You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# ipwndfu: open-source jailbreaking tool for older iOS devices
1
+

2
+
*Open-source jailbreaking tool for older iOS devices*
2
3
3
-
### Beta software
4
4
5
-
Backup your data.
5
+
**Please read the [disclaimer](#Disclaimer) before using**
6
6
7
-
This tool is currently in beta and could potentially brick your device. It will attempt to save a copy of data in NOR to nor-backups folder before flashing new data to NOR, and it will attempt to not overwrite critical data in NOR which your device requires to function. If something goes wrong, hopefully you will be able to restore to latest IPSW in iTunes and bring your device back to life, or use nor-backups to restore NOR to the original state, but I cannot provide any guarantees.
8
-
9
-
### No warranty
10
-
11
-
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
12
-
ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
13
-
14
-
### Credit
15
-
16
-
geohot for limera1n exploit
7
+
## Features
17
8
9
+
* Jailbreak iPhone 3GS (new bootrom) with alloc8 untethered bootrom exploit. :-)
18
10
19
-
### Dependencies
11
+
* Pwned DFU Mode exploit for S5L8920 devices using limera1n exploit, and compatible with Yosemite, El Capitan, and Sierra.
20
12
21
-
This tool should be compatible with Mac and Linux, and it was mostly tested on Yosemite and Sierra. It probably won't work in a virtual machine.
13
+
* Dump SecureROM on S5L8920 devices.
22
14
23
-
*libusb
15
+
*Dump NOR on S5L8920 devices.
24
16
25
-
On a Mac, you can install libusb using brew:
17
+
* Flash NOR on S5L8920 devices.
26
18
27
-
```
28
-
brew install libusb
29
-
```
19
+
* Encrypt or decrypt hex data on a connected device in pwned DFU Mode using its GID or UID key.
30
20
31
-
* pyusb
32
21
33
-
On a Mac, you can install pyusb using pip:
34
-
```
35
-
pip install pyusb
36
-
```
22
+
## Dependencies
37
23
38
-
On a Mac, if you do not have pip installed, follow instructions from the official site and install it with get-pip.py: https://pip.pypa.io/en/stable/installing/
24
+
This tool should be compatible with Mac and Linux, and it was mostly tested on Yosemite and Sierra. It probably won't work in a virtual machine.
39
25
40
-
* iPhone 3GS iOS 4.3.5 iBSS
26
+
* libusb, `brew install libusb`
27
+
* pyusb, `pip install pyusb`
28
+
*[pip](https://pip.pypa.io/en/stable/installing/)
29
+
*[iPhone 3GS iOS 4.3.5 iBSS](#iBSS)
41
30
42
31
Download iPhone 3GS iOS 4.3.5 IPSW using a link found on https://ipsw.me/ and extract iBSS using the following command, then move the file to ipwndfu folder:
The official write up for the alloc8 exploit can be found [here](https://github.com/axi0mX/alloc8)
94
74
95
-
### How does alloc8 work?
75
+
##iBSS
96
76
97
-
* Write-up:
77
+
Download iPhone 3GS iOS 4.3.5 IPSW using a link found on https://ipsw.me/ and extract iBSS using the following command, then move the file to ipwndfu folder:
* Install custom boot logos on devices jailbroken with 24Kpwn and alloc8.
113
95
114
96
* Enable verbose boot on devices jailbroken with 24Kpwn and alloc8.
97
+
98
+
## Disclaimer
99
+
100
+
**Warning: This is BETA software**
101
+
102
+
Backup your data.
103
+
104
+
This tool is currently in beta and could potentially brick your device. It will attempt to save a copy of data in NOR to nor-backups folder before flashing new data to NOR, and it will attempt to not overwrite critical data in NOR which your device requires to function. If something goes wrong, hopefully you will be able to restore to latest IPSW in iTunes and bring your device back to life, or use nor-backups to restore NOR to the original state, but I cannot provide any guarantees.
105
+
106
+
**There is NO warranty provided**
107
+
108
+
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
0 commit comments