The iPhone Wiki - User contributions [en]

PHaseBanDowngrader

2009-04-13T00:05:30Z

PH:

==About==
pHaseBanDowngrader is a tool that allows the user to downgrade your Baseband from 02.30.03 to 02.28.00 in [[iPhone 3G]] with the [[Baseband Bootloader]] 5.8 (The tool do not work with the Bootloader 5.9).
It was based on [[Geohot]] exploit.

==Credits==
All the credits go to pH. Thanks for EvilPenguin|

==README==
pHaseBanDowngrader - by Pedro Henrique Cavallieri Franceschi.
(a.k.a. pH).

_____________________________________________________________
Português:

Para rodar o pHaseBanDowngrader, conecte via SSH ao seu iPhone e copie a pasta baixada (phasebandowngrader) para dentro da pasta "/Applications" no seu iPhone.
OBS: A pasta TEM que se chamar phasebandowngrader, com letras minúsculas!

Para rodá-lo, entre no MobileTerminal e digite "login". O usuário é "root" e a senha é "alpine" por padrão. Depois, digite: "cd /Applications/phasebandowngrader/" e, em seguida, por final, para rodar o downgrader, digite "./phasebandowngrader".

Para checar a versão do seu Bootloader, mais informações aqui:
http://www.theiphonewiki.com/wiki/index.php?title=Baseband_Commands

(rode o at+xgendata no minicom)

_____________________________________________________________
English:

To run the pHaseBanDowngrader, connect via SSH to your iPhone and copy the downloaded folder (phasebandowngrader) into the folder "/Applications" on your iPhone.
Note: The folder MUST named phasebandowngrader with lowercase letters!

To run it, open MobileTerminal and type "login". The user is "root" and password is "alpine" by default. Then type: "cd / Applications/phasebandowngrader/", then, to run the downgrader, type "./phasebandowngrader"

To check your bootloader version, visit:
http://www.theiphonewiki.com/wiki/index.php?title=Baseband_Commands

(run at+xgendata in minicom)

_____________________________________________________________

Copyright (C) - 2009
iBlogeek.com - Todos os direitos reservados
All rights reserved.

By pH - 12/04/2009

==Download links==
* [http://tinyurl.com/phasebandowngrader10 MediaFire]

PHaseBanDowngrader

2009-04-13T00:05:15Z

PH:

==About==
pHaseBanDowngrader is a tool that allows the user to downgrade your Baseband from 02.30.03 to 02.28.00 in [[iPhone 3G]] with the [[Baseband Bootloader]] 5.8 (The tool do not work with the Bootloader 5.9).
It was based on [[Geohot]] exploit.

==Credits
All the credits go to pH. Thanks for EvilPenguin|

==README==
pHaseBanDowngrader - by Pedro Henrique Cavallieri Franceschi.
(a.k.a. pH).

_____________________________________________________________
Português:

Para rodar o pHaseBanDowngrader, conecte via SSH ao seu iPhone e copie a pasta baixada (phasebandowngrader) para dentro da pasta "/Applications" no seu iPhone.
OBS: A pasta TEM que se chamar phasebandowngrader, com letras minúsculas!

Para rodá-lo, entre no MobileTerminal e digite "login". O usuário é "root" e a senha é "alpine" por padrão. Depois, digite: "cd /Applications/phasebandowngrader/" e, em seguida, por final, para rodar o downgrader, digite "./phasebandowngrader".

Para checar a versão do seu Bootloader, mais informações aqui:
http://www.theiphonewiki.com/wiki/index.php?title=Baseband_Commands

(rode o at+xgendata no minicom)

_____________________________________________________________
English:

To run the pHaseBanDowngrader, connect via SSH to your iPhone and copy the downloaded folder (phasebandowngrader) into the folder "/Applications" on your iPhone.
Note: The folder MUST named phasebandowngrader with lowercase letters!

To run it, open MobileTerminal and type "login". The user is "root" and password is "alpine" by default. Then type: "cd / Applications/phasebandowngrader/", then, to run the downgrader, type "./phasebandowngrader"

To check your bootloader version, visit:
http://www.theiphonewiki.com/wiki/index.php?title=Baseband_Commands

(run at+xgendata in minicom)

_____________________________________________________________

Copyright (C) - 2009
iBlogeek.com - Todos os direitos reservados
All rights reserved.

By pH - 12/04/2009

==Download links==
* [http://tinyurl.com/phasebandowngrader10 MediaFire]

PHaseBanDowngrader

2009-04-12T22:47:31Z

PH:

==About==
pHaseBanDowngrader is a tool that allows the user to downgrade your Baseband from 02.30.03 to 02.28.00 in [[iPhone 3G]] with the [[Baseband Bootloader]] 5.8 (The tool do not work with the Bootloader 5.9).
It was based on [[Geohot]] exploit and was implemented by pH.

==README==
pHaseBanDowngrader - by Pedro Henrique Cavallieri Franceschi.
(a.k.a. pH).

_____________________________________________________________
Português:

Para rodar o pHaseBanDowngrader, conecte via SSH ao seu iPhone e copie a pasta baixada (phasebandowngrader) para dentro da pasta "/Applications" no seu iPhone.
OBS: A pasta TEM que se chamar phasebandowngrader, com letras minúsculas!

Para rodá-lo, entre no MobileTerminal e digite "login". O usuário é "root" e a senha é "alpine" por padrão. Depois, digite: "cd /Applications/phasebandowngrader/" e, em seguida, por final, para rodar o downgrader, digite "./phasebandowngrader".

Para checar a versão do seu Bootloader, mais informações aqui:
http://www.theiphonewiki.com/wiki/index.php?title=Baseband_Commands

(rode o at+xgendata no minicom)

_____________________________________________________________
English:

To run the pHaseBanDowngrader, connect via SSH to your iPhone and copy the downloaded folder (phasebandowngrader) into the folder "/Applications" on your iPhone.
Note: The folder MUST named phasebandowngrader with lowercase letters!

To run it, open MobileTerminal and type "login". The user is "root" and password is "alpine" by default. Then type: "cd / Applications/phasebandowngrader/", then, to run the downgrader, type "./phasebandowngrader"

To check your bootloader version, visit:
http://www.theiphonewiki.com/wiki/index.php?title=Baseband_Commands

(run at+xgendata in minicom)

_____________________________________________________________

Copyright (C) - 2009
iBlogeek.com - Todos os direitos reservados
All rights reserved.

By pH - 12/04/2009

==Download links==
* [http://tinyurl.com/phasebandowngrader10 MediaFire]

PHaseBanDowngrader

2009-04-12T22:47:06Z

PH: New page: ==About== pHaseBanDowngrader is a tool that allows the user to downgrade your Baseband from 02.30.03 to 02.28.00 in iPhone 3G with the Baseband Bootloader 5.8 (The tool do not work...

==About==
pHaseBanDowngrader is a tool that allows the user to downgrade your Baseband from 02.30.03 to 02.28.00 in [[iPhone 3G]] with the [[Baseband Bootloader]] 5.8 (The tool do not work with the Bootloader 5.9).
It was based on [[Geohot]] exploit and was implemented by pH.

==README==
pHaseBanDowngrader - by Pedro Henrique Cavallieri Franceschi.
(a.k.a. pH).
_____________________________________________________________
Português:

Para rodar o pHaseBanDowngrader, conecte via SSH ao seu iPhone e copie a pasta baixada (phasebandowngrader) para dentro da pasta "/Applications" no seu iPhone.
OBS: A pasta TEM que se chamar phasebandowngrader, com letras minúsculas!

Para rodá-lo, entre no MobileTerminal e digite "login". O usuário é "root" e a senha é "alpine" por padrão. Depois, digite: "cd /Applications/phasebandowngrader/" e, em seguida, por final, para rodar o downgrader, digite "./phasebandowngrader".

Para checar a versão do seu Bootloader, mais informações aqui:
http://www.theiphonewiki.com/wiki/index.php?title=Baseband_Commands

(rode o at+xgendata no minicom)

_____________________________________________________________
English:

To run the pHaseBanDowngrader, connect via SSH to your iPhone and copy the downloaded folder (phasebandowngrader) into the folder "/Applications" on your iPhone.
Note: The folder MUST named phasebandowngrader with lowercase letters!

To run it, open MobileTerminal and type "login". The user is "root" and password is "alpine" by default. Then type: "cd / Applications/phasebandowngrader/", then, to run the downgrader, type "./phasebandowngrader"

To check your bootloader version, visit:
http://www.theiphonewiki.com/wiki/index.php?title=Baseband_Commands

(run at+xgendata in minicom)

_____________________________________________________________
Copyright (C) - 2009
iBlogeek.com - Todos os direitos reservados
All rights reserved.

By pH - 12/04/2009

==Download links==
* [http://tinyurl.com/phasebandowngrader10 MediaFire]

Baseband Bootloader

2009-04-12T22:39:38Z

PH:

The baseband bootloader is the code which runs before the baseband FW, it is responsible for signature checking and updating the baseband. See also [[bootloader]].

==Revisions==
===3.9===
This is the old bootloader from the [[iPhone]]/[[S-Gold 2]]. It is vulnerable to [[Minus 0x400]] and [[IPSF]]

===4.6===
This is the new bootloader from the [[iPhone]]/[[S-Gold 2]]. It is vulnerable to [[Minus 0x20000 with Back Extend Erase]]

===5.8===
This is the bootloader from the [[iPhone 3G]]/[[X-Gold 608]]. It is, in contrast to 3.9 and 4.6, sig checked on startup. There is an exploit where the main fw cert is passed with the loader instead of the loader cert, and it checks the main firmware instead, allowing you to upload unsigned loader code. This has been fixed in 5.9. You can downgrade from 02.30.03 to 02.28.00 using [[pHaseBanDowngrader]] (by pH) in the Bootloader 5.8.

DWD_ICE2_SECURE_BOOTLOADER/Secure_ICE2_Bootloader.5.8.fls.

===5.9===
This is the latest bootloader of [[iPhone 3G]]/[[X-Gold 608]]. Still has no known exploits and it was released as soon as Apple knew [[iPhone Dev Team]] could downgrade their iPhone 3G baseband from 1.48 to 1.45. Now, all the iPhone 3G has bootloader 5.9.

DWD_ICE2_SECURE_BOOTLOADER/Secure_ICE2_Bootloader.5.9.fls

Baseband Commands

2009-04-11T19:51:29Z

PH:

==About==
In this page, you'll find some Baseband Commands. You can use them with Minicom 2.2, that can be found on Cydia.

==Setting up Minicom 2.2==
After installing Minicom from Cydia, SSH into your iPhone and then, type: ''minicom -s''.

Now, select ''Serial Port Setup'' in the Menu and press Enter. Then, press "a" and set Serial Device to ''/dev/tty.debug''.

Press Esc, and in the Main Menu, select ''Save setup as dfl''. Now, select "exit".

'''Note''': minicom does not work on MobileTerminal.

==Running Minicom==
To run minicom, is pretty simple: just type "minicom -w".

==How to run Baseband Commands==

Here is the list that me (pH) and EvilPenguin are doing of Baseband Commands.

First, run Minicom. Then, type "at" and press Enter. Then, you can type the command that you want, have fun.

==Baseband Commands==

'''at+xgendata''': Display some baseband informations

'''at&v''': Display the profiles in the Baseband (Active Profile, Stored Profile 0 and Stored Profile 1)

'''at+clac''': Show some baseband commands

'''at&h''': Show more Baseband Commands

Baseband Commands

2009-04-11T19:41:44Z

PH:

==About==
In this page, you'll find some Baseband Commands. You can use them with Minicom 2.2, that can be found on Cydia.

==Setting up Minicom 2.2==
After installing Minicom from Cydia, SSH into your iPhone and then, type: ''minicom -s''.

Now, select ''Serial Port Setup'' in the Menu and press Enter. Then, press "a" and set Serial Device to ''/dev/tty.debug''.

Press Esc, and in the Main Menu, select ''Save setup as dfl''. Now, select "exit".

==Running Minicom==
To run minicom, is pretty simple: just type "minicom -w".

==How to run Baseband Commands==

Here is the list that me (pH) and EvilPenguin are doing of Baseband Commands.

First, run Minicom. Then, type "at" and press Enter. Then, you can type the command that you want, have fun.

==Baseband Commands==

'''at+xgendata''': Display some baseband informations

'''at&v''': Display the profiles in the Baseband (Active Profile, Stored Profile 0 and Stored Profile 1)

'''at+clac''': Show some baseband commands

'''at&h''': Show more Baseband Commands

Baseband Commands

2009-04-11T19:09:33Z

PH:

==About==
In this page, you'll find some Baseband Commands. You can use them with Minicom 2.2, that can be found on Cydia.

==Setting up Minicom 2.2==
After installing Minicom from Cydia, SSH into your iPhone and then, type: ''minicom -s''.

Now, select ''Serial Port Setup'' in the Menu and press Enter. Then, press "a" and set Serial Device to ''/dev/tty.debug''.

Press Esc, and in the Main Menu, select ''Save setup as dfl''. Now, select "exit".

==Running Minicom==
To run minicom, is pretty simple: just type "minicom".

==How to run Baseband Commands==

Here is the list that me (pH) and EvilPenguin are doing of Baseband Commands.

First, run Minicom. Then, type "at" and press Enter. Then, you can type the command that you want, have fun.

==Baseband Commands==

'''at+xgendata''': Display some baseband informations

'''at&v''': Display the profiles in the Baseband (Active Profile, Stored Profile 0 and Stored Profile 1)

'''at+clac''': Show some baseband commands

'''at&h''': Show more Baseband Commands

Baseband Device

2009-04-11T19:08:19Z

PH:

This is the device in the iPhone that manages all the functions which require an antenna. The baseband processor has its own RAM and firmware in NOR flash, separate from the ARM core resources. The baseband is a resource to the OS. The Wi-Fi and bluetooth are managed by the main CPU, although the baseband stores their MAC addresses in it's NVRAM.

The [[iPhone]]'s baseband processor is the [[S-Gold 2]] and the [[iPhone 3G]] makes use of the [[X-Gold 608]] chip for this purpose.

You can check some [[Baseband Commands]] too (by pH and EvilPenguin)

==Seczone==
This is the area in the baseband where the lock state is stored.

===Layout===
0x400--NCK token
0xB00--IMEI
0xB10--IMEI signature
0xC00--Locks table

===Encryption===
Many of the sections are encrypted using TEA based off the CHIPID and NORID. See [[NCK Brute Force]] for more info.

==Exploits==
* [[SIM hacks]]
* [[Fakeblank|Hardware Fakeblank]]
* [[IPSF]]
* [[Minus 0x400]]
* [[Jerrysim]]
* [[Minus 0x20000 with Back Extend Erase]]
* [[yellowsn0w]]

==Theoretical Attacks==
* [[NCK Brute Force]]
* [[Baseband JTAG]]

==Boot Chain==
[[Baseband Bootrom|bootrom]]->[[Baseband Bootloader|bootloader]]->[[Baseband Firmware|firmware]]

Baseband Commands

2009-04-11T19:07:14Z

PH:

==About==
In this page, you'll find some Baseband Commands. You can use them with Minicom 2.2, that can be found on Cydia.

==Setting up Minicom 2.2==
After installing Minicom from Cydia, SSH into your iPhone and then, type: ''minicom -s''.

Now, select ''Serial Port Setup'' in the Menu and press Enter. Then, press "a" and set Serial Device to ''/dev/tty.debug''.

Press Esc, and in the Main Menu, select ''Save setup as dfl''. Now, select "exit".

==Running Minicom==
To run minicom, is pretty simple: just type "minicom".

==How to run Baseband Commands==

Here is the list that me (pH) and EvilPenguin are doing of Baseband Commands.

First, run Minicom. Then, type "at" and press Enter. Then, you can type the command that you want, have fun.

==Baseband Commands==

'''at+xgendata''': Display some baseband informations

""at&v"": Display the profiles in the Baseband (Active Profile, Stored Profile 0 and Stored Profile 1)

""at+clac"": Show some baseband commands

""at&h"": Show more Baseband Commands

Baseband Commands

2009-04-11T19:06:55Z

PH:

==About==
In this page, you'll find some Baseband Commands. You can use them with Minicom 2.2, that can be found on Cydia.

==Setting up Minicom 2.2==
After installing Minicom from Cydia, SSH into your iPhone and then, type: ''minicom -s''.

Now, select ''Serial Port Setup'' in the Menu and press Enter. Then, press "a" and set Serial Device to ''/dev/tty.debug''.

Press Esc, and in the Main Menu, select ''Save setup as dfl''. Now, select "exit".

==Running Minicom==
To run minicom, is pretty simple: just type "minicom".

==How to run Baseband Commands==

Here is the list that me (pH) and EvilPenguin are doing of Baseband Commands.

First, run Minicom. Then, type "at" and press Enter. Then, you can type the command that you want, have fun.

==Baseband Commands==

'''at+xgendata''': Display some baseband informations

'''at&v''': Display the profiles in the Baseband (Active Profile, Stored Profile 0 and Stored Profile 1)

'''at+clac''': Show some baseband commands

'''at&h''': Show more Baseband Commands

Baseband Commands

2009-04-11T19:06:17Z

PH:

==About==
In this page, you'll find some Baseband Commands. You can use them with Minicom 2.2, that can be found on Cydia.

==Setting up Minicom 2.2==
After installing Minicom from Cydia, SSH into your iPhone and then, type: ''minicom -s''.

Now, select ''Serial Port Setup'' in the Menu and press Enter. Then, press "a" and set Serial Device to ''/dev/tty.debug''.

Press Esc, and in the Main Menu, select ''Save setup as dfl''. Now, select "exit".

==Running Minicom==
To run minicom, is pretty simple: just type "minicom".

==How to run Baseband Commands==

Here is the list that me (pH) and EvilPenguin are doing of Baseband Commands.

First, run Minicom. Then, type "at" and press Enter. Then, you can type the command that you want, have fun.

==Baseband Commands==

'''at+xgendata''': Display some baseband informations

''''at&v'''': Display the profiles in the Baseband (Active Profile, Stored Profile 0 and Stored Profile 1)

''''at+clac'''': Show some baseband commands

''''at&h'''': Show more Baseband Commands

Baseband Commands

2009-04-11T19:05:38Z

PH: New page: ==About== In this page, you'll find some Baseband Commands. You can use them with Minicom 2.2, that can be found on Cydia. ==Setting up Minicom 2.2== After installing Minicom from Cydia, ...

==About==
In this page, you'll find some Baseband Commands. You can use them with Minicom 2.2, that can be found on Cydia.

==Setting up Minicom 2.2==
After installing Minicom from Cydia, SSH into your iPhone and then, type: ''minicom -s''.

Now, select ''Serial Port Setup'' in the Menu and press Enter. Then, press "a" and set Serial Device to ''/dev/tty.debug''.

Press Esc, and in the Main Menu, select ''Save setup as dfl''. Now, select "exit".

==Running Minicom==
To run minicom, is pretty simple: just type "minicom".

==How to run Baseband Commands==

Here is the list that me (pH) and EvilPenguin are doing of Baseband Commands.

First, run Minicom. Then, type "at" and press Enter. Then, you can type the command that you want, have fun.

==Baseband Commands==

'''at+xgendata''': Display some baseband informations

""at&v"": Display the profiles in the Baseband (Active Profile, Stored Profile 0 and Stored Profile 1)

""at+clac"": Show some baseband commands

""at&h"": Show more Baseband Commands

Baseband Device

2009-04-11T18:51:39Z

PH:

This is the device in the iPhone that manages all the functions which require an antenna. The baseband processor has its own RAM and firmware in NOR flash, separate from the ARM core resources. The baseband is a resource to the OS. The Wi-Fi and bluetooth are managed by the main CPU, although the baseband stores their MAC addresses in it's NVRAM.

The [[iPhone]]'s baseband processor is the [[S-Gold 2]] and the [[iPhone 3G]] makes use of the [[X-Gold 608]] chip for this purpose.

Here, you can find some [[Baseband Commands]] (by pH and EvilPenguin)

==Seczone==
This is the area in the baseband where the lock state is stored.

===Layout===
0x400--NCK token
0xB00--IMEI
0xB10--IMEI signature
0xC00--Locks table

===Encryption===
Many of the sections are encrypted using TEA based off the CHIPID and NORID. See [[NCK Brute Force]] for more info.

==Exploits==
* [[SIM hacks]]
* [[Fakeblank|Hardware Fakeblank]]
* [[IPSF]]
* [[Minus 0x400]]
* [[Jerrysim]]
* [[Minus 0x20000 with Back Extend Erase]]
* [[yellowsn0w]]

==Theoretical Attacks==
* [[NCK Brute Force]]
* [[Baseband JTAG]]

==Boot Chain==
[[Baseband Bootrom|bootrom]]->[[Baseband Bootloader|bootloader]]->[[Baseband Firmware|firmware]]

IDroid

2009-02-18T23:02:54Z

PH:

[[Image:Openiboot.png|thumb|right|200px|Device running the OpeniBoot console.]]
[http://iphonelinux.org iPhonelinux] is a project which goals are to port linux on the iPhone and make a Free (free software) OS alternative to the Apple proprietary "[http://en.wikipedia.org/wiki/IPhone_OS iPhone OS]".

iPhonelinux is not actually a hack/exploit neither an unlock, but it is based on the [[Pwnage]] exploit.

There are three steps in the iPhonelinux roadmap : OpeniBoot, linux kernel and long term (GUI, phone...)

== OpeniBoot ==
The Goals of OpeniBoot is to run low-level code, to have low and critical drivers (nand and nor driver, NVRAM...), debugger and development environment (chainloading, upgrading itself and USB mass storage).

== Linux ==
A linux Bootloader, a working linux kernel (just a question of cross-compiler), porting drivers, run wifi and command line thru SSH.

== Long-Term Plans ==
Multi-touch driver, Baseband driver, port X server and create an SDK.
Then have a viable alternative of the iPhone OS.

== Binaries ==

These are utility binaries precompiled on Ubuntu 8.10. They require:

- libpthread
- libncurses
- libusb
- libreadline

You may elect to build them from source by pulling from
iphonelinux/openiboot's git repository.

== Disclaimer ==

BE WARNED THAT THESE STEPS ARE NOT INTENDED FOR NOVICES. YOU ATTEMPT THIS AT
YOUR OWN RISK. AT THIS TIME, WE CANNOT AFFORD THE EFFORT REQUIRED TO GIVE
SUPPORT TO NOVICES AND/OR RESCUE THEM FROM THEIR OWN ACTIONS.

Although unlikely, if the installation goes wrong, you may have to perform a
DFU restore on your iPhone. If you do not know how to do that, you should not
follow these steps. You should also know how to use iRecovery (or similar) and
the fsboot command to "kick an iPhone out of recovery mode". If you do not
know how to do that, you should not follow these steps.

The installation of openiboot itself is safe, but openiboot has the facility
to erase device-specific information from your NOR flash. If you did not make
a backup, and execute the commands necessary to make openiboot erase that
information, it is gone forever and your device may never boot properly again.

The instructions below will show you how to make such a backup before any
changes are made.

== Installing OpeniBoot ==

1. Put your iPhone in [[Recovery Mode]].

2. sudo ./loadibec openiboot-2g.img3, or -3g, -ipod, depending on your platform.

3. sudo ./oibc

4. nor_read 0x09000000 0x0 1048576

5. ~norbackup.dump:1048576. This will create a file called norbackup.dump in your current directory. GUARD IT WITH YOUR LIFE.

6. install

7. After 'install' has finished, type in: reboot.

8. You ought to see the openiboot menu.

===See===
* [[QuickOIB]]

== Booting Linux ==

Use the Hold button to navigate the menu. Push the Home button
when openiboot client is selected.
sudo ./oibc
!zImage
kernel
!rootfs.arm.ext2.gz
ramdisk 3588
boot "console=tty console=ttyUSB root=/dev/ram0 rw"
sudo ./linux

You should now get a login prompt. Nothing that's happening will show up on
the LCD automatically, but you can redirect it to the display with the
following command:

sh 2>&1 > /dev/tty0

Enjoy!

== iPhone Linux Resources ==

- Framebuffer driver
- Serial driver
- Serial over USB driver
- Interrupts, MMU, clock, etc.

=== OpeniBoot Resources ===

- Read-only support for the NAND

=== OpeniBoot Missing Resources ===

- Write support for the NAND
- Wireless networking
- Touchscreen
- Sound
- Accelerometer
- Baseband support

===QuickOIB===

[[QuickOIB]] is a tool that allows the user to temporarily install OpeniBoot in a device.
It was developed by pH and work perfectly with Mac OS X and Ubuntu 8.10

=== Support ===

The current userland we're using, in the interest of expedience, is a Busybox installation created with buildroot, but glibc works fine as well, and we're going to build a more permanent userland solution.

A demonstration video can be seen here: http://www.vimeo.com/2373142

Download here: http://localhostr.com/files/b00133/iphonelinux-demo.tar.gz

Project leader: '''planetbeing'''

Contributors: '''CPICH, cmw, poorlad, ius, saurik'''

If you're experienced with '''hacking/porting Linux''' and especially if you're experienced with porting '''Android''', I'd definitely like to hear from you. Come chill in the ''#iphonelinux'' channel on ''irc.osx86.hu'' . If you're not experienced, and still want to help, you can digg/slashdot this posting to heaven so our little project gets more visibility. Thanks. :)

IDroid

2009-02-18T23:02:11Z

PH:

[[Image:Openiboot.png|thumb|right|200px|Device running the OpeniBoot console.]]
[http://iphonelinux.org iPhonelinux] is a project which goals are to port linux on the iPhone and make a Free (free software) OS alternative to the Apple proprietary "[http://en.wikipedia.org/wiki/IPhone_OS iPhone OS]".

iPhonelinux is not actually a hack/exploit neither an unlock, but it is based on the [[Pwnage]] exploit.

There are three steps in the iPhonelinux roadmap : OpeniBoot, linux kernel and long term (GUI, phone...)

== OpeniBoot ==
The Goals of OpeniBoot is to run low-level code, to have low and critical drivers (nand and nor driver, NVRAM...), debugger and development environment (chainloading, upgrading itself and USB mass storage).

== Linux ==
A linux Bootloader, a working linux kernel (just a question of cross-compiler), porting drivers, run wifi and command line thru SSH.

== Long-Term Plans ==
Multi-touch driver, Baseband driver, port X server and create an SDK.
Then have a viable alternative of the iPhone OS.

== Binaries ==

These are utility binaries precompiled on Ubuntu 8.10. They require:

- libpthread
- libncurses
- libusb
- libreadline

You may elect to build them from source by pulling from
iphonelinux/openiboot's git repository.

== Disclaimer ==

BE WARNED THAT THESE STEPS ARE NOT INTENDED FOR NOVICES. YOU ATTEMPT THIS AT
YOUR OWN RISK. AT THIS TIME, WE CANNOT AFFORD THE EFFORT REQUIRED TO GIVE
SUPPORT TO NOVICES AND/OR RESCUE THEM FROM THEIR OWN ACTIONS.

Although unlikely, if the installation goes wrong, you may have to perform a
DFU restore on your iPhone. If you do not know how to do that, you should not
follow these steps. You should also know how to use iRecovery (or similar) and
the fsboot command to "kick an iPhone out of recovery mode". If you do not
know how to do that, you should not follow these steps.

The installation of openiboot itself is safe, but openiboot has the facility
to erase device-specific information from your NOR flash. If you did not make
a backup, and execute the commands necessary to make openiboot erase that
information, it is gone forever and your device may never boot properly again.

The instructions below will show you how to make such a backup before any
changes are made.

== Installing OpeniBoot ==

1. Put your iPhone in [[Recovery Mode]].

2. sudo ./loadibec openiboot-2g.img3, or -3g, -ipod, depending on your platform.

3. sudo ./oibc

4. nor_read 0x09000000 0x0 1048576

5. ~norbackup.dump:1048576. This will create a file called norbackup.dump in your current directory. GUARD IT WITH YOUR LIFE.

6. install

7. After 'install' has finished, type in: reboot.

8. You ought to see the openiboot menu.

===See===
* [[QuickOIB]]

== Booting Linux ==

Use the Hold button to navigate the menu. Push the Home button
when openiboot client is selected.
sudo ./oibc
!zImage
kernel
!rootfs.arm.ext2.gz
ramdisk 3588
boot "console=tty console=ttyUSB root=/dev/ram0 rw"
sudo ./linux

You should now get a login prompt. Nothing that's happening will show up on
the LCD automatically, but you can redirect it to the display with the
following command:

sh 2>&1 > /dev/tty0

Enjoy!

== iPhone Linux Resources ==

- Framebuffer driver
- Serial driver
- Serial over USB driver
- Interrupts, MMU, clock, etc.

=== OpeniBoot Resources ===

- Read-only support for the NAND

=== OpeniBoot Missing Resources ===

- Write support for the NAND
- Wireless networking
- Touchscreen
- Sound
- Accelerometer
- Baseband support

===QuickOIB===

[[QuickOIB]] is a tool that allows the user to temporarily install OpeniBoot in a device.
It was developed by pH it's working perfectly in Mac OS X and Ubuntu 8.10

=== Support ===

The current userland we're using, in the interest of expedience, is a Busybox installation created with buildroot, but glibc works fine as well, and we're going to build a more permanent userland solution.

A demonstration video can be seen here: http://www.vimeo.com/2373142

Download here: http://localhostr.com/files/b00133/iphonelinux-demo.tar.gz

Project leader: '''planetbeing'''

Contributors: '''CPICH, cmw, poorlad, ius, saurik'''

If you're experienced with '''hacking/porting Linux''' and especially if you're experienced with porting '''Android''', I'd definitely like to hear from you. Come chill in the ''#iphonelinux'' channel on ''irc.osx86.hu'' . If you're not experienced, and still want to help, you can digg/slashdot this posting to heaven so our little project gets more visibility. Thanks. :)

IDroid

2009-02-18T23:01:30Z

PH:

[[Image:Openiboot.png|thumb|right|200px|Device running the OpeniBoot console.]]
[http://iphonelinux.org iPhonelinux] is a project which goals are to port linux on the iPhone and make a Free (free software) OS alternative to the Apple proprietary "[http://en.wikipedia.org/wiki/IPhone_OS iPhone OS]".

iPhonelinux is not actually a hack/exploit neither an unlock, but it is based on the [[Pwnage]] exploit.

There are three steps in the iPhonelinux roadmap : OpeniBoot, linux kernel and long term (GUI, phone...)

== OpeniBoot ==
The Goals of OpeniBoot is to run low-level code, to have low and critical drivers (nand and nor driver, NVRAM...), debugger and development environment (chainloading, upgrading itself and USB mass storage).

== Linux ==
A linux Bootloader, a working linux kernel (just a question of cross-compiler), porting drivers, run wifi and command line thru SSH.

== Long-Term Plans ==
Multi-touch driver, Baseband driver, port X server and create an SDK.
Then have a viable alternative of the iPhone OS.

== Binaries ==

These are utility binaries precompiled on Ubuntu 8.10. They require:

- libpthread
- libncurses
- libusb
- libreadline

You may elect to build them from source by pulling from
iphonelinux/openiboot's git repository.

== Disclaimer ==

BE WARNED THAT THESE STEPS ARE NOT INTENDED FOR NOVICES. YOU ATTEMPT THIS AT
YOUR OWN RISK. AT THIS TIME, WE CANNOT AFFORD THE EFFORT REQUIRED TO GIVE
SUPPORT TO NOVICES AND/OR RESCUE THEM FROM THEIR OWN ACTIONS.

Although unlikely, if the installation goes wrong, you may have to perform a
DFU restore on your iPhone. If you do not know how to do that, you should not
follow these steps. You should also know how to use iRecovery (or similar) and
the fsboot command to "kick an iPhone out of recovery mode". If you do not
know how to do that, you should not follow these steps.

The installation of openiboot itself is safe, but openiboot has the facility
to erase device-specific information from your NOR flash. If you did not make
a backup, and execute the commands necessary to make openiboot erase that
information, it is gone forever and your device may never boot properly again.

The instructions below will show you how to make such a backup before any
changes are made.

== Installing OpeniBoot ==

1. Put your iPhone in [[Recovery Mode]].

2. sudo ./loadibec openiboot-2g.img3, or -3g, -ipod, depending on your platform.

3. sudo ./oibc

4. nor_read 0x09000000 0x0 1048576

5. ~norbackup.dump:1048576. This will create a file called norbackup.dump in your current directory. GUARD IT WITH YOUR LIFE.

6. install

7. After 'install' has finished, type in: reboot.

8. You ought to see the openiboot menu.

===See===
* [[QuickOIB]]

== Booting Linux ==

Use the Hold button to navigate the menu. Push the Home button
when openiboot client is selected.
sudo ./oibc
!zImage
kernel
!rootfs.arm.ext2.gz
ramdisk 3588
boot "console=tty console=ttyUSB root=/dev/ram0 rw"
sudo ./linux

You should now get a login prompt. Nothing that's happening will show up on
the LCD automatically, but you can redirect it to the display with the
following command:

sh 2>&1 > /dev/tty0

Enjoy!

== iPhone Linux Resources ==

- Framebuffer driver
- Serial driver
- Serial over USB driver
- Interrupts, MMU, clock, etc.

=== OpeniBoot Resources ===

- Read-only support for the NAND

=== OpeniBoot Missing Resources ===

- Write support for the NAND
- Wireless networking
- Touchscreen
- Sound
- Accelerometer
- Baseband support

===QuickOIB===
[[QuickOiB]] is a tool that allows the user to temporarily install OpeniBoot in a device.
It was developed by pH it's working perfectly in Mac OS X and Ubuntu 8.10

=== Support ===

The current userland we're using, in the interest of expedience, is a Busybox installation created with buildroot, but glibc works fine as well, and we're going to build a more permanent userland solution.

A demonstration video can be seen here: http://www.vimeo.com/2373142

Download here: http://localhostr.com/files/b00133/iphonelinux-demo.tar.gz

Project leader: '''planetbeing'''

Contributors: '''CPICH, cmw, poorlad, ius, saurik'''

If you're experienced with '''hacking/porting Linux''' and especially if you're experienced with porting '''Android''', I'd definitely like to hear from you. Come chill in the ''#iphonelinux'' channel on ''irc.osx86.hu'' . If you're not experienced, and still want to help, you can digg/slashdot this posting to heaven so our little project gets more visibility. Thanks. :)

IDroid

2009-02-18T23:00:58Z

PH:

[[Image:Openiboot.png|thumb|right|200px|Device running the OpeniBoot console.]]
[http://iphonelinux.org iPhonelinux] is a project which goals are to port linux on the iPhone and make a Free (free software) OS alternative to the Apple proprietary "[http://en.wikipedia.org/wiki/IPhone_OS iPhone OS]".

iPhonelinux is not actually a hack/exploit neither an unlock, but it is based on the [[Pwnage]] exploit.

There are three steps in the iPhonelinux roadmap : OpeniBoot, linux kernel and long term (GUI, phone...)

== OpeniBoot ==
The Goals of OpeniBoot is to run low-level code, to have low and critical drivers (nand and nor driver, NVRAM...), debugger and development environment (chainloading, upgrading itself and USB mass storage).

== Linux ==
A linux Bootloader, a working linux kernel (just a question of cross-compiler), porting drivers, run wifi and command line thru SSH.

== Long-Term Plans ==
Multi-touch driver, Baseband driver, port X server and create an SDK.
Then have a viable alternative of the iPhone OS.

== Binaries ==

These are utility binaries precompiled on Ubuntu 8.10. They require:

- libpthread
- libncurses
- libusb
- libreadline

You may elect to build them from source by pulling from
iphonelinux/openiboot's git repository.

== Disclaimer ==

BE WARNED THAT THESE STEPS ARE NOT INTENDED FOR NOVICES. YOU ATTEMPT THIS AT
YOUR OWN RISK. AT THIS TIME, WE CANNOT AFFORD THE EFFORT REQUIRED TO GIVE
SUPPORT TO NOVICES AND/OR RESCUE THEM FROM THEIR OWN ACTIONS.

Although unlikely, if the installation goes wrong, you may have to perform a
DFU restore on your iPhone. If you do not know how to do that, you should not
follow these steps. You should also know how to use iRecovery (or similar) and
the fsboot command to "kick an iPhone out of recovery mode". If you do not
know how to do that, you should not follow these steps.

The installation of openiboot itself is safe, but openiboot has the facility
to erase device-specific information from your NOR flash. If you did not make
a backup, and execute the commands necessary to make openiboot erase that
information, it is gone forever and your device may never boot properly again.

The instructions below will show you how to make such a backup before any
changes are made.

== Installing OpeniBoot ==

1. Put your iPhone in [[Recovery Mode]].

2. sudo ./loadibec openiboot-2g.img3, or -3g, -ipod, depending on your platform.

3. sudo ./oibc

4. nor_read 0x09000000 0x0 1048576

5. ~norbackup.dump:1048576. This will create a file called norbackup.dump in your current directory. GUARD IT WITH YOUR LIFE.

6. install

7. After 'install' has finished, type in: reboot.

8. You ought to see the openiboot menu.

===See===
* [[QuickOIB]]

== Booting Linux ==

Use the Hold button to navigate the menu. Push the Home button
when openiboot client is selected.
sudo ./oibc
!zImage
kernel
!rootfs.arm.ext2.gz
ramdisk 3588
boot "console=tty console=ttyUSB root=/dev/ram0 rw"
sudo ./linux

You should now get a login prompt. Nothing that's happening will show up on
the LCD automatically, but you can redirect it to the display with the
following command:

sh 2>&1 > /dev/tty0

Enjoy!

== iPhone Linux Resources ==

- Framebuffer driver
- Serial driver
- Serial over USB driver
- Interrupts, MMU, clock, etc.

=== OpeniBoot Resources ===

- Read-only support for the NAND

=== OpeniBoot Missing Resources ===

- Write support for the NAND
- Wireless networking
- Touchscreen
- Sound
- Accelerometer
- Baseband support

===QuickOiB===
[[QuickOiB]] is a tool that allows the user to temporarily install OpeniBoot in a device.
It was developed by pH it's working perfectly in Mac OS X and Ubuntu 8.10

=== Support ===

The current userland we're using, in the interest of expedience, is a Busybox installation created with buildroot, but glibc works fine as well, and we're going to build a more permanent userland solution.

A demonstration video can be seen here: http://www.vimeo.com/2373142

Download here: http://localhostr.com/files/b00133/iphonelinux-demo.tar.gz

Project leader: '''planetbeing'''

Contributors: '''CPICH, cmw, poorlad, ius, saurik'''

If you're experienced with '''hacking/porting Linux''' and especially if you're experienced with porting '''Android''', I'd definitely like to hear from you. Come chill in the ''#iphonelinux'' channel on ''irc.osx86.hu'' . If you're not experienced, and still want to help, you can digg/slashdot this posting to heaven so our little project gets more visibility. Thanks. :)