Tutorials

WinPwn 2.5 Guide

Sébastien Page ∙ Updated March 18, 2016

How to jailbreak 3G iPhone? How to unlock an iPhone 2G? These are 2 questions that will find an answer in the next few paragraphs. Believe it or not but it is illegal to jailbreak or unlock your iPhone but more importantly, it voids your warranty. Basically, you are unlocking/jailbreaking your iPhone at your own risk.

One last thing before we start.... Please do not complain to me if you have problems or if you have to restore several times. I am providing this WinPwn tutorial without any guarantee. I mean, I know it works and I know if you do everything I tell you, you won't have any problem. But I hate receiving insulting emails telling me what a jackass I am (I already know that, haha). If you're having issues, please post in the comments and I will do my best to answer your questions. Any insulting comment will be deleted.

IMPORTANT UPDATE: There is a confirmed bug with WinPwn 2.5 that can cause the WinPwn application to crash during the creation of your IPSW. Some users are finding that increasing the partition size to 700MB will resolve the issue. To specify the root size partition click the "Expert Mode" button before starting the tutorial. You will be asked to resize the partition before the IPSW starts building.

UPDATE 2: A new version of WinPwn (WinPwn 2.5.0.2) is now available and fixes bugs such as crashes. Go to our iPhone Downloads section to download WinPwn 2.5.0.2.

Ok, so let's learn how to jailbreak or unlock an iPhone (note that unlock is only available for iPhone 2G so far).

Download WinPwn 2.5 from our iPhone Downloads section. make sure you have iTunes 7.7 or upper. Download bootloaders 3.9 and 4.6 if you want to unlock your iPhone 3G. Open WinPwn 2.5. You will need the .net framework installed on your PC. It is most likely already here but if WinPwn 2.5 crashes, go to Microsoft website and download the .net framework. Leave the "Basic Mode" on. Choose your device. Select the green thumb up if you are using an official carrier like AT&T. If not, select the red thumb down. The red thumbs down will unlock and activate while the green will not. Answer the rest of the questions WinPwn will ask you. They are pretty simple. Select if you want to use a custom logo or not. For the purpose of this tutorial, we will use a custom logo. Select your firmware. Select the logo you want. Click the "Browse" button should you want to go online find more logos. If you are on an approved carrier such as AT&T in the US, skip to the next step. Otherwise, you will have a message saying: "Could not find BL-39.bin! Do you want to search for the file?" Click the green thumb to find the file that you downloaded in step 1. Your custom firmware will be built, which should take a little while. Once your custom ipsw firmware has been built, WinPwn 2.5 will ask you if you want to see instructions on putting your iPhone into DFU Mode. Click the green thumbs up button for yes or the red thumbs down button for no. For this tutorial, we will assume you want to see instructions. WinPwn will then prompt you to connect your iPhone via USB and make sure it's turned off. Do this then click the green thumbs up button. WinPwn will then say its ready to start Pwnage. Click the green OK button. Follow the steps to get your iPhone into DFU mode. Once you iPhone is in DFU mode WinPwn will begin the pwnage process. You will be informed when pwnage is complete. Notice that your iPhone will display a "Ready to restore Custom IPSW" message. iTunes will now prompt you that you are in recovery mode. Hold down SHIFT and click the Restore button in iTunes. Select the Custom firmware file we created using WinPwn. Your iPhone will now be restored to the jailbroken 2.0.x firmware of your choice!

Done!

iPhone apps crashing on launch fix

Sébastien Page ∙ August 28, 2008

Since the recent update to 2.0.2, many users reported that their applications crash really often when trying to open them. A few fix were offered, including decreasing the amount of iPhone applications on your device or, downgrading to an earlier version of iTunes.

These 2 fixes delivered different results but it seems the folks at iPhone Atlas finally discovered a real fix to this problem.

On the iPhone, select Settings > General > Erase all Content and Settings.

On a Mac, delete the following support files from the computer:

/Library/Receipts/AppleMobileDeviceSupport.pkg /Library/Receipts/iTunesAccess.pkg /Library/Receipts/iTunesX.pkg ~/Library/iTunes/Device Support (the entire folder) /System/Library/Extensions/AppleMobileDevice.kext /System/Library/PrivateFrameworks/DeviceLink.framework /System/Library/PrivateFrameworks/MobileDevice.framework ~/Library/iTunes/iPhone Software Updates (all contents)

On a Windows XP PC, delete the files in settings/[yourusername]/Application Data/Apple Computer/iTunes/iPhone Software Updates

On a Windows Vista PC, delete the files in C:/users/[yourusername]/AppData/Roaming/Apple Computer/iTunes/iPhone Software Updates

Delete the iTunes application

Restart the computer

Install iTunes 7.7

This method is obviously not for the average noobie as it requires some basics skills but that's the only solution so far to fix this issue with your iPhone.... at leat until Apple releases a new firmware update.

Thanks iPhone Atlas

Take your iPhone apart with a suction cup!

Sébastien Page ∙ Updated January 29, 2016

Interesting finding over at hackint0sh... One smart user found a way to take his iPhone 3G apart, using a suction cup.

Here is how it works:

Remove the two screws on either side of the charging port Apply a suction cup, to the glass screen. Try to mount it right below the home button. Pull the suction cup toward you and the screen should come out (bottom first) You will see 3 cables running from the top right corner of the screen to the main board of the phone. 3 cables are numbered 1, 2, and 3. Remove the cables in that order. Once the three cables are detached, the entire LCD unit is now separate from the main board.

This can be a handy trick, should you want to fix light leak for example, as this user did. No need to say that your iPhone warranty will be voided in a heartbeat...

iPhone 2.0.2 security flaw puts private data at risk

Sébastien Page ∙ August 27, 2008

You thought that password-protecting your iPhone would keep you safe? Think again! A pretty big security breach was found in iPhone firmware 2.0.2, putting some of your data at risk. Fortunately for the most paranoid of us, there is a way to avoid it.

What's this security flaw about?

Password protect your iPhone Slide and unlock and tap "Emergency call" Double tap the home button You're in! You're in the favorites more precisely

Now anyone using your phone can make a call to your favorites. On top of that, they can edit your contacts, view and listen to your voicemails, SMS, have access to email and Safari...

Apple will most likely fix this issue in the next firmware update but if you can't wait a couple weeks, here is how to fix it:

Go to Settings Tap General Tap Home Button Select either Home or iPod

This way, when someone uses the method described above, they will either be taken to the home screen or to the iPod screen.

150 beta update to the Windows QuickPwn application is out

Sébastien Page ∙ Updated February 5, 2016

After announcing the release of the new PwnageTool 2.0.3 for Mac OS X, the DevTeam spoiled us today with a new beta update to the Windows QuickPwn application.

DevTeam says:

This contains a revised GUI from Poorlad that has tighter integration into the the main updated QuickPwn executable which has fixes for YouTube and provides BootNeuter support for the unlock of 2G iPhones, remember this is still beta software, use at your own risk.

A "Nota Bene" from the DevTeam:

NB: QuickPwn Windows doesn’t work well with virtualization as there are some problems with the way USB resets are handled, so we wouldn’t advise trying it, we have had reports of some success with VMWare Fusion 2.0 Beta 2, but this shouldn’t be relied on, use PwnageTool instead, or wait for QuickPwn Mac.

Additionally, the DevTeam says that QuickPwn for Mac is currently being tested and we might see a beta release sometimes within the next few days. I'll keep you updated about that.

Also worth noting is that they are still working on a 3G baseband unlock solution but they are not there quite yet.

PwnageTool 2.0.3

Sébastien Page ∙ Updated January 23, 2016

Well, I just posted and "predicted" that following a short post on the the DevTeam's blog they would make available an updated version of their PwnageTool. I was right on as they just announced that PwnageTool 2.0.3 for Mac OS X is now available as a Sparkle update, or a direct download here.

So what's new on PwnageTool 2.0.3?

Support for iPhone/iPod touch firmware 2.0.2 5C1 Updated version of Installer.app beta 6 New .de localization for German speaking users

DevTeam warns us that:

The application SHOULD ONLY be downloaded as a .tbz file from our servers and should NOT be decompressed using the application called “the unarchiver” (this breaks permissions within PwnageTool) just use the standard OS X built in ‘Archive Utility’ to decompress. The SHA1 sum of PwnageTool_2.0.3.tbz is 91e670e0c623cd43f5e8cfbfaae6c23d98d8f31b.

Backing up iPhone applications data

Sébastien Page ∙ Updated October 9, 2018

I just read a long but interesting post over at Just Another iPhone Blog. Brandon talks about backing up the data that is contained in your applications. He takes the example of the Fuel Gauge app but it applies to any other application, especially games (I just reached level 36 at Enigmo and I'd be pissed to lose this in case I had to restore the phone).

Brandon highlights a great application that is available from Cydia: AppBackup.

How does AppBackup works?

Install from Cydia Open AppBackup Select the application you want to backup Select "Backup"

Backups are stored in /var/mobile/Library/AppBackup/tarballs as files called bundleid.tar.gz, where bundleid is a given app's bundle identifier (e.g. com.ooi.supermonkeyball). Backup times are stored in an XML property list at /var/mobile/Library/AppBackup/backuptimes.plist as Unix timestamps. If you want to "backup the backups," you should back up the entire /var/mobile/Library/AppBackup directory tree.

How to restore?

Open AppBackup Select the app you want to restore Hit "Restore"

QuickPwn 2.0.2

Sébastien Page ∙ Updated February 5, 2016

Woohoo, it only took a few days to the DevTeam and Poorlad to update their GUI version of QuickPwn and make it work with the latest iPhone firmware 2.0.2.

QuickPwn 2.0.2 contains their new bundles for 2.0.2 and they’ve also added support for version 2.0 devices which means you can QuickPwn and jailbreak the device if it is running 2.0, 2.0.1 or 2.0.2. Isn't it fabulous? (I love saying "fabulous", it sounds so gay though... haha)

Keep in mind that this is still beta software, so use the tool at at your own risk!

How to use QuickPwn 2.0.2? Well, simply follow the directions on my QuickPwn GUI tutorial. The method is exactly the same except that you will now be using the iPhone's firmware 2.0.2, which is available in the iPhone Downloads section of my site.

Here is important information from the DevTeam. Please read carefully.

Using QuickPwn does not update the firmware itself, this tool is designed to ‘Pwn’ (the ability to install future custom non-Apple firmwares) , ‘Jailbreak’ and install Installer or Cydia on a given device. If your device is running 2.0.1 and you QuickPwn it, it’ll still be running 2.0.1, although it will now be Pwned and Jailbroken, similarly if your device is running 2.0.2 and you QuickPwn it, it will then be running 2.0.2 but the device will now be Pwned and Jailbroken. It will also activate (not unlock) devices that are being used outside of their intended territories and cannot be activated using iTunes.

If you want to update to 2.0.2 then use the normal iTunes update to get to 2.0.2 and then use QuickPwn to Pwn, Jailbreak and Activate, remember that the 2.0.2 update includes a baseband update for the 3G iPhone, so depending what your long term intentions are for the phone, update wisely, of course in the upcoming PwnageTool application you’ll be able to create a custom ipsw without the baseband update enabled.

There is no Mac version so far.

QuickPwn GUI Guide

Sébastien Page ∙ Updated February 5, 2016

I told you yesterday that the Dev Team had release QuickPwn, as a beta version. Well, "poorlad” has stepped up and created a GUI version of QuickPwn (available in the iPhone Downloads section) based on the Dev Team's Windows release.

As for me, I'm still on 2.0. Yep, I haven't updated yet. 2.0 is slow and buggy but I hate spending hours jailbreaking my phone. Even though the jailbreaking process is quick and easy, it always takes me forever to set my iPhone to its past settings after restoring.

So, how to use QuickPwn? This is your QuickPwn Guide!

Download QuickPwn and QuickPwn GUI and extract them in the same folder. Open iTunes and connect your phone. Make sure iTunes recognizes your phone. Leave your phone plugged in and let iTunes run. Download the proper firmware image; either 2.0.1 3G or 2.0.1 2G. Save this firmware image in the same folder as the quickpwn.exe file you extracted in step 1. Launch QuickPwn GUI. Select your device and hit next. Click "Browse". Go to the folder where you saved your firmware image and select your firmware. You should get a check mark, meaning all is good. Click Next On the next screen, you are asked to choose Cydia and/or Installer. My recommendation is to just select Cydia as Installer is stii very buggy. Click Next You will get a message saying you are ready to launch the Pwnage process. Click “Go”. You will see some crazy codes go by on your screen. Then you will be asked to turn off your phone and press enter when you have done so. Per the directions on your screen, turn off your phone by holding power, sliding to power off, and waiting for it to power off. Do not disconnect the phone from your PC! If you do, you must start over. Put your phone into DFU Mode. If you don't know how to do this, look at this DFU guide. Or else, go to YouTube and see how it's done. It sometimes takes multiple attempts to get into DFU mode. And, if you fail to get into DFU mode, the app quits and you must start over at step 8. When you are in DFU mode, the app should automatically take over and you will see the progress of the Pwnage on your screen. DONE!

Optional 2G phone only. If you need to unlock your phone, install bootneuter from Cydia and run it! Select “neuter, unlock, do not change bootloader settings, and then flash!”.

Thanks Boss

Quick Pwn Beta

Sébastien Page ∙ Updated February 5, 2016

The DevTeam just realeased a VERY beta version of an application called Quick Pwn. This application will pawn your phone pretty quickly without having to restore. If you're already on a 2.0.2 pawned device, you don't need to do this. Actually, since it's still in Beta and quite unstable, it is only recommended to "experienced" users... This version is only compatible with Windows so far but the Team should develop a Mac version soon.

Download Quick Pwn and extract it to a folder. Download the proper firmware image such as 2.0.1 3g or 2.0.1 2g. Start iTunes and make sure your phone is recognized by it. Leave iTunes running but don’t touch it again. While the command prompt will say “kill all itunes processes”, you must ignore this step. Plug your phone up to your PC and double click either “iPhone 2G.bat”, “iPod touch.bat”, or “iPhone 3g.bat” depending on which device you have. Some crazy codes will show on your screen. Per the instructions on the screen, turn off your phone by holding power, sliding to power off, and waiting for it to power off. Do not take the phone off the PC connection or else you will have to start over. Get your phone into DFU mode. This can be quite tricky and you may have to try several times. I usually get it right the first time. If you're not sure how to do this, either YouTube it or check this out. Press ENTER when you are in DFU mode. Then ignore the directions on the screen until it recognizes your phone is in DFU mode. Optional step for 2g phone only. If you need to unlock your phone, install bootneuter from Cydia and run it! Select “neuter, unlock, do not change bootloader settings, and then flash!”.

Troubleshooting:

You see this: Is your device connected to your computer via USB? Type “Y” to continue. Is your iPhone currently powering on? Type “Y” to continue. If you see these questions it means that your phone is not being recognized by the PC. Remember you must have iTunes running and it must see your device. Close and reopen iTunes, disconnect and reconnect your device, or even reboot your PC.

Thanks Boss

How to install iphone games / applications without Cydia or SSH in ISPW

Sébastien Page ∙ Updated January 23, 2016

Thought I’d share something i just tried and worked.

Full credits go to Dabbler who originally posted this on MMI and Hackint0sh.

You want to install iPhone games and applications, but if like me, want to keep your phone as stock as possible (no Cydia, no SSH or any of that) then this is how you do it.

1-Create a custom firmware using the latest pwnage 2-Do not select Cydia, packages or anything else (unless you want to unlock / neuter etc) 3-When pwnage tool asks you for your admin password, around 3/4 of the way through the process – DO NOT ENTER IT 4-Look for the finder window that has opened on your desktop 5-Navigate to navigate /System/Library/PrivateFrameWorks/MobileInstallation.framework 6-Delete the file MobileInstallation 7-Cope the modified MobileInstallation to this folder (I will not say where to get it, but the usual places for modified iPhone stuff would have it) 8-Get the info on the file and set all permissions to read/write 9-Close the window 10-Enter your password that was asked for earlier in pwnage tool. 11-Continue as normal and flash your apparent vanilla ispw to your iPhone. 12- Sync one legit (free or purchased) iPhone app or game to your iPhone.

This is the good bit, you now have a iPhone with no Cydia, no SSH nothing except a modified MobileInstallation framework!

What does this mean? Well you can obtain IPA’s of iPhone applications and games, double click them – they will import to the itunes applications section and you can sync them to your phone just like store bought applications! It also means you can also delete them directly from the iPhone using the hold-app-press-x method – No more SSH or Cydia.

App Store is live. This is how to access it

Sébastien Page ∙ July 10, 2008

The new iTunes 7.7 is now up and running. This new version of iTunes will work directly with the iPhone firmware 2.0 when available.

I just downloaded and installed the new version of iTunes and it took me a while to figure out how to access the App Store as it is not fully shown yet.

To access the App Store, simply search for "AOL" and it will show you 3 apps available. Click on any of them to have the full description. Now click on the "App Store" tab at the top of the page and it will take you to the App Store home page.