iH8sn0w : Payload Pwner r6 + iBooty V1.6 has been released

figured making a tool would take a bit too long. So, i'm going to write up this tutorial. It isn't recommended for regular users.

**BEFORE PROCEEDING, ENSURE THAT YOU HAVE YOUR iPod/PHONE BACKED UP!**

THIS TUTORIAL ASSUMES YOU ARE ALREADY ON 3.1.2!

Q: Why not 3.1.3???
A: The exploit used is closed in 3.1.3 and beyond.

 BEFORE PROCEEDING, ENSURE THAT YOU HAVE YOUR iPod/PHONE BACKED UP!

WHAT WE WILL NEED:
* An iPhone 3G[S] or iPod Touch 2G MC or iPod Touch 3-- new bootrom
* 3.1.2 already installed or 3.1.2 installed via SHSH blobs. <-- Broken blackra1n'd devices will work. (Especially if Spirit messed you up!).
* Payload Pwner-r6
* sn0wbreeze V1.7
* How to Jailbreak iOS 4 Using Sn0wbreeze V1.7
* iBooty V1.6
* 3.1.2/4.0 firmware downloaded.
*All Apple Firmwares (iPod, iPhone and iPad Firmware Download)

* iTunes 9.2 Installed
NOTE :
THIS TUTORIAL ASSUMES YOU ARE ALREADY ON 3.1.2!
 not working on 3.1.3 because The exploit used is closed in 3.1.3 and beyond.
 Step by step :
step 1:
Pwning iBEC + iBoot
Download this easy tool Payload Pwner-r6
step 2:
 Making a Custom IPSW
Download sn0wbreeze V1.7 ,USE EXPERT MODE! , In General, Checkmark "Disable NOR Flash" ,Build it.
step 3:
iBooty Prep.

Most of you know of the utility "iBooty" that I made for Aki_nG.

It will work as long as you place all of the correct files there.

I : Download iBooty GUI here -- iBooty V1.6 and Extract it.

II : Extract your Custom IPSW created by sn0wbreeze with 7-Zip or another un-archiver.

III : Grab the kernelcache and bring it into the same folder as ibooty.
Also grab iBEC from the folder "Firmware\dfu".
Aswell as DeviceTree from the folder "Firmware\all_flash\all_flash.n88ap.production\DeviceTree.n88ap".

IV :
* Rename your Kernel 4.0-Custom to "kernel.40"
* Rename your iBEC 4.0-Custom to "ibec.40"
* Rename your DeviceTree 4.0-Custom to "devtree.40"
======
Your folder should look like this :
- iboot.payload <-- Created with Payload Pwner.
- devtree.40 <-- Grabbed from Custom IPSW made by sn0wbreeze.
- ibec.40 <-- Created with Payload Pwner.
- bspatch.exe <-- Comes with iBooty.
- iBooty.exe <-- Comes with iBooty.
- kernel.40 <-- Grab from Custom IPSW made by sn0wbreeze.
- sn0w.img3 <-- Comes with iBooty.
- wait.img3 <-- Comes with iBooty.
======
-------
step 4:
Restoring to 4.0 + Booting
-------
*MAKE SURE YOU ARE ON 3.1.2 WHEN DOING THIS*

I : Run iBooty and Select "Prepare Device for Custom Firmware". Run the Process and if you see the image, you can proceed!

II : Now open iTunes and restore to the custom ipsw.

***WHEN DONE, YOUR DEVICE WILL GO INTO RECOVERY MODE. IT WONT BOOT.***
-------
step 5:
Booting
I : Just Re-Run iBooty and select "Boot It". If all goes well it will boot!

you may also like :
MuscleNerd : Good progress on iPhone4 unlock [video]
Finaly sn0wbreeze V1.7 has been released [iH8sn0w]
Firmwares (iPod, iPhone and iPad Firmware Download)
[redsn0w has been updated] Latest redsn0w should fix any APN/MMS 0.9.5b5-5All Apple
Spirit.Fix.iTunes.9.2
Work 100% How to Downgrade your iPhone from iOS 4 back to 3.1.3 [Video]
ToolJail 2.2 Releases to jailbreak Assistance iPhone/iPod iOS 4
[woooooooow Amazing] follow your facebook friends by twitter
Facebook 3.1.3 has been Released for iPhone and iPod touch
How Facebook Social Plugins Work [video]

You can follow Dailytoptech on Twitter or become a fan on Facebook or by Email Subscribe to get All news Free