How to rejailbreak an unlocked jailbroken 3gs 3.1.2 without SHSH backup

hello, i just bought a 3GS 16GB iOS 3.1.2 with baseband 05.11.07. the iphone is unlocked and jailbroken with blackra1n (there's a the raindrop icon in the menu). Cydia icon also appears but there's no other application installed and all the contacts and messages were also removed from iphone (i don't know if the user erased all contents and settings). so problem is that cydia was giving many errors when i start it. so i opened blackra1n and installed cydia a second time from the iphone. after that cydia opened once and then crashed everytime i tried to open it (on the loading data screen). when i use iphone browser the iphone is not recognized as jailbroken and no ssh is install on the iphone so i'm not being able to get to the file system and i don't have any of the called SHSH firmware backup.
so is there any way to rejailbreak the iphone without loosing the unlock and how? thank you!

firstly I'd check with TinyUmbrella, you might have a few SHSH saved on Cydia's server

Quote:

---

Originally Posted by periohead

when i use iphone browser the iphone is not recognized as jailbroken

---

This is a limitation of blackra1n and one of many reasons we don't recommend you use it.

Quote:

---

Originally Posted by periohead

i don't have any of the called SHSH firmware backup.
so is there any way to rejailbreak the iphone without loosing the unlock and how? thank you!

---

As another poster said, try tinyumbrella.

Also.. very very important information that most first-time 3GS posters neglect to mention: new or old bootrom? Bootrom - The iPhone Wiki

if it's old bootrom, you have options.

new bootrom, you pretty much need a SHSH, although you might be able to get somewhere with a bit of trickery and redsn0w.

what can i do with tiny umbrella ? CYDIA DOES NOT HAVE YOUR SHSH FOR iPhone3GS 3.1.2 (7D11) THERE IS NO WAY FOR YOU TO GET THEM. SORRY. YOU ARE JUST TOO LATE. BTW my iphone has the old bootrom. what can i do?

Quote:

---

Originally Posted by periohead

what can i do with tiny umbrella ? CYDIA DOES NOT HAVE YOUR SHSH FOR iPhone3GS 3.1.2 (7D11) THERE IS NO WAY FOR YOU TO GET THEM. SORRY. YOU ARE JUST TOO LATE. BTW my iphone has the old bootrom. what can i do?

---

Old bootrom is great news (I hope you have verified this by putting the phone into DFU mode as per my link, do NOT trust the serial number or f0recast)


Grab a copy of Pwnagetool 3.1.5 (or 3.1.4) and make yourself a custom IPSW.

Then you can simply option-click restore (shift-click restore on windows) and browse to the custom IPSW you made earlier.

It might also work with sn0wbreeze but we don't recommend or support that software here. I don't recommend you take the risk without a SHSH

Old bootrom 3GS can actually use this technique to load any custom IPSW (up to but not including 4.1) without needing a SHSH for the iOS version they are trying to restore.

Wow I didn't know that.
I thought we all (old a new bootroom) needed a TSS server....where did you read that? nice then

Quote:

---

Originally Posted by baro

Wow I didn't know that.
I thought we all (old a new bootroom) needed a TSS server....where did you read that? nice then

---

Old bootrom (once the LLB is pwned with 24kpwn exploit) also has SHSH checks patched out as part of the pwning process. This allows custom IPSW (also pwned with 24kpwn) to be restored by iTunes without any need for SHSH.

Limera1n and comex kernel exploit on 4.1 work differently and do not pwn LLB - so require a 4.1 SHSH even with pwnagetool custom IPSW.

This is the default option for custom IPSW made with pwnagetool 4.1.2 and works for both old & new bootrom 3GS

There is an unofficial bundle for 3GS (old bootrom only) that uses the 24kpwn exploit but updated for 4.1 - this does not require a SHSH to load if you were previously pwned.

The new approach (limera1n plus kernel exploit) is nice in that it leaves the boot-chain (the NOR images that are used to boot the device) intact, also it means that the jailbreak is identical for both and old and new bootrom devices. If you notice, this has been the trend since comex became involved with the scene. This is more beneficial to owners of new bootrom and A4 based iOS devices. It also pushes people to back up their SHSH (as it is required for these types of jailbreaks). Tools like blackra1n were very badly thought out as they did not encourage users to backup SHSH at all (blackra1n users could jailbreak and unlock without ever installing Cydia - so users never got the "make my life easier" message).

The negative of this new approach for old bootrom owners is that if something does go wrong (like a bootloop or accidentally clicking on "erase all content and settings") they don't have a pwned LLB installed on their device and so require a saved SHSH to restore the same iOS version they currently are running.

well explained, thank you

and very nice to hear for periohead, I hope he will let us know how it all ended up

thank u for ur reply...well i followed ur link to find out that it's the old bootrom, but i don't have Mac and pwnagetool is for Mac only. If there's no other safe alternative i'll have 2 get access to a Mac

Quote:

---

Originally Posted by periohead

thank u for ur reply...well i followed ur link to find out that it's the old bootrom, but i don't have Mac and pwnagetool is for Mac only. If there's no other safe alternative i'll have 2 get access to a Mac

---

We only recommend pwnagetool here, there are no other safe alternatives