Redsn0w

redsn0w 0.9.5-b5

redsn0w was originally called QuickPwn but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a jailbreaking tool for all current devices as well as providing unlock support the iPhone 2G. As of version 0.8, the iPhone 3GS can also be jailbroken through redsn0w.

Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the iPod touch 3G, and supports a tethered jailbreak on iPhone 3GS units and iPod touch 2G units with new bootroms. In addition, this version supported custom boot and recovery mode logos, as well as verbose mode on bootup.

The final release, version 0.9.2, supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on S5L8900 devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early iPod touch 2G with iOS 3.1.3.

Version 0.9.5b5-5 supports jailbreaking the iPhone 3G and iPod touch 2G (old bootrom) with iOS 4.0 on Windows and Mac OS X.

redsn0w 0.9.6b1 supports jailbreaking the iPhone 3G and iPod touch 2G (both bootroms, although the new bootrom's jailbreak is tethered) with iOS 4.0 through 4.1 on Mac OS X and Windows.

Credit

iPhone Dev Team

Versions

Version	Release date	Changes
0.9.2	Unknown	Supports 3.0-3.1.2 on all iPhones and iPod touches (still a tethered-only JB for late-model devices though)
0.9.3 beta	Unknown	Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
0.9.4	Unknown	Supports jailbreaking iOS 3.1.3 on iPhone 2G, iPhone 3G, iPod touch 1G, iPod touch 2G (old bootrom/MB model)
0.9.5 beta 5-3	June 21, 2010	Supports jailbreaking iOS 4.0 on iPhone 3G and iPod touch 2G (old bootrom/MB model)
0.9.5 beta 5-4	Unknown	Resolved a problem with iBooks.
0.9.5 beta 5-5	Unknown	Supposed to fix any APN or MMS issues that users were seeing.
0.9.6 beta 1	September 21, 2010	Supports jailbreaking iOS 4.0-4.1 on iPhone 3G and iPod touch 2G (tethered on new bootrom)
0.9.6 beta 2	October 31, 2010	Supports jailbreaking iOS 4.0-4.1 on every device that supports those firmwares. The Windows version also includes a function that permits users to restore to a custom IPSW, akin to PwnageTool's DFU button.

Exploits used

For iPod touch, iPhone and iPhone 3G, see:

• Pwnage
• Pwnage 2.0

For iPod touch 2G, see:

• 0x24000 Segment Overflow
• ARM7 Go - was used to upload the oversized LLB required to utilize the 0x24000 Segment Overflow.
• usb_control_msg(0xA1, 1) Exploit - used to upload the oversized LLB to utilize the 0x24000 Segment Overflow. It is also used for a tethered jailbreak on units with the new bootrom.

For iPhone 3GS, see:

• 0x24000 Segment Overflow
• iBoot Environment Variable Overflow - Exploit has a different implementation from geohot's implementation in purplera1n.
• usb_control_msg(0x21, 2) Exploit

For iPod touch 3G

• usb_control_msg(0x21, 2) Exploit