
Write-up for alloc8 exploit can be found here:ĭownload iPhone 3GS iOS 4.3.5 IPSW from Apple: This tool can be used to downgrade or jailbreak iPhone 3GS (new bootrom) without SHSH blobs, as documented in JAILBREAK-GUIDE.

Pwned DFU Mode with SHAtter exploit for S5L8930 devices.ĭump SecureROM on S5L8920/S5L8922/S5L8930 devices.Įncrypt or decrypt hex data on a connected device in pwned DFU Mode using its GID or UID key. Pwned DFU Mode with limera1n exploit for S5L8920/S5L8922 devices. Pwned DFU Mode with steaks4uce exploit for S5L8720 devices. Jailbreak and downgrade iPhone 3GS (new bootrom) with alloc8 untethered bootrom exploit. ipwndfu -demote to demote device and enable JTAG. ipwndfu -decrypt-gid KEYBAG to decrypt a keybag. ipwndfu -dump-rom to get a dump of SecureROM. Repeat the process if it fails, it is not reliable. Hold buttons as needed to enter DFU Mode.įirst run. Use a cable to connect device to your Mac. Meant for researchers, this is not a jailbreak with Cydia yetĪllows dumping SecureROM, decrypting keybags for iOS firmware, and demoting device for JTAGĬurrent SoC support: s5l8947x, s5l8950x, s5l8955x, s5l8960x, t8002, t8004, t8010, t8011, t8015įuture SoC support: s5l8940x, s5l8942x, s5l8945x, s5l8747x, t7000, t7001, s7002, s8000, s8001, s8003, t8012įull jailbreak with Cydia on latest iOS version is possible, but requires additional work


Permanent unpatchable bootrom exploit for hundreds of millions of iOS devices * Read disclaimer before using this software. Open-source jailbreaking tool for many iOS devices
