The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Pwnage 2.0"
ChronicDev (talk | contribs) (→Exploit) |
MuscleNerd (talk | contribs) (pwnagetool and family load the dfu exploit explicitly now) |
||
Line 8: | Line 8: | ||
==Implementations== |
==Implementations== |
||
+ | *[[PwnageTool]] |
||
+ | *[[QuickPwn]] |
||
+ | *[[WinPwn]] |
||
*[http://lpahome.com/geohot/iran.rar iran] |
*[http://lpahome.com/geohot/iran.rar iran] |
||
− | *[[PwnageTool]] (although it doesn't actually run the DFU, iTunes does) |
||
[[Category:Jailbreaks]] |
[[Category:Jailbreaks]] |
Revision as of 11:19, 25 November 2008
This exploit in the VROM is really the ultimate exploit, since it allows unsigned code to be run at the lowest level. It can be patched out only by a new hardware revision.
Credit
Exploit
There is a stack overflow in the certificate parsing code. By passing a malformed certificate, unsigned code can be run.