Main Page

Main Page/Welcome

Template:Heading More information is available on the Firmware and Jailbreak pages.

Device	iPhone & iPod touch	iPhone 3G & iPod touch 2G	iPhone 3GS (old bootrom)	Apple TV 2G, Apple TV 3G	iPad 2, iPad 3, and iPhone 4S	Everything else
Latest Firmware	3.1.3 (Build 7E18)	4.2.1 (Build 8C148)	5.1.1 (Build 9B206)	5.0.1 (Build 9B206f)	5.1.1 (Build 9B206)	5.1.1 (Build 9B206)
Is there a jailbreak available?	Yes	Yes	Yes	The Apple TV 2G has a tethered jailbreak.	No	Yes, but tethered.
If the device is carrier-locked, is there a software-based unlock?	Yes	Requires a preserved baseband, or baseband 06.15.00		N/A	No	iPhone 3GS, Japanese iPad: Requires a preserved baseband, or baseband 06.15.00 iPhone 4 GSM model: Requires baseband 01.59.00

• Filesystem
• Firmware and Beta Firmware
• iTunes (Errors, Modes)
• Keys
  • AES Keys
  • Apple Certificate
  • NCK
  • RSA Keys
  • TEA Keys
  • VFDecrypt Keys
• Protocols
  • Baseband Bootrom Protocol
  • DFU
  • Baseband Bootloader Protocol
  • Normal Mode
  • Recovery Mode
  • Restore Mode
• System Log (syslog)

Jailbreak Software

• Absinthe
• blackra1n
• Corona
• greenpois0n
• JailbreakMe
• limera1n
• PwnageTool
• redsn0w
• sn0wbreeze
• Spirit

Patches

• Kernel
  • AMFI Binary Trust Cache Patch
  • PE i can has debugger Patch
  • Sandbox Patch
  • Vm map enter Patch
  • Vm map protect Patch
• Ramdisk: ASR

Vulnerabilities and Exploits

• 0x24000 Segment Overflow (24kpwn)
• BPF STX Kernel Write Exploit
• HFS Heap Overflow
• HFS Legacy Volume Name Stack Buffer Overflow (feedface)
• Incomplete Codesign Exploit
• IOSurface Kernel Exploit
• Limera1n Exploit
• Malformed CFF Vulnerability
• MobileBackup Copy Exploit
• ndrv_setspec() Integer Overflow
• Packet Filter Kernel Exploit
• Racoon String Format Overflow Exploit
• SHA-1 Image Segment Overflow (SHAtter)
• usb_control_msg(0x21, 2) Exploit
• usb_control_msg(0xA1, 1) Exploit (steaks4uce)

Devices (see also Models)

• iPhone
  • iPhone (m68ap)
  • iPhone 3G (n82ap)
  • iPhone 3GS (n88ap)
  • iPhone 4 (n90ap and n92ap)
  • iPhone 4S (n94ap)
• iPod touch
  • iPod touch (n45ap)
  • iPod touch 2G (n72ap)
  • iPod touch 3G (n18ap)
  • iPod touch 4G (n81ap)
• iPad
  • iPad (k48ap)
  • iPad 2 (k93ap, k94ap, k95ap, k93aap)
  • iPad 3 (j1ap, j2ap, j2aap)
• Apple TV
  • Apple TV 2G (k66ap)
  • Apple TV 3G (j33ap)

Application Processors

• S5L8900 (iPhone, iPod touch, iPhone 3G)
• S5L8720 (iPod touch 2G)
• S5L8920 (iPhone 3GS)
• S5L8922 (iPod touch 3G)
• S5L8930 (iPad, iPhone 4 GSM, iPod touch 4G, Apple TV 2G, iPhone 4 CDMA)
• S5L8940 (iPad 2, iPhone 4S)
• S5L8942 (Apple TV 3G, iPad2 R2)
• S5L8945 (iPad 3)

Baseband Devices

• PMB8876 or S-Gold 2 (iPhone)
• PMB8878 or X-Gold 608 (iPhone 3G, iPhone 3GS, iPad)
• XMM6180 or X-Gold 618 (iPhone 4 GSM, iPad 2 GSM)
• MDM6600 (iPhone 4 CDMA, iPad 2 CDMA)
• MDM6610 (iPhone 4S)
• MDM9x00 (iPad 3)

Other

• Accelerometer
• WLAN/Bluetooth:
  • Marvell 88x8686
  • BlueCore 4
  • BlueCore 6
  • BCM4325
  • BCM4329
  • BCM4330
• Compass: AKM8973, AKM8975
• Gyroscope: AGD1 2022 FP6AQ

iPhone Hackers

• comex
• geohot
• MuscleNerd
• planetbeing
• posixninja
• pod2g

iPhone Hacker Teams

• Chronic Dev
• iPhone Dev Team

Application Development

• Apple Certification Process
• Bypassing iPhone Code Signatures
• Distribution Methods
• Frameworks
• MobileDevice Library
• Toolchain (Includes tutorials)
• Toolchain 2.0 (Includes tutorials)

Application Copy Protection

• Application Structure and Signatures
• Bugging Debuggers
• Copy Protection Overview
• Defeating Cracks
• Mach-O Loading Process

Guides

• Tutorials
• Useful Links

Definitions

• Activation
• ASLR
• Baseband
• Bootloader
• Bootchain
• Bootrom / VROM
• CHIPID
• CPID
• DFU Mode
• ECID
• iBEC
• iBoot
• iBSS
• Jailbreak
  • Tethered jailbreak
  • Untethered jailbreak
• Kernel
• launchd
• LLB
• NAND
• NOR
• NORID
• SHSH
• Unlock

Disclaimer