iOS 4.0 [HOW-TO] - Pwning 4.0 on New Bootrom 3G[S] w/3.1.2 SHSH Blobs

Discussion in 'iOS Jailbreak & Cydia' started by Jayden, Jul 4, 2010.

Thread Status:
Not open for further replies.
  1. Jayden

    Jayden Active Member

    Joined:
    Apr 18, 2010
    Messages:
    1,378
    Likes Received:
    24
    Device:
    4G iPod touch


    [HOW-TO] - Pwning 4.0 on New Bootrom 3G w/3.1.2 SHSH Blobs

    Finally iH8Sn0w has made a jailbreak for iOS4 for iPhone 3G Sadly it takes a long process, so be sure to follow ALL instructions
    Credit all goes to iH8Sn0w for making this tutorial!

    WHAT YOU WILL NEED:

    * An iPhone 3G -- new bootrom
    * 3.1.2 SHSH blobs.
    * difrnt's iBSS grabber
    * Payload Pwner-r2 for the 3GS.
    * sn0wbreeze V1.6.2
    * iBooty
    * LibUSB (64-Bit users read carefully!!!)
    * 3.1.2/4.0 3GS firmware downloaded. [Unfortunately I can't post the link to the firmware on here because that'll be against the MultiTouchFans' Forum Rules, sorry]
    -------
    STEP A : Grabbing your 3.1.2 iBSS file.

    Pointing your hosts :

    I : If you have your shsh blobs saved on Cydia/Saurik's server then follow this tutorial. -- http://saurik.com/id/12

    II : If you have it saved with TinyUmbrella, then download the GUI here. -- http://thefirmwareumbrella.blogspot.com/
    -------
    Restoring to grab the iBSS file.

    I : Place your device in DFU.

    II : Start up the iBSS/iBEC grabber.

    III : Put the save folder on a new folder on your desktop.

    IV : Hit "Start Monitoring".

    V : Now go back to iTunes and do SHIFT + Restore. Then browse for your 3.1.2 IPSW. You will need to restore
    to 3.1.2 in order to pwn 4.0.
    -------
    Saving your iBSS

    I : After Restoring, Go to the folder that you have specified to save your iBSS file.

    II : You will see folders like (Per**.tmp). Go into one of them, and you'll see a folder called "Firmware". Go there. Then go to the folder "dfu".

    III : Copy the iBSS file to a safe place, then you can remove the folder created by the iBSS Grabber.
    ------
    STEP B : Creating custom 4.0 firmware.

    I : Download sn0wbreeze from http://ih8sn0w.com and create your custom 4.0 ipsw.

    *Ignore the warnings after browsing for the ipsw.*
    ------
    STEP C : Installing LibUSB for iRecovery

    Run this mini tool to detect your O/S + Arch. -- Windows + Arch. Detector

    *********
    WARNING : IF LIBUSB IS NOT INSTALLED PROPERLY, YOUR USB MIGHT NO LONGER WORK!
    *********
    Windows XP Users download this installer -- LibUSB Installer
    *********
    Windows Vista/7 users RUNNING 32-Bit:

    * Download the installer and run it in compatibility mode for Windows XP.

    *********
    If you are a 64-Bit user, follow this tutorial -- LibUSB 64-Bit Tut
    *********

    Once LibUSB is installed iRecovery should be able to function now.
    -------
    STEP D : Pwning iBSS + iBoot

    I : Download this easy tool here -- Payload Pwner-r2 for 3GS // It will help you create the payloads.

    **SAVE THE PAYLOADS WHERE iBooty is.**
    -------
    STEP E: iBooty Prep.

    Most of you know of the utility "iBooty" that iH8Sn0w made for Aki_nG.

    It will work as long as you place all of the correct files there.

    I : Download iBooty GUI here -- iBooty for 3GS and Extract it.

    II : Extract your Custom IPSW created by sn0wbreeze with 7-Zip or another un-archiver.

    III : Grab the kernelcache and bring it into the same folder as ibooty.
    Also grab the iBEC from the folder "Firmware\dfu\iBEC.n88ap.RELEASE.dfu"

    IV :
    * Rename your iBSS 3.1.2 signed to "ibss312.dfu"
    * Rename your Kernel 4.0-Custom to "kernel.40"
    * Rename your iBEC 4.0-Custom to "ibec40.dfu"
    ======
    Your folder should look like this :

    - iboot.payload <-- Created with Payload Pwner.
    - exploitibss312 <-- Created with Payload Pwner.
    - ibec40.dfu <-- Grabbed from Custom IPSW made by sn0wbreeze.
    - irecovery.exe <-- Comes with iBooty.
    - readline5.dll <-- Comes with iBooty.
    - iBooty.exe <-- Comes with iBooty.
    - ibss312.dfu <-- THIS NEEDS TO BE YOUR iBSS from the restore!
    - kernel.40 <-- Grab from Custom IPSW made by sn0wbreeze.
    - sn0w.img3 <-- Comes with iBooty.
    ======
    -------
    STEP F: Restoring to 4.0 + Booting

    -------
    *MAKE SURE YOU ARE ON 3.1.2 WHEN DOING THIS*

    I : Run iBooty and Select "Prepare Device for Custom Firmware". Run the Process and if you see a snow flake, you can proceed!

    II : Now open iTunes and restore to the custom ipsw.

    ***WHEN DONE, YOUR DEVICE WILL HAVE A BLACK SCREEN AND NOT BOOT! ITS IN A DFU LOOP [THIS IS NORMAL!]***
    -------
    STEP G : Booting

    I : Just Re-Run iBooty and select "Boot It". If all goes well it will boot!
    -------
    Enjoy!
    -------
    Hopefully iH8Sn0w can get a tool out there that will make all of this much easier. Of course, that only happens when iH8Snow gets bored from ppl msging him on Twitter =p
    ============
    CREDITS:
    ============
    * iPhone Dev-Team (iH8Sn0w Borrowed the iBoot payload from them =])
    * msft.Guy (Helping out here and there.)
    * AKi_nG (For being the first to test this)
    * difrnt (For iBSS Grabber)
    * posixninja (For his continuous help!!!)
    * iH8Sn0w (Who put the tutorial together! Thanks!)
  2. JacobVengeance

    JacobVengeance Well-Known Member

    Joined:
    Apr 12, 2010
    Messages:
    3,697
    Likes Received:
    96
    Device:
    iPhone 4S (Black)
    You know copy and pasting only works if you fix the links, right?
  3. Jayden

    Jayden Active Member

    Joined:
    Apr 18, 2010
    Messages:
    1,378
    Likes Received:
    24
    Device:
    4G iPod touch
    The links are working, and I have updated it.
  4. JacobVengeance

    JacobVengeance Well-Known Member

    Joined:
    Apr 12, 2010
    Messages:
    3,697
    Likes Received:
    96
    Device:
    iPhone 4S (Black)
    Do you want to know what links you forgot?
  5. Jayden

    Jayden Active Member

    Joined:
    Apr 18, 2010
    Messages:
    1,378
    Likes Received:
    24
    Device:
    4G iPod touch
    Hmm, I just looked at the tutorial and I've fixed them

    Please Register or Log in to view images

    Enjoy

    Please Register or Log in to view images

  6. JacobVengeance

    JacobVengeance Well-Known Member

    Joined:
    Apr 12, 2010
    Messages:
    3,697
    Likes Received:
    96
    Device:
    iPhone 4S (Black)
    There you go. You were missing from Step C down lol.
  7. Jayden

    Jayden Active Member

    Joined:
    Apr 18, 2010
    Messages:
    1,378
    Likes Received:
    24
    Device:
    4G iPod touch
    Yeah, sorry. All fixed now

    Please Register or Log in to view images

  8. studangerous

    studangerous Super Moderator Emeritus Staff Member

    Joined:
    Dec 2, 2007
    Messages:
    5,975
    Likes Received:
    30
    Device:
    iPhone 4 (Black)
    You can't just cut and paste and then not cite the source... thread closed. Continue discussion of this subject here.
  9. goff101

    goff101 New Member

    Joined:
    Mar 16, 2008
    Messages:
    13
    Likes Received:
    0
    Device:
    iPad
    Does anyone know if this will work if using 3.1.3?
Thread Status:
Not open for further replies.

Share This Page