Wednesday, July 1, 2009

The 0wls Egg

As you may have seen in the comments we are making very fast progress and just need a couple patches for a Jailbreak

Arthur made a custom ramdisk here's what he said:

So what we have in custom dmg?

Its all original files + cydia package (also some other files and patches from 3G)

Also root partition now should be 700mb, so yo will have around 90mb extra for themes and cydia apps-

I myself must patch iBoot, iBec, and iBss with the RSA signatures in order to put ANY nice jailbreaking stuff :P


Blogger Denio said...

Good work guys, you've made a lot of progress

July 1, 2009 at 11:39 PM  
Blogger Vcxz said...

Wow very nice ^^

July 1, 2009 at 11:48 PM  
Blogger Ludovic said...

This is so great, you are the best :)

July 2, 2009 at 12:04 AM  
Blogger Maximilian said...

Whats your comment about the news from dev team (ibss ibec)

July 2, 2009 at 12:25 AM  
Anonymous Anonymous said...

@ALL: Do we need to restore the 3GS twice and get the iBSS und IBEC or are we fine when we only have ECID+purplera1n Files?

July 2, 2009 at 1:27 AM  
Blogger voesschen said...

is the project death?

July 2, 2009 at 5:27 AM  
Blogger Zeke said...

Any closer to building a custom ipsw that you can restore to? Have any of you guys looked into what 3.1 does for the codesigning?

July 2, 2009 at 6:12 AM  
Blogger InhexSTER said...

Alright to everyone to make jailbreak easier you can use this script in terminal while restoring in DFU: this only for mac (copy and paste into terminal):

01. SDIR="/tmp/PersonalizedRestoreBundle.*/" # The * means this changes for every new restore process
02. DDIR="$HOME/grabberbackup"
03. WAIT="1" # time in s - 1sec should be ok for almost every case
04. MAXEXECTIME="1800" # in sec - 30min
06. #Tool Check starts here...
07. MKDIR=`which mkdir`
08. CP=`which cp`
09. SLEEP=`which sleep`
11. # Creating destination directory...
12. $MKDIR -p $DDIR
14. # create an empty counter and start the whole thing
15. COUNT=0
16. while [ $COUNT -lt $MAXEXECTIME ]
17. do
18.         if [ -d $SDIR ]; then
19.                 # If you want that files will NOT be overwritten by newer ones in source directory
20.                 # use "-Rnv" instead of "-Rv" in the following line :)
21.                 $CP -Rv $SDIR $DDIR
22.                 COUNT=`expr $COUNT + 1`
23.                 $SLEEP 1
24.         else
25.                 $SLEEP 1
26.         fi
27. done
29. #Script succssful
30. exit 0;

this script bassically will create grabberbackup folder with your iBEC IBSS and iBOOT already signes from Apple

July 2, 2009 at 6:15 AM  
Blogger InhexSTER said...

So the post above is very important and its VERY IMPORTANT YOU DO THAT.. i just checked iBSS file that i got from there is fully accepted by the device :)

July 2, 2009 at 6:45 AM  
Blogger voesschen said...

how far away are we until jailbreak?

english :-S

July 2, 2009 at 6:50 AM  
Anonymous Anonymous said...

@InhexSTER: Please tell the People that this is a BASH Script - copy n paste works but people can replace "$SLEEP 1" with "$SLEEP $WAIT" when they want to increase backup time to 2 or more seconds. also they can skip lines who start with a "#" these are comments....

Above Script is made by me - here is it with a little more detailed howto ->

@InhexSTER: can i join the unknowndev-team? can help a lot more ;)

July 2, 2009 at 6:50 AM  
Anonymous Anonymous said...

i would say: CopyNPaste DOES NOT WORK - the while cant enter line by line - !!!!!!!you have to follow my howto to use this script!!!!!!! ->

July 2, 2009 at 6:53 AM  
Blogger InhexSTER said...

@WHiTY thanks..Also copy paste worked for me fine :)

Alright so we made a progress by discovering that iBSS and iBoot get saved in tmp (now we have script to get)
We are on stage of making patch for iBoot so we can upload our custom image and while booting up it should automatically execute command to jailbreak.

July 2, 2009 at 7:00 AM  
Anonymous Anonymous said...

@InhexSTER: Cool, when it works this way its alright ;)

how far away are your from a own working jailbreak? What things need to be done? May i can help writing a prog/script whatever which does half the whole jailbreaking job (that what can be automated) ?

Greetz (IRC??)

July 2, 2009 at 7:17 AM  
Blogger InhexSTER said...

Once we figure out were to patch iBoot
it would be nice to make process automated for regular user

July 2, 2009 at 7:30 AM  
Anonymous Anonymous said...

So Can you gave me a irc chan or something more private than this comment posts ;) ill help you guys out then as best as i can. will code für MacOS and will even try to do so for windows (secondary) but i need to talk more deeply with you...(write mail codelab23@googlemail com)

July 2, 2009 at 7:37 AM  
Blogger the chef said...

keep up the good work.

July 2, 2009 at 8:00 AM  
Blogger DBDtheAbyss said...

@ The Chef

I'm not masta dev... -.-

DBDtheAbyss is my mortal kombat vs Dc screen name.

July 2, 2009 at 10:21 AM  
Blogger Nikos said...

hello at all i have a problem i wanted to get the ibss and the ibec files but my phone 3gs wont restore it shows me only the apple and a progress bar that dont moves this for an half hour and the itunes it shows .. prepare for a restore and this is in the dfu and in the normal restore mode... what can i do? sorry for my bad english

July 2, 2009 at 10:59 AM  
Blogger the chef said...

@DbD I'm just posting what I found u Goda admit
when u lie in a post Its no good for cred.Hope anyone comes up with a jb soon so this soap will be over I dont know you There was a accuation so people investgate.thats what happens i posted my findings thats all.No hard feelngs but whats on the record is on the record.Good luck and don't let this distract u then.

July 2, 2009 at 11:00 AM  
Blogger Nikos said...

and now it itunes show my a 1602 fail

July 2, 2009 at 11:01 AM  
Blogger DBDtheAbyss said...

Dude was ment to stimulate conversation and was actually ment to be haha funny but people took me seriously... Also with out the joke unknowndev wouldn't exist and you wouldn't have a jailbreak in development... I'm actually legit and for days I have stayed up late patching and testing and revising again and again and again until I fall asleep at the keyboard I'm devoted and really am trying hard to make this work... So just stop with this crap about me being a retard oops I mean masta dev -.-

July 2, 2009 at 11:06 AM  
Blogger the chef said...

donload thuis tool for windows to get both might crash after it get the file but worked for me
put phone in duf (black screen)not usb screen.

good luck

July 2, 2009 at 11:08 AM  
Blogger DBDtheAbyss said...

He's fake...

July 2, 2009 at 11:10 AM  
Blogger the chef said...


July 2, 2009 at 11:13 AM  
Blogger Nikos said...

thanks i have done it .. have the files... but it didnt want to restore ... now i have removed itunes and its restoring now.. i dont know why.. but thanks at all...

guys u make a very good job...

If u make a jailbreak i want to test it if ur team want....

July 2, 2009 at 11:15 AM  
Blogger DBDtheAbyss said...

Difrnt lies about his tool "jailbird"

July 2, 2009 at 11:18 AM  
Blogger the chef said...

pot calling kettle?
just kidding

July 2, 2009 at 11:24 AM  
Blogger the chef said...

guess I'm not in the running for beta testing

July 2, 2009 at 11:25 AM  
Blogger DBDtheAbyss said...

You could be but we have not had success yet nor have we created a tool :/

July 2, 2009 at 11:27 AM  
Blogger Alain said...


Is it possible to make a overall point about what you did, and how we could help !
Indeed, I managed to get the IBSS, ibec, and the ECID with purplera1n site.

And nows, what to do ?
Are we far from the goal ?
How could I help you ?


July 2, 2009 at 11:30 AM  
Blogger Nikos said...


i'm very intressted =)

i say what im everytime saying

good job guys

July 2, 2009 at 12:27 PM  
Blogger Nikos said...

i found this on the i-net does it helps`?

July 2, 2009 at 12:41 PM  
Blogger DarkIQ said...

DBDtheAbyss: dude, seriously? I don't believe difrnt to be fake. He was one of the people involved with winpwn, and from what I hear, he does have some skills.

July 2, 2009 at 1:30 PM  
Blogger the chef said...

question the IBSS and the ibec are written and checked by itunes when restoring.If you can replace these files in temp with your own then canyou install custom fimware.?

July 2, 2009 at 1:42 PM  
Anonymous Anonymous said...

Just wondering: Once you guys get the jailbreak working, we can just simply install ultrasn0w through Cydia and the 3GS is UNLOCKED and jailbroken? Thanks!

July 2, 2009 at 2:06 PM  
Blogger InhexSTER said...

Also i was looking on DMG files, they also have HSHS section...might need to be signed

July 2, 2009 at 5:26 PM  
Blogger Hans said...

Tbh, i appreciate your efforts, but if chronicdevteam twitters that you're not gonna make it, you're not gonna make it, simple as that.

I'd bet money that the first JB will be posted either on GHs Blog or the Dev Teams Blog - and prolly the unknown devs will never rls any JB...

July 2, 2009 at 5:51 PM  
Blogger DBDtheAbyss said...

Chronic is not god and I'll prove him wrong cause I haven't been busting my ass for this to be shut down by mr self rightous himself to walk in here and say NO...

July 2, 2009 at 7:18 PM  
Blogger DBDtheAbyss said...

Arthur send me the files please?

July 2, 2009 at 7:20 PM  
Blogger InhexSTER said...

Any luck with iBoot?
i figured out why my image failed at early stage
it need asr imagscan done..
but now it fails like at 50%
Erasing target device /dev/disk0s1...done
Retrieving scan information...done
Validating sizes...done
Restoring ....10....20....30....40....50....60....70....80....90...asr: Image failed signature verification

asr: Failed to read the stream: Authentication error
Could not restore - Authentication error

You need iBoot right?

July 2, 2009 at 7:22 PM  
Blogger DBDtheAbyss said...

i need all your adapted files to 1)double check 2)correct any error. 3) used for future referance 4) apply RSA sigs and permissions :)

July 2, 2009 at 7:32 PM  
Blogger DBDtheAbyss said...

excuse my crappy grammer :/

July 2, 2009 at 7:32 PM  
Blogger InhexSTER said...

Alright sent you iBoot which i got from resote tmp folder

July 2, 2009 at 7:33 PM  
Blogger InhexSTER said...

realistically you only need iBoot..because only files that are modified needs to be signed..and iBSS too..but it doesnt need to be modified

July 2, 2009 at 7:35 PM  
Blogger InhexSTER said...

Pretty much everything else in Firware folder will get signed by Apple...only iBoot if its modified wont...

July 2, 2009 at 7:36 PM  
Blogger InhexSTER said...

So apply patch to iBoot and I will try it out

July 2, 2009 at 7:37 PM  
Blogger JoeRay said...

don't give up man. Your doing a good job and I appreciate what your doing. The dev-team has pissed me off by their decision of stalling and teasing us with pictures and info.

July 2, 2009 at 7:39 PM  
Blogger DBDtheAbyss said...

i didnt get an iBoot and also what patch??? i only have ECID and rsa sigs...

July 2, 2009 at 7:39 PM  
Blogger InhexSTER said...

yeah i mean rsa and permissions..apply that...sent it again

July 2, 2009 at 7:44 PM  
Blogger DBDtheAbyss said...

just did... :)

July 2, 2009 at 7:46 PM  
Blogger InhexSTER said...

pretty much rsa sigcheck = asr sigcheck
just where my custom image fails
on Signature checking with asr..:) so asr and permission should fix it

July 2, 2009 at 7:47 PM  
Blogger JoeRay said...

Hey, sounds like good progress. How long do you think it will be before you guys reach your goal?

July 2, 2009 at 7:47 PM  
Blogger DBDtheAbyss said...

lol i already had a signed iBoot and i just put rsa sigs and permissions :)

July 2, 2009 at 7:47 PM  
Blogger DBDtheAbyss said...


though we wish it would be light speed fast it will take time (of course not like the iPhone Dev team but hey thats their choice.) and we are also making a UI which i hate making(cause i suck at it!) so thats up to the artsy people :P

July 2, 2009 at 7:50 PM  
Blogger DBDtheAbyss said...

so arthur hows it working ? :D?

July 2, 2009 at 7:51 PM  
Blogger InhexSTER said...

eror 3005 on iBoot i think, also is my ecid in there or urs?

July 2, 2009 at 7:56 PM  
Blogger DBDtheAbyss said...

i adapted it to yours.... but ill check... how far into the restore did it go?

July 2, 2009 at 7:57 PM  
Blogger InhexSTER said...

it failed instantly..

July 2, 2009 at 7:58 PM  
Blogger DBDtheAbyss said...

ok hold on :/

July 2, 2009 at 7:59 PM  
Blogger JoeRay said...


What are you coding the program in? Both windows and mac? If you need any images for the UI, I can create some art in photoshop. Also, if you need a good website or nicer looking blog for your project let me know I make websites.

July 2, 2009 at 8:02 PM  
Blogger InhexSTER said...

you modified the one i just sent you now old one right?

July 2, 2009 at 8:02 PM  
Blogger InhexSTER said...

@JoeRay It will be tethered jailbreak (like kind of manual)Right now no tool

But later on it might be usefull

July 2, 2009 at 8:03 PM  
Blogger DBDtheAbyss said...

it was the old one but i have your ECID

July 2, 2009 at 8:04 PM  
Blogger InhexSTER said...

yeah you modified wrong one...i sent you one that i got from tmp folder while restoring with apple cert and ecid

July 2, 2009 at 8:06 PM  
Blogger InhexSTER said...

it already contains my ecid...i checked it works not modify new onew..i am waiting..i have good feeling about this..if you patched it right for permissions and sig checks it shoud work

July 2, 2009 at 8:07 PM  
Blogger JoeRay said...

hey a jailbreak is a jailbreak. Will I able to do the tethered jailbreak in windows?

July 2, 2009 at 8:08 PM  
Blogger DBDtheAbyss said...

the file doesnt show up in my email browser >:o

July 2, 2009 at 8:15 PM  
Blogger InhexSTER said...

This comment has been removed by the author.

July 2, 2009 at 8:18 PM  
Blogger InhexSTER said...

This comment has been removed by the author.

July 2, 2009 at 8:19 PM  
Blogger InhexSTER said...

alright now it there :)

July 2, 2009 at 8:20 PM  
Blogger DBDtheAbyss said...

k i patched and sent have fun :)

July 2, 2009 at 8:32 PM  
Blogger DBDtheAbyss said...


the sword :o

July 2, 2009 at 8:37 PM  
Blogger DBDtheAbyss said...

vampire :o

July 2, 2009 at 8:39 PM  
Blogger DBDtheAbyss said...

oh poop... i re-inseted your ECID cert! shiznick ill fix that ...

July 2, 2009 at 8:40 PM  
Blogger DBDtheAbyss said...


July 2, 2009 at 8:41 PM  
Blogger DarkIQ said...

DBDtheAbyss : I still have all the graphix and vb stuff I made for Venom, your welcome to it :P

July 2, 2009 at 8:48 PM  
Blogger InhexSTER said...

yeah still error 3005
right after when it says verifying with apple

July 2, 2009 at 8:53 PM  
Blogger DBDtheAbyss said...

you mean the final stage "verifying firmware"?

July 2, 2009 at 8:54 PM  
Blogger DBDtheAbyss said...

darkiq i really dont know who you are and what the hell is venom???!?

July 2, 2009 at 8:55 PM  
Blogger InhexSTER said...

also it can be because of not properly patched rsa sig checks...that would be did you figure out where to apply them?
like i still can not see any sense in geghot post on it..

July 2, 2009 at 8:55 PM  
Blogger InhexSTER said...

no..when is starts the bar is veryfies iboot with apple...and luck

July 2, 2009 at 8:56 PM  
Anonymous Anonymous said...

This comment has been removed by a blog administrator.

July 2, 2009 at 9:06 PM  
Blogger InhexSTER said...

alright i am going to sleep and i will be availible tomorrow around this hope u will fix it up

July 2, 2009 at 9:08 PM  
Blogger DBDtheAbyss said...

venom who the hell are you?

July 2, 2009 at 9:08 PM  
Blogger DBDtheAbyss said...

i dont want people posting these dammed lies about me being that guy i am NOT him!

July 2, 2009 at 9:09 PM  
Blogger Dheeraj said...

dev team just posted a video of 3GS jailbreak + unlock

July 2, 2009 at 10:13 PM  
Blogger DarkIQ said...

DBDtheAbyss: Just admit it, your mastadev, don't make me tell zenrock about this blog :O

July 2, 2009 at 10:18 PM  
Blogger DBDtheAbyss said...

Darkiq who are you????!!?? Who's zenrock and why do you want me?!???!? -.-

July 2, 2009 at 10:37 PM  
Blogger DBDtheAbyss said...

And I'm not going to tell lie just to satisfy you! I don't even know who you are!!!

July 2, 2009 at 10:42 PM  
Blogger JoeRay said... could that be DarkIQ?

July 2, 2009 at 11:00 PM  
Blogger cOoL RaLpH said...

everybody whos not the team STFU so they can get to work :0)

July 2, 2009 at 11:16 PM  
Blogger JoeRay said...

you STFU. They've ceased work for the day, can't you say there isn't any activity?

July 2, 2009 at 11:21 PM  
Blogger Sherif_hashim said...


July 2, 2009 at 11:46 PM  
Blogger Sherif_hashim said...


July 2, 2009 at 11:49 PM  
Blogger Maximilian said...

well sherif, that helps much if they do not tell us how it works..

July 2, 2009 at 11:52 PM  
Blogger Sherif_hashim said...

@Maximilian review the blog, u ll see a post by me there where planetbeing is explaining why they didn't release it to public yet, he does that one manually and took him 10 hours to finish jailbreaking the phone in the demo, so wait till they put down a handy app like redsn0w or qwkpwn for you to do it in 10 minutes, and plz don't call me jerk, i m trying to help

July 3, 2009 at 12:12 AM  
Blogger Oth3lo said...

3GS jailbreak has been released by Geohot !

July 3, 2009 at 3:08 AM  
Blogger InhexSTER said...

Today is purplera1ny day
GeoHot is great guy and he release a tool (windows only)
You will need restored iphone 3GS to 3.0 firmeware
make sure you are on 32 bit windows
restart phone in recovery mode (itunes logo)
click make in rain
wait for reboot
click Freeze (white icon ) on home screen
it will download and install cydia
i think u can get read of freeze app by ssh
and deleting it

July 3, 2009 at 3:43 AM  
Blogger Sherif_hashim said...


July 3, 2009 at 10:15 AM  
Blogger Denio said...

Ha, now I'm last (101)

July 3, 2009 at 7:30 PM  
Anonymous Anonymous said...

No... I'm last :P

July 3, 2009 at 9:24 PM  
Blogger DarkIQ said...

@DBDtheAbyss: I know your mastadev, just pick a handle and stick with it :) You go through nicks like most people go through toilet papper :o

@JoeRay: You could be on to something there :)

@Everyone Else: I admit I love having fun with DBDtheAbyss, only because I know who he is, but these guy's didn't know much about hacking the iPhone, but that didn't stop them from trying, im sure they all learned more about the iPhone then they ever wanted to. You shouldn't bash them for trying, I think it's great that you all put so much effort into it, even DBDtheAbyss :) (kidding). So instead of ripping into them, tell them thanks for trying. At the very least they certainly made things more interesting :)

July 4, 2009 at 10:14 AM  
Blogger DBDtheAbyss said...

-.- we worked hard man and now it's all been flushed ... But hey it's good for the community :P

July 6, 2009 at 5:17 PM  
Blogger DarkIQ said...

DBDtheAbyss: It was great for the community, you definately made it exciting again, mad props for all your efforts.

July 7, 2009 at 4:15 PM  
Anonymous Anonymous said...

I say you guys try to crack the new baseband in 3.1 :)

July 12, 2009 at 3:07 PM  
Blogger Chronic Productions said...


That will never happen :)

July 14, 2009 at 10:31 PM  

Post a Comment

Subscribe to Post Comments [Atom]

<< Home