The iPhone Wiki - User contributions [en]

Firmware

2011-02-04T12:03:54Z

NooBox: /* Resources */

Latest Apple download links can be found [http://www.itunes.com/version here].

==[[Apple TV]]==
===[[K66ap|Apple TV (2nd generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="100"| Publicly available virgin [[jailbreak]]?
!width="70"| File Size
|-
| 4.1
| [[Mojave 8M89 (Apple TV 2G)|Mojave 8M89]]
| [http://appldnld.apple.com/AppleTV/061-8940.20100926.Tvtnz/AppleTV2,1_4.1_8M89_Restore.ipsw AppleTV2,1_4.1_8M89_Restore.ipsw]
| <code>68647d6ce163fc20891ca5bcff647c8eecc2b8d9</code>
| Initial shipment.
| {{yes}}
| 253,759,976
|-
| 4.2
| [[jasper 8C150 (Apple TV 2G)|Jasper 8C150]]
| [http://appldnld.apple.com/AppleTV/061-8747.20101122.Vgtr5/AppleTV2,1_4.2_8C150_Restore.ipsw AppleTV2,1_4.2_8C150_Restore.ipsw]
| <code>58f9ab479783dad3dff3834452abc2917aaef2a5</code>
|
| {{no}}
| 279,991,056
|-
| 4.2.1
| [[jasper 8C154 (Apple TV 2G)|Jasper 8C154]]
| [http://appldnld.apple.com/AppleTV/061-9978.20101214.gmabr/AppleTV2,1_4.2.1_8C154_Restore.ipsw AppleTV2,1_4.2.1_8C154_Restore.ipsw]
| <code>c2b1adea595afa2b9caf633f0a820d3b66424dbf</code>
|
| {{yes|Yes1}}
| 280,052,510
|}

1 [[Tethered jailbreak]] only.

==[[iPad]]==
===[[K48ap|iPad (1st generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| [[X-Gold 608#Known iPad Firmware Versions|Baseband]] (3G only)
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="100"| Publicly available virgin [[jailbreak]]?
!width="70"| File Size
|-
| 3.2
| [[Wildcat 7B367 (iPad)|Wildcat 7B367]]
|rowspan="3" | [[6.15.00]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPad/061-7987.20100403.mjiTr/iPad1,1_3.2_7B367_Restore.ipsw iPad1,1_3.2_7B367_Restore.ipsw]
| <code>172e8297af74b91971a802e6ad137c891f553099</code>
| Initial shipment.
| {{yes}}
| 478,959,325
|-
| 3.2.1
| [[Wildcat 7B405 (iPad)|Wildcat 7B405]]
| [http://appldnld.apple.com/iPad/061-8282.20100713.vgtgh/iPad1,1_3.2.1_7B405_Restore.ipsw iPad1,1_3.2.1_7B405_Restore.ipsw]
| <code>de0a2b64cd335d48fb4abc9ed8700f5dbdf768ca</code>
|
| {{yes}}
| 479,012,625
|-
| 3.2.2
| [[Wildcat 7B500 (iPad)|Wildcat 7B500]]
| [http://appldnld.apple.com/iPad/061-8801.20100811.CvfR5/iPad1,1_3.2.2_7B500_Restore.ipsw iPad1,1_3.2.2_7B500_Restore.ipsw]
| <code>68b613f78581d36eab96aa5a007001dff142baa3</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| 479,001,595
|-
| 4.2.1
| [[Jasper 8C148 (iPad)|Jasper 8C148]]
| [[7.10.00]]
| [http://appldnld.apple.com/iPad/061-9857.20101122.VGthy/iPad1,1_4.2.1_8C148_Restore.ipsw iPad1,1_4.2.1_8C148_Restore.ipsw]
| <code>8717b3bedc925b587566442ad375aa65d857e79a</code>
|
| {{yes|Yes1 2}}
| 578,084,840
|}

1 [[Tethered jailbreak]] only.

2 If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, [[Jailbreak Monte]] can be used.

==[[iPhone]]==
===[[M68ap|iPhone]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| [[Baseband Firmware]]
!width="210"| IPSW Download URL
!width="220"| SHA1 Hash
!width="140"| Comments
!width="99"| Publicly available virgin [[jailbreak]]?
!width="91"| Publicly available virgin [[unlock]]?
!width="70"| File Size
|-
| 1.0
| [[Alpine 1A420]]
| [http://img399.imageshack.us/i/iphone2go0.jpg/ 03.06.01_G]
| iphoneproto.zip
| <code>6e798e906c6590a7521ef89b731569be6d05b3aa</code>
| Prototype; [http://forums.macrumors.com/showthread.php?t=627449 macrumors]
| {{no}}
| {{no}}
| 109,813,128
|-
| 1.0.0
| Heavenly 1A543a
| 03.11.02_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3538.20070629.B7vXa/iPhone1,1_1.0_1A543a_Restore.ipsw iPhone1,1_1.0_1A543a_Restore.ipsw]
| <code>fb8bb3ee2e9a997affbb97868599f2995c78209c</code>
| Initial US shipment.
| {{yes}}
| {{yes}}
| 95,604,348
|-
| 1.0.1
| Heavenly 1C25
| 03.12.06_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3614.20070731.Nt6Y7/iPhone1,1_1.0.1_1C25_Restore.ipsw iPhone1,1_1.0.1_1C25_Restore.ipsw]
| <code>a00b85a7a55d62a94be5fbf5effbc42fd63f3097</code>
|
| {{yes}}
| {{yes}}
| 95,627,958
|-
| 1.0.2
| Heavenly 1C28
| 03.14.08_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3823.20070821.vormd/iPhone1,1_1.0.2_1C28_Restore.ipsw iPhone1,1_1.0.2_1C28_Restore.ipsw]
| <code>7f5c0ff1f84a0202b75a55c3fcb362e415334d1e</code>
|
| {{yes}}
| {{yes}}
| 95,627,324
|-
| 1.1.1
| Snowbird 3A109a
| 04.01.13_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-3883.20070927.In76t/iPhone1,1_1.1.1_3A109a_Restore.ipsw iPhone1,1_1.1.1_3A109a_Restore.ipsw]
| <code>d441dd1c71ce18f25d8fc4faa71c1e6eaa02d02c</code>
|
| {{yes}}
| {{yes}}
| 159,668,150
|-
| 1.1.2
| Oktoberfest 3B48b
| 04.02.13_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4037.20071107.5Bghn/iPhone1,1_1.1.2_3B48b_Restore.ipsw iPhone1,1_1.1.2_3B48b_Restore.ipsw]
| <code>797c02e7d660940e8d9a16cc7229ccf3f67dd8b1</code>
| Initial Euro shipment.
| {{yes}}
| {{yes}}
| 167,927,501
|-
| 1.1.3
| Little Bear 4A93
| 04.03.13_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4061.20080115.4Fvn7/iPhone1,1_1.1.3_4A93_Restore.ipsw iPhone1,1_1.1.3_4A93_Restore.ipsw]
| <code>b3dec7580bd00dc4faf28449d9618ef40aeacc96</code>
|
| {{yes}}
| {{yes}}
| 169,950,551
|-
| 1.1.4
| Little Bear 4A102
| 04.04.05_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4313.20080226.Sw39i/iPhone1,1_1.1.4_4A102_Restore.ipsw iPhone1,1_1.1.4_4A102_Restore.ipsw]
| <code>000811bac096011b50ebf6ec1ec2285b62fda4cb</code>
|
| {{yes}}
| {{yes}}
| 169,946,442
|-
| 2.0
| [[Big Bear 5A347 (iPhone)|Big Bear 5A347]]
|rowspan="11"| 04.05.04_G
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4956.20080710.V50OI/iPhone1,1_2.0_5A347_Restore.ipsw iPhone1,1_2.0_5A347_Restore.ipsw]
| <code>9c510a3cfce789fa5f92a8f763c231bac82ff6d4</code>
|
| {{yes}}
|rowspan="11" {{yes|[[BootNeuter]]}}
| 228,768,637
|-
| 2.0.1
| [[Big Bear 5B108 (iPhone)|Big Bear 5B108]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5135.20080729.Vfgtr/iPhone1,1_2.0.1_5B108_Restore.ipsw iPhone1,1_2.0.1_5B108_Restore.ipsw]
| <code>61de6a2bd6ceddc9ecabad1671b91a59b3824bc4</code>
|
| {{yes}}
| 254,048,068
|-
| 2.0.2
| [[Big Bear 5C1 (iPhone)|Big Bear 5C1]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5246.20080818.2V0hO/iPhone1,1_2.0.2_5C1_Restore.ipsw iPhone1,1_2.0.2_5C1_Restore.ipsw]
| <code>b84b57bea919bdc720287ec908c1378e7d7b5e1b</code>
|
| {{yes}}
| 253,589,000
|-
| 2.1
| [[Sugar Bowl 5F136 (iPhone)|Sugar Bowl 5F136]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5202.20080909.gkbEj/iPhone1,1_2.1_5F136_Restore.ipsw iPhone1,1_2.1_5F136_Restore.ipsw]
| <code>353b7745767b85932e14e262e69463620939bdf7</code>
|
| {{yes}}
| 242,171,241
|-
| 2.2
| [[Timberline 5G77 (iPhone)|Timberline 5G77]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5779.20081120.Pt5yH/iPhone1,1_2.2_5G77_Restore.ipsw iPhone1,1_2.2_5G77_Restore.ipsw]
| <code>cbfc6ff886ce89868a55547b9fb980dbf92e6418</code>
|
| {{yes}}
| 257,576,980
|-
| 2.2.1
| [[SUTimberline 5H11 (iPhone)|SUTimberline 5H11]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5830.20090127.Mmni6/iPhone1,1_2.2.1_5H11_Restore.ipsw iPhone1,1_2.2.1_5H11_Restore.ipsw]
| <code>43b95ebe1e51f8d30eae916053396595c08440d3</code>
|
| {{yes}}
| 257,593,705
|-
| 3.0
| [[Kirkwood 7A341 (iPhone)|Kirkwood 7A341]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6580.20090617.XsP76/iPhone1,1_3.0_7A341_Restore.ipsw iPhone1,1_3.0_7A341_Restore.ipsw]
| <code>2afd3f8ede17390737f508473ed205506a0bd23f</code>
|
| {{yes}}
| 240,394,111
|-
| 3.0.1
| [[Kirkwood 7A400 (iPhone)|Kirkwood 7A400]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6974.20090731.Cf4Tg/iPhone1,1_3.0.1_7A400_Restore.ipsw iPhone1,1_3.0.1_7A400_Restore.ipsw]
| <code>34c391fbbc7b31b159372766de39ce5c9cc26ebb</code>
| Hotfix for an SMS exploit.
| {{yes}}
| 240,439,502
|-
| 3.1
| [[Northstar 7C144 (iPhone)|Northstar 7C144]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6605.20090909.PQ3ws/iPhone1,1_3.1_7C144_Restore.ipsw iPhone1,1_3.1_7C144_Restore.ipsw]
| <code>b7b5f436f81c6f855410e8b44a3d432ccaacd6fc</code>
|
| {{yes}}
| 252,536,460
|-
| 3.1.2
| [[Northstar 7D11 (iPhone)|Northstar 7D11]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7268.20091008.32pNe/iPhone1,1_3.1.2_7D11_Restore.ipsw iPhone1,1_3.1.2_7D11_Restore.ipsw]
| <code>e4a1171542dbbd3093516d9c02047b9f7e143050</code>
|
| {{yes}}
| 252,515,888
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPhone)|SUNorthstarTwo 7E18]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7481.20100202.4orot/iPhone1,1_3.1.3_7E18_Restore.ipsw iPhone1,1_3.1.3_7E18_Restore.ipsw]
| <code>eab23a7f8d2a17cb71046c50fc5f67ec390a3c2b</code>
|
| {{yes}}
| 238,319,275
|}

===[[N82ap|iPhone 3G]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| [[X-Gold 608#Known iPhone Firmware Versions|Baseband]]
!width="210"| IPSW Download URL
!width="220"| SHA1 Hash
!width="140"| Comments
!width="99"| Publicly available virgin [[jailbreak]]?
!width="90"| Publicly available virgin [[unlock]]?
!width="70"| File Size
|-
| 2.0
| [[Big Bear 5A345 (iPhone 3G)|Big Bear 5A345]]
|rowspan="2" | [[1.45.00]]
| No download available
|
| Initial shipment.
| {{yes}}
|rowspan="5" {{partial|Upgrade to 2.2}}
|
|-
| 2.0
| [[Big Bear 5A347 (iPhone 3G)|Big Bear 5A347]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-4955.20080710.bgt53/iPhone1,2_2.0_5A347_Restore.ipsw iPhone1,2_2.0_5A347_Restore.ipsw]
| <code>af9506ca0034e462674f9f59c5406f159eaf9fc1</code>
|
| {{yes}}
| 235,957,125
|-
| 2.0.1
| [[Big Bear 5B108 (iPhone 3G)|Big Bear 5B108]]
| [[1.48.02]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5134.20080729.Q2W3E/iPhone1,2_2.0.1_5B108_Restore.ipsw iPhone1,2_2.0.1_5B108_Restore.ipsw]
| <code>e81c7ac7e334a3e9d81b3b47894bfaa1ec495482</code>
|
| {{yes}}
| 261,224,227
|-
| 2.0.2
| [[Big Bear 5C1 (iPhone 3G)|Big Bear 5C1]]
| [[2.08.01]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5241.20080818.t5Fv3/iPhone1,2_2.0.2_5C1_Restore.ipsw iPhone1,2_2.0.2_5C1_Restore.ipsw]
| <code>bef7fef954293046420fbcf947379839178a195b</code>
|
| {{yes}}
| 260,761,030
|-
| 2.1
| [[Sugar Bowl 5F136 (iPhone 3G)|Sugar Bowl 5F136]]
| [[2.11.07]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5198.20080909.K3294/iPhone1,2_2.1_5F136_Restore.ipsw iPhone1,2_2.1_5F136_Restore.ipsw]
| <code>c6957dcbf2a95ccfd6dce374a727b1b7700a9043</code>
|
| {{yes}}
| 249,341,655
|-
| 2.2
| [[Timberline 5G77 (iPhone 3G)|Timberline 5G77]]
| [[2.28.00]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5778.20081120.Aqw4R/iPhone1,2_2.2_5G77_Restore.ipsw iPhone1,2_2.2_5G77_Restore.ipsw]
| <code>f67f8b2b842428bf89456cda0c2d5cf954d111a4</code>
|
| {{yes}}
| {{yes|[[Ultrasn0w|yellowsn0w]]}}
| 258,342,348
|-
| 2.2.1
| [[SUTimberline 5H11 (iPhone 3G)|SUTimberline 5H11]]
| [[2.30.03]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5828.20090127.aQLi8/iPhone1,2_2.2.1_5H11_Restore.ipsw iPhone1,2_2.2.1_5H11_Restore.ipsw]
| <code>e0098e6fab5c90b59e067e03ae3ccd4a7cd0f39c</code>
|
| {{yes}}
| {{partial|Upgrade to 3.0}}
| 258,359,073
|-
| 3.0
| [[Kirkwood 7A341 (iPhone 3G)|Kirkwood 7A341]]
|rowspan="2" | [[4.26.08]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6578.20090617.VfgtU/iPhone1,2_3.0_7A341_Restore.ipsw iPhone1,2_3.0_7A341_Restore.ipsw]
| <code>94f1fb43de12bff0f168ce690b7e794cc6220ae3</code>
|
| {{yes}}
|rowspan="2" {{yes|[[ultrasn0w]]}}
| 241,229,233
|-
| 3.0.1
| [[Kirkwood 7A400 (iPhone 3G)|Kirkwood 7A400]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6972.20090731.Zx3Rr/iPhone1,2_3.0.1_7A400_Restore.ipsw iPhone1,2_3.0.1_7A400_Restore.ipsw]
| <code>a148ff39fa4dea499e7a9dd007b63e90c4f56666</code>
| Hotfix for an SMS exploit.
| {{yes}}
| 241,274,617
|-
| 3.1
| [[Northstar 7C144 (iPhone 3G)|Northstar 7C144]]
|rowspan="2" | [[5.11.07]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6600.20090909.AwndZ/iPhone1,2_3.1_7C144_Restore.ipsw iPhone1,2_3.1_7C144_Restore.ipsw]
| <code>9b3b3c148170b012012278efda9ff5c38282d559</code>
|
| {{yes}}
|rowspan="2" {{yes|[[blacksn0w]] or [[ultrasn0w]]}}
| 253,361,339
|-
| 3.1.2
| [[Northstar 7D11 (iPhone 3G)|Northstar 7D11]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7265.20091008.Xsd32/iPhone1,2_3.1.2_7D11_Restore.ipsw iPhone1,2_3.1.2_7D11_Restore.ipsw]
| <code>b1a6ab2771bb5da372ba75a8fa3e1d72b71359d0</code>
|
| {{yes}}
| 253,340,786
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPhone 3G)|SUNorthstarTwo 7E18]]
| [[5.12.01]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7468.20100202.pbnrt/iPhone1,2_3.1.3_7E18_Restore.ipsw iPhone1,2_3.1.3_7E18_Restore.ipsw]
| <code>f5950afca546f93e281ba3cdb08bc0cfed7f0896</code>
|
| {{yes}}
| {{yes|[[ultrasn0w]]}}
| 239,139,281
|-
| 4.0
| [[Apex 8A293 (iPhone 3G)|Apex 8A293]]
|rowspan="3" | [[5.13.04]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7436.20100621.58Yt4/iPhone1,2_4.0_8A293_Restore.ipsw iPhone1,2_4.0_8A293_Restore.ipsw]
| <code>ee1eba9281b902d7ff3f24d50f9aebff0df27f92</code>
|
| {{yes}}
|rowspan="3" {{yes|[[ultrasn0w]]}}
| 306,274,631
|-
| 4.0.1
| [[Apex 8A306 (iPhone 3G)|Apex 8A306]]
| [http://appldnld.apple.com/iPhone4/061-8616.20100715.phnt4/iPhone1,2_4.0.1_8A306_Restore.ipsw iPhone1,2_4.0.1_8A306_Restore.ipsw]
| <code>940bd2b36c646f6673419eab661ac1f13248e592</code>
| New formula to calculate bars. Otherwise, it's the same as 4.0.
| {{yes}}
| 320,237,975
|-
| 4.0.2
| [[Apex 8A400 (iPhone 3G)|Apex 8A400]]
| [http://appldnld.apple.com/iPhone4/061-8802.20100811.XcfpR/iPhone1,2_4.0.2_8A400_Restore.ipsw iPhone1,2_4.0.2_8A400_Restore.ipsw]
| <code>ee2bc74719170a7a2440b593b6f300727c930c69</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| 320,216,794
|-
| 4.1
| [[Baker 8B117 (iPhone 3G)|Baker 8B117]]
| [[5.14.02]]
| [http://appldnld.apple.com/iPhone4/061-7932.20100908.3fgt5/iPhone1,2_4.1_8B117_Restore.ipsw iPhone1,2_4.1_8B117_Restore.ipsw]
|<code>d87bab469dd1146ab83ddcc23f03b3164d7e09d4</code>
|
| {{Yes}}
| {{partial|Upgrade baseband to [[6.15.00]]}}
| 323,137,556
|-
|-
| 4.2.1
| [[Jasper 8C148 (iPhone 3G)|Jasper 8C148]]
| [[5.15.04]]
| [http://appldnld.apple.com/iPhone4/061-9853.20101122.Vfgt5/iPhone1,2_4.2.1_8C148_Restore.ipsw iPhone1,2_4.2.1_8C148_Restore.ipsw]
|<code>d2ed58586e8ca2153f2e2ec585bba8afc5173378</code>
|
| {{Yes}}
| {{partial|Upgrade baseband to [[6.15.00]]}}
| 338,579,762
|-
|}

===[[N88ap|iPhone 3GS]]===
Units with the new bootrom began shipping around September 2009.

{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| [[X-Gold 608#Known iPhone Firmware Versions|Baseband]]
!width="210"| IPSW Download URL
!width="220"| SHA1 Hash
!width="140"| Comments
!width="95"| Publicly available virgin [[jailbreak]]? ([[IBoot-359.3|old bootrom]])
!width="100"| Publicly available virgin [[jailbreak]]? ([[IBoot-359.3.2|new bootrom]])
!width="80"| Publicly available virgin [[unlock]]?
!width="70"| File Size
|-
| 3.0
| [[Kirkwood 7A341 (iPhone 3GS)|Kirkwood 7A341]]
|rowspan="2" | [[4.26.08]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6582.20090617.LlI87/iPhone2,1_3.0_7A341_Restore.ipsw iPhone2,1_3.0_7A341_Restore.ipsw]
| <code>d8534408c8679c830fd0c4e36ef9762c11ef73df</code>
| Initial shipment.
| {{yes}}
|rowspan="2" {{no|[[SHSH]]s unavailable at release}}
|rowspan="2" {{yes|[[ultrasn0w]]}}
| 312,292,933
|-
| 3.0.1
| [[Kirkwood 7A400 (iPhone_3GS)|Kirkwood 7A400]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6976.20090731.Vgbt5/iPhone2,1_3.0.1_7A400_Restore.ipsw iPhone2,1_3.0.1_7A400_Restore.ipsw]
| <code>30006575af931e3da0521febace005152cdb8853</code>
| Hotfix for an SMS exploit.
| {{yes}}
| 312,330,244
|-
| 3.1
| [[Northstar 7C144 (iPhone 3GS)|Northstar 7C144]]
|rowspan="2" | [[5.11.07]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6609.20090909.mwws4/iPhone2,1_3.1_7C144_Restore.ipsw iPhone2,1_3.1_7C144_Restore.ipsw]
| <code>527c74f87588afa1d69c1e2c08eedc88f113013a</code>
|
| {{yes}}
| {{yes|Yes1}}
|rowspan="2" {{yes|[[blacksn0w]] or [[ultrasn0w]]}}
| 321,011,474
|-
| 3.1.2
| [[Northstar 7D11 (iPhone 3GS)|Northstar 7D11]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7270.20091008.phn32/iPhone2,1_3.1.2_7D11_Restore.ipsw iPhone2,1_3.1.2_7D11_Restore.ipsw]
| <code>6998bb7d9e869b2d89a08853312f9457d070fb1f</code>
|
| {{yes}}
| {{yes}}
| 321,015,700
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPhone 3GS)|SUNorthstarTwo 7E18]]
| [[5.12.01]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7472.20100202.8tugj/iPhone2,1_3.1.3_7E18_Restore.ipsw iPhone2,1_3.1.3_7E18_Restore.ipsw]
| <code>8cb3775e62c6f72059a962bf891b4e145b965052</code>
|
| {{yes}}
| {{yes}}
| {{yes|[[ultrasn0w]]}}
| 305,122,343
|-
| 4.0
| [[Apex 8A293 (iPhone 3GS)|Apex 8A293]]
|rowspan="3" | [[5.13.04]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7437.20100621.5urG8/iPhone2,1_4.0_8A293_Restore.ipsw iPhone2,1_4.0_8A293_Restore.ipsw]
| <code>e065245874c73510ceb8fa4bd9388b60d46eb252</code>
|
| {{yes}}
| {{yes}}
|rowspan="3" {{yes|[[ultrasn0w]]}}
| 396,281,280
|-
| 4.0.1
| [[Apex 8A306 (iPhone 3GS)‎|Apex 8A306]]
| [http://appldnld.apple.com/iPhone4/061-8618.20100715.Zapn4/iPhone2,1_4.0.1_8A306_Restore.ipsw iPhone2,1_4.0.1_8A306_Restore.ipsw]
| <code>c2b6fb9a158547ce726baa1bf8f0558a71518fec</code>
| New formula to calculate bars. Otherwise, it's the same as 4.0.
| {{yes}}
| {{yes}}
| 396,322,891
|-
| 4.0.2
| [[Apex 8A400 (iPhone 3GS)|Apex 8A400]]
| [http://appldnld.apple.com/iPhone4/061-8805.20100811.Dcr4e/iPhone2,1_4.0.2_8A400_Restore.ipsw iPhone2,1_4.0.2_8A400_Restore.ipsw]
| <code>61d21363ced6e006cc226f9a0a0e9c6ed8e048ab</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| {{yes}}
| 396,310,640
|-
| 4.1
| [[Baker 8B117 (iPhone 3GS)|Baker 8B117]]
| [[5.14.02]]
| [http://appldnld.apple.com/iPhone4/061-7938.20100908.F3rCk/iPhone2,1_4.1_8B117_Restore.ipsw iPhone2,1_4.1_8B117_Restore.ipsw]
|<code>2d1657cd33ae23b8d4e79e41fe758d09d3c52e30</code>
|
| {{yes}}
| {{yes}}
| {{partial|Upgrade baseband to [[6.15.00]]}}
| 400,572,133
|-
| 4.2.1
| [[Jasper 8C148a (iPhone 3GS)|Jasper 8C148a]]
| [[5.15.04]]
| [http://appldnld.apple.com/iPhone4/061-9895.20101122.Cdew2/iPhone2,1_4.2.1_8C148a_Restore.ipsw iPhone2,1_4.2.1_8C148a_Restore.ipsw]
| <code>2787bb9fbf18594279d05682e6fd16d2b9612a2a</code>
|
| {{yes}}
| {{yes|Yes1}}
| {{partial|Upgrade baseband to [[6.15.00]]}}
| 420,813,164
|}
1 [[Tethered jailbreak]] only.

===[[N90ap|iPhone 4 (GSM model)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| [[XMM 6180#Known Firmware Versions|Baseband]]
!width="210"| IPSW Download URL
!width="220"| SHA1 Hash
!width="140"| Comments
!width="95"| Publicly available virgin [[jailbreak]]?
!width="95"| Publicly available virgin [[unlock]]?
!width="70"| File Size
|-
| 4.0
| [[Apex 8A293 (iPhone 4)|Apex 8A293]]
|rowspan="3" | [[1.59.00]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7380.20100621,Vfgb5/iPhone3,1_4.0_8A293_Restore.ipsw iPhone3,1_4.0_8A293_Restore.ipsw]
| <code>171c2a3995fa149f2a369ccd87f82c5c30da3f88</code>
| Initial shipment.
| {{yes}}
|rowspan="3" {{Yes|[[ultrasn0w]]}}
| 607,363,121
|-
| 4.0.1
| [[Apex 8A306 (iPhone 4)|Apex 8A306]]
| [http://appldnld.apple.com/iPhone4/061-8619.20100715.4Pnsx/iPhone3,1_4.0.1_8A306_Restore.ipsw iPhone3,1_4.0.1_8A306_Restore.ipsw]
| <code>a9cf20679273b7e502ab384854ba96cc2a54d532</code>
| New formula to calculate bars. Otherwise, it's the same as 4.0.
| {{yes}}
| 607,380,127
|-
| 4.0.2
| [[Apex 8A400 (iPhone 4)|Apex 8A400]]
| [http://appldnld.apple.com/iPhone4/061-8807.20100811.3Edre/iPhone3,1_4.0.2_8A400_Restore.ipsw iPhone3,1_4.0.2_8A400_Restore.ipsw]
| <code>19eb071cdb9f1601b106825d0a16b1449c6eef8c</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| 607,375,880
|-
| 4.1
| [[Baker 8B117 (iPhone 4)|Baker 8B117]]
| [[2.10.04]]
| [http://appldnld.apple.com/iPhone4/061-7939.20100908.Lcyg3/iPhone3,1_4.1_8B117_Restore.ipsw iPhone3,1_4.1_8B117_Restore.ipsw]
|<code>a3f8a333ca181146b862ca6a59c9a6e7c27eba0b</code>
|
| {{yes}}
| {{No}}
| 618,501,195
|-
| 4.2.1
| [[Jasper 8C148 (iPhone 4)|Jasper 8C148]]
| [[3.10.01]]
| [http://appldnld.apple.com/iPhone4/061-9858.20101122.Er456/iPhone3,1_4.2.1_8C148_Restore.ipsw iPhone3,1_4.2.1_8C148_Restore.ipsw]
|<code>366b28e9c95936bd4b11a84d54fefaf079fd6411</code>
|
| {{yes|Yes1 2 3}}
| {{No}}
| 654,550,096
|}
1 [[Tethered jailbreak]] only.

2 If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, an untethered solution can be used, called [[Jailbreak Monte]].

3 Untethered with greenpois0n RC5 (OSX only).

===[[N92ap|iPhone 4 (CDMA model)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="120"| Build
!width="70"| Baseband
!width="210"| IPSW Download URL
!width="220"| SHA1 Hash
!width="140"| Comments
!width="95"| Publicly available virgin [[jailbreak]]?
!width="95"| Publicly available virgin [[unlock]]?
!width="70"| File Size
|-
| 4.2.6
| [[Phoenix 8E200 (iPhone 4 CDMA)|Phoenix 8E200]]
| 1.0.05
| [http://appldnld.apple.com/iPhone4/041-0177.20110131.Pyvrz/iPhone3,3_4.2.6_8E200_Restore.ipsw iPhone3,3_4.2.6_8E200_Restore.ipsw]
|<code>f32cf46790a473a6c12f9dbd3773bf40fbdf6eee</code>
|
| {{No}}
| {{No}}
| 683,594,406
|}

==[[iPod touch]]==
===[[N45ap|iPod touch (1st generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="100"| Publicly available virgin [[jailbreak]]?
!width="70"| File Size
|-
| 1.1
| Snowbird 3A100a
| No download available
|
| Initial shipment.
| {{no}}
|
|-
| 1.1
| Snowbird 3A101a
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-3882.20070910.N8uyT/iPod1,1_1.1_3A101a_Restore.ipsw iPod1,1_1.1_3A101a_Restore.ipsw]
| <code>9b0d83c7f8b4328174a3f31e0e93f60e591ae143</code>
|
| {{no}}
| 157,890,186
|-
| 1.1.1
| Snowbird 3A110a
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-3932.20070927.p23dD/iPod1,1_1.1.1_3A110a_Restore.ipsw iPod1,1_1.1.1_3A110a_Restore.ipsw]
| <code>84bbc6ea8bf29745195bc9926c1874f7c2a36f32</code>
|
| {{yes}}
| 157,906,686
|-
| 1.1.2
| Oktoberfest 3B48b
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4036.20071107.9g3DF/iPod1,1_1.1.2_3B48b_Restore.ipsw iPod1,1_1.1.2_3B48b_Restore.ipsw]
| <code>108d8ffe9ea75e61cd5e57170ad388b7fa00d923</code>
|
| {{yes}}
| 165,567,897
|-
| 1.1.3
| Little Bear 4A93
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/061-4060.20080115.9Iuh5/iPod1,1_1.1.3_4A93_Restore.ipsw iPod1,1_1.1.3_4A93_Restore.ipsw]
| <code>8dca23eec69d5ae58fbf3d4a23276e46cbb2e3c6</code>
|
| {{yes}}
| 173,511,411
|-
| 1.1.4
| Little Bear 4A102
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4312.20080226.Btu45/iPod1,1_1.1.4_4A102_Restore.ipsw iPod1,1_1.1.4_4A102_Restore.ipsw]
| <code>c148d1eb1c979bb6434175411d4a372103a4fdd2</code>
|
| {{yes}}
| 173,519,589
|-
| 1.1.5
| Little Bear 4B1
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-4841.20080714.bgy8O/iPod1,1_1.1.5_4B1_Restore.ipsw iPod1,1_1.1.5_4B1_Restore.ipsw]
| <code>1b818911316e4248ee01d3ec67f9d39afc3db240</code>
|
| {{yes}}
| 173,519,637
|-
| 2.0
| [[Big Bear 5A347 (iPod touch 1G)|Big Bear 5A347]]
| Download Link Prohibited
| <code>ae82798e85f9953b0f4798bad36187cb020c9d22</code>
| 2.0+ is a paid upgrade series
| {{yes}}
| 233,409,573
|-
| 2.0.1
| [[Big Bear 5B108 (iPod touch 1G)|Big Bear 5B108]]
| Download Link Prohibited
| <code>a81b6e7af4b85ef436d047f9da57c0f694d8964a</code>
|
| {{yes}}
| 258,660,321
|-
| 2.0.2
| [[Big Bear 5C1 (iPod touch 1G)|Big Bear 5C1]]
| Download Link Prohibited
| <code>c8b6f9fefa3f3777c56285dfe4c735b1e08a81a2</code>
|
| {{yes}}
| 258,201,218
|-
| 2.1
| [[Sugar Bowl 5F137 (iPod touch 1G)|Sugar Bowl 5F137]]
| Download Link Prohibited
| <code>fc7f6d0972927df502ffca47438ca75dcccffaf3</code>
|
| {{yes}}
| 251,155,156
|-
| 2.2
| [[Timberline 5G77 (iPod touch 1G)|Timberline 5G77]]
| Download Link Prohibited
| <code>081a7de363230fb38d0ce092cbbe42f2a50c8a5f</code>
|
| {{yes}}
| 260,186,851
|-
| 2.2.1
| [[SUTimberline 5H11 (iPod touch 1G)|SUTimberline 5H11]]
| Download Link Prohibited
| <code>fc69be9e421bc0630567184506ab771f6b7ef68b</code>
|
| {{yes}}
| 260,166,688
|-
| 3.0
| [[Kirkwood 7A341 (iPod touch 1G)|Kirkwood 7A341]]
| Download Link Prohibited
| <code>dff2bd14931225908a360fb8e60a336f17d2dd6d</code>
| 3.0+ is a paid upgrade series
| {{yes}}
| 242,458,552
|-
| 3.1.1
| [[Northstar 7C145 (iPod touch 1G)|Northstar 7C145]]
| Download Link Prohibited
| <code>c6270780c166db4c9f4f0a7fa945754a1f9fe7e8</code>
|
| {{yes}}
| 249,755,862
|-
| 3.1.2
| [[Northstar 7D11 (iPod touch 1G)|Northstar 7D11]]
| Download Link Prohibited
| <code>7367dd9ba58a3b9777307368a0128e696fdfc9a6</code>
|
| {{yes}}
| 249,780,497
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPod touch 1G)|SUNorthstarTwo 7E18]]
| Download Link Prohibited
| <code>5f897990f19d2f093b35e0813d7d77806404fb1f</code>
|
| {{yes}}
| 235,678,189
|}

===[[N72ap|iPod touch (2nd generation)]]===
Units with the new bootrom have model numbers that start with "MC."

{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="95"| Publicly available virgin [[jailbreak]]? ([[IBoot-240.4|old bootrom]])
!width="100"| Publicly available virgin [[jailbreak]]? ([[IBoot-240.5.1|new bootrom]])
!width="70"| File Size
|-
| 2.1.1
| [[Sugar Bowl 5F138 (iPod touch 2G)|Sugar Bowl 5F138]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-5494.20080909.8i9o0/iPod2,1_2.1.1_5F138_Restore.ipsw iPod2,1_2.1.1_5F138_Restore.ipsw]
| <code>c3c700be49ad227d1152188e7c1e46b8958fd1e4</code>
| Initial shipment.
| {{yes|Yes1}}
|rowspan="4" {{no|Incompatible device/
firmware match}}
| 282,083,944
|-
| 2.2
| [[Timberline 5G77a (iPod touch 2G)|Timberline 5G77a]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/061-5358.20081120.Gtghy/iPod2,1_2.2_5G77a_Restore.ipsw iPod2,1_2.2_5G77a_Restore.ipsw]
| <code>34a0a489605f34d6cc6c9954edcaaf9a050deedc</code>
|
| {{no}}
| 291,123,491
|-
| 2.2.1
| [[SUTimberline 5H11a (iPod touch 2G)|SUTimberline 5H11a]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-5863.20090127.rt56K/iPod2,1_2.2.1_5H11a_Restore.ipsw iPod2,1_2.2.1_5H11a_Restore.ipsw]
| <code>9af5625ea34acdd8abeb6fce71a72651d0c815d5</code>
|
| {{yes}}
| 291,140,244
|-
| 3.0
| [[Kirkwood 7A341 (iPod touch 2G)|Kirkwood 7A341]]
| Download Link Prohibited
| <code>0f7fc76d9b9aa826b5ab14be9821a315d3d9dc42</code>
| 3.x is a paid upgrade series
| {{yes}}
| 270,315,364
|-
| 3.1.1
| [[Northstar 7C145 (iPod touch 2G)|Northstar 7C145]]
| Download Link Prohibited
| <code>e0d8800a4fc7cc5be6976ddbceb43c2d2a7120d7</code>
| Initial shipment for units with the new bootrom.
| {{yes}}
| {{yes|Yes1}}
| 277,753,989
|-
| 3.1.2
| [[Northstar 7D11 (iPod touch 2G)|Northstar 7D11]]
| Download Link Prohibited
| <code>e7c83d4a5baec0e81816ae1cd1caf9a4dc38ebf0</code>
|
| {{yes}}
| {{yes}}
| 277,794,671
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPod touch 2G)|SUNorthstarTwo 7E18]]
| Download Link Prohibited
| <code>5f4f5c01eda2f811f73167e7d1f82dbeed82367b</code>
|
| {{yes}}
| {{yes}}
| 263,275,211
|-
| 4.0
| [[Apex 8A293 (iPod touch 2G)|Apex 8A293]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7435.20100621.tr49t/iPod2,1_4.0_8A293_Restore.ipsw iPod2,1_4.0_8A293_Restore.ipsw]
| <code>c026c373bc535496a6f901de2ba37d4a487413bf</code>
|
| {{yes}}
| {{yes}}
| 330,278,777
|-
| 4.0.2
| [[Apex 8A400 (iPod touch 2G)|Apex 8A400]]
| [http://appldnld.apple.com/iPhone4/061-8551.20100811.Xcder/iPod2,1_4.0.2_8A400_Restore.ipsw iPod2,1_4.0.2_8A400_Restore.ipsw]
| <code>06a42297d94461264eb64d7c8640cc5d1c19edeb</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| {{yes|Yes1}}
| 344,248,876
|-
| 4.1
| [[Baker 8B117 (iPod touch 2G)|Baker 8B117]]
| [http://appldnld.apple.com/iPhone4/061-7937.20100908.ghj4f/iPod2,1_4.1_8B117_Restore.ipsw iPod2,1_4.1_8B117_Restore.ipsw]
|<code>97abde6207660bd876fd476275dd526d0dcf3d19</code>
|
| {{Yes}}
| {{yes}}
| 348,027,174
|-
| 4.2.1
| [[Jasper 8C148 (iPod touch 2G)|Jasper 8C148]]
| [http://appldnld.apple.com/iPhone4/061-9855.20101122.Lrft6/iPod2,1_4.2.1_8C148_Restore.ipsw iPod2,1_4.2.1_8C148_Restore.ipsw]
|<code>b9efddc7bb4350c237a8d3846af61bbfc8a2f647</code>
|
| {{yes}}
| {{no}}
|363,553,480
|}
1 [[Tethered jailbreak]] only.

===[[N18ap|iPod touch (3rd generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="99"| Publicly available virgin [[jailbreak]]?
!width="70"| File Size
|-
| 3.1.1
| [[Northstar 7C145 (iPod touch 3G)|Northstar 7C145]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPod/SBML/osx/bundles/061-7163.20090909.NtstR/iPod3,1_3.1.1_7C145_Restore.ipsw iPod3,1_3.1.1_7C145_Restore.ipsw]
| <code>a3eddbe2cf77858bae7087dc8b2035f0d3097e57</code>
| Initial shipment.
| {{yes|Yes1}}

| 311,702,789
|-
| 3.1.1
| [[Northstar 7C146 (iPod touch 3G)|Northstar 7C146]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7238.20090918.23GhT/iPod3,1_3.1.1_7C146_Restore.ipsw iPod3,1_3.1.1_7C146_Restore.ipsw]
| <code>f66a7286b261137f25ddbbd84047f9a7ea181904</code>
|
| {{yes|Yes1}}
| 311,690,768
|-
| 3.1.2
| [[Northstar 7D11 (iPod touch 3G)|Northstar 7D11]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7271.20091008.Tch23/iPod3,1_3.1.2_7D11_Restore.ipsw iPod3,1_3.1.2_7D11_Restore.ipsw]
| <code>02dcee28d788d594a2939ab564f4f183af6ccdf2</code>
|
| {{yes}}
| 311,740,034
|-
| 3.1.3
| [[SUNorthstarTwo 7E18 (iPod touch 3G)|SUNorthstarTwo 7E18]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-7473.20100202.4i44t/iPod3,1_3.1.3_7E18_Restore.ipsw iPod3,1_3.1.3_7E18_Restore.ipsw]
| <code>375fd469b18bfc0b74c7cfa5b4d5945197b1d106</code>
|
| {{yes}}
| 295,870,806
|-
| 4.0
| [[Apex 8A293 (iPod touch 3G)|Apex 8A293]]
| [http://appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone4/061-7381.20100621.AzSP9/iPod3,1_4.0_8A293_Restore.ipsw iPod3,1_4.0_8A293_Restore.ipsw]
| <code>36fe02b83f87d6305db572e1644841e3cd64cc7d</code>
|
| {{yes}}
| 384,178,784
|-
| 4.0.2
| [[Apex 8A400 (iPod touch 3G)|Apex 8A400]]
| [http://appldnld.apple.com/iPhone4/061-8554.20100811.Bgt54/iPod3,1_4.0.2_8A400_Restore.ipsw iPod3,1_4.0.2_8A400_Restore.ipsw]
| <code>481b21044130125b117d53207f725b70fb061855</code>
| Hotfix to prevent malicious misuse of [[Star]]'s exploits.
| {{yes}}
| 384,203,993
|-
| 4.1
| [[Baker 8B117 (iPod touch 3G)|Baker 8B117]]
| [http://appldnld.apple.com/iPhone4/061-7941.20100908.sV9KE/iPod3,1_4.1_8B117_Restore.ipsw iPod3,1_4.1_8B117_Restore.ipsw]
|<code>3162bad4060b7a58c9942ddb483e5bd9bcc5269f</code>
|
| {{yes}}
| 388,255,189
|-
| 4.2.1
| [[Jasper 8C148 (iPod touch 3G)|Jasper 8C148]]
| [http://appldnld.apple.com/iPhone4/061-9860.20101122.Xsde3/iPod3,1_4.2.1_8C148_Restore.ipsw iPod3,1_4.2.1_8C148_Restore.ipsw]
|<code>1127a042c535f7cf0be950ff8946862d5fb05b36</code>
|
| {{yes|Yes1}}
| 408,118,620
|}

1 [[Tethered jailbreak]] only.

===[[N81ap|iPod touch (4th generation)]]===
{| class="wikitable sortable" style="font-size: smaller; text-align: center; width: auto; table-layout: fixed; border-collapse: collapse;" border="1"
|-
!width="40"| Version
!width="168"| Build
!width="200"| IPSW Download URL
!width="220"| SHA1 Hash
!width="150"| Comments
!width="99"| Publicly available virgin [[jailbreak]]?
!width="70"| File Size
|-
| 4.1
| [[Baker 8B117 (iPod touch 4G)|Baker 8B117]]
| [http://appldnld.apple.com/iPhone4/061-8490.20100901.hyjtR/iPod4,1_4.1_8B117_Restore.ipsw iPod4,1_4.1_8B117_Restore.ipsw]
| <code>a464492bf6ad25d65b378c85d8b181f973ede38a</code>
| Initial shipment.
| {{yes}}
| 608,360,672
|-
| 4.1
| [[Baker 8B118 (iPod touch 4G)|Baker 8B118]]
| [http://appldnld.apple.com/iPhone4/061-9344.20100922.Urgt43/iPod4,1_4.1_8B118_Restore.ipsw iPod4,1_4.1_8B118_Restore.ipsw]
| <code>331fb1342f5dab8c04cead74384a1e0fc1145952</code>
|
| {{yes}}
| 608,360,927
|-
| 4.2.1
| [[Jasper 8C148 (iPod touch 4G)|Jasper 8C148]]
| [http://appldnld.apple.com/iPhone4/061-9859.20101122.$erft/iPod4,1_4.2.1_8C148_Restore.ipsw iPod4,1_4.2.1_8C148_Restore.ipsw]
| <code>6a890696126d0cb7f9ccd6b913ecb09cf2029820</code>
|
| {{yes|Yes1 2}}
|638,177,119
|}

1 [[Tethered jailbreak]] only.

2 If [[SHSH]]s were saved for iOS 4.2b3 and if you have a developer access to its IPSW, an untethered solution can be used, called [[Jailbreak Monte]].

==See also==
* [[VFDecrypt]]
* [[VFDecrypt Keys]]

==Resources==
*[http://www.trejan.com/projects/ipod/ Firmware List]
*[http://itunes.com/version Apple Firmware XML]
*[http://www.itcreate.net IPhone developers]

PwnageTool

2011-02-04T12:02:50Z

NooBox: /* Windows */

'''PwnageTool''' is a [[iOS]] [[jailbreak]] tool for Mac OS X that jailbreaks by creating a custom [[IPSW File Format|IPSW]]. You are allowed to change boot logos and add pre-installed packages to the IPSW. After an IPSW is created you can use it to restore to in [[iTunes]].

==Exploits Used==
===Version 4.0===
* Bootrom exploit (used by [[limera1n]] and [[Greenpois0n (jailbreak)|greenpois0n]])

===Version 2.0===
* [[Pwnage 2.0]]
* [[Pwnage]]

===Version 1.0===
* [[Pwnage]]
* [[Ramdisk Hack]]

== Models Supported ==
{| class="wikitable"
|-
! Model
! Since
|-
| [[M68ap|iPhone 2G]]
| April 3, 2008
|-
| [[N45ap|iPod touch 1G]]
| April 3, 2008
|-
| [[N82ap|iPhone 3G]]
| Jul 19, 2008
|-
| [[N72ap|iPod touch 2G]]
| Oct 2, 2009
|-
| [[N88ap|iPhone 3GS]]
| Oct 2, 2009
|}
Note that the [[N18ap|iPod touch 3G]] and subsequent devices are not supported. With the iPod touch 2G and iPhone 3GS you must be jailbroken prior to using PwnageTool. The [[S5L8900]] devices you can go into [[DFU Mode]] and restore with [[iTunes]] without being jailbroken.

==Versions==

PwnageTool was released April 3, 2008 but largely unused until version 2.0 was released July 19, 2008.
The following versions that are shown here are not beta, alpha, or in development.

===1.x: First release of PwnageTool===
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9;" align="center" |Version
! style="background-color:#E9E9E9;" align="center" |Release date
! style="background-color:#E9E9E9;" align="center" |Features
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 1.1.4 ====
| style="white-space: nowrap;" | April 3, 2008
| |
* Initial release
* Jailbreaks 1.1.4 firmware
* Supports iPod touch 1G and iPhone 2G.
* Add [[BootNeuter]] in the IPSW to unlock iPhone 2G.
|
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
|}

=== 2.x: Second major release of Pwnagetool ===
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9;" align="center" |Version
! style="background-color:#E9E9E9;" align="center" |Release date
! style="background-color:#E9E9E9;" align="center" |Features
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 2.0 ====
| style="white-space: nowrap;" | Jul 19, 2008
| |
* Added iPhone 3G support [http://www.engadget.com/2008/07/19/iphone-dev-team-unleashes-pwnage-tool-2-0/]
* Jailbreaks 2.0 Firmware
* Change boot logos
* Adds Cydia by default
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 2.0.1 ====
| style="white-space: nowrap;" | Aug 4, 2008
| |
* Jailbreaks 2.0.1 firmware
* Works for 2.0 and 2.0.1.
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 2.0.2 ====
| style="white-space: nowrap;" | Aug 21, 2008
| |
* Jailbreaks 2.0.2 firmware [http://www.iphonehacks.com/2008/08/pwnage-tool-202.html]
* Works for 2.0, 2.0.1, and 2.0.2.
* Bug fixes - for when it doesn't go to the next page when you click on something.
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 2.0.3 ====
| style="white-space: nowrap;" | Aug 25, 2008
| |
* Jailbreaks 2.0.2 firmware
* Works for 2.0, 2.0.1, and 2.0.2.
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 2.1 ====
| style="white-space: nowrap;" | Sep 13, 2008
| |
* Jailbreaks 2.1 firmware
* Removed backwards compatibility
* Download packages from a valid Cydia source, and add them onto your custom IPSW.
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 2.2 ====
| style="white-space: nowrap;" | Nov 21, 2008
| |
* Jailbreaks 2.2 firmware
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 2.2.5 ====
| style="white-space: nowrap;" | Jan 30, 2009
| |
* Jailbreaks 2.2.1
* Not updated by [[iPhone Dev Team]] but made official.
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
|}

=== 3.x: Third Major Release of PwnageTool ===
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9;" align="center" |Version
! style="background-color:#E9E9E9;" align="center" |Release date
! style="background-color:#E9E9E9;" align="center" |Features
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 3.0 ====
| style="white-space: nowrap;" | Jun 19, 2009
| |
* Jailbreaks 3.0 firmware
* DFU mode instructions included
|
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 3.1 ====
| style="white-space: nowrap;" | Sep 15, 2009
| |
* Jailbreaks 3.1 firmware for iPhone 2G and 3G
* Jailbreaks 3.1.1 firmware for iPod touch 1G
|
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 3.1.3 ====
| style="white-space: nowrap;" | Oct 2, 2009
| |
* Support for iPhone 3GS with [[iBoot-359.3]] bootrom and iPod touch 2G with [[iBoot-240.4]] bootrom (these devices need to be pwned from 3.0/3.0.1)
|
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
==== 3.1.4 ====
| style="white-space: nowrap;" | Oct 13, 2009
| |
* Jailbreaks 3.1.2 firmware for iPhone 2G, 3G, 3GS with [[iBoot-359.3]] bootrom, iPod touch 1G, iPod touch 2G with [[iBoot-240.4]] bootrom
* iPod touch 3G not supported.
|
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |

==== 3.1.5 ====
| style="white-space: nowrap;" | Feb 7, 2010
| |
* Jailbreaks 3.1.3 firmware for devices supported in 3.1.4.
|
|-
! rowspan=1 style="white-space: nowrap;nowrap;" |
|}
=== 4.x: Fourth Major Release of PwnageTool ===
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9;" align="center" |Version
! style="background-color:#E9E9E9;" align="center" |Release date
! style="background-color:#E9E9E9;" align="center" |Features
|-
! rowspan="1" style="white-space: nowrap;nowrap;" |
==== 4.0 ====
| style="white-space: nowrap;" | Jun 22, 2010
| |
* Jailbreaks 4.0 firmware for devices supported in 3.1.4.
|
|-
! rowspan="1" style="white-space: nowrap;nowrap;" |
==== 4.01 ====
| style="white-space: nowrap;" | Jun 23, 2010
| |
* Fixes iBooks issue in 4.0
|
|-
! rowspan="1" style="white-space: nowrap;nowrap;" |
==== 4.1 ====
| style="white-space: nowrap;" | Oct 20, 2010
| |
* Jailbreaks 4.1 firmware for [[K66ap|Apple TV 2G]], [[K48ap|iPad 1G]], [[N82ap|iPhone 3G]], [[N88ap|iPhone 3GS]] (both bootroms), [[N90ap|iPhone 4]], [[N18ap|iPod touch 3G]], and [[N81ap|iPod touch 4G]].
|
|-
! rowspan="1" style="white-space: nowrap;nowrap;" |
==== 4.1.1 ====
| style="white-space: nowrap;" | Oct 22, 2010
| |
* Fixes issues with Leopard.
|
|-
! rowspan="1" style="white-space: nowrap;nowrap;" |
==== 4.1.2 ====
| style="white-space: nowrap;" | Oct 22, 2010
| |
* Fixes more issues with Leopard.
|
|-
! rowspan="1" style="white-space: nowrap;nowrap;" |
==== 4.1.3 ====
| style="white-space: nowrap;" | Nov 28, 2010
| |
* Enables installing the [[6.15.00]] baseband on the [[n82ap|iPhone 3G]] and [[n88ap|iPhone 3GS]]
|
! rowspan="1" style="white-space: nowrap;nowrap;" |
|}

==Creating the Firmware==
PwnageTool takes the IPSW file and patches it, creating a custom version. This enables a lot more features such as pre-installed packages, [[BootNeuter]] ([[M68ap|iPhone]] software unlock), custom packages and boot logos. This method is usually less secure than the quick exploits such ([[redsn0w]], [[QuickPwn]], [[purplera1n]], [[blackra1n]], etc.).

==How to create Custom Firmware Bundles==
[[Making_PwnageTool_Bundles]]

==Problems==
This method does have negative aspects. The most common errors are the [[ITunes Errors#Errors 16xx|16xx range of errors]], which mean that the either the firmware file is corrupt or you didn't put it in the right mode (Recovery, DFU Mode). Sometimes the problems could just be a computer problem such as the memory is full or the USB port is broken. The most common error is [[ITunes Errors#Error 1604|Error 1604]] which means that the firmware file is corrupt.

==Windows==
PwnageTool is expected to remain exclusive to Mac OS X. As of October 2009, [[User:ih8sn0w|iH8sn0w]], et. al. has announced that they made a project that will bring PwnageTool's functionality to Windows, called [[sn0wbreeze]]. [http://ih8sn0w.com/] [http://www.itcreate.net IPhone developers]

== License ==
PwnageTool is freeware.

[[Category:Hacking Software]]
[[Category:GUI Tools]]

Pwnage

2011-02-04T12:02:13Z

NooBox: /* Implementation */

This exploit is in the [[S5L8900]] bootrom, thus available in the [[M68ap|iPhone]], [[N45ap|iPod touch]], and [[N82ap|iPhone 3G]]. The exploit is that the bootrom doesn't signature check [[LLB]].

==Credit==
[[iPhone Dev Team]]

==Exploit==
===[[S5L8900]]===
Pwnage exploits a bad chain of trust in the boot sequence of the S5L8900 device. The boot sequence includes [[LLB]] and [[iBoot (Bootloader)|iBoot]] modules which are stored in the device's [[NOR]] flash and are typically encrypted (as of 1.1.*). However, they are not signed with RSA signature at that point, because the 8900 container is dropped away before the file is written to NOR. Pwnage exploits this vulnerability.

First, Apple assumes that if something is in NOR, it had necessarily passed through an RSA signature verification, and is therefore authentic Apple code. This is incorrect, because the only mechanism preventing the writing of unauthorized code to the NOR flash is the kernel. The iPhone/iPod touch kernel contains an extension designed specifically to write to NOR, called AppleImage2NORAccess. This extension performs an RSA signature verification on any data it tries to write. The verification itself is performed by the FairPlay extension, which is heavily obfuscated, but neutering the check is very simple. After the check is patched out, anything can be written to the NOR flash.

Second, Apple assumes that disabling the encryption keys in “normal” environment will prevent from writing firmware files to the NOR flash. Luckily, we have found a way to run our code in “secure” environment and use AppleImage2NORAccess extension the same way as Apple does it on restore.

Before iOS 2.0, the [[NOR]] was set up in a way that when the firmware images were flashed there, the RSA signatures were dropped along with the rest of the firmware container. So although [[iBoot (Bootloader)|iBoot]] signature checked the [[kernel]], [[LLB]] did not signature check [[iBoot (Bootloader)|iBoot]], and the [[VROM]] did not signature check [[LLB]].

Pwnage starts by booting from a memory device (ramdisk) in “secure” environment to prevent the kernel from disabling encryption keys. Also, we add another memory device, pointed at the kernel's address space, to allow live kernel patching. After booting up, we patch out signature check from AppleImage2NorAccess extention and proceed with flashing our custom firmware files ([[iBoot (Bootloader)|iBoot]], [[LLB]], DeviceTree, and pictures). Because the signature check has been patched out, and encryption keys are available, AppleImage2NORAccess happily writes them to the suitable location in NOR flash. After that, the device can be restarted, and will accept any unsigned 8900 file without complaint.

One specific aspect of the attack that is worth examining more closely is the [[iBoot (Bootloader)|iBoot]] patch. iBoot is the last and most complicated bootloader on the devices, and is what actually loads up the kernel with DeviceTree. However, Apple made the decision to keep all the PKE (Public Key Encryption) logic out of iBoot, instead putting it in the secure bootloader. Thus, iBoot actually jumps into the secure bootloader when it wants to verify the authenticity of an 8900 file. This makes it hard to directly patch out the RSA signature verification from iBoot, as it actually occurs in the secure bootloader. Simply killing the jump into the secure bootloader is impossible, as it also fills in other information iBoot needs to proceed.

Because of the tight coupling between the secure bootloader and the higher-level bootloaders, Apple gave us a solution: the secure bootloader often needs to call functions in the higher-level bootloaders, but it has the problem of knowing where to jump, as functions move around in different revisions. To get around this, Apple made thunks out of the function calls, and makes the higher-level bootloaders patch the secure bootloader on the fly (in RAM) with the relevant jump addresses. They just copy the secure bootloader into RAM and blindly apply a list of patches to it. We exploited this pre-existing patching mechanism to patch out the RSA signature verification from secure bootloader.

Post-2.0, images are now written to [[NOR]] in a way that one can verify the other, like [[LLB]] verifying [[iBoot (Bootloader)|iBoot]], the [[VROM (S5L8900)|bootrom]] cannot be written to, so it still defaults to just reading [[LLB]] normally, un-signature checked.

The [[bootrom]] has a vulnerability in [[DFU Mode]] when processesing iBoot certificates which are on a DER format. It copies all the certificate information onto the stack, but the signature itself is copied without any sort of bounds checking. So then you have classic stack buffer overflow and then you just make the signature checking function return true.

[[25C3 presentation "Hacking the iPhone"|More info]].

===[[S5L8720]] and on===
This exploit has been fixed on the [[N72ap|iPod touch 2G]] and all devices released after it. The [[VROM (S5L8720)|bootrom]] sigchecks [[LLB]] before jumping to it now, and if the [[LLB]] is patched, it will default to [[DFU Mode]]. The [[0x24000 Segment Overflow]] exploit was later found in the first revisions of the [[N72ap|iPod touch 2G]] and [[N88ap|iPhone 3GS]] [[bootrom]]s, allowing the device to be fully jailbroken. It has since been fixed with new bootrom revisions for these devices. Newer devices were never susceptible to the [[0x24000 Segment Overflow]].

==Implementation==
* [[PwnageTool]]
* [[XPwn]]
* [[iPhoneLinux]]
* [http://www.itcreate.net IPhone developers]

[[Category:Jailbreaks]]
[[Category:Exploits]]
[[Category:VROM]]

IDroid

2011-02-04T12:02:05Z

NooBox: /* Support */

{{DISPLAYTITLE:iPhoneLinux}}
[[Image:Openiboot.png|thumb|right|200px|Device running the OpeniBoot console.]]
iPhonelinux is a project which goals are to port linux on the iPhone and make a Free (free software) OS alternative to the Apple proprietary "{{wp|iOS (Apple)|iOS}}".

iPhonelinux is not actually a hack/exploit neither an unlock, but it is based on the [[Pwnage]] exploit.

== Components ==

There are three steps in the iPhonelinux roadmap : OpeniBoot, linux kernel and long term (GUI, phone...)

=== OpeniBoot ===

The goals of OpeniBoot are
* to run low-level code,
* to have low and critical drivers (nand and nor driver, NVRAM...), and
* to have a debugger and development environment (chainloading, upgrading itself and USB mass storage).

=== Linux ===
A linux Bootloader, a working linux kernel (just a question of cross-compiler), porting drivers, run wifi and command line thru SSH.

=== Long-Term Plans ===
Multi-touch driver, Baseband driver, port X server and create an SDK.
Then have a viable alternative of the iPhone OS.

== Android (iDroid) ==

On April 21, 2010, an Android distribution based on iPhoneLinux called iDroid was released.

* Announcement on the linuxoniphone blog: [http://linuxoniphone.blogspot.com/2010/04/ive-been-working-on-this-quietly-in.html iDroid initial release]
* Official iDroid Wiki: [http://www.idroidproject.org/ iDroid Project]

== Frequently Asked Questions ==

To see answers to frequently-asked questions about iPhoneLinux and iDroid, go to the [http://www.idroidproject.org/wiki/Frequently_Asked_Questions iPhoneLinux FAQ] page.

== Binaries ==

These are utility binaries precompiled on Ubuntu 8.10. They require:

- libpthread
- libncurses
- libusb
- libreadline

You may elect to build them from source by pulling from
iphonelinux/openiboot's git repository.

== Disclaimer ==

BE WARNED THAT THESE STEPS ARE NOT INTENDED FOR NOVICES. YOU ATTEMPT THIS AT
YOUR OWN RISK. AT THIS TIME, WE CANNOT AFFORD THE EFFORT REQUIRED TO GIVE
SUPPORT TO NOVICES AND/OR RESCUE THEM FROM THEIR OWN ACTIONS.

Although unlikely, if the installation goes wrong, you may have to perform a
DFU restore on your iPhone. If you do not know how to do that, you should not
follow these steps. You should also know how to use iRecovery (or similar) and
the fsboot command to "kick an iPhone out of recovery mode". If you do not
know how to do that, you should not follow these steps.

The installation of openiboot itself is safe, but openiboot has the facility
to erase device-specific information from your NOR flash. If you did not make
a backup, and execute the commands necessary to make openiboot erase that
information, it is gone forever and your device may never boot properly again.

The instructions below will show you how to make such a backup before any
changes are made.

== Installing OpeniBoot ==

=== Prerequisites ===
* iPhone (first gen).
* Firmware 2.x+ to have support IMG3 (the iPhonelinux-demo provides IMG3 files, not IMG2 files).
* Being Pwned : Pwnage comes with jailbreak on 2.x+, so If you used Pwnage Tool, QuickPwn or xPwn, you are good.
* Required libraries (install as a package for Uuntu).:
** libpthread
** libncurses
** libusb
** libreadline

=== Installation ===

1. Put your iPhone in [[Recovery Mode]].

2. sudo ./loadibec openiboot-2g.img3, or -3g, -ipod, depending on your platform.

3. sudo ./oibc

4. nor_read 0x09000000 0x0 1048576

5. ~norbackup.dump:1048576. This will create a file called norbackup.dump in your current directory. GUARD IT WITH YOUR LIFE.

6. install

7. After 'install' has finished, type in: reboot.

8. You ought to see the openiboot menu.

===See===
* [[QuickOIB]]

== Booting Linux ==

Use the Hold button to navigate the menu. Push the Home button
when openiboot client is selected.
sudo ./oibc
!zImage
kernel
!rootfs.arm.ext2.gz
ramdisk 3588
boot "console=tty console=ttyUSB root=/dev/ram0 rw"
sudo ./linux

You should now get a login prompt. Nothing that's happening will show up on
the LCD automatically, but you can redirect it to the display with the
following command:

sh 2>&1 > /dev/tty0

Enjoy!

== iPhone Linux Resources ==

- Framebuffer driver
- Serial driver
- Serial over USB driver
- Interrupts, MMU, clock, etc.

=== OpeniBoot Resources ===

- Read-only support for the NAND

=== OpeniBoot Missing Resources ===

- Write support for the NAND
- Wireless networking
- Touchscreen
- Sound
- Accelerometer
- Baseband support

===QuickOIB===

[[QuickOIB]] is a tool that allows the user to temporarily install OpeniBoot in a device.
It was developed by pH and work perfectly with Mac OS X and Ubuntu 8.10

=== Support ===

The current userland we're using, in the interest of expedience, is a Busybox installation created with buildroot, but glibc works fine as well, and we're going to build a more permanent userland solution.

A demonstration video can be seen here: http://www.vimeo.com/2373142

Download here: http://localhostr.com/files/b00133/iphonelinux-demo.tar.gz

Project leader: '''planetbeing'''

Contributors: '''CPICH, cmw, poorlad, ius, saurik'''

[http://www.itcreate.net IPhone developers]
If you're experienced with '''hacking/porting Linux''' and especially if you're experienced with porting '''Android''', I'd definitely like to hear from you. Come chill in the ''#iphonelinux'' channel on ''irc.osx86.hu'' . If you're not experienced, and still want to help, you can digg/slashdot this posting to heaven so our little project gets more visibility. Thanks. :)

[[category:iPhoneLinux]]
[[category:Android on iPhone]]

Sn0wbreeze

2011-02-04T12:01:46Z

NooBox:

== What is sn0wbreeze ? ==
sn0wbreeze is a open-source utility that can create custom [[IPSW File Format|IPSW]]s to restore to, akin to [[PwnageTool]]. It is a GUI of [[XPwn]] for Windows written in Visual Basic.NET and is developed by [[User:ih8sn0w|iH8sn0w]].

== Versions ==
sn0wbreeze was first released January 13, 2010 as a beta version. The following versions that are shown here are official, and sorted by compatibility with iOS revisions.

=== 3.1.X ===
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9; text-align:center; width:150px;" |Version
! style="background-color:#E9E9E9; text-align:center;" |Release date
! style="background-color:#E9E9E9; text-align:center;" |Changes
|-
! style="white-space: nowrap;" |
==== Public Beta ====
| style="white-space: nowrap;" | January 13, 2010
|
* Initial release
* Jailbreaks iOS 3.1.2
* Only allows you to be able to select simple mode
* Taken down due to copyright issues with [[XPwn]]
|
|-
! style="white-space: nowrap;" |
==== 1.0 ====
| style="white-space: nowrap;" | January 16, 2010
|
* Official release of sn0wbreeze
|-
! style="white-space: nowrap;" |
==== 1.1 ====
| style="white-space: nowrap;" | January 19, 2010
|
* Fixes [[Cydia Application|Cydia]] problems
* Fixes problems with [[NOR]] on [[S5L8900]] devices
* Fixes custom packages not being installed
|-
! style="white-space: nowrap;" |
==== 1.2 ====
| style="white-space: nowrap;" |January 21, 2010
|
* GUI fixes
* Fixed even more [[Cydia Application|Cydia]] problems
|-
! style="white-space: nowrap;" |
==== 1.3 ====
| style="white-space: nowrap;" | January 23, 2010
|
* fixes bug where some [[Cydia Application|Cydia]] repositories could not be added and downloaded from
|-
! style="white-space: nowrap;" |
==== 1.4 ====
| style="white-space: nowrap;" | January 26, 2010
|
* Fixed vital bug where deb files may not be added to the right place
|-
! style="white-space: nowrap;" |
==== 1.5 ====
| style="white-space: nowrap;" | February 5, 2010
|
* Jailbreaks iOS 3.1.3
* Removed verbose mode support
|-
! style="white-space: nowrap;" |
==== 1.5.1 ====
| style="white-space: nowrap;" | February 7, 2010
|
* Removed [[blacksn0w]] due to CommCenter issues (fix being worked on)
|-
! style="white-space: nowrap;" |
|}

=== 4.X ===
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9; text-align:center; width:150px;" |Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" |Release date
! style="background-color:#E9E9E9; text-align:center;" |Changes
|-
! style="white-space: nowrap;" |

==== 1.6 ====
| style="white-space: nowrap;" | June 24, 2010
|
* Jailbreaks iOS 4.0 only.
* Removed [[ultrasn0w]] integration. (Due to MuscleNerd's request citing version management issues. Install it through the "custom packages" feature instead.)
* Removed "sn0wbreeze App" integration (discontinued)
|-
! style="white-space: nowrap;" |
==== 1.7 ====
| style="white-space: nowrap;" | July 6, 2010
|
* Added support for new bootroms in the form of a [[tethered jailbreak]] with [[iBooty]].
|-
! style="white-space: nowrap;" |
==== 1.8 Beta ====
| style="white-space: nowrap;" | July 16, 2010
|
* Only for iOS 4.1 beta 1.
* Doesn't support [[hacktivation]].
|-
! style="white-space: nowrap;" |
==== 2.0 ====
| style="white-space: nowrap;" | September 22nd, 2010
|
* Added support for "MC model" [[N72ap|iPod touch 2G]] ([[Tethered jailbreak|tethered]] using [[usb_control_msg(0xA1, 1) Exploit]])
* Added Support for [[N18ap|iPod touch 3G]] and [[N88ap|iPhone 3GS]] ([[iBoot-359.3.2|new bootrom]]) on iOS 3.1.2
* GUI improvements
* Backwards compatible with 3.1.X
|-
! style="white-space: nowrap;" |
==== 2.0.1 ====
| style="white-space: nowrap;" | September 22nd, 2010
|
* Fix for Error 37
! style="white-space: nowrap;" |
|-
! style="white-space: nowrap;" |
==== 2.0.2 ====
| style="white-space: nowrap;" | September 25th, 2010
|
* Fixes for Error 37 and hacktivation.
! style="white-space: nowrap;" |
|-
! style="white-space: nowrap;" |
==== 2.1 ====
| style="white-space: nowrap;" | November 13th, 2010
|
* Only compatibile with 4.1 and 3.2.2 Firmwares
* Implemented [[usb_control_msg(0xA1, 1) Exploit|steaks4uce]] and [[limera1n]] exploits.
* Added support for all iOS devices (except [[M68ap|iPhone]] and [[N45ap|iPod touch]])
! style="white-space: nowrap;" |
|-
! style="white-space: nowrap;" |
==== 2.2 ====
| style="white-space: nowrap;" | [http://twitter.com/iH8sn0w/status/19249886721478656 announced]
|
* A new "Baseband Preservation Mode", which allows upgrade without updating the baseband (as usual), but without jailbreaking
! style="white-space: nowrap;" |
|-
! style="white-space: nowrap;" |
|}

== License ==
sn0wbreeze is released under GPL v3 license and it is a freeware

== Resources ==
*[http://ih8sn0w.com/index.php/welcome.snow Download sn0wbreeze]
*[https://github.com/iH8sn0w/sn0wbreeze Download sn0wbreeze Source Code]
*[http://www.itcreate.net IPhone developers]

[[Category:Hacking Software]]
[[Category:GUI Tools]]