Skip to content

Commit 39ead7e

Browse files
committed
Documentation changes and Logo
1 parent 953fc87 commit 39ead7e

File tree

3 files changed

+50
-50
lines changed

3 files changed

+50
-50
lines changed

.gitignore

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,3 +2,4 @@
22
nor-backups/nor-*
33
SecureROM-*
44
n88ap-iBSS-4.3.5.img3
5+
*.ipsw

README.md

Lines changed: 49 additions & 50 deletions
Original file line numberDiff line numberDiff line change
@@ -1,57 +1,47 @@
1-
# ipwndfu: open-source jailbreaking tool for older iOS devices
1+
![](repo/ipwndfu.png)
2+
*Open-source jailbreaking tool for older iOS devices*
23

3-
### Beta software
44

5-
Backup your data.
5+
**Please read the [disclaimer](#Disclaimer) before using**
66

7-
This tool is currently in beta and could potentially brick your device. It will attempt to save a copy of data in NOR to nor-backups folder before flashing new data to NOR, and it will attempt to not overwrite critical data in NOR which your device requires to function. If something goes wrong, hopefully you will be able to restore to latest IPSW in iTunes and bring your device back to life, or use nor-backups to restore NOR to the original state, but I cannot provide any guarantees.
8-
9-
### No warranty
10-
11-
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
12-
ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
13-
14-
### Credit
15-
16-
geohot for limera1n exploit
7+
## Features
178

9+
* Jailbreak iPhone 3GS (new bootrom) with alloc8 untethered bootrom exploit. :-)
1810

19-
### Dependencies
11+
* Pwned DFU Mode exploit for S5L8920 devices using limera1n exploit, and compatible with Yosemite, El Capitan, and Sierra.
2012

21-
This tool should be compatible with Mac and Linux, and it was mostly tested on Yosemite and Sierra. It probably won't work in a virtual machine.
13+
* Dump SecureROM on S5L8920 devices.
2214

23-
* libusb
15+
* Dump NOR on S5L8920 devices.
2416

25-
On a Mac, you can install libusb using brew:
17+
* Flash NOR on S5L8920 devices.
2618

27-
```
28-
brew install libusb
29-
```
19+
* Encrypt or decrypt hex data on a connected device in pwned DFU Mode using its GID or UID key.
3020

31-
* pyusb
3221

33-
On a Mac, you can install pyusb using pip:
34-
```
35-
pip install pyusb
36-
```
22+
## Dependencies
3723

38-
On a Mac, if you do not have pip installed, follow instructions from the official site and install it with get-pip.py: https://pip.pypa.io/en/stable/installing/
24+
This tool should be compatible with Mac and Linux, and it was mostly tested on Yosemite and Sierra. It probably won't work in a virtual machine.
3925

40-
* iPhone 3GS iOS 4.3.5 iBSS
26+
* libusb, `brew install libusb`
27+
* pyusb, `pip install pyusb`
28+
* [pip](https://pip.pypa.io/en/stable/installing/)
29+
* [iPhone 3GS iOS 4.3.5 iBSS](#iBSS)
4130

4231
Download iPhone 3GS iOS 4.3.5 IPSW using a link found on https://ipsw.me/ and extract iBSS using the following command, then move the file to ipwndfu folder:
4332

4433
```
4534
unzip -p iPhone2,1_4.3.5_8L1_Restore.ipsw Firmware/dfu/iBSS.n88ap.RELEASE.dfu > n88ap-iBSS-4.3.5.img3
4635
```
4736

48-
### Patch for libusb required to make limera1n work on El Capitan and Sierra
37+
## libusb Patch:
38+
**Only applicable on El Capitan and Sierra**
4939

50-
Reason:
40+
[Source](https://www.belle-aurore.com/mike/2016/06/os-x-el-capitan-and-its-refusal-to-reset-usb-devices/)
5141

52-
https://www.belle-aurore.com/mike/2016/06/os-x-el-capitan-and-its-refusal-to-reset-usb-devices/
42+
You should have libusb installed using brew. Make sure you are using 1.0.21 (latest version as of writing).
5343

54-
You should have libusb installed using brew. 1.0.21 is the latest version. Calculate the SHA1 hash:
44+
Calculate the SHA1 hash:
5545

5646
```
5747
openssl sha1 /usr/local/Cellar/libusb/1.0.21/lib/libusb-1.0.0.dylib
@@ -70,36 +60,28 @@ sudo bspatch /usr/local/Cellar/libusb/1.0.21/lib/libusb-1.0.0.dylib /usr/local/C
7060
```
7161

7262

73-
### Features
74-
75-
* Jailbreak iPhone 3GS (new bootrom) with alloc8 untethered bootrom exploit. :-)
7663

77-
* Pwned DFU Mode exploit for S5L8920 devices using limera1n exploit, and compatible with Yosemite, El Capitan, and Sierra.
7864

79-
* Dump SecureROM on S5L8920 devices.
65+
## Tutorial
8066

81-
* Dump NOR on S5L8920 devices.
82-
83-
* Flash NOR on S5L8920 devices.
84-
85-
* Encrypt or decrypt hex data on a connected device in pwned DFU Mode using its GID or UID key.
86-
87-
88-
### Installing alloc8 on iPhone 3GS (new bootrom)
89-
90-
* This tool can be used to downgrade or jailbreak iPhone 3GS (new bootrom) without SHSH blobs:
67+
This tool can be used to downgrade or jailbreak iPhone 3GS (new bootrom) without SHSH blobs:
9168

9269
https://github.com/axi0mX/ipwndfu/blob/master/JAILBREAK-GUIDE.md
9370

71+
## Official Write up
72+
73+
The official write up for the alloc8 exploit can be found [here](https://github.com/axi0mX/alloc8)
9474

95-
### How does alloc8 work?
75+
## iBSS
9676

97-
* Write-up:
77+
Download iPhone 3GS iOS 4.3.5 IPSW using a link found on https://ipsw.me/ and extract iBSS using the following command, then move the file to ipwndfu folder:
9878

99-
https://github.com/axi0mX/alloc8
79+
```
80+
unzip -p iPhone2,1_4.3.5_8L1_Restore.ipsw Firmware/dfu/iBSS.n88ap.RELEASE.dfu > n88ap-iBSS-4.3.5.img3
81+
```
10082

10183

102-
### Coming soon
84+
## Coming soon
10385

10486
* Reorganize and refactor code and fix issues with tabs/spaces.
10587

@@ -112,3 +94,20 @@ https://github.com/axi0mX/alloc8
11294
* Install custom boot logos on devices jailbroken with 24Kpwn and alloc8.
11395

11496
* Enable verbose boot on devices jailbroken with 24Kpwn and alloc8.
97+
98+
## Disclaimer
99+
100+
**Warning: This is BETA software**
101+
102+
Backup your data.
103+
104+
This tool is currently in beta and could potentially brick your device. It will attempt to save a copy of data in NOR to nor-backups folder before flashing new data to NOR, and it will attempt to not overwrite critical data in NOR which your device requires to function. If something goes wrong, hopefully you will be able to restore to latest IPSW in iTunes and bring your device back to life, or use nor-backups to restore NOR to the original state, but I cannot provide any guarantees.
105+
106+
**There is NO warranty provided**
107+
108+
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
109+
ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
110+
111+
## Credit
112+
113+
*geohot for limera1n exploit*

repo/ipwndfu.png

122 KB
Loading

0 commit comments

Comments
 (0)