Saturday, July 10, 2010

iH8sn0w : Payload Pwner r6 + iBooty V1.5 has been released


I figured making a tool would take a bit too long. So, i'm going to write up this tutorial. It isn't recommended for regular users.

**BEFORE PROCEEDING, ENSURE THAT YOU HAVE YOUR iPod/PHONE BACKED UP!**

THIS TUTORIAL ASSUMES YOU ARE ALREADY ON 3.1.2!

Q: Why not 3.1.3???
A: The exploit used is closed in 3.1.3 and beyond.
 BEFORE PROCEEDING, ENSURE THAT YOU HAVE YOUR iPod/PHONE BACKED UP!
WHAT WE WILL NEED:
* An iPhone 3G[S] or iPod Touch 2G MC or iPod Touch 3-- new bootrom
* 3.1.2 already installed or 3.1.2 installed via SHSH blobs. <-- Broken blackra1n'd devices will work. (Especially if Spirit messed you up!).
* Payload Pwner-r6
* sn0wbreeze V1.7
* How to Jailbreak iOS 4 Using Sn0wbreeze V1.7
* iBooty V1.5
* 3.1.2/4.0 firmware downloaded.
*All Apple Firmwares (iPod, iPhone and iPad Firmware Download)

* iTunes 9.2 Installed
NOTE :
THIS TUTORIAL ASSUMES YOU ARE ALREADY ON 3.1.2!
 not working on 3.1.3 because The exploit used is closed in 3.1.3 and beyond.
 Step by step :
step 1:
Pwning iBEC + iBoot
Download this easy tool Payload Pwner-r6
step 2:
 Making a Custom IPSW
Download sn0wbreeze V1.7 ,USE EXPERT MODE! , In General, Checkmark "Disable NOR Flash" ,Build it.
step 3:
iBooty Prep.

Most of you know of the utility "iBooty" that I made for Aki_nG.

It will work as long as you place all of the correct files there.

I : Download iBooty GUI here -- iBooty V1.5 and Extract it.

II : Extract your Custom IPSW created by sn0wbreeze with 7-Zip or another un-archiver.

III : Grab the kernelcache and bring it into the same folder as ibooty.
Also grab iBEC from the folder "Firmware\dfu".
Aswell as DeviceTree from the folder "Firmware\all_flash\all_flash.n88ap.production\DeviceTree.n88ap".

IV :
* Rename your Kernel 4.0-Custom to "kernel.40"
* Rename your iBEC 4.0-Custom to "ibec.40"
* Rename your DeviceTree 4.0-Custom to "devtree.40"
======
Your folder should look like this :
- iboot.payload <-- Created with Payload Pwner.
- devtree.40 <-- Grabbed from Custom IPSW made by sn0wbreeze.
- ibec.40 <-- Created with Payload Pwner.
- bspatch.exe <-- Comes with iBooty.
- iBooty.exe <-- Comes with iBooty.
- kernel.40 <-- Grab from Custom IPSW made by sn0wbreeze.
- sn0w.img3 <-- Comes with iBooty.
- wait.img3 <-- Comes with iBooty.
======
-------
step 4:
Restoring to 4.0 + Booting
-------
*MAKE SURE YOU ARE ON 3.1.2 WHEN DOING THIS*

I : Run iBooty and Select "Prepare Device for Custom Firmware". Run the Process and if you see the image, you can proceed!

II : Now open iTunes and restore to the custom ipsw.

***WHEN DONE, YOUR DEVICE WILL GO INTO RECOVERY MODE. IT WONT BOOT.***
-------
step 5:
Booting
I : Just Re-Run iBooty and select "Boot It". If all goes well it will boot!

0 Responses to “iH8sn0w : Payload Pwner r6 + iBooty V1.5 has been released”

Post a Comment