@@Install PwnageTool Custom Firmware on Windowz & Linux@@ - GSM-Forum

algerienbox · 10-28-2010, 11:43

This procedure should work to bootstrap the restore
of any 3GS or Apple TV2 with PwnageTool 4.1+ image

THIS WILL NOT WORK FOR ANYTHING LESS THAN A 3GS.
THIS WILL NOT WORK FOR A CFW NOT PREPARED WITH PWNAGETOOL.
THIS WILL NOT WORK FOR ANY OTHER FIRMWARE BELOW iOS 4.1
YOU HAVE BEEN WARNED.

For iPhone 4 you can use umbrella to update with protected baseband
and greenpois0n or limera1n to jailbreak

@linux
required filles:
*your pwnagetool cooked 4.1 firmware
*unofficiel windows irecovry for new devices
*itune 10 fir greenpoison to run correctly
*greenpoison
@windows
required filles:
*your pwnagetool cooked 4.1 firmware
*unofficiel windows irecovry for new devices
*itune 10 fir greenpoison to run correctly
*greenpoison

Windows XP
Please give feedback if you got this working on Vista

We have had reports that this is NOT working on Windows 7.. let us know if you have a fix

Windows 7 update.. the software was developed on Windows 7 so it should work !!!
try putting both irecovery and greenpois0n into Win XP/sp2 compatibility if you encounter problems on Win7
Automatic Procedure:
1) Place your device into Recovery Mode.
While the phone is off, hold down the Home button and immediatly plug it into your computer.
(connect to iTunes logo should appear on the device)

2) In a command prompt, run irecovery.exe -p Path\To\Firmware.ipsw
Follow all the instructions.

3) once greenpois0n tells you jailbreak success...
your device should appear to reboot... (the screen can be white or connect to iTunes logo)

4) now you can send your CFW from iTunes

If you don't read the actual output from greenpois0n may the fleas of a thousand camels infest your private parts.
***************************************

if you have problems with the single command above you can use the manual method below..

Manual Procedure:

1) Put phone into Recovery mode (NOT DFU)
While the phone is off, hold down the Home button and immediatly plug it into your computer.

2) From a command prompt (Start>Run>"cmd"), change to the directory where you extracted irecovery, and enter irecovery -s

in the irecovery console enter the following commands :-

setenv boot-args 2
setenv auto-boot false
saveenv
/exit

3) Run greenpois0n - it will guide you to DFU mode, then it will stop on a white screen after you click "Jailbreak".
It should say "Jailbreak Complete!" and NOT "Jailbreak Failed!" next to the progressbar at the bottom.

4) Extract the iBSS from your custom PwnageTool image (firmware.ispw/Firmware/dfu/iBSS.BoardID.RELEASE.dfu) into your irecovery folder.
You can use WinRAR or another ZIP extractor to do this. IPSW files are really just ZIP files!

5) irecovery -f iBSS
iBSS should be replaced with the name of the iBSS that you just extracted from the pwnagetool image - ie iBSS.n88ap.RELEASE.dfu

6) At a command prompt: irecovery -s

in the irecovery console enter the following commands :-

setenv boot-args 0
saveenv
go image decrypt 0x41000000
go jump 0x41000040
/exit

At the "go jump" point your device should appear to reboot. Whether it goes back to a white screen or shows the Connect to iTunes screen depends on the firmware image used.

7) Restore your PwnageTool cooked firmware from iTunes.

Source: PwnStrap

Developed By sbingner & posixninja

irecovery.gz.linux
http://www.sendspace.com/file/c1c4ti
http://www.sendspace.com/file/c1c4ti
irecovery.zip for windows
Download irecovery.zip from Sendspace.com - send big files the easy way

Aamir_Zia · 10-28-2010, 12:11

any success stories ?

algerienbox · 10-28-2010, 12:23

i think no because its new solution

amori23 · 10-28-2010, 12:34

is there any possible way to do it with iPhone 4

by the way nice information

Aamir_Zia · 10-28-2010, 12:36

where is the custom file for 3gs ?

algerienbox · 10-28-2010, 13:32

Quote:

Originally Posted by Aamir_Zia

where is the custom file for 3gs ?

3GS Custom not activated
iPhone2,1_4.1_8B117_Custom_Restore_SiNfuL_iPhone_1 .part1.rar (partie 1)
iPhone2,1_4.1_8B117_Custom_Restore_SiNfuL_iPhone_1 .part2.rar (partie2)

3GS Custom activated
iPhone2,1_4.1_8B117_Custom_Restore_SiNfuL_iPhone_2 .part1.rar
iPhone2,1_4.1_8B117_Custom_Restore_SiNfuL_iPhone_2 .part2.rar

hariskt · 10-28-2010, 13:36

Quote:

Originally Posted by algerienbox

3GS Custom not activated
iPhone2,1_4.1_8B117_Custom_Restore_SiNfuL_iPhone_1 .part1.rar (partie 1)
iPhone2,1_4.1_8B117_Custom_Restore_SiNfuL_iPhone_1 .part2.rar (partie2)

3GS Custom activated
iPhone2,1_4.1_8B117_Custom_Restore_SiNfuL_iPhone_2 .part1.rar
iPhone2,1_4.1_8B117_Custom_Restore_SiNfuL_iPhone_2 .part2.rar

thanks dear....great job

rajSE · 10-30-2010, 22:18

Tesed working with Apple TV 2 4.1 Custom

Finally a solution to by pass mac monopoly by the dev team

imran_qasim · 10-30-2010, 22:41

irecovery only have 2 switches -f and -s , -s will give u details of Recovery mode phone and -f will write .ipsw file to device and what about -p which is mentioned i couldn't figure it out its original switch for irecovery.

Take Care
ENJOY

imran_qasim · 10-30-2010, 23:18

Code:

irecovery -f iBSS.n88ap.RELEASE.dfu
iRecovery - Recovery Utility
by wEsTbAeR-- and Tom3q

Got USB
Got USB
Found iPhone/iPod in Recovery mode

Loaded image file (len: 0x1a984, packets: 54, last: 0x184
Sending 0x1a984 bytes
Sending 0x800 bytes in packet 0...  OK
Error receiving status!
Sending 0x800 bytes in packet 1...  OK
Error receiving status!
Sending 0x800 bytes in packet 2...  OK
Error receiving status!
Sending 0x800 bytes in packet 3...  OK
Error receiving status!
Sending 0x800 bytes in packet 4...  OK
Error receiving status!
Sending 0x800 bytes in packet 5...  OK
Error receiving status!
Sending 0x800 bytes in packet 6...  OK
Error receiving status!
Sending 0x800 bytes in packet 7...  OK
Error receiving status!
Sending 0x800 bytes in packet 8...  OK
Error receiving status!
Sending 0x800 bytes in packet 9...  OK
Error receiving status!
Sending 0x800 bytes in packet 10...  OK
Error receiving status!
Sending 0x800 bytes in packet 11...  OK
Error receiving status!
Sending 0x800 bytes in packet 12...  OK
Error receiving status!
Sending 0x800 bytes in packet 13...  OK
Error receiving status!
Sending 0x800 bytes in packet 14...  OK
Error receiving status!
Sending 0x800 bytes in packet 15...  OK
Error receiving status!
Sending 0x800 bytes in packet 16...  OK
Error receiving status!
Sending 0x800 bytes in packet 17...  OK
Error receiving status!
Sending 0x800 bytes in packet 18...  OK
Error receiving status!
Sending 0x800 bytes in packet 19...  OK
Error receiving status!
Sending 0x800 bytes in packet 20...  OK
Error receiving status!
Sending 0x800 bytes in packet 21...  OK
Error receiving status!
Sending 0x800 bytes in packet 22...  OK
Error receiving status!
Sending 0x800 bytes in packet 23...  OK
Error receiving status!
Sending 0x800 bytes in packet 24...  OK
Error receiving status!
Sending 0x800 bytes in packet 25...  OK
Error receiving status!
Sending 0x800 bytes in packet 26...  OK
Error receiving status!
Sending 0x800 bytes in packet 27...  OK
Error receiving status!
Sending 0x800 bytes in packet 28...  OK
Error receiving status!
Sending 0x800 bytes in packet 29...  OK
Error receiving status!
Sending 0x800 bytes in packet 30...  OK
Error receiving status!
Sending 0x800 bytes in packet 31...  OK
Error receiving status!
Sending 0x800 bytes in packet 32...  OK
Error receiving status!
Sending 0x800 bytes in packet 33...  OK
Error receiving status!
Sending 0x800 bytes in packet 34...  OK
Error receiving status!
Sending 0x800 bytes in packet 35...  OK
Error receiving status!
Sending 0x800 bytes in packet 36...  OK
Error receiving status!
Sending 0x800 bytes in packet 37...  OK
Error receiving status!
Sending 0x800 bytes in packet 38...  OK
Error receiving status!
Sending 0x800 bytes in packet 39...  OK
Error receiving status!
Sending 0x800 bytes in packet 40...  OK
Error receiving status!
Sending 0x800 bytes in packet 41...  OK
Error receiving status!
Sending 0x800 bytes in packet 42...  OK
Error receiving status!
Sending 0x800 bytes in packet 43...  OK
Error receiving status!
Sending 0x800 bytes in packet 44...  OK
Error receiving status!
Sending 0x800 bytes in packet 45...  OK
Error receiving status!
Sending 0x800 bytes in packet 46...  OK
Error receiving status!
Sending 0x800 bytes in packet 47...  OK
Error receiving status!
Sending 0x800 bytes in packet 48...  OK
Error receiving status!
Sending 0x800 bytes in packet 49...  OK
Error receiving status!
Sending 0x800 bytes in packet 50...  OK
Error receiving status!
Sending 0x800 bytes in packet 51...  OK
Error receiving status!
Sending 0x800 bytes in packet 52...  OK
Error receiving status!
Sending 0x184 bytes in packet 53...  OK
Error receiving status!
Successfully uploaded file!
Executing it...
Error receiving status!
Error receiving status!
Error receiving status!
Closing USB connection...

I recieved the above message when trying to write the iBSS file with irecovery -f switch.

Take Care
ENJOY

amori23 · 10-31-2010, 13:26

Tested today on 3GS works 100% fine I will try it on 4 may be it works

algerienbox · 10-31-2010, 14:46

Code:

This is what I did
Placed custom firmware in C:\
Start>cmd>rightclick run as admin
Type" cd..  
Type: cd.. again
now type: irecovery.exe -p C:\iPhone3,1_4,1_8B117_Custom_Restore
follow instructions (launch GP, place iphone in DFU mode, click jailbreak)
Once it says Jailbreak done
Go back to the CMD window and press Enter
(screen should turn white, red or blue)
Now open itunes CTRL+RESTORE and select custom ipsw from C:\

algerienbox · 10-31-2010, 14:48

Quote:

Originally Posted by amori23

Tested today on 3GS works 100% fine I will try it on 4 may be it works

for iphone 4 use ""tinyumbrella-"" its so easy to update it without updating baseband

alf007 · 10-31-2010, 15:01

seeeppppp 100% tested......... 3gs apple logo only..... first v3.1
now .......v4.1 with modem 05.11.07

Amir-SkillZ · 10-31-2010, 15:24

Process working 1000% NP
it does restore the Iphone 3gs
But if Baseband is updated already to 5.14 ...this will not downgrade it at all MIND THAT !

10-28-2010, 11:43	#1 (permalink)
algerienbox No Life Poster Join Date: Sep 2007 Location: algeria Posts: 2,360 Member: 591880 Status: Offline Thanks Meter: 561	@@Install PwnageTool Custom Firmware on Windowz & Linux@@ This procedure should work to bootstrap the restore of any 3GS or Apple TV2 with PwnageTool 4.1+ image THIS WILL NOT WORK FOR ANYTHING LESS THAN A 3GS. THIS WILL NOT WORK FOR A CFW NOT PREPARED WITH PWNAGETOOL. THIS WILL NOT WORK FOR ANY OTHER FIRMWARE BELOW iOS 4.1 YOU HAVE BEEN WARNED. For iPhone 4 you can use umbrella to update with protected baseband and greenpois0n or limera1n to jailbreak @linux required filles: your pwnagetool cooked 4.1 firmware unofficiel windows irecovry for new devices itune 10 fir greenpoison to run correctly greenpoison @windows required filles: your pwnagetool cooked 4.1 firmware unofficiel windows irecovry for new devices itune 10 fir greenpoison to run correctly greenpoison Windows XP Please give feedback if you got this working on Vista We have had reports that this is NOT working on Windows 7.. let us know if you have a fix Windows 7 update.. the software was developed on Windows 7 so it should work !!! try putting both irecovery and greenpois0n into Win XP/sp2 compatibility if you encounter problems on Win7 Automatic Procedure: 1) Place your device into Recovery Mode. While the phone is off, hold down the Home button and immediatly plug it into your computer. (connect to iTunes logo should appear on the device) 2) In a command prompt, run irecovery.exe -p Path\To\Firmware.ipsw Follow all the instructions. 3) once greenpois0n tells you jailbreak success... your device should appear to reboot... (the screen can be white or connect to iTunes logo) 4) now you can send your CFW from iTunes If you don't read the actual output from greenpois0n may the fleas of a thousand camels infest your private parts. ************************************* if you have problems with the single command above you can use the manual method below.. Manual Procedure: 1) Put phone into Recovery mode (NOT DFU) While the phone is off, hold down the Home button and immediatly plug it into your computer. 2) From a command prompt (Start>Run>"cmd"), change to the directory where you extracted irecovery, and enter irecovery -s in the irecovery console enter the following commands :- setenv boot-args 2 setenv auto-boot false saveenv /exit 3) Run greenpois0n - it will guide you to DFU mode, then it will stop on a white screen after you click "Jailbreak". It should say "Jailbreak Complete!" and NOT "Jailbreak Failed!" next to the progressbar at the bottom. 4) Extract the iBSS from your custom PwnageTool image (firmware.ispw/Firmware/dfu/iBSS.BoardID.RELEASE.dfu) into your irecovery folder. You can use WinRAR or another ZIP extractor to do this. IPSW files are really just ZIP files! 5) irecovery -f iBSS iBSS should be replaced with the name of the iBSS that you just extracted from the pwnagetool image - ie iBSS.n88ap.RELEASE.dfu 6) At a command prompt: irecovery -s in the irecovery console enter the following commands :- setenv boot-args 0 saveenv go image decrypt 0x41000000 go jump 0x41000040 /exit At the "go jump" point your device should appear to reboot. Whether it goes back to a white screen or shows the Connect to iTunes screen depends on the firmware image used. 7) Restore your PwnageTool cooked firmware from iTunes. Source: PwnStrap Developed By sbingner & posixninja irecovery.gz.linux http://www.sendspace.com/file/c1c4ti http://www.sendspace.com/file/c1c4ti irecovery.zip for windows** Download irecovery.zip from Sendspace.com - send big files the easy way

10-28-2010, 12:11	#2 (permalink)
Aamir_Zia No Life Poster Join Date: Dec 2003 Location: Karachi Pakistan Age: 38 Posts: 6,770 Member: 47321 Status: Offline Sonork: 100.54032 Thanks Meter: 497	any success stories ?

10-28-2010, 12:23	#3 (permalink)
algerienbox No Life Poster Join Date: Sep 2007 Location: algeria Posts: 2,360 Member: 591880 Status: Offline Thanks Meter: 561	i think no because its new solution

10-28-2010, 12:34	#4 (permalink)
amori23 Freak Poster Join Date: Dec 2002 Location: Amman Age: 45 Posts: 225 Member: 19211 Status: Offline Thanks Meter: 21	is there any possible way to do it with iPhone 4 by the way nice information

10-28-2010, 12:36	#5 (permalink)
Aamir_Zia No Life Poster Join Date: Dec 2003 Location: Karachi Pakistan Age: 38 Posts: 6,770 Member: 47321 Status: Offline Sonork: 100.54032 Thanks Meter: 497	where is the custom file for 3gs ?

10-30-2010, 22:18	#8 (permalink)
rajSE Registered User Join Date: Jan 2005 Age: 46 Posts: 209 Member: 111373 Status: Offline Thanks Meter: 25	Tesed working with Apple TV 2 4.1 Custom Finally a solution to by pass mac monopoly by the dev team

10-30-2010, 22:41	#9 (permalink)
imran_qasim No Life Poster Join Date: Apr 2005 Location: PAKISTAN Age: 45 Posts: 1,790 Member: 133436 Status: Offline Sonork: 100.1577364 Thanks Meter: 191	irecovery only have 2 switches -f and -s , -s will give u details of Recovery mode phone and -f will write .ipsw file to device and what about -p which is mentioned i couldn't figure it out its original switch for irecovery. Take Care ENJOY

10-31-2010, 13:26	#11 (permalink)
amori23 Freak Poster Join Date: Dec 2002 Location: Amman Age: 45 Posts: 225 Member: 19211 Status: Offline Thanks Meter: 21	Tested today on 3GS works 100% fine I will try it on 4 may be it works

10-31-2010, 15:01	#14 (permalink)
alf007 No Life Poster Join Date: Dec 2001 Location: malang, east java, indonesian Posts: 528 Member: 7700 Status: Offline Thanks Meter: 28	seeeppppp 100% tested......... 3gs apple logo only..... first v3.1 now .......v4.1 with modem 05.11.07

10-31-2010, 15:24	#15 (permalink)
Amir-SkillZ No Life Poster Join Date: Nov 2004 Location: Capetown Posts: 6,709 Member: 91045 Status: Offline Thanks Meter: 8,696	Process working 1000% NP it does restore the Iphone 3gs But if Baseband is updated already to 5.14 ...this will not downgrade it at all MIND THAT !