I have this girls iphone and it's doing the common boot logo loop where it just won't boot but freezes and restarts..

I know I can get it to restore using itunes but It won't back up the phone first and she doesn't have a backup of everything... so, I need to extract data off it somehow.... I hear there is a way to ssh into the phone while in the frozen boot logo or dfu mode but I can't seem to do it..

anyone who can do this, please advise...

Thanks..

Chris.

Originally Posted by ludikris

I have this girls iphone and it's doing the common boot logo loop where it just won't boot but freezes and restarts..

I know I can get it to restore using itunes but It won't back up the phone first and she doesn't have a backup of everything... so, I need to extract data off it somehow.... I hear there is a way to ssh into the phone while in the frozen boot logo or dfu mode but I can't seem to do it..

anyone who can do this, please advise...

Next time use the search function - http://www.hackint0sh.org/f128/132063.htm solves this.

Just to clarify - do you know what was installed on this iPhone? Was it unlocked with blacksn0w? Did she use rock.app to manage non-app store applications?

i believe it's on 3.1.2 using blackra1n... but I"m not 100% sure.. I jailbroke it last november/december...

I saw this and thought it may be a solution... Im getting errors when using the ramdisk builder... I don't have a pwned kernel ... how can I quickly make one ?
i also don't know how to use xpwntool to figure out the keys etc..

Originally Posted by ludikris

i believe it's on 3.1.2 using blackra1n... but I"m not 100% sure.. I jailbroke it last november/december...

I saw this and thought it may be a solution... Im getting errors when using the ramdisk builder... I don't have a pwned kernel ... how can I quickly make one ?
i also don't know how to use xpwntool to figure out the keys etc..

If you can use pwnagetool to make a custom IPSW (or download a pre-made custom ipsw) and unzip it, you can find the pwned kernel you need.

so technically would the kernel from any 3.x ipsw work ?

Im using a 2.1.3 custom ipsw and i inserted it into the ramdisk builder

018-6495-022.dmg

but Im getting an error..

Enter IV and Key, then select the restore ramdisk file!
Sanity checks PASSED
SHA1 Hash: 4D5EB138004AFFCC93ADBDCD201206163EC0424C
Decrypt OK (does not prove the key is correct)
Hfs.hfslib_open() failed; recheck the iv/key!
Exception: External component has thrown an exception.; at RamdiskBuilder.Hfs.hfslib_open(String path)
at RamdiskBuilder.MainWindow.ProcessFile(String droppedFile)

pardon me im using a 3.1.3 custom ipsw

im trying... im trying...

alright so i got the phone into recovery... i can run irecovery-s, then the patched dmg.ssh
then no matter what when I run the ramdisk with or without the 0x90000000,
i never get the "creating ramdisk....." message...

i saw below that I can use the iRecovery -f iBEC.n88ap.RELEASE.dfu followed by irecovery -c go
but nothing happens...

i also see in the wave that I can Add patched ramdisk to the pwned ipsw package and use iTunes to load this.
Remove root fs dmg, iBoot, LLB and BuildManifest.plist from ipsw; modify manifest file in all_flash.*.production folder.

im just not sure if I should have to rename the patched dmg.ssh to just .dmg or what ...

any help on this would be great...