The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Redsn0w"
m (→External Links: added link to archived official torrents) |
(Fixing device names for new wiki format) |
||
Line 6: | Line 6: | ||
Version 0.8 added support for jailbreaking the [[N88AP|iPhone 3GS]]. |
Version 0.8 added support for jailbreaking the [[N88AP|iPhone 3GS]]. |
||
− | Version 0.9b3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18AP|iPod touch |
+ | Version 0.9b3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the [[N18AP|iPod touch (3rd generation)]], and supports a [[tethered jailbreak]] on [[N88AP|iPhone 3GS]] units and [[N72AP|iPod touch (2nd generation)]] units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup. |
− | Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72AP|iPod touch |
+ | Version [http://wikee.iphwn.org/howto:rs9 0.9.2] supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on [[S5L8900]] devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early [[N72AP|iPod touch (2nd generation)]] with iOS 3.1.3. |
− | Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82AP|iPhone 3G]] and [[N72AP|iPod touch |
+ | Version [http://wikee.iphwn.org/howto:rsbeta 0.9.5b5-5] supports jailbreaking the [[N82AP|iPhone 3G]] and [[N72AP|iPod touch (2nd generation)]] ([[Bootrom 240.4|old bootrom]]) with iOS 4.0 on Windows and Mac OS X. |
− | Version [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] supports jailbreaking iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV |
+ | Version [http://blog.iphone-dev.org/post/1718400992 0.9.6b6] supports jailbreaking iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV (2nd generation)), on Windows and Mac OS X. |
Version [http://blog.iphone-dev.org/post/14857834236 0.9.10b1] adds support for iOS 4.2.6 through 5.0.1 (though iOS 4.2.9, 4.2.10, 4.3.4, 4.3.5, and 5.0 are tethered on devices invulnerable to the [[0x24000 Segment Overflow]]). This build of redsn0w is not capable of jailbreaking [[S5L8940]] or newer devices. |
Version [http://blog.iphone-dev.org/post/14857834236 0.9.10b1] adds support for iOS 4.2.6 through 5.0.1 (though iOS 4.2.9, 4.2.10, 4.3.4, 4.3.5, and 5.0 are tethered on devices invulnerable to the [[0x24000 Segment Overflow]]). This build of redsn0w is not capable of jailbreaking [[S5L8940]] or newer devices. |
||
Line 34: | Line 34: | ||
| {{yes}} |
| {{yes}} |
||
| |
| |
||
− | * Tethered jailbreak for [[N72AP|iPod touch |
+ | * Tethered jailbreak for [[N72AP|iPod touch (2nd generation)]] on iOS 2.1.1 with [[ARM7 Go]] |
|- |
|- |
||
! 0.3 |
! 0.3 |
||
Line 41: | Line 41: | ||
| {{yes}} |
| {{yes}} |
||
| |
| |
||
− | * Untethered jailbreak for the [[N72AP|iPod touch |
+ | * Untethered jailbreak for the [[N72AP|iPod touch (2nd generation)]] on iOS 2.2.1 with [[ARM7 Go]] and [[0x24000 Segment Overflow]] |
|} |
|} |
||
===0.7.x series=== |
===0.7.x series=== |
||
Line 115: | Line 115: | ||
| {{yes}} |
| {{yes}} |
||
| |
| |
||
− | * Supports jailbreaking iOS 3.1.3 on [[M68AP|iPhone]], [[N82AP|iPhone 3G]], [[N45AP|iPod touch]], [[N72AP|iPod touch |
+ | * Supports jailbreaking iOS 3.1.3 on [[M68AP|iPhone]], [[N82AP|iPhone 3G]], [[N45AP|iPod touch]], [[N72AP|iPod touch (2nd generation)]] ([[Bootrom 240.4|old bootrom]]) |
|- |
|- |
||
|} |
|} |
||
Line 132: | Line 132: | ||
| {{no}} |
| {{no}} |
||
| |
| |
||
− | * Supports jailbreaking iOS 4.0 on [[N82AP|iPhone 3G]] and [[N72AP|iPod touch |
+ | * Supports jailbreaking iOS 4.0 on [[N82AP|iPhone 3G]] and [[N72AP|iPod touch (2nd generation)]] ([[Bootrom 240.4|old bootrom]]) |
|- |
|- |
||
! 0.9.5b4 |
! 0.9.5b4 |
||
Line 163: | Line 163: | ||
| {{yes}} |
| {{yes}} |
||
| |
| |
||
− | * Supports jailbreaking iOS 4.0-4.1 on [[N82AP|iPhone 3G]] and [[N72AP|iPod touch |
+ | * Supports jailbreaking iOS 4.0-4.1 on [[N82AP|iPhone 3G]] and [[N72AP|iPod touch (2nd generation)]] ([[tethered jailbreak|tethered]] on [[Bootrom 240.5.1|new bootrom]]) |
|- |
|- |
||
! 0.9.6b2 |
! 0.9.6b2 |
||
Line 170: | Line 170: | ||
| {{yes}} |
| {{yes}} |
||
| |
| |
||
− | * Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72AP|iPod touch |
+ | * Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except [[N72AP|iPod touch (2nd generation)]] with [[Bootrom 240.5.1|new bootrom]]) . |
− | ** The [[N82AP|iPhone 3G]], [[N72AP|iPod touch |
+ | ** The [[N82AP|iPhone 3G]], [[N72AP|iPod touch (2nd generation)]] ([[Bootrom 240.4|old bootrom]]), and [[N88AP|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]) can also have custom boot logos. |
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button. |
* The Windows version also includes a function that permits users to restore to a custom [[IPSW File Format|IPSW]], akin to [[PwnageTool]]'s DFU button. |
||
|- |
|- |
||
Line 212: | Line 212: | ||
** -i <filename> to specify your reference IPSW |
** -i <filename> to specify your reference IPSW |
||
** -j to ask redsn0w to “Just boot now tethered for now” |
** -j to ask redsn0w to “Just boot now tethered for now” |
||
− | ** -o for [[N88AP|iPhone 3GS]] and [[N72AP|iPod touch |
+ | ** -o for [[N88AP|iPhone 3GS]] and [[N72AP|iPod touch (2nd generation)]] units vulnerable to [[0x24000 Segment Overflow]]. |
|- |
|- |
||
! 0.9.6 release candidate 8 |
! 0.9.6 release candidate 8 |
||
Line 227: | Line 227: | ||
| {{yes}} |
| {{yes}} |
||
| |
| |
||
− | * Adds support for jailbreaking iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[K66AP|Apple TV |
+ | * Adds support for jailbreaking iOS 4.3.1 on all compatible devices except the [[iPad 2]] and [[K66AP|Apple TV (2nd generation)]]. |
* New command line parameters k and d [http://twitpic.com/4gg8n1]: |
* New command line parameters k and d [http://twitpic.com/4gg8n1]: |
||
** -k --kernelcache=<str> use specified kernelcache (advanced) |
** -k --kernelcache=<str> use specified kernelcache (advanced) |
||
Line 615: | Line 615: | ||
| {{yes}} |
| {{yes}} |
||
| |
| |
||
− | * Fixes an issue with custom ramdisks on the [[N82AP|iPhone 3G]] and [[N72AP|iPod touch |
+ | * Fixes an issue with custom ramdisks on the [[N82AP|iPhone 3G]] and [[N72AP|iPod touch (2nd generation)]]. |
|- |
|- |
||
! 0.9.10b5c |
! 0.9.10b5c |
||
Line 631: | Line 631: | ||
* Jailbreaks iOS 5.1 tethered on devices vulnerable to [[limera1n Exploit]]. |
* Jailbreaks iOS 5.1 tethered on devices vulnerable to [[limera1n Exploit]]. |
||
** Untethered on [[N88AP|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]). |
** Untethered on [[N88AP|iPhone 3GS]] ([[Bootrom 359.3|old bootrom]]). |
||
− | * Automatically detects MC model [[N72AP|iPod touch |
+ | * Automatically detects MC model [[N72AP|iPod touch (2nd generation)]] with [[User:pod2g|pod2g]]'s steaks4uce exploit. |
|- |
|- |
||
! 0.9.10b6b |
! 0.9.10b6b |
||
Line 679: | Line 679: | ||
| {{yes}} |
| {{yes}} |
||
| |
| |
||
− | * Newer devices ([[iPad 2]], [[iPad |
+ | * Newer devices ([[iPad 2]], [[iPad (3rd generation)]], and [[N94AP|iPhone 4S]]) are able downgrade as well. In a radical departure from previous versions of [[redsn0w]], it now directly supports restoring [[IPSW File Format|IPSW]]s to your device. |
|- |
|- |
||
! 0.9.11b2 |
! 0.9.11b2 |
||
Line 804: | Line 804: | ||
| {{yes}} |
| {{yes}} |
||
| |
| |
||
− | * Tethered jailbreak for iOS 6.0 on the [[K66AP|Apple TV |
+ | * Tethered jailbreak for iOS 6.0 on the [[K66AP|Apple TV (2nd generation)]], [[N88AP|iPhone 3GS]], [[iPhone 4]], and [[N81AP|iPod touch (4th generation)]]. |
** Untethered for iPhone 3GS devices with the [[iBoot-359.3|old bootrom]]. |
** Untethered for iPhone 3GS devices with the [[iBoot-359.3|old bootrom]]. |
||
* Allows devices with the A5 or newer to restore to iOS 5.x, as long as they have iOS 4.x or 5.x installed. |
* Allows devices with the A5 or newer to restore to iOS 5.x, as long as they have iOS 4.x or 5.x installed. |
||
Line 821: | Line 821: | ||
| {{yes}} |
| {{yes}} |
||
| |
| |
||
− | * Save iPad |
+ | * Save iPad (4th generation) and iPad Mini SHSH blobs. |
* Fixes of error 14 when stitching blobs and error 2601 for windows users when restoring. |
* Fixes of error 14 when stitching blobs and error 2601 for windows users when restoring. |
||
|} |
|} |
||
Line 830: | Line 830: | ||
*[[Pwnage 2.0]] |
*[[Pwnage 2.0]] |
||
− | For [[N72AP|iPod touch |
+ | For [[N72AP|iPod touch (2nd generation)]]: |
*[[0x24000 Segment Overflow]] |
*[[0x24000 Segment Overflow]] |
||
*[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow. |
*[[ARM7 Go]] - used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow. |
||
Line 841: | Line 841: | ||
*[[limera1n]] exploit |
*[[limera1n]] exploit |
||
− | For [[N18AP|iPod touch |
+ | For [[N18AP|iPod touch (3rd generation)]]: |
*[[usb_control_msg(0x21, 2) Exploit]] |
*[[usb_control_msg(0x21, 2) Exploit]] |
||
*[[limera1n]] exploit |
*[[limera1n]] exploit |
||
− | For [[iPhone 4]], [[N81AP|iPod touch |
+ | For [[iPhone 4]], [[N81AP|iPod touch (4th generation)]], [[K48AP|iPad]] and [[K66AP|Apple TV (2nd generation)]]: |
*[[limera1n]] exploit |
*[[limera1n]] exploit |
||
− | For [[K48AP|iPad]], [[iPad 2]], [[iPad |
+ | For [[K48AP|iPad]], [[iPad 2]], [[iPad (3rd generation)]], [[N88AP|iPhone 3GS]], [[iPhone 4]], [[N94AP|iPhone 4S]], [[N18AP|iPod touch (3rd generation)]] and [[N81AP|iPod touch (4th generation)]]: |
* [[Corona]] |
* [[Corona]] |
||
* [[Racoon String Format Overflow Exploit]] |
* [[Racoon String Format Overflow Exploit]] |
Revision as of 11:22, 24 March 2017
redsn0w is an iDevice jailbreaking tool for OS X and Windows. Originally called QuickPwn, but due to exploitation of the name by www.quickpwn.com
, version 0.7 was renamed to redsn0w and added unlocking of supported devices.
Version 0.8 added support for jailbreaking the iPhone 3GS.
Version 0.9b3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the iPod touch (3rd generation), and supports a tethered jailbreak on iPhone 3GS units and iPod touch (2nd generation) units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.
Version 0.9.2 supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on S5L8900 devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early iPod touch (2nd generation) with iOS 3.1.3.
Version 0.9.5b5-5 supports jailbreaking the iPhone 3G and iPod touch (2nd generation) (old bootrom) with iOS 4.0 on Windows and Mac OS X.
Version 0.9.6b6 supports jailbreaking iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV (2nd generation)), on Windows and Mac OS X.
Version 0.9.10b1 adds support for iOS 4.2.6 through 5.0.1 (though iOS 4.2.9, 4.2.10, 4.3.4, 4.3.5, and 5.0 are tethered on devices invulnerable to the 0x24000 Segment Overflow). This build of redsn0w is not capable of jailbreaking S5L8940 or newer devices.
Credit
Versions
Initial releases
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
Lite | Unknown | Yes | Yes |
|
0.3 | Unknown | Yes | Yes |
|
0.7.x series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.7 | Unknown | Yes | Yes |
|
0.7.1 | Unknown | Yes | Yes | Bug fixes for versions 0.7 |
0.7.2 | Unknown | Yes | Yes | Bug fixes for versions 0.7 |
0.8.x series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.8 | 7 July 2009 | Yes | Yes |
|
0.9.0-0.9.4 releases
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.2 | Unknown | Yes | Yes |
|
0.9.3 | Unknown | Yes | Yes |
|
0.9.4 | Unknown | Yes | Yes |
|
0.9.5 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.5b3 | 21 Jun 2010 | Yes | No |
|
0.9.5b4 | Unknown | Yes | No |
|
0.9.5b5 | Unknown | Yes | No |
|
0.9.6 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.6b1 | 21 September 2010 | Yes | Yes |
|
0.9.6b2 | 31 October 2010 | Yes | Yes |
|
0.9.6b3 | 21 November 2010 | Yes | Yes |
|
0.9.6b4 | 23 November 2010 | Yes | Yes |
|
0.9.6b5 | 28 November 2010 | Yes | Yes |
|
0.9.6b6 | 1 December 2010 | Yes | Yes |
|
0.9.6 release candidate 7 | 2 January 2011 | Yes | Yes |
|
0.9.6 release candidate 8 | 5 January 2011 | Yes | Yes |
|
0.9.6 release candidate 9 | 3 April 2011 | Yes | Yes |
|
0.9.6 release candidate 10 | 7 April 2011 | Yes | Yes |
|
0.9.6 release candidate 11 | 7 April 2011 | Yes | Yes |
|
0.9.6 release candidate 12 | 8 April 2011 | Yes | Yes |
|
0.9.6 release candidate 13 | 19 April 2011 | Yes | Yes |
|
0.9.6 release candidate 14 | 19 April 2011 | Yes | Yes |
|
0.9.6 release candidate 15 | 6 May 2011 | Yes | Yes |
|
0.9.6 release candidate 16 | 16 May 2011 | Yes | Yes |
|
0.9.6 release candidate 17 | 20 May 2011 | Yes | Yes |
|
0.9.6 release candidate 18 | 14 June 2011 | Yes | Yes |
|
0.9.6 release candidate 19 | 12 July 2011 | Yes | Yes |
|
0.9.7 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.7b1 | 26 December 2010 | Yes | No |
|
0.9.7b2 | 26 December 2010 | Yes | No |
|
0.9.7b3 | 27 December 2010 | Yes | No |
|
0.9.7b4 | 31 December 2010 | Yes | No |
|
0.9.7b5 | 8 January 2011 | Yes | No |
|
0.9.7b6 | 10 January 2011 | Yes | No |
|
0.9.8 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.8b1 | 10 June 2011 | Yes | Yes |
|
0.9.8b2 | 11 July 2011 | Yes | Yes |
|
0.9.8b3 | 16 July 2011 | Yes | Yes |
|
0.9.8b4 | 23 July 2011 | Yes | Yes |
|
0.9.8b5 | 9 August 2011 | Yes | Yes |
|
0.9.8b6 | 23 August 2011 | Yes | Yes |
|
0.9.8b7 | 31 August 2011 | Yes | Yes |
|
0.9.8b7b | 2 September 2011 | Yes | Yes |
|
0.9.8b7c | 6 September 2011 | Yes | Yes |
|
0.9.9 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.9b1 | 19 September 2011 | Yes | Yes |
|
0.9.9b2 | 4 October 2011 | Yes | Yes |
|
0.9.9b3 | 5 October 2011 | Yes | Yes |
|
0.9.9b3a | 5 October 2011 | No | Yes |
|
0.9.9b4 | 12 October 2011 | Yes | Yes |
|
0.9.9b5 | 13 October 2011 | Yes | No |
|
0.9.9b6 | 18 December 2011 | Yes | Yes |
|
0.9.9b7 | 21 October 2011 | Yes | Yes |
|
0.9.9b8 | 3 November 2011 | Yes | Yes |
|
0.9.9b9 | 19 December 2011 | Yes | Yes |
|
0.9.9b9b | 19 December 2011 | Yes | Yes |
|
0.9.9b9c | 19 December 2011 | No | Yes |
|
0.9.9b9d | 20 December 2011 | Yes | Yes |
|
0.9.10 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.10b | 27 December 2011 | Yes | Yes |
|
0.9.10b2 | 27 December 2011 | Yes | Yes |
|
0.9.10b3 | 28 December 2011 | Yes | Yes |
|
0.9.10b3 novcheck | 29 December 2011 | No | Yes |
|
0.9.10b4 | 15 January 2012 | Yes | Yes |
|
0.9.10b5 | 29 January 2012 | Yes | Yes |
|
0.9.10b5b | 1 February 2012 | Yes | Yes |
|
0.9.10b5c | 12 February 2012 | Yes | Yes |
|
0.9.10b6 | 7 March 2012 | Yes | Yes |
|
0.9.10b6b | 11 March 2012 | Yes | No |
|
0.9.10b7 | 20 April 2012 | Yes | Yes |
|
0.9.10b8 | 23 April 2012 | Yes | Yes |
|
0.9.10b8b | 23 April 2012 | Yes | Yes |
|
0.9.11 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.11b1 | 11 May 2012 | Yes | Yes |
|
0.9.11b2 | 12 May 2012 | Yes | Yes |
|
0.9.11b3 | 14 May 2012 | Yes | Yes |
|
0.9.11b4 | 14 May 2012 | Yes | Yes |
|
0.9.12 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.12b | 4 June 2012 | Yes | Yes |
|
0.9.12b2 | 8 June 2012 | Yes | Yes |
|
0.9.13 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.13 developer-only 1 | 13 June 2012 | Yes | Yes |
|
0.9.13 developer-only 2 | 15 June 2012 | Yes | Yes |
|
0.9.13 developer-only 3 | 16 July 2012 | Yes | Yes |
|
0.9.13 developer-only 4 | 13 September 2012 | Yes | Yes |
|
0.9.14 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.14b1 | 18 June 2012 | Yes | Yes |
|
0.9.14b2 | 4 July 2012 | Yes | Yes |
|
0.9.15 series
Version | Release date | OS X-compatible? | Windows-compatible? | Changes |
---|---|---|---|---|
0.9.15b1 | 14 October 2012 | Yes | Yes |
|
0.9.15b2 | 15 October 2012 | Yes | Yes |
|
0.9.15b3 | 1 November 2012 | Yes | Yes |
|
Exploits used
For iPhone, iPod touch, and iPhone 3G:
For iPod touch (2nd generation):
- 0x24000 Segment Overflow
- ARM7 Go - used to upload the oversized LLB required to utilize the 0x24000 Segment Overflow.
- usb_control_msg(0xA1, 1) Exploit - used (in redsn0w 0.9.6b) to upload the oversized LLB to utilize the 0x24000 Segment Overflow, as well as a tethered jailbreak on units with the new bootrom.
For iPhone 3GS:
- 0x24000 Segment Overflow
- iBoot Environment Variable Overflow - Exploit has a different implementation from geohot's implementation in purplera1n.
- usb_control_msg(0x21, 2) Exploit
- limera1n exploit
For iPod touch (3rd generation):
For iPhone 4, iPod touch (4th generation), iPad and Apple TV (2nd generation):
- limera1n exploit
For iPad, iPad 2, iPad (3rd generation), iPhone 3GS, iPhone 4, iPhone 4S, iPod touch (3rd generation) and iPod touch (4th generation):