This tutorial will show you how to use PwnageTool to jailbreak your iPhone firmware 2.2.1. Note that PwnageTool only works with Mac OS X. PwnageTool will create a custom 2.2.1 firmware that you will then load to your iPhone. This will allow you to update your iPhone without updating the baseband, which is a very important feature if you’re considering using YellowSn0w to unlock your iPhone.

Note from the Dev Team:

This applies if you have a locked iPhone 3G and you wish to update to 2.2.1 but preserve the iPhone’s current baseband software. Preserving the baseband will ensure that you can still use “yellowsn0w” the iPhone 3G unlock application. To upgrade your phone to 2.2.1 and preserve the state of the baseband you need to create a custom .ipsw with PwnageTool. This custom .ipsw will not contain the baseband update but of course will still give you any new stuff from 2.2.1

As usual, you’re pwning your iPhone at your own risks…

All the files needed for this are available from the iPhone Downloads section of the site.

1. On your desktop, create a folder called “Pwnage”. In this folder, save a copy of PwnageTool 2.2.5 and firmware 2.2.1.

2. Double click  PwnageTool 2.2.5 to mount it then drag & drop the PwnageTool icon in the Pwnage folder you created in step 1.

3. Launch PwnageTool.

4. You will then get a warning telling you that PwnageTool is a free tool. Click “ok”.

5. At the top left, select “Expert Mode”.

6. Select what device you’re using (in our case, it’s an iPhone 3G), then click the blue arrow to continue.

7. Now PwnageTool should automatically detect your 2.2.1 IPSW file you downloaded in step 1. If not, click “Browse for IPSW” and locate it.

8. PwnageTool will now give you different options. I suggest you only select “Cydia” the click “Build” to start building the custom IPSW file.

9. You will then be asked to choose where you want to save your custom firmware. Save it in the Pwnage folder you created in step 1.

10. PwnageTool will then create your custom IPSW file. Please be patient as it will most likely take 10-15 minutes.

11. You will then be asked to enter your admin password.

12. PwnageTool will then ask “has your iPhone 3G been pwned before?” If you are unsure, click no.

13. Per the directions, turn off your iPhone. Make sure it is connected to your computer.

14. This step is very important so make sure you follow the instructions correctly.PwnageTool will ask you to hold the home and power button for 10 seconds. Then release the power button while still holding the home button for 10 seconds. Your iPhone will then enter DFU mode.

15. If you fail, PwnageTool will give you the opportunity to start this process again. Simply unplug your iPhone, reboot it, plug it back in, and turn off the iPhone when PwnageTool asks you to.

16. PwnageTool will let you know once you successfully enter DFU mode.

Note: Mac OS X 10.5.6 users may have an issue with putting their iPhone in DFU mode. The easiest way to solve this is to use a USB hub between your iPhone and your Mac. Another way to do this is to run the Automator Script.

17. At this point, you will launch iTunes and restore your iPhone with your custom firmware bundle by holding the “Alt/Option” button and clicking “restore”.

18. Select the custom IPSW file you created (iPhone1,2_2.2.1_5H11_Custom_Restore.ipsw) and click “open”.

19. iTunes will then restore your iPhone, which should take 10-15 minutes.

20. After restoring your iPhone, iTunes will ask you to either “set up as a new phone” or restore from backup. I always choose “set up as a new phone” as it gives you the opportunity to start from a clean and fresh iPhone.

21. Your iPhone will reboot automatically and you will now have a pwned iPhone.

22. Voila!

Please leave a comment if you have any question.

  • Pingback: Dev Team Updates QuickPWN and PwnageTool for 2.2.1()

  • If I wanted to Jailbreak a iPhone that is currently running 2.2.1 for the first time – will all the data – apps I’ve downloaded, contact list – be deleted upon jailbreak?

  • Greg – yes, but you can set up your iPhone as a new phone as described in step 20

  • But if i don’t want to erase everything – and keep the old settings is that possible?

  • JP

    Can you post a copy of the result 2.2.1 firmware for the iphone 3g WITHOUT the baseband update? i dont have a mac… thanks in advance!

  • Brian

    I tried doing this on my girlfriends iphone after the update had been applied. Everything seemed to work fine until I noticed that the iphone would never reactivate and connect to the AT&T network.

  • James

    I have my wifes phone that is still on the 2.2 firmware and the previous 02.28.00 baseband that is susceptible to yellosn0w. The phone is not jailbroken yet and I do not want to update to the latest 2.2.1 firmware. How can I jailbreak so that I can still use yellosn0w? Should I use quickpwn 2.2? what about the ipsw? do is still need to download it since it is already on the itunes when it was last upgraded? Thanks.

  • Amon

    I updated my iphone 3g to 2.2.1 with a 02.30.00 baseband by mistake.
    We all know yellowsn0w doesnt work with this baseband, so i managed to downgrade to version 2.2 and jailbreak it, but unfortunately my baseband didnt change, its still 02.30.00 and cant use yellowsn0w anymore.

    Anyone know if there’s anyway i can unlock the phone to use with all network???

    Any help would be appreciated. Thanks

  • Caco

    Amon, I have the same issue. How can we downgrade the basebando from 2.30 to 2.28?

  • paul

    Caco & Amon, I have the same problem, we must wait……… 🙁

  • Greg

    The new release of QuickPwn-2.2.5 does not prompt me for Advanced User when I go through the steps. I believe the drawback of not having this option, is that you don’t get to select an option that says you are already an AT&T subscriber, and you are then required to activate your phone (again) before it works.

    Please correct me if i’m wrong, but I thought I already tried this with 2.2-1


  • Pingback: Admin KnowledgeBase » Blog Archive » IPhone - Jailbreak Firmware 2.2.1()

  • Amon

    hey Paul, Caco
    just came across some website stating the unlock is now possible

    Ill let you guyz know the result once i try to install it.

  • cee

    I have done all of the above but when choosing to start again or restore from backup in point 20; i chose restore. other sites say that this is possible. when i do this it erases cydia and installer. what can i do to prevent this.

  • arb7

    There is one bug in your tutorial. It points you to the download page to get the 2.2.5 of Pwnage tool, but that download isn’t present. I just downloaded the top version from there not noticing it was a 2.2.1 and ended up searching the internet for a few hours as to why I was getting the “wrong firmware bundle selected” error during the pwnage process. My bad, shouldn’t have been doing this so late when I’m tired but for the benefit of everyone out there it would be great if you could expose the correct download to stop noobs making the same mistake 🙂

  • mj23

    arb7, I’ve got a similar, if not the same problem:
    using 2.2.5 Pwnage
    downloaded 2.2.1 for iphone 2G
    opened pwnage, and it can’t find the firmware. i browse and select the firmware, and it comes up with the “wrong firmware bundle”. I’ve tried countless times to no avail..

  • gcat

    I did exactly as is written here and my iPod touch will not turn on. What must I do?

  • gcat

    And else, my iTunes doesn’t recognize the iPod

  • i love this song!! it is so awsome!!

  • If you want to create your own Custom Restore 2.2.1 iPhone 3G Firmware with Pwnage and you don’t have a Mac OS X Computer, you can use VMWare Virtual Machine to do this…

    I did it without any problem.

    You can google PCWIZ Mac OS X for VMWare on Windows.

  • Pingback: 3 Ways to Unlock Your iPhone()

  • emkay

    if i wanna unlock the iPhone what do i do? do i just follow the same step?

  • emkay

    and i cant seems to find pwnage 2.2.5. Do i just download 2.2.1?

  • emkay

    i cannot lanch the pwnage.. it’s just a torrent files that i get.

  • emkay

    i cannot mount the pwnage. it says it not reconiged

  • Animation

    How do I jailbreak my ipodtouch 2g with a windows computer

  • this tutorial works for iphon 1g? and if is unlock aready? i just want to update to 2.2.1 and jailibreack ti is the same?

  • Max

    Hi will this also work for the itouch 2nd generation? The 16gb

  • monkers

    ahhh.. no 2.2.5 bro!