Monday, June 21, 2010

4.0 Public Jailbreak for 3GS with old bootloaders

Please be aware of the the following requirements:

◦iPhone 3GS (with older bootroom, aka can be jb without tethering)
◦iTunes 9.2
◦iPhone is currently jailbroken
◦You have the original carrier sim (hactivation is not yet functional)

If you meet these requirements than you may proceed at your own risk. I will not be liable for any headaches, lost of productivity, lost messages, etc. Be aware as always, you many not be getting what you think if you are not grabbing the files directly from Apple. Ok so lets get started!

A.Download Pwnagetool 3.1.5 from here
B.Download redsn0w 0.9.5 from here
C.Download firmware bundle from here
Pick a new clean place to work, i recommend making a folder called jb. Extract all of the files and place them in this directory. You should have the following files:

◦Pwnagetool.app
◦redsn0w.app
◦iPhone2,1_4.0_8A293.bundle
Open a terminal window and change into the jb directory:

Wattz:jb Wattz$ ls -al
total 0
drwxr-xr-x@ 5 Wattz staff 170 11 jun 05:48 .
drwxr-xr-x 9 Wattz staff 306 11 jun 05:40 ..
drwxr-xr-x 3 Wattz staff 102 7 feb 13:20 PwnageTool.app
drwxr-xr-x 13 Wattz staff 442 10 jun 15:49 iPhone2,1_4.0_8A293.bundle
drwxr-xr-x@ 3 Wattz staff 102 9 jun 11:32 redsn0w.app
Wattz:jb Wattz$ rm -rf PwnageTool.app/Contents/Resources/FirmwareBundles/*
Wattz:jb Wattz$ mv iPhone2,1_4.0_8A293.bundle PwnageTool.app/Contents/Resources/FirmwareBundles/
Wattz:jb Wattz$ tar -zxpf redsn0w.app/Contents/MacOS/Cydia.tar.gz Applications
Wattz:jb Wattz$ rm -rf PwnageTool.app/Contents/Resources/CustomPackages/CydiaInstaller.bundle/files/Applications
Wattz:jb Wattz$ mv Applications PwnageTool.app/Contents/Resources/CustomPackages/CydiaInstaller.bundle/files/
Wattz:jb Wattz$ exit

Once you have completed these few steps, you may proceed to build your custom ipsw. Launch Pwnagetool, when it fails to find your firmware, select the location to it, possibly in your Downloads folder. After a couple of minutes of working, it will prompt you for your password, so enter it and then let it proceed. Once it is complete, and your custom ipsw has been built, it is time to go into iTunes. I *HIGHLY* recommend that you sync before going any further. Backup your contacts, calendars, music, photos, etc as these will all be wiped away.

Once the restore is complete you will be setting your iPhone up as a new device. *DO NOT RESTORE FROM BACKUP* If you need to do this, then do not proceed to restore the firmware. Because of change between 3.1.x and 4.0, restoring from backup is a very bad idea. Just a heads up. If you choose to ignore this warning, you are completely on your own.

So, you synced everything and are ready to restore… Select your iPhone, Hold the Option key and click on Restore. A dialog box will open and allow you to choose your image to restore. Navigate to the ipsw that you just created. Click on OK and let it do it’s thing. I have personally restored 5 times now without a problem so you should not have any issues here.

Congrats, your iPhone is now running iOS (I hate that name, I think of Cisco everytime I see or hear it!) 4.0 GM. Once you activate, you will see Cydia in your list of applications. Go ahead and launch it. You will quickly discover that none of the repo’s exist! Oh no! Not to worry, select Manage, Sources, Edit, Add and then enter “http://apt.saurik.com/cydia-3.7″ and select Add Source. It will get down to business and download repos, etc and then present you with the option to update. Do not hesitate to do a complete update. If it hangs, sometimes it will, just power cycle your phone and try again. You will end up with a working Cydia installation.

To recap, this is for Mac users only! Your baseband will be preserved! You must be already jailbroken for this to work. This does not use any new magical exploits, just the famous 24kpwn exploit so older bootroms are required. I will not offer support on why application or tool xyz does not work. Use of this is at your own risk!

No comments:

Post a Comment