[TUT] How To Hack Any iDevice [TUT]

[boy1995]

In this tutorial, I will explain to you how to hack an iDevice with no password required.

Necessary Materials
IDA 6.2 Demo Version from Hex-rays
Jailbroken iDevice
iPhoneFolders
0xED for Mac or Hex Workshop for Windows
A computer
A brain (size does not matter .)

Directions
1. Use iPhoneFolders to navigate into System/Library/CoreServices/SpringBoard.app
2. Find the binary of SpringBoard (No extensions).
3. Take the binary, download it to your computer.
4. Open up IDA and load SpringBoard from the location that you put it in.
5. Open the binary as ARM processor.
7. Wait for the entire binary to be disassembled.
8. By pressing alt+t on your keyboard, the search function will pop up. Now you will want to search for 'isPasswordProtected' without the quotes.
9. SBAwayController::isPasswordProtected should appear. At the mid-bottom-left hand side of IDA, you should see a number. For me, this is 37018 on iOS 4.3.3. However, THIS WILL BE DIFFERENT ON ALL SEPERATE FIRMWARES.
10. Open up HexWorkshop, and load the Springboard binary.
11. Navigate to the file offset found in step 9.
12. Change the 2-bit number (4 digits) here to 0020. (back up original binary before making any changes in case you mess up.)
13. Save the Hex Workshop binary.
14. Open up iPhoneFolder and navigate to SpringBoard.app again if you are not already there.
15. Replace your new, edited binary with the one currently there. Do not Replace All.
16. iPhone now does not require a valid password. You now have full access to it!

If you ever want to prank friends, or want to steal a corporate iPhone with sensitive data in it and retrieve the info, or just want a new iDevice for yourself, this tut should get the job done. :victoire:

For whatever your needs are, good luck and have fun with this useful hack! :blackhat:

Please vouch on the thread, this method took me 2 hours to do.

[bazde21]

Thank u
But if the phone is protected by password How i can use iphonefolders to navigate to springboard.app

[boy1995]

Originally Posted by bazde21

Thank u
But if the phone is protected by password How i can use iphonefolders to navigate to springboard.app

Not Sure But If You Have Plug-in Your iPhone To iTunes Then Maybe You don't Need A Password Else I Don't know About that

[free1600]

Have you tested this .If device is protected how you will be able to access the system files ?
Firstly it's not your tuto is not for what you mention and you have no idea what you advanced here .

[SALUM]

Originally Posted by boy1995

Not Sure But If You Have Plug-in Your iPhone To iTunes Then Maybe You don't Need A Password Else I Don't know About that

No way to access if protected by password

[celumaster.]

This post is useless because ih the device is password protected is not possible to access it.

Regards !!

[roben..hood]

yes ... useless .. any how thanks for ur effort..

[GSMan]

If it's jailbroken you have allright access to file system
Thanks for infos
GabiRo

[Rosa12]

Originally Posted by GSMan

If it's jailbroken you have allright access to file system
Thanks for infos
GabiRo

Thanks for your post.[IMG]http://www.****************.com[/IMG]

[polina1930]

hi
after do this , my iphone stay in apple logo . phone is up but show apple logo .

[Gecko_UK]

hi
after do this , my iphone stay in apple logo . phone is up but show apple logo .

if you have edited correctly, check permissions and do a 'just boot' with redsn0w..otherwise copy original (non edited) springboard binary back