Search results

• Main Page
  * If you have notes on something you did, post them here, no matter how ugly. | colspan="9" {{no}}
  10 KB (1,218 words) - 18:16, 24 January 2023
• Constitution
  ...e $100 a year to run; paid for by the ads on my (geohot's) blog. So no --> No donation links or ads will ever appear here. And try to keep information he ...t" information. If you have an exploit that could be used later and serves no purpose now, keep it secret. Same goes for if you have an exploit, but anot
  1 KB (253 words) - 13:21, 21 March 2022
• Timeline
  * 30 November – TaiG 2.4.4 released (no longer beta). * 20 July – [[TaiG]] 2.4.3 released, no longer a beta.
  86 KB (10,312 words) - 17:11, 20 October 2022
• PwnageTool
  ...e that the [[iPad 2]] and the [[iPhone 4S]] are not supported, as there is no publicly available bootrom exploit (like [[Pwnage]], [[Pwnage 2.0]], [[lime
  7 KB (910 words) - 14:07, 17 September 2021
• BBUpdaterExtreme
  <u><b>Switches with no args</b></u>
  5 KB (716 words) - 15:33, 26 March 2017
• NCK
  ...activation process. An unlocked phone receives a wildcard ticket that has no restrictions set.
  504 bytes (71 words) - 12:24, 11 March 2012
• N82AP
  ...using [[redsn0w]]). Using Veency and measuring the delay of wallpaper and no-wallpaper on the same device while recording computer screen and measures a
  3 KB (393 words) - 12:40, 2 March 2022
• M68AP
  ...ove restrictions the [[Baseband Bootloader]] imposes and unlock the iPhone no matter what.
  2 KB (265 words) - 22:46, 14 September 2021
• IBoot (Bootloader)
  ...(Build 7A238j)<!-- 3.0 beta and below need "~##", but there is no "BuildManifest.plist", "BuildSubmission.plist", or "BuildManifesto.plist" i
  123 KB (8,553 words) - 00:24, 13 November 2022
• Diags (iBoot command)
  ...[[Diags|diags]], so even unsigned images will be loaded. This command had no permission checks in 1.0-1.1.4 iBoots, so it was exploitable to load a patc
  2 KB (306 words) - 06:22, 11 February 2021
• Recovery Mode
  ...Apple Watch Series 7 and newer is unsupported due to the fact that it has no diagnostic port. These devices can be restored using a dock which communica
  6 KB (950 words) - 20:24, 16 September 2022
• Baseband Bootloader
  ...d 2.2 OTB (and some 2.0 OTB) [[N82AP|iPhone 3G]]/[[X-Gold 608]]. Still has no known exploits and it was released as soon as Apple knew [[iPhone Dev Team] ...of version 2.2.1 OTB in 2008 [[N82AP|iPhone 3G]]/[[X-Gold 608]]. Still has no known exploits and it was released as soon as Apple knew [[iPhone Dev Team]
  4 KB (570 words) - 07:59, 8 October 2015
• Kernel
  -no-zp
  177 KB (18,986 words) - 05:15, 14 November 2022
• GID Key
  ...ID) or compiled (GID) into the application processor during manufacturing. No software or firmware can read them directly; they can see only the results ...ardware attacks to extract GID keys. Everybody with the capability did. So no surprise…"]
  10 KB (1,556 words) - 12:50, 17 September 2021
• NAND
  ...rrection code]] (ECC) data, while a page contains 8192 bytes of data and ''no'' ECC. ECC is most likely not used as flash memory uses transistors, which
  4 KB (696 words) - 22:10, 18 December 2019
• SIM hacks
  The company video demonstrates 2G but mentions no 3G function at this stage. The RebelSim website claims it has tested iPhone Indications are that no stable TurboSIM exploit is available at this time. For some providers in Ge
  5 KB (905 words) - 13:48, 17 September 2021
• Toolchain
  If SSH asks you ‘Are you sure you want to continue connecting (yes/no)?‘ Type yes.
  9 KB (1,329 words) - 23:49, 7 February 2014
• LLB
  * A restored firmware is no longer integrity-checked
  4 KB (427 words) - 01:35, 8 February 2018
• Activation
  ...gh this process. The activation process is outlined in detail in US patent no. [http://www.freepatentsonline.com/20090061934.pdf 2009/0061934]. ...ake calls and you have only 1 bar of reception. If you only have 1 bar and no carrier at the status bar, it isn't activated correctly.
  3 KB (465 words) - 00:49, 16 October 2017
• Jailbreak
  ...hen boots it back up without the help of a jailbreak tool, the device will no longer be running a patched kernel, and it may get stuck in a partially sta ...lution is one where the device is able to start up on its own, but it will no longer have a patched kernel, and therefore will not be able to run modifie
  4 KB (713 words) - 10:55, 13 February 2023
• BootNeuter
  *The baseband is no longer integrity-checked, so modifications (including unlocking) can be mad **No longer does the “greater than” (4.6BL) or “greater than or equal” (
  3 KB (424 words) - 17:10, 1 January 2018
• Tutorial:Unlock iPhone 3G with TurboSim
  ...ing ''could'' be fine. You don't spoof your identity, there should also be no billing problems. But if you try this method, have successfully installed Z OK. No Error
  13 KB (1,987 words) - 01:02, 17 September 2021
• Unlock
  ...le to IPSF). It overwrote your previous token, which means the phone could no longer be officially unlocked, unless a restore of the token was performed
  6 KB (918 words) - 18:42, 16 September 2021
• N82AP (Internals)
  * Battery is no longer soldered.
  904 bytes (126 words) - 12:37, 29 March 2017
• Brick
  ...so you can make this really really hard to fix if you restore and there's no jailbreak available, if the available jailbreaks don't include afc2 and oth ...ay people can actually downgrade by installing a higher version (there are no [[APTicket]] checks in these devices). This has known side effects, like lo
  7 KB (1,220 words) - 13:38, 24 September 2021
• ITunes Modes
  ...n to turn them off, all you have to do is replace YES in that command with NO (1 with 0 for Windows).
  3 KB (489 words) - 11:28, 13 November 2015
• Software Update Service
  printf("%d entries added. No consistency check done\n",
  13 KB (1,865 words) - 20:56, 31 July 2013
• Apple Developer
  ! No Account
  2 KB (283 words) - 22:19, 11 August 2015
• Activation Token
  Cache-Control: no-cache
  5 KB (509 words) - 16:36, 18 November 2015
• How to reverse
  ...things come together, and you finally figure out that one function you had no idea about. Or when you apply a patch that works. Or when you see what coul
  2 KB (343 words) - 13:28, 17 September 2021
• Bypassing iPhone Code Signatures
  This method no longer works for iOS 4.3 and newer, due to the settings being read-only.
  3 KB (500 words) - 14:27, 9 January 2012
• Obtaining IMG3 Keys
  There is no "easier" method. You need access to the phone's AES engine, or you need to ...o I wrote some code to call the [[iBoot (Bootloader)|iBoot]] function. And no, I don't have the source, I wrote it just as you see it :) This patch is t
  7 KB (1,062 words) - 10:01, 12 October 2015
• /System/Library/Frameworks
  ...ared_cache dyld_shared_cache] for more details. The original libraries are no longer useful for non-on-device-developers, so they are eliminated from the | {{no}}
  35 KB (4,011 words) - 06:41, 25 December 2021
• Apple Push Service Protocol
  *no items ===0E No Storage===
  8 KB (1,140 words) - 22:18, 15 August 2021
• IDA Pro Setup
  ...= undefine what you just may have done, i usually use this since there is no real edit+undo in IDA so this is the next best thing
  4 KB (641 words) - 09:18, 10 February 2012
• System Log
  As [[iOS]] is [[wikipedia:Unix|Unix]] based, it comes as no surprise that its syslog can be read using the same tools desktop Unix and This gives an interactive shell with the syslog daemon (no need to enable file output). If you execute the <code>watch</code> command,
  8 KB (1,382 words) - 17:44, 26 August 2015
• BlueCore 4
  No detailed information so far.
  690 bytes (109 words) - 10:05, 12 October 2015
• S5L File Formats
  ..., or the [[S5L8900]] [[VROM]]. The [[S5L8720]] and newer [[bootrom]]s have no support for it. ...an 2.0 beta 3, or the [[S5L8900]] [[VROM]]. The [[S5L8720]] and newer have no support for it.
  4 KB (641 words) - 17:01, 12 July 2017
• IRecovery
  Please note that there is no official compiled version available. NOTE: 'bgcolor' appears to be no longer supported -- requires confirmation.
  4 KB (569 words) - 14:05, 17 September 2021
• /Developer
  ...[[Xcode]] to upload unsigned DeveloperDiskImage.dmg files. This is because no signature checking is performed by [[Xcode]], not on the [[iDevice|device]]
  749 bytes (102 words) - 10:13, 28 August 2015
• /Applications
  | {{no}} | {{no}}
  33 KB (3,712 words) - 20:10, 4 February 2021
• /dev
  | {{no}} | {{no}}
  12 KB (1,532 words) - 12:32, 23 March 2017
• IPhone Restore Procedure
  iTunes has pretty much no say in how the restore goes along. It will send the DeviceTree, RAMDisk, an * Set Final NVRAM Arguments (no official name)
  31 KB (3,832 words) - 04:45, 25 June 2019
• History: Decrypt 1.1.1 (Talk Page)
  o 0x20000000 through 0x20010000 is the vrom, no? And 0x24000000 through 0x24100000 is the nor? ...crypto HW registers directly from userlevel. it should be done on ring-0 (no idea how it sounds on macOS)
  37 KB (6,324 words) - 21:12, 20 March 2015
• IBoot Flags
  '''bit0''': No '''bit 1''': No
  16 KB (2,016 words) - 08:46, 14 March 2017
• Jailbreak (S5L8720x)
  ...FU. Apple revved the silicon for the S5L and once the old stocks are gone, no more jailbreaks. ....0''': It should go without saying, but the iPod touch (2nd generation) is no longer vulnerable to the stack overflow that Pwnage 2.0 relied on.
  14 KB (2,533 words) - 18:42, 28 May 2017
• ARM7 Go
  ...the ARM7 coprocessor execute whatever code was at that address. There was no signature or range checks in place for the command.
  2 KB (305 words) - 06:24, 11 February 2021
• Redsn0w Lite
  ...; this patches the iboot flags to allow no range check, ROM:00000014 ; no permission check for restricted commands, aes gid
  3 KB (385 words) - 04:31, 17 March 2018
• Kernelcache
  ...m the kernelcache) can therefore no longer be used (and, in fact, there is no straightforward way to extract kexts anymore from these caches). Joker has
  20 KB (2,721 words) - 22:02, 13 December 2021
• 0x24000 Segment Overflow
  ...ed to get the exploitive [[LLB]] onto the device. Before, Apple would have no reason to fix this, since writing arbitrary data to [[NOR]] does not negate
  11 KB (1,918 words) - 17:13, 22 October 2021
• NitroKey
  ...of a small dongle that looked EXACTLY like the end of an iPod cable, with no cord on it. The product was being sold for an outrageous price of $55.00 to
  1 KB (242 words) - 23:14, 16 September 2021
• Redsn0w
  | {{no}} | {{no}}
  23 KB (3,037 words) - 10:20, 15 May 2021
• PHaseBanDowngrader
  ...a pasta baixada (phasebandowngrader) para dentro da pasta "/Applications" no seu iPhone. Para rodá-lo, entre no MobileTerminal e digite "login". O usuário é "root" e a senha é "alpine"
  2 KB (251 words) - 08:28, 13 October 2015
• Decrypting Firmwares
  ...ng]] (CBC). The [[wikipedia:Key (cryptography)|key]] is the 0x837 key with no [[wikipedia:Initialization vector|IV]]. To decrypt, open up a console and r ...were being sly. They were not. You can decrypt those on a 2.2.1 aes setup no problem whatsoever.
  8 KB (1,342 words) - 08:42, 7 February 2022
• EDA
  ...r memory address, and see every access and the system state at that point. No more missing xref because of things like (MOV R0, #0x1004 ADD R0, PC). This
  3 KB (594 words) - 13:07, 17 September 2021
• Dual Boot Exploit
  == Why it no longer works == There are two reasons that it no longer works
  2 KB (242 words) - 12:28, 22 January 2016
• Jailbreak (S5L8920+)
  ...execution over USB. Even newer devices, starting with the [[iPad 2]], have no bootrom exploits to run unsigned code ''at all''. ...w firmwares. [http://iphonejtag.blogspot.com/2009/06/ecid-field-downgrades-no-dice.html].
  3 KB (399 words) - 09:52, 26 March 2017
• 02.07.01
  ...[[Baseband Firmware|baseband]] in iOS 4.1 beta (developers only). There's no public [[unlock]] for it.
  166 bytes (23 words) - 11:40, 7 October 2015
• Purplera1n
  ...backup that could be used to allow you to boot an older [[iBSS]]. However, no tool was ever created to utilize this backup.
  3 KB (413 words) - 11:23, 24 March 2017
• Kernel Syscalls
  ...based on the exported kdebug symbol, this is unreliable, as the symbol is no longer exported. A better way is to home in on the pattern of the struct sy ...way imply it is functional. Auditing, for example, is not enabled in iOS (no CONFIG_AUDIT in the XNU build). Most of these syscalls are the same as thos
  20 KB (2,465 words) - 21:48, 2 February 2018
• BCM4325
  ...ice... the mic (i havent upgraded to the iOS 4 SDK so this comment assumes no secondary mic as present in iPhone 4) ...is no way to verify the radio is on from just the HCI side (its all rx and no output) or just the PCM side... we need to have both parts working simultan
  3 KB (520 words) - 11:23, 24 March 2017
• Bluetooth
  ...erely restricted the functions of Bluetooth to the end-user, for seemingly no reason<!-- read: commercial reasons-->, as the hardware supplied is capable * [[N45AP|iPod touch]] - No Bluetooth Hardware
  8 KB (1,221 words) - 15:20, 20 September 2020
• ITunes
  | Added DMG background image, no binary differences | Installer update, no payload differences
  110 KB (14,628 words) - 19:50, 25 October 2022
• IPhone Hacking Presentation - History 1.0-1.1.4
  recovery mode sending a ramdisk and kernel can boot the device no matter whats on nand
  6 KB (948 words) - 13:38, 17 September 2021
• Apple Watch Series 2
  ...h" [[keynote]] on {{date|2016|09|07}}. The Apple Watch Edition Series 2 is no longer made of gold; it has a ceramic case. Internally, the Apple Watch Ser
  1 KB (183 words) - 23:48, 5 September 2021
• IPhoneTunnel
  iPhoneTunnel for macOS does no longer work with macOS Monterey 12.3 beta and newer due to the removal of P
  771 bytes (114 words) - 06:02, 20 February 2022
• N18AP
  It makes use of the [[S5L8922]] application processor. No other known device uses this processor; however, the [[N88AP|iPhone 3GS]] u
  1 KB (145 words) - 01:10, 15 September 2021
• Purplesn0w
  ...one. And since the ticket is already delivered on baseband resets, there's no need to write another daemon to use the battery. Instead the daemon already * Wait for signal, and enjoy your unlocked iPhone (no reboot required)
  8 KB (842 words) - 11:36, 14 November 2015
• SHSH
  | {{no|Closed}} | {{no|Closed}}
  78 KB (8,893 words) - 02:38, 8 December 2022
• IREB
  *libusb no longer required *No longer required to rename ipsw to ih8sn0w.ipsw (Windows)
  2 KB (315 words) - 09:21, 26 March 2017
• Blackra1n
  ...not remove the Jailbreak, just the App to install Package Managers if you no longer need it ...seband Device|baseband]] after which it will restart your [[CommCenter]] - no reboot required. This unlock is detailed on the [[Blacksn0w]] page. If you
  3 KB (423 words) - 14:09, 17 September 2021
• WinterBoard
  ...the files have been replaced. Should [[SpringBoard]] crash, the files will no longer appear to be the changed ones, except for images that iOS caches, su
  2 KB (370 words) - 13:47, 17 September 2021
• Tethered jailbreak
  ...hen boots it back up without the help of a jailbreak tool, the device will no longer be running a patched kernel, and it may get stuck in a partially sta
  2 KB (310 words) - 09:26, 26 March 2017
• /System/Library/CoreServices/SpringBoard.app
  While there are no publicly available fully-fledged SpringBoard alternatives, iOS devices are
  2 KB (240 words) - 21:01, 11 March 2021
• SkankPhone
  ...It's last appearance was on prototypes running 5.1. Versions 6.0 and above no longer feature SkankPhone, for unknown reasons. ...versions of SkankPhone feature a "More Other" button even though there is no "Other" button present.
  2 KB (325 words) - 01:04, 20 April 2022
• Sn0wbreeze
  * UDID Developer check removal is no longer needed. * A5 devices are NOT supported at this time due to no public DFU/iBoot exploit.
  16 KB (2,052 words) - 18:41, 7 November 2022
• IBoot-636.66.33
  * There are no longer assert()'s for the usb otg hardware handler functions, normally chec * Two new tasks: usb-high-current and usb-no-current
  1 KB (112 words) - 08:45, 14 March 2017
• Go (iBoot command)
  N88AP_iBoot:4FF010DE NOP ; No Operation
  13 KB (1,757 words) - 15:33, 26 March 2017
• Soft Upgrade
  ...re. Issues with the software arose from using this method, hence why it is no longer used.
  329 bytes (52 words) - 12:23, 27 August 2015
• /System/Library/Audio/UISounds
  <li>[[/System/Library/Audio/UISounds/jbl_no_match.caf|jbl_no_match.caf]] (No match found)</li>
  6 KB (816 words) - 05:28, 3 July 2023
• Golden Master
  * 4.0 - <code>8A293</code> (release had no [[/Applications/GameCenter~iphone.app|Game Center]], but contained same bui
  2 KB (326 words) - 12:30, 25 September 2021
• FaceTime
  No. Time Source Destination Protocol Info
  25 KB (1,898 words) - 10:12, 26 March 2017
• 06.15.00
  Since all recent iPhone 3GS basebands (i.e. [[05.14.02]] and anything newer) no longer have the [[AT+XAPP Vulnerability]], the [[iPhone Dev Team]] has rele
  2 KB (300 words) - 11:37, 14 November 2015
• Switchboard (App Store)
  ...apple.com] as that produces the same end results). Interestingly, there is no way to access "About Switchboard" when this popup is showing, the item is c
  6 KB (747 words) - 03:23, 20 November 2021
• /Applications/AppStore.app
  * no.lproj ('''No'''rwegian)
  4 KB (483 words) - 13:33, 17 September 2021
• 25C3 presentation "Hacking the iPhone"
  ...Linux's [[wikipedia:Init|init]]. It’s a little bit bottomized, there’s no command line switches, but, you know it’s basically the same thing, have ...the [[LLB]]. OK. But is the [[LLB]] signature-checked by the [[bootrom]]? No! So, that’s a big problem. So all we need to do is just flash our own [[L
  49 KB (8,611 words) - 13:26, 17 September 2021
• 05.14.01
  [[X-Gold 608]] baseband found with iOS 4.1 beta 2. There is no [[unlock]] for it.
  120 bytes (16 words) - 14:51, 15 August 2013
• ITunes Errors/30xx
  * Update to an older firmware isn't working, because Apple is no longer handing out [[SHSH]]s for the device/firmware combination. * Error 3002 represents no update ramdisk when pressing Shift+Check for updates.
  1 KB (175 words) - 08:59, 12 August 2014
• ITunes Errors/Error Texts
  ...you are restoring to a device with an [[T8020|A12]] or newer SoC, there is no (publicly disclosed) [[Bootrom|bootrom]] exploit to restore to older versio
  3 KB (440 words) - 00:40, 29 August 2022
• ITunes Errors/Below 100
  ...W]]. The device cannot be booted up. The trick to skip the baseband update no longer works.
  9 KB (1,431 words) - 20:49, 11 September 2018
• PurpleRestore
  ...invalid or missing APTicket, trying to use AppleConnect, the TSS server is no longer accepting signatures for the version you are installing, or the nonc
  14 KB (2,017 words) - 02:34, 27 June 2022
• SHSH Protocol
  * <code>Pragma: no-cache</code> ...1.0 -X POST -A "InetURL/1.0" -H "Proxy-Connection: Keep=Alive" -H "Pragma: no-cache" -H "Content-Type: text/xml; charset=\"utf-8\"" -d @/location/to/TSSR
  13 KB (1,906 words) - 00:21, 3 January 2023
• Leftover Strings
  No help is available for BackupAgent at this time. You probably don't need to %s: WTF? Timer handler expired and there is no pending command
  7 KB (1,130 words) - 20:27, 13 February 2023
• Hacktivation
  ...to only activate when a SIM card from the providing carrier is inserted or no SIM card is inserted - this doesn't have to be the iPhone's original SIM ca ...t is needed to properly hacktivate modern iOS versions. As of yet there is no way to hacktivate an iPhone Xs/Xʀ or later iPhone, as they do not have boo
  4 KB (724 words) - 21:59, 22 March 2022
• Recovery Mode Controller
  This is the self-executable edition and requires no installation. Just double-click and it loads. However, as it all works in %
  2 KB (259 words) - 11:40, 14 November 2015
• 02.10.04
  A new [[N90AP|iPhone 4]] [[Baseband Firmware|baseband]] in iOS 4.1. There's no public [[unlock]] for it.
  143 bytes (20 words) - 09:51, 14 October 2015
• Zwindow
  ...any [[wikipedia:X11|X11]] applications (as well as the fact that there is no touch support or keyboard). It aims to provide an open-source graphical OS
  357 bytes (61 words) - 05:10, 13 October 2012
• K66AP
  ...oftware limitation. Sound was able to be produced out of the HDMI port but no sound came out of the dock pins corresponding to audio out on other iOS dev
  5 KB (827 words) - 01:07, 15 September 2021
• /usr/local/bin/ioflashstoragetool
  PPN Toggle: No
  2 KB (232 words) - 12:29, 19 June 2015
• Limera1n
  | [[AFC#AFC2|afc2]], reliability improvements, reboot no longer needed for Cydia; Also ~2&nbsp;KB smaller The jailbreak appears to execute something like the following (in no particular order):
  8 KB (1,143 words) - 15:59, 21 May 2022

View (previous 100 | next 100) (20 | 50 | 100 | 250 | 500)