|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "IBooty"
Dra1nerdrake (talk | contribs) m (→"Boot it!" Function) |
Dra1nerdrake (talk | contribs) |
||
| Line 14: | Line 14: | ||
== Resources == |
== Resources == |
||
There's a open-source version of iBooty by [[User:Fallensn0w|Fallensn0w]] available at [http://github.com/fallensn0w/openiBooty @github] |
There's a open-source version of iBooty by [[User:Fallensn0w|Fallensn0w]] available at [http://github.com/fallensn0w/openiBooty @github] |
||
| + | |||
| + | == Theory == |
||
| + | This application has caused me to realize that provided one with a late-bootrom device has their SHSH blobs for iOS 3.1.2, they can jailbreak their device indefinitely, using this tethered method. --[[User:Dra1nerdrake|dra1nerdrake]] 15:37, 12 August 2010 (UTC) |
||
Revision as of 15:37, 12 August 2010
iBooty is a utility created by iH8sn0w to aid in jailbreaking iPod touch 3G and iPhone 3GS (new bootrom) devices. The jailbreak is tethered. It has been reverse-engineered and is being ported to Linux. See [1] for information on booting your tethered device on Linux.
This application has been ported along with Payload Pwner to Mac OS X 10.4+ under the name Pneumonia.
Also there's a application which includes Payload Pwner and iBooty called Nephron. (available @github)
"Boot it!" Function
Reverse-engineered in a collaborative effort between dra1nerdrake andFallensn0w: iBooty uploads the payload (nothing more than a pwned 3.1.2 iBoot), then uploads 4.0 iBEC and jumps to it. It resets the connection and then uploads and sets up the device tree. Now it uploads and sets up iH8sn0w's logo. Finally, it uploads the kernelcache for iOS 4.0 and boots the device.
"Prepare" Function
Although I can not be sure yet, I believe that the program uploads the payload, then the 4.0 iBEC, and uploads and prepares the logo, which notifies you to begin the restore process.
Resources
There's a open-source version of iBooty by Fallensn0w available at @github
Theory
This application has caused me to realize that provided one with a late-bootrom device has their SHSH blobs for iOS 3.1.2, they can jailbreak their device indefinitely, using this tethered method. --dra1nerdrake 15:37, 12 August 2010 (UTC)
