap|iPhone 3G]], see:<br /> *[[Pwnage]]<br /> *[[Pwnage 2.0]]<br /> <br /> For [[N72ap|iPod touch 2G]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.<br /> *[[usb_control_msg(0xA1, 1) Exploit]] - used (in redsn0w 0.9.6 beta 1) to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow, as well as a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].<br /> <br /> For [[N88ap|iPhone 3GS]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> For [[N18ap|iPod touch 3G]]<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]<br /> *limera1n exploit<br /> <br /> [[Category:Hacking Software]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17933 Jailbreak (S5L8920+) 2011-05-06T14:51:14Z <p>Nannoid: /* iPod touch 4G */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, [[iBoot (Bootloader)|iBoot]] exploits won't be so useful for [[tethered jailbreak]]s, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in [[bootrom]], an iBoot exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with the [[0x24000 Segment Overflow]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it receives your ECID, saurik's servers will actively cache the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are available.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;14&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{yes|2.6.1}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;11&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;6&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17932 Jailbreak (S5L8920+) 2011-05-06T14:50:36Z <p>Nannoid: /* iPod touch 3G */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, [[iBoot (Bootloader)|iBoot]] exploits won't be so useful for [[tethered jailbreak]]s, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in [[bootrom]], an iBoot exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with the [[0x24000 Segment Overflow]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it receives your ECID, saurik's servers will actively cache the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are available.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;14&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{yes|2.6.1}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;11&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17931 Jailbreak (S5L8920+) 2011-05-06T14:49:28Z <p>Nannoid: /* iPhone 4 (GSM model) */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, [[iBoot (Bootloader)|iBoot]] exploits won't be so useful for [[tethered jailbreak]]s, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in [[bootrom]], an iBoot exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with the [[0x24000 Segment Overflow]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it receives your ECID, saurik's servers will actively cache the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are available.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;14&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{yes|2.6.1}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17930 Jailbreak (S5L8920+) 2011-05-06T14:48:07Z <p>Nannoid: /* iPhone 3GS */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, [[iBoot (Bootloader)|iBoot]] exploits won't be so useful for [[tethered jailbreak]]s, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in [[bootrom]], an iBoot exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with the [[0x24000 Segment Overflow]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it receives your ECID, saurik's servers will actively cache the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are available.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;14&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{yes|2.6.1}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17929 Jailbreak (S5L8920+) 2011-05-06T14:47:04Z <p>Nannoid: /* iPad 2 */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, [[iBoot (Bootloader)|iBoot]] exploits won't be so useful for [[tethered jailbreak]]s, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in [[bootrom]], an iBoot exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with the [[0x24000 Segment Overflow]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it receives your ECID, saurik's servers will actively cache the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are available.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |style=&quot;width:90px;&quot;| 4.3.3<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{yes|2.6.1}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17928 Jailbreak (S5L8920+) 2011-05-06T14:46:39Z <p>Nannoid: /* iPad */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, [[iBoot (Bootloader)|iBoot]] exploits won't be so useful for [[tethered jailbreak]]s, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in [[bootrom]], an iBoot exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with the [[0x24000 Segment Overflow]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it receives your ECID, saurik's servers will actively cache the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are available.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |style=&quot;width:100px;&quot;| 4.3.3<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> | {{yes|4.3.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{yes|2.6.1}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17927 Jailbreak (S5L8920+) 2011-05-06T14:44:56Z <p>Nannoid: /* iPad */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, [[iBoot (Bootloader)|iBoot]] exploits won't be so useful for [[tethered jailbreak]]s, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in [[bootrom]], an iBoot exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with the [[0x24000 Segment Overflow]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it receives your ECID, saurik's servers will actively cache the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are available.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc15}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{yes|2.6.1}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17926 Jailbreak (S5L8920+) 2011-05-06T14:44:34Z <p>Nannoid: /* Apple TV 2G */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, [[iBoot (Bootloader)|iBoot]] exploits won't be so useful for [[tethered jailbreak]]s, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in [[bootrom]], an iBoot exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with the [[0x24000 Segment Overflow]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it receives your ECID, saurik's servers will actively cache the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are available.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc15}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{yes|2.6.1}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Firmware&diff=17850 Firmware 2011-05-05T05:33:02Z <p>Nannoid: /* iPhone 4 (CDMA model) */</p> <hr /> <div>Latest Apple download links can be found [http://www.itunes.com/version here].<br /> <br /> ==[[Apple TV]]==<br /> ===[[K66ap|Apple TV (2nd generation)]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;70&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;100&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 4.1 (4.0)<br /> | [[Mojave 8M89 (Apple TV 2G)|Mojave 8M89]]<br /> | [http://appldnld.apple.com/AppleTV/061-8940.20100926.Tvtnz/AppleTV2,1_4.1_8M89_Restore.ipsw AppleTV2,1_4.1_8M89_Restore.ipsw]<br /> | &lt;code&gt;68647d6ce163fc20891ca5bcff647c8eecc2b8d9&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes}}<br /> | 253,759,976<br /> |-<br /> | 4.2 (4.1)<br /> | [[jasper 8C150 (Apple TV 2G)|Jasper 8C150]]<br /> | [http://appldnld.apple.com/AppleTV/061-8747.20101122.Vgtr5/AppleTV2,1_4.2_8C150_Restore.ipsw AppleTV2,1_4.2_8C150_Restore.ipsw]<br /> | &lt;code&gt;58f9ab479783dad3dff3834452abc2917aaef2a5&lt;/code&gt;<br /> |<br /> | {{no}}<br /> | 279,991,056<br /> |-<br /> | 4.2.1 (4.1.1)<br /> | [[jasper 8C154 (Apple TV 2G)|Jasper 8C154]]<br /> | [http://appldnld.apple.com/AppleTV/061-9978.20101214.gmabr/AppleTV2,1_4.2.1_8C154_Restore.ipsw AppleTV2,1_4.2.1_8C154_Restore.ipsw]<br /> | &lt;code&gt;c2b1adea595afa2b9caf633f0a820d3b66424dbf&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 280,052,510<br /> |-<br /> | 4.3 (4.2)<br /> | [[Durango 8F191m (Apple TV 2G)|Durango 8F191m]]<br /> | [http://appldnld.apple.com/AppleTV/061-9584.20110308.Cxdew/AppleTV2,1_4.3_8F191m_Restore.ipsw AppleTV2,1_4.3_8F191m_Restore.ipsw]<br /> | &lt;code&gt;71bf070e755753e6dd29e2fc13cff9e248b58bd0&lt;/code&gt;<br /> |<br /> | {{no}}<br /> | 332,470,394<br /> |-<br /> | 4.3 (4.2.1)<br /> | [[Durango 8F202 (Apple TV 2G)|Durango 8F202]]<br /> | [http://appldnld.apple.com/AppleTV/041-0574.20110322.Dcfr5/AppleTV2,1_4.3_8F202_Restore.ipsw AppleTV2,1_4.3_8F202_Restore.ipsw]<br /> | &lt;code&gt;41faee6b543ecace1f31558c0a167e86fe784122&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 334,284,882<br /> |}<br /> <br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] only.<br /> <br /> ==[[iPad]]==<br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| [[X-Gold 608#Known iPad Firmware Versions|Baseband]] (3G only)<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;100&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 3.2<br /> | [[Wildcat 7B367 (iPad)|Wildcat 7B367]]<br /> |rowspan=&quot;3&quot; | [[6.15.00]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPad/061-7987.20100403.mjiTr/iPad1,1_3.2_7B367_Restore.ipsw iPad1,1_3.2_7B367_Restore.ipsw]<br /> | &lt;code&gt;172e8297af74b91971a802e6ad137c891f553099&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes}}<br /> | 478,959,325<br /> |-<br /> | 3.2.1<br /> | [[Wildcat 7B405 (iPad)|Wildcat 7B405]]<br /> | [http://appldnld.apple.com/iPad/061-8282.20100713.vgtgh/iPad1,1_3.2.1_7B405_Restore.ipsw iPad1,1_3.2.1_7B405_Restore.ipsw]<br /> | &lt;code&gt;de0a2b64cd335d48fb4abc9ed8700f5dbdf768ca&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 479,012,625<br /> |-<br /> | 3.2.2<br /> | [[Wildcat 7B500 (iPad)|Wildcat 7B500]]<br /> | [http://appldnld.apple.com/iPad/061-8801.20100811.CvfR5/iPad1,1_3.2.2_7B500_Restore.ipsw iPad1,1_3.2.2_7B500_Restore.ipsw]<br /> | &lt;code&gt;68b613f78581d36eab96aa5a007001dff142baa3&lt;/code&gt;<br /> | Hotfix to prevent malicious misuse of [[Star]]'s exploits.<br /> | {{yes}}<br /> | 479,001,595<br /> |-<br /> | 4.2.1<br /> | [[Jasper 8C148 (iPad)|Jasper 8C148]]<br /> | [[7.10.00]]<br /> | [http://appldnld.apple.com/iPad/061-9857.20101122.VGthy/iPad1,1_4.2.1_8C148_Restore.ipsw iPad1,1_4.2.1_8C148_Restore.ipsw]<br /> | &lt;code&gt;8717b3bedc925b587566442ad375aa65d857e79a&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 578,084,840<br /> |-<br /> | 4.3<br /> | [[Durango 8F190 (iPad)|Durango 8F190]]<br /> | [[7.11.00]]<br /> | [http://appldnld.apple.com/iPhone4/041-0329.20110311.Cvfre/iPad1,1_4.3_8F190_Restore.ipsw iPad1,1_4.3_8F190_Restore.ipsw]<br /> | &lt;code&gt;fc97d5959a1e29d707586871004ea12e95815237&lt;/code&gt;<br /> | <br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | 625,814,678<br /> |-<br /> | 4.3.1<br /> | [[Durango 8G4 (iPad)|Durango 8G4]]<br /> |rowspan=&quot;3&quot;| [[7.11.01]]<br /> | [http://appldnld.apple.com/iPhone4/041-0550.20110325.Zsw6y/iPad1,1_4.3.1_8G4_Restore.ipsw iPad1,1_4.3.1_8G4_Restore.ipsw]<br /> | &lt;code&gt;6615b368d665630e80da975232567daf87a042b6&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 621,768,387<br /> |-<br /> | 4.3.2<br /> | [[Durango 8H7 (iPad)|Durango 8H7]]<br /> | [http://appldnld.apple.com/iPhone4/041-0661.20110414.W9Q8r/iPad1,1_4.3.2_8H7_Restore.ipsw iPad1,1_4.3.2_8H7_Restore.ipsw]<br /> | &lt;code&gt;2c86c5915a8f9e56776deba22dc048c2f42db8b7&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 622,148,907<br /> |-<br /> | 4.3.3<br /> | [[Durango 8J3 (iPad)|Durango 8J3]]<br /> | [http://appldnld.apple.com/iPhone4/041-1010.20110503.ScEp3/iPad1,1_4.3.3_8J3_Restore.ipsw iPad1,1_4.3.3_8J3_Restore.ipsw]<br /> | &lt;code&gt;e2906ef04d5991663cd6ea8b19548ec190144d46&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 622,048,364<br /> |}<br /> <br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] only.<br /> <br /> ===[[iPad 2]]===<br /> ====[[K93ap|Wi-Fi model]]====<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;100&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 4.3<br /> | [[Durango 8F191 (iPad 2 Wi-Fi)|Durango 8F191]]<br /> | [http://appldnld.apple.com/iPhone4/041-0368.20110311.SwtHr/iPad2,1_4.3_8F191_Restore.ipsw iPad2,1_4.3_8F191_Restore.ipsw]<br /> | &lt;code&gt;c4db3a44dc0986bc8344f7672cfa0255bea8af14&lt;/code&gt;<br /> | Initial shipment.<br /> | {{no}}<br /> | 641,816,049<br /> |-<br /> | 4.3.1<br /> | [[Durango 8G4 (iPad 2 Wi-Fi)|Durango 8G4]]<br /> | [http://appldnld.apple.com/iPhone4/041-0556.20110325.64rfg/iPad2,1_4.3.1_8G4_Restore.ipsw iPad2,1_4.3.1_8G4_Restore.ipsw]<br /> | &lt;code&gt;becf01c807e4c9f2654e3ffd1b83973f512ae51d&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 636,932,642<br /> |-<br /> | 4.3.2<br /> | [[Durango 8H7 (iPad 2 Wi-Fi)|Durango 8H7]]<br /> | [http://appldnld.apple.com/iPhone4/041-0663.20110414.U7bTI/iPad2,1_4.3.2_8H7_Restore.ipsw iPad2,1_4.3.2_8H7_Restore.ipsw]<br /> | &lt;code&gt;f3df44893159ec283166a77ee75fe091ac0899b0&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 637,204,516<br /> |-<br /> | 4.3.3<br /> | [[Durango 8J2 (iPad 2 Wi-Fi)|Durango 8J2]]<br /> | [http://appldnld.apple.com/iPhone4/041-1012.20110503.tmmBc/iPad2,1_4.3.3_8J2_Restore.ipsw iPad2,1_4.3.3_8J2_Restore.ipsw]<br /> | &lt;code&gt;71142e8c876ceaf64799727fc79726d1264aab6c&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 637,183,974<br /> |}<br /> <br /> ====[[K94ap|GSM model]]====<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| [[XMM 6180#Known Firmware Versions|Baseband]]<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;100&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 4.3<br /> | [[Durango 8F191 (iPad 2 GSM)|Durango 8F191]]<br /> |rowspan=&quot;4&quot;| [[4.10.01]]<br /> | [http://appldnld.apple.com/iPhone4/041-0369.20110311.Xzsew/iPad2,2_4.3_8F191_Restore.ipsw iPad2,2_4.3_8F191_Restore.ipsw]<br /> | &lt;code&gt;03f4af63f7751e429aef57ae00e675f96b271573&lt;/code&gt;<br /> | Initial shipment.<br /> | {{no}}<br /> | 649,374,499<br /> |-<br /> | 4.3.1<br /> | [[Durango 8G4 (iPad 2 GSM)|Durango 8G4]]<br /> | [http://appldnld.apple.com/iPhone4/041-0557.20110325.Jy76y/iPad2,2_4.3.1_8G4_Restore.ipsw iPad2,2_4.3.1_8G4_Restore.ipsw]<br /> | &lt;code&gt;862dbf2c94dc2f30b02101905a91a45c95c353a7&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 644,359,977<br /> |-<br /> | 4.3.2<br /> | [[Durango 8H7 (iPad 2 GSM)|Durango 8H7]]<br /> | [http://appldnld.apple.com/iPhone4/041-0664.20110414.39vUS/iPad2,2_4.3.2_8H7_Restore.ipsw iPad2,2_4.3.2_8H7_Restore.ipsw]<br /> | &lt;code&gt;e52bd4bd8eabd48e5cfd02f895292d5644e805be&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 644,615,497<br /> |-<br /> | 4.3.3<br /> | [[Durango 8J2 (iPad 2 GSM)|Durango 8J2]]<br /> | [http://appldnld.apple.com/iPhone4/041-1013.20110503.1m73D/iPad2,2_4.3.3_8J2_Restore.ipsw iPad2,2_4.3.3_8J2_Restore.ipsw]<br /> | &lt;code&gt;e378037ce0689013bf7f4689dfbb162c3c4edd16&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 644,652,318<br /> |}<br /> <br /> ====[[K95ap|CDMA model]]====<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| Baseband<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;100&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 4.3<br /> | [[Durango 8F191 (iPad 2 CDMA)|Durango 8F191]]<br /> |rowspan=&quot;4&quot;| [[2.0.4]]<br /> | [http://appldnld.apple.com/iPhone4/041-0334.20110311Plgt5/iPad2,3_4.3_8F191_Restore.ipsw iPad2,3_4.3_8F191_Restore.ipsw]<br /> | &lt;code&gt;435b84104aa3f0ae7883f9d6b1a7a3e96e552dd2&lt;/code&gt;<br /> | Initial shipment.<br /> | {{no}}<br /> | 656,018,665<br /> |-<br /> | 4.3.1<br /> | [[Durango 8G4 (iPad 2 CDMA)|Durango 8G4]]<br /> | [http://appldnld.apple.com/iPhone4/041-0544.20110325.Dew3r/iPad2,3_4.3.1_8G4_Restore.ipsw iPad2,3_4.3.1_8G4_Restore.ipsw]<br /> | &lt;code&gt;1903162ce3ffa9725304eb78275583977d1808cc&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 650,897,625<br /> |-<br /> | 4.3.2<br /> | [[Durango 8H8 (iPad 2 CDMA)|Durango 8H8]]<br /> | [http://appldnld.apple.com/iPhone4/041-0665.20110414.MbwVr/iPad2,3_4.3.2_8H8_Restore.ipsw iPad2,3_4.3.2_8H8_Restore.ipsw]<br /> | &lt;code&gt;aee35de332048941f72bfbbbdf8591a1f306c65d&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 651,222,830<br /> |-<br /> | 4.3.3<br /> | [[Durango 8J2 (iPad 2 CDMA)|Durango 8J2]]<br /> | [http://appldnld.apple.com/iPhone4/041-1014.20110503.52dap/iPad2,3_4.3.3_8J2_Restore.ipsw iPad2,3_4.3.3_8J2_Restore.ipsw]<br /> | &lt;code&gt;f087ae60c778f32bdd130043f8b67a96939489f3&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 651,189,996<br /> |}<br /> <br /> ==[[iPhone]]==<br /> ===[[M68ap|iPhone]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| [[Baseband Firmware]]<br /> !width=&quot;210&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;140&quot;| Comments<br /> !width=&quot;99&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;91&quot;| Publicly available virgin SW [[unlock]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 1.0<br /> | [[Alpine 1A420]]<br /> | [http://img399.imageshack.us/i/iphone2go0.jpg/ 03.06.01_G]<br /> | iphoneproto.zip<br /> | &lt;code&gt;6e798e906c6590a7521ef89b731569be6d05b3aa&lt;/code&gt;<br /> | Prototype; [http://forums.macrumors.com/showthread.php?t=627449 macrumors]<br /> | {{no}}<br /> | {{no}}<br /> | 109,813,128<br /> |-<br /> | 1.0.0<br /> | [[Heavenly 1A543a (iPhone)|Heavenly 1A543a]]<br /> | 03.11.02_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3538.20070629.B7vXa/iPhone1,1_1.0_1A543a_Restore.ipsw iPhone1,1_1.0_1A543a_Restore.ipsw]<br /> | &lt;code&gt;fb8bb3ee2e9a997affbb97868599f2995c78209c&lt;/code&gt;<br /> | Initial US shipment.<br /> | {{yes}}<br /> | {{yes}}<br /> | 95,604,348<br /> |-<br /> | 1.0.1<br /> | [[Heavenly 1C25 (iPhone)|Heavenly 1C25]]<br /> | 03.12.06_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3614.20070731.Nt6Y7/iPhone1,1_1.0.1_1C25_Restore.ipsw iPhone1,1_1.0.1_1C25_Restore.ipsw]<br /> | &lt;code&gt;a00b85a7a55d62a94be5fbf5effbc42fd63f3097&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 95,627,958<br /> |-<br /> | 1.0.2<br /> | [[Heavenly 1C28 (iPhone)|Heavenly 1C28]]<br /> | 03.14.08_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3823.20070821.vormd/iPhone1,1_1.0.2_1C28_Restore.ipsw iPhone1,1_1.0.2_1C28_Restore.ipsw]<br /> | &lt;code&gt;7f5c0ff1f84a0202b75a55c3fcb362e415334d1e&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 95,627,324<br /> |-<br /> | 1.1.1<br /> | [[Snowbird 3A109a (iPhone)|Snowbird 3A109a]]<br /> | 04.01.13_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3883.20070927.In76t/iPhone1,1_1.1.1_3A109a_Restore.ipsw iPhone1,1_1.1.1_3A109a_Restore.ipsw]<br /> | &lt;code&gt;d441dd1c71ce18f25d8fc4faa71c1e6eaa02d02c&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 159,668,150<br /> |-<br /> | 1.1.2<br /> | [[Oktoberfest 3B48b (iPhone)|Oktoberfest 3B48b]]<br /> | 04.02.13_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4037.20071107.5Bghn/iPhone1,1_1.1.2_3B48b_Restore.ipsw iPhone1,1_1.1.2_3B48b_Restore.ipsw]<br /> | &lt;code&gt;797c02e7d660940e8d9a16cc7229ccf3f67dd8b1&lt;/code&gt;<br /> | Initial Euro shipment.<br /> | {{yes}}<br /> | {{yes}}<br /> | 167,927,501<br /> |-<br /> | 1.1.3<br /> | [[Little Bear 4A93 (iPhone)|Little Bear 4A93]]<br /> | 04.03.13_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4061.20080115.4Fvn7/iPhone1,1_1.1.3_4A93_Restore.ipsw iPhone1,1_1.1.3_4A93_Restore.ipsw]<br /> | &lt;code&gt;b3dec7580bd00dc4faf28449d9618ef40aeacc96&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 169,950,551<br /> |-<br /> | 1.1.4<br /> | [[Little Bear 4A102 (iPhone)|Little Bear 4A102]]<br /> | 04.04.05_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4313.20080226.Sw39i/iPhone1,1_1.1.4_4A102_Restore.ipsw iPhone1,1_1.1.4_4A102_Restore.ipsw]<br /> | &lt;code&gt;000811bac096011b50ebf6ec1ec2285b62fda4cb&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 169,946,442<br /> |-<br /> | 2.0<br /> | [[Big Bear 5A347 (iPhone)|Big Bear 5A347]]<br /> |rowspan=&quot;11&quot;| 04.05.04_G<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4956.20080710.V50OI/iPhone1,1_2.0_5A347_Restore.ipsw iPhone1,1_2.0_5A347_Restore.ipsw]<br /> | &lt;code&gt;9c510a3cfce789fa5f92a8f763c231bac82ff6d4&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> |rowspan=&quot;11&quot; {{yes|[[BootNeuter]]}}<br /> | 228,768,637<br /> |-<br /> | 2.0.1<br /> | [[Big Bear 5B108 (iPhone)|Big Bear 5B108]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5135.20080729.Vfgtr/iPhone1,1_2.0.1_5B108_Restore.ipsw iPhone1,1_2.0.1_5B108_Restore.ipsw]<br /> | &lt;code&gt;61de6a2bd6ceddc9ecabad1671b91a59b3824bc4&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 254,048,068<br /> |-<br /> | 2.0.2<br /> | [[Big Bear 5C1 (iPhone)|Big Bear 5C1]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5246.20080818.2V0hO/iPhone1,1_2.0.2_5C1_Restore.ipsw iPhone1,1_2.0.2_5C1_Restore.ipsw]<br /> | &lt;code&gt;b84b57bea919bdc720287ec908c1378e7d7b5e1b&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 253,589,000<br /> |-<br /> | 2.1<br /> | [[Sugar Bowl 5F136 (iPhone)|Sugar Bowl 5F136]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5202.20080909.gkbEj/iPhone1,1_2.1_5F136_Restore.ipsw iPhone1,1_2.1_5F136_Restore.ipsw]<br /> | &lt;code&gt;353b7745767b85932e14e262e69463620939bdf7&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 242,171,241<br /> |-<br /> | 2.2<br /> | [[Timberline 5G77 (iPhone)|Timberline 5G77]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5779.20081120.Pt5yH/iPhone1,1_2.2_5G77_Restore.ipsw iPhone1,1_2.2_5G77_Restore.ipsw]<br /> | &lt;code&gt;cbfc6ff886ce89868a55547b9fb980dbf92e6418&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 257,576,980<br /> |-<br /> | 2.2.1<br /> | [[SUTimberline 5H11 (iPhone)|SUTimberline 5H11]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5830.20090127.Mmni6/iPhone1,1_2.2.1_5H11_Restore.ipsw iPhone1,1_2.2.1_5H11_Restore.ipsw]<br /> | &lt;code&gt;43b95ebe1e51f8d30eae916053396595c08440d3&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 257,593,705<br /> |-<br /> | 3.0<br /> | [[Kirkwood 7A341 (iPhone)|Kirkwood 7A341]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6580.20090617.XsP76/iPhone1,1_3.0_7A341_Restore.ipsw iPhone1,1_3.0_7A341_Restore.ipsw]<br /> | &lt;code&gt;2afd3f8ede17390737f508473ed205506a0bd23f&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 240,394,111<br /> |-<br /> | 3.0.1<br /> | [[Kirkwood 7A400 (iPhone)|Kirkwood 7A400]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6974.20090731.Cf4Tg/iPhone1,1_3.0.1_7A400_Restore.ipsw iPhone1,1_3.0.1_7A400_Restore.ipsw]<br /> | &lt;code&gt;34c391fbbc7b31b159372766de39ce5c9cc26ebb&lt;/code&gt;<br /> | Hotfix for an SMS exploit.<br /> | {{yes}}<br /> | 240,439,502<br /> |-<br /> | 3.1<br /> | [[Northstar 7C144 (iPhone)|Northstar 7C144]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6605.20090909.PQ3ws/iPhone1,1_3.1_7C144_Restore.ipsw iPhone1,1_3.1_7C144_Restore.ipsw]<br /> | &lt;code&gt;b7b5f436f81c6f855410e8b44a3d432ccaacd6fc&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 252,536,460<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPhone)|Northstar 7D11]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7268.20091008.32pNe/iPhone1,1_3.1.2_7D11_Restore.ipsw iPhone1,1_3.1.2_7D11_Restore.ipsw]<br /> | &lt;code&gt;e4a1171542dbbd3093516d9c02047b9f7e143050&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 252,515,888<br /> |-<br /> | 3.1.3<br /> | [[SUNorthstarTwo 7E18 (iPhone)|SUNorthstarTwo 7E18]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7481.20100202.4orot/iPhone1,1_3.1.3_7E18_Restore.ipsw iPhone1,1_3.1.3_7E18_Restore.ipsw]<br /> | &lt;code&gt;eab23a7f8d2a17cb71046c50fc5f67ec390a3c2b&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 238,319,275<br /> |}<br /> <br /> ===[[N82ap|iPhone 3G]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| [[X-Gold 608#Known iPhone Firmware Versions|Baseband]]<br /> !width=&quot;210&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;140&quot;| Comments<br /> !width=&quot;99&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;90&quot;| Publicly available virgin SW [[unlock]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 2.0<br /> | [[Big Bear 5A345 (iPhone 3G)|Big Bear 5A345]]<br /> |rowspan=&quot;2&quot; | [[1.45.00]]<br /> | No download available<br /> |<br /> | Initial shipment.<br /> | {{yes}}<br /> |rowspan=&quot;5&quot; {{partial|Upgrade to 2.2}}<br /> | <br /> |-<br /> | 2.0<br /> | [[Big Bear 5A347 (iPhone 3G)|Big Bear 5A347]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4955.20080710.bgt53/iPhone1,2_2.0_5A347_Restore.ipsw iPhone1,2_2.0_5A347_Restore.ipsw]<br /> | &lt;code&gt;af9506ca0034e462674f9f59c5406f159eaf9fc1&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 235,957,125<br /> |-<br /> | 2.0.1<br /> | [[Big Bear 5B108 (iPhone 3G)|Big Bear 5B108]]<br /> | [[1.48.02]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5134.20080729.Q2W3E/iPhone1,2_2.0.1_5B108_Restore.ipsw iPhone1,2_2.0.1_5B108_Restore.ipsw]<br /> | &lt;code&gt;e81c7ac7e334a3e9d81b3b47894bfaa1ec495482&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 261,224,227<br /> |-<br /> | 2.0.2<br /> | [[Big Bear 5C1 (iPhone 3G)|Big Bear 5C1]]<br /> | [[2.08.01]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5241.20080818.t5Fv3/iPhone1,2_2.0.2_5C1_Restore.ipsw iPhone1,2_2.0.2_5C1_Restore.ipsw]<br /> | &lt;code&gt;bef7fef954293046420fbcf947379839178a195b&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 260,761,030<br /> |-<br /> | 2.1<br /> | [[Sugar Bowl 5F136 (iPhone 3G)|Sugar Bowl 5F136]]<br /> | [[2.11.07]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5198.20080909.K3294/iPhone1,2_2.1_5F136_Restore.ipsw iPhone1,2_2.1_5F136_Restore.ipsw]<br /> | &lt;code&gt;c6957dcbf2a95ccfd6dce374a727b1b7700a9043&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 249,341,655<br /> |-<br /> | 2.2<br /> | [[Timberline 5G77 (iPhone 3G)|Timberline 5G77]]<br /> | [[2.28.00]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5778.20081120.Aqw4R/iPhone1,2_2.2_5G77_Restore.ipsw iPhone1,2_2.2_5G77_Restore.ipsw]<br /> | &lt;code&gt;f67f8b2b842428bf89456cda0c2d5cf954d111a4&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes|[[Ultrasn0w|yellowsn0w]]}}<br /> | 258,342,348<br /> |-<br /> | 2.2.1<br /> | [[SUTimberline 5H11 (iPhone 3G)|SUTimberline 5H11]]<br /> | [[2.30.03]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5828.20090127.aQLi8/iPhone1,2_2.2.1_5H11_Restore.ipsw iPhone1,2_2.2.1_5H11_Restore.ipsw]<br /> | &lt;code&gt;e0098e6fab5c90b59e067e03ae3ccd4a7cd0f39c&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{partial|Upgrade to 3.0}}<br /> | 258,359,073<br /> |-<br /> | 3.0<br /> | [[Kirkwood 7A341 (iPhone 3G)|Kirkwood 7A341]]<br /> |rowspan=&quot;2&quot; | [[4.26.08]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6578.20090617.VfgtU/iPhone1,2_3.0_7A341_Restore.ipsw iPhone1,2_3.0_7A341_Restore.ipsw]<br /> | &lt;code&gt;94f1fb43de12bff0f168ce690b7e794cc6220ae3&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> |rowspan=&quot;2&quot; {{yes|[[ultrasn0w]]}}<br /> | 241,229,233<br /> |-<br /> | 3.0.1<br /> | [[Kirkwood 7A400 (iPhone 3G)|Kirkwood 7A400]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6972.20090731.Zx3Rr/iPhone1,2_3.0.1_7A400_Restore.ipsw iPhone1,2_3.0.1_7A400_Restore.ipsw]<br /> | &lt;code&gt;a148ff39fa4dea499e7a9dd007b63e90c4f56666&lt;/code&gt;<br /> | Hotfix for an SMS exploit.<br /> | {{yes}}<br /> | 241,274,617<br /> |-<br /> | 3.1<br /> | [[Northstar 7C144 (iPhone 3G)|Northstar 7C144]]<br /> |rowspan=&quot;2&quot; | [[5.11.07]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6600.20090909.AwndZ/iPhone1,2_3.1_7C144_Restore.ipsw iPhone1,2_3.1_7C144_Restore.ipsw]<br /> | &lt;code&gt;9b3b3c148170b012012278efda9ff5c38282d559&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> |rowspan=&quot;2&quot; {{yes|[[blacksn0w]] or [[ultrasn0w]]}}<br /> | 253,361,339<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPhone 3G)|Northstar 7D11]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7265.20091008.Xsd32/iPhone1,2_3.1.2_7D11_Restore.ipsw iPhone1,2_3.1.2_7D11_Restore.ipsw]<br /> | &lt;code&gt;b1a6ab2771bb5da372ba75a8fa3e1d72b71359d0&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 253,340,786<br /> |-<br /> | 3.1.3<br /> | [[SUNorthstarTwo 7E18 (iPhone 3G)|SUNorthstarTwo 7E18]]<br /> | [[5.12.01]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7468.20100202.pbnrt/iPhone1,2_3.1.3_7E18_Restore.ipsw iPhone1,2_3.1.3_7E18_Restore.ipsw]<br /> | &lt;code&gt;f5950afca546f93e281ba3cdb08bc0cfed7f0896&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes|[[ultrasn0w]]}}<br /> | 239,139,281<br /> |-<br /> | 4.0<br /> | [[Apex 8A293 (iPhone 3G)|Apex 8A293]]<br /> |rowspan=&quot;3&quot; | [[5.13.04]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7436.20100621.58Yt4/iPhone1,2_4.0_8A293_Restore.ipsw iPhone1,2_4.0_8A293_Restore.ipsw]<br /> | &lt;code&gt;ee1eba9281b902d7ff3f24d50f9aebff0df27f92&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> |rowspan=&quot;3&quot; {{yes|[[ultrasn0w]]}}<br /> | 306,274,631<br /> |-<br /> | 4.0.1<br /> | [[Apex 8A306 (iPhone 3G)|Apex 8A306]]<br /> | [http://appldnld.apple.com/iPhone4/061-8616.20100715.phnt4/iPhone1,2_4.0.1_8A306_Restore.ipsw iPhone1,2_4.0.1_8A306_Restore.ipsw]<br /> | &lt;code&gt;940bd2b36c646f6673419eab661ac1f13248e592&lt;/code&gt;<br /> | New formula to calculate bars. Otherwise, it's the same as 4.0.<br /> | {{yes}}<br /> | 320,237,975<br /> |-<br /> | 4.0.2<br /> | [[Apex 8A400 (iPhone 3G)|Apex 8A400]]<br /> | [http://appldnld.apple.com/iPhone4/061-8802.20100811.XcfpR/iPhone1,2_4.0.2_8A400_Restore.ipsw iPhone1,2_4.0.2_8A400_Restore.ipsw]<br /> | &lt;code&gt;ee2bc74719170a7a2440b593b6f300727c930c69&lt;/code&gt;<br /> | Hotfix to prevent malicious misuse of [[Star]]'s exploits.<br /> | {{yes}}<br /> | 320,216,794<br /> |-<br /> | 4.1<br /> | [[Baker 8B117 (iPhone 3G)|Baker 8B117]]<br /> | [[5.14.02]]<br /> | [http://appldnld.apple.com/iPhone4/061-7932.20100908.3fgt5/iPhone1,2_4.1_8B117_Restore.ipsw iPhone1,2_4.1_8B117_Restore.ipsw]<br /> |&lt;code&gt;d87bab469dd1146ab83ddcc23f03b3164d7e09d4&lt;/code&gt;<br /> | <br /> | {{Yes}}<br /> | {{partial|Upgrade baseband to [[6.15.00]]}}<br /> | 323,137,556<br /> |-<br /> |-<br /> | 4.2.1<br /> | [[Jasper 8C148 (iPhone 3G)|Jasper 8C148]]<br /> | [[5.15.04]]<br /> | [http://appldnld.apple.com/iPhone4/061-9853.20101122.Vfgt5/iPhone1,2_4.2.1_8C148_Restore.ipsw iPhone1,2_4.2.1_8C148_Restore.ipsw]<br /> |&lt;code&gt;d2ed58586e8ca2153f2e2ec585bba8afc5173378&lt;/code&gt;<br /> | <br /> | {{Yes}}<br /> | {{partial|Upgrade baseband to [[6.15.00]]}}<br /> | 338,579,762<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> Units with the new bootrom began shipping around September 2009.<br /> <br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| [[X-Gold 608#Known iPhone Firmware Versions|Baseband]]<br /> !width=&quot;210&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;140&quot;| Comments<br /> !width=&quot;95&quot;| Publicly available virgin [[jailbreak]]? ([[IBoot-359.3|old bootrom]])<br /> !width=&quot;100&quot;| Publicly available virgin [[jailbreak]]? ([[IBoot-359.3.2|new bootrom]])<br /> !width=&quot;80&quot;| Publicly available virgin SW [[unlock]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 3.0<br /> | [[Kirkwood 7A341 (iPhone 3GS)|Kirkwood 7A341]]<br /> |rowspan=&quot;2&quot; | [[4.26.08]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6582.20090617.LlI87/iPhone2,1_3.0_7A341_Restore.ipsw iPhone2,1_3.0_7A341_Restore.ipsw] <br /> | &lt;code&gt;d8534408c8679c830fd0c4e36ef9762c11ef73df&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes}}<br /> |rowspan=&quot;2&quot; {{no|[[SHSH]]s unavailable at release}}<br /> |rowspan=&quot;2&quot; {{yes|[[ultrasn0w]]}}<br /> | 312,292,933<br /> |-<br /> | 3.0.1<br /> | [[Kirkwood 7A400 (iPhone 3GS)|Kirkwood 7A400]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6976.20090731.Vgbt5/iPhone2,1_3.0.1_7A400_Restore.ipsw iPhone2,1_3.0.1_7A400_Restore.ipsw]<br /> | &lt;code&gt;30006575af931e3da0521febace005152cdb8853&lt;/code&gt;<br /> | Hotfix for an SMS exploit.<br /> | {{yes}}<br /> | 312,330,244<br /> |-<br /> | 3.1<br /> | [[Northstar 7C144 (iPhone 3GS)|Northstar 7C144]]<br /> |rowspan=&quot;2&quot; | [[5.11.07]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6609.20090909.mwws4/iPhone2,1_3.1_7C144_Restore.ipsw iPhone2,1_3.1_7C144_Restore.ipsw]<br /> | &lt;code&gt;527c74f87588afa1d69c1e2c08eedc88f113013a&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> |rowspan=&quot;2&quot; {{yes|[[blacksn0w]] or [[ultrasn0w]]}}<br /> | 321,011,474<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPhone 3GS)|Northstar 7D11]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7270.20091008.phn32/iPhone2,1_3.1.2_7D11_Restore.ipsw iPhone2,1_3.1.2_7D11_Restore.ipsw]<br /> | &lt;code&gt;6998bb7d9e869b2d89a08853312f9457d070fb1f&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes}}<br /> | 321,015,700<br /> |-<br /> | 3.1.3<br /> | [[SUNorthstarTwo 7E18 (iPhone 3GS)|SUNorthstarTwo 7E18]]<br /> | [[5.12.01]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7472.20100202.8tugj/iPhone2,1_3.1.3_7E18_Restore.ipsw iPhone2,1_3.1.3_7E18_Restore.ipsw]<br /> | &lt;code&gt;8cb3775e62c6f72059a962bf891b4e145b965052&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes|[[ultrasn0w]]}}<br /> | 305,122,343<br /> |-<br /> | 4.0<br /> | [[Apex 8A293 (iPhone 3GS)|Apex 8A293]]<br /> |rowspan=&quot;3&quot; | [[5.13.04]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7437.20100621.5urG8/iPhone2,1_4.0_8A293_Restore.ipsw iPhone2,1_4.0_8A293_Restore.ipsw]<br /> | &lt;code&gt;e065245874c73510ceb8fa4bd9388b60d46eb252&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes}}<br /> |rowspan=&quot;3&quot; {{yes|[[ultrasn0w]]}}<br /> | 396,281,280<br /> |-<br /> | 4.0.1<br /> | [[Apex 8A306 (iPhone 3GS)‎|Apex 8A306]]<br /> | [http://appldnld.apple.com/iPhone4/061-8618.20100715.Zapn4/iPhone2,1_4.0.1_8A306_Restore.ipsw iPhone2,1_4.0.1_8A306_Restore.ipsw]<br /> | &lt;code&gt;c2b6fb9a158547ce726baa1bf8f0558a71518fec&lt;/code&gt;<br /> | New formula to calculate bars. Otherwise, it's the same as 4.0.<br /> | {{yes}}<br /> | {{yes}}<br /> | 396,322,891<br /> |-<br /> | 4.0.2<br /> | [[Apex 8A400 (iPhone 3GS)|Apex 8A400]]<br /> | [http://appldnld.apple.com/iPhone4/061-8805.20100811.Dcr4e/iPhone2,1_4.0.2_8A400_Restore.ipsw iPhone2,1_4.0.2_8A400_Restore.ipsw]<br /> | &lt;code&gt;61d21363ced6e006cc226f9a0a0e9c6ed8e048ab&lt;/code&gt;<br /> | Hotfix to prevent malicious misuse of [[Star]]'s exploits.<br /> | {{yes}}<br /> | {{yes}}<br /> | 396,310,640<br /> |-<br /> | 4.1<br /> | [[Baker 8B117 (iPhone 3GS)|Baker 8B117]]<br /> | [[5.14.02]]<br /> | [http://appldnld.apple.com/iPhone4/061-7938.20100908.F3rCk/iPhone2,1_4.1_8B117_Restore.ipsw iPhone2,1_4.1_8B117_Restore.ipsw]<br /> |&lt;code&gt;2d1657cd33ae23b8d4e79e41fe758d09d3c52e30&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | {{partial|Upgrade baseband to [[6.15.00]]}}<br /> | 400,572,133<br /> |-<br /> | 4.2.1<br /> | [[Jasper 8C148a (iPhone 3GS)|Jasper 8C148a]]<br /> | [[5.15.04]]<br /> | [http://appldnld.apple.com/iPhone4/061-9895.20101122.Cdew2/iPhone2,1_4.2.1_8C148a_Restore.ipsw iPhone2,1_4.2.1_8C148a_Restore.ipsw]<br /> | &lt;code&gt;2787bb9fbf18594279d05682e6fd16d2b9612a2a&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | {{partial|Upgrade baseband to [[6.15.00]]}}<br /> | 420,813,164<br /> |-<br /> | 4.3<br /> | [[Durango 8F190 (iPhone 3GS)|Durango 8F190]]<br /> |rowspan=&quot;2&quot;| [[5.16.00]]<br /> | [http://appldnld.apple.com/iPhone4/041-0328.20110311.Lkhy6/iPhone2,1_4.3_8F190_Restore.ipsw iPhone2,1_4.3_8F190_Restore.ipsw]<br /> | &lt;code&gt;d05108c7338f7df7026b2d9a84f632a096bace92&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> |rowspan=&quot;2&quot; {{partial|Upgrade baseband to [[6.15.00]]}}<br /> | 443,762,287<br /> |-<br /> | 4.3.1<br /> | [[Durango 8G4 (iPhone 3GS)|Durango 8G4]]<br /> | [http://appldnld.apple.com/iPhone4/041-0549.20110325.ZxP8u/iPhone2,1_4.3.1_8G4_Restore.ipsw iPhone2,1_4.3.1_8G4_Restore.ipsw]<br /> | &lt;code&gt;6de986f2dbd16a65db122e7c54a70f31812d028a&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 440,276,917<br /> |-<br /> | 4.3.2<br /> | [[Durango 8H7 (iPhone 3GS)|Durango 8H7]]<br /> |rowspan=&quot;2&quot;| [[5.16.02]]<br /> | [http://appldnld.apple.com/iPhone4/041-0660.20110414.Gwed5/iPhone2,1_4.3.2_8H7_Restore.ipsw iPhone2,1_4.3.2_8H7_Restore.ipsw]<br /> | &lt;code&gt;4021a2d82971fc4c637f1fdb6ce7c4dcfb7ac0d7&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> |rowspan=&quot;2&quot; {{partial|Upgrade baseband to [[6.15.00]]}}<br /> | 440,519,356<br /> |-<br /> | 4.3.3<br /> | [[Durango 8J2 (iPhone 3GS)|Durango 8J2]]<br /> | [http://appldnld.apple.com/iPhone4/041-1009.20110503.M73Yr/iPhone2,1_4.3.3_8J2_Restore.ipsw iPhone2,1_4.3.3_8J2_Restore.ipsw]<br /> | &lt;code&gt;027aaf90744076551a93a7f78e9aae2c740f3b40&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | {{no}}<br /> | 440,519,759<br /> |}<br /> <br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] only.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| [[XMM 6180#Known Firmware Versions|Baseband]]<br /> !width=&quot;210&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;140&quot;| Comments<br /> !width=&quot;95&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;95&quot;| Publicly available virgin SW [[unlock]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 4.0<br /> | [[Apex 8A293 (iPhone 4)|Apex 8A293]]<br /> |rowspan=&quot;3&quot; | [[1.59.00]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7380.20100621,Vfgb5/iPhone3,1_4.0_8A293_Restore.ipsw iPhone3,1_4.0_8A293_Restore.ipsw]<br /> | &lt;code&gt;171c2a3995fa149f2a369ccd87f82c5c30da3f88&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes}}<br /> |rowspan=&quot;3&quot; {{Yes|[[ultrasn0w]]}}<br /> | 607,363,121<br /> |-<br /> | 4.0.1<br /> | [[Apex 8A306 (iPhone 4)|Apex 8A306]]<br /> | [http://appldnld.apple.com/iPhone4/061-8619.20100715.4Pnsx/iPhone3,1_4.0.1_8A306_Restore.ipsw iPhone3,1_4.0.1_8A306_Restore.ipsw]<br /> | &lt;code&gt;a9cf20679273b7e502ab384854ba96cc2a54d532&lt;/code&gt;<br /> | New formula to calculate bars. Otherwise, it's the same as 4.0.<br /> | {{yes}}<br /> | 607,380,127<br /> |-<br /> | 4.0.2<br /> | [[Apex 8A400 (iPhone 4)|Apex 8A400]]<br /> | [http://appldnld.apple.com/iPhone4/061-8807.20100811.3Edre/iPhone3,1_4.0.2_8A400_Restore.ipsw iPhone3,1_4.0.2_8A400_Restore.ipsw]<br /> | &lt;code&gt;19eb071cdb9f1601b106825d0a16b1449c6eef8c&lt;/code&gt;<br /> | Hotfix to prevent malicious misuse of [[Star]]'s exploits.<br /> | {{yes}}<br /> | 607,375,880<br /> |-<br /> | 4.1<br /> | [[Baker 8B117 (iPhone 4)|Baker 8B117]]<br /> | [[2.10.04]]<br /> | [http://appldnld.apple.com/iPhone4/061-7939.20100908.Lcyg3/iPhone3,1_4.1_8B117_Restore.ipsw iPhone3,1_4.1_8B117_Restore.ipsw]<br /> |&lt;code&gt;a3f8a333ca181146b862ca6a59c9a6e7c27eba0b&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{No}}<br /> | 618,501,195<br /> |-<br /> | 4.2.1<br /> | [[Jasper 8C148 (iPhone 4)|Jasper 8C148]]<br /> | [[3.10.01]]<br /> | [http://appldnld.apple.com/iPhone4/061-9858.20101122.Er456/iPhone3,1_4.2.1_8C148_Restore.ipsw iPhone3,1_4.2.1_8C148_Restore.ipsw]<br /> |&lt;code&gt;366b28e9c95936bd4b11a84d54fefaf079fd6411&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{No}}<br /> | 654,550,096<br /> |-<br /> | 4.3<br /> | [[Durango 8F190 (iPhone 4)|Durango 8F190]]<br /> |rowspan=&quot;4&quot;| [[4.10.01]]<br /> | [http://appldnld.apple.com/iPhone4/041-0330.20110311.Cswe3/iPhone3,1_4.3_8F190_Restore.ipsw iPhone3,1_4.3_8F190_Restore.ipsw]<br /> |&lt;code&gt;146cd896abb21680383fe675cbc99fc36d3cce57&lt;/code&gt;<br /> | <br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> |rowspan=&quot;4&quot; {{No}}<br /> | 702,264,955<br /> |-<br /> | 4.3.1<br /> | [[Durango 8G4 (iPhone 4)|Durango 8G4]]<br /> | [http://appldnld.apple.com/iPhone4/041-0551.20110325.Aw2Dr/iPhone3,1_4.3.1_8G4_Restore.ipsw iPhone3,1_4.3.1_8G4_Restore.ipsw]<br /> |&lt;code&gt;6694f69c84d36248d5bb71ba78ddb1f4946260f0&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 698,304,690<br /> |-<br /> | 4.3.2<br /> | [[Durango 8H7 (iPhone 4)|Durango 8H7]]<br /> | [http://appldnld.apple.com/iPhone4/041-0662.20110414.byQ84/iPhone3,1_4.3.2_8H7_Restore.ipsw iPhone3,1_4.3.2_8H7_Restore.ipsw]<br /> |&lt;code&gt;211e556a558ad18921c8b837db65aa20a373db77&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 698,525,410<br /> |-<br /> | 4.3.3<br /> | [[Durango 8J2 (iPhone 4)|Durango 8J2]]<br /> | [http://appldnld.apple.com/iPhone4/041-1011.20110503.q7fGc/iPhone3,1_4.3.3_8J2_Restore.ipsw iPhone3,1_4.3.3_8J2_Restore.ipsw]<br /> |&lt;code&gt;b2e221543f24a66209c70e8465d037fe22afeefa&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 698,558,606<br /> |}<br /> <br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] only.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;120&quot;| Build<br /> !width=&quot;70&quot;| Baseband<br /> !width=&quot;210&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;140&quot;| Comments<br /> !width=&quot;95&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;95&quot;| Publicly available virgin SW [[unlock]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 4.2.5<br /> | [[Phoenix 8E128 (iPhone 4 CDMA)|Phoenix 8E128]]<br /> |rowspan=&quot;2&quot;| [[1.0.05]]<br /> | No download available<br /> | &lt;code&gt;?&lt;/code&gt;<br /> | Initial shipment.<br /> | {{no}}<br /> | rowspan=&quot;2&quot; {{no}}<br /> | ?<br /> |-<br /> | 4.2.6<br /> | [[Phoenix 8E200 (iPhone 4 CDMA)|Phoenix 8E200]]<br /> | [http://appldnld.apple.com/iPhone4/041-0177.20110131.Pyvrz/iPhone3,3_4.2.6_8E200_Restore.ipsw iPhone3,3_4.2.6_8E200_Restore.ipsw]<br /> | &lt;code&gt;f32cf46790a473a6c12f9dbd3773bf40fbdf6eee&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes}}<br /> | 683,594,406<br /> |-<br /> | 4.2.7<br /> | [[Phoenix 8E303 (iPhone 4 CDMA)|Phoenix 8E303]]<br /> | rowspan=&quot;2&quot;| [[1.0.06]]<br /> | [http://appldnld.apple.com/iPhone4/041-0614.20110414.B47xa/iPhone3,3_4.2.7_8E303_Restore.ipsw iPhone3,3_4.2.7_8E303_Restore.ipsw]<br /> | &lt;code&gt;724c173be65ffb1ca3ea5da73a331ddf1319884f&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | rowspan=&quot;2&quot; {{no}}<br /> | 684,508,142<br /> |-<br /> | 4.2.8<br /> | [[Phoenix 8E401 (iPhone 4 CDMA)|Phoenix 8E401]]<br /> | [http://akamai.info.apple.com/iPhone4/041-1022.20110503.5g8k7/iPhone3,3_4.2.8_8E401_Restore.ipsw iPhone3,3_4.2.8_8E401_Restore.ipsw]<br /> | &lt;code&gt;84a695036cc6ab4954147ac1822144b33fbc5c31&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 684,508,142<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] only.<br /> <br /> ==[[iPod touch]]==<br /> ===[[N45ap|iPod touch (1st generation)]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;168&quot;| Build<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;100&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 1.1<br /> | [[Snowbird 3A100a (iPod touch)|Snowbird 3A100a]]<br /> | No download available<br /> |<br /> | Initial shipment.<br /> | {{no}}<br /> |<br /> |-<br /> | 1.1<br /> | [[Snowbird 3A101a (iPod touch)|Snowbird 3A101a]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-3882.20070910.N8uyT/iPod1,1_1.1_3A101a_Restore.ipsw iPod1,1_1.1_3A101a_Restore.ipsw]<br /> | &lt;code&gt;9b0d83c7f8b4328174a3f31e0e93f60e591ae143&lt;/code&gt;<br /> |<br /> | {{no}}<br /> | 157,890,186<br /> |-<br /> | 1.1.1<br /> | [[Snowbird 3A110a (iPod touch)|Snowbird 3A110a]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-3932.20070927.p23dD/iPod1,1_1.1.1_3A110a_Restore.ipsw iPod1,1_1.1.1_3A110a_Restore.ipsw]<br /> | &lt;code&gt;84bbc6ea8bf29745195bc9926c1874f7c2a36f32&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 157,906,686<br /> |-<br /> | 1.1.2<br /> | [[Oktoberfest 3B48b (iPod touch)|Oktoberfest 3B48b]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4036.20071107.9g3DF/iPod1,1_1.1.2_3B48b_Restore.ipsw iPod1,1_1.1.2_3B48b_Restore.ipsw]<br /> | &lt;code&gt;108d8ffe9ea75e61cd5e57170ad388b7fa00d923&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 165,567,897<br /> |-<br /> | 1.1.3<br /> | [[Little Bear 4A93 (iPod touch)|Little Bear 4A93]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/061-4060.20080115.9Iuh5/iPod1,1_1.1.3_4A93_Restore.ipsw iPod1,1_1.1.3_4A93_Restore.ipsw]<br /> | &lt;code&gt;8dca23eec69d5ae58fbf3d4a23276e46cbb2e3c6&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 173,511,411<br /> |-<br /> | 1.1.4<br /> | [[Little Bear 4A102 (iPod touch)|Little Bear 4A102]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4312.20080226.Btu45/iPod1,1_1.1.4_4A102_Restore.ipsw iPod1,1_1.1.4_4A102_Restore.ipsw]<br /> | &lt;code&gt;c148d1eb1c979bb6434175411d4a372103a4fdd2&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 173,519,589<br /> |-<br /> | 1.1.5<br /> | [[Little Bear 4B1 (iPod touch)|Little Bear 4B1]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4841.20080714.bgy8O/iPod1,1_1.1.5_4B1_Restore.ipsw iPod1,1_1.1.5_4B1_Restore.ipsw]<br /> | &lt;code&gt;1b818911316e4248ee01d3ec67f9d39afc3db240&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 173,519,637<br /> |-<br /> | 2.0<br /> | [[Big Bear 5A347 (iPod touch)|Big Bear 5A347]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;ae82798e85f9953b0f4798bad36187cb020c9d22&lt;/code&gt;<br /> | 2.0+ is a paid upgrade series<br /> | {{yes}}<br /> | 233,409,573<br /> |-<br /> | 2.0.1<br /> | [[Big Bear 5B108 (iPod touch)|Big Bear 5B108]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;a81b6e7af4b85ef436d047f9da57c0f694d8964a&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 258,660,321<br /> |-<br /> | 2.0.2<br /> | [[Big Bear 5C1 (iPod touch)|Big Bear 5C1]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;c8b6f9fefa3f3777c56285dfe4c735b1e08a81a2&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 258,201,218<br /> |-<br /> | 2.1<br /> | [[Sugar Bowl 5F137 (iPod touch)|Sugar Bowl 5F137]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;fc7f6d0972927df502ffca47438ca75dcccffaf3&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 251,155,156<br /> |-<br /> | 2.2<br /> | [[Timberline 5G77 (iPod touch)|Timberline 5G77]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;081a7de363230fb38d0ce092cbbe42f2a50c8a5f&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 260,186,851<br /> |-<br /> | 2.2.1<br /> | [[SUTimberline 5H11 (iPod touch)|SUTimberline 5H11]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;fc69be9e421bc0630567184506ab771f6b7ef68b&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 260,166,688<br /> |-<br /> | 3.0<br /> | [[Kirkwood 7A341 (iPod touch)|Kirkwood 7A341]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;dff2bd14931225908a360fb8e60a336f17d2dd6d&lt;/code&gt;<br /> | 3.0+ is a paid upgrade series<br /> | {{yes}}<br /> | 242,458,552<br /> |-<br /> | 3.1.1<br /> | [[Northstar 7C145 (iPod touch)|Northstar 7C145]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;c6270780c166db4c9f4f0a7fa945754a1f9fe7e8&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 249,755,862<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPod touch)|Northstar 7D11]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;7367dd9ba58a3b9777307368a0128e696fdfc9a6&lt;/code&gt;<br /> | <br /> | {{yes}} <br /> | 249,780,497<br /> |-<br /> | 3.1.3<br /> | [[SUNorthstarTwo 7E18 (iPod touch)|SUNorthstarTwo 7E18]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;5f897990f19d2f093b35e0813d7d77806404fb1f&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 235,678,189<br /> |}<br /> <br /> ===[[N72ap|iPod touch (2nd generation)]]===<br /> Units with the new bootrom have model numbers that start with &quot;MC.&quot;<br /> <br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;168&quot;| Build<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;95&quot;| Publicly available virgin [[jailbreak]]? ([[IBoot-240.4|old bootrom]])<br /> !width=&quot;100&quot;| Publicly available virgin [[jailbreak]]? ([[IBoot-240.5.1|new bootrom]])<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 2.1.1<br /> | [[Sugar Bowl 5F138 (iPod touch 2G)|Sugar Bowl 5F138]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-5494.20080909.8i9o0/iPod2,1_2.1.1_5F138_Restore.ipsw iPod2,1_2.1.1_5F138_Restore.ipsw]<br /> | &lt;code&gt;c3c700be49ad227d1152188e7c1e46b8958fd1e4&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> |rowspan=&quot;4&quot; {{no|Incompatible device/<br /> firmware match}}<br /> | 282,083,944<br /> |-<br /> | 2.2<br /> | [[Timberline 5G77a (iPod touch 2G)|Timberline 5G77a]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/061-5358.20081120.Gtghy/iPod2,1_2.2_5G77a_Restore.ipsw iPod2,1_2.2_5G77a_Restore.ipsw]<br /> | &lt;code&gt;34a0a489605f34d6cc6c9954edcaaf9a050deedc&lt;/code&gt;<br /> |<br /> | {{no}}<br /> | 291,123,491<br /> |-<br /> | 2.2.1<br /> | [[SUTimberline 5H11a (iPod touch 2G)|SUTimberline 5H11a]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5863.20090127.rt56K/iPod2,1_2.2.1_5H11a_Restore.ipsw iPod2,1_2.2.1_5H11a_Restore.ipsw]<br /> | &lt;code&gt;9af5625ea34acdd8abeb6fce71a72651d0c815d5&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 291,140,244<br /> |-<br /> | 3.0<br /> | [[Kirkwood 7A341 (iPod touch 2G)|Kirkwood 7A341]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;0f7fc76d9b9aa826b5ab14be9821a315d3d9dc42&lt;/code&gt;<br /> | 3.x is a paid upgrade series<br /> | {{yes}}<br /> | 270,315,364<br /> |-<br /> | 3.1.1<br /> | [[Northstar 7C145 (iPod touch 2G)|Northstar 7C145]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;e0d8800a4fc7cc5be6976ddbceb43c2d2a7120d7&lt;/code&gt;<br /> | Initial shipment for units with the new bootrom.<br /> | {{yes}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | 277,753,989<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPod touch 2G)|Northstar 7D11]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;e7c83d4a5baec0e81816ae1cd1caf9a4dc38ebf0&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | {{yes}}<br /> | 277,794,671<br /> |-<br /> | 3.1.3<br /> | [[SUNorthstarTwo 7E18 (iPod touch 2G)|SUNorthstarTwo 7E18]]<br /> | Download Link Prohibited<br /> | &lt;code&gt;5f4f5c01eda2f811f73167e7d1f82dbeed82367b&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes}}<br /> | 263,275,211<br /> |-<br /> | 4.0<br /> | [[Apex 8A293 (iPod touch 2G)|Apex 8A293]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7435.20100621.tr49t/iPod2,1_4.0_8A293_Restore.ipsw iPod2,1_4.0_8A293_Restore.ipsw]<br /> | &lt;code&gt;c026c373bc535496a6f901de2ba37d4a487413bf&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes}}<br /> | 330,278,777<br /> |-<br /> | 4.0.2<br /> | [[Apex 8A400 (iPod touch 2G)|Apex 8A400]]<br /> | [http://appldnld.apple.com/iPhone4/061-8551.20100811.Xcder/iPod2,1_4.0.2_8A400_Restore.ipsw iPod2,1_4.0.2_8A400_Restore.ipsw]<br /> | &lt;code&gt;06a42297d94461264eb64d7c8640cc5d1c19edeb&lt;/code&gt;<br /> | Hotfix to prevent malicious misuse of [[Star]]'s exploits.<br /> | {{yes}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | 344,248,876<br /> |-<br /> | 4.1<br /> | [[Baker 8B117 (iPod touch 2G)|Baker 8B117]]<br /> | [http://appldnld.apple.com/iPhone4/061-7937.20100908.ghj4f/iPod2,1_4.1_8B117_Restore.ipsw iPod2,1_4.1_8B117_Restore.ipsw]<br /> |&lt;code&gt;97abde6207660bd876fd476275dd526d0dcf3d19&lt;/code&gt;<br /> | <br /> | {{Yes}}<br /> | {{yes}}<br /> | 348,027,174<br /> |-<br /> | 4.2.1<br /> | [[Jasper 8C148 (iPod touch 2G)|Jasper 8C148]]<br /> | [http://appldnld.apple.com/iPhone4/061-9855.20101122.Lrft6/iPod2,1_4.2.1_8C148_Restore.ipsw iPod2,1_4.2.1_8C148_Restore.ipsw]<br /> |&lt;code&gt;b9efddc7bb4350c237a8d3846af61bbfc8a2f647&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | {{yes}}<br /> |363,553,480<br /> |}<br /> <br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] only.<br /> <br /> ===[[N18ap|iPod touch (3rd generation)]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;168&quot;| Build<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;99&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 3.1.1<br /> | [[Northstar 7C145 (iPod touch 3G)|Northstar 7C145]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-7163.20090909.NtstR/iPod3,1_3.1.1_7C145_Restore.ipsw iPod3,1_3.1.1_7C145_Restore.ipsw]<br /> | &lt;code&gt;a3eddbe2cf77858bae7087dc8b2035f0d3097e57&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> <br /> | 311,702,789<br /> |-<br /> | 3.1.1<br /> | [[Northstar 7C146 (iPod touch 3G)|Northstar 7C146]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7238.20090918.23GhT/iPod3,1_3.1.1_7C146_Restore.ipsw iPod3,1_3.1.1_7C146_Restore.ipsw]<br /> | &lt;code&gt;f66a7286b261137f25ddbbd84047f9a7ea181904&lt;/code&gt;<br /> | <br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | 311,690,768<br /> |-<br /> | 3.1.2<br /> | [[Northstar 7D11 (iPod touch 3G)|Northstar 7D11]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7271.20091008.Tch23/iPod3,1_3.1.2_7D11_Restore.ipsw iPod3,1_3.1.2_7D11_Restore.ipsw]<br /> | &lt;code&gt;02dcee28d788d594a2939ab564f4f183af6ccdf2&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 311,740,034<br /> |-<br /> | 3.1.3<br /> | [[SUNorthstarTwo 7E18 (iPod touch 3G)|SUNorthstarTwo 7E18]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7473.20100202.4i44t/iPod3,1_3.1.3_7E18_Restore.ipsw iPod3,1_3.1.3_7E18_Restore.ipsw]<br /> | &lt;code&gt;375fd469b18bfc0b74c7cfa5b4d5945197b1d106&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 295,870,806<br /> |-<br /> | 4.0<br /> | [[Apex 8A293 (iPod touch 3G)|Apex 8A293]]<br /> | [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7381.20100621.AzSP9/iPod3,1_4.0_8A293_Restore.ipsw iPod3,1_4.0_8A293_Restore.ipsw]<br /> | &lt;code&gt;36fe02b83f87d6305db572e1644841e3cd64cc7d&lt;/code&gt;<br /> |<br /> | {{yes}}<br /> | 384,178,784<br /> |-<br /> | 4.0.2<br /> | [[Apex 8A400 (iPod touch 3G)|Apex 8A400]]<br /> | [http://appldnld.apple.com/iPhone4/061-8554.20100811.Bgt54/iPod3,1_4.0.2_8A400_Restore.ipsw iPod3,1_4.0.2_8A400_Restore.ipsw]<br /> | &lt;code&gt;481b21044130125b117d53207f725b70fb061855&lt;/code&gt;<br /> | Hotfix to prevent malicious misuse of [[Star]]'s exploits.<br /> | {{yes}}<br /> | 384,203,993<br /> |-<br /> | 4.1<br /> | [[Baker 8B117 (iPod touch 3G)|Baker 8B117]]<br /> | [http://appldnld.apple.com/iPhone4/061-7941.20100908.sV9KE/iPod3,1_4.1_8B117_Restore.ipsw iPod3,1_4.1_8B117_Restore.ipsw]<br /> |&lt;code&gt;3162bad4060b7a58c9942ddb483e5bd9bcc5269f&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 388,255,189<br /> |-<br /> | 4.2.1<br /> | [[Jasper 8C148 (iPod touch 3G)|Jasper 8C148]]<br /> | [http://appldnld.apple.com/iPhone4/061-9860.20101122.Xsde3/iPod3,1_4.2.1_8C148_Restore.ipsw iPod3,1_4.2.1_8C148_Restore.ipsw]<br /> |&lt;code&gt;1127a042c535f7cf0be950ff8946862d5fb05b36&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 408,118,620<br /> |-<br /> | 4.3<br /> | [[Durango 8F190 (iPod touch 3G)|Durango 8F190]]<br /> | [http://appldnld.apple.com/iPhone4/061-8366.20110311.Fr45t/iPod3,1_4.3_8F190_Restore.ipsw iPod3,1_4.3_8F190_Restore.ipsw]<br /> |&lt;code&gt;3df936f2caf0759e6ac7f2339d663f3cad8b95f9&lt;/code&gt;<br /> | <br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | 433,166,165<br /> |-<br /> | 4.3.1<br /> | [[Durango 8G4 (iPod touch 3G)|Durango 8G4]]<br /> | [http://appldnld.apple.com/iPhone4/041-0552.20110325.Yt67u/iPod3,1_4.3.1_8G4_Restore.ipsw iPod3,1_4.3.1_8G4_Restore.ipsw]<br /> |&lt;code&gt;6879818321fd18267a15b91afbb1758dddd5dd5e&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 429,132,326<br /> |-<br /> | 4.3.2<br /> | [[Durango 8H7 (iPod touch 3G)|Durango 8H7]]<br /> | [http://appldnld.apple.com/iPhone4/041-0667.20110414.95hVL/iPod3,1_4.3.2_8H7_Restore.ipsw iPod3,1_4.3.2_8H7_Restore.ipsw]<br /> |&lt;code&gt;cac5436f85d9b42a5d2e9e495d34bd4ec2e4cf7f&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 429,339,223<br /> |-<br /> | 4.3.3<br /> | [[Durango 8J2 (iPod touch 3G)|Durango 8J2]]<br /> | [http://appldnld.apple.com/iPhone4/041-1021.20110503.8Lfs1/iPod3,1_4.3.3_8J2_Restore.ipsw iPod3,1_4.3.3_8J2_Restore.ipsw]<br /> |&lt;code&gt;b67300ebdc32b1e55b7212b937a3d4df83463d20&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 429,343,499<br /> |}<br /> <br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] only.<br /> <br /> ===[[N81ap|iPod touch (4th generation)]]===<br /> {| class=&quot;wikitable sortable&quot; style=&quot;font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !width=&quot;40&quot;| Version<br /> !width=&quot;168&quot;| Build<br /> !width=&quot;200&quot;| IPSW Download URL<br /> !width=&quot;220&quot;| SHA1 Hash<br /> !width=&quot;150&quot;| Comments<br /> !width=&quot;99&quot;| Publicly available virgin [[jailbreak]]?<br /> !width=&quot;70&quot;| File Size<br /> |-<br /> | 4.1<br /> | [[Baker 8B117 (iPod touch 4G)|Baker 8B117]]<br /> | [http://appldnld.apple.com/iPhone4/061-8490.20100901.hyjtR/iPod4,1_4.1_8B117_Restore.ipsw iPod4,1_4.1_8B117_Restore.ipsw]<br /> | &lt;code&gt;a464492bf6ad25d65b378c85d8b181f973ede38a&lt;/code&gt;<br /> | Initial shipment.<br /> | {{yes}}<br /> | 608,360,672<br /> |-<br /> | 4.1<br /> | [[Baker 8B118 (iPod touch 4G)|Baker 8B118]]<br /> | [http://appldnld.apple.com/iPhone4/061-9344.20100922.Urgt43/iPod4,1_4.1_8B118_Restore.ipsw iPod4,1_4.1_8B118_Restore.ipsw]<br /> | &lt;code&gt;331fb1342f5dab8c04cead74384a1e0fc1145952&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 608,360,927<br /> |-<br /> | 4.2.1<br /> | [[Jasper 8C148 (iPod touch 4G)|Jasper 8C148]]<br /> | [http://appldnld.apple.com/iPhone4/061-9859.20101122.$erft/iPod4,1_4.2.1_8C148_Restore.ipsw iPod4,1_4.2.1_8C148_Restore.ipsw]<br /> | &lt;code&gt;6a890696126d0cb7f9ccd6b913ecb09cf2029820&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 638,177,119<br /> |-<br /> | 4.3<br /> | [[Durango 8F190 (iPod touch 4G)|Durango 8F190]]<br /> | [http://appldnld.apple.com/iPhone4/061-9588.20110311.GtP7y/iPod4,1_4.3_8F190_Restore.ipsw iPod4,1_4.3_8F190_Restore.ipsw]<br /> | &lt;code&gt;0a463245f640d3e9a7528b6da0b6ff04b75c96bc&lt;/code&gt;<br /> | <br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | 684,595,902<br /> |-<br /> | 4.3.1<br /> | [[Durango 8G4 (iPod touch 4G)|Durango 8G4]]<br /> | [http://appldnld.apple.com/iPhone4/041-0545.20110325.We3Rt/iPod4,1_4.3.1_8G4_Restore.ipsw iPod4,1_4.3.1_8G4_Restore.ipsw]<br /> | &lt;code&gt;4a395e045a722de53e78e7aa7584a5201f455b5c&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 681,680,434<br /> |-<br /> | 4.3.2<br /> | [[Durango 8H7 (iPod touch 4G)|Durango 8H7]]<br /> | [http://appldnld.apple.com/iPhone4/041-0666.20110414.3QvM1/iPod4,1_4.3.2_8H7_Restore.ipsw iPod4,1_4.3.2_8H7_Restore.ipsw]<br /> | &lt;code&gt;4ee16cf07e792e1f4369e940ddf0786ac4bb2fd2&lt;/code&gt;<br /> | <br /> | {{yes}}<br /> | 681,851,983<br /> |-<br /> | 4.3.3<br /> | [[Durango 8J2 (iPod touch 4G)|Durango 8J2]]<br /> | [http://appldnld.apple.com/iPhone4/041-1015.20110503.d7i57/iPod4,1_4.3.3_8J2_Restore.ipsw iPod4,1_4.3.3_8J2_Restore.ipsw]<br /> | &lt;code&gt;1b208377ee0e74d8c20c56e943eeef5ddea5f5ee&lt;/code&gt;<br /> | <br /> | {{no}}<br /> | 681,860,586<br /> |}<br /> <br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] only.<br /> <br /> ==See also==<br /> * [[VFDecrypt]]<br /> * [[VFDecrypt Keys]]<br /> <br /> ==Resources==<br /> *[http://www.trejan.com/projects/ipod/ Firmware List]<br /> *[http://itunes.com/version Apple Firmware XML]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=PwnageTool&diff=17607 PwnageTool 2011-04-24T15:00:33Z <p>Nannoid: /* 4.x: Fourth Major Release of PwnageTool */</p> <hr /> <div>'''PwnageTool''' is an [[iOS]] [[jailbreak]] tool for Mac OS X that jailbreaks by creating a custom [[IPSW File Format|IPSW]]. You are allowed to change boot logos and add pre-installed packages to the IPSW. After an IPSW is created you can use it for restore using [[iTunes]].<br /> <br /> ==Exploits Used==<br /> ===Version 4.0===<br /> * Bootrom exploit (used by [[limera1n]] and [[Greenpois0n (jailbreak)|greenpois0n]])<br /> <br /> ===Version 2.0===<br /> * [[Pwnage 2.0]]<br /> * [[Pwnage]]<br /> <br /> ===Version 1.0===<br /> * [[Pwnage]]<br /> * [[Ramdisk Hack]]<br /> <br /> == Models Supported ==<br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Model<br /> ! Since<br /> |-<br /> | [[M68ap|iPhone 2G]]<br /> | April 3, 2008<br /> |-<br /> | [[N45ap|iPod touch 1G]]<br /> | April 3, 2008<br /> |-<br /> | [[N82ap|iPhone 3G]]<br /> | Jul 19, 2008<br /> |-<br /> | [[N72ap|iPod touch 2G]]<br /> | Oct 2, 2009<br /> |-<br /> | [[N88ap|iPhone 3GS]]<br /> | Oct 2, 2009<br /> |}<br /> Note that the [[N18ap|iPod touch 3G]] and subsequent devices are not supported. With the iPod touch 2G and iPhone 3GS you must be jailbroken prior to using PwnageTool. The [[S5L8900]] devices you can go into [[DFU Mode]] and restore with [[iTunes]] without being jailbroken.<br /> <br /> ==Versions==<br /> <br /> PwnageTool was released April 3, 2008 but largely unused until version 2.0 was released July 19, 2008.<br /> The following versions that are shown here are not beta, alpha, or in development. <br /> <br /> ===1.x: First release of PwnageTool===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 1.1.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 3, 2008<br /> | |<br /> * Initial release<br /> * Jailbreaks 1.1.4 firmware<br /> * Supports iPod touch 1G and iPhone 2G.<br /> * Add [[BootNeuter]] in the IPSW to unlock iPhone 2G.<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> <br /> === 2.x: Second major release of Pwnagetool ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jul 19, 2008<br /> | |<br /> * Added iPhone 3G support [http://www.engadget.com/2008/07/19/iphone-dev-team-unleashes-pwnage-tool-2-0/]<br /> * Jailbreaks 2.0 Firmware<br /> * Change boot logos<br /> * Adds Cydia by default<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Aug 4, 2008<br /> | |<br /> * Jailbreaks 2.0.1 firmware<br /> * Works for 2.0 and 2.0.1.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Aug 21, 2008<br /> | |<br /> * Jailbreaks 2.0.2 firmware [http://www.iphonehacks.com/2008/08/pwnage-tool-202.html]<br /> * Works for 2.0, 2.0.1, and 2.0.2.<br /> * Bug fixes - for when it doesn't go to the next page when you click on something.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Aug 25, 2008<br /> | |<br /> * Jailbreaks 2.0.2 firmware<br /> * Works for 2.0, 2.0.1, and 2.0.2.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Sep 13, 2008<br /> | |<br /> * Jailbreaks 2.1 firmware<br /> * Removed backwards compatibility<br /> * Download packages from a valid Cydia source, and add them onto your custom IPSW.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Nov 21, 2008<br /> | |<br /> * Jailbreaks 2.2 firmware<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.2.5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jan 30, 2009<br /> | |<br /> * Jailbreaks 2.2.1<br /> * Not updated by [[iPhone Dev Team]] but made official.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> <br /> === 3.x: Third Major Release of PwnageTool ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.0 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jun 19, 2009<br /> | |<br /> * Jailbreaks 3.0 firmware<br /> * DFU mode instructions included<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Sep 15, 2009<br /> | |<br /> * Jailbreaks 3.1 firmware for iPhone 2G and 3G<br /> * Jailbreaks 3.1.1 firmware for iPod touch 1G<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.1.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 2, 2009<br /> | |<br /> * Support for iPhone 3GS with [[iBoot-359.3]] bootrom and iPod touch 2G with [[iBoot-240.4]] bootrom (these devices need to be pwned from 3.0/3.0.1)<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.1.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 13, 2009<br /> | |<br /> * Jailbreaks 3.1.2 firmware for iPhone 2G, 3G, 3GS with [[iBoot-359.3]] bootrom, iPod touch 1G, iPod touch 2G with [[iBoot-240.4]] bootrom<br /> * iPod touch 3G not supported.<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> <br /> ==== 3.1.5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Feb 7, 2010<br /> | |<br /> * Jailbreaks 3.1.3 firmware for devices supported in 3.1.4.<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> === 4.x: Fourth Major Release of PwnageTool ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.0 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jun 22, 2010<br /> | |<br /> * Jailbreaks iOS 4.0 for devices supported in 3.1.4.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.01 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jun 23, 2010<br /> | |<br /> * Fixes iBooks issue.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 20, 2010<br /> | |<br /> * Jailbreaks iOS 4.1 for [[K66ap|Apple TV 2G]], [[K48ap|iPad 1G]], [[N82ap|iPhone 3G]], [[N88ap|iPhone 3GS]] (both bootroms), [[N90ap|iPhone 4]], [[N18ap|iPod touch 3G]], and [[N81ap|iPod touch 4G]].<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 22, 2010<br /> | |<br /> * Fixes issues with Leopard.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 22, 2010<br /> | |<br /> * Fixes more issues with Leopard.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Nov 28, 2010<br /> | |<br /> * Enables installing the [[6.15.00]] baseband on the [[n82ap|iPhone 3G]] and [[n88ap|iPhone 3GS]]<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Feb 15, 2010<br /> | |<br /> * Support for iOS 4.2.1 on every device that is compatible, except for the [[n72ap|iPod touch 2G]].<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Apr 3, 2011<br /> | |<br /> * Support for iOS 4.3.1 on every device that is compatible, except for the [[iPad 2|iPad 2]].<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.3.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Apr 24, 2011<br /> | |<br /> * Support for iOS 4.3.2 on every device that is compatible, except for the [[iPad 2|iPad 2]].<br /> |<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> <br /> ==Creating the Firmware==<br /> PwnageTool takes the IPSW file and patches it, creating a custom version. This enables a lot more features such as pre-installed packages, [[BootNeuter]] ([[M68ap|iPhone]] software unlock), custom packages and boot logos. This method is usually less secure than the quick exploits such ([[redsn0w]], [[QuickPwn]], [[purplera1n]], [[blackra1n]], etc.).<br /> <br /> ==How to create Custom Firmware Bundles==<br /> {{main|Making PwnageTool Bundles}}<br /> <br /> ==Problems==<br /> This method does have negative aspects. The most common errors are the [[ITunes Errors#Errors 16xx|16xx range of errors]], which mean that the either the firmware file is corrupt or you didn't put it in the right mode (Recovery, DFU Mode). Sometimes the problems could just be a computer problem such as the memory is full or the USB port is broken. The most common error is [[ITunes Errors#Error 1604|Error 1604]] which means that the firmware file is corrupted.<br /> <br /> ==Windows==<br /> PwnageTool is expected to remain exclusive to Mac OS X. As of October 2009, [[User:ih8sn0w|iH8sn0w]], et. al. has announced that they made a project that will bring PwnageTool's functionality to Windows, called [[sn0wbreeze]]. [http://ih8sn0w.com/]<br /> <br /> == License ==<br /> PwnageTool is freeware.<br /> <br /> [[Category:Hacking Software]]<br /> [[Category:GUI Tools]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Sn0wbreeze&diff=17571 Sn0wbreeze 2011-04-19T12:22:45Z <p>Nannoid: /* 4.X */</p> <hr /> <div>{{lowercase}}<br /> {{float toc}}<br /> == What is sn0wbreeze? ==<br /> '''sn0wbreeze''' is a tool to create custom [[IPSW File Format|IPSW]]s to restore, similar to [[PwnageTool]]. It is a GUI of [[XPwn]] for Windows written in Visual Basic.Net and is developed by [[User:ih8sn0w|iH8sn0w]]. It is released under GPL v3 license, and its source is available on [https://github.com/iH8sn0w/sn0wbreeze GitHub].<br /> <br /> == Versions ==<br /> [[sn0wbreeze]] was first released January 13, 2010 as a beta version. The following versions that are shown here are official, and sorted by compatibility with iOS revisions.<br /> <br /> === 3.X ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size:smaller;border-collapse:collapse;&quot; border=&quot;1&quot;<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:50px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:65px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;&quot; | Changes<br /> |-<br /> ! Public Beta<br /> | style=&quot;text-align:center;&quot; | 13-Jan-2010<br /> |<br /> * Initial release<br /> * Jailbreaks iOS 3.1.2<br /> * Only allows you to be able to select simple mode<br /> * Taken down due to copyright issues with [[XPwn]]<br /> |-<br /> ! 1.0<br /> | style=&quot;text-align:center;&quot; | 16-Jan-2010<br /> |<br /> * Official release of sn0wbreeze<br /> |-<br /> ! 1.1<br /> | style=&quot;text-align:center;&quot; | 19-Jan-2010<br /> |<br /> * Fixes [[Cydia Application|Cydia]] problems<br /> * Fixes problems with [[NOR]] on [[S5L8900]] devices<br /> * Fixes custom packages not being installed<br /> |-<br /> ! 1.2<br /> | style=&quot;text-align:center;&quot; | 21-Jan-2010<br /> |<br /> * GUI fixes<br /> * Fixed even more [[Cydia Application|Cydia]] problems<br /> |-<br /> ! 1.3<br /> | style=&quot;text-align:center;&quot; | 23-Jan-2010<br /> |<br /> * fixes bug where some [[Cydia Application|Cydia]] repositories could not be added and downloaded from<br /> |-<br /> ! 1.4<br /> | style=&quot;text-align:center;&quot; | 26-Jan-2010<br /> |<br /> * Fixed vital bug where deb files may not be added to the right place<br /> |-<br /> ! 1.5<br /> | style=&quot;text-align:center;&quot; | 05-Feb-2010<br /> |<br /> * Jailbreaks iOS 3.1.3<br /> * Removed verbose mode support<br /> |-<br /> ! 1.5.1<br /> | style=&quot;text-align:center;&quot; | 07-Feb-2010<br /> |<br /> * Removed [[blacksn0w]] due to CommCenter issues (fix being worked on)<br /> |-<br /> |}<br /> <br /> === 4.X ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size:smaller;border-collapse:collapse;&quot; border=&quot;1&quot;<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:50px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:65px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;&quot; | Changes<br /> |-<br /> ! 1.6<br /> | style=&quot;text-align:center;&quot; | 24-Jun-2010<br /> |<br /> * Jailbreaks iOS 4.0 only.<br /> * Removed [[ultrasn0w]] integration. (Due to MuscleNerd's request citing version management issues. Install it through the &quot;custom packages&quot; feature instead.)<br /> * Removed &quot;sn0wbreeze App&quot; integration (discontinued)<br /> |-<br /> ! 1.7<br /> | style=&quot;text-align:center;&quot; | 06-Jul-2010<br /> |<br /> * Added support for new bootroms in the form of a [[tethered jailbreak]] with [[iBooty]].<br /> |-<br /> ! 1.8 Beta<br /> | style=&quot;text-align:center;&quot; | 16-Jul-2010<br /> |<br /> * Only for iOS 4.1 beta 1.<br /> * Doesn't support [[hacktivation]].<br /> |-<br /> ! 2.0<br /> | style=&quot;text-align:center;&quot; | 22-Sep-2010<br /> |<br /> * Added support for &quot;MC model&quot; [[N72ap|iPod touch 2G]] ([[Tethered jailbreak|tethered]] using [[usb_control_msg(0xA1, 1) Exploit]])<br /> * Added Support for [[N18ap|iPod touch 3G]] and [[N88ap|iPhone 3GS]] ([[iBoot-359.3.2|new bootrom]]) on iOS 3.1.2<br /> * GUI improvements<br /> * Backwards compatible with 3.1.X<br /> |-<br /> ! 2.0.1<br /> | style=&quot;text-align:center;&quot; | 22-Sep-2010<br /> |<br /> * Fix for Error 37<br /> |-<br /> ! 2.0.2<br /> | style=&quot;text-align:center;&quot; | 25-Sep-2010<br /> |<br /> * Fixes for Error 37 and hacktivation.<br /> |-<br /> ! 2.1<br /> | style=&quot;text-align:center;&quot; | 13-Nov-2010<br /> |<br /> * Jailbreaks iOS 3.2.2/4.1.<br /> * Implemented [[usb_control_msg(0xA1, 1) Exploit|steaks4uce]] and [[limera1n]] exploits.<br /> * Added support for all iOS devices (except [[M68ap|iPhone]] and [[N45ap|iPod touch]])<br /> |-<br /> ! 2.2r1<br /> | style=&quot;text-align:center;&quot; | 15-Feb-2011<br /> |<br /> * Jailbreaks iOS 4.2.1.<br /> * A new &quot;Baseband Preservation Mode&quot;, which allows upgrade without updating the baseband (as usual), but without jailbreaking ([http://twitter.com/iH8sn0w/status/19249886721478656 announced on Dec 27])<br /> |-<br /> ! 2.2r2<br /> | style=&quot;text-align:center;&quot; | 15-Feb-2011<br /> |<br /> * Includes a fix for iBooks.<br /> |-<br /> ! 2.2r3<br /> | style=&quot;text-align:center;&quot; | 18-Feb-2011<br /> |<br /> * Fixes iBooks issues on devices still having issues.<br /> |-<br /> ! 2.2.1<br /> | style=&quot;text-align:center;&quot; | 20-Feb-2011<br /> |<br /> * Fixes for the [[n92ap|iPhone 4 (CDMA model)]]<br /> * Definitely fixes iBooks.<br /> * Drag and drop [[IPSW File Format|IPSWs]].<br /> * Fixes issues with Windows Classic.<br /> |-<br /> ! 2.3b1<br /> | style=&quot;text-align:center;&quot; | 13-Mar-2011<br /> |<br /> * &quot;For people that want to play around with 4.3 or preserve their baseband. It's BETA for a reason.&quot;<br /> |-<br /> ! 2.3b2<br /> | style=&quot;text-align:center;&quot; | 17-Mar-2011<br /> |<br /> * Adds Multitasking Gestures option in Settings App.<br /> * [[iBooty]] bug fixes (includes [[iBSS]] issues).<br /> * [[iBooty]] is even faster.<br /> * [[Mobile Substrate]] is now working.<br /> * Sleep bug in [[IPod touch|iPod touches]] is fixed.<br /> * Rare [[K48ap|iPad 1G]] issues resolved.<br /> * Added [[iREB]] to top bar for future re-runs within [[sn0wbreeze]].<br /> * [[ultrasn0w]] is still broken.<br /> |-<br /> ! 2.3b3<br /> | style=&quot;text-align:center;&quot; | 18-Mar-2011<br /> |<br /> * Fixed [[N81ap|iPod touch 4]] [[iBooty]] issues.<br /> |-<br /> ! 2.3b4<br /> | style=&quot;text-align:center;&quot; | 19-Mar-2011<br /> |<br /> * [[ultrasn0w]] now works for basebands ([[1.59.00]] / [[4.26.08]] / [[5.11.07]] / [[5.12.01]] / [[5.13.04]] / [[6.15.00]])<br /> * Fixed minor GUI + [[iBooty]] bugs.<br /> |-<br /> |-<br /> ! 2.4b1<br /> | style=&quot;text-align:center;&quot; | 19-Mar-2011<br /> |<br /> * iOS 4.3.1 is now supported<br /> |-<br /> ! 2.5<br /> | style=&quot;text-align:center;&quot; | 03-Apr-2011<br /> |<br /> * Jailbreaks all iOS 4.3.1 compatible device (except [[iPad 2]]).<br /> |-<br /> ! 2.5.1<br /> | style=&quot;text-align:center;&quot; | 06-Apr-2011<br /> |<br /> * Cydia 1.1.1 is now pre-installed.<br /> * iPhone 3GS users can now flash the iPad 06.15.00 baseband.<br /> * Animate (Animated Boot Logos) by the Chronic Dev-Team is now supported.<br /> * Added afc2 Apple TV 2 is now fully supported.<br /> * Added Apple TV 2 DFU Instructions.<br /> * YouTube issues resolved on hacktivated devices.<br /> * iPhone 3GS old-bootrom issues fixed (Error 37).<br /> |-<br /> ! 2.6<br /> | style=&quot;text-align:center;&quot; | 19-Apr-2011<br /> |<br /> * Jailbreaks all iOS 4.3.2 compatible device (except [[iPad 2]]).<br /> * Updated to support i0n1c's 4.3.2 untether.<br /> * Multitasking Gestures enabled as usual.<br /> |-<br /> |}<br /> <br /> == Resources ==<br /> *[http://ih8sn0w.com/index.php/welcome.snow Download sn0wbreeze]<br /> <br /> [[Category:Hacking Software]]<br /> [[Category:GUI Tools]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17570 Jailbreak (S5L8920+) 2011-04-19T12:20:33Z <p>Nannoid: /* iPod touch 4G */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{no}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17569 Jailbreak (S5L8920+) 2011-04-19T12:20:20Z <p>Nannoid: /* iPod touch 3G */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{no}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc13 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17568 Jailbreak (S5L8920+) 2011-04-19T12:19:35Z <p>Nannoid: /* iPhone 4 (GSM model) */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{no}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc13 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17567 Jailbreak (S5L8920+) 2011-04-19T12:19:23Z <p>Nannoid: /* iPhone 3GS */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{no}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc13 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17566 Jailbreak (S5L8920+) 2011-04-19T12:18:48Z <p>Nannoid: /* iPad */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc14}}<br /> | {{yes|0.9.6rc14}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{yes|2.6}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{yes|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{yes|4.3&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{no}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc13 or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.6rc13}}<br /> | {{yes|0.9.6rc13}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Redsn0w&diff=17565 Redsn0w 2011-04-19T12:17:42Z <p>Nannoid: /* Versions */</p> <hr /> <div>{{DISPLAYTITLE:redsn0w}}<br /> [[Image:Redsn0w.png|thumb|redsn0w on Mac OS X]]<br /> redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.<br /> <br /> Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.<br /> <br /> Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.<br /> <br /> Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.<br /> <br /> redsn0w [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] can jailbreak iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.<br /> <br /> == Credit ==<br /> [[iPhone Dev Team]]<br /> <br /> == Versions ==<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreak for the [[n72ap|iPod touch 2G]].<br /> |-<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.7 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.8 ====<br /> | style=&quot;white-space: nowrap;&quot; | July 2009<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3GS]] only.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports 3.0-3.1.2 on all iPhones and iPod touches ([[tethered jailbreak|tethered]] for newer devices with [[0x24000 Segment Overflow]] closed)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.3 beta ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | June 21, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Resolved a problem with iBooks.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supposed to fix any APN or MMS issues that users were seeing.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | September 21, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | October 31, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72ap|iPod touch 2G]] with [[iBoot-240.5.1|new bootrom]]) .<br /> ** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.<br /> * The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports the installation of custom bundles<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 23, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 28, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 1, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> * Allows you to &quot;deactivate&quot; a hacktivated phone, so sbinger's [http://www.bingner.com/SAM.html Subscriber Artificial Module] (SAM) can trick your iPhone and [[iTunes]] into creating legitimate activation tickets.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 7 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 2, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Introduced command-line arguments to bypass some screens.<br /> ** -b &lt;filename&gt; to specify your own boot logo PNG<br /> ** -i &lt;filename&gt; to specify your reference IPSW<br /> ** -j to ask redsn0w to “Just boot now tethered for now”<br /> ** -o for [[N88ap|iPhone 3GS]] and [[N72ap|iPod touch 2G]] units vulnerable to [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 8 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 5, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Informs users if a boot logo PNG is invalid, and why.<br /> * Introduced the &quot;-a&quot; command-line argument to eliminate clicking.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 9 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 3, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[k66ap|Apple TV 2]].<br /> * New command line parameters k and d [http://twitpic.com/4gg8n1]:<br /> ** -k --kernelcache=&lt;str&gt; use specified kernelcache (advanced)<br /> ** -d --devicetree=&lt;str&gt; use specified devicetree (advanced)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 10 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Added boot animations<br /> * Removed misleading Settings<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 11 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Makes the boot animation a bit more robust<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 12 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 8, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Fix any lingering issues with the boot animation<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 13 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 19, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.2 on all compatible devices except the [[iPad 2]] and [[N90ap|iPhone 4 (GSM)]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 14 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 19, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.2 on all compatible devices except the [[iPad 2]].<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 [[IPSW File Format|IPSW]].<br /> *** This version of &quot;Jailbreak Monte&quot; has quite a number of bugs, particularly app switcher crashes and disabled [[Bluetooth]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs on GUI apps.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 27, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs completely.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 31, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * ubsmuxd integrated.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 8, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Issues related to [[Bluetooth]] and the sandbox are resolved.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 10, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * fixes Skype<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |}<br /> <br /> == Exploits used ==<br /> For [[M68ap|iPhone]], [[N45ap|iPod touch]], and [[N82ap|iPhone 3G]], see:<br /> *[[Pwnage]]<br /> *[[Pwnage 2.0]]<br /> <br /> For [[N72ap|iPod touch 2G]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.<br /> *[[usb_control_msg(0xA1, 1) Exploit]] - used (in redsn0w 0.9.6 beta 1) to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow, as well as a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].<br /> <br /> For [[N88ap|iPhone 3GS]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> For [[N18ap|iPod touch 3G]]<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]<br /> *limera1n exploit<br /> <br /> [[Category:Hacking Software]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Redsn0w&diff=17540 Redsn0w 2011-04-19T02:05:23Z <p>Nannoid: /* Versions */</p> <hr /> <div>{{DISPLAYTITLE:redsn0w}}<br /> [[Image:Redsn0w.png|thumb|redsn0w on Mac OS X]]<br /> redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.<br /> <br /> Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.<br /> <br /> Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.<br /> <br /> Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.<br /> <br /> redsn0w [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] can jailbreak iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.<br /> <br /> == Credit ==<br /> [[iPhone Dev Team]]<br /> <br /> == Versions ==<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreak for the [[n72ap|iPod touch 2G]].<br /> |-<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.7 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.8 ====<br /> | style=&quot;white-space: nowrap;&quot; | July 2009<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3GS]] only.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports 3.0-3.1.2 on all iPhones and iPod touches ([[tethered jailbreak|tethered]] for newer devices with [[0x24000 Segment Overflow]] closed)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.3 beta ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | June 21, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Resolved a problem with iBooks.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supposed to fix any APN or MMS issues that users were seeing.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | September 21, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | October 31, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72ap|iPod touch 2G]] with [[iBoot-240.5.1|new bootrom]]) .<br /> ** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.<br /> * The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports the installation of custom bundles<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 23, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 28, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 1, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> * Allows you to &quot;deactivate&quot; a hacktivated phone, so sbinger's [http://www.bingner.com/SAM.html Subscriber Artificial Module] (SAM) can trick your iPhone and [[iTunes]] into creating legitimate activation tickets.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 7 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 2, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Introduced command-line arguments to bypass some screens.<br /> ** -b &lt;filename&gt; to specify your own boot logo PNG<br /> ** -i &lt;filename&gt; to specify your reference IPSW<br /> ** -j to ask redsn0w to “Just boot now tethered for now”<br /> ** -o for [[N88ap|iPhone 3GS]] and [[N72ap|iPod touch 2G]] units vulnerable to [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 8 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 5, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Informs users if a boot logo PNG is invalid, and why.<br /> * Introduced the &quot;-a&quot; command-line argument to eliminate clicking.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 9 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 3, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[k66ap|Apple TV 2]].<br /> * New command line parameters k and d [http://twitpic.com/4gg8n1]:<br /> ** -k --kernelcache=&lt;str&gt; use specified kernelcache (advanced)<br /> ** -d --devicetree=&lt;str&gt; use specified devicetree (advanced)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 10 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Added boot animations<br /> * Removed misleading Settings<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 11 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Makes the boot animation a bit more robust<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 12 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 8, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Fix any lingering issues with the boot animation<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 13 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 19, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.2 on all compatible devices except the [[iPad 2]] and [[N90ap|iPhone 4 (GSM)]].<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 [[IPSW File Format|IPSW]].<br /> *** This version of &quot;Jailbreak Monte&quot; has quite a number of bugs, particularly app switcher crashes and disabled [[Bluetooth]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs on GUI apps.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 27, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs completely.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 31, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * ubsmuxd integrated.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 8, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Issues related to [[Bluetooth]] and the sandbox are resolved.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 10, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * fixes Skype<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |}<br /> <br /> == Exploits used ==<br /> For [[M68ap|iPhone]], [[N45ap|iPod touch]], and [[N82ap|iPhone 3G]], see:<br /> *[[Pwnage]]<br /> *[[Pwnage 2.0]]<br /> <br /> For [[N72ap|iPod touch 2G]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.<br /> *[[usb_control_msg(0xA1, 1) Exploit]] - used (in redsn0w 0.9.6 beta 1) to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow, as well as a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].<br /> <br /> For [[N88ap|iPhone 3GS]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> For [[N18ap|iPod touch 3G]]<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]<br /> *limera1n exploit<br /> <br /> [[Category:Hacking Software]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17457 Jailbreak (S5L8920+) 2011-04-15T09:18:19Z <p>Nannoid: /* iPod touch 4G */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Custom firmware, made with unofficial PwnageTool bundle.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{no}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17456 Jailbreak (S5L8920+) 2011-04-15T09:17:17Z <p>Nannoid: /* iPod touch 3G */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Custom firmware, made with unofficial PwnageTool bundle.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{no}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;10&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17455 Jailbreak (S5L8920+) 2011-04-15T09:16:11Z <p>Nannoid: /* iPhone 4 (CDMA model) */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Custom firmware, made with unofficial PwnageTool bundle.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{no}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17454 Jailbreak (S5L8920+) 2011-04-15T09:15:53Z <p>Nannoid: /* iPhone 4 (CDMA model) */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Custom firmware, made with unofficial PwnageTool bundle.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;2&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |style=&quot;width:100px;&quot;| 4.2.7<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> | {{no}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17453 Jailbreak (S5L8920+) 2011-04-15T09:15:12Z <p>Nannoid: /* iPhone 4 (GSM model) */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;8&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Custom firmware, made with unofficial PwnageTool bundle.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;2&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17452 Jailbreak (S5L8920+) 2011-04-15T09:13:51Z <p>Nannoid: /* iPhone 3GS */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;13&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Custom firmware, made with unofficial PwnageTool bundle.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;2&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17451 Jailbreak (S5L8920+) 2011-04-15T09:11:57Z <p>Nannoid: /* iPad 2 */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;3&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |style=&quot;width:90px;&quot;| 4.3.2<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;12&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Custom firmware, made with unofficial PwnageTool bundle.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;2&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17450 Jailbreak (S5L8920+) 2011-04-15T09:11:34Z <p>Nannoid: /* iPad */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{yes|0.7.4 (Mac)&lt;br /&gt;<br /> 0.3.7 (Windows)}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |style=&quot;width:100px;&quot;| 4.3.2<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc12}}<br /> | {{yes|0.9.6rc12&lt;sup&gt;1&lt;/sup&gt;}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;2&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;12&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC5.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Custom firmware, made with unofficial PwnageTool bundle.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;2&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC6.1}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc11&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc11}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4}}<br /> | {{yes|RC6.1}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b4&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=1.0.06&diff=17449 1.0.06 2011-04-15T09:07:38Z <p>Nannoid: New page: The Qualcomm MDM6600 baseband supplied with iOS 4.2.7 for iPhone 4 (CDMA Model). {{stub|iPhone}}</p> <hr /> <div>The [[Qualcomm MDM6600]] baseband supplied with iOS 4.2.7 for [[N92ap|iPhone 4 (CDMA Model)]]. <br /> <br /> {{stub|iPhone}}</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=2.0.4&diff=17448 2.0.4 2011-04-15T09:06:52Z <p>Nannoid: </p> <hr /> <div>The [[Qualcomm MDM6600]] baseband supplied with iOS 4.3, 4.3.1 and 4.3.2 for [[K95ap|iPad 2 (CDMA Model)]]. <br /> <br /> {{stub|iPad}}</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=04.10.01&diff=17447 04.10.01 2011-04-15T09:06:29Z <p>Nannoid: </p> <hr /> <div>A new [[XMM 6180]] [[Baseband Firmware|baseband]] in iOS 4.3b3, 4.3GM, 4.3, 4.3.1 and 4.3.2. There's no public unlock for it.<br /> <br /> {{stub|iPhone}}</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=07.11.01&diff=17446 07.11.01 2011-04-15T09:05:38Z <p>Nannoid: </p> <hr /> <div>[[X-Gold 608]] baseband supplied with iOS 4.3.1 and 4.3.2 for [[K48ap|iPad 3G]].<br /> <br /> {{stub|iPad}}</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Redsn0w&diff=17343 Redsn0w 2011-04-09T16:14:01Z <p>Nannoid: /* Versions */</p> <hr /> <div>{{DISPLAYTITLE:redsn0w}}<br /> [[Image:Redsn0w.png|thumb|redsn0w on Mac OS X]]<br /> redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.<br /> <br /> Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.<br /> <br /> Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.<br /> <br /> Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.<br /> <br /> redsn0w [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] can jailbreak iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.<br /> <br /> == Credit ==<br /> [[iPhone Dev Team]]<br /> <br /> == Versions ==<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreak for the [[n72ap|iPod touch 2G]].<br /> |-<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.7 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.8 ====<br /> | style=&quot;white-space: nowrap;&quot; | July 2009<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3GS]] only.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports 3.0-3.1.2 on all iPhones and iPod touches ([[tethered jailbreak|tethered]] for newer devices with [[0x24000 Segment Overflow]] closed)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.3 beta ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | June 21, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Resolved a problem with iBooks.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supposed to fix any APN or MMS issues that users were seeing.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | September 21, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | October 31, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72ap|iPod touch 2G]] with [[iBoot-240.5.1|new bootrom]]) .<br /> ** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.<br /> * The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports the installation of custom bundles<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 23, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 28, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 1, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> * Allows you to &quot;deactivate&quot; a hacktivated phone, so sbinger's [http://www.bingner.com/SAM.html Subscriber Artificial Module] (SAM) can trick your iPhone and [[iTunes]] into creating legitimate activation tickets.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 7 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 2, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Introduced command-line arguments to bypass some screens.<br /> ** -b &lt;filename&gt; to specify your own boot logo PNG<br /> ** -i &lt;filename&gt; to specify your reference IPSW<br /> ** -j to ask redsn0w to “Just boot now tethered for now”<br /> ** -o for [[N88ap|iPhone 3GS]] and [[N72ap|iPod touch 2G]] units vulnerable to [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 8 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 5, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Informs users if a boot logo PNG is invalid, and why.<br /> * Introduced the &quot;-a&quot; command-line argument to eliminate clicking.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 9 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 3, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[k66ap|Apple TV 2]].<br /> * New command line parameters k and d [http://twitpic.com/4gg8n1]:<br /> ** -k --kernelcache=&lt;str&gt; use specified kernelcache (advanced)<br /> ** -d --devicetree=&lt;str&gt; use specified devicetree (advanced)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 10 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Added boot animations<br /> * Removed misleading Settings<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 11 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Makes the boot animation a bit more robust<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 12 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 8, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Fix any lingering issues with the boot animation<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 [[IPSW File Format|IPSW]].<br /> *** This version of &quot;Jailbreak Monte&quot; has quite a number of bugs, particularly app switcher crashes and disabled [[Bluetooth]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs on GUI apps.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 27, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs completely.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 31, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * ubsmuxd integrated.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 8, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Issues related to [[Bluetooth]] and the sandbox are resolved.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 10, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * fixes Skype<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |}<br /> <br /> == Exploits used ==<br /> For [[M68ap|iPhone]], [[N45ap|iPod touch]], and [[N82ap|iPhone 3G]], see:<br /> *[[Pwnage]]<br /> *[[Pwnage 2.0]]<br /> <br /> For [[N72ap|iPod touch 2G]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.<br /> *[[usb_control_msg(0xA1, 1) Exploit]] - used (in redsn0w 0.9.6 beta 1) to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow, as well as a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].<br /> <br /> For [[N88ap|iPhone 3GS]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> For [[N18ap|iPod touch 3G]]<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]<br /> *limera1n exploit<br /> <br /> [[Category:Hacking Software]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Sn0wbreeze&diff=17342 Sn0wbreeze 2011-04-09T16:08:03Z <p>Nannoid: /* 4.X */</p> <hr /> <div>{{lowercase}}<br /> {{float toc}}<br /> == What is sn0wbreeze? ==<br /> '''sn0wbreeze''' is a tool to create custom [[IPSW File Format|IPSW]]s to restore, similar to [[PwnageTool]]. It is a GUI of [[XPwn]] for Windows written in Visual Basic.Net and is developed by [[User:ih8sn0w|iH8sn0w]]. It is released under GPL v3 license, and its source is available on [https://github.com/iH8sn0w/sn0wbreeze GitHub].<br /> <br /> == Versions ==<br /> [[sn0wbreeze]] was first released January 13, 2010 as a beta version. The following versions that are shown here are official, and sorted by compatibility with iOS revisions.<br /> <br /> === 3.X ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size:smaller;border-collapse:collapse;&quot; border=&quot;1&quot;<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:50px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:65px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;&quot; | Changes<br /> |-<br /> ! Public Beta<br /> | style=&quot;text-align:center;&quot; | 13-Jan-2010<br /> |<br /> * Initial release<br /> * Jailbreaks iOS 3.1.2<br /> * Only allows you to be able to select simple mode<br /> * Taken down due to copyright issues with [[XPwn]]<br /> |-<br /> ! 1.0<br /> | style=&quot;text-align:center;&quot; | 16-Jan-2010<br /> |<br /> * Official release of sn0wbreeze<br /> |-<br /> ! 1.1<br /> | style=&quot;text-align:center;&quot; | 19-Jan-2010<br /> |<br /> * Fixes [[Cydia Application|Cydia]] problems<br /> * Fixes problems with [[NOR]] on [[S5L8900]] devices<br /> * Fixes custom packages not being installed<br /> |-<br /> ! 1.2<br /> | style=&quot;text-align:center;&quot; | 21-Jan-2010<br /> |<br /> * GUI fixes<br /> * Fixed even more [[Cydia Application|Cydia]] problems<br /> |-<br /> ! 1.3<br /> | style=&quot;text-align:center;&quot; | 23-Jan-2010<br /> |<br /> * fixes bug where some [[Cydia Application|Cydia]] repositories could not be added and downloaded from<br /> |-<br /> ! 1.4<br /> | style=&quot;text-align:center;&quot; | 26-Jan-2010<br /> |<br /> * Fixed vital bug where deb files may not be added to the right place<br /> |-<br /> ! 1.5<br /> | style=&quot;text-align:center;&quot; | 05-Feb-2010<br /> |<br /> * Jailbreaks iOS 3.1.3<br /> * Removed verbose mode support<br /> |-<br /> ! 1.5.1<br /> | style=&quot;text-align:center;&quot; | 07-Feb-2010<br /> |<br /> * Removed [[blacksn0w]] due to CommCenter issues (fix being worked on)<br /> |-<br /> |}<br /> <br /> === 4.X ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size:smaller;border-collapse:collapse;&quot; border=&quot;1&quot;<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:50px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:65px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;&quot; | Changes<br /> |-<br /> ! 1.6<br /> | style=&quot;text-align:center;&quot; | 24-Jun-2010<br /> |<br /> * Jailbreaks iOS 4.0 only.<br /> * Removed [[ultrasn0w]] integration. (Due to MuscleNerd's request citing version management issues. Install it through the &quot;custom packages&quot; feature instead.)<br /> * Removed &quot;sn0wbreeze App&quot; integration (discontinued)<br /> |-<br /> ! 1.7<br /> | style=&quot;text-align:center;&quot; | 06-Jul-2010<br /> |<br /> * Added support for new bootroms in the form of a [[tethered jailbreak]] with [[iBooty]].<br /> |-<br /> ! 1.8 Beta<br /> | style=&quot;text-align:center;&quot; | 16-Jul-2010<br /> |<br /> * Only for iOS 4.1 beta 1.<br /> * Doesn't support [[hacktivation]].<br /> |-<br /> ! 2.0<br /> | style=&quot;text-align:center;&quot; | 22-Sep-2010<br /> |<br /> * Added support for &quot;MC model&quot; [[N72ap|iPod touch 2G]] ([[Tethered jailbreak|tethered]] using [[usb_control_msg(0xA1, 1) Exploit]])<br /> * Added Support for [[N18ap|iPod touch 3G]] and [[N88ap|iPhone 3GS]] ([[iBoot-359.3.2|new bootrom]]) on iOS 3.1.2<br /> * GUI improvements<br /> * Backwards compatible with 3.1.X<br /> |-<br /> ! 2.0.1<br /> | style=&quot;text-align:center;&quot; | 22-Sep-2010<br /> |<br /> * Fix for Error 37<br /> |-<br /> ! 2.0.2<br /> | style=&quot;text-align:center;&quot; | 25-Sep-2010<br /> |<br /> * Fixes for Error 37 and hacktivation.<br /> |-<br /> ! 2.1<br /> | style=&quot;text-align:center;&quot; | 13-Nov-2010<br /> |<br /> * Jailbreaks iOS 3.2.2/4.1.<br /> * Implemented [[usb_control_msg(0xA1, 1) Exploit|steaks4uce]] and [[limera1n]] exploits.<br /> * Added support for all iOS devices (except [[M68ap|iPhone]] and [[N45ap|iPod touch]])<br /> |-<br /> ! 2.2r1<br /> | style=&quot;text-align:center;&quot; | 15-Feb-2011<br /> |<br /> * Jailbreaks iOS 4.2.1.<br /> * A new &quot;Baseband Preservation Mode&quot;, which allows upgrade without updating the baseband (as usual), but without jailbreaking ([http://twitter.com/iH8sn0w/status/19249886721478656 announced on Dec 27])<br /> |-<br /> ! 2.2r2<br /> | style=&quot;text-align:center;&quot; | 15-Feb-2011<br /> |<br /> * Includes a fix for iBooks.<br /> |-<br /> ! 2.2r3<br /> | style=&quot;text-align:center;&quot; | 18-Feb-2011<br /> |<br /> * Fixes iBooks issues on devices still having issues.<br /> |-<br /> ! 2.2.1<br /> | style=&quot;text-align:center;&quot; | 20-Feb-2011<br /> |<br /> * Fixes for the [[n92ap|iPhone 4 (CDMA model)]]<br /> * Definitely fixes iBooks.<br /> * Drag and drop [[IPSW File Format|IPSWs]].<br /> * Fixes issues with Windows Classic.<br /> |-<br /> ! 2.3b1<br /> | style=&quot;text-align:center;&quot; | 13-Mar-2011<br /> |<br /> * &quot;For people that want to play around with 4.3 or preserve their baseband. It's BETA for a reason.&quot;<br /> |-<br /> ! 2.3b2<br /> | style=&quot;text-align:center;&quot; | 17-Mar-2011<br /> |<br /> * Adds Multitasking Gestures option in Settings App.<br /> * [[iBooty]] bug fixes (includes [[iBSS]] issues).<br /> * [[iBooty]] is even faster.<br /> * [[Mobile Substrate]] is now working.<br /> * Sleep bug in [[IPod touch|iPod touches]] is fixed.<br /> * Rare [[K48ap|iPad 1G]] issues resolved.<br /> * Added [[iREB]] to top bar for future re-runs within [[sn0wbreeze]].<br /> * [[ultrasn0w]] is still broken.<br /> |-<br /> ! 2.3b3<br /> | style=&quot;text-align:center;&quot; | 18-Mar-2011<br /> |<br /> * Fixed [[N81ap|iPod touch 4]] [[iBooty]] issues.<br /> |-<br /> ! 2.3b4<br /> | style=&quot;text-align:center;&quot; | 19-Mar-2011<br /> |<br /> * [[ultrasn0w]] now works for basebands ([[1.59.00]] / [[4.26.08]] / [[5.11.07]] / [[5.12.01]] / [[5.13.04]] / [[6.15.00]])<br /> * Fixed minor GUI + [[iBooty]] bugs.<br /> |-<br /> |-<br /> ! 2.4b1<br /> | style=&quot;text-align:center;&quot; | 19-Mar-2011<br /> |<br /> * iOS 4.3.1 is now supported<br /> |-<br /> ! 2.5<br /> | style=&quot;text-align:center;&quot; | 03-Apr-2011<br /> |<br /> * Jailbreaks all iOS 4.3.1 compatible device (except [[iPad 2]]).<br /> |-<br /> ! 2.5.1<br /> | style=&quot;text-align:center;&quot; | 06-Apr-2011<br /> |<br /> * Cydia 1.1.1 is now pre-installed.<br /> * iPhone 3GS users can now flash the iPad 06.15.00 baseband.<br /> * Animate (Animated Boot Logos) by the Chronic Dev-Team is now supported.<br /> * Added afc2 Apple TV 2 is now fully supported.<br /> * Added Apple TV 2 DFU Instructions.<br /> * YouTube issues resolved on hacktivated devices.<br /> * iPhone 3GS old-bootrom issues fixed (Error 37).<br /> <br /> |-<br /> |}<br /> <br /> == Resources ==<br /> *[http://ih8sn0w.com/index.php/welcome.snow Download sn0wbreeze]<br /> <br /> [[Category:Hacking Software]]<br /> [[Category:GUI Tools]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17307 Jailbreak (S5L8920+) 2011-04-07T15:04:18Z <p>Nannoid: </p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;6&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4 and earlier}}<br /> | {{yes|RC5}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6b2}}<br /> | {{yes|0.9.6rc8&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc9 - 0.9.6rc11}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1-4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;2&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;12&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6b2}}<br /> | {{yes|0.9.6rc8&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc9 - 0.9.6rc11}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1-4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|1.4&lt;sup&gt;2&lt;/sup&gt; or 2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|1.5.1&lt;sup&gt;2&lt;/sup&gt; or 2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|1.7&lt;sup&gt;1 2&lt;/sup&gt; or 2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4 and earlier}}<br /> | {{yes|RC5}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4 and earlier}}<br /> | {{yes|RC5}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6b2}}<br /> | {{yes|0.9.6rc8&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc9 - 0.9.6rc11}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1-4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Custom firmware, made with unofficial PwnageTool bundle.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;2&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC5 b4}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6b2}}<br /> | {{yes|0.9.6rc8&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc9 - 0.9.6rc11}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|1.7&lt;sup&gt;1&lt;/sup&gt; or 2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4 and earlier}}<br /> | {{yes|RC5}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1-4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc8&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc9 - 0.9.6rc11}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4 and earlier}}<br /> | {{yes|RC5}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1-4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Redsn0w&diff=17303 Redsn0w 2011-04-07T11:37:52Z <p>Nannoid: /* Versions */</p> <hr /> <div>{{DISPLAYTITLE:redsn0w}}<br /> [[Image:Redsn0w.png|thumb|redsn0w on Mac OS X]]<br /> redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.<br /> <br /> Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.<br /> <br /> Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.<br /> <br /> Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.<br /> <br /> redsn0w [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] can jailbreak iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.<br /> <br /> == Credit ==<br /> [[iPhone Dev Team]]<br /> <br /> == Versions ==<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreak for the [[n72ap|iPod touch 2G]].<br /> |-<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.7 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.8 ====<br /> | style=&quot;white-space: nowrap;&quot; | July 2009<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3GS]] only.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports 3.0-3.1.2 on all iPhones and iPod touches ([[tethered jailbreak|tethered]] for newer devices with [[0x24000 Segment Overflow]] closed)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.3 beta ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | June 21, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Resolved a problem with iBooks.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supposed to fix any APN or MMS issues that users were seeing.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | September 21, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | October 31, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72ap|iPod touch 2G]] with [[iBoot-240.5.1|new bootrom]]) .<br /> ** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.<br /> * The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports the installation of custom bundles<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 23, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 28, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 1, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> * Allows you to &quot;deactivate&quot; a hacktivated phone, so sbinger's [http://www.bingner.com/SAM.html Subscriber Artificial Module] (SAM) can trick your iPhone and [[iTunes]] into creating legitimate activation tickets.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 7 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 2, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Introduced command-line arguments to bypass some screens.<br /> ** -b &lt;filename&gt; to specify your own boot logo PNG<br /> ** -i &lt;filename&gt; to specify your reference IPSW<br /> ** -j to ask redsn0w to “Just boot now tethered for now”<br /> ** -o for [[N88ap|iPhone 3GS]] and [[N72ap|iPod touch 2G]] units vulnerable to [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 8 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 5, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Informs users if a boot logo PNG is invalid, and why.<br /> * Introduced the &quot;-a&quot; command-line argument to eliminate clicking.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 9 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 3, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[k66ap|Apple TV 2]].<br /> * New command line parameters k and d [http://twitpic.com/4gg8n1]:<br /> ** -k --kernelcache=&lt;str&gt; use specified kernelcache (advanced)<br /> ** -d --devicetree=&lt;str&gt; use specified devicetree (advanced)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 10 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Added boot animations<br /> * Removed misleading Settings<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 11 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * makes the boot animation a bit more robust<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 [[IPSW File Format|IPSW]].<br /> *** This version of &quot;Jailbreak Monte&quot; has quite a number of bugs, particularly app switcher crashes and disabled [[Bluetooth]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs on GUI apps.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 27, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs completely.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 31, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * ubsmuxd integrated.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 8, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Issues related to [[Bluetooth]] and the sandbox are resolved.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 10, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * fixes Skype<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |}<br /> <br /> == Exploits used ==<br /> For [[M68ap|iPhone]], [[N45ap|iPod touch]], and [[N82ap|iPhone 3G]], see:<br /> *[[Pwnage]]<br /> *[[Pwnage 2.0]]<br /> <br /> For [[N72ap|iPod touch 2G]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.<br /> *[[usb_control_msg(0xA1, 1) Exploit]] - used (in redsn0w 0.9.6 beta 1) to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow, as well as a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].<br /> <br /> For [[N88ap|iPhone 3GS]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> For [[N18ap|iPod touch 3G]]<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]<br /> *limera1n exploit<br /> <br /> [[Category:Hacking Software]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Talk:Redsn0w&diff=17302 Talk:Redsn0w 2011-04-07T11:05:00Z <p>Nannoid: /* Supported vs Compatible Device(s) */</p> <hr /> <div>{{lowercase|Talk:}}<br /> == Custom Boot Logo Tethered ==<br /> If we chose to &quot;Boot Tethered&quot; in redsn0w, can we use our own custom boot logo? Or at least make a new pwnapple? It's getting kind of Old... --[[User:xX-BLACK_OPS-Xx|xX-BLACK_OPS-Xx]]<br /> :You can easily swap out the pwnapple in the Mac OS X version (just look in redsn0w.app's &quot;MacOS&quot; folder). Unfortunately, it's not so simple for its Windows counterpart... :\ --[[User:Dialexio|&lt;span style=&quot;color:#C20; font-weight:normal;&quot;&gt;Dialexio&lt;/span&gt;]] 06:35, 3 December 2010 (UTC)<br /> <br /> == Latest Versions ==<br /> For 0.9.7 beta 1-4 a comment that it's Mac-only is missing. Any idea how to add this? --[[User:Http|http]] 08:13, 31 December 2010 (UTC)<br /> :Perhaps we can add a column (or two) to the table to specify which OSes each version of redsn0w works with. --[[User:Dialexio|&lt;span style=&quot;color:#C20; font-weight:normal;&quot;&gt;Dialexio&lt;/span&gt;]] 08:47, 31 December 2010 (UTC)<br /> ::Agreed. But if you change the formatting, then I think the whole table should be redesigned; the edit buttons are in the middle of the texts and it is not clear which description belongs to which version (at least on my iPhone Safari). valign=top is missing and maybe borders. --[[User:Http|http]] 12:43, 31 December 2010 (UTC)<br /> <br /> == Supported vs Compatible Device(s) ==<br /> I have replaced &quot;supported&quot; with the word &quot;compatible&quot; as many devices are still supported as in Apple still provides phone/technical support but the device may not be eligible for newer iOS update.<br /> *Before: Jailbreaks iOS 4.1-4.2.1 on all supported devices.<br /> *After: Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> --[[User:Nannoid|nannoid]]<br /> <br /> As far as I know, redsn0w never supported the iPod touch 2G with new bootrom (please verify). This means supported is not the same as compatible for iOS versions that are compatible with it. --[[User:Http|http]] 09:45, 7 April 2011 (UTC)<br /> <br /> *In that case, we could make an exception like in iOS 4.3.1. <br /> **Jailbreaks iOS 4.3.1 on all compatible devices except iPad 2.<br /> --[[User:Nannoid|nannoid]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Sn0wbreeze&diff=17299 Sn0wbreeze 2011-04-07T08:07:59Z <p>Nannoid: /* 4.X */</p> <hr /> <div>{{lowercase}}<br /> {{float toc}}<br /> == What is sn0wbreeze? ==<br /> '''sn0wbreeze''' is a tool to create custom [[IPSW File Format|IPSW]]s to restore, similar to [[PwnageTool]]. It is a GUI of [[XPwn]] for Windows written in Visual Basic.Net and is developed by [[User:ih8sn0w|iH8sn0w]]. It is released under GPL v3 license and it is a freeware. [[sn0wbreeze]] used to be open-source but it is now closed-source.<br /> == Versions ==<br /> [[sn0wbreeze]] was first released January 13, 2010 as a beta version. The following versions that are shown here are official, and sorted by compatibility with iOS revisions.<br /> <br /> === 3.X ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size:smaller;border-collapse:collapse;&quot; border=&quot;1&quot;<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:50px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:65px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;&quot; | Changes<br /> |-<br /> ! Public Beta<br /> | style=&quot;text-align:center;&quot; | 13-Jan-2010<br /> |<br /> * Initial release<br /> * Jailbreaks iOS 3.1.2<br /> * Only allows you to be able to select simple mode<br /> * Taken down due to copyright issues with [[XPwn]]<br /> |-<br /> ! 1.0<br /> | style=&quot;text-align:center;&quot; | 16-Jan-2010<br /> |<br /> * Official release of sn0wbreeze<br /> |-<br /> ! 1.1<br /> | style=&quot;text-align:center;&quot; | 19-Jan-2010<br /> |<br /> * Fixes [[Cydia Application|Cydia]] problems<br /> * Fixes problems with [[NOR]] on [[S5L8900]] devices<br /> * Fixes custom packages not being installed<br /> |-<br /> ! 1.2<br /> | style=&quot;text-align:center;&quot; | 21-Jan-2010<br /> |<br /> * GUI fixes<br /> * Fixed even more [[Cydia Application|Cydia]] problems<br /> |-<br /> ! 1.3<br /> | style=&quot;text-align:center;&quot; | 23-Jan-2010<br /> |<br /> * fixes bug where some [[Cydia Application|Cydia]] repositories could not be added and downloaded from<br /> |-<br /> ! 1.4<br /> | style=&quot;text-align:center;&quot; | 26-Jan-2010<br /> |<br /> * Fixed vital bug where deb files may not be added to the right place<br /> |-<br /> ! 1.5<br /> | style=&quot;text-align:center;&quot; | 05-Feb-2010<br /> |<br /> * Jailbreaks iOS 3.1.3<br /> * Removed verbose mode support<br /> |-<br /> ! 1.5.1<br /> | style=&quot;text-align:center;&quot; | 07-Feb-2010<br /> |<br /> * Removed [[blacksn0w]] due to CommCenter issues (fix being worked on)<br /> |-<br /> |}<br /> <br /> === 4.X ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size:smaller;border-collapse:collapse;&quot; border=&quot;1&quot;<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:50px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;width:65px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9;text-align:center;&quot; | Changes<br /> |-<br /> ! 1.6<br /> | style=&quot;text-align:center;&quot; | 24-Jun-2010<br /> |<br /> * Jailbreaks iOS 4.0 only.<br /> * Removed [[ultrasn0w]] integration. (Due to MuscleNerd's request citing version management issues. Install it through the &quot;custom packages&quot; feature instead.)<br /> * Removed &quot;sn0wbreeze App&quot; integration (discontinued)<br /> |-<br /> ! 1.7<br /> | style=&quot;text-align:center;&quot; | 06-Jul-2010<br /> |<br /> * Added support for new bootroms in the form of a [[tethered jailbreak]] with [[iBooty]].<br /> |-<br /> ! 1.8 Beta<br /> | style=&quot;text-align:center;&quot; | 16-Jul-2010<br /> |<br /> * Only for iOS 4.1 beta 1.<br /> * Doesn't support [[hacktivation]].<br /> |-<br /> ! 2.0<br /> | style=&quot;text-align:center;&quot; | 22-Sep-2010<br /> |<br /> * Added support for &quot;MC model&quot; [[N72ap|iPod touch 2G]] ([[Tethered jailbreak|tethered]] using [[usb_control_msg(0xA1, 1) Exploit]])<br /> * Added Support for [[N18ap|iPod touch 3G]] and [[N88ap|iPhone 3GS]] ([[iBoot-359.3.2|new bootrom]]) on iOS 3.1.2<br /> * GUI improvements<br /> * Backwards compatible with 3.1.X<br /> |-<br /> ! 2.0.1<br /> | style=&quot;text-align:center;&quot; | 22-Sep-2010<br /> |<br /> * Fix for Error 37<br /> |-<br /> ! 2.0.2<br /> | style=&quot;text-align:center;&quot; | 25-Sep-2010<br /> |<br /> * Fixes for Error 37 and hacktivation.<br /> |-<br /> ! 2.1<br /> | style=&quot;text-align:center;&quot; | 13-Nov-2010<br /> |<br /> * Jailbreaks iOS 3.2.2/4.1.<br /> * Implemented [[usb_control_msg(0xA1, 1) Exploit|steaks4uce]] and [[limera1n]] exploits.<br /> * Added support for all iOS devices (except [[M68ap|iPhone]] and [[N45ap|iPod touch]])<br /> |-<br /> ! 2.2r1<br /> | style=&quot;text-align:center;&quot; | 15-Feb-2011<br /> |<br /> * Jailbreaks iOS 4.2.1.<br /> * A new &quot;Baseband Preservation Mode&quot;, which allows upgrade without updating the baseband (as usual), but without jailbreaking ([http://twitter.com/iH8sn0w/status/19249886721478656 announced on Dec 27])<br /> |-<br /> ! 2.2r2<br /> | style=&quot;text-align:center;&quot; | 15-Feb-2011<br /> |<br /> * Includes a fix for iBooks.<br /> |-<br /> ! 2.2r3<br /> | style=&quot;text-align:center;&quot; | 18-Feb-2011<br /> |<br /> * Fixes iBooks issues on devices still having issues.<br /> |-<br /> ! 2.2.1<br /> | style=&quot;text-align:center;&quot; | 20-Feb-2011<br /> |<br /> * Fixes for the [[n92ap|iPhone 4 (CDMA model)]]<br /> * Definitely fixes iBooks.<br /> * Drag and drop [[IPSW File Format|IPSWs]].<br /> * Fixes issues with Windows Classic.<br /> |-<br /> ! 2.3b1<br /> | style=&quot;text-align:center;&quot; | 13-Mar-2011<br /> |<br /> * &quot;For people that want to play around with 4.3 or preserve their baseband. It's BETA for a reason.&quot;<br /> |-<br /> ! 2.3b2<br /> | style=&quot;text-align:center;&quot; | 17-Mar-2011<br /> |<br /> * Adds Multitasking Gestures option in Settings App.<br /> * [[iBooty]] bug fixes (includes [[iBSS]] issues).<br /> * [[iBooty]] is even faster.<br /> * [[Mobile Substrate]] is now working.<br /> * Sleep bug in [[IPod touch|iPod touches]] is fixed.<br /> * Rare [[K48ap|iPad 1G]] issues resolved.<br /> * Added [[iREB]] to top bar for future re-runs within [[sn0wbreeze]].<br /> * [[ultrasn0w]] is still broken.<br /> |-<br /> ! 2.3b3<br /> | style=&quot;text-align:center;&quot; | 18-Mar-2011<br /> |<br /> * Fixed [[N81ap|iPod touch 4]] [[iBooty]] issues.<br /> |-<br /> ! 2.3b4<br /> | style=&quot;text-align:center;&quot; | 19-Mar-2011<br /> |<br /> * [[ultrasn0w]] now works for basebands ([[1.59.00]] / [[4.26.08]] / [[5.11.07]] / [[5.12.01]] / [[5.13.04]] / [[6.15.00]])<br /> * Fixed minor GUI + [[iBooty]] bugs.<br /> |-<br /> |-<br /> ! 2.4b1<br /> | style=&quot;text-align:center;&quot; | 19-Mar-2011<br /> |<br /> * iOS 4.3.1 is now supported<br /> |-<br /> ! 2.5<br /> | style=&quot;text-align:center;&quot; | 03-Apr-2011<br /> |<br /> * Jailbreaks all iOS 4.3.1 compatible device (except [[iPad 2]]). <br /> |-<br /> |}<br /> <br /> == Resources ==<br /> *[http://ih8sn0w.com/index.php/welcome.snow Download sn0wbreeze]<br /> <br /> [[Category:Hacking Software]]<br /> [[Category:GUI Tools]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=PwnageTool&diff=17298 PwnageTool 2011-04-07T08:06:50Z <p>Nannoid: /* 4.x: Fourth Major Release of PwnageTool */</p> <hr /> <div>'''PwnageTool''' is an [[iOS]] [[jailbreak]] tool for Mac OS X that jailbreaks by creating a custom [[IPSW File Format|IPSW]]. You are allowed to change boot logos and add pre-installed packages to the IPSW. After an IPSW is created you can use it for restore using [[iTunes]].<br /> <br /> ==Exploits Used==<br /> ===Version 4.0===<br /> * Bootrom exploit (used by [[limera1n]] and [[Greenpois0n (jailbreak)|greenpois0n]])<br /> <br /> ===Version 2.0===<br /> * [[Pwnage 2.0]]<br /> * [[Pwnage]]<br /> <br /> ===Version 1.0===<br /> * [[Pwnage]]<br /> * [[Ramdisk Hack]]<br /> <br /> == Models Supported ==<br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Model<br /> ! Since<br /> |-<br /> | [[M68ap|iPhone 2G]]<br /> | April 3, 2008<br /> |-<br /> | [[N45ap|iPod touch 1G]]<br /> | April 3, 2008<br /> |-<br /> | [[N82ap|iPhone 3G]]<br /> | Jul 19, 2008<br /> |-<br /> | [[N72ap|iPod touch 2G]]<br /> | Oct 2, 2009<br /> |-<br /> | [[N88ap|iPhone 3GS]]<br /> | Oct 2, 2009<br /> |}<br /> Note that the [[N18ap|iPod touch 3G]] and subsequent devices are not supported. With the iPod touch 2G and iPhone 3GS you must be jailbroken prior to using PwnageTool. The [[S5L8900]] devices you can go into [[DFU Mode]] and restore with [[iTunes]] without being jailbroken.<br /> <br /> ==Versions==<br /> <br /> PwnageTool was released April 3, 2008 but largely unused until version 2.0 was released July 19, 2008.<br /> The following versions that are shown here are not beta, alpha, or in development. <br /> <br /> ===1.x: First release of PwnageTool===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 1.1.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 3, 2008<br /> | |<br /> * Initial release<br /> * Jailbreaks 1.1.4 firmware<br /> * Supports iPod touch 1G and iPhone 2G.<br /> * Add [[BootNeuter]] in the IPSW to unlock iPhone 2G.<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> <br /> === 2.x: Second major release of Pwnagetool ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jul 19, 2008<br /> | |<br /> * Added iPhone 3G support [http://www.engadget.com/2008/07/19/iphone-dev-team-unleashes-pwnage-tool-2-0/]<br /> * Jailbreaks 2.0 Firmware<br /> * Change boot logos<br /> * Adds Cydia by default<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Aug 4, 2008<br /> | |<br /> * Jailbreaks 2.0.1 firmware<br /> * Works for 2.0 and 2.0.1.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Aug 21, 2008<br /> | |<br /> * Jailbreaks 2.0.2 firmware [http://www.iphonehacks.com/2008/08/pwnage-tool-202.html]<br /> * Works for 2.0, 2.0.1, and 2.0.2.<br /> * Bug fixes - for when it doesn't go to the next page when you click on something.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.0.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Aug 25, 2008<br /> | |<br /> * Jailbreaks 2.0.2 firmware<br /> * Works for 2.0, 2.0.1, and 2.0.2.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Sep 13, 2008<br /> | |<br /> * Jailbreaks 2.1 firmware<br /> * Removed backwards compatibility<br /> * Download packages from a valid Cydia source, and add them onto your custom IPSW.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Nov 21, 2008<br /> | |<br /> * Jailbreaks 2.2 firmware<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 2.2.5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jan 30, 2009<br /> | |<br /> * Jailbreaks 2.2.1<br /> * Not updated by [[iPhone Dev Team]] but made official.<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> <br /> === 3.x: Third Major Release of PwnageTool ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.0 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jun 19, 2009<br /> | |<br /> * Jailbreaks 3.0 firmware<br /> * DFU mode instructions included<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Sep 15, 2009<br /> | |<br /> * Jailbreaks 3.1 firmware for iPhone 2G and 3G<br /> * Jailbreaks 3.1.1 firmware for iPod touch 1G<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.1.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 2, 2009<br /> | |<br /> * Support for iPhone 3GS with [[iBoot-359.3]] bootrom and iPod touch 2G with [[iBoot-240.4]] bootrom (these devices need to be pwned from 3.0/3.0.1)<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 3.1.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 13, 2009<br /> | |<br /> * Jailbreaks 3.1.2 firmware for iPhone 2G, 3G, 3GS with [[iBoot-359.3]] bootrom, iPod touch 1G, iPod touch 2G with [[iBoot-240.4]] bootrom<br /> * iPod touch 3G not supported.<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> <br /> ==== 3.1.5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Feb 7, 2010<br /> | |<br /> * Jailbreaks 3.1.3 firmware for devices supported in 3.1.4.<br /> |<br /> |-<br /> ! rowspan=1 style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> === 4.x: Fourth Major Release of PwnageTool ===<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Version<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Release date<br /> ! style=&quot;background-color:#E9E9E9;&quot; align=&quot;center&quot; |Features<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.0 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jun 22, 2010<br /> | |<br /> * Jailbreaks iOS 4.0 for devices supported in 3.1.4.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.01 ====<br /> | style=&quot;white-space: nowrap;&quot; | Jun 23, 2010<br /> | |<br /> * Fixes iBooks issue.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 20, 2010<br /> | |<br /> * Jailbreaks iOS 4.1 for [[K66ap|Apple TV 2G]], [[K48ap|iPad 1G]], [[N82ap|iPhone 3G]], [[N88ap|iPhone 3GS]] (both bootroms), [[N90ap|iPhone 4]], [[N18ap|iPod touch 3G]], and [[N81ap|iPod touch 4G]].<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 22, 2010<br /> | |<br /> * Fixes issues with Leopard.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Oct 22, 2010<br /> | |<br /> * Fixes more issues with Leopard.<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.1.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Nov 28, 2010<br /> | |<br /> * Enables installing the [[6.15.00]] baseband on the [[n82ap|iPhone 3G]] and [[n88ap|iPhone 3GS]]<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Feb 15, 2010<br /> | |<br /> * Support for iOS 4.2.1 on every device that is compatible, except for the [[n72ap|iPod touch 2G]].<br /> |<br /> |-<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> ==== 4.3 ====<br /> | style=&quot;white-space: nowrap;&quot; | Apr 3, 2011<br /> | |<br /> * Support for iOS 4.3.1 on every device that is compatible, except for the [[iPad 2|iPad 2]].<br /> |<br /> ! rowspan=&quot;1&quot; style=&quot;white-space: nowrap;nowrap;&quot; |<br /> |}<br /> <br /> ==Creating the Firmware==<br /> PwnageTool takes the IPSW file and patches it, creating a custom version. This enables a lot more features such as pre-installed packages, [[BootNeuter]] ([[M68ap|iPhone]] software unlock), custom packages and boot logos. This method is usually less secure than the quick exploits such ([[redsn0w]], [[QuickPwn]], [[purplera1n]], [[blackra1n]], etc.).<br /> <br /> ==How to create Custom Firmware Bundles==<br /> {{main|Making PwnageTool Bundles}}<br /> <br /> ==Problems==<br /> This method does have negative aspects. The most common errors are the [[ITunes Errors#Errors 16xx|16xx range of errors]], which mean that the either the firmware file is corrupt or you didn't put it in the right mode (Recovery, DFU Mode). Sometimes the problems could just be a computer problem such as the memory is full or the USB port is broken. The most common error is [[ITunes Errors#Error 1604|Error 1604]] which means that the firmware file is corrupted.<br /> <br /> ==Windows==<br /> PwnageTool is expected to remain exclusive to Mac OS X. As of October 2009, [[User:ih8sn0w|iH8sn0w]], et. al. has announced that they made a project that will bring PwnageTool's functionality to Windows, called [[sn0wbreeze]]. [http://ih8sn0w.com/]<br /> <br /> == License ==<br /> PwnageTool is freeware.<br /> <br /> [[Category:Hacking Software]]<br /> [[Category:GUI Tools]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Talk:Redsn0w&diff=17297 Talk:Redsn0w 2011-04-07T08:04:49Z <p>Nannoid: /* Supported vs Compatible Device(s) */</p> <hr /> <div>{{lowercase|Talk:}}<br /> == Custom Boot Logo Tethered ==<br /> If we chose to &quot;Boot Tethered&quot; in redsn0w, can we use our own custom boot logo? Or at least make a new pwnapple? It's getting kind of Old... --[[User:xX-BLACK_OPS-Xx|xX-BLACK_OPS-Xx]]<br /> :You can easily swap out the pwnapple in the Mac OS X version (just look in redsn0w.app's &quot;MacOS&quot; folder). Unfortunately, it's not so simple for its Windows counterpart... :\ --[[User:Dialexio|&lt;span style=&quot;color:#C20; font-weight:normal;&quot;&gt;Dialexio&lt;/span&gt;]] 06:35, 3 December 2010 (UTC)<br /> <br /> == Latest Versions ==<br /> For 0.9.7 beta 1-4 a comment that it's Mac-only is missing. Any idea how to add this? --[[User:Http|http]] 08:13, 31 December 2010 (UTC)<br /> :Perhaps we can add a column (or two) to the table to specify which OSes each version of redsn0w works with. --[[User:Dialexio|&lt;span style=&quot;color:#C20; font-weight:normal;&quot;&gt;Dialexio&lt;/span&gt;]] 08:47, 31 December 2010 (UTC)<br /> ::Agreed. But if you change the formatting, then I think the whole table should be redesigned; the edit buttons are in the middle of the texts and it is not clear which description belongs to which version (at least on my iPhone Safari). valign=top is missing and maybe borders. --[[User:Http|http]] 12:43, 31 December 2010 (UTC)<br /> <br /> == Supported vs Compatible Device(s) ==<br /> I have replaced &quot;supported&quot; with the word &quot;compatible&quot; as many devices are still supported as in Apple still provides phone/technical support but the device may not be eligible for newer iOS update.<br /> *Before: Jailbreaks iOS 4.1-4.2.1 on all supported devices.<br /> *After: Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> --[[User:Nannoid|nannoid]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Talk:Redsn0w&diff=17296 Talk:Redsn0w 2011-04-07T08:01:17Z <p>Nannoid: </p> <hr /> <div>{{lowercase|Talk:}}<br /> == Custom Boot Logo Tethered ==<br /> If we chose to &quot;Boot Tethered&quot; in redsn0w, can we use our own custom boot logo? Or at least make a new pwnapple? It's getting kind of Old... --[[User:xX-BLACK_OPS-Xx|xX-BLACK_OPS-Xx]]<br /> :You can easily swap out the pwnapple in the Mac OS X version (just look in redsn0w.app's &quot;MacOS&quot; folder). Unfortunately, it's not so simple for its Windows counterpart... :\ --[[User:Dialexio|&lt;span style=&quot;color:#C20; font-weight:normal;&quot;&gt;Dialexio&lt;/span&gt;]] 06:35, 3 December 2010 (UTC)<br /> <br /> == Latest Versions ==<br /> For 0.9.7 beta 1-4 a comment that it's Mac-only is missing. Any idea how to add this? --[[User:Http|http]] 08:13, 31 December 2010 (UTC)<br /> :Perhaps we can add a column (or two) to the table to specify which OSes each version of redsn0w works with. --[[User:Dialexio|&lt;span style=&quot;color:#C20; font-weight:normal;&quot;&gt;Dialexio&lt;/span&gt;]] 08:47, 31 December 2010 (UTC)<br /> ::Agreed. But if you change the formatting, then I think the whole table should be redesigned; the edit buttons are in the middle of the texts and it is not clear which description belongs to which version (at least on my iPhone Safari). valign=top is missing and maybe borders. --[[User:Http|http]] 12:43, 31 December 2010 (UTC)<br /> <br /> == Supported vs Compatible Device(s) ==<br /> I have replaced &quot;supported&quot; with the word &quot;compatible&quot; as many devices are still supported as in Apple still provides phone/technical support but the device may not be eligible for newer iOS update. --[[User:Nannoid|nannoid]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Redsn0w&diff=17295 Redsn0w 2011-04-07T07:57:29Z <p>Nannoid: /* Versions */</p> <hr /> <div>{{DISPLAYTITLE:redsn0w}}<br /> [[Image:Redsn0w.png|thumb|redsn0w on Mac OS X]]<br /> redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.<br /> <br /> Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.<br /> <br /> Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.<br /> <br /> Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.<br /> <br /> redsn0w [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] can jailbreak iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.<br /> <br /> == Credit ==<br /> [[iPhone Dev Team]]<br /> <br /> == Versions ==<br /> {| class=&quot;wikitable&quot; width=&quot;100%&quot; style=&quot;font-size: 90%&quot;<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.1 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreak for the [[n72ap|iPod touch 2G]].<br /> |-<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.7 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.8 ====<br /> | style=&quot;white-space: nowrap;&quot; | July 2009<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3GS]] only.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> <br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.2 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports 3.0-3.1.2 on all iPhones and iPod touches ([[tethered jailbreak|tethered]] for newer devices with [[0x24000 Segment Overflow]] closed)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.3 beta ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | June 21, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Resolved a problem with iBooks.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.5 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | Unknown<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Supposed to fix any APN or MMS issues that users were seeing.<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | September 21, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | October 31, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72ap|iPod touch 2G]] with [[iBoot-240.5.1|new bootrom]]) .<br /> ** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.<br /> * The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Supports the installation of custom bundles<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 23, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | November 28, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.6 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 1, 2010<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].<br /> * Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]<br /> * Allows you to &quot;deactivate&quot; a hacktivated phone, so sbinger's [http://www.bingner.com/SAM.html Subscriber Artificial Module] (SAM) can trick your iPhone and [[iTunes]] into creating legitimate activation tickets.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 7 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 2, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Introduced command-line arguments to bypass some screens.<br /> ** -b &lt;filename&gt; to specify your own boot logo PNG<br /> ** -i &lt;filename&gt; to specify your reference IPSW<br /> ** -j to ask redsn0w to “Just boot now tethered for now”<br /> ** -o for [[N88ap|iPhone 3GS]] and [[N72ap|iPod touch 2G]] units vulnerable to [[0x24000 Segment Overflow]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 8 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 5, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Informs users if a boot logo PNG is invalid, and why.<br /> * Introduced the &quot;-a&quot; command-line argument to eliminate clicking.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 9 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 3, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Jailbreaks iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[k66ap|Apple TV 2]].<br /> * New command line parameters k and d [http://twitpic.com/4gg8n1]:<br /> ** -k --kernelcache=&lt;str&gt; use specified kernelcache (advanced)<br /> ** -d --devicetree=&lt;str&gt; use specified devicetree (advanced)<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.6 release candidate 10 ====<br /> | style=&quot;white-space: nowrap;&quot; | April 7, 2011<br /> | {{yes}}<br /> | {{yes}}<br /> |<br /> * Added boot animations<br /> * Removed misleading Settings<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 1 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Jailbreaks iOS 4.1-4.2.1 on all compatible devices.<br /> ** Able to achieve an [[untethered jailbreak]] on 4.2.1, provided the user has 4.2b3 [[SHSH]]s and the 4.2b3 [[IPSW File Format|IPSW]].<br /> *** This version of &quot;Jailbreak Monte&quot; has quite a number of bugs, particularly app switcher crashes and disabled [[Bluetooth]].<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 2 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 26, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs on GUI apps.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 3 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 27, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Fixes crashing bugs completely.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> <br /> ==== 0.9.7 beta 4 ====<br /> | style=&quot;white-space: nowrap;&quot; | December 31, 2010<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * ubsmuxd integrated.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 5 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 8, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * Issues related to [[Bluetooth]] and the sandbox are resolved.<br /> |-<br /> ! style=&quot;white-space: nowrap;&quot; |<br /> ==== 0.9.7 beta 6 ====<br /> | style=&quot;white-space: nowrap;&quot; | January 10, 2011<br /> | {{yes}}<br /> | {{no}}<br /> |<br /> * fixes Skype<br /> |-<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:150px;&quot; | Version<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:175px;&quot; | Release date<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Mac OS X-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center; width:75px;&quot; | Windows-compatible?<br /> ! style=&quot;background-color:#E9E9E9; text-align:center;&quot; | Changes<br /> |}<br /> <br /> == Exploits used ==<br /> For [[M68ap|iPhone]], [[N45ap|iPod touch]], and [[N82ap|iPhone 3G]], see:<br /> *[[Pwnage]]<br /> *[[Pwnage 2.0]]<br /> <br /> For [[N72ap|iPod touch 2G]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.<br /> *[[usb_control_msg(0xA1, 1) Exploit]] - used (in redsn0w 0.9.6 beta 1) to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow, as well as a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].<br /> <br /> For [[N88ap|iPhone 3GS]], see:<br /> *[[0x24000 Segment Overflow]]<br /> *[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> For [[N18ap|iPod touch 3G]]<br /> *[[usb_control_msg(0x21, 2) Exploit]]<br /> *limera1n exploit<br /> <br /> for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]<br /> *limera1n exploit<br /> <br /> [[Category:Hacking Software]]</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Timeline&diff=17294 Timeline 2011-04-07T07:54:30Z <p>Nannoid: /* April */</p> <hr /> <div>{| border=&quot;0&quot; style=&quot;float:right&quot;<br /> |-<br /> ||__TOC__<br /> |}<br /> ==2011==<br /> ===April===<br /> *April 3 -- All major jailbreak tools ([[redsn0w]], [[PwnageTool]], [[sn0wbreeze]]) get updated to includes [[i0n1c]]'s untether code to jailbreak devices compatible with iOS 4.3.1 except the [[iPad 2]].<br /> <br /> ===March===<br /> *March 25 -- Apple releases iOS 4.3.1, properly blocking [[User:comex|comex]]'s [[IOSurface Kernel Exploit|exploit]].<br /> *March 13 -- [[User:Comex|comex]] shows a remotely jailbroken [[K95ap|iPad 2 CDMA]].<br /> *March 11 -- Release of the [[iPad 2]] in the USA. The exploits for [[limera1n]] ([[User:Geohot|geohot]]), [[SHAtter]] ([[User:posixninja|p0sixninja]]), and the [[comex kernel exploit]] ([[User:comex|comex]]) were closed by Apple.<br /> *March 9 -- Apple releases iOS 4.3, fixing the [[HFS Legacy Volume Name Stack Buffer Overflow]] vulnerability.<br /> <br /> ===February===<br /> *February 15 -- New version of both [[PwnageTool]] and [[sn0wbreeze]] were released to support 4.2.1 and untethered using the [[feedface]] exploit.<br /> *February 7 -- The [[Chronic Dev (team)|Chronic Dev Team]] release a version of [[greenpois0n (jailbreak)|greenpois0n]] to jailbreak the [[N92ap|iPhone 4 CDMA model]] using the [[HFS Legacy Volume Name Stack Buffer Overflow]].<br /> *February 3 -- [[User:Jaywalker|Jaywalker]] of the [[Chronic Dev (team)|Chronic Dev Team]] posts [http://www.youtube.com/watch?v=T3NYPVT13xw a video] of custom boot using a soon to be released version of [[Greenpois0n (jailbreak)|Greenpois0n]].<br /> <br /> ===January===<br /> *January 12 -- Apple discontinues iOS support for [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] since today's beta release of iOS 4.3. Also first time a beta iOS for [[K66ap|Apple TV 2G]] is released.<br /> *January 11 -- Verizon announces CDMA version of iPhone 4<br /> <br /> ==2010==<br /> ===November===<br /> *November 28 -- [[ultrasn0w]] 1.2 is released by the [[iPhone Dev Team]] to unlock [[N82ap|iPhone 3G]] and [[N88ap|iPhone 3GS]] on baseband 6.15.00<br /> *November 22 -- Apple releases iOS 4.2.1 (respectively 4.2 for [[K66ap|Apple TV 2G]])<br /> <br /> ===October===<br /> *October 31 -- The [[iPhone Dev Team|Dev Team]] releases [[redsn0w]] 0.9.6b2 which jailbreaks iOS 4.1, 4.2 and 3.2.2 on every device available at the time of release (except for iPT 2G MC). It also includes &quot;DFU&quot; button allowing to flash custom [[IPSW]] from Windows [http://blog.iphone-dev.org/post/1452044444/redsn0w-limera1n-fun (see blog post)].<br /> *October 20 -- The [[iPhone Dev Team|Dev Team]] releases [[PwnageTool]] 4.1 which jailbreaks iOS 4.1 and 3.2.2 on every device available at the time of release. [http://blog.iphone-dev.org/post/1359246784/20102010-event (see blog post)]<br /> *October 18 -- [[Chronic Dev (team)|Chronic Dev Team]] releases [[Greenpois0n (jailbreak)|greenpois0n]] RC4 which added support for iPod touch 2G (MC and MB) for an untethered jailbreak using [[User:comex|comex]]'s kernel exploit and the [[usb_control_msg(0xA1, 1) Exploit]].<br /> *October 12 -- [[Chronic Dev (team)|Chronic Dev Team]] releases [[Greenpois0n (jailbreak)|greenpois0n]] after switching its exploit from SHAtter to the exploit [[limera1n]] uses. By doing this, SHAtter remains undisclosed, meaning there is a chance that the 5th generation devices are vulnerable. (The exploit [[limera1n]] uses appears to be fixed in the [[iBoot (Bootloader)|iBoot]] revision found in iOS 4.2 beta 2, which means Apple probably knows about the vulnerability and the next [[bootrom]] revision may have it patched.)<br /> *October 10 -- Following the first [[limera1n]] beta release, [[User:geohot|geohot]] released multiple versions, each fixing bugs affecting previous releases. [[Chronic Dev (team)|Chronic Dev Team]] officialy anounces that, in order to keep SHAtter undisclosed and possibly preserve it for 5th generation devices, [[Greenpois0n (jailbreak)|greenpois0n]] would be delayed in order to incorporate this new exploit [[limera1n]] uses.<br /> *October 9 -- In order to push [[Chronic Dev (team)|Chronic Dev Team]] to change the exploit used on [[Greenpois0n (jailbreak)|greenpois0n]], [[User:geohot|geohot]] rushed out a beta version of [[limera1n]].<br /> *October 8 -- [[User:Geohot|Geohot]] comes back to the scene with a new [[bootrom]] exploit believed to work on all devices, as shown on the resurrected [http://www.limera1n.com limera1n web site]. He prompts [[Chronic_Dev_(team)|Chronic Dev Team]] to use his exploit instead of SHAtter, but, since [[Greenpois0n (jailbreak)|greenpois0n]] is already scheduled to October 10, it may be not possible. [[User:Geohot|Geohot]] ETA'd his [[limera1n]] release to October 11, if [[Greenpois0n (jailbreak)|greenpois0n]] can't be changed to use this new exploit. This decision, however, would burn 2 [[bootrom]] exploits: SHAtter itself and the one used by [[limera1n]], which is unpatchable by firmware updates.<br /> *October 6 -- Chronic Dev Team issues expected ETA of [[Greenpois0n (jailbreak)|greenpois0n]] as October 10, featuring the new SHAtter exploit for devices with the [[S5L8930]].<br /> <br /> ===September===<br /> *September 30 -- [[User:MuscleNerd|MuscleNerd]] of the [[iPhone Dev Team]] posts [http://www.youtube.com/watch?v=adVp-IxcDHI the first video] of an [[K66ap|Apple TV 2G]] jailbroken via SHAtter.<br /> *September 27 -- [[User:MuscleNerd|MuscleNerd]] of the [[iPhone Dev Team]] posts [http://www.youtube.com/watch?v=aoX1Q8ym2J8 the first video] of an [[N81ap|iPod touch 4G]] jailbroken via SHAtter.<br /> *September 20 -- [[User:pod2g|pod2g]] discloses details about the [[usb_control_msg(0xA1, 1) Exploit‎]] here at The iPhone Wiki. It was used in [[redsn0w]] the following day.<br /> *September 9 -- The existence of SHAtter is revealed. Further details were not released, however.<br /> *September 8 -- Apple releases the [[N81ap|iPod touch 4G]], and iOS 4.1, closing the [[AT+XAPP Vulnerability]].<br /> *September 1 -- Apple event. They announced the new [[N81ap|iPod touch 4G]], [[K66ap|Apple TV 2G]], iOS 4.1, and [[iTunes]] 10.<br /> <br /> ===August===<br /> *August 12 -- [[Saurik]] releases the first version of PDF Patcher, which installs Apple's patch for the FreeType vulnerability (used in conjunction with other exploits by [[Star]]). It works on firmwares as far back as 2.x, and renders iOS 3.2.2 and 4.0.2 useless for jailbreakers. Jailbreaking and installing this patch is currently the only way for users of first generation iPod touches and iPhones to protect themselves against malicious use of the exploit.<br /> *August 11 -- Apple releases iOS 4.0.2 for [[iPhone]]/[[iPod touch]] and iOS 3.2.2 for [[K48ap|iPad]] as a hotfix for [[Star]]'s exploits. [[Ultrasn0w]]'s exploit remains, since there's no [[Baseband Firmware|baseband]] update on those versions.<br /> *August 3 -- Just before midnight in [[User:planetbeing|planetbeing]]'s timezone [[ultrasn0w]] has been released by the [[iPhone Dev Team]] to [[unlock]] the [[N90ap|iPhone 4]].<br /> *August 1 -- [[User:Comex|comex]] releases [[Star]], a [[jailbreak]] for all iDevices with iOS 3.1.2 through 4.0.1.<br /> <br /> ===July===<br /> *July 30 -- [[N90ap|iPhone 4]] is released in major countries (second wave).<br /> *July 26 -- Jailbreaking is now officially legal in the U.S.A.: [http://www.eff.org/press/archives/2010/07/26 EFF Wins New Legal Protections for Cell Phone Jailbreakers and Unlockers]<br /> *July 15 -- Apple releases iOS 3.2.1 and 4.0.1.<br /> <br /> ===June===<br /> *June 24 -- [[N90ap|iPhone 4]] is launched.<br /> *June 22 -- [[iPhone Dev Team]] releases [[PwnageTool]] 4.0 and later 4.0.1 for all devices on 4.0 except those with newer bootroms (some [[N72ap|iPod touch 2G]] and [[N88ap|iPhone 3GS]] devices, and all [[N18ap|iPod touch 3G]] and newer devices).<br /> *June 21 -- [[iPhone Dev Team]] releases [[redsn0w]] 0.9.5 to jailbreak 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPhone touch 2G]] ([[iBoot-240.4|old bootrom]]).<br /> *June 21 -- [[iPhone Dev Team]] releases [[ultrasn0w]] 0.93, an unlock for baseband firmwares [[4.26.08]], [[5.11.07]], [[5.12.01]], and [[5.13.04]].<br /> *June 21 -- Apple releases iOS 4.0<br /> *June 19 -- [[User:Geohot|geohot]] holds a speech at the [[Nuit du hack 2010|Nuit du Hack]]<br /> <br /> ===May===<br /> *May 3 -- Windows version of [[Spirit]] has been updated to not require Windows 98 compatibility mode to run and fixed a photo deletion issue.<br /> *May 2 -- [[User:Comex|comex]] releases [[Spirit]], an [[untethered jailbreak]] for all iDevices with iOS 3.1.2 through 3.2.<br /> <br /> ===April===<br /> *April 3 -- Apple releases the [[K48ap|iPad]].<br /> <br /> ===Feb===<br /> *Feb 12 -- [[User:sherif hashim|sherif_hashim]] discovers [[AT+XAPP Vulnerability]] and passes it to [[User:MuscleNerd|MuscleNerd]], an elite member of the [[iPhone Dev Team]]<br /> *Feb 2 -- Apple releases iOS 3.1.3, closing [[usb_control_msg(0x21, 2) Exploit|usb_control_msg(0x21, 2)]] vulnerability used by [[blackra1n]], [[redsn0w]], et. al.<br /> <br /> ==2009==<br /> ===November===<br /> *November 3 -- [[User:Geohot|geohot]] releases [[blackra1n]] RC3, a software jailbreak for all devices. Includes a new unlock for baseband [[5.11.07]] called [[blacksn0w]] and is also noticeably faster than previous versions.<br /> <br /> ===October===<br /> *October 11 -- [[User:Geohot|geohot]] releases [[blackra1n]] RC1, a 30 second software jailbreak for all devices, including a [[tethered jailbreak]] for the [[N18ap|iPod touch 3G]], and [[N88ap|iPhone 3GS]] and [[N72ap|iPod touch 2G]] units with newer bootrom revisions.<br /> <br /> ===September===<br /> * September 24 -- [[User:iH8sn0w|iH8sn0w]] discovers the [[AT+XEMN Heap Overflow|AT+XEMN]] crash independently.<br /> * September 9 -- The [[N18ap|iPod touch 3G]] with [[S5L8922]] processor is released. [[N72ap|iPod touch 2G]] units continue shipping, but with [[iBoot-240.5.1|a new bootrom]]. [[N88ap|iPhone 3GS]] units also begin shipping with [[iBoot-359.3.2|a new bootrom]]. These are no longer vulnerable to the [[0x24000 Segment Overflow]].<br /> * Apple releases iOS 3.1/3.1.1 (7C144/7C145), closing the [[iBoot Environment Variable Overflow]] and [[AT+XLOG Vulnerability|AT+XLOG]] + [[AT+FNS]] Baseband Exploits.<br /> <br /> ===July===<br /> * July 14 -- [[User:Geohot|geohot]] releases [[purplesn0w]], a software unlock for the [[X-Gold 608]] using [[AT+XLOG Vulnerability|the same exploit as ultrasn0w]], but handled differently. Minutes later, an explanation and source code was posted.<br /> * July 7 -- The [[iPhone Dev Team]] updates [[redsn0w]] and [[ultrasn0w]] to version 0.8, now with [[N88ap|iPhone 3GS]] support. Saurik also updates [[WinterBoard]] to support the [[N88ap|iPhone 3GS]].<br /> * July 3 -- [[User:Geohot|geohot]] releases [[purplera1n]], a software jailbreak for the [[N88ap|iPhone 3GS]].<br /> <br /> ===June===<br /> * June 28 -- [[User:Geohot|geohot]] posts pictures on his blog of the first fully jailbroken [[N88ap|iPhone 3GS]].<br /> * June 25 -- It's discovered that [[N88ap|iPhone 3GS]] is vulnerable to the [[0x24000 Segment Overflow]].<br /> * June 24 -- The [[iPhone Dev Team]] releases [[ultrasn0w]], an [[unlock]] for [[X-Gold 608]] thanks to [[AT+XLOG Vulnerability|a new exploit]] discovered by [[User:Oranav|Oranav]].<br /> * June 23 -- [[User:Geohot|geohot]] announces he's found a new exploit in [[iBoot (Bootloader)|iBoot]] he calls [[purplera1n]].<br /> * June 19 -- Release of [[N88ap|iPhone 3GS]] to the public and the release of [[PwnageTool]] 3.0 and [[redsn0w]] for jailbreaking devices running iOS 3.0<br /> * June 17 -- Apple releases iOS 3.0.<br /> * June 8 -- Apple announces the [[N88ap|iPhone 3GS]].<br /> <br /> ===March===<br /> * March 10 -- Information about the [[0x24000 Segment Overflow]] exploit used for the [[N72ap|iPod touch 2G]] [[untethered jailbreak]] is released thanks to the combined work of [[chronic]], [[CPICH]], [[User:Posixninja|posixninja]], [[User:Pod2g|pod2g]], [[ius]], [[planetbeing]], [[User:MuscleNerd|MuscleNerd]], and co. after being leaked and sold by [[NitroKey]]. To prevent users wasting their money on a stolen exploit, the Hybrid DevTeam decided to release it immediately.<br /> <br /> ===January===<br /> * January 31 -- The [[iPhone Dev Team]] released [[redsn0w Lite]], a [[tethered jailbreak|tethered]] [[N72ap|iPod touch 2G]] [[jailbreak]]. It combines the [[ARM7 Go]] vulnerability with the well-established [[pwnage]] flow for other Apple mobile devices. It was bundled in a way that allowed usage on iOS 2.2.1 by uploading [[iBoot (Bootloader)|iBoot]] from iOS 2.1.1, which is vulnerable to [[ARM7 Go]], to the device while in [[DFU Mode]].<br /> * January 29 -- Apple releases iOS 2.2.1, closing the [[AT+stkprof]] exploit.<br /> * January 25 -- [[0wnboot]] is released to [http://code.google.com/p/chronicdev/ chronicdev google code page], thanks to [[AriX]], [[User:ChronicDev|chronic]], [[CPICH]], [[westbaer]], [[ius]], [[User:Pod2g|pod2g]], the rest of the iPod devel crew on IRC, and to the #iphone-hax lab rats. Within days, [[AriX]] and the [[Chronic Dev (team)|Chronic Dev Team]] got a ramdisk booting for a [[tethered jailbreak]].<br /> * January 17 -- [[User:MuscleNerd|MuscleNerd]] of the [[iPhone Dev Team]] [https://twitter.com/MuscleNerd/status/1127346766 shows a video demo] of the first jailbroken [[N72ap|iPod touch 2G]].<br /> * January 16 -- [[ARM7 Go]] vulnerability disclosed where else but here on The iPhone Wiki, for developers to poke and prod at.<br /> * January 15 -- The [[iPhone Dev Team]] [https://twitter.com/iphone_dev/status/1120595069 tweets the VFDecrypt key] for iOS 2.2 on [[N72ap|iPod touch 2G]], demonstrating for the first time that unsigned code can now be run on that device.<br /> * January 1 -- The [[iPhone Dev Team]] releases [[yellowsn0w]] 0.9 beta for baseband [[2.28.00]].<br /> <br /> <br /> <br /> ==2008==<br /> ===December===<br /> * December 27 -- [[25C3 presentation &quot;Hacking the iPhone&quot;]]<br /> * December 21 -- [[User:MuscleNerd|MuscleNerd]], of the [[iPhone Dev Team]] does a live demo of the 3G unlock, dubbed as [[yellowsn0w]]: http://qik.com/video/729275<br /> <br /> ===November===<br /> * November 21 -- Apple releases iOS 2.2.<br /> <br /> ===September===<br /> * September 9 -- Apple releases iOS 2.1. [[N72ap|iPod touch 2G]], which no longer had the [[Pwnage 2.0]] exploit, is revealed.<br /> <br /> ===August===<br /> * August 18 -- Apple releases 2.0.2 fimware. [[iPhone Dev Team]] releases [http://wikee.iphwn.org/news:pwnage20announcement QuickPwn], a 2.x [[pwnage]]/ramdisk combination exploit that allows jailbreaking without needing to create custom IPSWs.<br /> * August 4 -- Apple releases 2.0.1 fimware<br /> <br /> ===July===<br /> * July 22 -- [[TA_Mobile]] hardware dumps the 3G baseband (bootloader 5.8 &amp; FW 1.45.00) by desoldering the [[NOR]].<br /> * July 19 -- [[iPhone Dev Team]] releases [[PwnageTool]] 2.0, jailbreaking and unlocking the 2.0 software on the [[M68ap|iPhone 2G]] and jailbreaking iOS 2.0 on the [[N82ap|iPhone 3G]] and [[N45ap|iPod touch]].<br /> * July 15 -- Apple releases iOS 1.1.5, the last of the 1.x firmwares<br /> * July 11 -- [[N82ap|iPhone 3G]] is released. Apple releases iOS 2.0 and MobileMe on the same date, resulting in server issues.<br /> <br /> ===June===<br /> * June 9 - [[N82ap|iPhone 3G]] is announced at [[WWDC]] '08.<br /> <br /> ===April===<br /> * April 3 -- [[iPhone Dev Team]] releases [[PwnageTool]] 1.0, making use of the [[pmdx exploit]] (to patch RSA checks out of the [[kernel]], to write unsigned to [[NOR]])<br /> <br /> ===March===<br /> * March 12 -- [[iPhone Dev Team|Dev team]] releases dual-boot jailbreak method, only to be silently fixed in 2.0.<br /> * March 4 -- [[User:N000b|George Zhu (n000b)]] releases [[iLiberty / iLiberty+]].<br /> <br /> ===February===<br /> * February 28 -- [[Cydia Application|Cydia]] is released as an open-source alternative to [[Installer.app]], and prepares to take over the jailbreak application scene upon 2.0's release.<br /> * February 26 -- Apple releases iOS 1.1.4.<br /> * February 11 -- [[User:Zibri|Zibri]] leaks the [[Ramdisk Hack]] in [[ZiPhone]], the first all-in-one unlock, activate, jailbreak solution.<br /> * February 8 -- [[User:Geohot|geohot]] releases software unlock for 4.6. Apple states 25% of phones were never activated with AT&amp;T.<br /> <br /> ===January===<br /> * January 28 -- [[iPhone Dev Team]] releases [[Soft Upgrade]] jailbreak for 1.1.3.<br /> * January 24 -- [[Nate True]] releases a version of [[iBrickr]] that used the [[Soft Upgrade]] method to jailbreak 1.1.3 for [[M68ap|iPhones]].<br /> * January 18 -- [[User:Geohot|Geohot]] and his friends [http://iphonejtag.blogspot.com/2008/01/112-otb-unlocked.html unlocked 1.1.2 OTB 4.6 by test point], the unbeatable version at that time.<br /> * January 18 -- [[iPhone Dev Team]] posts YouTube video of a jailbroken 1.1.3, which was made possible by the dual boot jailbreak from [[bgm]].<br /> * January 15 -- Apple releases iOS 1.1.3, closing the [[Mknod]] exploit. In addition, everything now runs as &quot;mobile&quot; instead of &quot;root.&quot;<br /> <br /> <br /> <br /> == 2007 ==<br /> ===November===<br /> * November 15 -- [[Baseband Bootloader|Baseband bootloader]] 4.6 is found on new [[M68ap|iPhone]]s, which initially had no [[unlock]].<br /> * November 12 -- Apple releases iOS 1.1.2, closing the [[LibTiff]] and [[Symlinks]] exploits.<br /> * November 2 -- [[JailbreakMe|AppSnapp]] is released, bringing jailbreaking to the mainstream iPhone user.<br /> <br /> ===October===<br /> * October 23 -- iPhone-Elite Team releases the [[Virginizer]].<br /> * October 14 -- [[User:AriX|AriX]] releases iJailBreak, the first automated [[n45ap|iPod touch]] jailbreak for the Mac.<br /> * October 12 -- [[User:planetbeing|planetbeing]] releases touchFree, the first automated [[N45ap|iPod touch]] jailbreak.<br /> * October 10 -- niacin, [[cmw]], and dre release the LibTiff exploit to jailbreak the [[N45ap|iPod touch]], which is later adapted for use in [[JailbreakMe|AppSnapp]].<br /> <br /> ===September===<br /> * September 27 -- Apple releases iOS 1.1.1.<br /> * September 11 -- [[iPhone Dev Team]] releases [[iUnlock]], first free software unlock.<br /> * September 10 -- [[IPSF]] releases first paid software unlock.<br /> * September 9 -- Apple announces the [[N45ap|iPod touch]] at a media event.<br /> <br /> ===August===<br /> * August 23 -- [[User:Geohot|geohot]] and team release [[hardware unlock]] method.<br /> * August 21 -- [[Installer.app]] is released by Nullriver, first GUI apps are distributed.<br /> <br /> ===July===<br /> * July 23 -- First phones are used with other carriers by means of [[SIM hacks]].<br /> * July 20 -- nightwatch adapts a [[toolchain]] to the iPhone. The first apps are compiled.<br /> * July 9 -- [[iPhone Dev Team]] releases a [[jailbreak]] method. The first use of this is ringtones.<br /> * July 3 -- DVD Jon first cracks [[activation]]. People can use the apps on the phone without a subscription.<br /> <br /> ===June===<br /> * June 29 -- [[M68ap|iPhone]] is released. World's most hyped consumer product.<br /> * June 26 -- The [[iPhone Dev Team]] was formed.</div> Nannoid https://www.theiphonewiki.com/w/index.php?title=Jailbreak_(S5L8920%2B)&diff=17293 Jailbreak (S5L8920+) 2011-04-07T07:49:48Z <p>Nannoid: /* Jailbreak tools */</p> <hr /> <div>When the [[N88ap|iPhone 3GS]] was initially released, Apple did not have enough time to fix the [[0x24000 Segment Overflow]] in the [[S5L8920 (Bootrom)|S5L8920]]. However, in order to flash an exploited [[LLB]] and jailbreak the iPhone 3GS, '''one''' of the following needed to be done:<br /> * Find a new [[iBoot]] exploit every time a new firmware is out.<br /> * Find a way to bypass the [[ECID]] checks.<br /> * Use a bootrom exploit that allows unsigned code execution via USB.<br /> <br /> Newer devices (iPhone 3GS with [[iBoot-359.3.2|new bootrom]], [[N18ap|iPod touch 3G]], and subsequent devices) are no longer vulnerable to the [[0x24000 Segment Overflow]] exploit. Many of them are susceptible to geohot's bootrom exploit (originally found in [[limera1n]]), which allows unsigned code execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''.<br /> <br /> ==ECID==<br /> Apple added a new tag to the [[IMG3 File Format]] called ECID. The ECID is ''unique'' to each phone, and its signature is being checked. With this method, Apple attempts to block downgrades once newer firmware becomes available, unless you have a dump of your old firmware's unique IMG3 or signed certificate. Therefore, iBoot exploits won't be so useful for tethered jailbreaks, because such exploits will be closed in new firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].<br /> <br /> The issue with this is that, even with the [[0x24000 Segment Overflow]] still in bootrom, an [[iBoot]] exploit was still needed to actually flash the exploited [[LLB]]. Apple uses this ECID stuff to block downgrading iBoot to a vulnerable version. It was resolved when Geohot released his [[limera1n]] tool, which used a bootrom exploit to upload an unsigned iBoot. Still the problem remains with newer devices with [[0x24000 Segment Overflow|0x24000]] fixed - tampering with firmware makes such jailbreak tethered unless some other exploit is used. <br /> <br /> There are methods to help keep your downgrading ability, though.<br /> <br /> * If it was cached prior to 3.1's release, 3GS owners were able save a file which contains the signature of the 3.0 [[iBSS]] containing their [[ECID]], using the [http://purplera1n.com/ purplera1n website]. A tool has not been created to incorporate this file into a fully signed iBSS, however. <br /> * Saurik's servers are actively caching the necessary files. [http://www.saurik.com/id/12#howto Instructions] to use the servers are included.<br /> * The [[SHSH]] associated with an ECID can be also saved by running [[TinyUmbrella]]. [[TinyUmbrella]] allows the user to restore to whatever version is associated with that [[SHSH]] file permanently. This is based on the aforementioned service [[Saurik]] provides remotely from [[Cydia Server|his server(s)]].<br /> <br /> ==Jailbreak tools ==<br /> ===[[K66ap |Apple TV 2G]]===<br /> '''NOTE:''' The version in parentheses is what the Apple TV reports on TV.<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;5&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (4.0)<br /> |style=&quot;width:100px;&quot;| 4.2 (4.1)<br /> |style=&quot;width:100px;&quot;| 4.2.1 (4.1.1)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F191m (4.2)<br /> |style=&quot;width:100px;&quot;| 4.3 Build 8F202 (4.2.1)<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{partial|no package management GUI}}<br /> | {{no}}<br /> | {{yes|RC6}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{partial|no package management GUI}}<br /> | {{partial|Restore from a custom firmware with unofficial bundle&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[Seas0nPass]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[K48ap|iPad]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;6&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.2<br /> |style=&quot;width:100px;&quot;| 3.2.1<br /> |style=&quot;width:100px;&quot;| 3.2.2<br /> |style=&quot;width:150px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[Spirit]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4 and earlier}}<br /> | {{yes|RC5}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6b2}}<br /> | {{yes|0.9.6rc8&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc9 or 0.9.6rc10}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1-4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> === [[iPad 2]] ===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> ! rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;2&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |-<br /> |}<br /> <br /> ===[[N88ap|iPhone 3GS]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;12&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:90px;&quot;| 3.0<br /> |style=&quot;width:90px;&quot;| 3.0.1<br /> |style=&quot;width:90px;&quot;| 3.1<br /> |style=&quot;width:90px;&quot;| 3.1.2<br /> |style=&quot;width:90px;&quot;| 3.1.3<br /> |style=&quot;width:90px;&quot;| 4.0<br /> |style=&quot;width:90px;&quot;| 4.0.1<br /> |style=&quot;width:90px;&quot;| 4.0.2<br /> |style=&quot;width:90px;&quot;| 4.1<br /> |style=&quot;width:90px;&quot;| 4.2.1<br /> |style=&quot;width:90px;&quot;| 4.3<br /> |style=&quot;width:90px;&quot;| 4.3.1<br /> |-<br /> | [[purplera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.8}}<br /> | {{yes|0.8}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6b2}}<br /> | {{yes|0.9.6rc8&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc9 or 0.9.6rc10}}<br /> |-<br /> | [[blackra1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|3.1.4&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware&lt;sup&gt;2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|Restore from a custom firmware with unofficial firmware bundle&lt;sup&gt;2&lt;/sup&gt;}}<br /> | {{yes|4.1-4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1&lt;/sup&gt;&lt;sup&gt;3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{partial|1.4&lt;sup&gt;2&lt;/sup&gt; or 2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|1.5.1&lt;sup&gt;2&lt;/sup&gt; or 2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{partial|1.7&lt;sup&gt;1 2&lt;/sup&gt; or 2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> |colspan=&quot;2&quot; {{partial|2.0.2&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4 and earlier}}<br /> | {{yes|RC5}}<br /> | {{no}}<br /> | {{no}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]] on devices with the [[iBoot-359.3.2|new bootrom]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; Only applicable for devices with the [[iBoot-359.3|old bootrom]]. Requires the device to have signature checks disabled (pwned).<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Requires an unofficial firmware bundle.<br /> <br /> ===[[N90ap|iPhone 4 (GSM model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;7&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.1<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[Star]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4 and earlier}}<br /> | {{yes|RC5}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6b2}}<br /> | {{yes|0.9.6rc8&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc9 or 0.9.6rc10}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1-4.1.3}}<br /> | {{yes|4.2}}<br /> | {{yes|4.2&lt;sup&gt;1 3&lt;/sup&gt;}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.<br /> <br /> &lt;sup&gt;3&lt;/sup&gt; Custom firmware, made with unofficial PwnageTool bundle.<br /> <br /> ===[[N92ap|iPhone 4 (CDMA model)]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;2&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.2.5<br /> |style=&quot;width:100px;&quot;| 4.2.6<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{yes|RC5 b4}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{yes|4.2}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.2}}<br /> |}<br /> <br /> ===[[N18ap|iPod touch 3G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;9&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 3.1.1<br /> |style=&quot;width:100px;&quot;| 3.1.2<br /> |style=&quot;width:100px;&quot;| 3.1.3<br /> |style=&quot;width:100px;&quot;| 4.0<br /> |style=&quot;width:100px;&quot;| 4.0.2<br /> |style=&quot;width:100px;&quot;| 4.1<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[blackra1n]]<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|Yes&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|0.9.2&lt;sup&gt;1&lt;/sup&gt; or 0.9.3&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|0.9.6b2}}<br /> | {{yes|0.9.6rc8&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc9 or 0.9.6rc10}}<br /> |-<br /> | [[Spirit]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Star]]<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{no}}<br /> | {{yes|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|1.7&lt;sup&gt;1&lt;/sup&gt; or 2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{partial|2.0.2&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |-<br /> | [[limera1n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|RC4 and earlier}}<br /> | {{yes|RC5}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> | {{yes|4.1-4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> ===[[N81ap |iPod touch 4G]]===<br /> {| class=&quot;wikitable&quot; style=&quot;font-size: smaller; text-align: center; table-layout: fixed; border-collapse: collapse;&quot; border=&quot;1&quot;<br /> |-<br /> !rowspan=&quot;2&quot;| [[Jailbreak]] Tool<br /> !colspan=&quot;4&quot;| Works with [[firmware]]...<br /> |-<br /> |style=&quot;width:100px;&quot;| 4.1 (both builds)<br /> |style=&quot;width:100px;&quot;| 4.2.1<br /> |style=&quot;width:100px;&quot;| 4.3<br /> |style=&quot;width:100px;&quot;| 4.3.1<br /> |-<br /> | [[limera1n]]<br /> | {{yes}}<br /> | {{no}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[redsn0w]]<br /> | {{yes|0.9.4b2}}<br /> | {{yes|0.9.6rc8&lt;sup&gt;1&lt;/sup&gt; or 0.9.7b6&lt;sup&gt;1 2&lt;/sup&gt;}}<br /> | {{no}}<br /> | {{yes|0.9.6rc9 or 0.9.6rc10}}<br /> |-<br /> | [[Greenpois0n (jailbreak)|greenpois0n]]<br /> | {{yes|RC4 and earlier}}<br /> | {{yes|RC5}}<br /> | {{no}}<br /> | {{no}}<br /> |-<br /> | [[PwnageTool]]<br /> | {{yes|4.1-4.1.3}}<br /> | {{yes|4.2}}<br /> | {{no}}<br /> | {{yes|4.3}}<br /> |-<br /> | [[sn0wbreeze]]<br /> | {{yes|2.1}}<br /> | {{yes|2.2}}<br /> | {{yes|2.3b&lt;sup&gt;1&lt;/sup&gt;}}<br /> | {{yes|2.5}}<br /> |}<br /> &lt;sup&gt;1&lt;/sup&gt; [[Tethered jailbreak]].<br /> <br /> &lt;sup&gt;2&lt;/sup&gt; If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.</div> Nannoid