|
The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information. |
Difference between revisions of "Redsn0w"
(Add version info) |
|||
| Line 17: | Line 17: | ||
For [[N72ap|iPod touch 2G]], see: |
For [[N72ap|iPod touch 2G]], see: |
||
| + | *[[0x24000 Segment Overflow]] |
||
| − | *[[0x24000 Segment Overflow]] - Credit the work on this exploit goes to [[User:Planetbeing|planetbeing]], [[User:MuscleNerd|MuscleNerd]], and [[User:ChronicDev|Chronic Dev]]. |
||
| − | *[[ARM7 Go]] - used to upload the oversized [[LLB]] required to |
+ | *[[ARM7 Go]] - was used to upload the oversized [[LLB]] required to utilize the 0x24000 Segment Overflow. |
| + | *[[usb_control_msg(0xA1, 1) Exploit]] - used to upload the oversized [[LLB]] to utilize the 0x24000 Segment Overflow. It is also used for a [[tethered jailbreak]] on units with the [[iBoot-240.5.1|new bootrom]]. |
||
For [[N88ap|iPhone 3GS]], see: |
For [[N88ap|iPhone 3GS]], see: |
||
| Line 27: | Line 28: | ||
For [[N18ap|iPod touch 3G]] |
For [[N18ap|iPod touch 3G]] |
||
*[[usb_control_msg(0x21, 2) Exploit]] |
*[[usb_control_msg(0x21, 2) Exploit]] |
||
| + | |||
| + | [[Category:Hacking Software]] |
||
Revision as of 22:35, 25 September 2010
redsn0w (at version 0.1) was originally a QuickPwn-like implementation of the 0x24000 Segment Overflow for the iPod Touch 2G. However, due to the theft and exploitation of the name (as QuickPWN) by quickpwn.com, as of firmware 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a jailbreaking tool for all current devices as well as providing unlock support the iPhone 2G.
As of version 0.8, the iPhone 3GS can also be jailbroken through redsn0w. It is currently closed-sourced but the executable is being worked into several third-party GUIs as the underlying engine can also be used as a commandline tool.
Version 0.9 beta 3 was released for Windows and OS X, and it allows firmware 3.0 to 3.1.2 to be jailbroken. It includes support for all devices except the iPod touch 3G and supports a tethered jailbreak on late-model iPhone 3GS's and iPod touch 2G's. This latest version supports custom boot and recovery mode logos, as well as verbose-bootup. Final release, version 0.9.2 supports jailbreaking of all iDevices with firmware 3.0 or 3.1.2 on Windows and Mac OSX and iPhone 2G/3G, iPT 1G on firmware 3.1.3. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early iPod Touch 2G with 3.1.3 firmware.
Version 0.9.5b5-5 supports jailbreaking the iPhone 3G and iPod touch 2G (non-MC) with iOS 4.0 on Windows and Mac OS X.
Credit
Exploit
For iPod touch, iPhone and iPhone 3G, see:
For iPod touch 2G, see:
- 0x24000 Segment Overflow
- ARM7 Go - was used to upload the oversized LLB required to utilize the 0x24000 Segment Overflow.
- usb_control_msg(0xA1, 1) Exploit - used to upload the oversized LLB to utilize the 0x24000 Segment Overflow. It is also used for a tethered jailbreak on units with the new bootrom.
For iPhone 3GS, see:
- 0x24000 Segment Overflow
- iBoot Environment Variable Overflow - Exploit has a different implementation from geohot's implementation in purplera1n.
- usb_control_msg(0x21, 2) Exploit
For iPod touch 3G
