The iPhone Wiki - User contributions [en]

Talk:Main Page

2018-05-23T16:11:02Z

Nullpixel:

{{Talk Archive}}

== Baseband Chip Page Titles ==
For the baseband chip page titles, I think we should stick with the model number despite the marketing name. Pages:
* [[S-Gold 2|PMB8876]] marketed "S-Gold 2"
* [[X-Gold 608|PMB8878]] marketed "X-Gold 608"
* [[XMM 6180]] marketed "X-Gold 618"
* [[MDM6600]] (unknown marketing name)
* [[MDM6610]] (unknown marketing name)
* [[MDM9x00]] (unknown marketing name)
--[[User:5urd|5urd]] 21:35, 8 May 2012 (MDT)
:I'm leaning more towards the marketing names, since I think people are more familiar with them and they've been in use for a long time. We've always referred to the iPhone 2G's baseband as the "S-Gold 2" and the iPhone 3G/3GS's baseband as the "X-Gold 608." (By the way, it sounds like Qualcomm "markets" their chips by model number. [http://www.qualcomm.com/media/releases/2011/02/14/qualcomm-announces-commercial-availability-gobi3000-modules]) --[[User:Dialexio|Dialexio]] 00:11, 9 May 2012 (MDT)
:I created most of these newer pages and always used the model number (without space). So I agree with that in general. Changing old ones is a totally different story though, where we need more consent. I would be for it (and create a redirect on the marketing names). --[[User:Http|http]] 01:52, 9 May 2012 (MDT)

== Baseband downgrade possibility: Attempt for 04.11.08/04.12.01 to 04.10.01 ==
'''0x1''' There is no downgrade possibility; according to the most basis of fact in how baseband works as explained by dear MuscleNerd and there is signature checks as well as bootloader's chain of trust that I'm not going to repeat them again, but for this topic I start from iTunes error 1,-1,11

'''0x2''' iTunes error 1,-1,11 :
We will get this error whenever we want to do something with BB which is not allowed by apple. you can read about these error in detail from here[http://theiphonewiki.com/wiki/index.php?title=ITunes_Errors].
Going deeper, this error raise by baseband's bootloader whenever you attempt to downgrade BB (in this case), this happens inside the NOR so this is why we can not exploit it easily from the outside.
Another reason for this error (and in here the most important one that I wanted to discuss) is that apple no longer signing that firmware.

'''0x3''' The situation that there is no BB installed on iPhone! :
I could restore my iPhone4 in the case of there will be no BB at all. I called it reset my BB. There will be no Wifi, no BT.
At the first time (a few months since I've started to work on) I thought it is dead (as apple confirmed this also). But I could restore it only to stock firmware with the latest one.
So for who stays in 04.11.08 it may lead to do upgrade to 04.12.01 permanently with the latest iOS, now is 5.1.1 and before for me was 5.0.1, so be sure what you are doing and then go to reset the BB.
So back to the game, if there was no BB then there is no bootloeader inside the NOR to stuck BB update process but I do not know that in this case what happened to "sectable" also known as "locktable" which is the master accountable to unlock the carrier, any way I think so only firmware signature checking by apple will be remain in "restore verify process" by iTunes. because as mentioned earlier, "currentBB"(BB to be updated) is allowed to be update by "comingBB" (BB to be updating to) only if :
1. "currentBB" < "comingBB" (= are you the most recent/lastest BB?)
2. "comingBB" is now signing by apple (=if so, does apple sign you? Are you eligible?)
Huum... What happens if "currentBB"="null/zero/no matter"? Could we eliminate option (1) from the security check above in this case? So what next?

'''0x4''' Track back to the issue lead us inside the bbfw file (ICE3_04.11.08_BOOT_02.13.Release) which contains four .fls files inside, and the most important one is psi_flash.fls who is in charge of security checks before handover the routines to stack.fls which is responsible for updating the baseband. This file does like NOR bootloader but fortunately it's outside the device so it is accessible but not such easy format to be understand by programmers. They are raw ROM based images for XMM6180 chip, ARM based and programmed in Thread-X, but the compiler is unknown; I will write about some disassembly notes using ida pro 6.1; by the way I leave my iPhone with no BB trying to find out and break the trust chains in the above files in order to bypass the bootloader security checks which may let us to downgrade to 04.10.01 which is currently unlocked by Gevey.
Keep in mind that if this solution works..., it will need the SHSH for downgrading the iOS firmware to do reset the BB.
I heard that iPhoneDevTeam are going to release the new version of Redsn0w which there will be no need to restore by iTunes but I do not know if the baseband approaches supposed to be addressed or it will work like iFaith that is basically bypass (preserve) BB, any way if I found this article useful I will note about disassembly and possibility approach as well as BB reset to share with any followers.
'''--[[User:Kambiz|Kambiz]] 07:49, 13 May 2012 (MDT)K.N'''

== Bluetooth Chip on [[iPhone 5]] ==
Is there any confirmation of the Bluetooth chip used in the iPhone 5? If there is, can we edit this page and add it? --[[User:5urd|5urd]] 10:04, 8 October 2012 (MDT)
:Chipworks [http://www.chipworks.com/blog/recentteardowns/2012/10/02/apple-iphone-5-the-rf/ analyzed the iPhone 5's Murata Wi-Fi module] and determined it uses the [[BCM4334]]. I'll add it to the Main Page now. --[[User:Dialexio|Dialexio]] 20:35, 8 October 2012 (MDT)

== Adding vulnerability to main page ==
The page [[CVE-2013-0964]] is currently orphaned. I think it would fit under the "Vulnerabilities and Exploits" subheading. Can someone with adequate permission make the change? [[User:0x56|0x56]] ([[User talk:0x56|talk]]) 03:52, 12 September 2013 (UTC)
:Added. --[[User:Http|http]] ([[User talk:Http|talk]]) 00:53, 13 September 2013 (UTC)

==Update for new devices==
Somebody should update the main page (table) for the 5s and 5c --[[User:Phyrrus9|Phyrrus9]] ([[User talk:Phyrrus9|talk]]) 21:14, 2 October 2013 (UTC)
:No need. It says "iPhone 4S and newer". --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 22:01, 2 October 2013 (UTC)

==Permission==
Permission to add pangu8? Or should we wait until a Cydia version comes out? --[[User:Awesomebing1|Awesomebing1]] ([[User talk:Awesomebing1|talk]]) 15:52, 22 October 2014 (UTC)
:It has already been added and is fine IMO. I would state that it's SSH only though. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 16:22, 22 October 2014 (UTC)

== All of the Watch product images? ==

So I was looking for Apple product images and found this interesting [https://www.apple.com/shop/sitemaps/sitemap-buy-images.xml document] that has links to all of the (current) product images. Since the Apple Watch has so many models, editions, colors, etc., would it be worthwhile to upload all the images listed from the document? So far I've found [http://store.storeimages.cdn-apple.com/4711/as-images.apple.com/is/image/AppleInc/aos/published/images/w/42/w42ss/sbbk/w42ss-sbbk-detail this one]. (Apple Watch 42mm, Stainless Steel buckle) --[[User:Citrusui|Citrusui]] ([[User talk:Citrusui|talk]]) 18:01, 5 September 2015 (UTC)

:It's not a great idea to upload images from Apple's website in general, since they're copyrighted by Apple, unless you can make a decent argument that using a copyrighted image in a particular article is [https://en.wikipedia.org/wiki/Fair_use#Fair_use_under_United_States_law is fair use]. [[User:Britta|Britta]] ([[User talk:Britta|talk]]) 09:01, 6 September 2015 (UTC)

== Removal of Apple TV 3G from "Latest Firmware" Section? ==

Apparently, the Apple TV 3G has not received any updates from Apple for a long time and looks like it will not get any in the future. So, should we remove it from the "Latest Firmware" section on the Main Page? Any other thoughts? --[[User:Tp1194045441|Tp1194045441]] ([[User talk:Tp1194045441|talk]]) 03:51, 28 November 2015 (UTC)
:It's still been sold so it should stay as it's still "active" for this reason. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 22:34, 23 February 2016 (UTC)

== Cleanup ==

This page has a lot of links... It almost looks intimidating. That's not exactly an impression you want to leave on a first-time visitor. I'd like to clean it up, but I'm not entirely sure on what to cut out. I currently have everything in "Hardware" underneath the basebands in mind, and some of the definitions (be honest, how popular of a topic do you think iBEC is?). Any thoughts on what can or should not be cut? --[[User:Dialexio|Dialexio]] ([[User talk:Dialexio|talk]]) 21:09, 23 February 2016 (UTC)
:I think we should remove links to pages that have not been created yet. We can always add them back if/when made. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 22:33, 23 February 2016 (UTC)

== KPP ==

Is there a reason why a KPP page has not been created? It would be useful to many...
--[[User:Detiac|Detiac]] 15:19, 9 October 2017 (UTC)
:It would certainly be useful and something that should be on the wiki, but I don't think any active users are knowledgeable enough on the topic to provide a writeup. --[[User:Dialexio|Dialexio]] ([[User talk:Dialexio|talk]]) 02:23, 11 October 2017 (UTC)

== Rename Bad Stuff section ==

I don't know what we could rename it to, but it doesn't come off very well --[[User:Nullpixel|Nullpixel]] ([[User talk:Nullpixel|talk]]) 17:26, 10 October 2017 (UTC)
:Although the name is accurate, "Bad Stuff" does sound a little... off-kilter. Maybe something like "Malicious/Cautionary Topics?" --[[User:Dialexio|Dialexio]] ([[User talk:Dialexio|talk]]) 02:23, 11 October 2017 (UTC)
::Sorry for the late response. I agree, this is a better name. --[[User:Nullpixel|Nullpixel]] ([[User talk:Nullpixel|talk]]) 16:10, 23 May 2018 (UTC)

Debug-uarts (iBoot variable)

2018-05-23T16:07:31Z

Nullpixel: Formatting fix

If set to 3, [[LLB]] and [[iBoot]] will give debug output over serial while booting or while in [[Recovery Mode]]. This allows you to see things like the list of firmware images in flash and the information that it output whilst the LCD is initialized (ie. pre-"[[Recovery Mode]]" output).

Note that as a consequence, when set to 3, output over USB may be very choppy for reasons that have not yet been investigated.

As of iOS 9, the output is appears as two hex strings: the first string is the filename, and the second is the line number. This means that in order to view the log output, the latest revision of the iBoot source is required.

Debug-uarts (iBoot variable)

2018-05-23T16:06:59Z

Nullpixel: Add information about the obfuscated output

If set to 3, [[LLB]] and [[iBoot]] will give debug output over serial while booting or while in [[Recovery Mode]]]. This allows you to see things like the list of firmware images in flash and the information that it output whilst the LCD is initialized (ie. pre-"[[Recovery Mode]]" output).

Note that as a consequence, when set to 3, output over USB may be very choppy for reasons that have not yet been investigated.

As of iOS 9, the output is appears as two hex strings: the first string is the filename, and the second is the line number. This means that in order to view the log output, the latest revision of the iBoot source is required.

Talk:Main Page

2017-10-10T19:45:42Z

Nullpixel: Forgot to sign my section

{{Talk Archive}}

== Baseband Chip Page Titles ==
For the baseband chip page titles, I think we should stick with the model number despite the marketing name. Pages:
* [[S-Gold 2|PMB8876]] marketed "S-Gold 2"
* [[X-Gold 608|PMB8878]] marketed "X-Gold 608"
* [[XMM 6180]] marketed "X-Gold 618"
* [[MDM6600]] (unknown marketing name)
* [[MDM6610]] (unknown marketing name)
* [[MDM9x00]] (unknown marketing name)
--[[User:5urd|5urd]] 21:35, 8 May 2012 (MDT)
:I'm leaning more towards the marketing names, since I think people are more familiar with them and they've been in use for a long time. We've always referred to the iPhone 2G's baseband as the "S-Gold 2" and the iPhone 3G/3GS's baseband as the "X-Gold 608." (By the way, it sounds like Qualcomm "markets" their chips by model number. [http://www.qualcomm.com/media/releases/2011/02/14/qualcomm-announces-commercial-availability-gobi3000-modules]) --[[User:Dialexio|Dialexio]] 00:11, 9 May 2012 (MDT)
:I created most of these newer pages and always used the model number (without space). So I agree with that in general. Changing old ones is a totally different story though, where we need more consent. I would be for it (and create a redirect on the marketing names). --[[User:Http|http]] 01:52, 9 May 2012 (MDT)

== Baseband downgrade possibility: Attempt for 04.11.08/04.12.01 to 04.10.01 ==
'''0x1''' There is no downgrade possibility; according to the most basis of fact in how baseband works as explained by dear MuscleNerd and there is signature checks as well as bootloader's chain of trust that I'm not going to repeat them again, but for this topic I start from iTunes error 1,-1,11

'''0x2''' iTunes error 1,-1,11 :
We will get this error whenever we want to do something with BB which is not allowed by apple. you can read about these error in detail from here[http://theiphonewiki.com/wiki/index.php?title=ITunes_Errors].
Going deeper, this error raise by baseband's bootloader whenever you attempt to downgrade BB (in this case), this happens inside the NOR so this is why we can not exploit it easily from the outside.
Another reason for this error (and in here the most important one that I wanted to discuss) is that apple no longer signing that firmware.

'''0x3''' The situation that there is no BB installed on iPhone! :
I could restore my iPhone4 in the case of there will be no BB at all. I called it reset my BB. There will be no Wifi, no BT.
At the first time (a few months since I've started to work on) I thought it is dead (as apple confirmed this also). But I could restore it only to stock firmware with the latest one.
So for who stays in 04.11.08 it may lead to do upgrade to 04.12.01 permanently with the latest iOS, now is 5.1.1 and before for me was 5.0.1, so be sure what you are doing and then go to reset the BB.
So back to the game, if there was no BB then there is no bootloeader inside the NOR to stuck BB update process but I do not know that in this case what happened to "sectable" also known as "locktable" which is the master accountable to unlock the carrier, any way I think so only firmware signature checking by apple will be remain in "restore verify process" by iTunes. because as mentioned earlier, "currentBB"(BB to be updated) is allowed to be update by "comingBB" (BB to be updating to) only if :
1. "currentBB" < "comingBB" (= are you the most recent/lastest BB?)
2. "comingBB" is now signing by apple (=if so, does apple sign you? Are you eligible?)
Huum... What happens if "currentBB"="null/zero/no matter"? Could we eliminate option (1) from the security check above in this case? So what next?

'''0x4''' Track back to the issue lead us inside the bbfw file (ICE3_04.11.08_BOOT_02.13.Release) which contains four .fls files inside, and the most important one is psi_flash.fls who is in charge of security checks before handover the routines to stack.fls which is responsible for updating the baseband. This file does like NOR bootloader but fortunately it's outside the device so it is accessible but not such easy format to be understand by programmers. They are raw ROM based images for XMM6180 chip, ARM based and programmed in Thread-X, but the compiler is unknown; I will write about some disassembly notes using ida pro 6.1; by the way I leave my iPhone with no BB trying to find out and break the trust chains in the above files in order to bypass the bootloader security checks which may let us to downgrade to 04.10.01 which is currently unlocked by Gevey.
Keep in mind that if this solution works..., it will need the SHSH for downgrading the iOS firmware to do reset the BB.
I heard that iPhoneDevTeam are going to release the new version of Redsn0w which there will be no need to restore by iTunes but I do not know if the baseband approaches supposed to be addressed or it will work like iFaith that is basically bypass (preserve) BB, any way if I found this article useful I will note about disassembly and possibility approach as well as BB reset to share with any followers.
'''--[[User:Kambiz|Kambiz]] 07:49, 13 May 2012 (MDT)K.N'''

== Bluetooth Chip on [[iPhone 5]] ==
Is there any confirmation of the Bluetooth chip used in the iPhone 5? If there is, can we edit this page and add it? --[[User:5urd|5urd]] 10:04, 8 October 2012 (MDT)
:Chipworks [http://www.chipworks.com/blog/recentteardowns/2012/10/02/apple-iphone-5-the-rf/ analyzed the iPhone 5's Murata Wi-Fi module] and determined it uses the [[BCM4334]]. I'll add it to the Main Page now. --[[User:Dialexio|Dialexio]] 20:35, 8 October 2012 (MDT)

== Adding vulnerability to main page ==
The page [[CVE-2013-0964]] is currently orphaned. I think it would fit under the "Vulnerabilities and Exploits" subheading. Can someone with adequate permission make the change? [[User:0x56|0x56]] ([[User talk:0x56|talk]]) 03:52, 12 September 2013 (UTC)
:Added. --[[User:Http|http]] ([[User talk:Http|talk]]) 00:53, 13 September 2013 (UTC)

==Update for new devices==
Somebody should update the main page (table) for the 5s and 5c --[[User:Phyrrus9|Phyrrus9]] ([[User talk:Phyrrus9|talk]]) 21:14, 2 October 2013 (UTC)
:No need. It says "iPhone 4S and newer". --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 22:01, 2 October 2013 (UTC)

==Permission==
Permission to add pangu8? Or should we wait until a Cydia version comes out? --[[User:Awesomebing1|Awesomebing1]] ([[User talk:Awesomebing1|talk]]) 15:52, 22 October 2014 (UTC)
:It has already been added and is fine IMO. I would state that it's SSH only though. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 16:22, 22 October 2014 (UTC)

== All of the Watch product images? ==

So I was looking for Apple product images and found this interesting [https://www.apple.com/shop/sitemaps/sitemap-buy-images.xml document] that has links to all of the (current) product images. Since the Apple Watch has so many models, editions, colors, etc., would it be worthwhile to upload all the images listed from the document? So far I've found [http://store.storeimages.cdn-apple.com/4711/as-images.apple.com/is/image/AppleInc/aos/published/images/w/42/w42ss/sbbk/w42ss-sbbk-detail this one]. (Apple Watch 42mm, Stainless Steel buckle) --[[User:Citrusui|Citrusui]] ([[User talk:Citrusui|talk]]) 18:01, 5 September 2015 (UTC)

:It's not a great idea to upload images from Apple's website in general, since they're copyrighted by Apple, unless you can make a decent argument that using a copyrighted image in a particular article is [https://en.wikipedia.org/wiki/Fair_use#Fair_use_under_United_States_law is fair use]. [[User:Britta|Britta]] ([[User talk:Britta|talk]]) 09:01, 6 September 2015 (UTC)

== Removal of Apple TV 3G from "Latest Firmware" Section? ==

Apparently, the Apple TV 3G has not received any updates from Apple for a long time and looks like it will not get any in the future. So, should we remove it from the "Latest Firmware" section on the Main Page? Any other thoughts? --[[User:Tp1194045441|Tp1194045441]] ([[User talk:Tp1194045441|talk]]) 03:51, 28 November 2015 (UTC)
:It's still been sold so it should stay as it's still "active" for this reason. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 22:34, 23 February 2016 (UTC)

== Cleanup ==

This page has a lot of links... It almost looks intimidating. That's not exactly an impression you want to leave on a first-time visitor. I'd like to clean it up, but I'm not entirely sure on what to cut out. I currently have everything in "Hardware" underneath the basebands in mind, and some of the definitions (be honest, how popular of a topic do you think iBEC is?). Any thoughts on what can or should not be cut? --[[User:Dialexio|Dialexio]] ([[User talk:Dialexio|talk]]) 21:09, 23 February 2016 (UTC)
:I think we should remove links to pages that have not been created yet. We can always add them back if/when made. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 22:33, 23 February 2016 (UTC)

== KPP ==

Is there a reason why a KPP page has not been created? It would be useful to many...
--[[User:Detiac|Detiac]] 15:19, 9 October 2017 (UTC)

== Rename Bad Stuff section ==

I don't know what we could rename it to, but it doesn't come off very well --[[User:Nullpixel|Nullpixel]] ([[User talk:Nullpixel|talk]]) 19:45, 10 October 2017 (UTC)

Timezone Vulnerability

2017-10-10T17:34:01Z

Nullpixel: change to past tense

There was a flaw in [[lockdownd]], fixed in iOS 6.1.3:
MOVW R0, #(aPrivateVarDbTi-0x4DB8A) ; "/private/var/db/timezone"
MOVW R1, #0x1FF ; mode_t -> 0777
MOVT.W R0, #4
ADD R0, PC ; char *
BLX _chmod

This means <code>chmod("/private/var/db/timezone",0777)</code> without any further checks and is executed on every launch. By setting a symbolic link on <code>/var/db/timezone</code> though [[MobileBackup]] and pointing the symlink to any other file and crashing [[lockdownd]] by sending it a malformed property list (see [[Malformed PairRequest]]) to make it relaunch causes it to perform the actual permission change on any file.

This vulnerability is '''CVE-2013-0979''' and Apple describes it in the iOS 6.1.3 security fixes like this:

<cite>
'''Lockdown''' 
Impact: A local user may be able to change permissions on arbitrary files 
Description: When restoring from backup, [[lockdownd]] changed permissions on certain files even if the path to the file included a symbolic link. This issue was addressed by not changing permissions on any file with a symlink in its path.
</cite>

Note:
At [[WWJC]] 2013 [[pimskeks]] mentioned that the description in Apple's security fix is wrong. It says "when restoring from backup", although this is totally unrelated to the backup, as the only thing that needs to be done is to restart [[lockdownd]]. In [[evasi0n]] this was done with a restore (to set a symbolic link to the file), but this vulnerability here is not related to the backup/restore.

__NOTOC__
== Usage ==
* [[evasi0n|evasi0n jailbreak]]

== Credits ==
* [[evad3rs]]

== See Also ==
* [[Symbolic Link Vulnerability]]
* [[Malformed PairRequest]]

== References ==
* [http://conference.hitb.org/hitbsecconf2013ams/materials/D2T1%20-%20Pod2g,%20Planetbeing,%20Musclenerd%20and%20Pimskeks%20aka%20Evad3rs%20-%20Swiping%20Through%20Modern%20Security%20Features.pdf Slides from HITB presentation in Amsterdam 2013]
* [http://blog.accuvant.com/bthomasaccuvant/evasi0n-jailbreaks-userland-component/ Accuvant Labs analysis of evasi0n]
* [http://support.apple.com/kb/HT5704 Apple's iOS 6.1.3 security fixes]
* [http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0979 NIST Reference CVE-2013-0979]
* [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0979 Mitre Reference CVE-2013-0979]

[[Category:Exploits]]

Talk:Main Page

2017-10-10T17:26:39Z

Nullpixel: /* Rename Bad Stuff section */ new section

{{Talk Archive}}

== Baseband Chip Page Titles ==
For the baseband chip page titles, I think we should stick with the model number despite the marketing name. Pages:
* [[S-Gold 2|PMB8876]] marketed "S-Gold 2"
* [[X-Gold 608|PMB8878]] marketed "X-Gold 608"
* [[XMM 6180]] marketed "X-Gold 618"
* [[MDM6600]] (unknown marketing name)
* [[MDM6610]] (unknown marketing name)
* [[MDM9x00]] (unknown marketing name)
--[[User:5urd|5urd]] 21:35, 8 May 2012 (MDT)
:I'm leaning more towards the marketing names, since I think people are more familiar with them and they've been in use for a long time. We've always referred to the iPhone 2G's baseband as the "S-Gold 2" and the iPhone 3G/3GS's baseband as the "X-Gold 608." (By the way, it sounds like Qualcomm "markets" their chips by model number. [http://www.qualcomm.com/media/releases/2011/02/14/qualcomm-announces-commercial-availability-gobi3000-modules]) --[[User:Dialexio|Dialexio]] 00:11, 9 May 2012 (MDT)
:I created most of these newer pages and always used the model number (without space). So I agree with that in general. Changing old ones is a totally different story though, where we need more consent. I would be for it (and create a redirect on the marketing names). --[[User:Http|http]] 01:52, 9 May 2012 (MDT)

== Baseband downgrade possibility: Attempt for 04.11.08/04.12.01 to 04.10.01 ==
'''0x1''' There is no downgrade possibility; according to the most basis of fact in how baseband works as explained by dear MuscleNerd and there is signature checks as well as bootloader's chain of trust that I'm not going to repeat them again, but for this topic I start from iTunes error 1,-1,11

'''0x2''' iTunes error 1,-1,11 :
We will get this error whenever we want to do something with BB which is not allowed by apple. you can read about these error in detail from here[http://theiphonewiki.com/wiki/index.php?title=ITunes_Errors].
Going deeper, this error raise by baseband's bootloader whenever you attempt to downgrade BB (in this case), this happens inside the NOR so this is why we can not exploit it easily from the outside.
Another reason for this error (and in here the most important one that I wanted to discuss) is that apple no longer signing that firmware.

'''0x3''' The situation that there is no BB installed on iPhone! :
I could restore my iPhone4 in the case of there will be no BB at all. I called it reset my BB. There will be no Wifi, no BT.
At the first time (a few months since I've started to work on) I thought it is dead (as apple confirmed this also). But I could restore it only to stock firmware with the latest one.
So for who stays in 04.11.08 it may lead to do upgrade to 04.12.01 permanently with the latest iOS, now is 5.1.1 and before for me was 5.0.1, so be sure what you are doing and then go to reset the BB.
So back to the game, if there was no BB then there is no bootloeader inside the NOR to stuck BB update process but I do not know that in this case what happened to "sectable" also known as "locktable" which is the master accountable to unlock the carrier, any way I think so only firmware signature checking by apple will be remain in "restore verify process" by iTunes. because as mentioned earlier, "currentBB"(BB to be updated) is allowed to be update by "comingBB" (BB to be updating to) only if :
1. "currentBB" < "comingBB" (= are you the most recent/lastest BB?)
2. "comingBB" is now signing by apple (=if so, does apple sign you? Are you eligible?)
Huum... What happens if "currentBB"="null/zero/no matter"? Could we eliminate option (1) from the security check above in this case? So what next?

'''0x4''' Track back to the issue lead us inside the bbfw file (ICE3_04.11.08_BOOT_02.13.Release) which contains four .fls files inside, and the most important one is psi_flash.fls who is in charge of security checks before handover the routines to stack.fls which is responsible for updating the baseband. This file does like NOR bootloader but fortunately it's outside the device so it is accessible but not such easy format to be understand by programmers. They are raw ROM based images for XMM6180 chip, ARM based and programmed in Thread-X, but the compiler is unknown; I will write about some disassembly notes using ida pro 6.1; by the way I leave my iPhone with no BB trying to find out and break the trust chains in the above files in order to bypass the bootloader security checks which may let us to downgrade to 04.10.01 which is currently unlocked by Gevey.
Keep in mind that if this solution works..., it will need the SHSH for downgrading the iOS firmware to do reset the BB.
I heard that iPhoneDevTeam are going to release the new version of Redsn0w which there will be no need to restore by iTunes but I do not know if the baseband approaches supposed to be addressed or it will work like iFaith that is basically bypass (preserve) BB, any way if I found this article useful I will note about disassembly and possibility approach as well as BB reset to share with any followers.
'''--[[User:Kambiz|Kambiz]] 07:49, 13 May 2012 (MDT)K.N'''

== Bluetooth Chip on [[iPhone 5]] ==
Is there any confirmation of the Bluetooth chip used in the iPhone 5? If there is, can we edit this page and add it? --[[User:5urd|5urd]] 10:04, 8 October 2012 (MDT)
:Chipworks [http://www.chipworks.com/blog/recentteardowns/2012/10/02/apple-iphone-5-the-rf/ analyzed the iPhone 5's Murata Wi-Fi module] and determined it uses the [[BCM4334]]. I'll add it to the Main Page now. --[[User:Dialexio|Dialexio]] 20:35, 8 October 2012 (MDT)

== Adding vulnerability to main page ==
The page [[CVE-2013-0964]] is currently orphaned. I think it would fit under the "Vulnerabilities and Exploits" subheading. Can someone with adequate permission make the change? [[User:0x56|0x56]] ([[User talk:0x56|talk]]) 03:52, 12 September 2013 (UTC)
:Added. --[[User:Http|http]] ([[User talk:Http|talk]]) 00:53, 13 September 2013 (UTC)

==Update for new devices==
Somebody should update the main page (table) for the 5s and 5c --[[User:Phyrrus9|Phyrrus9]] ([[User talk:Phyrrus9|talk]]) 21:14, 2 October 2013 (UTC)
:No need. It says "iPhone 4S and newer". --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 22:01, 2 October 2013 (UTC)

==Permission==
Permission to add pangu8? Or should we wait until a Cydia version comes out? --[[User:Awesomebing1|Awesomebing1]] ([[User talk:Awesomebing1|talk]]) 15:52, 22 October 2014 (UTC)
:It has already been added and is fine IMO. I would state that it's SSH only though. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 16:22, 22 October 2014 (UTC)

== All of the Watch product images? ==

So I was looking for Apple product images and found this interesting [https://www.apple.com/shop/sitemaps/sitemap-buy-images.xml document] that has links to all of the (current) product images. Since the Apple Watch has so many models, editions, colors, etc., would it be worthwhile to upload all the images listed from the document? So far I've found [http://store.storeimages.cdn-apple.com/4711/as-images.apple.com/is/image/AppleInc/aos/published/images/w/42/w42ss/sbbk/w42ss-sbbk-detail this one]. (Apple Watch 42mm, Stainless Steel buckle) --[[User:Citrusui|Citrusui]] ([[User talk:Citrusui|talk]]) 18:01, 5 September 2015 (UTC)

:It's not a great idea to upload images from Apple's website in general, since they're copyrighted by Apple, unless you can make a decent argument that using a copyrighted image in a particular article is [https://en.wikipedia.org/wiki/Fair_use#Fair_use_under_United_States_law is fair use]. [[User:Britta|Britta]] ([[User talk:Britta|talk]]) 09:01, 6 September 2015 (UTC)

== Removal of Apple TV 3G from "Latest Firmware" Section? ==

Apparently, the Apple TV 3G has not received any updates from Apple for a long time and looks like it will not get any in the future. So, should we remove it from the "Latest Firmware" section on the Main Page? Any other thoughts? --[[User:Tp1194045441|Tp1194045441]] ([[User talk:Tp1194045441|talk]]) 03:51, 28 November 2015 (UTC)
:It's still been sold so it should stay as it's still "active" for this reason. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 22:34, 23 February 2016 (UTC)

== Cleanup ==

This page has a lot of links... It almost looks intimidating. That's not exactly an impression you want to leave on a first-time visitor. I'd like to clean it up, but I'm not entirely sure on what to cut out. I currently have everything in "Hardware" underneath the basebands in mind, and some of the definitions (be honest, how popular of a topic do you think iBEC is?). Any thoughts on what can or should not be cut? --[[User:Dialexio|Dialexio]] ([[User talk:Dialexio|talk]]) 21:09, 23 February 2016 (UTC)
:I think we should remove links to pages that have not been created yet. We can always add them back if/when made. --[[User:IAdam1n|iAdam1n]] ([[User talk:IAdam1n|talk]]) 22:33, 23 February 2016 (UTC)

== KPP ==

Is there a reason why a KPP page has not been created? It would be useful to many...
--[[User:Detiac|Detiac]] 15:19, 9 October 2017 (UTC)

== Rename Bad Stuff section ==

I don't know what we could rename it to, but it doesn't come off very well

User:Nullpixel

2017-10-10T17:24:49Z

Nullpixel:

Hey there. I'm [https://nullpixel.uk nullpixel], and I make iOS & Web apps.

== Things I do ==

* I code stuff, which you can see at my [https://github.com/nullpixel github].
* I'm the Head Moderator at [https://reddit.com/r/sideloaded /r/sideloaded]
* I'm an administrator on the official [https://discord.gg/jailbreak /r/jailbreak discord]

== My Devices ==

{| class="wikitable"
|-
! Device
! Variant
! Colour
! Storage
! Firmware
! Build
! Jailbroken?
! Purpose
|-
| [[iPhone SE]]
| [[N69uAP|iPhone8,4]]
| Gold
| rowspan="2" | 16GB
| 11.1
| 15B5078e
| No
| Main Device
|-
| [[iPad Air 2]]
| [[A1566 | iPad5,3]]
| class="rborderplz nobrradiusplz" | Gold
| 10.2
| 14C92
| No
| Not in use.
|}

== Contact Me ==

I can be reached via multiple mediums.

'''Preferred:'''

* [https://twitter.com/nullriver Message me on twitter]
* [https://reddit.com/user/nullpixel PM me on reddit]
* [https://discord.gg/jGRAdEY Message @nullpixel#0012 on discord]
* [mailto:jamie+iphonewiki@nullpixel.uk Shoot me a mail!]

'''If you want to'''

* [https://keybase.io/nullpixel Send me a PGP encrypted message on keybase]

User:Nullpixel

2017-10-10T17:20:47Z

Nullpixel:

Hi, I'm nullpixel, a iOS developer.

== Things I do ==

* I code stuff, which you can see at my [https://github.com/nullpixel1 github].
* I'm the Head Moderator at [https://reddit.com/r/sideloaded /r/sideloaded]
* I'm an admin on the official [https://discord.gg/jailbreak /r/jailbreak discord]

== My Devices ==

{| class="wikitable"
|-
! Device
! Variant
! Colour
! Storage
! Firmware
! Build
! Jailbroken?
! Purpose
|-
| [[iPhone SE]]
| [[N69uAP|iPhone8,4]]
| Gold
| rowspan="2" | 16GB
| 11.1
| 15B5078e
| No
| Main Device
|-
| [[iPad Air 2]]
| [[A1566 | iPad5,3]]
| class="rborderplz nobrradiusplz" | Gold
| 10.2
| 14C92
| No
| Not in use.
|}

== Articles I plan on updating ==

I'm currently reverse engineering the DCSD cable with [https://twitter.com/lululombard @lululombard]. We plan on updating

* https://www.theiphonewiki.com/wiki/DCSD_Cable
* https://www.theiphonewiki.com/w/index.php?title=Debug-uarts_(iBoot_variable)

== Contact Me ==

I can be reached via multiple mediums.

'''Preferred:'''

* [https://twitter.com/nullriver Message me on twitter]
* [https://reddit.com/user/nullpixel PM me on reddit]
* [https://discord.gg/jailbreak Message @nullpixel#0012 on discord]
* [mailto:jamie+iphonewiki@nullpixel.uk Shoot me a mail!]

'''If you want to'''

* [https://keybase.io/nullpixel Send me a PGP encrypted message on keybase]

----
Thanks [https://www.theiphonewiki.com/wiki/User:IAdam1n iAdam1n] for the table, your userpage is lit :3

Home Depot

2017-03-18T17:40:33Z

Nullpixel: The last link reads better

'''Home Depot''' is a [[semi-untethered jailbreak]] for 32-bit devices on iOS 9.1 - 9.3.4. It was written by [https://twitter.com/REALKJCMEMBER jk9357]. It works by sideloading an IPA using [[Cydia Impactor]].

== Compatible Devices ==
Home Depot is able to support all 32-bit devices on 9.1-9.3.4, however, it currently does not ship with all th offsets required to work on all device / firmware combos. The table below shows what devices, and firmwares it supports out of the box.

{| class="wikitable"
|-
! iOS Version
! [[iPad 2]]
! [[J1AP|iPad 3 (iPad3,1)]]
! [[J2AP|iPad 3 (iPad3,2)]]
! [[J2AAP|iPad 3 (iPad3,3)]]
! [[iPad 4]]
! [[P105AP|iPad mini (iPad2,5)]]
! [[N94AP|iPhone 4S]]
! [[N41AP|iPhone 5 (iPhone5,1)]]
! [[N42AP|iPhone 5 (iPhone5,2)]]
! [[N48AP|iPhone 5c (iPhone5,3)]]
! [[N49AP|iPhone 5c (iPhone5,4)]]
! [[iPod touch 5G]]<ref name="exp" />
|-
! 9.1
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
|-
! 9.2
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
|-
! 9.2.1
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
|-
! 9.3
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
|-
! 9.3.1
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
|-
! 9.3.2
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
! 9.3.3
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
! 9.3.4
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
|}

<references>
<ref name="exp">Experimental.</ref>
</references>

== Version Change Log ==
{| class="wikitable"
|-
! Version
! Changes
|-
| "JailBreak" (first beta release)
| Initial beta release
|-
| "JailBreakMoreDevices" (second beta)
| More devices supported
|-
| "iPhone53932" (third beta)
| Fix for iPhone5,3 on iOS 9.3.2
|-
| "iPhone52932" (forth beta)
| Fix for iPhone5,2 on iOS 9.3.2
|-
| "Make Mexico Pay For It" (fifth beta)
| Experimental support for more devices
|-
| Revision 1
| Initial release
|-
| Revision 2
| Fix for Cydia not appearing
|-
| Revision 3
| Real fix for Cydia not appearing
|-
| Revision 4
| Fix for app crashing
|-
| Revision 5
| Fix for tfp0
|-
| Revision 6
| iPad 2 fix for some iOS versions
|-
| Revision 7
| Fix for broken LwVM patch
|}

== External Links ==
* [http://www.wall.supplies/ Home page]
* [http://pastebin.com/a91ywvEW Extra Offsets] (will add more when found)
* [https://www.reddit.com/r/jailbreak/comments/5vpuyf/discussion_list_of_all_iphone_all_ipad_will_be/ A redditor who claims to have found all the offsets]

[[Category:Jailbreaks]]
[[Category:Jailbreaking]]

Home Depot

2017-03-18T17:39:42Z

Nullpixel: Fixed up some wording

'''Home Depot''' is a [[semi-untethered jailbreak]] for 32-bit devices on iOS 9.1 - 9.3.4. It was written by [https://twitter.com/REALKJCMEMBER jk9357]. It works by sideloading an IPA using [[Cydia Impactor]].

== Compatible Devices ==
Home Depot is able to support all 32-bit devices on 9.1-9.3.4, however, it currently does not ship with all th offsets required to work on all device / firmware combos. The table below shows what devices, and firmwares it supports out of the box.

{| class="wikitable"
|-
! iOS Version
! [[iPad 2]]
! [[J1AP|iPad 3 (iPad3,1)]]
! [[J2AP|iPad 3 (iPad3,2)]]
! [[J2AAP|iPad 3 (iPad3,3)]]
! [[iPad 4]]
! [[P105AP|iPad mini (iPad2,5)]]
! [[N94AP|iPhone 4S]]
! [[N41AP|iPhone 5 (iPhone5,1)]]
! [[N42AP|iPhone 5 (iPhone5,2)]]
! [[N48AP|iPhone 5c (iPhone5,3)]]
! [[N49AP|iPhone 5c (iPhone5,4)]]
! [[iPod touch 5G]]<ref name="exp" />
|-
! 9.1
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
|-
! 9.2
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
|-
! 9.2.1
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
|-
! 9.3
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
|-
! 9.3.1
| {{yes}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
|-
! 9.3.2
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
! 9.3.3
| {{yes}}
| {{no}}
| {{no}}
| {{yes}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
|-
! 9.3.4
| {{yes}}
| {{yes}}
| {{no}}
| {{no}}
| {{no}}
| {{no}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{yes}}
| {{no}}
| {{yes}}
|}

<references>
<ref name="exp">Experimental.</ref>
</references>

== Version Change Log ==
{| class="wikitable"
|-
! Version
! Changes
|-
| "JailBreak" (first beta release)
| Initial beta release
|-
| "JailBreakMoreDevices" (second beta)
| More devices supported
|-
| "iPhone53932" (third beta)
| Fix for iPhone5,3 on iOS 9.3.2
|-
| "iPhone52932" (forth beta)
| Fix for iPhone5,2 on iOS 9.3.2
|-
| "Make Mexico Pay For It" (fifth beta)
| Experimental support for more devices
|-
| Revision 1
| Initial release
|-
| Revision 2
| Fix for Cydia not appearing
|-
| Revision 3
| Real fix for Cydia not appearing
|-
| Revision 4
| Fix for app crashing
|-
| Revision 5
| Fix for tfp0
|-
| Revision 6
| iPad 2 fix for some iOS versions
|-
| Revision 7
| Fix for broken LwVM patch
|}

== External Links ==
* [http://www.wall.supplies/ Home page]
* [http://pastebin.com/a91ywvEW Extra Offsets] (will add more when found)
* [https://www.reddit.com/r/jailbreak/comments/5vpuyf/discussion_list_of_all_iphone_all_ipad_will_be/ A redditor claims to have found all the offsets]

[[Category:Jailbreaks]]
[[Category:Jailbreaking]]

DCSD Cable

2017-03-05T15:19:40Z

Nullpixel: change to Shell over serial from SSH

[[File:DCSD_Front_annotated.jpg|right|thumb|Annotated photo of the main DCSD PCB]]

The '''DCSD Alex cable''' is used in factories to communicate over serial to run tests and write to the SysCfg (for serial definitions, etc) during production. These cables are produced by Shenzhen Alex Connector Co. Ltd. in China. They can be purchased from obscure markets. There are two known types of DCSD cable. An older one, with lights and only one USB female USB connector, and a newer model, which lacks lights, and has two female USB connectors.

== PCB ==
=== Top of the board ===
{| class="wikitable" |
! Label
! Chip
! Datasheet
! Notes
|-
| D1
| rowspan="3" | Low Power Consumption Voltage Regulator with ON/OFF Switch
| rowspan="3" | http://www.s-manuals.com/pdf/datasheet/x/c/xc6215_series_torex.pdf
|
|-
| D5
|
|-
| D6
| Tied to TX and an input voltage of 3.3V on the UART J5 pads, this may be a protection in case the host shorts?
|-
| U1
| rowspan="2" | Micrel 2026A Dual-Channel Power Distribution Switch
| rowspan="2" | http://www.xilinx.com/products/boards/ml510/datasheets/mic2076-2bm.pdf
|
|-
| U2
|
|-
| U3
| FTDI FT232RQ UART IC
| http://www.ftdichip.com/Support/Documents/DataSheets/ICs/DS_FT232R.pdf
| Handles stoplight LED controls
|-
| U4
| Micrel MIC5219
| http://datasheet.datasheetarchive.com/originals/library/Datasheets-EDS7/DSAEDA000124178.pdf
| 500mA Peak Output LDO Regulator
|-
| U5
| FTDI FT232RQ UART IC
| http://www.ftdichip.com/Support/Documents/DataSheets/ICs/DS_FT232R.pdf
| Handles serial mux interface from iPhone
|-
| U6
| SMSC USB2514 4-port USB hub
| http://www.mouser.com/catalog/specsheets/2514.pdf
|
* The use of this deprecates the previous "Y" style cable, which used two separate USB cables for serial and iPhone data communication
* Three ports are used:
*# iPhone Data USB
*# U4 FTDI IC
*# U5 FTDI IC
|-
| U7
| Microchip 24AA04/24LC04B
| http://ww1.microchip.com/downloads/en/DeviceDoc/21708G.pdf
| I2C Serial EEPROM (TSSOP Package)
|-
| X1
| MKC 24 MHz Oscillator
| {{n/a}}
| I'm not 100% sure about the value of the chip, but this should be correct
|}

=== Back of the board ===
{| class="wikitable" |
! Label
! Notes
|-
| J9
| rowspan="4" | I believe these are used to flash the U7 EEPROM with USB IDs for use by the SMSC USB Hub, I have yet to dump the contents of the EEPROM to find out for sure.
|-
| J10
|-
| J11
|-
| J12
|}

=== Other notes ===
* The [[Lightning Connector]] has a specific Accessory ID flashed to it for enabling serial via the Tristar chip.
* This PCB is quite easy to replicate, but without the proper Accessory ID you will need to mimic the protocol similar to how key2fr did in his [http://ramtin-amin.fr/#tristar research].
* In theory, you can use the Tristar for JTAG through a similar board, but JTAG gets disabled by the device during boot due to production fusing status.

== Uses ==

=== Verbose Boot ===
One use of the cable was to view verbose boot. You could access this by setting [[Debug-uarts_(iBoot_variable)]] in [[iRecovery]] or nvram, however, since iOS 9, this output has been obfuscated.

=== Shell over serial ===
Using [http://twitter.com/qwertyoruiopz qwertyoruiopz's] [https://twitter.com/qwertyoruiopz/status/711455055401099264 serialsh], it is possible to get shell over serial. This is useful, because it does not require any additional daemons other than those shipped with iOS. An example use case for this would be protecting against bootloops.

=== Debugging the kernel ===
Using the DCSD cable, it is possible to attach GDB to the iOS kernel, and pause it's running.

DCSD Cable

2017-03-05T15:11:18Z

Nullpixel: Add information about new and old models

[[File:DCSD_Front_annotated.jpg|right|thumb|Annotated photo of the main DCSD PCB]]

The '''DCSD Alex cable''' is used in factories to communicate over serial to run tests and write to the SysCfg (for serial definitions, etc) during production. These cables are produced by Shenzhen Alex Connector Co. Ltd. in China. They can be purchased from obscure markets. There are two known types of DCSD cable. An older one, with lights and only one USB female USB connector, and a newer model, which lacks lights, and has two female USB connectors.

== PCB ==
=== Top of the board ===
{| class="wikitable" |
! Label
! Chip
! Datasheet
! Notes
|-
| D1
| rowspan="3" | Low Power Consumption Voltage Regulator with ON/OFF Switch
| rowspan="3" | http://www.s-manuals.com/pdf/datasheet/x/c/xc6215_series_torex.pdf
|
|-
| D5
|
|-
| D6
| Tied to TX and an input voltage of 3.3V on the UART J5 pads, this may be a protection in case the host shorts?
|-
| U1
| rowspan="2" | Micrel 2026A Dual-Channel Power Distribution Switch
| rowspan="2" | http://www.xilinx.com/products/boards/ml510/datasheets/mic2076-2bm.pdf
|
|-
| U2
|
|-
| U3
| FTDI FT232RQ UART IC
| http://www.ftdichip.com/Support/Documents/DataSheets/ICs/DS_FT232R.pdf
| Handles stoplight LED controls
|-
| U4
| Micrel MIC5219
| http://datasheet.datasheetarchive.com/originals/library/Datasheets-EDS7/DSAEDA000124178.pdf
| 500mA Peak Output LDO Regulator
|-
| U5
| FTDI FT232RQ UART IC
| http://www.ftdichip.com/Support/Documents/DataSheets/ICs/DS_FT232R.pdf
| Handles serial mux interface from iPhone
|-
| U6
| SMSC USB2514 4-port USB hub
| http://www.mouser.com/catalog/specsheets/2514.pdf
|
* The use of this deprecates the previous "Y" style cable, which used two separate USB cables for serial and iPhone data communication
* Three ports are used:
*# iPhone Data USB
*# U4 FTDI IC
*# U5 FTDI IC
|-
| U7
| Microchip 24AA04/24LC04B
| http://ww1.microchip.com/downloads/en/DeviceDoc/21708G.pdf
| I2C Serial EEPROM (TSSOP Package)
|-
| X1
| MKC 24 MHz Oscillator
| {{n/a}}
| I'm not 100% sure about the value of the chip, but this should be correct
|}

=== Back of the board ===
{| class="wikitable" |
! Label
! Notes
|-
| J9
| rowspan="4" | I believe these are used to flash the U7 EEPROM with USB IDs for use by the SMSC USB Hub, I have yet to dump the contents of the EEPROM to find out for sure.
|-
| J10
|-
| J11
|-
| J12
|}

=== Other notes ===
* The [[Lightning Connector]] has a specific Accessory ID flashed to it for enabling serial via the Tristar chip.
* This PCB is quite easy to replicate, but without the proper Accessory ID you will need to mimic the protocol similar to how key2fr did in his [http://ramtin-amin.fr/#tristar research].
* In theory, you can use the Tristar for JTAG through a similar board, but JTAG gets disabled by the device during boot due to production fusing status.

== Uses ==

=== Verbose Boot ===
One use of the cable was to view verbose boot. You could access this by setting [[Debug-uarts_(iBoot_variable)]] in [[iRecovery]] or nvram, however, since iOS 9, this output has been obfuscated.

=== SSH over serial ===
Using [http://twitter.com/qwertyoruiopz qwertyoruiopz's] [https://twitter.com/qwertyoruiopz/status/711455055401099264 serialsh], it is possible to SSH over serial. This is useful, because it does not require any SSH daemon other than those shipped with iOS. An example use case for this would be protecting against bootloops.

=== Debugging the kernel ===
Using the DCSD cable, it is possible to attach GDB to the iOS kernel, and pause it's running.

DCSD Cable

2017-03-05T15:06:47Z

Nullpixel: Add link to serialsh

[[File:DCSD_Front_annotated.jpg|right|thumb|Annotated photo of the main DCSD PCB]]

The '''DCSD Alex cable''' is used in factories to communicate over serial to run tests and write to the SysCfg (for serial definitions, etc) during production. These cables are produced by Shenzhen Alex Connector Co. Ltd. in China; this may be why they can be found on obscure markets for sale, if not just taken from a trash can from factories.

== PCB ==
=== Top of the board ===
{| class="wikitable" |
! Label
! Chip
! Datasheet
! Notes
|-
| D1
| rowspan="3" | Low Power Consumption Voltage Regulator with ON/OFF Switch
| rowspan="3" | http://www.s-manuals.com/pdf/datasheet/x/c/xc6215_series_torex.pdf
|
|-
| D5
|
|-
| D6
| Tied to TX and an input voltage of 3.3V on the UART J5 pads, this may be a protection in case the host shorts?
|-
| U1
| rowspan="2" | Micrel 2026A Dual-Channel Power Distribution Switch
| rowspan="2" | http://www.xilinx.com/products/boards/ml510/datasheets/mic2076-2bm.pdf
|
|-
| U2
|
|-
| U3
| FTDI FT232RQ UART IC
| http://www.ftdichip.com/Support/Documents/DataSheets/ICs/DS_FT232R.pdf
| Handles stoplight LED controls
|-
| U4
| Micrel MIC5219
| http://datasheet.datasheetarchive.com/originals/library/Datasheets-EDS7/DSAEDA000124178.pdf
| 500mA Peak Output LDO Regulator
|-
| U5
| FTDI FT232RQ UART IC
| http://www.ftdichip.com/Support/Documents/DataSheets/ICs/DS_FT232R.pdf
| Handles serial mux interface from iPhone
|-
| U6
| SMSC USB2514 4-port USB hub
| http://www.mouser.com/catalog/specsheets/2514.pdf
|
* The use of this deprecates the previous "Y" style cable, which used two separate USB cables for serial and iPhone data communication
* Three ports are used:
*# iPhone Data USB
*# U4 FTDI IC
*# U5 FTDI IC
|-
| U7
| Microchip 24AA04/24LC04B
| http://ww1.microchip.com/downloads/en/DeviceDoc/21708G.pdf
| I2C Serial EEPROM (TSSOP Package)
|-
| X1
| MKC 24 MHz Oscillator
| {{n/a}}
| I'm not 100% sure about the value of the chip, but this should be correct
|}

=== Back of the board ===
{| class="wikitable" |
! Label
! Notes
|-
| J9
| rowspan="4" | I believe these are used to flash the U7 EEPROM with USB IDs for use by the SMSC USB Hub, I have yet to dump the contents of the EEPROM to find out for sure.
|-
| J10
|-
| J11
|-
| J12
|}

=== Other notes ===
* The [[Lightning Connector]] has a specific Accessory ID flashed to it for enabling serial via the Tristar chip.
* This PCB is quite easy to replicate, but without the proper Accessory ID you will need to mimic the protocol similar to how key2fr did in his [http://ramtin-amin.fr/#tristar research].
* In theory, you can use the Tristar for JTAG through a similar board, but JTAG gets disabled by the device during boot due to production fusing status.

== Uses ==

=== Verbose Boot ===
One use of the cable was to view verbose boot. You could access this by setting [[Debug-uarts_(iBoot_variable)]] in [[iRecovery]] or nvram, however, since iOS 9, this output has been obfuscated.

=== SSH over serial ===
Using [http://twitter.com/qwertyoruiopz qwertyoruiopz's] [https://twitter.com/qwertyoruiopz/status/711455055401099264 serialsh], it is possible to SSH over serial. This is useful, because it does not require any SSH daemon other than those shipped with iOS. An example use case for this would be protecting against bootloops.

=== Debugging the kernel ===
Using the DCSD cable, it is possible to attach GDB to the iOS kernel, and pause it's running.

User:Nullpixel

2017-03-05T15:05:29Z

Nullpixel: Fixed broken URL

Hi, I'm nullpixel, a iOS developer.

== Things I do ==

* I code stuff, which you can see at my [https://github.com/nullpixel1 github].
* I'm the Head Moderator at [https://reddit.com/r/sideloaded /r/sideloaded]
* I'm an admin on the official [https://discord.gg/jailbreak /r/jailbreak discord]

== My Devices ==

{| class="wikitable"
|-
! Device
! Variant
! Colour
! Storage
! Firmware
! Build
! Jailbroken?
! Purpose
|-
| [[iPhone SE]]
| [[N69uAP|iPhone8,4]]
| Gold
| rowspan="2" | 16GB
| 10.2
| 14C92
| Yes, using Yalu102
| Main Device
|-
| [[iPad Air 2]]
| [[A1566 | iPad5,3]]
| class="rborderplz nobrradiusplz" | Gold
| 10.2
| 14C92
| Yes, using Yalu102
| Testing, watching youtube
|}

== Articles I plan on updating ==

I'm currently reverse engineering the DCSD cable with [https://twitter.com/lululombard @lululombard]. We plan on updating

* https://www.theiphonewiki.com/wiki/DCSD_Cable
* https://www.theiphonewiki.com/w/index.php?title=Debug-uarts_(iBoot_variable)

== Contact Me ==

I can be reached via multiple mediums.

'''Preferred:'''

* [https://twitter.com/nullriver Message me on twitter]
* [https://reddit.com/user/nullpixel PM me on reddit]
* [https://discord.gg/jailbreak Message @nullpixel#0012 on discord]
* [mailto:jamie+iphonewiki@nullpixel.uk Shoot me a mail!]

'''If you want to'''

* [https://keybase.io/nullpixel Send me a PGP encrypted message on keybase]

----
Thanks [https://www.theiphonewiki.com/wiki/User:IAdam1n iAdam1n] for the table, your userpage is lit :3

User:Nullpixel

2017-03-05T15:04:53Z

Nullpixel: Add links

Hi, I'm nullpixel, a iOS developer.

== Things I do ==

* I code stuff, which you can see at my [https://github.com/nullpixel1 github].
* I'm the Head Moderator at [https://reddit.com/r/sideloaded /r/sideloaded]
* I'm an admin on the official [https://discord.gg/jailbreak /r/jailbreak discord]

== My Devices ==

{| class="wikitable"
|-
! Device
! Variant
! Colour
! Storage
! Firmware
! Build
! Jailbroken?
! Purpose
|-
| [[iPhone SE]]
| [[N69uAP|iPhone8,4]]
| Gold
| rowspan="2" | 16GB
| 10.2
| 14C92
| Yes, using Yalu102
| Main Device
|-
| [[iPad Air 2]]
| [[A1566 | iPad5,3]]
| class="rborderplz nobrradiusplz" | Gold
| 10.2
| 14C92
| Yes, using Yalu102
| Testing, watching youtube
|}

== Articles I plan on updating ==

I'm currently reverse engineering the DCSD cable with [@lululombard https://twitter.com/lululombard]. We plan on updating

* https://www.theiphonewiki.com/wiki/DCSD_Cable
* https://www.theiphonewiki.com/w/index.php?title=Debug-uarts_(iBoot_variable)

== Contact Me ==

I can be reached via multiple mediums.

'''Preferred:'''

* [https://twitter.com/nullriver Message me on twitter]
* [https://reddit.com/user/nullpixel PM me on reddit]
* [https://discord.gg/jailbreak Message @nullpixel#0012 on discord]
* [mailto:jamie+iphonewiki@nullpixel.uk Shoot me a mail!]

'''If you want to'''

* [https://keybase.io/nullpixel Send me a PGP encrypted message on keybase]

----
Thanks [https://www.theiphonewiki.com/wiki/User:IAdam1n iAdam1n] for the table, your userpage is lit :3

DCSD Cable

2017-03-05T15:01:42Z

Nullpixel: Add more information to the article

[[File:DCSD_Front_annotated.jpg|right|thumb|Annotated photo of the main DCSD PCB]]

The '''DCSD Alex cable''' is used in factories to communicate over serial to run tests and write to the SysCfg (for serial definitions, etc) during production. These cables are produced by Shenzhen Alex Connector Co. Ltd. in China; this may be why they can be found on obscure markets for sale, if not just taken from a trash can from factories.

== PCB ==
=== Top of the board ===
{| class="wikitable" |
! Label
! Chip
! Datasheet
! Notes
|-
| D1
| rowspan="3" | Low Power Consumption Voltage Regulator with ON/OFF Switch
| rowspan="3" | http://www.s-manuals.com/pdf/datasheet/x/c/xc6215_series_torex.pdf
|
|-
| D5
|
|-
| D6
| Tied to TX and an input voltage of 3.3V on the UART J5 pads, this may be a protection in case the host shorts?
|-
| U1
| rowspan="2" | Micrel 2026A Dual-Channel Power Distribution Switch
| rowspan="2" | http://www.xilinx.com/products/boards/ml510/datasheets/mic2076-2bm.pdf
|
|-
| U2
|
|-
| U3
| FTDI FT232RQ UART IC
| http://www.ftdichip.com/Support/Documents/DataSheets/ICs/DS_FT232R.pdf
| Handles stoplight LED controls
|-
| U4
| Micrel MIC5219
| http://datasheet.datasheetarchive.com/originals/library/Datasheets-EDS7/DSAEDA000124178.pdf
| 500mA Peak Output LDO Regulator
|-
| U5
| FTDI FT232RQ UART IC
| http://www.ftdichip.com/Support/Documents/DataSheets/ICs/DS_FT232R.pdf
| Handles serial mux interface from iPhone
|-
| U6
| SMSC USB2514 4-port USB hub
| http://www.mouser.com/catalog/specsheets/2514.pdf
|
* The use of this deprecates the previous "Y" style cable, which used two separate USB cables for serial and iPhone data communication
* Three ports are used:
*# iPhone Data USB
*# U4 FTDI IC
*# U5 FTDI IC
|-
| U7
| Microchip 24AA04/24LC04B
| http://ww1.microchip.com/downloads/en/DeviceDoc/21708G.pdf
| I2C Serial EEPROM (TSSOP Package)
|-
| X1
| MKC 24 MHz Oscillator
| {{n/a}}
| I'm not 100% sure about the value of the chip, but this should be correct
|}

=== Back of the board ===
{| class="wikitable" |
! Label
! Notes
|-
| J9
| rowspan="4" | I believe these are used to flash the U7 EEPROM with USB IDs for use by the SMSC USB Hub, I have yet to dump the contents of the EEPROM to find out for sure.
|-
| J10
|-
| J11
|-
| J12
|}

=== Other notes ===
* The [[Lightning Connector]] has a specific Accessory ID flashed to it for enabling serial via the Tristar chip.
* This PCB is quite easy to replicate, but without the proper Accessory ID you will need to mimic the protocol similar to how key2fr did in his [http://ramtin-amin.fr/#tristar research].
* In theory, you can use the Tristar for JTAG through a similar board, but JTAG gets disabled by the device during boot due to production fusing status.

== Uses ==

=== Verbose Boot ===
One use of the cable was to view verbose boot. You could access this by setting [[Debug-uarts_(iBoot_variable)]] in [[iRecovery]] or nvram, however, since iOS 9, this output has been obfuscated.

=== SSH over serial ===
Using [http://twitter.com/qwertyoruiopz qwertyoruiopz's] serialsh, it is possible to SSH over serial. This is useful, because it does not require any SSH daemon other than those shipped with iOS. An example use case for this would be protecting against bootloops.

=== Debugging the kernel ===
Using the DCSD cable, it is possible to attach GDB to the iOS kernel, and pause it's running.

DCSD Cable

2017-03-05T14:49:36Z

Nullpixel: Reformat page layout

[[File:DCSD_Front_annotated.jpg|right|thumb|Annotated photo of the main DCSD PCB]]

The '''DCSD Alex cable''' is used in factories to communicate over serial to run tests and write to the SysCfg (for serial definitions, etc) during production. These cables are produced by Shenzhen Alex Connector Co. Ltd. in China; this may be why they can be found on obscure markets for sale, if not just taken from a trash can from factories.

== PCB ==
=== Top of the board ===
{| class="wikitable" |
! Label
! Chip
! Datasheet
! Notes
|-
| D1
| rowspan="3" | Low Power Consumption Voltage Regulator with ON/OFF Switch
| rowspan="3" | http://www.s-manuals.com/pdf/datasheet/x/c/xc6215_series_torex.pdf
|
|-
| D5
|
|-
| D6
| Tied to TX and an input voltage of 3.3V on the UART J5 pads, this may be a protection in case the host shorts?
|-
| U1
| rowspan="2" | Micrel 2026A Dual-Channel Power Distribution Switch
| rowspan="2" | http://www.xilinx.com/products/boards/ml510/datasheets/mic2076-2bm.pdf
|
|-
| U2
|
|-
| U3
| FTDI FT232RQ UART IC
| http://www.ftdichip.com/Support/Documents/DataSheets/ICs/DS_FT232R.pdf
| Handles stoplight LED controls
|-
| U4
| Micrel MIC5219
| http://datasheet.datasheetarchive.com/originals/library/Datasheets-EDS7/DSAEDA000124178.pdf
| 500mA Peak Output LDO Regulator
|-
| U5
| FTDI FT232RQ UART IC
| http://www.ftdichip.com/Support/Documents/DataSheets/ICs/DS_FT232R.pdf
| Handles serial mux interface from iPhone
|-
| U6
| SMSC USB2514 4-port USB hub
| http://www.mouser.com/catalog/specsheets/2514.pdf
|
* The use of this deprecates the previous "Y" style cable, which used two separate USB cables for serial and iPhone data communication
* Three ports are used:
*# iPhone Data USB
*# U4 FTDI IC
*# U5 FTDI IC
|-
| U7
| Microchip 24AA04/24LC04B
| http://ww1.microchip.com/downloads/en/DeviceDoc/21708G.pdf
| I2C Serial EEPROM (TSSOP Package)
|-
| X1
| MKC 24 MHz Oscillator
| {{n/a}}
| I'm not 100% sure about the value of the chip, but this should be correct
|}

=== Back of the board ===
{| class="wikitable" |
! Label
! Notes
|-
| J9
| rowspan="4" | I believe these are used to flash the U7 EEPROM with USB IDs for use by the SMSC USB Hub, I have yet to dump the contents of the EEPROM to find out for sure.
|-
| J10
|-
| J11
|-
| J12
|}

=== Other notes ===
* The [[Lightning Connector]] has a specific Accessory ID flashed to it for enabling serial via the Tristar chip.
* This PCB is quite easy to replicate, but without the proper Accessory ID you will need to mimic the protocol similar to how key2fr did in his [http://ramtin-amin.fr/#tristar research].
* In theory, you can use the Tristar for JTAG through a similar board, but JTAG gets disabled by the device during boot due to production fusing status.

User:Nullpixel

2017-03-05T14:29:24Z

Nullpixel: Another annoying space

Hi, I'm nullpixel, a iOS developer.

== Things I do ==

* I code stuff, which you can see at my [https://github.com/nullpixel1 github].
* I'm the Head Moderator at [https://reddit.com/r/sideloaded /r/sideloaded]
* I'm an admin on the official [https://discord.gg/jailbreak /r/jailbreak discord]

== My Devices ==

{| class="wikitable"
|-
! Device
! Variant
! Colour
! Storage
! Firmware
! Build
! Jailbroken?
! Purpose
|-
| [[iPhone SE]]
| [[N69uAP|iPhone8,4]]
| Gold
| rowspan="2" | 16GB
| 10.2
| 14C92
| Yes, using Yalu102
| Main Device
|-
| [[iPad Air 2]]
| [[A1566 | iPad5,3]]
| class="rborderplz nobrradiusplz" | Gold
| 10.2
| 14C92
| Yes, using Yalu102
| Testing, watching youtube
|}

== Articles I plan on updating ==

All DCSD ones, and a few outdated iBoot pages.

== Contact Me ==

I can be reached via multiple mediums.

'''Preferred:'''

* [https://twitter.com/nullriver Message me on twitter]
* [https://reddit.com/user/nullpixel PM me on reddit]
* [https://discord.gg/jailbreak Message @nullpixel#0012 on discord]
* [mailto:jamie+iphonewiki@nullpixel.uk Shoot me a mail!]

'''If you want to'''

* [https://keybase.io/nullpixel Send me a PGP encrypted message on keybase]

----
Thanks [https://www.theiphonewiki.com/wiki/User:IAdam1n iAdam1n] for the table, your userpage is lit :3

User:Nullpixel

2017-03-05T14:27:29Z

Nullpixel: ew space

Hi, I'm nullpixel, a iOS developer.

== Things I do ==

* I code stuff, which you can see at my [https://github.com/nullpixel1 github].
* I'm the Head Moderator at [https://reddit.com/r/sideloaded /r/sideloaded]
* I'm an admin on the official [https://discord.gg/jailbreak /r/jailbreak discord]

== My Devices ==

{| class="wikitable"
|-
! Device
! Variant
! Colour
! Storage
! Firmware
! Build
! Jailbroken?
! Purpose
|-
| [[iPhone SE]]
| [[N69uAP|iPhone8,4]]
| Gold
| rowspan="2" | 16GB
| 10.2
| 14C92
| Yes, using Yalu102
| Main Device
|-
| [[iPad Air 2]]
| [[A1566 | iPad5,3]]
| class="rborderplz nobrradiusplz" | Gold
| 10.2
| 14C92
| Yes, using Yalu102
| Testing, watching youtube
|}

== Articles I plan on updating ==

All DCSD ones, and a few outdated iBoot pages.

== Contact Me ==

I can be reached via multiple mediums.

'''Preferred:'''

* [https://twitter.com/nullriver Message me on twitter]
* [https://reddit.com/user/nullpixel PM me on reddit]
* [https://discord.gg/jailbreak Message @nullpixel#0012 on discord]
* [mailto:jamie+iphonewiki@nullpixel.uk Shoot me a mail!]

'''If you want to'''

* [https://keybase.io/nullpixel Send me a PGP encrypted message on keybase]

----
Thanks [https://www.theiphonewiki.com/wiki/User:IAdam1n iAdam1n] for the table, your userpage is lit :3

User:Nullpixel

2017-03-05T14:27:05Z

Nullpixel: Add whole page

Hi, I'm nullpixel, a iOS developer.

== Things I do ==

* I code stuff, which you can see at my [https://github.com/nullpixel1 github].
* I'm the Head Moderator at [https://reddit.com/r/sideloaded /r/sideloaded]
* I'm an admin on the official [https://discord.gg/jailbreak /r/jailbreak discord]

== My Devices ==

{| class="wikitable"
|-
! Device
! Variant
! Colour
! Storage
! Firmware
! Build
! Jailbroken?
! Purpose
|-
| [[iPhone SE]]
| [[N69uAP|iPhone8,4]]
| Gold
| rowspan="2" | 16GB
| 10.2
| 14C92
| Yes, using Yalu102
| Main Device
|-
| [[iPad Air 2]]
| [[A1566 | iPad5,3]]
| class="rborderplz nobrradiusplz" | Gold
| 10.2
| 14C92
| Yes, using Yalu102
| Testing, watching youtube
|}

== Articles I plan on updating ==

All DCSD ones, and a few outdated iBoot pages.

== Contact Me ==

I can be reached via multiple mediums.

'''Preferred:'''

* [https://twitter.com/nullriver Message me on twitter]
* [https://reddit.com/user/nullpixel PM me on reddit]
* [https://discord.gg/jailbreak Message @nullpixel#0012 on discord]
* [mailto:jamie+iphonewiki@nullpixel.uk Shoot me a mail!]

'''If you want to'''

* [https://keybase.io/nullpixel Send me a PGP encrypted message on keybase]

----
Thanks [https://www.theiphonewiki.com/wiki/User:IAdam1n iAdam1n] for the table, your userpage is lit :3

Debug-uarts (iBoot variable)

2017-03-03T18:24:09Z

Nullpixel: Fix typo

If set to 3, [[LLB]] and [[iBoot]] will give debug output over serial while booting or while in [[Recovery Mode]]]. This allows you to see things like the list of firmware images in flash and the information that it output whilst the LCD is initialized (ie. pre-"[[Recovery Mode]]" output).

Note that as a consequence, when set to 3, output over USB may be very choppy for reasons that have not yet been investigated.

As of iOS 9, the output is obfuscated, and appears as hex strings, hence making it unreadable.

Debug-uarts (iBoot variable)

2017-03-03T18:19:39Z

Nullpixel: Fix debug value, and added obf as of 9

If set to 3, [[LLB]] and [[iBoot]] will give debug output over serial while booting or while in [[Recovery Mode]]]. This allows you to see things like the list of firmware images in flash and the information that it output whilst the LCD is initialized (ie. pre-"[[Recovery Mode]]" output).

Note that as a consequence, when set to 3, output over USB may be very choppy for reasons that have not yet been investigated.

As of iOS 9, the output is obfuscated, and appears as he's strings, hence making it unreadable.

Scam Jailbreaks and Unlocks

2016-07-29T12:05:40Z

Nullpixel: Removed my fake thing (just realised it was already in there, should probably have used CMD + F before)

This is an ''incomplete'' list of community-reported '''scam sites''' that pretend to distribute or sell jailbreaking and unlocking tools/services. (There are many other scam sites not listed here yet.)

If you see a site selling jailbreaking or unlocking software (or asking you to do a survey before downloading), it's a scam. (Companies make money when you fill out surveys, so they promise a jailbreak to get you to fill them out.) Scam sites may also provide free fake tools that actually install adware or other kinds of malware in order to make money from you. Some legitimate forms of unlocking are not free - third-party IMEI unlocks and SIM interposer devices both cost money - but ultrasn0w is always free.

In general, please consider: '''is what the site promises too good to be true?''' Does it promise a new jailbreak for the latest iOS version, when nobody from trusted sources (such as well-known blogs or Reddit or developers on Twitter) is talking about this new jailbreak? When a real new jailbreak gets released, huge numbers of people talk about it - so if you find something people aren't talking about, be very skeptical and check trusted sources.

=== You can contribute to this list ===

Please contribute to this list if you find a scam site. By listing them here, we can help people find good information when they search Google for more information about these sites. If your site is listed here and you believe that's a mistake, you may contact an administrator to request removal.

Be sure not to link to these pages, as all links will boost their Google ranking.

== Jailbreak fakes ==
{| class="wikitable"
|-
! Domain !! Notes
|-
| 3kjailbreak.com || Fake
|-
| 4na.weebly.com || Fake
|-
| 7evasi0n.com || Fake
|-
| 7jailbreak.com || On-device survey scam
|-
| 71jailbreak.com || Fake
|-
| 8jailbreak.net || Fake
|-
| alphajailbreak.com || Survey scam
|-
| alpinejb.blogspot.com || Fake
|-
| apps.appshed.com/[various #] || On-device fake, webclips and profiles
|-
| celtikios7.com || Survey scam
|-
| cyberelevat0r.net || Fake
|-
| cyberelevat0r.us || Fake
|-
| cydia8jailbreak.com || Fake has you download multiple free-to-play apps hoping for in-app purchases
|-
| cydiaappdownloader.wordpress.com || Fake. Virustotal.com analysis: 39 of 56 scanners detect malware.
|-
| cydia-download.us || On-device scam, cost is unknown as it wants to install a profile and I'm not willing to go that far ;p
|-
| cydiainstall9.weebly.com || Fake, makes you download apps from the AppStore, promo video has obvious edit.
|-
| cyrooting.com || Affiliated with cydia-download.us which installs a profile from cyrooting.com
|-
| downgradeios7.com || Fake on-device downgrade tool
|-
| downgradeios8.com || Fake on-device downgrade tool
|-
| downgradeiphone.com || Sells a false promise (universal iOS/baseband downgrade) for $29
|-
| downloadpangu.org || Fake
|-
| ecydia.com || Sells an unspecified tool for $24.99
|-
| en-pangu.com || Fake, affiliated with i0n1c.com and taig9.com
|-
| equsi0n.com || Survey scam
|-
| evad3rs.me || No survey, not selling anything, just has downloads of evasi0n 1.0.7, calling it 1.0.8 and saying it works on iOS 7.1.x. Pointless.
|-
| evad3rsdevteam.com || Survey scam, copy of evasi0n.com
|-
| evad3rs-devteam.com || Copy of evasi0n.com
|-
| evad3rsjb.com || Fake
|-
| evad3rsteam.com || Survey scam
|-
| evasi0nblog.com || Repackaged evasi0n
|-
| evasi0ndevteam.com || Sells evasi0n for $15
|-
| evasi0njb.net || Copy of evasi0n.com
|-
| evasion-jailbreak.com || Survey scam
|-
| evasion-jailbreak7.com || Survey scam
|-
| evasi0n-jailbreak.net || Survey scam, copy of evasi0n.com
|-
| evasi0njailbreak.com || Fake
|-
| evasion7.com || Fake
|-
| evasion7download.info/pangu || Malware. See [https://www.virustotal.com/en/file/fb64d5934ebd946c0a4cd49bb8adb13005a57c0ffb04b77e94d40563b6e001e2/analysis/1418953850/ VirusTotal results]
|-
| evasioniosjailbreak.com || Survey scam
|-
| evasionjailbreak.net || Survey scam, copy of evasi0n.com
|-
| evasionjailbreak.us || Copy of evasi0n.com
|-
| evasionjailbreak7.com || Survey scam
|-
| evasi0n-official.com || Survey scam, loosely copied from evasi0n.com
|-
| evasl0n.blogspot.com || Survey scam, copy of evasi0n.com
|-
| evasi0n7.com/pangu || Fake
|-
| evasion7download.info || Malware. See [https://www.virustotal.com/en/file/fb64d5934ebd946c0a4cd49bb8adb13005a57c0ffb04b77e94d40563b6e001e2/analysis/1418953850/ VirusTotal results]
|-
| evasion7-jailbreak.com || Fake
|-
| evazi0n.net || Fake
|-
| ex0dus-jailbreak.com || Unspecified tool, claims to be developed by @planetbeing and @pimskeks. Survey scam after being strung along downloading a fake tool which requires a patch, said patch download requiring survey completion.
|-
| factory-directme.com || Sells redsn0w for $14.95
|-
| firest0rm.net || Survey scam
|-
| freed0md00r.com || Survey scam
|-
| future7ios7.com || Survey scam
|-
| geeksn0w.net || Copy of geeksn0w.it
|-
| geeksn0w.net/pangu || Fake
|-
| geeksn0wdownload.com || Copy of Geeksn0w.it
|-
| getthebest365.com || Sells unspecified tool for $27.00
|-
| greenpois0n-gc.blogspot.com || Survey scam
|-
| icysn0w.com || Survey scam
|-
| idevicehacker07.com || Fake, claims to install R4m0n JB for iOS 9
|-
| idowngrade.com || Survey scam
|-
| iemu.org || Fake; previous site for [[iEmu]]
|-
| ievad3rs.com || Survey scam
|-
| ijailbreak-iphone.com || Sells an unspecified tool for $19.95
|-
| ijailbreaking.com || Fake, see iosjailbreakings.com entry
|-
| ijailbreakpro.com || Sells an unspecified tool for $29.90, $39.90 and $49.90
|-
| ijailbreakpro.net || Sells an unspecified tool (for $29.90, $39.90, and $49.90), to which the most expensive purchase is required to use the tool more than once.
|-
| ijailbreaktool.com || Sells an unspecified tool for $24.99
|-
| imessagewin.com || Claims to have iMessage for Windows platform; Survey scam
|-
| ineedjailbreak.com || Sells evasi0n / redsn0w for $24.95
|-
| inj3ct3d.klikkit.co.uk || asking for donations to publish a non-existent jailbreak
|-
| insanelyios.blogspot.com || Downgrade fake, survey scam
|-
| instajailbreaker.com || Sells unspecified tool(s) for $29.95
|-
| installcydia.mobi || Fake. Takes you to appial.com for freemium appstore games
|-
| instantjb.com || Fake. Installs multiple profiles. Sells "premium" cydia for $9.99
|-
| ios-6-1-4-jailbreak.com || Survey scam
|-
| ios-jailbreak.com || Provides fake iOS 9.3 jailbreak tool that includes malware
|-
| ios8jailbreak.org || Fake
|-
| ios8jailbreak.tk || Fake (alternate domain name is ios8-jailbreak.weebly.com)
|-
| ios8jailbreakdownload.net || Survey scam
|-
| ios8pangu.com || Fake, webclip. Wants to install unsigned profile that cannot be removed
|-
| ios9.semijb.com || See semijb.com entry
|-
| iosjailbreakings.com || Fake, sends you to ijailbreaking.com
|-
| iosjailbreakpangu.com || Survey scam. Good copy of real pangu site
|-
| ipadjailbreak3.com || Forwards to jailbreakunlock.org
|-
| ipangu.net || Fake. Passworded zip files
|-
| iphone5break.com || Sells unspecified tool for $49.99
|-
| iphonejailbreakplus.com || Sells evasi0n / redsn0w for $29.95
|-
| iphonejailbreak-unlock.com || Sells unspecified tool for $27.00
|-
| irevert.wordpress.com/ || Claims to be able to downgrade firmware
|-
| i0n1c.com/jailbreak-ios-9.1 || Fake browser-based tool
|-
| jailbreak.cc || Sells jailbreaking tools
|-
| jailbreak-7.com || App Store app download+play time required, artificially inflating its popularity
|-
| jailbreak-absinthe.com || Survey scam
|-
| jailbreak-ios-7.com || Tells people to go to thejailbreakshop.com
|-
| jailbreak-ios7.net || Sells unspecified tools for $29.95 and $39.95
|-
| jailbreak-my-ipad.org || Sells evasi0n / redsn0w for $29.95 '''per month'''
|-
| jailbreak-my-iphone.com || Sells unspecified tool for $29.97
|-
| jailbreak-team.com || Sells an unspecified tool for $29.99
|-
| jailbreak71.com || Fake
|-
| jailbreak7wizz.com || Links to jailbreakthings.com, which in turn links to instajailbreaker.com, which sells unspecified tools for $29.95
|-
| jailbreakandunlock1.pressdoc.com || Blog that is about jailbreak and unlock which uses fake tools.
|-
| jailbreakbj.com || Survey scam
|-
| jailbreakgenie.com || Scam. Sells unspecified jailbreak tool for $9.99
|-
| jailbreakios7untethered.com || Survey scam, all set up in advance for iOS 7
|-
| jailbreakiosnewversion.elitegamershub.com || Survey scam, copied/modified verion of evasi0n7
|-
| jailbreakiphone5s.com || Tells people to go to thejailbreakshop.com
|-
| jailbreakmenow.net || Sells unspecified tools for $19.95, $29.95, and $39.95
|-
| jailbreaknewiphone.com || Survey scam after being strung along downloading a fake tool
|-
| jailbreaktheipad2.com || Sells unspecified tool for $14.95
|-
| jailbreakthings.com || Exists solely to promote instajailbreaker.com, a scam site
|-
| jailbreakunlock.info || Sells unspecified tools for $19.95, $29.95, and $39.95
|-
| jailbreakunlock.org || Sells evasi0n / redsn0w for $14.95
|-
| jailbroke.info || Sells jailbreaking "solutions"
|-
| k33n.mobi || Survey scam
|-
| k33nweb.com || Fake
|-
| latestiphoneunlock.com || Sells an unspecified tool for $9.95 or $29.95
|-
| linxijb.weebly.com || Fake
|-
| newios7jailbreak.com || Directs visitors to unlock-jailbreak.net
|-
| opensn0w.net || Survey scam
|-
| overcast7.com || Survey scam
|-
| pangu8.com || Fake. Installs webclip from semijb.com
|-
| pangu9.mobi || Fake
|-
| pangudownload.com || Fake
|-
| pangu-jailbreak.com || Fake
|-
| pangujailbreak.info || Fake, survey scam, poor things can't even pay their hosting bill :)
|-
| pangujb.blogspot.com || Fake
|-
| pangunow.com || Fake
|-
| pod2gblog.blogspot.com || Copy of pod2g's blog
|-
| p0sixspwn.co || Windows version is a malware downloader that eventually downloads the real [[p0sixspwn]]
|-
| posixspwndownload.com || Copy of [[p0sixspwn]]
|-
| ppjailbreak.com || Copy of [[PPJailbreak]] and copyright infringement
|-
| premiumjailbreak.com || Sells jailbreaking tools
|-
| purpletools.wordpress.com || (and all the other sites/people offering similar stuff) Scam - Claims access to Apple's internal VPN
|-
| redpois0n.net || Survey scam
|-
| red-snow.com || Sells unspecified tools for $29.95 and $39.95
|-
| redsn0w-r9-new.blogspot.com || Survey scam, text is ripped from Dev-Team Blog
|-
| rocky-racoon.com || Survey scam, copy of Dev-Team Blog
|-
| safera1n.com || Sells an unspecified tool for $24.99
|-
| silv3rwind.com || Sells an unspecified tool for $20
|-
| semijb.com || Fake. Does not install "the cydia."
|-
| semirestore.org || Fake redistributions of SemiRestore and SemiRestore7
|-
| spirit-jb.com || Survey scam
|-
| spiritjb.net || Survey scam
|-
| synergyjailbreak.com || Survey scam
|-
| taig8.net || Fake
|-
| taig9.com || Fake
|-
| taig9.mobi || Fake. AppStore app download scheme to boost app rankings and profit scammer via in-app advertising.
|-
| taigremote.com || On-device app-download scam, basically a survey scam
|-
| team7jailbreak.com || On-device survey scam (redirects to 7jailbreak.com). [https://twitter.com/search?q=It%27s%20easy.%20%20Follow%20this%20realy%20simple%20guide%20from%20%40teamjailbreak7&src=typd&f=realtime Known to spam on Twitter]
|-
| theios7jailbreaker.com || Directs people to scam sites (ijailbreakpro.com, appleunlocker.com, ijailbreaktool.com)
|-
| theios8jailbreak.com || Fake
|-
| thejailbreakshop.com || Sells an unspecified tool for $29.97 and $49.97
|-
| trianglejailbreak.com || Sells jailbreaking tool
|-
| u7xjailbreak.com || Survey scam
|-
| unja1l.com || Survey scam
|-
| untetheredjailbreakios8.com || Survey scam
|}

== Scam jailbreak and unlock sites ==

{| class="wikitable"
|-
! Domain !! Notes
|-
| appleunlocker.com || Sells unspecified jailbreaking + unlocking software for $19.95
|-
| bestra1n.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| cheapestiphoneunlock.com || Sells unspecified jailbreaking + unlocking software for $9.99
|-
| deblocage-iphone-fr.com || Sells unspecified unlocking software for €29.99
|-
| desbloquear-iphone-pro.com || Sells unspecified unlocking software for €29.99
|-
| e-imeiunlock.com || Survey scam
|-
| easyiphoneunlocking.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| easyunlockiphone.net || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| easyunlockingsolutions.com || Sells unspecified unlocking software for $19.99
|-
| how-jailbreak-iphone.com || Sells unspecified jailbreaking + unlocking software for $19.95
|-
| ih8sn0w.mobi || Sells who knows what for 20 Euros. Quite funny, but don't be a sucker.
|-
| ijailbreakpro.com || Sells redsn0w for $29.90, $39.90, or $49.90
|-
| ijailbreaktool.com || Sells unspecified jailbreaking software for $24.99
|-
| ios7jailbreaker.net || Survey scam
|-
| ios7jailbreak.fr || Survey scam
|-
| iphone-unlocker.org || Survey scam
|-
| iphone5break.com || Sells unspecified jailbreaking + unlocking software for $49.99
|-
| iphone-instant-unlock.com || Sells unspecified unlocking software for $14.95
|-
| iphone-unlock-pro.com || Redirects to unlock4iphone.com, desbloquear-iphone-pro.com, and deblocage-iphone-fr.com
|-
| iphone-unlocker-pro.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| iphone-unlock-me.com || Sells unspecified unlocking software for $14.95
|-
| iphone-unlockme.com || Sells unspecified unlocking software for $14.95
|-
| iphoneunlocker.org.uk || Sells unspecified jailbreaking + unlocking software for £14.99
|-
| iphoneunlockersoftware.com || Sells unspecified jailbreaking + unlocking software for $24.97
|-
| iphoneunlockplus.com || Sells unspecified unlocking software for $22.99
|-
| iphoneunlockwiz.com || Sells unspecified jailbreaking + unlocking software for $29.97
|-
| jailbreakandunlockiphones.com || Glowing reviews of, and links to, scam sites which are mostly offline now
|-
| jailbreakiphone5express.com || Links to ijailbreakpro.com, appleunlocker.com and ijailbreaktool.com
|-
| myappledownload.com || Sells undefined non-existing jailbreaks, unlocks, downgrades for $19.99
|-
| mydowngrade.com || Sells undefined non-existing jailbreaks, unlocks, downgrades for $19.99
|-
| myunlocker.org || On-device survey / app download scam
|-
| officialiphoneunlock.co.uk || Fake
|-
| phoneunlockguy.com || Sells unspecified jailbreaking + unlocking software for $14.95
|-
| solutions-directme.com || Sells unspecified jailbreaking software for $14.95
|-
| superiorsim.com || Sells SIM interposers, reported to be a scam by various websites
|-
| superunlockiphone.com || Sells unspecified jailbreaking + unlocking software for £14.99
|-
| tracyandmatt.co.uk || Refers victims to unlock-jailbreak.net
|-
| transx-solutions.com || Sells software for $14.95 which does not say what it is. Also requires a download
|-
| trusted-iphone-unlocker.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| ultimateiphoneunlocker.com || Sells unspecified unlocking software for $19.95
|-
| unlock-your-phones.com || Sells evasi0n as an unlock for €8.99
|-
| unlock-apple-iphone.com || Sells unspecified jailbreaking + unlocking software for $29.99
|-
| unlock-appleiphone.com || Sells IMEI unlocks for ANY carrier (including Singtel, which is factory unlocked, and including Sprint, which is nearly impossible, and certainly not done for that price) for $29.95
|-
| unlock-ijailbreak.net || Added a letter to the URL, otherwise it's the same site as unlock-jailbreak.net
|-
| unlock-iphone.info || Fake. Claims that donating will expedite your request.
|-
| unlock-jailbreak.net || Sells unspecified unlocking software for $24.99
|-
| unlock-jailbreak-iphone.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlock-the-iphone.com || Sells unspecified jailbreaking + unlocking software for $29.95, $37.95, or $49
|-
| unlock4iphone.com || Sells unspecified unlocking software for $29.99
|-
| unlockimeiiphone.com || Sells unspecified jailbreaking + unlocking tool for $19.95
|-
| unlockingfox.com || Survey scam
|-
| unlockiphone.net || Sells unspecified jailbreaking + unlocking tool
|-
| unlockiphone.org || Sells unspecified unlocking software for $24.95
|-
| unlockiphoneios5.com || Sells unspecified jailbreaking + unlocking software for $14.95
|-
| unlockiphonenow.org || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockiphonepro.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockjailbreaktool.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockmecentral.com || Sells jailbreaking "membership"
|-
| ultrasn0wtool.com || Claims to unlock via a GUI app
|-
| ziphone.org || Directs visitors to iphone-unlocker-pro.com
|}

Scam Jailbreaks and Unlocks

2016-07-29T12:00:20Z

Nullpixel: Added downloadpangu.org & fixed my formatting

This is an ''incomplete'' list of community-reported '''scam sites''' that pretend to distribute or sell jailbreaking and unlocking tools/services. (There are many other scam sites not listed here yet.)

If you see a site selling jailbreaking or unlocking software (or asking you to do a survey before downloading), it's a scam. (Companies make money when you fill out surveys, so they promise a jailbreak to get you to fill them out.) Scam sites may also provide free fake tools that actually install adware or other kinds of malware in order to make money from you. Some legitimate forms of unlocking are not free - third-party IMEI unlocks and SIM interposer devices both cost money - but ultrasn0w is always free.

In general, please consider: '''is what the site promises too good to be true?''' Does it promise a new jailbreak for the latest iOS version, when nobody from trusted sources (such as well-known blogs or Reddit or developers on Twitter) is talking about this new jailbreak? When a real new jailbreak gets released, huge numbers of people talk about it - so if you find something people aren't talking about, be very skeptical and check trusted sources.

=== You can contribute to this list ===

Please contribute to this list if you find a scam site. By listing them here, we can help people find good information when they search Google for more information about these sites. If your site is listed here and you believe that's a mistake, you may contact an administrator to request removal.

Be sure not to link to these pages, as all links will boost their Google ranking.

== Jailbreak fakes ==
{| class="wikitable"
|-
! Domain !! Notes
|-
| 3kjailbreak.com || Fake
|-
| 4na.weebly.com || Fake
|-
| 7evasi0n.com || Fake
|-
| 7jailbreak.com || On-device survey scam
|-
| 71jailbreak.com || Fake
|-
| 8jailbreak.net || Fake
|-
| alphajailbreak.com || Survey scam
|-
| alpinejb.blogspot.com || Fake
|-
| apps.appshed.com/[various #] || On-device fake, webclips and profiles
|-
| celtikios7.com || Survey scam
|-
| cyberelevat0r.net || Fake
|-
| cyberelevat0r.us || Fake
|-
| cydia8jailbreak.com || Fake has you download multiple free-to-play apps hoping for in-app purchases
|-
| cydiaappdownloader.wordpress.com || Fake. Virustotal.com analysis: 39 of 56 scanners detect malware.
|-
| cydia-download.us || On-device scam, cost is unknown as it wants to install a profile and I'm not willing to go that far ;p
|-
| cydiainstall9.weebly.com || Fake, makes you download apps from the AppStore, promo video has obvious edit.
|-
| cyrooting.com || Affiliated with cydia-download.us which installs a profile from cyrooting.com
|-
| downgradeios7.com || Fake on-device downgrade tool
|-
| downgradeios8.com || Fake on-device downgrade tool
|-
| downgradeiphone.com || Sells a false promise (universal iOS/baseband downgrade) for $29
|-
| downloadpangu.org || Fake
|-
| ecydia.com || Sells an unspecified tool for $24.99
|-
| en-pangu.com || Fake, affiliated with i0n1c.com and taig9.com
|-
| equsi0n.com || Survey scam
|-
| evad3rs.me || No survey, not selling anything, just has downloads of evasi0n 1.0.7, calling it 1.0.8 and saying it works on iOS 7.1.x. Pointless.
|-
| evad3rsdevteam.com || Survey scam, copy of evasi0n.com
|-
| evad3rs-devteam.com || Copy of evasi0n.com
|-
| evad3rsjb.com || Fake
|-
| evad3rsteam.com || Survey scam
|-
| evasi0nblog.com || Repackaged evasi0n
|-
| evasi0ndevteam.com || Sells evasi0n for $15
|-
| evasi0njb.net || Copy of evasi0n.com
|-
| evasion-jailbreak.com || Survey scam
|-
| evasion-jailbreak7.com || Survey scam
|-
| evasi0n-jailbreak.net || Survey scam, copy of evasi0n.com
|-
| evasi0njailbreak.com || Fake
|-
| evasion7.com || Fake
|-
| evasion7download.info/pangu || Malware. See [https://www.virustotal.com/en/file/fb64d5934ebd946c0a4cd49bb8adb13005a57c0ffb04b77e94d40563b6e001e2/analysis/1418953850/ VirusTotal results]
|-
| evasioniosjailbreak.com || Survey scam
|-
| evasionjailbreak.net || Survey scam, copy of evasi0n.com
|-
| evasionjailbreak.us || Copy of evasi0n.com
|-
| evasionjailbreak7.com || Survey scam
|-
| evasi0n-official.com || Survey scam, loosely copied from evasi0n.com
|-
| evasl0n.blogspot.com || Survey scam, copy of evasi0n.com
|-
| evasi0n7.com/pangu || Fake
|-
| evasion7download.info || Malware. See [https://www.virustotal.com/en/file/fb64d5934ebd946c0a4cd49bb8adb13005a57c0ffb04b77e94d40563b6e001e2/analysis/1418953850/ VirusTotal results]
|-
| evasion7-jailbreak.com || Fake
|-
| evazi0n.net || Fake
|-
| ex0dus-jailbreak.com || Unspecified tool, claims to be developed by @planetbeing and @pimskeks. Survey scam after being strung along downloading a fake tool which requires a patch, said patch download requiring survey completion.
|-
| factory-directme.com || Sells redsn0w for $14.95
|-
| firest0rm.net || Survey scam
|-
| freed0md00r.com || Survey scam
|-
| future7ios7.com || Survey scam
|-
| geeksn0w.net || Copy of geeksn0w.it
|-
| geeksn0w.net/pangu || Fake
|-
| geeksn0wdownload.com || Copy of Geeksn0w.it
|-
| getthebest365.com || Sells unspecified tool for $27.00
|-
| greenpois0n-gc.blogspot.com || Survey scam
|-
| icysn0w.com || Survey scam
|-
| idevicehacker07.com || Fake, claims to install R4m0n JB for iOS 9
|-
| idowngrade.com || Survey scam
|-
| iemu.org || Fake; previous site for [[iEmu]]
|-
| ievad3rs.com || Survey scam
|-
| ijailbreak-iphone.com || Sells an unspecified tool for $19.95
|-
| ijailbreaking.com || Fake, see iosjailbreakings.com entry
|-
| ijailbreakpro.com || Sells an unspecified tool for $29.90, $39.90 and $49.90
|-
| ijailbreakpro.net || Sells an unspecified tool (for $29.90, $39.90, and $49.90), to which the most expensive purchase is required to use the tool more than once.
|-
| ijailbreaktool.com || Sells an unspecified tool for $24.99
|-
| imessagewin.com || Claims to have iMessage for Windows platform; Survey scam
|-
| ineedjailbreak.com || Sells evasi0n / redsn0w for $24.95
|-
| inj3ct3d.klikkit.co.uk || asking for donations to publish a non-existent jailbreak
|-
| insanelyios.blogspot.com || Downgrade fake, survey scam
|-
| instajailbreaker.com || Sells unspecified tool(s) for $29.95
|-
| installcydia.mobi || Fake. Takes you to appial.com for freemium appstore games
|-
| instantjb.com || Fake. Installs multiple profiles. Sells "premium" cydia for $9.99
|-
| ios-6-1-4-jailbreak.com || Survey scam
|-
| ios-jailbreak.com || Provides fake iOS 9.3 jailbreak tool that includes malware
|-
| ios8jailbreak.org || Fake
|-
| ios8jailbreak.tk || Fake (alternate domain name is ios8-jailbreak.weebly.com)
|-
| ios8jailbreakdownload.net || Survey scam
|-
| ios8pangu.com || Fake, webclip. Wants to install unsigned profile that cannot be removed
|-
| ios9.semijb.com || See semijb.com entry
|-
| iosjailbreakings.com || Fake, sends you to ijailbreaking.com
|-
| iosjailbreakpangu.com || Survey scam. Good copy of real pangu site
|-
| ipadjailbreak3.com || Forwards to jailbreakunlock.org
|-
| ipangu.net || Fake. Passworded zip files
|-
| iphone5break.com || Sells unspecified tool for $49.99
|-
| iphonejailbreakplus.com || Sells evasi0n / redsn0w for $29.95
|-
| iphonejailbreak-unlock.com || Sells unspecified tool for $27.00
|-
| irevert.wordpress.com/ || Claims to be able to downgrade firmware
|-
| i0n1c.com/jailbreak-ios-9.1 || Fake browser-based tool
|-
| jailbreak.cc || Sells jailbreaking tools
|-
| jailbreak-7.com || App Store app download+play time required, artificially inflating its popularity
|-
| jailbreak-absinthe.com || Survey scam
|-
| jailbreak-ios-7.com || Tells people to go to thejailbreakshop.com
|-
| jailbreak-ios7.net || Sells unspecified tools for $29.95 and $39.95
|-
| jailbreak-my-ipad.org || Sells evasi0n / redsn0w for $29.95 '''per month'''
|-
| jailbreak-my-iphone.com || Sells unspecified tool for $29.97
|-
| jailbreak-team.com || Sells an unspecified tool for $29.99
|-
| jailbreak71.com || Fake
|-
| jailbreak7wizz.com || Links to jailbreakthings.com, which in turn links to instajailbreaker.com, which sells unspecified tools for $29.95
|-
| jailbreakandunlock1.pressdoc.com || Blog that is about jailbreak and unlock which uses fake tools.
|-
| jailbreakbj.com || Survey scam
|-
| jailbreakgenie.com || Scam. Sells unspecified jailbreak tool for $9.99
|-
| jailbreakios7untethered.com || Survey scam, all set up in advance for iOS 7
|-
| jailbreakiosnewversion.elitegamershub.com || Survey scam, copied/modified verion of evasi0n7
|-
| jailbreakiphone5s.com || Tells people to go to thejailbreakshop.com
|-
| jailbreakmenow.net || Sells unspecified tools for $19.95, $29.95, and $39.95
|-
| jailbreaknewiphone.com || Survey scam after being strung along downloading a fake tool
|-
| jailbreaktheipad2.com || Sells unspecified tool for $14.95
|-
| jailbreakthings.com || Exists solely to promote instajailbreaker.com, a scam site
|-
| jailbreakunlock.info || Sells unspecified tools for $19.95, $29.95, and $39.95
|-
| jailbreakunlock.org || Sells evasi0n / redsn0w for $14.95
|-
| jailbroke.info || Sells jailbreaking "solutions"
|-
| k33n.mobi || Survey scam
|-
| k33nweb.com || Fake
|-
| latestiphoneunlock.com || Sells an unspecified tool for $9.95 or $29.95
|-
| linxijb.weebly.com || Fake
|-
| newios7jailbreak.com || Directs visitors to unlock-jailbreak.net
|-
| opensn0w.net || Survey scam
|-
| overcast7.com || Survey scam
|-
| pangu8.com || Fake. Installs webclip from semijb.com
|-
| pangu9.mobi || Fake
|-
| pangudownload.com || Fake
|-
| pangu-jailbreak.com || Fake
|-
| pangujailbreak.info || Fake, survey scam, poor things can't even pay their hosting bill :)
|-
| pangujb.blogspot.com || Fake
|-
| pangunow.com || Fake
|-
| pod2gblog.blogspot.com || Copy of pod2g's blog
|-
| p0sixspwn.co || Windows version is a malware downloader that eventually downloads the real [[p0sixspwn]]
|-
| posixspwndownload.com || Copy of [[p0sixspwn]]
|-
| ppjailbreak.com || Copy of [[PPJailbreak]] and copyright infringement
|-
| premiumjailbreak.com || Sells jailbreaking tools
|-
| purpletools.wordpress.com || (and all the other sites/people offering similar stuff) Scam - Claims access to Apple's internal VPN
|-
| redpois0n.net || Survey scam
|-
| red-snow.com || Sells unspecified tools for $29.95 and $39.95
|-
| redsn0w-r9-new.blogspot.com || Survey scam, text is ripped from Dev-Team Blog
|-
| rocky-racoon.com || Survey scam, copy of Dev-Team Blog
|-
| safera1n.com || Sells an unspecified tool for $24.99
|-
| silv3rwind.com || Sells an unspecified tool for $20
|-
| semijb.com || Fake. Does not install "the cydia."
|-
| semirestore.org || Fake redistributions of SemiRestore and SemiRestore7
|-
| spirit-jb.com || Survey scam
|-
| spiritjb.net || Survey scam
|-
| synergyjailbreak.com || Survey scam
|-
| taig8.net || Fake
|-
| taig9.com || Fake
|-
| taig9.mobi || Fake. AppStore app download scheme to boost app rankings and profit scammer via in-app advertising.
|-
| taigremote.com || On-device app-download scam, basically a survey scam
|-
| team7jailbreak.com || On-device survey scam (redirects to 7jailbreak.com). [https://twitter.com/search?q=It%27s%20easy.%20%20Follow%20this%20realy%20simple%20guide%20from%20%40teamjailbreak7&src=typd&f=realtime Known to spam on Twitter]
|-
| theios7jailbreaker.com || Directs people to scam sites (ijailbreakpro.com, appleunlocker.com, ijailbreaktool.com)
|-
| theios8jailbreak.com || Fake
|-
| thejailbreakshop.com || Sells an unspecified tool for $29.97 and $49.97
|-
| trianglejailbreak.com || Sells jailbreaking tool
|-
| u7xjailbreak.com || Survey scam
|-
| unja1l.com || Survey scam
|-
| untetheredjailbreakios8.com || Survey scam
|-
|downloadpangu.org || Fake
|}

== Scam jailbreak and unlock sites ==

{| class="wikitable"
|-
! Domain !! Notes
|-
| appleunlocker.com || Sells unspecified jailbreaking + unlocking software for $19.95
|-
| bestra1n.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| cheapestiphoneunlock.com || Sells unspecified jailbreaking + unlocking software for $9.99
|-
| deblocage-iphone-fr.com || Sells unspecified unlocking software for €29.99
|-
| desbloquear-iphone-pro.com || Sells unspecified unlocking software for €29.99
|-
| e-imeiunlock.com || Survey scam
|-
| easyiphoneunlocking.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| easyunlockiphone.net || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| easyunlockingsolutions.com || Sells unspecified unlocking software for $19.99
|-
| how-jailbreak-iphone.com || Sells unspecified jailbreaking + unlocking software for $19.95
|-
| ih8sn0w.mobi || Sells who knows what for 20 Euros. Quite funny, but don't be a sucker.
|-
| ijailbreakpro.com || Sells redsn0w for $29.90, $39.90, or $49.90
|-
| ijailbreaktool.com || Sells unspecified jailbreaking software for $24.99
|-
| ios7jailbreaker.net || Survey scam
|-
| ios7jailbreak.fr || Survey scam
|-
| iphone-unlocker.org || Survey scam
|-
| iphone5break.com || Sells unspecified jailbreaking + unlocking software for $49.99
|-
| iphone-instant-unlock.com || Sells unspecified unlocking software for $14.95
|-
| iphone-unlock-pro.com || Redirects to unlock4iphone.com, desbloquear-iphone-pro.com, and deblocage-iphone-fr.com
|-
| iphone-unlocker-pro.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| iphone-unlock-me.com || Sells unspecified unlocking software for $14.95
|-
| iphone-unlockme.com || Sells unspecified unlocking software for $14.95
|-
| iphoneunlocker.org.uk || Sells unspecified jailbreaking + unlocking software for £14.99
|-
| iphoneunlockersoftware.com || Sells unspecified jailbreaking + unlocking software for $24.97
|-
| iphoneunlockplus.com || Sells unspecified unlocking software for $22.99
|-
| iphoneunlockwiz.com || Sells unspecified jailbreaking + unlocking software for $29.97
|-
| jailbreakandunlockiphones.com || Glowing reviews of, and links to, scam sites which are mostly offline now
|-
| jailbreakiphone5express.com || Links to ijailbreakpro.com, appleunlocker.com and ijailbreaktool.com
|-
| myappledownload.com || Sells undefined non-existing jailbreaks, unlocks, downgrades for $19.99
|-
| mydowngrade.com || Sells undefined non-existing jailbreaks, unlocks, downgrades for $19.99
|-
| myunlocker.org || On-device survey / app download scam
|-
| officialiphoneunlock.co.uk || Fake
|-
| phoneunlockguy.com || Sells unspecified jailbreaking + unlocking software for $14.95
|-
| solutions-directme.com || Sells unspecified jailbreaking software for $14.95
|-
| superiorsim.com || Sells SIM interposers, reported to be a scam by various websites
|-
| superunlockiphone.com || Sells unspecified jailbreaking + unlocking software for £14.99
|-
| tracyandmatt.co.uk || Refers victims to unlock-jailbreak.net
|-
| transx-solutions.com || Sells software for $14.95 which does not say what it is. Also requires a download
|-
| trusted-iphone-unlocker.com || Sells unspecified jailbreaking + unlocking software for $24.95
|-
| ultimateiphoneunlocker.com || Sells unspecified unlocking software for $19.95
|-
| unlock-your-phones.com || Sells evasi0n as an unlock for €8.99
|-
| unlock-apple-iphone.com || Sells unspecified jailbreaking + unlocking software for $29.99
|-
| unlock-appleiphone.com || Sells IMEI unlocks for ANY carrier (including Singtel, which is factory unlocked, and including Sprint, which is nearly impossible, and certainly not done for that price) for $29.95
|-
| unlock-ijailbreak.net || Added a letter to the URL, otherwise it's the same site as unlock-jailbreak.net
|-
| unlock-iphone.info || Fake. Claims that donating will expedite your request.
|-
| unlock-jailbreak.net || Sells unspecified unlocking software for $24.99
|-
| unlock-jailbreak-iphone.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlock-the-iphone.com || Sells unspecified jailbreaking + unlocking software for $29.95, $37.95, or $49
|-
| unlock4iphone.com || Sells unspecified unlocking software for $29.99
|-
| unlockimeiiphone.com || Sells unspecified jailbreaking + unlocking tool for $19.95
|-
| unlockingfox.com || Survey scam
|-
| unlockiphone.net || Sells unspecified jailbreaking + unlocking tool
|-
| unlockiphone.org || Sells unspecified unlocking software for $24.95
|-
| unlockiphoneios5.com || Sells unspecified jailbreaking + unlocking software for $14.95
|-
| unlockiphonenow.org || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockiphonepro.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockjailbreaktool.com || Sells unspecified jailbreaking + unlocking software for $24.99
|-
| unlockmecentral.com || Sells jailbreaking "membership"
|-
| ultrasn0wtool.com || Claims to unlock via a GUI app
|-
| ziphone.org || Directs visitors to iphone-unlocker-pro.com
|}

Scam Jailbreaks and Unlocks

2016-07-29T11:59:21Z

Nullpixel: Added http://www.downloadpangu.org