PwnageTool

PwnageTool is an iOS jailbreak tool for Mac OS X that jailbreaks by creating a custom IPSW. You are allowed to change boot logos and add pre-installed packages to the IPSW. After an IPSW is created you can use it for restore using iTunes.

Credit

iPhone Dev Team

Exploits Used

Version 1.0

• Pwnage
• Ramdisk Hack

Version 2.0

• Pwnage 2.0
• Pwnage

Version 4.0

• Bootrom exploit (used by limera1n and greenpois0n)

Models Supported

Model	Since
iPhone 3G	19 July 2008
iPod touch 3GS	2 October 2009
iPhone 4 (iPhone3,1)	20 October 2010
iPod touch 3G	20 October 2010
iPod touch 4G	20 October 2010
iPad	20 October 2010
Apple TV 2G	20 October 2010

Please note that the iPad 2 and the iPhone 4S are not yet supported, as there is no publicly available bootrom exploit (like Pwnage, Pwnage 2.0, limera1n) for the A5-Processor.

Versions

PwnageTool was released 3 April 2008 but largely unused until version 2.0 was released 19 July 2008. The following versions that are shown here are not beta, alpha, or in development.

1.x: First release of PwnageTool

Version	Release Date	Features
1.0	3 April 2008	Initial release Supports iPod touch and iPhone. Includes 2 modes: iPwner and custom .ipsw Uses Ramdisk Hack+Pwnage in iPwner then creates the firmware.
1.1	17 April 2008	Jailbreaks 1.1.4 firmware Supports iPod touch and iPhone. Custom boot logos can now be added Added Bootneuter integration Still uses iPwner and custom .ipsw

2.x: Second major release of Pwnagetool

Version	Release date	Features
2.0	19 July 2008	Added iPhone 3G support [1] Jailbreaks 2.0 Firmware Change boot logos Adds Cydia by default
2.0.1	4 August 2008	Jailbreaks 2.0.1 firmware Works for 2.0 and 2.0.1.
2.0.2	21 August 2008	Jailbreaks 2.0.2 firmware [2] Works for 2.0, 2.0.1, and 2.0.2. Bug fixes - for when it doesn't go to the next page when you click on something.
2.0.3	25 August 2008	Jailbreaks 2.0.2 firmware Works for 2.0, 2.0.1, and 2.0.2.
2.1	13 September 2008	Jailbreaks 2.1 firmware Removed backwards compatibility Download packages from a valid Cydia source, and add them onto your custom IPSW.
2.2	21 November 2008	Jailbreaks 2.2 firmware
2.2.5	30 January 2009	Jailbreaks 2.2.1 Not updated by iPhone Dev Team but made official.

3.x: Third Major Release of PwnageTool

Version	Release date	Features
3.0	19 June 2009	Jailbreaks 3.0 firmware DFU mode instructions included
3.1	15 September 2009	Jailbreaks 3.1 firmware for iPhone and iPhone 3G Jailbreaks 3.1.1 firmware for iPod touch
3.1.3	2 October 2009	Support for iPhone 3GS with Bootrom 359.3 bootrom and iPod touch 2G with Bootrom 240.4 bootrom (these devices need to be pwned from 3.0/3.0.1)
3.1.4	13 October 2009	Jailbreaks 3.1.2 firmware for iPhone, iPhone 3G, 3GS with Bootrom 359.3 bootrom, iPod touch, iPod touch 2G with Bootrom 240.4 bootrom iPod touch 3G not supported.
3.1.5	7 February 2010	Jailbreaks 3.1.3 firmware for devices supported in 3.1.4.

4.x: Fourth Major Release of PwnageTool

Version	Release date	Features
4.0	22 June 2010	Jailbreaks iOS 4.0 for devices supported in 3.1.4.
4.01	23 June 2010	Fixes iBooks issue.
4.1	20 October 2010	Jailbreaks iOS 4.1 for Apple TV 2G, iPad, iPhone 3G, iPhone 3GS (both bootroms), iPhone 4, iPod touch 3G, and iPod touch 4G.
4.1.1	22 October 2010	Fixes issues with Leopard.
4.1.2	22 October 2010	Fixes more issues with Leopard.
4.1.3	28 November 2010	Enables installing the 06.15.00 baseband on the iPhone 3G and iPhone 3GS
4.2	15 February 2011	Support for iOS 4.2.1 on every device that is compatible, except for the iPod touch 2G.
4.3	3 April 2011	Support for iOS 4.3.1 on every device that is compatible, except for the iPad 2.
4.3.2	27 December 2011	Support for iOS 4.3.2 on every device that is compatible, except for the iPad 2.
4.3.3	8 June 2011	Support for iOS 4.3.3 on every device that is compatible, except for the iPad 2.
4.3.3.1	8 May 2011	includes a fix for the iPhone 3GS / iPhone 4 side switch vibration issue (only for 4.3.3)

5.x: Fifth Major Release of PwnageTool

Version	Release date	Features
5.0.1	27 December 2011	Jailbreaks iOS 5.0.1 for non-A5 devices.
5.1.1	4 June 2012	Jailbreaks iOS 5.1.1 for non-A5(X) devices.

Creating the Firmware

PwnageTool takes the IPSW file and patches it, creating a custom version. This enables a lot more features such as pre-installed packages, BootNeuter (iPhone software unlock), custom packages and boot logos. This method is usually less secure than the quick exploits such (redsn0w, QuickPwn, purplera1n, blackra1n, etc.).

How to create Custom Firmware Bundles

Main article: Making PwnageTool Bundles

Problems

This method does have negative aspects. The most common errors are the 16xx range of errors, which mean that the either the firmware file is corrupt or you didn't put it in the right mode (Recovery, DFU Mode). Sometimes the problems could just be a computer problem such as the memory is full or the USB port is broken. The most common error is Error 1604 which means that the firmware file is corrupted.

Windows

PwnageTool is expected to remain exclusive to Mac OS X. As of October 2009, iH8sn0w, et. al. has announced that they made a project that will bring PwnageTool's functionality to Windows, called sn0wbreeze. [3]

License

PwnageTool is freeware.

See also

• redsn0w
• ultrasn0w