The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information.

Difference between revisions of "Redsn0w"

From The iPhone Wiki
Jump to: navigation, search
m (Updating.)
Line 4: Line 4:
 
'''redsn0w''' is an [[iDevice]] [[jailbreak]]ing tool for OS X and Windows. Originally called [[QuickPwn]], but due to exploitation of the name by <code>www.quickpwn.com</code>, version 0.7 was renamed to redsn0w and added [[unlock]]ing of supported [[iDevice|devices]].
  
'''redsn0w''' is an [[iDevice]] [[jailbreak]]ing tool for OS X and Windows. Originally called [[QuickPwn]], but due to exploitation of the name by <code>www.quickpwn.com</code>, version 0.7 was renamed to redsn0w and added [[unlock]]ing of supported [[iDevice|devices]].
   
−
Version 0.8 added support for jailbreaking the [[n88ap|iPhone 3GS]].
 +
Version 0.8 added support for jailbreaking the [[N88AP|iPhone 3GS]].
   
−
Version 0.9b3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[n18ap|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[n88ap|iPhone 3GS]] units and [[n72ap|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.
 +
Version 0.9b3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18AP|iPod touch 3G]], and supports a [[tethered jailbreak]] on [[N88AP|iPhone 3GS]] units and [[N72AP|iPod touch 2G]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.
   
−
Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[n72ap|iPod touch 2G]] with iOS 3.1.3.
 +
Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72AP|iPod touch 2G]] with iOS 3.1.3.
   
−
Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[n82ap|iPhone 3G]] and [[n72ap|iPod touch 2G]] ([[Bootrom 240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.
 +
Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82AP|iPhone 3G]] and [[N72AP|iPod touch 2G]] ([[Bootrom 240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X.
   
 
Version [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] supports jailbreaking iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.
  
Version [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] supports jailbreaking iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.
Line 34: Line 34:
 
| {{yes}}
  
| {{yes}}
 
|
 
|
−
* Tethered jailbreak for [[n72ap|iPod touch 2G]] on iOS 2.1.1 with [[ARM7 Go]]
 +
* Tethered jailbreak for [[N72AP|iPod touch 2G]] on iOS 2.1.1 with [[ARM7 Go]]
 
|-
  
|-
 
! 0.3
  
! 0.3
Line 41: Line 41:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Untethered jailbreak for the [[n72ap|iPod touch 2G]] on iOS 2.2.1 with [[ARM7 Go]] and [[0x24000 Segment Overflow]]
 +
* Untethered jailbreak for the [[N72AP|iPod touch 2G]] on iOS 2.2.1 with [[ARM7 Go]] and [[0x24000 Segment Overflow]]
 
|}
  
|}
 
===0.7.x series===
  
===0.7.x series===
Line 56: Line 56:
 
| {{yes}}
  
| {{yes}}
 
| style="white-space: nowrap;" |
  
| style="white-space: nowrap;" |
−
* Untethered jailbreak for all devices but [[n88ap|iPhone 3GS]]
 +
* Untethered jailbreak for all devices but [[N88AP|iPhone 3GS]]
 
|-
  
|-
 
! 0.7.1
  
! 0.7.1
Line 115: Line 115:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Supports jailbreaking iOS 3.1.3 on [[m68ap|iPhone]], [[n82ap|iPhone 3G]], [[n45ap|iPod touch]], [[n72ap|iPod touch 2G]] ([[Bootrom 240.4|old bootrom]])
 +
* Supports jailbreaking iOS 3.1.3 on [[M68AP|iPhone]], [[N82AP|iPhone 3G]], [[N45AP|iPod touch]], [[N72AP|iPod touch 2G]] ([[Bootrom 240.4|old bootrom]])
 
|-
  
|-
 
|}
  
|}
Line 132: Line 132:
 
| {{no}}
  
| {{no}}
 
|
  
|
−
* Supports jailbreaking iOS 4.0 on [[n82ap|iPhone 3G]] and [[n72ap|iPod touch 2G]] ([[Bootrom 240.4|old bootrom]])
 +
* Supports jailbreaking iOS 4.0 on [[N82AP|iPhone 3G]] and [[N72AP|iPod touch 2G]] ([[Bootrom 240.4|old bootrom]])
 
|-
  
|-
 
! 0.9.5b4
  
! 0.9.5b4
Line 163: Line 163:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Supports jailbreaking iOS 4.0-4.1 on [[n82ap|iPhone 3G]] and [[n72ap|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[Bootrom 240.5.1|new bootrom]])
 +
* Supports jailbreaking iOS 4.0-4.1 on [[N82AP|iPhone 3G]] and [[N72AP|iPod touch 2G]] ([[tethered jailbreak|tethered]] on [[Bootrom 240.5.1|new bootrom]])
 
|-
  
|-
 
! 0.9.6b2
  
! 0.9.6b2
Line 170: Line 170:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[n72ap|iPod touch 2G]] with [[Bootrom 240.5.1|new bootrom]]) .
 +
* Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72AP|iPod touch 2G]] with [[Bootrom 240.5.1|new bootrom]]) .
−
** The [[n82ap|iPhone 3G]], [[n72ap|iPod touch 2G]] ([[Bootrom 240.4|old bootrom]]), and [[n88ap|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]) can also have custom boot logos.
 +
** The [[N82AP|iPhone 3G]], [[N72AP|iPod touch 2G]] ([[Bootrom 240.4|old bootrom]]), and [[N88AP|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]) can also have custom boot logos.
 
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.
  
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button.
 
|-
  
|-
Line 212: Line 212:
 
** -i <filename> to specify your reference IPSW
  
** -i <filename> to specify your reference IPSW
 
** -j to ask redsn0w to “Just boot now tethered for now”
  
** -j to ask redsn0w to “Just boot now tethered for now”
−
** -o for [[n88ap|iPhone 3GS]] and [[n72ap|iPod touch 2G]] units vulnerable to [[0x24000 Segment Overflow]].
 +
** -o for [[N88AP|iPhone 3GS]] and [[N72AP|iPod touch 2G]] units vulnerable to [[0x24000 Segment Overflow]].
 
|-
  
|-
 
! 0.9.6 release candidate 8
  
! 0.9.6 release candidate 8
Line 227: Line 227:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Adds support for jailbreaking iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[k66ap|Apple TV 2G]].
 +
* Adds support for jailbreaking iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[K66AP|Apple TV 2G]].
 
* New command line parameters k and d [http://twitpic.com/4gg8n1]:
  
* New command line parameters k and d [http://twitpic.com/4gg8n1]:
 
** -k --kernelcache=<str> use specified kernelcache (advanced)
  
** -k --kernelcache=<str> use specified kernelcache (advanced)
Line 260: Line 260:
 
|
  
|
 
* Adds support for jailbreaking iOS 4.3.2 on all compatible devices except the [[iPad 2]].
  
* Adds support for jailbreaking iOS 4.3.2 on all compatible devices except the [[iPad 2]].
−
** A bug existed that prevented the [[n90ap|iPhone 4 (iPhone3,1)]] from being jailbroken on iOS 4.3.2.
 +
** A bug existed that prevented the [[N90AP|iPhone 4 (iPhone3,1)]] from being jailbroken on iOS 4.3.2.
 
|-
  
|-
 
! 0.9.6 release candidate 14
  
! 0.9.6 release candidate 14
Line 267: Line 267:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Fixes an issue that prevented the [[n90ap|iPhone 4 (iPhone3,1)]] from being jailbroken.
 +
* Fixes an issue that prevented the [[N90AP|iPhone 4 (iPhone3,1)]] from being jailbroken.
 
|-
  
|-
 
! 0.9.6 release candidate 15
  
! 0.9.6 release candidate 15
Line 281: Line 281:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Fixes the [[n88ap|iPhone 3GS]]/[[n90ap|iPhone 4 (iPhone3,1)]] side switch vibration issue found in jailbroken installations of iOS 4.3.3.
 +
* Fixes the [[N88AP|iPhone 3GS]]/[[N90AP|iPhone 4 (iPhone3,1)]] side switch vibration issue found in jailbroken installations of iOS 4.3.3.
 
|-
  
|-
 
! 0.9.6 release candidate 17
  
! 0.9.6 release candidate 17
Line 295: Line 295:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Adds support for jailbreaking iOS 4.2.8 on the [[n92ap|iPhone 4 (iPhone3,3)]].
 +
* Adds support for jailbreaking iOS 4.2.8 on the [[N92AP|iPhone 4 (iPhone3,3)]].
 
|-
  
|-
 
! 0.9.6 release candidate 19
  
! 0.9.6 release candidate 19
Line 416: Line 416:
 
* Performs a [[tethered jailbreak]] of iOS 5.0b, 5.0b2, 5.0b3, 5.0b4, 5.0b5 and 5.0b6.
  
* Performs a [[tethered jailbreak]] of iOS 5.0b, 5.0b2, 5.0b3, 5.0b4, 5.0b5 and 5.0b6.
 
* Performs a [[tethered jailbreak]] of iOS 4.3.5 and 4.2.10 without pointing at an older IPSW.
  
* Performs a [[tethered jailbreak]] of iOS 4.3.5 and 4.2.10 without pointing at an older IPSW.
−
* Performs a [[tethered jailbreak]] of iOS 5.0b6 on a new, silently changed (by Apple) [[k48ap|iPad]] IPSW.
 +
* Performs a [[tethered jailbreak]] of iOS 5.0b6 on a new, silently changed (by Apple) [[K48AP|iPad]] IPSW.
−
* Fixes a bug in the 4.2.10 jailbreak on the [[n92ap|iPhone 4 (iPhone3,3)]] [[tethered jailbreak]].
 +
* Fixes a bug in the 4.2.10 jailbreak on the [[N92AP|iPhone 4 (iPhone3,3)]] [[tethered jailbreak]].
 
|-
  
|-
 
! 0.9.8b7b
  
! 0.9.8b7b
Line 424: Line 424:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Performs a [[tethered jailbreak]] for [[iOS]] 4.3.4, 4.3.5, 4.2.9, 4.2.10 on all supported devices except the [[n88ap|iPhone 3GS]] (old bootrom) and the [[iPad 2]]
 +
* Performs a [[tethered jailbreak]] for [[iOS]] 4.3.4, 4.3.5, 4.2.9, 4.2.10 on all supported devices except the [[N88AP|iPhone 3GS]] (old bootrom) and the [[iPad 2]]
 
* Performs an [[untethered jailbreak]] on [[iOS]] 4.1-4.3.3 on all supported devices except the [[iPad 2]]
  
* Performs an [[untethered jailbreak]] on [[iOS]] 4.1-4.3.3 on all supported devices except the [[iPad 2]]
−
* Performs a [[tethered jailbreak]] on [[iOS]] 5.0b - 5.0b7 on all supported devices except the [[n88ap|iPhone 3GS]] (old bootrom) and [[iPad 2]]
 +
* Performs a [[tethered jailbreak]] on [[iOS]] 5.0b - 5.0b7 on all supported devices except the [[N88AP|iPhone 3GS]] (old bootrom) and [[iPad 2]]
−
* Performs an [[untethered jailbreak]] on [[n88ap|Phone 3GS]] (old bootrom) on [[iOS]] 4.1-4.3.5 and 5.0b7
 +
* Performs an [[untethered jailbreak]] on [[N88AP|Phone 3GS]] (old bootrom) on [[iOS]] 4.1-4.3.5 and 5.0b7
−
* Fixed lingering issues with the [[n92ap|iPhone 4 (iPhone3,3)]] 4.2.10 [[tethered jailbreak]]
 +
* Fixed lingering issues with the [[N92AP|iPhone 4 (iPhone3,3)]] 4.2.10 [[tethered jailbreak]]
 
|-
  
|-
 
! 0.9.8b7c
  
! 0.9.8b7c
Line 435: Line 435:
 
| {{yes}}
  
| {{yes}}
 
|
 
|
−
* Same as 0.9.8b7b on all devices but [[n88ap|iPhone 3GS]] with [[06.15.00]] baseband
 +
* Same as 0.9.8b7b on all devices but [[N88AP|iPhone 3GS]] with [[06.15.00]] baseband
−
* Fixes [[iTunes Errors#Error 1015|error 1015]] when restoring to stock 4.3.5 on [[n88ap|iPhone 3GS]] with [[06.15.00]] baseband.
 +
* Fixes [[iTunes Errors#Error 1015|error 1015]] when restoring to stock 4.3.5 on [[N88AP|iPhone 3GS]] with [[06.15.00]] baseband.
 
|}
  
|}
   
Line 473: Line 473:
 
|
  
|
 
*Auto-detects the iOS 5.0 GM firmware now.
  
*Auto-detects the iOS 5.0 GM firmware now.
−
*Allows a jailbreak (albeit still tethered apart from [[n88ap|iPhone 3GS]] [[Bootrom 359.3|old bootrom]]) on iOS5 GM
 +
*Allows a jailbreak (albeit still tethered apart from [[N88AP|iPhone 3GS]] [[Bootrom 359.3|old bootrom]]) on iOS5 GM
 
|-
  
|-
 
!0.9.9b3a
  
!0.9.9b3a
Line 520: Line 520:
 
|
  
|
 
*Jailbreaks iOS 5.0.1b (9A402) tethered on devices vulnerable to [[limera1n exploit]].
  
*Jailbreaks iOS 5.0.1b (9A402) tethered on devices vulnerable to [[limera1n exploit]].
−
**Untethered on [[n88ap|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]).
 +
**Untethered on [[N88AP|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]).
 
|-
  
|-
 
!0.9.9b9
  
!0.9.9b9
Line 528: Line 528:
 
|
  
|
 
* Jailbreaks iOS 5.0.1 tethered on devices vulnerable to [[limera1n exploit]].
  
* Jailbreaks iOS 5.0.1 tethered on devices vulnerable to [[limera1n exploit]].
−
** Untethered on [[n88ap|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]).
 +
** Untethered on [[N88AP|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]).
 
* iBooks fix.
  
* iBooks fix.
−
* Allows custom IPSW creation for [[n88ap|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]) without SHSH blobs.
 +
* Allows custom IPSW creation for [[N88AP|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]) without SHSH blobs.
 
* Supports the 8 GB [[iPhone 4]].
  
* Supports the 8 GB [[iPhone 4]].
 
* Allows stitched IPSW creation for iOS 5.x.
  
* Allows stitched IPSW creation for iOS 5.x.
Line 556: Line 556:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Addresses a problem with the [[untethered jailbreak]] on [[n88ap|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]) devices.
 +
* Addresses a problem with the [[untethered jailbreak]] on [[N88AP|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]) devices.
 
|}
  
|}
   
Line 615: Line 615:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Fixes an issue with custom ramdisks on the [[n82ap|iPhone 3G]] and [[n72ap|iPod touch 2G]].
 +
* Fixes an issue with custom ramdisks on the [[N82AP|iPhone 3G]] and [[N72AP|iPod touch 2G]].
 
|-
  
|-
 
! 0.9.10b5c
  
! 0.9.10b5c
Line 630: Line 630:
 
|
  
|
 
* Jailbreaks iOS 5.1 tethered on devices vulnerable to [[limera1n Exploit]].
  
* Jailbreaks iOS 5.1 tethered on devices vulnerable to [[limera1n Exploit]].
−
** Untethered on [[n88ap|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]).
 +
** Untethered on [[N88AP|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]).
−
* Automatically detects MC model [[n72ap|iPod touch 2G]] with [[User:pod2g|pod2g]]'s steaks4uce exploit.
 +
* Automatically detects MC model [[N72AP|iPod touch 2G]] with [[User:pod2g|pod2g]]'s steaks4uce exploit.
 
|-
  
|-
 
! 0.9.10b6b
  
! 0.9.10b6b
Line 679: Line 679:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Newer devices ([[iPad 2]], [[iPad 3]], and [[n94ap|iPhone 4S]]) are able downgrade as well. In a radical departure from previous versions of [[redsn0w]], it now directly supports restoring [[IPSW File Format|IPSW]]s to your device.
 +
* Newer devices ([[iPad 2]], [[iPad 3]], and [[N94AP|iPhone 4S]]) are able downgrade as well. In a radical departure from previous versions of [[redsn0w]], it now directly supports restoring [[IPSW File Format|IPSW]]s to your device.
 
|-
  
|-
 
! 0.9.11b2
  
! 0.9.11b2
Line 686: Line 686:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Adds support for downgrading to [[Telluride 9A406 (iPhone 4S)|iOS 5.0.1 build 9A406]] for the [[n94ap|iPhone 4S]].
 +
* Adds support for downgrading to [[Telluride 9A406 (iPhone4,1)|iOS 5.0.1 build 9A406]] for the [[N94AP|iPhone 4S]].
 
|-
  
|-
 
! 0.9.11b3
  
! 0.9.11b3
Line 804: Line 804:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* Tethered jailbreak for iOS 6.0 on the [[k66ap|Apple TV 2G]], [[n88ap|iPhone 3GS]], [[iPhone 4]], and [[n81ap|iPod touch 4G]].
 +
* Tethered jailbreak for iOS 6.0 on the [[K66AP|Apple TV 2G]], [[N88AP|iPhone 3GS]], [[iPhone 4]], and [[N81AP|iPod touch 4G]].
 
** Untethered for iPhone 3GS devices with the [[iBoot-359.3|old bootrom]].
  
** Untethered for iPhone 3GS devices with the [[iBoot-359.3|old bootrom]].
 
* Allows devices with the A5 or newer to restore to iOS 5.x, as long as they have iOS 4.x or 5.x installed.
  
* Allows devices with the A5 or newer to restore to iOS 5.x, as long as they have iOS 4.x or 5.x installed.
Line 813: Line 813:
 
| {{yes}}
  
| {{yes}}
 
|
  
|
−
* After restoring an [[n88ap|iPhone 3GS]], redsn0w keeps track of its bootrom version while it's still open.
 +
* After restoring an [[N88AP|iPhone 3GS]], redsn0w keeps track of its bootrom version while it's still open.
 
* Fixes support for upgrading to/downgrading baseband [[06.15.00]].
  
* Fixes support for upgrading to/downgrading baseband [[06.15.00]].
 
|-
  
|-
Line 826: Line 826:
   
 
== Exploits used ==
  
== Exploits used ==
−
For [[m68ap|iPhone]], [[n45ap|iPod touch]], and [[n82ap|iPhone 3G]]:
 +
For [[M68AP|iPhone]], [[N45AP|iPod touch]], and [[N82AP|iPhone 3G]]:
 
*[[Pwnage]]
  
*[[Pwnage]]
 
*[[Pwnage 2.0]]
  
*[[Pwnage 2.0]]
   
−
For [[n72ap|iPod touch 2G]]:
 +
For [[N72AP|iPod touch 2G]]:
 
*[[0x24000 Segment Overflow]]
  
*[[0x24000 Segment Overflow]]
 
*[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.
  
*[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow.
 
*[[usb_control_msg(0xA1, 1) Exploit]] - used (in redsn0w 0.9.6b) to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow, as well as a [[tethered jailbreak]] on units with the [[Bootrom 240.5.1|new bootrom]].
  
*[[usb_control_msg(0xA1, 1) Exploit]] - used (in redsn0w 0.9.6b) to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow, as well as a [[tethered jailbreak]] on units with the [[Bootrom 240.5.1|new bootrom]].
   
−
For [[n88ap|iPhone 3GS]]:
 +
For [[N88AP|iPhone 3GS]]:
 
*[[0x24000 Segment Overflow]]
  
*[[0x24000 Segment Overflow]]
 
*[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].
  
*[[iBoot Environment Variable Overflow]] - Exploit has a different implementation from [[User:geohot|geohot]]'s implementation in [[purplera1n]].
Line 841: Line 841:
 
*[[limera1n]] exploit
  
*[[limera1n]] exploit
   
−
For [[n18ap|iPod touch 3G]]:
 +
For [[N18AP|iPod touch 3G]]:
 
*[[usb_control_msg(0x21, 2) Exploit]]
  
*[[usb_control_msg(0x21, 2) Exploit]]
 
*[[limera1n]] exploit
  
*[[limera1n]] exploit
   
−
For [[iPhone 4]], [[n81ap|iPod touch 4G]], [[k48ap|iPad]] and [[k66ap|Apple TV 2G]]:
 +
For [[iPhone 4]], [[N81AP|iPod touch 4G]], [[K48AP|iPad]] and [[K66AP|Apple TV 2G]]:
 
*[[limera1n]] exploit
  
*[[limera1n]] exploit
   
−
For [[iPad]], [[iPad 2]], [[iPad 3]], [[iPhone 3GS]], [[iPhone 4]], [[n94ap|iPhone 4S]], [[n18ap|iPod touch 3G]] and [[n81ap|iPod touch 4G]]:
 +
For [[iPad]], [[iPad 2]], [[iPad 3]], [[N88AP|iPhone 3GS]], [[iPhone 4]], [[N94AP|iPhone 4S]], [[N18AP|iPod touch 3G]] and [[N81AP|iPod touch 4G]]:
 
* [[Corona]]
  
* [[Corona]]
 
* [[Racoon String Format Overflow Exploit]]
  
* [[Racoon String Format Overflow Exploit]]

Revision as of 13:36, 10 October 2015

redsn0w on OS X

redsn0w is an iDevice jailbreaking tool for OS X and Windows. Originally called QuickPwn, but due to exploitation of the name by www.quickpwn.com, version 0.7 was renamed to redsn0w and added unlocking of supported devices.

Version 0.8 added support for jailbreaking the iPhone 3GS.

Version 0.9b3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the iPod touch 3G, and supports a tethered jailbreak on iPhone 3GS units and iPod touch 2G units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.

Version 0.9.2 supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on S5L8900 devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early iPod touch 2G with iOS 3.1.3.

Version 0.9.5b5-5 supports jailbreaking the iPhone 3G and iPod touch 2G (old bootrom) with iOS 4.0 on Windows and Mac OS X.

Version 0.9.6b6 supports jailbreaking iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.

Version 0.9.10b1 adds support for iOS 4.2.6 through 5.0.1 (though iOS 4.2.9, 4.2.10, 4.3.4, 4.3.5, and 5.0 are tethered on devices invulnerable to the 0x24000 Segment Overflow). This build of redsn0w is not capable of jailbreaking S5L8940 or newer devices.

Credit

iPhone Dev Team

Versions

Initial releases

Version Release date OS X-compatible? Windows-compatible? Changes
Lite Unknown Yes Yes
0.3 Unknown Yes Yes

0.7.x series

Version Release date OS X-compatible? Windows-compatible? Changes
0.7 Unknown Yes Yes
  • Untethered jailbreak for all devices but iPhone 3GS
0.7.1 Unknown Yes Yes Bug fixes for versions 0.7
0.7.2 Unknown Yes Yes Bug fixes for versions 0.7

0.8.x series

Version Release date OS X-compatible? Windows-compatible? Changes
0.8 7 July 2009 Yes Yes
  • Performs an untethered jailbreak on iOS 3.0/3.0.1 (when pointed at 3.0) for all devices supported by those firmware.

0.9.0-0.9.4 releases

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.2 Unknown Yes Yes
0.9.3 Unknown Yes Yes
  • Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
0.9.4 Unknown Yes Yes

0.9.5 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.5b3 21 Jun 2010 Yes No
0.9.5b4 Unknown Yes No
  • Resolved a problem with iBooks.
0.9.5b5 Unknown Yes No
  • Supposed to fix any APN or MMS issues that users were seeing.

0.9.6 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.6b1 21 September 2010 Yes Yes
0.9.6b2 31 October 2010 Yes Yes
0.9.6b3 21 November 2010 Yes Yes
  • Supports the installation of custom bundles
0.9.6b4 23 November 2010 Yes Yes
0.9.6b5 28 November 2010 Yes Yes
0.9.6b6 1 December 2010 Yes Yes
  • Allows you to "deactivate" a hacktivated phone, so sbinger's Subscriber Artificial Module (SAM) can trick your iPhone and iTunes into creating legitimate activation tickets.
0.9.6 release candidate 7 2 January 2011 Yes Yes
  • Introduced command-line arguments to bypass some screens.
0.9.6 release candidate 8 5 January 2011 Yes Yes
  • Informs users if a boot logo PNG is invalid, and why.
  • Introduced the "-a" command-line argument to eliminate clicking.
0.9.6 release candidate 9 3 April 2011 Yes Yes
  • Adds support for jailbreaking iOS 4.3.1 on all compatible devices except the iPad 2 and Apple TV 2G.
  • New command line parameters k and d [1]:
    • -k --kernelcache=<str> use specified kernelcache (advanced)
    • -d --devicetree=<str> use specified devicetree (advanced)
0.9.6 release candidate 10 7 April 2011 Yes Yes
  • Added boot animations
  • Removed misleading Settings
0.9.6 release candidate 11 7 April 2011 Yes Yes
  • Makes the boot animation a bit more robust
0.9.6 release candidate 12 8 April 2011 Yes Yes
  • Fix any lingering issues with the boot animation
0.9.6 release candidate 13 19 April 2011 Yes Yes
  • Adds support for jailbreaking iOS 4.3.2 on all compatible devices except the iPad 2.
0.9.6 release candidate 14 19 April 2011 Yes Yes
0.9.6 release candidate 15 6 May 2011 Yes Yes
  • Adds support for jailbreaking iOS 4.3.3 on all compatible devices except the iPad 2.
0.9.6 release candidate 16 16 May 2011 Yes Yes
0.9.6 release candidate 17 20 May 2011 Yes Yes
  • Adds advanced command line options for kernel hackers.
0.9.6 release candidate 18 14 June 2011 Yes Yes
0.9.6 release candidate 19 12 July 2011 Yes Yes
  • When a custom bundle is applied, most of the normal jailbreak steps (like stashing and untethering) are skipped.

0.9.7 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.7b1 26 December 2010 Yes No
  • Jailbreaks iOS 4.1-4.2.1 on all compatible devices.
    • Able to achieve an untethered jailbreak on 4.2.1, provided the user has 4.2b3 SHSHs and the 4.2b3 IPSW.
      • This version of "Jailbreak Monte" has quite a number of bugs, particularly app switcher crashes and disabled Bluetooth.
0.9.7b2 26 December 2010 Yes No
  • Fixes crashing bugs on GUI apps.
0.9.7b3 27 December 2010 Yes No
  • Fixes crashing bugs completely.
0.9.7b4 31 December 2010 Yes No
  • ubsmuxd integrated.
0.9.7b5 8 January 2011 Yes No
  • Issues related to Bluetooth and the sandbox are resolved.
0.9.7b6 10 January 2011 Yes No
  • fixes Skype

0.9.8 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.8b1 10 June 2011 Yes Yes
  • Performs a tethered jailbreak of iOS 5.0b and 5.0b2 (when pointed at the beta IPSW) on all compatible devices except the iPad 2.
0.9.8b2 11 July 2011 Yes Yes
  • Performs a tethered jailbreak of iOS 5.0b, 5.0b2, and 5.0b3 on all compatible device except the iPad 2.
  • Fixes the iOS 5.0b3 sandbox issues present in the previous version.
0.9.8b3 16 July 2011 Yes Yes
0.9.8b4 23 July 2011 Yes Yes
0.9.8b5 9 August 2011 Yes Yes
0.9.8b6 23 August 2011 Yes Yes
0.9.8b7 31 August 2011 Yes Yes
0.9.8b7b 2 September 2011 Yes Yes
0.9.8b7c 6 September 2011 Yes Yes

0.9.9 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.9b1 19 September 2011 Yes Yes
  • Complete rewrite.
  • No longer requires IPSWs when jailbreaking public builds. When jailbreaking beta/Golden master firmwares, need to specify IPSW once, then auto-recognizes it.
  • Redsn0w now fetches SHSH from device, querys Cydia about saved blobs, stitches IPSWs with SHSH blobs (not for iPhones) and able to submit SHSH to cydia
  • Includes Terminal shell commands into the GUI.
0.9.9b2 4 October 2011 Yes Yes
  • Fixes Verizon iPhone 4 firmware detection
  • Fixes 'Fix Recovery'
  • Fixes for Stitching
  • Fixes for blob processing
0.9.9b3 5 October 2011 Yes Yes
  • Auto-detects the iOS 5.0 GM firmware now.
  • Allows a jailbreak (albeit still tethered apart from iPhone 3GS old bootrom) on iOS5 GM
0.9.9b3a 5 October 2011 No Yes
  • Fixes a Windows-only caching bug
  • Allows Windows users to rename the redsn0w exe to anything containing 'boot' to jump straight to the tethered boot stage on load (thus adding one-click tethered boot to Windows redsn0w)
  • 0.9.9b3 still works fine for Mac users except they don't have the new 'boot' rename feature that this version has
0.9.9b4 12 October 2011 Yes Yes
  • Now auto-recognizes iOS 5 and no longer requires IPSW submission on iOS 5 jailbreak
0.9.9b5 13 October 2011 Yes No
  • Custom IPSW feature (from PwnageTool) for Baseband preservation.
0.9.9b6 18 December 2011 Yes Yes
  • Fixes location services issues for iPhone 3GS with 06.15.00 baseband
0.9.9b7 21 October 2011 Yes Yes
  • You can now choose whether you want redsn0w or Cydia to Stash Applications (can shorten redsn0w session by 60%)
0.9.9b8 3 November 2011 Yes Yes
0.9.9b9 19 December 2011 Yes Yes
0.9.9b9b 19 December 2011 Yes Yes
  • Enables the “Custom” button in Windows to allow baseband preservation.
  • Warns against flashing baseband 06.15.00 on newer iPhone 3GS devices (2011 week 35) more explicitly.
0.9.9b9c 19 December 2011 No Yes
  • Special build for Windows users encountering issues with the update check.
0.9.9b9d 20 December 2011 Yes Yes

0.9.10 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.10b 27 December 2011 Yes Yes
  • The jailbreak for iOS 5.0.1 is now untethered.
0.9.10b2 27 December 2011 Yes Yes
  • Fixes an issue with launchctl that the untether caused.
0.9.10b3 28 December 2011 Yes Yes
  • Fixes a problem where re-running redsn0w over an existing jailbreak would cause Mobile Substrate-based apps to stop running until Mobile Substrate was installed again.
0.9.10b3 novcheck 29 December 2011 No Yes
  •  ?
0.9.10b4 15 January 2012 Yes Yes
  • Includes a fix for iBooks on iOS 5.0.1.
  • Addresses an issue where the launchctl fix didn't work sometimes.
0.9.10b5 29 January 2012 Yes Yes
  • Circumvents jailbreak detection in iBooks that caused ~10% of images to display properly.
0.9.10b5b 1 February 2012 Yes Yes
0.9.10b5c 12 February 2012 Yes Yes
  • Prevents redsn0w from crashing due to increasing ramdisk sizes.
0.9.10b6 7 March 2012 Yes Yes
0.9.10b6b 11 March 2012 Yes No
  • Fixes small issues for Mac OS X v10.5.8 and earlier.
0.9.10b7 20 April 2012 Yes Yes
  • Implements the Corona A5 jailbreak for iPhone 4S and iPad 2 devices still at 5.0.1
  • Can also re-install that jailbreak for those who accidentally uninstalled the untether
  • When stitching an IPSW, it can now grab your blobs directly from Cydia.
  • Now shows a lot more info about your device, for instance, whether your iPhone 3G has the vulnerable baseband bootloader, or whether your iPhone 3GS has the old exploitable bootrom
0.9.10b8 23 April 2012 Yes Yes
  • Can backup those priceless activation tickets many are grabbing today
  • Adds ability to backup arbitrary directories or files from your device into a ZIP file on your Mac or PC
0.9.10b8b 23 April 2012 Yes Yes
  • Makes the ZIP files compatible with the native Windows Explorer.

0.9.11 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.11b1 11 May 2012 Yes Yes
  • Newer devices (iPad 2, iPad 3, and iPhone 4S) are able downgrade as well. In a radical departure from previous versions of redsn0w, it now directly supports restoring IPSWs to your device.
0.9.11b2 12 May 2012 Yes Yes
0.9.11b3 14 May 2012 Yes Yes
  • This release should fix the "Restore failed" messages people were sometimes getting.
  • Behaves better with nearby devices that have Wi-Fi syncing enabled.
0.9.11b4 14 May 2012 Yes Yes
  • Completes the tethered jailbreak support for iOS 5.1.1 on A4 devices and earlier, including proper "Stitching" and "Custom" creation of NO_BB IPSWs


0.9.12 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.12b 4 June 2012 Yes Yes
  • Adds Rocky Racoon for all devices on iOS 5.1.1.
    • On A4 devices and earlier, users can choose between the backup restore method (like Absinthe) or using a ramdisk-based jailbreak (how redsn0w usually works).
0.9.12b2 8 June 2012 Yes Yes
  • Users on iOS 5.1.1 are now explicitly asked if they wish to use the backup/restore method or the DFU ramdisk method for jailbreaking.
  • Fixes iBooks problems on the iPhone 3GS (old bootrom).
  • Provides more helpful error messages.

0.9.13 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.13 developer-only 1 13 June 2012 Yes Yes
  • Jailbreaks iOS 6.0b.
0.9.13 developer-only 2 15 June 2012 Yes Yes
  • Fix the various SSH problems and crashes with apps that some have been seeing.
0.9.13 developer-only 3 16 July 2012 Yes Yes
  • Covers 6.0b3 release and also adds explicit support for 6.0b2.
0.9.13 developer-only 4 13 September 2012 Yes Yes
  •  ???

0.9.14 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.14b1 18 June 2012 Yes Yes
  • Add a baseband downgrade option in redsn0w for those who are using the iPad’s 06.15.00 baseband on the iPhone 3G or iPhone 3GS.
0.9.14b2 4 July 2012 Yes Yes
  • Improves the iPad baseband downgrade and should cover anyone who couldn’t downgrade with 0.9.14b1. Also simplified the process and added logging to help diagnose any remaining stubborn iPhones.

0.9.15 series

Version Release date OS X-compatible? Windows-compatible? Changes
0.9.15b1 14 October 2012 Yes Yes
0.9.15b2 15 October 2012 Yes Yes
  • After restoring an iPhone 3GS, redsn0w keeps track of its bootrom version while it's still open.
  • Fixes support for upgrading to/downgrading baseband 06.15.00.
0.9.15b3 1 November 2012 Yes Yes
  • Save iPad 4 and iPad Mini SHSH blobs.
  • Fixes of error 14 when stitching blobs and error 2601 for windows users when restoring.

Exploits used

For iPhone, iPod touch, and iPhone 3G:

For iPod touch 2G:

For iPhone 3GS:

For iPod touch 3G:

For iPhone 4, iPod touch 4G, iPad and Apple TV 2G:

For iPad, iPad 2, iPad 3, iPhone 3GS, iPhone 4, iPhone 4S, iPod touch 3G and iPod touch 4G:

External Links

Retrieved from "https://www.theiphonewiki.com/w/index.php?title=Redsn0w&oldid=48674"