redsn0w

redsn0w on Mac OS X

redsn0w was originally called QuickPwn but due to the theft and exploitation of the name, QuickPWN by quickpwn.com, as of iOS 3.0, QuickPwn was discontinued and redsn0w (at the time, version 0.7) was converted into a jailbreaking tool for all current devices as well as providing unlock support the iPhone 2G. As of version 0.8, the iPhone 3GS can also be jailbroken through redsn0w.

Version 0.9 beta 3 was released for Windows and Mac OS X, and it allows iOS 3.0 through 3.1.2 to be jailbroken. It includes support for all devices except the iPod touch 3G, and supports a tethered jailbreak on iPhone 3GS units and iPod touch 2G units with new bootroms. In addition, this version supports custom boot and recovery mode logos, as well as verbose mode on bootup.

Version 0.9.2 supports jailbreaking of all iDevices (at the time) with iOS 3.0 through 3.1.2 on Windows and Mac OS X, as well as 3.1.3 on S5L8900 devices. Version 0.9.3 adds support of internet tethering IPCC hack on those devices and 0.9.4 allows jailbreaking of early iPod touch 2G with iOS 3.1.3.

Version 0.9.5b5-5 supports jailbreaking the iPhone 3G and iPod touch 2G (old bootrom) with iOS 4.0 on Windows and Mac OS X.

redsn0w 0.9.6b6 can jailbreak iOS 3.2.2, 4.1, and 4.2.1 for every device that supports those versions (except Apple TV 2G), on Windows and Mac OS X.

Credit

iPhone Dev Team

Versions

Version	Release date	Mac OS X-compatible?	Windows-compatible?	Changes
0.1	Unknown	Yes	Yes	Jailbreak for the iPod touch 2G.
0.7	Unknown	Yes	Yes
0.8	July 2009	Yes	Yes	Jailbreaks iPhone OS 3.0 on the iPhone 3GS only.
Version	Release date	Mac OS X-compatible?	Windows-compatible?	Changes
0.9.2	Unknown	Yes	Yes	Supports 3.0-3.1.2 on all iPhones and iPod touches (tethered for newer devices with 0x24000 Segment Overflow closed)
0.9.3 beta	Unknown	Yes	Yes	Contains the IPCC hack to enable tethering on the iPhone 3G and 3GS.
0.9.4	Unknown	Yes	Yes	Supports jailbreaking iOS 3.1.3 on iPhone 2G, iPhone 3G, iPod touch 1G, iPod touch 2G (old bootrom)
Version	Release date	Mac OS X-compatible?	Windows-compatible?	Changes
0.9.5 beta 3	June 21, 2010	Yes	No	Supports jailbreaking iOS 4.0 on iPhone 3G and iPod touch 2G (old bootrom)
0.9.5 beta 4	Unknown	Yes	No	Resolved a problem with iBooks.
0.9.5 beta 5	Unknown	Yes	No	Supposed to fix any APN or MMS issues that users were seeing.
Version	Release date	Mac OS X-compatible?	Windows-compatible?	Changes
0.9.6 beta 1	September 21, 2010	Yes	Yes	Supports jailbreaking iOS 4.0-4.1 on iPhone 3G and iPod touch 2G (tethered on new bootrom)
0.9.6 beta 2	October 31, 2010	Yes	Yes	Supports jailbreaking iOS 3.2.2 and 4.0-4.1 on every device that supports those firmwares (except iPod touch 2G with new bootrom) . The iPhone 3G, iPod touch 2G (old bootrom), and iPhone 3GS (old bootrom) can also have custom boot logos. The Windows version also includes a function that permits users to restore to a custom IPSW, akin to PwnageTool's DFU button.
0.9.6 beta 3	November 2010	Yes	Yes	Supports the installation of custom bundles
0.9.6 beta 4	November 23, 2010	Yes	Yes	Jailbreaks iOS 4.1-4.2.1 on all compatible devices. Tethered jailbreak on devices that are not vulnerable to Pwnage 2.0 or 0x24000 Segment Overflow.
0.9.6 beta 5	November 28, 2010	Yes	Yes	Jailbreaks iOS 4.1-4.2.1 on all compatible devices. Tethered jailbreak on devices that are not vulnerable to Pwnage 2.0 or 0x24000 Segment Overflow. Can update the baseband on the X-Gold 608 to 6.15.00, allowing the reuse of the AT+XAPP Vulnerability
0.9.6 beta 6	December 1, 2010	Yes	Yes	Jailbreaks iOS 4.1-4.2.1 on all compatible devices. Tethered jailbreak on devices that are not vulnerable to Pwnage 2.0 or 0x24000 Segment Overflow. Can update the baseband on the X-Gold 608 to 6.15.00, allowing the reuse of the AT+XAPP Vulnerability Allows you to "deactivate" a hacktivated phone, so sbinger's Subscriber Artificial Module (SAM) can trick your iPhone and iTunes into creating legitimate activation tickets.
0.9.6 release candidate 7	January 2, 2011	Yes	Yes	Introduced command-line arguments to bypass some screens. -b <filename> to specify your own boot logo PNG -i <filename> to specify your reference IPSW -j to ask redsn0w to “Just boot now tethered for now” -o for iPhone 3GS and iPod touch 2G units vulnerable to 0x24000 Segment Overflow.
0.9.6 release candidate 8	January 5, 2011	Yes	Yes	Informs users if a boot logo PNG is invalid, and why. Introduced the "-a" command-line argument to eliminate clicking.
0.9.6 release candidate 9	April 3, 2011	Yes	Yes	Jailbreaks iOS 4.3.1 on all compatible devices except the iPad 2 and Apple TV 2. New command line parameters k and d [1]: -k --kernelcache=<str> use specified kernelcache (advanced) -d --devicetree=<str> use specified devicetree (advanced)
0.9.6 release candidate 10	April 7, 2011	Yes	Yes	Added boot animations Removed misleading Settings
0.9.6 release candidate 11	April 7, 2011	Yes	Yes	Makes the boot animation a bit more robust
0.9.6 release candidate 12	April 8, 2011	Yes	Yes	Fix any lingering issues with the boot animation
0.9.6 release candidate 13	April 19, 2011	Yes	Yes	Jailbreaks iOS 4.3.2 on all compatible devices except the iPad 2 and iPhone 4 (GSM).
Version	Release date	Mac OS X-compatible?	Windows-compatible?	Changes
0.9.7 beta 1	December 26, 2010	Yes	No	Jailbreaks iOS 4.1-4.2.1 on all compatible devices. Able to achieve an untethered jailbreak on 4.2.1, provided the user has 4.2b3 SHSHs and the 4.2b3 IPSW. This version of "Jailbreak Monte" has quite a number of bugs, particularly app switcher crashes and disabled Bluetooth.
0.9.7 beta 2	December 26, 2010	Yes	No	Fixes crashing bugs on GUI apps.
0.9.7 beta 3	December 27, 2010	Yes	No	Fixes crashing bugs completely.
0.9.7 beta 4	December 31, 2010	Yes	No	ubsmuxd integrated.
0.9.7 beta 5	January 8, 2011	Yes	No	Issues related to Bluetooth and the sandbox are resolved.
0.9.7 beta 6	January 10, 2011	Yes	No	fixes Skype
Version	Release date	Mac OS X-compatible?	Windows-compatible?	Changes

Exploits used

For iPhone, iPod touch, and iPhone 3G, see:

• Pwnage
• Pwnage 2.0

For iPod touch 2G, see:

• 0x24000 Segment Overflow
• ARM7 Go - used to upload the oversized LLB required to utilize the 0x24000 Segment Overflow.
• usb_control_msg(0xA1, 1) Exploit - used (in redsn0w 0.9.6 beta 1) to upload the oversized LLB to utilize the 0x24000 Segment Overflow, as well as a tethered jailbreak on units with the new bootrom.

For iPhone 3GS, see:

• 0x24000 Segment Overflow
• iBoot Environment Variable Overflow - Exploit has a different implementation from geohot's implementation in purplera1n.
• usb_control_msg(0x21, 2) Exploit
• limera1n exploit

For iPod touch 3G

• usb_control_msg(0x21, 2) Exploit
• limera1n exploit

for iPhone 4, iPod touch 4G, iPad and Apple TV 2G

• limera1n exploit