Page 5 of 7 FirstFirst 1234567 LastLast
Results 41 to 50 of 66
Discuss Working iPhone recovery ramdisk with SSH at the Tools - Hackint0sh.org; Originally Posted by zippytiff making progress, it seems to plug unplug as mentioned by another ...
  1. #41
    Super Moderator Array Olethros's Avatar

    Join Date
    Sep 2007
    Location
    Norway
    Posts
    8,360
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    439

    Default

    Quote Originally Posted by zippytiff View Post
    making progress, it seems to plug unplug as mentioned by another post helps

    when i use winscp (using username ssh and root for password) the device screen changed from the apple with progress bar (empty) to the connect to itunes ??? and here is the usb tunnel log

    now i get to here

    [INFO] Device connected
    [ERROR] USBMuxConnectByPort = 274d, handle=ffffffff
    [ERROR] Error: Device Service

    any ideas?
    iTunes version? It seems to me that it is either an incompatibility with the version of MobileDevice (this is part of the iTunes install)

    Or you haven't got the ramdisk booted correctly yet.
    Please read the stickies & search forum before posting!
    How to report an iTunes restore/update fail in a useful manner
    -

    iPad 3G 64GB (4.3.3, Redsn0w) oldest SHSH 3.2.2
    iPhone 4 32GB (4.2.1, Redsn0w JB-monte) oldest SHSH 4.1
    iPhone 3GS 32GB (4.3.3; Pwnagetool) factory unlocked oldest SHSH 3.1
    iPhone 8GB (3.1.3; Pwnagetool) AT&T Locked - Unlocked with bootneuter

    -
    Did we solve your problem? Got a dollar or two spare ? Donate!


  2. #42
    Newbie Array

    Join Date
    Nov 2010
    Posts
    5
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    thanks Olethros

    i am gradually getting there

    i have now got the 2 commands to run in putty

    fsck_hfs /dev/disk0s2s1
    mount_hfs /dev/disk0s2s1 /mnt2 <<< the key was the space !

    but now in winscp i dont seem to be able to get to /mnt2 i also tried in putty

    in winscp i get this error when i type /mnt2/root or /mnt2/mobile in the Go To/Open Directory

    Command 'ls -la '
    failed with return code 127 and error message
    -sh: line 50: ls: command not found.

    any ideas?

    [UPDATE]

    Ok got it, it simply seems to be that ls isnt supported in the ram disk, so a blind copy does the trick..... so far !
    Last edited by zippytiff; 11-10-2010 at 10:30 PM.

  3. #43
    Newbie Array

    Join Date
    Nov 2010
    Posts
    1
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    Can someone post step by step instructions for how to do this on OS X for an iPhone 4 running iOS 4.1? Seems like every tool is either windows-only or hopelessly out of date. I just need to ssh into my phone to retrieve some files before a restore - this shouldn't have taken 4 days (and counting) of online research to accomplish zilch at. The one set of instructions I was able to follow all the way through, pwnstrap, did nothing.

    And whoever had the brilliant idea of using Google Wave for support: having my browser repeatedly crashed by that things has just been the icing on the cake of 4 days of getting nowhere troubleshooting.

  4. #44
    Newbie Array

    Join Date
    Nov 2010
    Posts
    1
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    +1 tto that.

    I too, have an Iphone 4 on 4.1 that got hosed thanks to a bad cydia app.

    I have gotten as far as trying to make the ramdisk, with the pwned 4.1 ipsw by sn0breeze,

    but ramdisk keeps spitting this error at me

    Exception: External component has thrown an exception.; at RamdiskBuilder.Hfs.hfslib_open(String path) at RamdiskBuilder.MainWindow.ProcessFile(String droppedFile)

    .

    Any idea how to proceed from there? Windows 7 x64 btw.

    Thanks !

  5. #45
    Newbie Array

    Join Date
    Dec 2010
    Posts
    1
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default My Story:

    I have an iPhone 4, 4.0.1, and I have the rebooting loop. It would turn on, stall and the wheel would come.

    I downloaded MS about three weeks ago, and it caused my phone to go in the rebooting loop.

    I managed to SSH in my phone successfully trying to fix the problem. At that time, I didn't know WHAT the problem was, seeing that I upgraded more than 4 files. I later found out that Music Controls and MS were the cause of my problems.

    Before finding the cause, I renamed a couple of folders (Mobilewatchdog, Applications and MobileSubstrate) as directed at another place. After I did this, the wheel was gone so I figured I fixed it. But, alas, my phone wasn't. I still had my SSH connection so I was able to change them back and forth and see if I could fix it. Even now, I believe my phone still has a renamed folder. I just can't remember which one.

    So my internet was going slow. I restarted my router and modem. HUGE MISTAKE. This made me lose connection between the iPhone and my computer so there's no way to connect.

    For the last two weeks I've been trying msft.guy's ramdisk method to no success.

    Since I have a new device, I use the tutorial he gave here: Mostly iPhone hacking: Booting SSH ramdisk on new devices and I followed the instructions accordingly.

    1) Built the ramdisk by extracting a pwned iPhone 4, 4.1, Snowbreezed IPSW's kernelcache, iBSS,and ramdisk.

    2) Used his tool, Ramdisk Builder, to create a SSH Ramdisk.

    3) Put iPhone in DFU mode.

    4) Used tetheredboot utility and put this:


    tetheredboot -i iBSS.n90ap.RELEASE.dfu -k
    kernelcache.release.n90 -r 018-7082-092.dmg.ssh
    I got this:
    C:\Users\SS\Desktop\Making The Backup>tetheredboot -i iBSS.n90ap.RELEASE.dfu -k
    kernelcache.release.n90 -r 018-7082-092.dmg.ssh
    Initializing libpois0n
    ERROR: The process "iTunes.exe" not found.
    Waiting for device to enter DFU mode
    Found device in DFU mode
    Checking if device is compatible with this jailbreak
    Checking the device type
    Identified device as iPhone3,1
    Preparing to upload limera1n exploit
    Resetting device counters
    Sending chunk headers
    Sending exploit payload
    Sending fake data
    Exploit sent
    Reconnecting to device
    Waiting 2 seconds for the device to pop up...
    Uploading iBSS.n90ap.RELEASE.dfu to device
    [==================================================] 100.0%
    Waiting 10 seconds for the device to pop up...
    Uploading 018-7082-092.dmg.ssh to device
    [==================================================] 100.0%
    Uploading kernelcache.release.n90 to device
    [==================================================] 100.0%
    Exiting libpois0n
    The phone shows a white screen.

    5) From there, I use itunnel_mux (7.1) to put this:


    itunnel_mux --lport 22

    I get this:


    C:\Users\SS\Desktop\Making The Backup>itunnel_mux --lport 22
    [INFO] Waiting for new TCP connection on port 22
    [INFO] Waiting for device...
    It just stays there. And now, I'm stuck.

    I've tried other methods like running tethered boot utility to get into 'pwned' DFU mode and then, using iTunnel, uploading these files using this command as said in his other instructions given:

    itunnel_mux --ibec iBEC.n90ap.RELEASE.dfu --ramdisk 018-7082-092.dmg.ssh --devicetree DeviceTree.n90ap.img3 --kernelcache kernelcache.release.n90 --ramdisk-delay 5
    I get this:

    C:\Users\SS\Desktop\Making The Backup>itunnel_mux.exe --ibec iBEC.n90ap.RELEASE.
    dfu --ramdisk 018-7082-092.dmg.ssh --devicetree DeviceTree.n90ap.img3 --kernelca
    che kernelcache.release.n90 --ramdisk-delay 5
    [INFO] Waiting for a device in Recovery mode to connect..


    From here, I don't even know where to turn to. Hopefully you guys can give me an answer as I'm going crazy without a phone.

    In the end it'll be worth it, knowing that my data is safe.

    Any help is appreciated. Thanks!!

    Edit: If you go to msft.guy's blog, you'll see me, Edgar, bothering the crap out of them to search for an answer.

    I have alright command usage experience, but like I said there, I'm willing to learn if you're willing to teach me. )
    Last edited by ess0616; 12-09-2010 at 05:09 AM.


  6. #46
    Supporter Array

    Join Date
    Oct 2010
    Posts
    5
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    Hi,

    my iPhone has been boot-loop bricked for 3 months now and I am close to a serious depression because of that fact. I just want to save my texts, notes, recordings, pics and contacts. I posted a few months ago in this thread.

    Apparently, I am not smart enough to deal with this, but many of you are. Please help a fellow out in Christmas time. Please, I am really desperate. I once even got a reply from msft.guy on one of his waves - which was really great - but sadly I ran into new problems again, I am just not able to get it done.

    Could someone take the time to go through all the steps with me via team.viewer and/or skype? I could also pay some money via paypal for your time [even upfront, but then only for someone with a history on this forum...]. However, if someone would be willing to just help me out for the fun of it, that would be even more awesome.

    I have an 3GS, 3.1.2, new BR (at the point when I got it in December 2009), 3.1.2 SHSH saved on Sauriks server and a beautiful bootloop. My phone just turned itself off one day (I didn't do anything special atm) and I was never able to boot it up again.

    If you read this and are able to help me out, please - by the love of god, make my year and reply & help me through this. The gods will definitely repay you in good karma!

    I described my progress and problems so far earlier in this thread...

    Thanks.
    Last edited by tether3d; 12-20-2010 at 12:51 AM.

  7. #47
    Administrator Array

    Join Date
    Oct 2007
    Posts
    4,145
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    10

    Default

    @tether3d,
    i'm not sure i understand the scope of the problem here.
    you have 3gs, new bootrom and shsh for fw 3.1.2 - are you saying you cannot restore to 3.1.2 using a stock firmware ?

    Beside 3.1.2 shsh, do you have any other shsh for other firmware ?
    ** If you just want to support hackint0sh.org with a donation click here **

  8. #48
    Super Moderator Array Olethros's Avatar

    Join Date
    Sep 2007
    Location
    Norway
    Posts
    8,360
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    439

    Default

    Quote Originally Posted by dtube View Post
    @tether3d,
    i'm not sure i understand the scope of the problem here.
    you have 3gs, new bootrom and shsh for fw 3.1.2 - are you saying you cannot restore to 3.1.2 using a stock firmware ?

    Beside 3.1.2 shsh, do you have any other shsh for other firmware ?
    He doesn't want to restore, wants to recover files first.
    Please read the stickies & search forum before posting!
    How to report an iTunes restore/update fail in a useful manner
    -

    iPad 3G 64GB (4.3.3, Redsn0w) oldest SHSH 3.2.2
    iPhone 4 32GB (4.2.1, Redsn0w JB-monte) oldest SHSH 4.1
    iPhone 3GS 32GB (4.3.3; Pwnagetool) factory unlocked oldest SHSH 3.1
    iPhone 8GB (3.1.3; Pwnagetool) AT&T Locked - Unlocked with bootneuter

    -
    Did we solve your problem? Got a dollar or two spare ? Donate!

  9. #49
    Supporter Array

    Join Date
    Oct 2010
    Posts
    5
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    @dtube: Thanks for replying! Olethros is right, I want to recover my files (texts/sms, memo sound recordings, pics, contacts, notes, etc.) first and then I will try to restore and re-integrate the saved data, so that I can access it again.

    1. msft.guy once told me that I could (a) use the greenpois0n exploit and then (b) go directly to uploading the pwned kernelcache/ramdisk in order to then (c) subsequently ssh into the phone. At this approach, I am stuck here: Private Paste - Pastie - it just hangs at the last line.

    Quote Originally Posted by msft.guy
    So far seems fine. Note that there's an easier way now, using GreenPois0n exploit: PwnStrap
    After you load 3.1.2 ibec using manual steps from this method, you can proceed loading ramdisk and kernelcache.

    2. Using the "normal instructions" of msft.guys ssh ramdisk method, I am stuck at the "assemble the payload" step of the "tethered support" section of his instructions, because I just don't know at all what I am supposed to do there. Link: https://wave.google.com/wave/?anon_a...%252BBJX7bXPBC

    Update: I donated a few $ to the forum, it would be great if someone could take the time and help me out here... maybe over IRC, skype, teamviewer, or this forum... and if anyone knows how I could get in touch with msft.guy (I emailed him and tried to catch him via IRC, but no luck as of yet), please let me know... thanks!

    Update2: Can someone maybe guide me through the "assemble payload" process at the tethered support section of the instructions? There are many commands there and there is also a file to download (ibss_payload.bin), but I have no idea how exactly to "assemble the payload"...

    apparently, one needs the xpwn tool and "dd commands"... and msft.guy also mentioned in this thread that one would need to be able to compile some C code... i am not sure, but maybe he meant this step. I just need this exploit file that should be created via this step...
    Last edited by tether3d; 12-29-2010 at 01:15 AM.

  10. #50
    Newbie Array

    Join Date
    Feb 2011
    Posts
    5
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    Quote Originally Posted by Teldin View Post
    I'm having two problems. I followed the instructions to the letter.

    First is, when I use the irecovery.exe command, my 3G reboots (endlessly) the instant I enter the "-c ramdisk". I don't think that's supposed to happen.

    Second, when I run the itunnel_mux_r6.exe command, this is what I get:
    It seems to get stuck after loading the dfu.

    C:\iphone>itunnel_mux_r6.exe --ibec iBEC.m68ap.RELEASE.dfu --ramdisk 018-6136-01
    4.dmg.ssh --devicetree DeviceTree.m68ap.img3 --kernelcache kernelcache.release.s
    5l8900x
    Will try to kick connected devices out of the Recovery mode..
    recovery_connect_callback
    getUsbDeviceName: \\?\USB#VID_05AC&PID_1281#CPID:8900_CPRV:30_CPFM:0 3_SCEP:05_BD
    ID:04_ECID:00000271AC163D2C_IBFL:01_SRNM:[5K933BMKY7H]_IMEI:[011935008633178]#{B
    8085869-FEB9-404B-8CB1-1E5C14FA8C54}\0000
    WinDFU::OpenDFUDevice: path: \\?\USB#VID_05AC&PID_1281#CPID:8900_CPRV:30_CPFM:0 3
    _SCEP:05_BDID:04_ECID:00000271AC163D2C_IBFL:01_SRN M:[5K933BMKY7H]_IMEI:[01193500
    8633178]#{B8085869-FEB9-404B-8CB1-1E5C14FA8C54}\0000
    WinDFU::OpenDeviceByPath: \\?\USB#VID_05AC&PID_1281#CPID:8900_CPRV:30_CPFM:0 3_SC
    EP:05_BDID:04_ECID:00000271AC163D2C_IBFL:01_SRNM:[5K933BMKY7H]_IMEI:[01193500863
    3178]#{B8085869-FEB9-404B-8CB1-1E5C14FA8C54}\0000
    operation 0 progress 3
    operation 0 progress 7
    operation 0 progress 11
    operation 0 progress 15
    operation 0 progress 19
    operation 0 progress 23
    operation 0 progress 27
    operation 0 progress 30
    operation 0 progress 34
    operation 0 progress 38
    operation 0 progress 42
    operation 0 progress 46
    operation 0 progress 50
    operation 0 progress 54
    operation 0 progress 58
    operation 0 progress 61
    operation 0 progress 65
    operation 0 progress 69
    operation 0 progress 73
    operation 0 progress 77
    operation 0 progress 81
    operation 0 progress 85
    operation 0 progress 89
    operation 0 progress 92
    operation 0 progress 96
    WinDFU::UploadData: EOF, cbRead: -124
    operation 0 progress 100
    WinDFU::UploadData: ZLP
    WinDFU::FinalizeDfuUpdate: GetStatus: status: 0, state: 6
    WinDFU:rocessUpdateState: status.bState == DFU_STATE_MANIFEST_SYNC
    WinDFU::FinalizeDfuUpdate: GetStatus: status: 0, state: 7
    WinDFU:rocessUpdateState: status.bState == DFU_STATE_MANIFEST, PollTimeout: 30
    00
    WinDFU::FinalizeDfuUpdate: GetStatus: status: 0, state: 8
    WinDFU:rocessUpdateState: status.bState == DFU_STATE_MANIFEST_WAIT_RESET
    WinDFU::ResetDevice: resetting...
    WinDFU::FinalizeDfuUpdate: success
    getUsbDeviceName: \\?\USB#VID_05AC&PID_1281#CPID:8900_CPRV:30_CPFM:0 3_SCEP:05_BD
    ID:04_ECID:00000271AC163D2C_IBFL:01_SRNM:[5K933BMKY7H]_IMEI:[011935008633178]#{E
    D82A167-D61A-4AF6-9AB6-11E52236C576}\IB0000
    iBEC iBEC.m68ap.RELEASE.dfu loaded
    (then nothing else happens. need to ctrl-c to get back to command prompt)
    I am having almost the exact same problem. I boot the phone with iREB then run;
    itunnel_mux_r61.exe --ibec iBEC.m68ap.RELEASE
    .dfu --ramdisk 018-6136-014.dmg.ssh --devicetree DeviceTree.m68ap.img3 --kernelcache kernelcache.release.s5l8900x --ramdisk-command "ramdisk 0x90000000"

    It gets stuck here;
    iBEC iBEC.m68ap.RELEASE.dfu loaded


 

 
Page 5 of 7 FirstFirst 1234567 LastLast

Similar Threads

  1. Replies: 1
    Last Post: 05-02-2011, 09:35 AM
  2. iPhone 3G SSH RAMDisk loading with iRecovery
    By ccsccs7 in forum iOS 3.x (iPhone OS 3.x)
    Replies: 3
    Last Post: 02-25-2011, 01:56 AM
  3. iPhone 3GS - iRecovery RAMDisk
    By _DL_ in forum Free Toolchain Software (Cydia App's)
    Replies: 16
    Last Post: 05-20-2010, 07:04 AM
  4. How to upload RamDisk to the iphone 3Gs ?!!
    By ti_zana in forum iPhone 3GS
    Replies: 3
    Last Post: 04-01-2010, 04:50 PM
  5. [1.1.4 OTB] [Problem] Recovery Mode not working
    By Shackalone in forum iPhone "2G" (Rev. 1)
    Replies: 4
    Last Post: 05-06-2008, 05:16 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Powered by vBulletin®
Copyright © 2014 vBulletin Solutions, Inc. All rights reserved.
Search Engine Friendly URLs by vBSEO
(c) 2006-2012 Hackint0sh.org
All times are GMT +2. The time now is 07:37 PM.
twitter, follow us!