Discuss iPhone Hacking in a Nutshell --- [iLiberty 1.1.4] (PWNED: coming soon) at the Genius Bar - HowTos, Guides and Tutorials - Hackint0sh.org; This post is mostly outdated by now , but I'll leave it here for reference. ...
J to the T. Shaken, not Stirred
iPhone Hacking in a Nutshell --- [iLiberty 1.1.4] (PWNED: coming soon)
This post is mostly outdated by now, but I'll leave it here for reference. Anyone looking to JB/Unlock their phone should look into PWNAGEtool.
So, you're the new guy. Got that brand new shiny iPhone sitting on your desk, just begging to be hacked. Good, you found us at least, that's the hardest part. The second hardest part? Overcoming your "Post New Thread" compulsion. Hold on a sec...let me see if I can help you with that.
First, let's start off with some terminology.
The Dev Team -
What can we say about the Dev Team? Everything. They are the people who brought you the main stuff: Activate, Jailbreak and of course the one thing that everybody loves- Unlock, and a whole lot more. The Dev Team may be not the first to bring you an unlock (iphonefreesim was) but they are the first to bring you a free unlock, a good unlock. The staff of the team had changed a lot, and sure there was drama, but still they never disappointed us. Hackint0sh is proud to be the home of the Dev Team.
Here's their website http://iphone-dev.org/
The PWNAGE tool, released by the dev team, modifies an iPhone to accept hacked firmware restore images (or IPSW's for short). It is a combination of two tools: Pwner, which modifies the phone's firmware bootloader, and IPSW builder, which modifies, you guessed it, the IPSW's. This is set to become the new standard in iPhone modding, but because it is not yet released for Windows, I am not including it in the guide. Stay tuned .
Firmware versions (1.0.0 through 1.1.4, or 2.0 if you got connections ;D ) -
If you just bought your phone, it is most likely running firmware version 1.1.4, which is the newest released firmware to date. To check what firmware version you are running, go to Settings > General > About and it's next to the "version" label. Just a little history, 1.1.1 was the first firmware with the iTunes WiFi Store, and 1.1.3 was the first one with the editable home screen and web clips. Your firmware revision makes all the difference when hacking as each separate version has a different method. The 1.2 firmware is a beta firmware that has not been released to the general public. It is used by developers to test SDK apps, and it will eventually mature into iPhone OS 2.0.0 come June of 2008.
Recovery/Restore Mode -
If you screw something up really badly, or you just want to cleanly restore, you'll become very acquainted with this screen. Hold the power (on the top) and home (only one on the front) buttons for a while. The phone will reboot, the Apple logo will display, then a screen will come up with an iTunes logo and a USB cable. You can then restore with iTunes, but you are going to be using DFU mode 99 times out of 100 anyway, so move on.
DFU Mode -
If you have 1.1.1 or later, you also have this hidden restore mode that can be used to downgrade to 1.0.2, and is also a good failsafe for the other recovery mode. (NOTE: I am not sure if 1.0.2 has this mode or not). The timing is critical if you want to get in. The procedure starts out the same as the other mode, only you really shouldn't have the usb/power cable connected. Hold the power and home buttons for exactly 10 seconds, then release the power button and hold the home button for another 10 seconds. At this point, connect the usb cable and iTunes should detect your phone in recovery mode. Your iPhone will not appear to be on, the screen will be dark throughout the whole process until the actual restore begins. If the screen comes back on while you're holding the power and home buttons, you're holding too long. It takes a while to get the hang of it, just keep trying.
Jailbreaking is the term we use to describe how we gain access to the root file system on the iPhone. Normally, we can only see a certain folder within this filesystem because of Apple's locking methods, called a chroot jail. This folder houses all the media stuff from iTunes, but not the juicy stuff, the iPhone's OS. Through several different methods which you needn't concern yourself with, we can "break" out of this little sandbox, allowing us to modify files and perform all these cool hacks.
This is the first app you're going to want to installed once your iPhone is jailbroken. It acts as a portal to a world of 3rd party goodness and fantasy, allowing you install everything from the blatantly functional PDFReader to an appropriately named app called iBrate.
The iphone is unique in the sense that it is completely reliant on this activation process to enable normal usage. If you hacktivate your iPhone, it becomes an iPod touch with camera and bluetooth, only unlocking it will turn it back into an iPhone ;P.
Yeah, you can do that. What? The Apple "Genius" told you unlocking makes baby jesus cry? Who cares, babies will always cry anyway. The process of unlocking allows your iPhone to use any GSM sim. Note the term "GSM", AKA, not verizon, sprint, alltel, nextel, etc. These carriers are CDMA or iDen, a different technology then the iPhone, they are never going to work, so don't even ask. Unlocking modifies the baseband (see below), and can be a tricky proposition when it comes to FW updates.
Abbreviated BB, the baseband is the section of the iPhone that handles all communications, which includes the GSM/EDGE radio and the interface with the sim card. We modify this to allow it to use non-official sim cards (and thus non-official carriers).
If you attempt to upgrade an unlocked 1.0.2 to 1.1.1, your phone gets damaged and the baseband becomes bricked. To upgrade, you need to restore the baseband to factory settings first, and we call this revirginizing.
Apple is keeping up the cat-and-mouse game just like they promised, so occasionally we need to take a step back in time to exploit Apple's previous mistakes. To do this, we can downgrade the iPhone to a firmware older than the one it has, but we need to initiate the restore process differently (DFU mode), and you will get an error, that's normal.
SDK (Software Development Kit) -
Apple finally got our hint and they came out with their own method of allowing 3rd party apps. Just one problem...it sucks. To make a long story short, they're the supreme overlords of the App Store, so good luck getting anything more complex than a tic-tac-toe game approved. Come June of 2008, firmware 2.0.0 will be released and we'll all have fun paying out the ass for every single little game. You really don't need to be greiving over the death of installer.app, though, 2.0.0 is already jailbroken. No, I am not kidding.
Dual Booting -
Dual booting is like running windows on a mac, you have two OS's that you can switch between. For example, you can run 1.1.4 and 1.1.1 on one iPhone. But to tell you the truth you don't really need it, because 1.1.4 has everything 1.1.1 has and more. Dual booting was made for hackers to jailbreak new firmware or debug programs. So if your not going to hack firmwares just forget about it .
The iPhone's bootloader is like the gatekeeper of the baseband. BL3.9 fell asleep with the gate wide open, but BL4.6 is a little bit tougher. Your bootloader version depends on how new your phone is. If your phone came with FW 1.1.2 or newer, you have BL4.6. If you have a 1.1.1 or older OTB (out of the box) phone, you have BL3.9. You can freely switch between bootloaders using bootneuter, a component of PWNAGE.
...and just a few quick things you may or may not run into...
iTouch - Just another name for the iPod Touch
Repository - Server that hosts packages for installer.app
BSD Subsystem - A collection of tools that fill in the missing parts of the iPhone's core os, so we can do things like copy and move files.
SSH - Essentially a remote command line for unix, can be installed with installer.app
SCP/SFTP - Methods that are used to transfer files to and from the iPhone, integrated with SSH
WinSCP - A great SCP client for Windows
Springboard.app - Main launcher for the iPhone, it's what you see after you "slide to unlock", can be modified and replaced.
plist - A file that stores information for a program or iPhone preferences, short for property list
Last edited by thecompkid; 10-17-2008 at 01:11 AM.
J to the T. Shaken, not Stirred
Note: When WinPWN is released, i'll update the guide, but for now it's easier to just stay with iLiberty. Just to clarify, there is no such thing as a superior jailbreak or unlock, at least between iLiberty and PWNAGE, so don't think you're losing anything by not waiting for PWNAGE.
How to Jailbreak:
There are way too many ways to jailbreak your phone, which you already know if you've spent more than 15 seconds searching on google. That's why I need to pick a single starting point for everyone and work from there. For the purposes of this tutorial, you should be running a stock 1.1.4. If you are on a firmware other than 1.1.4, and you haven't unlocked your phone, then getting to 1.1.4 is as simple as upgrading with itunes. If you have unlocked your phone, then you need to upgrade safely, which is not within the scope of this tutorial.
Hacking a 1.1.4 phone is almost too simple. You'll need one tool and one tool only, iLiberty. (Click to Download)
Make sure that your iPhone is plugged in and iTunes (or any other app that accesses the iPhone) is closed. When you open iLiberty, you will be presented with a number of options.
So, just a quick overview...
The three things that iLiberty does (for the sake of simplicity) is Activate, Jailbreak, and Unlock.
If you are planning on using an official carrier, all you need to do is jailbreak, so select the jailbreak only option (you should have already activated your phone with itunes).
If you are not planning on using an official carrier, but you want to unlock the iPhone using another method, select the jailbreak and activate options only.
If you want it all, not using an official carrier and using the iLiberty unlock, then select all three options (Activate, Jailbreak, and Unlock) to get it all.
Your phone will go through the motions and prompts will step you through the whole process. At the end, you will be left with an activated, jailbroken, maybe-unlocked phone with a new icon called installer.
Installer, as you know if you read the vocab section, is the portal to all iPhone apps. Installer sources or repositories are servers that are registered with installer.app to provide listings of iphone applications that are available to install.
The very first thing you should do is install three packages: Community Sources, BSD Subsystem, and OpenSSH (in that order). You can find them by going to Install > All Packages in installer and scrolling down.
...and the rest, as they say, is history. You'll find a wealth of information about the current iPhone hacking state of affairs here at Hackint0sh. More information can be found in the FAQ section below.
Last edited by thecompkid; 07-12-2008 at 06:05 PM.
J to the T. Shaken, not Stirred
Frequently Asked Questions:
I'm having an issue with "Call Forwarding Active" on 1.1.3
Check out this thread: http://www.hackint0sh.org/forum/show...warding+Active
I'm on 1.1.4 and MobileSafari is constantly logging me out of sites and not retaining cookies, how do I fix it?
Add "http://appledailytimes.com/installer" to your installer sources and install the 1.1.4 safari fix in the "Apple Daily Times" category.
"Something went seriously wrong and now I supposedly have no baseband."
I'm getting a NO WIFI error message. How do I fix it?
This issue is one of the side effects of a corrupted baseband.
Why isn't my Youtube working?
It occurs after you unlock due to certain hard coded settings.
Part of my touch screen is not working. Is it a software issue or do I have to send it in?
Unfortunately, malfunctions of the touch screen are almost never software issues. Just to be sure, do a full restore, but don't get your hopes up. Obviously, your phone should be restored and revirginized when you send it back. Additionally, you will need to be activated with AT&T in order for apple to accept your phone. If you can't send it in, you can replace the touch screen, but it will be expensive, in the $150-$250 range. There are reports that increasing the sensitivity of the touch screen by editing a plist will help too.
What is the deal with all this talk of LCD versions and polka dot issues?
Really, it's just a lot of hype fueled by people who like to start conspiracy theories. If you want to investigate further, http://www.hackint0sh.org/forum/showthread.php?t=16282 .
I unlocked my phone, and now some features are not working, most notably, EDGE.
Again, this all has to do with the iPhone being tied into certain carriers.
"I have this weird icon right next to my battery meter. It kind of looks like a phone with rows of dots underneath. Srsly WTF???"
That icon indicates that TTY mode was turned on for whatever reason. To turn it off, go into settings, click on Phone, and near the bottom there should be a switch labled TTY, just flick it off. What is TTY? Come to think of it, it's actually remarkably similar to texting, only you hook up a keyboard to your headphone jack and call a special phone number. It's mostly for the hearing impaired.
"So, I was *insert random BS excuse story here* and now my iPhone is water-damaged/impaled with a rusty kitchen knife/embedded into someone's head. I can get it replaced, right?"
First and foremost, for Apple to even look at the possibility of helping you, two conditions need to be met: The iPhone in question needs to be activated with AT&T (or the right carrier in your country), and the water damage detector inside the headphone jack needs to be white. If the phone is unlocked or has apps on it, it needs to be restored to factory condition before it is sent in. Now, i'm not even going to get into "playing your cards right" because honestly there are whole websites dedicated to that, but if you want to cheat the system, you'll need to get creative. Who am I kidding, there's no way I can resist. White out for the water damage, a constant "play dumb" for broken screens, and an assertive stance for everything else. Keep two things in mind: Most geniuses would be very willing to help you no matter what, and those same people will kick you right out if you admit to abuse or accidental damage, so don't do it.
My Caller ID isn't working right and/or I am experiencing a lot of problems that I somehow know is related to AppSupport.
Patching appsupport fixes the problem of you phone app crashing,bsms app from crashing and mostly from a lot of crashing. The reason for all this crashing is that you live and use your iphone in an unsupported country. For apple the supported countries are the US,Germany,France and the UK.
The easiest way to patch appsupport is just going to installer to your iclarified source (http://installer.iClarified.com) and installing appsupport for your firmware (1.1.2;1.1.3;1.1.4). Simple right?
Is there any way to turn off the keyboard autocorrection?
There is a package to do this in the iClarified source (http://installer.iClarified.com). After installing it, check in the Keyboard settings screen.
"No way, you can actually dual boot your iPhone?"
Yeah, technically you can, but unless you are a developer or you just have a lot of free time on your hands, its probably not for you. Check here for the tutorial.
"In the time it took me to type this my iPhone battery went from 100% to dead. I think that could be a problem"
Unfortunately, poor battery life is a problem with many causes. If you recently installed a new app, then be sure that it is not auto-checking for whatever or running in the background. To fully terminate an application, hold down the home button while it's open. Check if you have accidently set mail to auto check for new messages. Before locking your phone, exit to springboard to make sure all powersaving features are in effect. Check if you accidentally installed a package in installer that disables power saving features. If you recently performed a hardware hack, be sure there aren't any short circuits.
"Are there more installer sources?"
Here are my personal sources that should get the most out of your apple phone
www.apogeeltd.com-this source has good designs and wallpaper
iphones.ru/r-gives you a way to transfer your sim contacts to your phone
repo.ispazio.net-the italian developer has a lot of great apps ,his source is one of my favorites
www.marcogiorgini.com/iPhone/plist.xml-has 3D apps and games
apptapp.saurik.com-an alternative to installer
repository.ripdev.com-home to the Russian Project and Caterpillar
i.danstaface.net-gives you the best ringtone maker.
I have a problem that I don't see listed, and I am intelligent enough to search before I post. What else can I do to try to fix my situation before I give in to the urges?
Most problems are software based. Most software based problems can be fixed with a simple restore, so it would be best for you to try restoring before you post on the forums, if only to save someone the trouble of having to tell you to.
"This guide is incomplete. ¿Por que, señor?"
Pfft...that's your opinion :p. Seriously though, if that is your opinion, PM me with whatever corrections/additions/comments you think need to be made. If the guide is outdated, feel free to PM me repeatedly and incessantly until I update it as that's the only way I'll actually get it done .
Last edited by thecompkid; 04-12-2008 at 09:03 PM.
J to the T. Shaken, not Stirred
Okay, guys, this is a huge work in progress. Perhaps i'm being a little ambitious, but I really want to cover the majority of problems people are having so we can clear the noise on the forums in at least a small way. I openly welcome and even beg for suggestions and even, dare I ask, submissions, so we can make this a great one-stop shop for those beginners among us. PM or post, either is fine.
Dave94o, lordofdafiles, Locked, MuscleNerd, thanks so much for your help, especially Dave94o who helped me recently update.
I'd also like to take this opportunity to thank all the people that make these hacks possible, as well as those smarter than I who figure out all the other workarounds for the common problems. I may be "writing" the guide, but without them, I would have nothing to write about. Above all, donate, donate, donate, these people are working hard to make sure we have our fun.
Good luck, guys. Have fun out there.
Last edited by thecompkid; 03-26-2008 at 01:24 AM.
Nice post. Can't see why this shouldn't be a sticky in the General section.
This made me laugh:
"The second hardest part? Overcoming your "Post New Thread" compulsion."
Perhaps you could also add the code for users to check their own firmware version via the iPhone by dialing: *3001#12345#*
J to the T. Shaken, not Stirred
Okay, I really want to sit down and finish this. Expect an update in the next few days.
I just registered, so as newb as can be. I found this post very useful. Thanks for the effort, I'm ready for more.
That part seems to be changing now, as more U.S. iPhones are shipping with 1.1.2 and BOOT04.06 OOB/OTB/OOTB.
Originally Posted by thecompkid
LOL that part will always be true.
What? The Apple "Genius" told you unlocking makes baby jesus cry? Who cares, babies will always cry anyway.
J to the T. Shaken, not Stirred
Yeah, I wrote this a while ago, before 1.1.2 was even on the radar, so I'm going to update that. I am expecting to get a lot of work done on the guide when I get home this afternoon, in about 9 hours.
Originally Posted by MuscleNerd
EDIT: Okay, just noticed I got stickied, cool. I am really sorry if you're coming in now looking for help, the guide is not complete, so hold on tight, i'm almost done (well, not really, but it makes me feel better to say that ).
Last edited by thecompkid; 11-16-2007 at 12:52 PM.
The seczone is not the secpack...
The corruption occurred to part of the seczone not the secpack. The secpack is the password to the bootloader that lets you write to the baseband.
Originally Posted by thecompkid
By tschensie in forum PwnageTool
Last Post: 11-10-2010, 10:47 PM
By igmolinav in forum iPhone "2G" (Rev. 1)
Last Post: 07-19-2008, 06:40 PM
By gnomo in forum iPod Touch 1G
Last Post: 04-19-2008, 05:14 PM
By jbloggs in forum General
Last Post: 04-12-2008, 08:03 PM
By jbloggs in forum iPhone "2G" (Rev. 1)
Last Post: 04-09-2008, 08:37 PM