Search results

• Jailbreak (S5L8720x)
  ...m]]. It is based off of WTF 2.0, and is much more secure than the previous bootrom. It boils down to 3 things: ...So you cannot just cheat by sending a 1.1.4 iBoot and then using the diags exploit to strap a patched one ;-)
  14 KB (2,533 words) - 18:42, 28 May 2017
• 0x24000 Segment Overflow
  ...was the first exploit in the [[S5L8720]] that allowed people to bypass the bootrom signature checks on [[LLB]] and create what is known as an [[untethered jai == Exploit==
  11 KB (1,918 words) - 17:13, 22 October 2021
• Redsn0w
  ...iPhone 3G]] and [[N72AP|iPod touch (2nd generation)]] ([[Bootrom 240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X. ...P|iPod touch]], [[N72AP|iPod touch (2nd generation)]] ([[Bootrom 240.4|old bootrom]])
  23 KB (3,037 words) - 10:20, 15 May 2021
• Jailbreak (S5L8920+)
  * Find a new [[iBoot]] exploit every time a new firmware is out. * Use a bootrom exploit that allows unsigned code execution via USB.
  3 KB (399 words) - 09:52, 26 March 2017
• N88AP
  ===Bootrom=== ...vices that have [[Bootrom 359.3]] Units produced after 2009 week 40 have [[Bootrom 359.3.2]] and are not vulnerable to the [[0x24000 Segment Overflow]].
  3 KB (423 words) - 15:08, 2 March 2022
• S5L8920
  == [[Bootrom]] == '''Bootrom Version''': [[Bootrom 359.3]]
  1,003 bytes (136 words) - 07:36, 12 April 2017
• Greenpois0n (jailbreak)
  ...ts: SHAtter (a [[bootrom]] [[exploit]]) as well as a userland [[kernel]] [[exploit]] provided by [[User:Comex|Comex]] to make the jailbreak [[untethered jailb ...09}}, which led to a delay in greenpois0n's release (to implement geohot's exploit, not SHAtter).
  4 KB (585 words) - 23:37, 16 September 2021
• SSH Ramdisk
  ...rable to the [[limera1n Exploit|limera1n]] and [[checkm8 Exploit|checkm8]] bootrom exploits.
  1 KB (187 words) - 16:03, 4 November 2022
• T8010
  ==Bootrom Exploits== * [[Checkm8 Exploit|checkm8]]
  546 bytes (74 words) - 08:10, 5 December 2020
• T8002
  ==Bootrom Exploits== [[checkm8 Exploit|checkm8]]
  481 bytes (76 words) - 11:04, 27 June 2020
• GeekGrade
  1.[[limera1n]] - the bootrom exploit that allows pwned [[DFU Mode]]. Pwned DFU mode puts the device in a state w 4.[[limera1n]] - everytime the device is booted tethered, the exploit bypasses [[SHSH]] blobs verification, allowing it to boot.
  2 KB (302 words) - 10:59, 12 April 2017
• SHSH
  ...are the [[iPhone 3GS]] and [[iPod touch (2nd generation)]]. The [[limera1n Exploit]] is able to provide a [[Tethered Downgrade|tethered downgrade]] for vulner ...as the [[limera1n Exploit]], are fixed in the [[bootrom]] since version [[Bootrom 838.3]] and because iOS versions 5.0 and above includes a [[nonce]] in thei
  78 KB (8,893 words) - 02:38, 8 December 2022
• S5L8922
  == [[S5L8922 (Bootrom)|Bootrom]] Exploits == [[User:Geohot|Geohot]] has made use of his previously undisclosed bootrom exploit in [[limera1n]]. It is also implemented in Chronic Dev's [[Greenpois0n (too
  1 KB (165 words) - 09:53, 26 March 2017
• Usb control msg(0x21, 2) Exploit
  {{DISPLAYTITLE:usb_control_msg(0x21, 2) Exploit}} ...irmwares, and [[N72AP|iPod touch (2nd generation)]] ([[Bootrom 240.5.1|new bootrom]]) owners could have used it for a [[tethered jailbreak]] on 4.0 and 4.1, u
  5 KB (677 words) - 16:17, 22 May 2022
• Blackra1n
  ...n]] but now uses geohot's implementation of the [[usb_control_msg(0x21, 2) Exploit]]. ...nd the [[N18AP|iPod touch (3rd generation)]]. These devices have updated [[bootrom|bootroms]] that are not vulnerable to the [[0x24000 Segment Overflow]].
  3 KB (423 words) - 14:09, 17 September 2021
• Bootrom 240.4
  ...ble to the [[0x24000 Segment Overflow]] and the [[usb_control_msg(0xA1, 1) Exploit]]. [[Category:Bootrom]]
  792 bytes (115 words) - 13:54, 17 September 2021
• Bootrom 240.5.1
  ...is bootrom can be differentiated from those with the [[Bootrom 240.4|first bootrom]] by their model number; the new ones' model number begins with "MC, PC, an '''It is not vulnerable to the [[0x24000 Segment Overflow]] exploit'''.
  608 bytes (90 words) - 13:54, 17 September 2021
• Bootrom 359.5
  ...o the [[0x24000 Segment Overflow]], but it is vulnerable to the [[limera1n Exploit]]. [[Category:Bootrom]]
  229 bytes (37 words) - 04:48, 27 February 2022
• Bootrom 359.3
  [[S5L8920]] bootrom revision for the [[N88AP|iPhone 3GS]] sold between {{date|2009|06}} and {{d This bootrom is vulnerable to the [[0x24000 Segment Overflow]] and [[limera1n Exploit]], which together provide a "pwned for life" [[untethered jailbreak]]. This
  423 bytes (62 words) - 04:48, 27 February 2022
• Tethered jailbreak
  ...with iOS updates. Those tools do usually need minor software updates (not exploit-related) to explicitly support new iOS versions. They also use additional e
  2 KB (310 words) - 09:26, 26 March 2017

View (previous 20 | next 20) (20 | 50 | 100 | 250 | 500)