The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Kirkwood 7A341 (iPhone2,1)"
m (1 revision imported) |
|||
(14 intermediate revisions by 7 users not shown) | |||
Line 1: | Line 1: | ||
+ | {{keys |
||
− | == Exploits == |
||
+ | | Version = 3.0 |
||
− | * [[iBoot Environment Variable Overflow]] |
||
+ | | Build = 7A341 |
||
+ | | Device = iPhone2,1 |
||
+ | | Codename = Kirkwood |
||
+ | | Baseband = 04.26.08 |
||
+ | | DownloadURL = https://secure-appldnld.apple.com.edgesuite.net/content.info.apple.com/iPhone/061-6582.20090617.LlI87/iPhone2,1_3.0_7A341_Restore.ipsw |
||
+ | | RootFS = 018-5302-002 |
||
− | == Developer Patches == |
||
+ | | RootFSKey = 7d779fed28961506ca9443de210224f211790192b2a2308b8bc0e7d4a2ca61a68e26200e |
||
− | === Kernel === |
||
− | <pre> |
||
− | 0x1973AE: 5C B9 => 0B E0 // allow on the fly kernel patching and dumping (tfp0) |
||
− | 0x20D638: 00 00 00 00 => 01 00 00 00 // allow on the fly kernel patching and dumping (/dev/kmem) |
||
− | 0x2DEDF2: 00 F0 51 80 => 00 BF 00 BF // allow aes module to access uid key (key mask = 2000) |
||
− | 0x2DEE02: 06 D1 48 E0 => 06 E0 00 BF // allow aes module to access gid key (key mask = 1000) |
||
− | </pre> |
||
+ | | UpdateRamdisk = 018-5304-002 |
||
− | == Decryption Keys == |
||
+ | | UpdateRamdiskIV = d9b8d8f798cd50ba72d434b271d2f181 |
||
+ | | UpdateRamdiskKey = 8ffbef98cc28b4aa14d18783faa6a8c95c94b1a4536fbfb7485f0d54cdec358b |
||
+ | | RestoreRamdisk = 018-5306-002 |
||
− | === Root Filesystem === |
||
+ | | RestoreRamdiskIV = e345e23bb266fcc2ba23a2e0be77a3bf |
||
− | * '''VFDecrypt''': 7d779fed28961506ca9443de210224f211790192b2a2308b8bc0e7d4a2ca61a68e26200e |
||
+ | | RestoreRamdiskKey = 44514633ce2aead62bcfa8836cda4a3c7bde483f8b1e9f19d22f9d8fdf753e02 |
||
+ | | AppleLogo = applelogo.s5l8920x.img3 |
||
− | === LLB === |
||
+ | | AppleLogoIV = 02a124ab2522762fdb0e2dceebd69c4e |
||
− | * '''Key''': 783970ed70d151e65cdd0f52019f026cbc0ece5c604603117d677b6a85ea4d95 |
||
+ | | AppleLogoKey = d4598b90b842817d34f4eb2e741bfb965d73986ac0c1ec99f9d73c67fef787e3 |
||
− | * '''IV''': fc4efef9fd245dc038ecb26f25f795c7 |
||
+ | | BatteryCharging0 = batterycharging0.s5l8920x.img3 |
||
− | === iBoot === |
||
+ | | BatteryCharging0IV = 293b264e06878a32f8b4244a17a0b208 |
||
− | * '''Key''': c160ff26cf0cdb1c0b5d821e4102cab8a3e62687f39ab8c456907694e3c4834e |
||
+ | | BatteryCharging0Key = 7d5fbad13c284330bd0046f62eb9af68c50a8739fc8d8f5f4d459ea2585a2eb7 |
||
− | * '''IV''': 948a3d82419c9d4dde404cb4a788da70 |
||
+ | | BatteryCharging1 = batterycharging1.s5l8920x.img3 |
||
− | === DeviceTree === |
||
+ | | BatteryCharging1IV = b2113152f63a30915ac371ab47c6c1de |
||
− | * '''Key''': 14370497f039b5caf3583cfa89cfd626147df4c37c63ab3a3fc110765d3d0585 |
||
+ | | BatteryCharging1Key = 5eabe3f9729af09378fd8ea9533d2b5b95129fddf2dc238efa9288004ffa2ae4 |
||
− | * '''IV''': c6f3b155a71d2a61d14f78f6230bb20e |
||
+ | | BatteryFull = batteryfull.s5l8920x.img3 |
||
− | === Kernel === |
||
+ | | BatteryFullIV = cc57bb1ca6303b882fafb81a11921383 |
||
− | * '''Key''': f49e50a630397ed72592f5c9874b33ca1e0e5a499d2a6a0f2746c8e7f1dbf470 |
||
+ | | BatteryFullKey = 27246257cac8d0b5a7c7d209b246fa5c2ac814ce7a036c75e77345a7df9cca37 |
||
− | * '''IV ''': cd41286890df601bfcd87f8a09b009c8 |
||
+ | | BatteryLow0 = batterylow0.s5l8920x.img3 |
||
− | === Logo === |
||
+ | | BatteryLow0IV = f716e198f40f497d63c1d6900fafeb09 |
||
− | * '''Key''': d4598b90b842817d34f4eb2e741bfb965d73986ac0c1ec99f9d73c67fef787e3 |
||
+ | | BatteryLow0Key = e26d1903e4fac065717a42f6131fe0479c9cbc06645dd92b3912f35c15371d55 |
||
− | * '''IV''': 02a124ab2522762fdb0e2dceebd69c4e |
||
+ | | BatteryLow1 = batterylow1.s5l8920x.img3 |
||
− | === Recovery Logo === |
||
+ | | BatteryLow1IV = f4db59b888056b70e4eb70850f825b82 |
||
− | * '''Key''': da2324a7f8341c26b550a674a0d8566a9ebc9eda9c22cf37b1fc7d702ee6aab5 |
||
+ | | BatteryLow1Key = 88ea9747a35767266aa28c65f74187191992eeac2871f2bbec5a49babd7ed60b |
||
− | * '''IV''': 2e314503ca4f2bd03ac17c8b8eecf072 |
||
+ | | DeviceTree = DeviceTree.n88ap.img3 |
||
− | === iBEC === |
||
+ | | DeviceTreeIV = c6f3b155a71d2a61d14f78f6230bb20e |
||
− | * '''Key''': 711ffd7e4cc4ea56150749e085d065f6efe83bc40c506eb17648c3e68ac4ed6c |
||
+ | | DeviceTreeKey = 14370497f039b5caf3583cfa89cfd626147df4c37c63ab3a3fc110765d3d0585 |
||
− | * '''IV''': 414cd466c85886181881880d66b9535a |
||
+ | | GlyphCharging = glyphcharging.s5l8920x.img3 |
||
− | === iBSS === |
||
+ | | GlyphChargingIV = 88736308f0faa7a1b3f796dbadc2fcb1 |
||
− | * '''Key''': ebc56070f923799c06fc696fe5b8335517eb2fc13d1e8fcdb16be784db6b4a36 |
||
+ | | GlyphChargingKey = f37d6f320f97fa6f7e58ca6dc4265e534e5dabf14fb510543614c482b36d3aab |
||
− | * '''IV''': d7815d19a90b84677fc757aa4abf9343 |
||
+ | | GlyphPlugin = glyphplugin.s5l8920x.img3 |
||
− | === Update Ramdisk - 018-5304-002.dmg === |
||
+ | | GlyphPluginIV = 7af11baa6a9e314ba6feda7833506e9b |
||
− | * '''Key''': 8ffbef98cc28b4aa14d18783faa6a8c95c94b1a4536fbfb7485f0d54cdec358b |
||
+ | | GlyphPluginKey = 8f5c8cac1207ce6f91728b9d31a7f81e83e5a9297c117518f19d96c4587f2352 |
||
− | * '''IV''': d9b8d8f798cd50ba72d434b271d2f181 |
||
+ | | iBEC = iBEC.n88ap.RELEASE.dfu |
||
− | === Restore Ramdisk - 018-5306-002.dmg === |
||
+ | | iBECIV = 414cd466c85886181881880d66b9535a |
||
− | * '''Key''': 44514633ce2aead62bcfa8836cda4a3c7bde483f8b1e9f19d22f9d8fdf753e02 |
||
+ | | iBECKey = 711ffd7e4cc4ea56150749e085d065f6efe83bc40c506eb17648c3e68ac4ed6c |
||
− | * '''IV''': e345e23bb266fcc2ba23a2e0be77a3bf |
||
+ | |||
+ | | iBoot = iBoot.n88ap.RELEASE.img3 |
||
+ | | iBootIV = 948a3d82419c9d4dde404cb4a788da70 |
||
+ | | iBootKey = c160ff26cf0cdb1c0b5d821e4102cab8a3e62687f39ab8c456907694e3c4834e |
||
+ | |||
+ | | iBSS = iBSS.n88ap.RELEASE.dfu |
||
+ | | iBSSIV = d7815d19a90b84677fc757aa4abf9343 |
||
+ | | iBSSKey = ebc56070f923799c06fc696fe5b8335517eb2fc13d1e8fcdb16be784db6b4a36 |
||
+ | |||
+ | | Kernelcache = kernelcache.release.s5l8920x |
||
+ | | KernelcacheIV = cd41286890df601bfcd87f8a09b009c8 |
||
+ | | KernelcacheKey = f49e50a630397ed72592f5c9874b33ca1e0e5a499d2a6a0f2746c8e7f1dbf470 |
||
+ | |||
+ | | LLB = LLB.n88ap.RELEASE.img3 |
||
+ | | LLBIV = fc4efef9fd245dc038ecb26f25f795c7 |
||
+ | | LLBKey = 783970ed70d151e65cdd0f52019f026cbc0ece5c604603117d677b6a85ea4d95 |
||
+ | |||
+ | | NeedService = needservice.s5l8920x.img3 |
||
+ | | NeedServiceIV = b69dcba0f582657821b7dde9eea4c67b |
||
+ | | NeedServiceKey = b5dd7e17d288b3a51b3317a843aea99c7966a99357dd16961123c11b63ad6e43 |
||
+ | |||
+ | | RecoveryMode = recoverymode.s5l8920x.img3 |
||
+ | | RecoveryModeIV = 2e314503ca4f2bd03ac17c8b8eecf072 |
||
+ | | RecoveryModeKey = da2324a7f8341c26b550a674a0d8566a9ebc9eda9c22cf37b1fc7d702ee6aab5 |
||
+ | }} |
Latest revision as of 19:11, 10 November 2019
Build | 7A341 |
---|---|
Codename | Kirkwood |
Device | iPhone 3GS |
Baseband | 04.26.08 |
Download Firmware |
Root Filesystem
018-5302-002.dmg
- Key:
7d779fed28961506ca9443de210224f211790192b2a2308b8bc0e7d4a2ca61a68e26200e
Update Ramdisk
018-5304-002.dmg
- IV:
d9b8d8f798cd50ba72d434b271d2f181
- Key:
8ffbef98cc28b4aa14d18783faa6a8c95c94b1a4536fbfb7485f0d54cdec358b
Restore Ramdisk
018-5306-002.dmg
- IV:
e345e23bb266fcc2ba23a2e0be77a3bf
- Key:
44514633ce2aead62bcfa8836cda4a3c7bde483f8b1e9f19d22f9d8fdf753e02
AppleLogo
applelogo.s5l8920x.img3
- IV:
02a124ab2522762fdb0e2dceebd69c4e
- Key:
d4598b90b842817d34f4eb2e741bfb965d73986ac0c1ec99f9d73c67fef787e3
BatteryCharging0
batterycharging0.s5l8920x.img3
- IV:
293b264e06878a32f8b4244a17a0b208
- Key:
7d5fbad13c284330bd0046f62eb9af68c50a8739fc8d8f5f4d459ea2585a2eb7
BatteryCharging1
batterycharging1.s5l8920x.img3
- IV:
b2113152f63a30915ac371ab47c6c1de
- Key:
5eabe3f9729af09378fd8ea9533d2b5b95129fddf2dc238efa9288004ffa2ae4
BatteryFull
batteryfull.s5l8920x.img3
- IV:
cc57bb1ca6303b882fafb81a11921383
- Key:
27246257cac8d0b5a7c7d209b246fa5c2ac814ce7a036c75e77345a7df9cca37
BatteryLow0
batterylow0.s5l8920x.img3
- IV:
f716e198f40f497d63c1d6900fafeb09
- Key:
e26d1903e4fac065717a42f6131fe0479c9cbc06645dd92b3912f35c15371d55
BatteryLow1
batterylow1.s5l8920x.img3
- IV:
f4db59b888056b70e4eb70850f825b82
- Key:
88ea9747a35767266aa28c65f74187191992eeac2871f2bbec5a49babd7ed60b
DeviceTree
DeviceTree.n88ap.img3
- IV:
c6f3b155a71d2a61d14f78f6230bb20e
- Key:
14370497f039b5caf3583cfa89cfd626147df4c37c63ab3a3fc110765d3d0585
GlyphCharging
glyphcharging.s5l8920x.img3
- IV:
88736308f0faa7a1b3f796dbadc2fcb1
- Key:
f37d6f320f97fa6f7e58ca6dc4265e534e5dabf14fb510543614c482b36d3aab
GlyphPlugin
glyphplugin.s5l8920x.img3
- IV:
7af11baa6a9e314ba6feda7833506e9b
- Key:
8f5c8cac1207ce6f91728b9d31a7f81e83e5a9297c117518f19d96c4587f2352
iBEC
iBEC.n88ap.RELEASE.dfu
- IV:
414cd466c85886181881880d66b9535a
- Key:
711ffd7e4cc4ea56150749e085d065f6efe83bc40c506eb17648c3e68ac4ed6c
iBoot
iBoot.n88ap.RELEASE.img3
- IV:
948a3d82419c9d4dde404cb4a788da70
- Key:
c160ff26cf0cdb1c0b5d821e4102cab8a3e62687f39ab8c456907694e3c4834e
iBSS
iBSS.n88ap.RELEASE.dfu
- IV:
d7815d19a90b84677fc757aa4abf9343
- Key:
ebc56070f923799c06fc696fe5b8335517eb2fc13d1e8fcdb16be784db6b4a36
Kernelcache
kernelcache.release.s5l8920x
- IV:
cd41286890df601bfcd87f8a09b009c8
- Key:
f49e50a630397ed72592f5c9874b33ca1e0e5a499d2a6a0f2746c8e7f1dbf470
LLB
LLB.n88ap.RELEASE.img3
- IV:
fc4efef9fd245dc038ecb26f25f795c7
- Key:
783970ed70d151e65cdd0f52019f026cbc0ece5c604603117d677b6a85ea4d95
NeedService
needservice.s5l8920x.img3
- IV:
b69dcba0f582657821b7dde9eea4c67b
- Key:
b5dd7e17d288b3a51b3317a843aea99c7966a99357dd16961123c11b63ad6e43
RecoveryMode
recoverymode.s5l8920x.img3
- IV:
2e314503ca4f2bd03ac17c8b8eecf072
- Key:
da2324a7f8341c26b550a674a0d8566a9ebc9eda9c22cf37b1fc7d702ee6aab5