Main Page

Main Page/Welcome

Template:Heading More information, including information for older devices, is available on the Firmware and Jailbreak pages.

Device	iPhone 3GS (old bootrom)	iPhone 3GS (new bootrom), iPhone 4, iPod touch 4G	Apple TV 2G	Apple TV 3G	iPad 2, iPad 3, and iPhone 4S	iPhone 5 & iPod touch 5G
Latest Firmware	6.0 (Build 10A403)	6.0 (Build 10A403)	5.1 (Build 10A406e)	5.1 (Build 10A406e)	6.0 (Build 10A403)	6.0 (Build 10A405) (Build 10A406 for iPod touch 5G)
Is there a jailbreak available?	Yes	Yes, but tethered	Yes, but tethered	No	No	No
If the device is carrier-locked, is there a software-based unlock?	Requires an old baseband, or baseband 06.15.00	iPhone 3GS: Requires an old baseband, or baseband 06.15.00 iPhone 4 GSM model: Requires baseband 01.59.00	N/A		No	No

• Filesystem
• Firmware and Beta Firmware
• iTunes (Errors, Modes)
• Keys
  • AES Keys
  • Apple Certificate
  • NCK
  • RSA Keys
  • TEA Keys
  • VFDecrypt Keys
• Protocols
  • Baseband Bootrom Protocol
  • DFU
  • Baseband Bootloader Protocol
  • Normal Mode
  • Recovery Mode
  • Restore Mode
• System Log (syslog)

Jailbreak Software

• Absinthe
• blackra1n
• Corona
• greenpois0n
• JailbreakMe
• limera1n
• PwnageTool
• redsn0w
• sn0wbreeze
• Spirit

Patches

• Kernel
  • AMFI Binary Trust Cache Patch
  • PE i can has debugger Patch
  • Sandbox Patch
  • Vm map enter Patch
  • Vm map protect Patch
• Ramdisk: ASR

Vulnerabilities and Exploits

• 0x24000 Segment Overflow (24kpwn)
• BPF STX Kernel Write Exploit
• HFS Heap Overflow
• HFS Legacy Volume Name Stack Buffer Overflow (feedface)
• Incomplete Codesign Exploit
• IOSurface Kernel Exploit
• Limera1n Exploit
• Malformed CFF Vulnerability
• MobileBackup Copy Exploit
• ndrv_setspec() Integer Overflow
• Packet Filter Kernel Exploit
• Racoon String Format Overflow Exploit
• SHA-1 Image Segment Overflow (SHAtter)
• usb_control_msg(0x21, 2) Exploit
• usb_control_msg(0xA1, 1) Exploit (steaks4uce)

Devices (see also Models)

• iPhone
  • iPhone (m68ap)
  • iPhone 3G (n82ap)
  • iPhone 3GS (n88ap)
  • iPhone 4 (n90ap, n90bap, n92ap)
  • iPhone 4S (n94ap)
  • iPhone 5 (n41ap, n42ap)
• iPod touch
  • iPod touch (n45ap)
  • iPod touch 2G (n72ap)
  • iPod touch 3G (n18ap)
  • iPod touch 4G (n81ap)
  • iPod touch 5G (n78ap)
• iPad
  • iPad (k48ap)
  • iPad 2 (k93ap, k94ap, k95ap, k93aap)
  • iPad 3 (j1ap, j2ap, j2aap)
• Apple TV
  • Apple TV 2G (k66ap)
  • Apple TV 3G (j33ap)

Application Processors

• S5L8900 (iPhone, iPod touch, iPhone 3G)
• S5L8720 (iPod touch 2G)
• S5L8920 (iPhone 3GS)
• S5L8922 (iPod touch 3G)
• S5L8930 (iPad, iPhone 4 GSM, iPod touch 4G, Apple TV 2G, iPhone 4 CDMA)
• S5L8940 (iPad 2, iPhone 4S)
• S5L8942 (Apple TV 3G, iPad 2 R2), iPod touch 5G
• S5L8945 (iPad 3)
• S5L8950 (iPhone 5)

Baseband Devices

• PMB8876 or S-Gold 2 (iPhone)
• PMB8878 or X-Gold 608 (iPhone 3G, iPhone 3GS, iPad)
• XMM6180 or X-Gold 618 (iPhone 4 GSM, iPad 2 GSM)
• MDM6600 (iPhone 4 CDMA, iPad 2 CDMA)
• MDM6610 (iPhone 4S)
• MDM9x00 (iPad 3)
• MDM9615 (iPhone 5)

Other

• Accelerometer
• WLAN/Bluetooth:
  • Marvell 88x8686
  • BlueCore 4
  • BlueCore 6
  • BCM4325
  • BCM4329
  • BCM4330
  • BCM4334
• Compass: AKM8973, AKM8975
• Gyroscope: AGD1 2022 FP6AQ

iPhone Hackers

• comex
• geohot
• MuscleNerd
• planetbeing
• posixninja
• pod2g

iPhone Hacker Teams

• Chronic Dev
• iPhone Dev Team

Application Development

• Apple Certification Process
• Bypassing iPhone Code Signatures
• Distribution Methods
• Frameworks
• MobileDevice Library
• Toolchain (Includes tutorials)
• Toolchain 2.0 (Includes tutorials)

Application Copy Protection

• Application Structure and Signatures
• Bugging Debuggers
• Copy Protection Overview
• Defeating Cracks
• Mach-O Loading Process

Guides

• Tutorials
• Useful Links

Definitions

• Activation
• ASLR
• Baseband
• Bootloader
• Bootchain
• Bootrom / VROM
• CHIPID
• CPID
• DFU Mode
• ECID
• iBEC
• iBoot
• iBSS
• Jailbreak
  • Tethered jailbreak
  • Untethered jailbreak
• Kernel
• launchd
• LLB
• NAND
• NOR
• NORID
• SHSH
• Unlock

Disclaimer