Page 1 of 7 1234567 LastLast
Results 1 to 10 of 66
Discuss Working iPhone recovery ramdisk with SSH at the Tools - Hackint0sh.org; blog_title: Working iPhone recovery ramdisk with SSH ;-) Requirements: a jailbroken device with patched (pwned) ...
  1. #1
    Supporter Array

    Join Date
    Mar 2010
    Posts
    68
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    18

    Lightbulb Working iPhone recovery ramdisk with SSH

    blog_title: Working iPhone recovery ramdisk with SSH ;-)

    Requirements: a jailbroken device with patched (pwned) iBoot OR saved SHSH for 3.1.2.

    If your iPhone does not boot and you are too lazy to reinsall everything/have some data that needs to be recovered, this may just work for you. Allows you to copy full disk images among other things.

    Ramdisk preparation:
    Use this tool (Windows with .NET Framework 4 and a pwned ipsw required): RecoveryRamdiskBuilder_rev_2.zip - iphonetunnel-usbmuxconnectbyport - Ramdisk builder package rev '2' - now finds its tar file ;-) - Project Hosting on Google Code

    Now we can boot the ramdisk:

    iRecovery -f 018-6051-014.dmg.ssh
    iRecovery -c ramdisk

    iRecovery -f kernelcache.release.s5l8920x
    iRecovery -c bootx

    Now you need a custom build of iPhone_tunnel utility to connect to SSH:
    iphonetunnel-usbmuxconnectbyport - Project Hosting on Google Code

    Launch iPhone_tunnel, forward remote port 22 as local port 2022: ./iPhone_tunnel 22 2022
    Connect using SSH: ssh root@localhost -p 2022
    Last edited by msft.guy; 05-20-2010 at 12:40 PM. Reason: Limited tethered support..



  2. #2
    Rookie Array

    Join Date
    May 2010
    Posts
    12
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    I tried your tutorial to recover the data, but I get stuck at the iPhone_tunnel part.
    It says "waiting for devices" and on my iphone I have a recovery screen. And Winscp is searching, but cannot find host.

    Also, -c ramdisk and -c bootx ... what do these commands do? I typed them in after the "-f" commands, but all it did was display "irecovery recovery unitlity by..." info

  3. #3
    Supporter Array

    Join Date
    Mar 2010
    Posts
    68
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    18

    Default

    Quote Originally Posted by Klasniedryg View Post
    It says "waiting for devices" and on my iphone I have a recovery screen.

    Also, -c ramdisk and -c bootx ... what do these commands do? I typed them in after the "-f" commands, but all it did was display "irecovery recovery unitlity by..." info
    This means you haven't booted the ramdisk yet ;-(

    When it boots successfully, it shows an Apple logo with the progress bar, just like when it starts an actual restore.

    Maybe your version of iRecovery has different option names? what does it say if you launch it without parameters?

    Also, what's your device model, iBoot version (just post output of 'iRecovery -s') and what type of jailbreak is installed?

    New bootrom devices are supported via a iBSS payload; currently you have to be an advanced user (be able to hex-edit a file and compile a piece of C code) for that..

    BTW, I'm looking for volunteers with new-bootrom 3GS and 3.1.2 hashes on file to simplify that step..
    Last edited by msft.guy; 05-20-2010 at 12:53 PM.

  4. #4
    Rookie Array

    Join Date
    May 2010
    Posts
    12
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    Quote Originally Posted by msft.guy View Post
    This means you haven't booted the ramdisk yet ;-(

    When it boots successfully, it shows an Apple logo with the progress bar, just like when it starts an actual restore.

    Maybe your version of iRecovery has different option names? what does it say if you launch it without parameters?

    Also, what's your device model, iBoot version (just post output of 'iRecovery -s') and what type of jailbreak is installed?

    New bootrom devices are supported via a iBSS payload; currently you have to be an advanced user (be able to hex-edit a file and compile a piece of C code) for that..

    BTW, I'm looking for volunteers with new-bootrom 3GS and 3.1.2 hashes on file to simplify that step..
    Here is what I have...

    -iRecovery -s
    iBoot for n88ap, Copyright 2009, Apple Inc.
    BUILD_TAG: iBoot-636.66
    BUILD_STYLE: RELEASE
    USB SN.....
    ==================
    [FTL:MSG] Apple NAND Driver (AND) RO
    [NAND} Found Chip .....
    [NAND} Found Chip .....
    [NAND} Found Chip .....
    Entering recovery mode, starting command prompt
    limiting USB input current to 400 mA
    limiting USB input current to 400 mA
    limiting USB input current to 400 mA
    le signature 0x43313133 (line:375)
    [FTL:MSG] VSVFL Register [OK]
    [FTL:MSG] VFL Init [OK]
    [FTL:MSG] VFL_Open [OK]
    [FTL:MSG] YAFTL Register [OK]
    yaFTL::YAFTL_Open(1:2630): CXT is not valid. Performing full NAND R/O restore ...
    [FTL:MSG] VFL_Open [OK]
    Boot Failure Count: 15 Panic Fail Cont: 0
    Entering recovery mode, starting command prompt
    limiting USB input current to 400 mA
    limiting USB input current to 400 mA
    limiting USB input current to 400 mA
    (Recovery) iPhone$


    I am using 3gs, 3.12 with 5.11.01 Jailbroken with Blackra1n. No unlock, I have ATT.

    I have also been directed to this link. A fella had a almost exact situation as I.

  5. #5
    Supporter Array

    Join Date
    Mar 2010
    Posts
    68
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    18

    Default

    Quote Originally Posted by Klasniedryg View Post
    Here is what I have...
    BUILD_TAG: iBoot-636.66
    ...
    (Recovery) iPhone$
    ..
    I am using 3gs, 3.12 with 5.11.01 Jailbroken with Blackra1n. No unlock, I have ATT.
    iRecovery shell works; that's good. Now try those:
    Code:
    iRecovery -f 018-6136-014.dmg.ssh
    - make sure 018-6136-014.dmg.ssh file is in the same directory as iRecovery; it should output something like 'sending file' and it should take about a minute. If it returns quickly, something is wrong - try another version of iRecovery.

    Code:
    iRecovery -s
    wait for prompt, type 'ramdisk' command and see what happens.
    It should output something like this:
    Code:
    creating ramdisk at 0x44000000 of size 0xf2d600, from image at 0x41000000
    Also check the instructions on the wave as most up to date/relevant.

    Quote Originally Posted by Klasniedryg View Post
    I have also been directed to this link. A fella had a almost exact situation as I.
    Except he's got an iPod.. mw and arm7_go commands aren't present in your iBoot..


  6. #6
    Rookie Array

    Join Date
    May 2010
    Posts
    12
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    Alright! I can finally see inside my phone!
    The downside, is that I cant find my data anywhere
    Do I still need to mount the disks?
    There are a bunch of system folders, and two folders 'mnt1' and 'mnt2'

    Once again, thank you so much for your help so far.

  7. #7
    Super Moderator Array Olethros's Avatar

    Join Date
    Sep 2007
    Location
    Norway
    Posts
    8,360
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    439

    Default

    You probably need to be looking under mnt2
    Please read the stickies & search forum before posting!
    How to report an iTunes restore/update fail in a useful manner
    -

    iPad 3G 64GB (4.3.3, Redsn0w) oldest SHSH 3.2.2
    iPhone 4 32GB (4.2.1, Redsn0w JB-monte) oldest SHSH 4.1
    iPhone 3GS 32GB (4.3.3; Pwnagetool) factory unlocked oldest SHSH 3.1
    iPhone 8GB (3.1.3; Pwnagetool) AT&T Locked - Unlocked with bootneuter

    -
    Did we solve your problem? Got a dollar or two spare ? Donate!

  8. #8
    Rookie Array

    Join Date
    May 2010
    Posts
    12
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    I looked under mnt2 and there is nothing in the folder. I also looked in /dev/mnt2 and the file size is '0'
    Please dont tell me I lost it all!!!!

    oh well. My wife will have my head off tomorrow when she finds out I cant restore our baby pictures. ......

  9. #9
    Super Moderator Array Olethros's Avatar

    Join Date
    Sep 2007
    Location
    Norway
    Posts
    8,360
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    439

    Default Working iPhone recovery ramdisk with SSH

    You may have to mount the iPhone filesystem. Remember that you are running from a ramdisk currently.
    Please read the stickies & search forum before posting!
    How to report an iTunes restore/update fail in a useful manner
    -

    iPad 3G 64GB (4.3.3, Redsn0w) oldest SHSH 3.2.2
    iPhone 4 32GB (4.2.1, Redsn0w JB-monte) oldest SHSH 4.1
    iPhone 3GS 32GB (4.3.3; Pwnagetool) factory unlocked oldest SHSH 3.1
    iPhone 8GB (3.1.3; Pwnagetool) AT&T Locked - Unlocked with bootneuter

    -
    Did we solve your problem? Got a dollar or two spare ? Donate!

  10. #10
    Rookie Array

    Join Date
    May 2010
    Posts
    12
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default

    The other thing is that I used the pawned 018-6051-014.dmg.ssh file. Maybe I should have used the original?
    Also, How do I go about mounting the iphone file system?


 

 
Page 1 of 7 1234567 LastLast

Similar Threads

  1. Replies: 1
    Last Post: 05-02-2011, 09:35 AM
  2. iPhone 3G SSH RAMDisk loading with iRecovery
    By ccsccs7 in forum iOS 3.x (iPhone OS 3.x)
    Replies: 3
    Last Post: 02-25-2011, 01:56 AM
  3. iPhone 3GS - iRecovery RAMDisk
    By _DL_ in forum Free Toolchain Software (Cydia App's)
    Replies: 16
    Last Post: 05-20-2010, 07:04 AM
  4. How to upload RamDisk to the iphone 3Gs ?!!
    By ti_zana in forum iPhone 3GS
    Replies: 3
    Last Post: 04-01-2010, 04:50 PM
  5. [1.1.4 OTB] [Problem] Recovery Mode not working
    By Shackalone in forum iPhone "2G" (Rev. 1)
    Replies: 4
    Last Post: 05-06-2008, 05:16 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Powered by vBulletin®
Copyright © 2014 vBulletin Solutions, Inc. All rights reserved.
Search Engine Friendly URLs by vBSEO
(c) 2006-2012 Hackint0sh.org
All times are GMT +2. The time now is 11:52 AM.
twitter, follow us!