https://www.theiphonewiki.com/w/api.php?action=feedcontributions&feedformat=atom&user=Ziel 2026-06-07T14:26:09Z User contributions MediaWiki 1.31.14 https://www.theiphonewiki.com/w/index.php?title=Normal_Mode&diff=5154 2009-10-15T02:23:56Z

<p>Ziel: </p> <hr /> <div>This is the protocol [[iTunes]] uses to talk to the booted iPhone. It uses usbmux to provide TCP like connectivity over a USB port using SSL. There is a pairing process iTunes uses to establish the secure channel. File transfer is provided by [[AFC]].<br /> <br /> ==Device IDs==<br /> It appears that it uses different device IDs:<br /> * [[iPhone]] - 0x1290<br /> * [[iPod touch]] - 0x1291<br /> * [[iPhone 3G]] - 0x1292<br /> * [[iPod touch 2G]] - 0x1293<br /> * [[iPhone 3GS]] - 0x1294<br /> * [[iPod touch 3G]] - 0x1299<br /> <br /> ==Patch: Disable SSL==<br /> There is a way to disable SSL encyption during iTunes communication on jailbroken devices by patching lockdownd binary:<br /> <br /> :(#) Disable SSL protection<br /> :(#) FW 2.1<br /> :(#) binary /usr/libexec/lockdownd<br /> :-0x1000<br /> '''Offset''' 000112F8: 0C 30 98 E5 &gt; 00 30 A0 E3 ; Conn.UseSSL = false<br /> <br /> After applying the patch all packets between iPhone and iTunes become plain and clear. Musthave for R&amp;D ppl.<br /> ==USBMux Protocol==<br /> <br /> ===Resources===<br /> * [[MobileDevice Library]]<br /> * [http://wikee.iphwn.org/usb:usbmux The dev team's page on the topic]<br /> * [http://matt.colyer.name/projects/iphone-linux/index.php?title=Protocol_Documentation Protocol Documentation]<br /> * [http://matt.colyer.name/projects/iphone-linux/index.php?title=Main_Page iFuse]<br /> <br /> [[Category:Protocols (S5L)]]</div>

Ziel https://www.theiphonewiki.com/w/index.php?title=Bootrom&diff=5153 2009-10-15T02:05:04Z

<p>Ziel: </p> <hr /> <div>== Revisions ==<br /> * [[iBoot-240.4]] ([[S5L8720]] Revision 1)<br /> * [[iBoot-240.5.1]] ([[S5L8720]] Revision 2, 24kPwn fixed)<br /> * [[iBoot-359.3]] ([[S5L8920]] Revision 1)<br /> * [[iBoot-359.3.2]] ([[S5L8920]] Revision 2)<br /> * [[iBoot-359.5]] ([[S5L8922]] Revision 1)</div>

Ziel https://www.theiphonewiki.com/w/index.php?title=Bootrom_359.3&diff=5152 2009-10-15T01:56:20Z

<p>Ziel: New page: S5L8920 bootrom revision for the iPhone 3GS sold between June 2009 and September 2009. '''Vulnerable to the 24kPwn exploit.'''</p> <hr /> <div>[[S5L8920]] bootrom revision for the [[N88ap|iPhone 3GS]] sold between June 2009 and September 2009. '''Vulnerable to the [[24kPwn]] exploit.'''</div>

Ziel https://www.theiphonewiki.com/w/index.php?title=Bootrom&diff=5151 2009-10-15T01:48:24Z

<p>Ziel: </p> <hr /> <div>== Revisions ==<br /> * [[iBoot-240.4]] ([[S5L8720]] Revision 1)<br /> * [[iBoot-240.5.1]] ([[S5L8720]] Revision 2, 24kPwn fixed)<br /> * [[iBoot-359.3]] ([[S5L8920]] Revision 1)<br /> * [[iBoot-359.5]] ([[S5L8922]] Revision 1)</div>

Ziel https://www.theiphonewiki.com/w/index.php?title=Bootrom_359.5&diff=5150 2009-10-15T01:35:20Z

<p>Ziel: </p> <hr /> <div>First revision of the [[S5L8922]] bootrom. Found on [[iPod touch 3G]] devices.<br /> <br /> '''This is not vulnerable to the [[24kPwn]] exploit'''.</div>

Ziel https://www.theiphonewiki.com/w/index.php?title=Bootrom_359.5&diff=5149 2009-10-15T01:35:05Z

<p>Ziel: New page: Second revision of the S5L8922 bootrom. Found on iPod touch 3G devices. '''This is not vulnerable to the 24kPwn exploit'''.</p> <hr /> <div>Second revision of the [[S5L8922]] bootrom. Found on [[iPod touch 3G]] devices.<br /> <br /> '''This is not vulnerable to the [[24kPwn]] exploit'''.</div>

Ziel https://www.theiphonewiki.com/w/index.php?title=Bootrom&diff=5148 2009-10-15T01:33:52Z

<p>Ziel: </p> <hr /> <div>== Revisions ==<br /> * [[iBoot-240.4]] ([[S5L8720]] Revision 1)<br /> * [[iBoot-240.5.1]] ([[S5L8720]] Revision 2, 24kPwn fixed)<br /> * [[iBoot-359.5]] ([[S5L8922]] Revision 1)</div>

Ziel