The iPhone Wiki - User contributions [en]

Redsn0w

2010-12-03T06:10:02Z

XX-BLACK OPS-Xx:

[[Image:Redsn0w.png|thumb|redsn0w 0.9.5-b5 on Mac OS X 10.?]]
redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.

Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supported custom boot and recovery mode logos, as well as verbose mode on bootup.

The final release, version [http://wikee.iphwn.org/howto:rs9 0.9.2], supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.

Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.

redsn0w [http://blog.iphone-dev.org/post/1452044444 0.9.6b2] can jailbreak iOS 3.2.2, and 4.0 through 4.1 on every device that supports those versions, on Windows and Mac OS X.

== Credit ==
[[iPhone Dev Team]]

== Versions ==
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9; text-align:center; width:150px;" |Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" |Release date
! style="background-color:#E9E9E9; text-align:center;" |Changes
|-
! style="white-space: nowrap;" |

==== 0.8 ====
| style="white-space: nowrap;" | July 2009
|
* Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3G S]] only.
|-
! style="white-space: nowrap;" |

==== 0.9.2 ====
| style="white-space: nowrap;" | Unknown
|
* Supports 3.0-3.1.2 on all iPhones and iPod touches (still a tethered-only JB for late-model devices though)
|-
! style="white-space: nowrap;" |

==== 0.9.3 beta ====
| style="white-space: nowrap;" | Unknown
|
* Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
|-
! style="white-space: nowrap;" |

==== 0.9.4 ====
| style="white-space: nowrap;" | Unknown
|
* Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-3 ====
| style="white-space: nowrap;" | June 21, 2010
|
* Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-4 ====
| style="white-space: nowrap;" | Unknown
|
* Resolved a problem with iBooks.
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-5 ====
| style="white-space: nowrap;" | Unknown
|
* Supposed to fix any APN or MMS issues that users were seeing.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 1 ====
| style="white-space: nowrap;" | September 21, 2010
|
* Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 2 ====
| style="white-space: nowrap;" | October 31, 2010
|
* Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except iPod touch 2G MC) .
** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 3 ====
| style="white-space: nowrap;" | November 2010
|
* Supports the installation of custom bundles
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 4 ====
| style="white-space: nowrap;" | November 23, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 5 ====
| style="white-space: nowrap;" | November 28, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
|-

=== 0.9.6 beta ====
| style="white-space: nowrap;" | December 1, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
** Quote From Dev-Team "Update #6: Developer @sbingner (author of TetherMe) has made some excellent progress devising a new hactivation method that kills two birds with one stone for all you ultrasn0w unlockers. His tool, “Subscriber Artificial Module (SAM)” tricks your iPhone and iTunes into creating legitimate activation tickets even though you’re unlocked with ultrasn0w. This means you get the full benefit of push applications, and your battery life increases substantially. If you’d like to try it out, check out http://www.bingner.com/SAM.html
To help make it easier to try out @sbingner’s tool, we’ve updated redsn0w to include a new “Deactivate” option for the 3G and 3GS. Use this option *after* you’ve installed SAM…it will remove the normal patches made to lockdownd and let SAM take over. (sbingner plans on making a button to do this within SAMPrefs too). Great work, @sbingner!" End Quote.

|}

== Exploits used ==
For [[N45ap|iPod touch]], [[M68ap|iPhone]] and [[N82ap|iPhone 3G]], see:
*[[Pwnage]]
*[[Pwnage 2.0]]

For [[N72ap|iPod touch 2G]], see:
*[[0x24000 Segment Overflow]]
*[[ARM7 Go]] - was used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.
*[[usb_control_msg(0xA1, 1) Exploit]] - used to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow. It is also used for a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].

For [[N88ap|iPhone 3GS]], see:
*[[0x24000 Segment Overflow]]
*[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

For [[N18ap|iPod touch 3G]]
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]
*limera1n exploit

[[Category:Hacking Software]]

===Custom Boot Logo Tethered===
If we chose to "Boot Tethered" in redsn0w, can we use our own custom boot logo? Or at least make a new pwnapple? It's getting kind of Old...
[[User:xX-BLACK_OPS-Xx|xX-BLACK_OPS-Xx]]

Redsn0w

2010-12-03T06:08:19Z

XX-BLACK OPS-Xx:

[[Image:Redsn0w.png|thumb|redsn0w 0.9.5-b5 on Mac OS X 10.?]]
redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.

Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supported custom boot and recovery mode logos, as well as verbose mode on bootup.

The final release, version [http://wikee.iphwn.org/howto:rs9 0.9.2], supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.

Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.

redsn0w [http://blog.iphone-dev.org/post/1452044444 0.9.6b2] can jailbreak iOS 3.2.2, and 4.0 through 4.1 on every device that supports those versions, on Windows and Mac OS X.

== Credit ==
[[iPhone Dev Team]]

== Versions ==
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9; text-align:center; width:150px;" |Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" |Release date
! style="background-color:#E9E9E9; text-align:center;" |Changes
|-
! style="white-space: nowrap;" |

==== 0.8 ====
| style="white-space: nowrap;" | July 2009
|
* Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3G S]] only.
|-
! style="white-space: nowrap;" |

==== 0.9.2 ====
| style="white-space: nowrap;" | Unknown
|
* Supports 3.0-3.1.2 on all iPhones and iPod touches (still a tethered-only JB for late-model devices though)
|-
! style="white-space: nowrap;" |

==== 0.9.3 beta ====
| style="white-space: nowrap;" | Unknown
|
* Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
|-
! style="white-space: nowrap;" |

==== 0.9.4 ====
| style="white-space: nowrap;" | Unknown
|
* Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-3 ====
| style="white-space: nowrap;" | June 21, 2010
|
* Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-4 ====
| style="white-space: nowrap;" | Unknown
|
* Resolved a problem with iBooks.
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-5 ====
| style="white-space: nowrap;" | Unknown
|
* Supposed to fix any APN or MMS issues that users were seeing.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 1 ====
| style="white-space: nowrap;" | September 21, 2010
|
* Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 2 ====
| style="white-space: nowrap;" | October 31, 2010
|
* Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except iPod touch 2G MC) .
** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 3 ====
| style="white-space: nowrap;" | November 2010
|
* Supports the installation of custom bundles
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 4 ====
| style="white-space: nowrap;" | November 23, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 5 ====
| style="white-space: nowrap;" | November 28, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
|-
=== 0.9.6 beta ====
| style="white-space: nowrap;" | November 28, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
** Quote From Dev-Team "Update #6: Developer @sbingner (author of TetherMe) has made some excellent progress devising a new hactivation method that kills two birds with one stone for all you ultrasn0w unlockers. His tool, “Subscriber Artificial Module (SAM)” tricks your iPhone and iTunes into creating legitimate activation tickets even though you’re unlocked with ultrasn0w. This means you get the full benefit of push applications, and your battery life increases substantially. If you’d like to try it out, check out http://www.bingner.com/SAM.html

To help make it easier to try out @sbingner’s tool, we’ve updated redsn0w to include a new “Deactivate” option for the 3G and 3GS. Use this option *after* you’ve installed SAM…it will remove the normal patches made to lockdownd and let SAM take over. (sbingner plans on making a button to do this within SAMPrefs too). Great work, @sbingner!"
|}

== Exploits used ==
For [[N45ap|iPod touch]], [[M68ap|iPhone]] and [[N82ap|iPhone 3G]], see:
*[[Pwnage]]
*[[Pwnage 2.0]]

For [[N72ap|iPod touch 2G]], see:
*[[0x24000 Segment Overflow]]
*[[ARM7 Go]] - was used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.
*[[usb_control_msg(0xA1, 1) Exploit]] - used to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow. It is also used for a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].

For [[N88ap|iPhone 3GS]], see:
*[[0x24000 Segment Overflow]]
*[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

For [[N18ap|iPod touch 3G]]
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]
*limera1n exploit

[[Category:Hacking Software]]

===Custom Boot Logo Tethered===
If we chose to "Boot Tethered" in redsn0w, can we use our own custom boot logo? Or at least make a new pwnapple? It's getting kind of Old...
[[User:xX-BLACK_OPS-Xx|xX-BLACK_OPS-Xx]]

Redsn0w

2010-12-03T06:04:25Z

XX-BLACK OPS-Xx: /* Custom Boot Logo Tethered */

[[Image:Redsn0w.png|thumb|redsn0w 0.9.5-b5 on Mac OS X 10.?]]
redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.

Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supported custom boot and recovery mode logos, as well as verbose mode on bootup.

The final release, version [http://wikee.iphwn.org/howto:rs9 0.9.2], supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.

Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.

redsn0w [http://blog.iphone-dev.org/post/1452044444 0.9.6b2] can jailbreak iOS 3.2.2, and 4.0 through 4.1 on every device that supports those versions, on Windows and Mac OS X.

== Credit ==
[[iPhone Dev Team]]

== Versions ==
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9; text-align:center; width:150px;" |Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" |Release date
! style="background-color:#E9E9E9; text-align:center;" |Changes
|-
! style="white-space: nowrap;" |

==== 0.8 ====
| style="white-space: nowrap;" | July 2009
|
* Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3G S]] only.
|-
! style="white-space: nowrap;" |

==== 0.9.2 ====
| style="white-space: nowrap;" | Unknown
|
* Supports 3.0-3.1.2 on all iPhones and iPod touches (still a tethered-only JB for late-model devices though)
|-
! style="white-space: nowrap;" |

==== 0.9.3 beta ====
| style="white-space: nowrap;" | Unknown
|
* Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
|-
! style="white-space: nowrap;" |

==== 0.9.4 ====
| style="white-space: nowrap;" | Unknown
|
* Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-3 ====
| style="white-space: nowrap;" | June 21, 2010
|
* Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-4 ====
| style="white-space: nowrap;" | Unknown
|
* Resolved a problem with iBooks.
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-5 ====
| style="white-space: nowrap;" | Unknown
|
* Supposed to fix any APN or MMS issues that users were seeing.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 1 ====
| style="white-space: nowrap;" | September 21, 2010
|
* Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 2 ====
| style="white-space: nowrap;" | October 31, 2010
|
* Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except iPod touch 2G MC) .
** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 3 ====
| style="white-space: nowrap;" | November 2010
|
* Supports the installation of custom bundles
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 4 ====
| style="white-space: nowrap;" | November 23, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 5 ====
| style="white-space: nowrap;" | November 28, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
|-

|}

== Exploits used ==
For [[N45ap|iPod touch]], [[M68ap|iPhone]] and [[N82ap|iPhone 3G]], see:
*[[Pwnage]]
*[[Pwnage 2.0]]

For [[N72ap|iPod touch 2G]], see:
*[[0x24000 Segment Overflow]]
*[[ARM7 Go]] - was used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.
*[[usb_control_msg(0xA1, 1) Exploit]] - used to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow. It is also used for a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].

For [[N88ap|iPhone 3GS]], see:
*[[0x24000 Segment Overflow]]
*[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

For [[N18ap|iPod touch 3G]]
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]
*limera1n exploit

[[Category:Hacking Software]]

===Custom Boot Logo Tethered===
If we chose to "Boot Tethered" in redsn0w, can we use our own custom boot logo? Or at least make a new pwnapple? It's getting kind of Old...
[[User:xX-BLACK_OPS-Xx|xX-BLACK_OPS-Xx]]

Redsn0w

2010-12-03T06:02:59Z

XX-BLACK OPS-Xx:

[[Image:Redsn0w.png|thumb|redsn0w 0.9.5-b5 on Mac OS X 10.?]]
redsn0w was originally called [[QuickPwn]] but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a [[jailbreak]]ing tool for all current devices as well as providing [[unlock]] support the [[M68ap|iPhone 2G]]. As of version 0.8, the [[N88ap|iPhone 3GS]] can also be jailbroken through redsn0w.

Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88ap|iPhone 3GS]] units and [[N72ap|iPod touch 2G]] units with new bootroms. In addition, this version supported custom boot and recovery mode logos, as well as verbose mode on bootup.

The final release, version [http://wikee.iphwn.org/howto:rs9 0.9.2], supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72ap|iPod touch 2G]] with iOS 3.1.3.

Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.

redsn0w [http://blog.iphone-dev.org/post/1452044444 0.9.6b2] can jailbreak iOS 3.2.2, and 4.0 through 4.1 on every device that supports those versions, on Windows and Mac OS X.

== Credit ==
[[iPhone Dev Team]]

== Versions ==
{| class="wikitable" width="100%" style="font-size: 90%"
! style="background-color:#E9E9E9; text-align:center; width:150px;" |Version
! style="background-color:#E9E9E9; text-align:center; width:175px;" |Release date
! style="background-color:#E9E9E9; text-align:center;" |Changes
|-
! style="white-space: nowrap;" |

==== 0.8 ====
| style="white-space: nowrap;" | July 2009
|
* Jailbreaks iPhone OS 3.0 on the [[n88ap|iPhone 3G S]] only.
|-
! style="white-space: nowrap;" |

==== 0.9.2 ====
| style="white-space: nowrap;" | Unknown
|
* Supports 3.0-3.1.2 on all iPhones and iPod touches (still a tethered-only JB for late-model devices though)
|-
! style="white-space: nowrap;" |

==== 0.9.3 beta ====
| style="white-space: nowrap;" | Unknown
|
* Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
|-
! style="white-space: nowrap;" |

==== 0.9.4 ====
| style="white-space: nowrap;" | Unknown
|
* Supports jailbreaking iOS 3.1.3 on [[M68ap|iPhone 2G]], [[N82ap|iPhone 3G]], [[N45ap|iPod touch 1G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-3 ====
| style="white-space: nowrap;" | June 21, 2010
|
* Supports jailbreaking iOS 4.0 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom/MB model]])
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-4 ====
| style="white-space: nowrap;" | Unknown
|
* Resolved a problem with iBooks.
|-
! style="white-space: nowrap;" |

==== 0.9.5 beta 5-5 ====
| style="white-space: nowrap;" | Unknown
|
* Supposed to fix any APN or MMS issues that users were seeing.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 1 ====
| style="white-space: nowrap;" | September 21, 2010
|
* Supports jailbreaking iOS 4.0-4.1 on [[N82ap|iPhone 3G]] and [[N72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[iBoot-240.5.1|new bootrom]])
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 2 ====
| style="white-space: nowrap;" | October 31, 2010
|
* Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except iPod touch 2G MC) .
** The [[N82ap|iPhone 3G]], [[N72ap|iPod touch 2G]] ([[iBoot-240.4|old bootrom]]), and [[N88ap|iPhone 3GS]] ([[iBoot-359.3|old bootrom]]) can also have custom boot logos.
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 3 ====
| style="white-space: nowrap;" | November 2010
|
* Supports the installation of custom bundles
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 4 ====
| style="white-space: nowrap;" | November 23, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
|-
! style="white-space: nowrap;" |

==== 0.9.6 beta 5 ====
| style="white-space: nowrap;" | November 28, 2010
|
* Jailbreaks iOS 4.2.1 on all supported devices.
** [[Tethered jailbreak]] on devices that are not vulnerable to [[Pwnage 2.0]] or [[0x24000 Segment Overflow]].
* Can update the baseband on the [[X-Gold 608]] to [[6.15.00]], allowing the reuse of the [[AT+XAPP Vulnerability]]
|-

|}

== Exploits used ==
For [[N45ap|iPod touch]], [[M68ap|iPhone]] and [[N82ap|iPhone 3G]], see:
*[[Pwnage]]
*[[Pwnage 2.0]]

For [[N72ap|iPod touch 2G]], see:
*[[0x24000 Segment Overflow]]
*[[ARM7 Go]] - was used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.
*[[usb_control_msg(0xA1, 1) Exploit]] - used to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow. It is also used for a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]].

For [[N88ap|iPhone 3GS]], see:
*[[0x24000 Segment Overflow]]
*[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

For [[N18ap|iPod touch 3G]]
*[[usb_control_msg(0x21, 2) Exploit]]
*limera1n exploit

for [[N90ap|iPhone 4]], [[N81ap|iPod touch 4G]], [[K48ap|iPad]] and [[K66ap|Apple TV 2G]]
*limera1n exploit

[[Category:Hacking Software]]

===Custom Boot Logo Tethered===
If we chose to "Boot Tethered" in redsn0w, can we use our own custom boot logo? Or at least make a new pwnapple? It's getting kind of Old...

The iPhone Wiki talk:Current events

2010-12-03T05:59:12Z

XX-BLACK OPS-Xx:

empty?

Bare And Broken

User talk:Geohot

2010-12-03T05:53:47Z

XX-BLACK OPS-Xx: /* Blog */

== Future of this Wiki ==

[[Geohot]] is the founder of this wiki. Now that he has retired (or whatever) I would be interested to know how this Wiki continues. I'm a little scared that he could just turn it off. Maybe we should make some backups now? Or can geohot or a close insider provide some infos about the future of this Wiki? If geohot needs someone to take over this project, I would be happy to do so (and probably many others also). It would be awful to see all our contributions fade away. A clear statement by any insider would help. Thanks. --[[User:Http|http]] 18:58, 13 July 2010 (UTC)

I currently have no plans to shut down this wiki. Rest assured that if I do, I will make a backup available online. --[[User:Geohot|geohot]] 19:17, 13 July 2010 (UTC)

Thanks for clarification. This helps a lot. --[[User:Http|http]] 22:39, 13 July 2010 (UTC)

== Access to [http://iphonejtag.blogspot.com/ blog] archives ==
Will you post the information on your initial iPhone 2G unlock anywhere? This used to be on your blog (in the archives) and was quite fascinating... :( [[User:D235j|D235j]] 01:41, 14 July 2010 (UTC)

== Other ==

You made a rational decision leaving the jailbreak community. After all the crap you had to take from people I dont blame you. Im sorry for ever adding to the BS you deal with on a day-to-day basis. [[User:Leobruh|Leobruh]] 22:42, 13 July 2010 (UTC)!

== Blog ==
Hey mate, do you have any plans to make your blog public again? There was a lot of good information on there and it would be an official source of information and updates from you!

Best! =) [[User:LiNK|LiNK]] 19:01, 23 October 2010 (UTC)

Yeah, Please Open your Blog... Even if it doesnt have to do with jailbreaking or anything like that! I just want to know the real george hotz...

[[User:xX-BLACK_OPS-Xx|LOLZ]] 9:53, 2 December 2010 (UTC)

User talk:Geohot

2010-12-03T05:51:52Z

XX-BLACK OPS-Xx: /* Blog */