• Your favorite

    Apple

    ,

    iPhone

    ,

    iPad

    ,

    iOS

    ,
    Jailbreak
    , and
    Cydia
    site.
  • How to Capture Your iPhone 3GS iBEC and iBSS on Mac
    This guide will help you to get some important iBEC and iBSS files for your iPhone 3GS which will be required for jailbreak once it is released.

    Things you Need:

    We recommned you to backup before following the steps.

    Follow the steps below to get the files:

    Step One:

    Click and Hold the Finder icon in the dock and select Go to Folder.. from the pop-up options.





    Step Two:

    Type "/Users/'your username'/Library/Caches/Cleanup At Startup" in the pop-up box and click the 'Go' button. (Remove '' part from 'your username'). This will open the 'Cleanup At Startup' folder in the Finder window. Leave this window open.





    Step Three:

    Create a new folder, 'MOST IMPORTANT FILES IN THE WORLD' in this example.



    Step Four:

    Open iTunes and connect your iPhone 3GS to the computer in DFU Mode. Select it from the list of devices in the left sidebar. Hold option and click Restore button. Navigate to the iPhone firmware you downloaded before, select it and click 'Open'.



    Your iPhone will now begin restoring to the 3.0 firmware. You will be warned that this will erase your phone. Click the 'Restore' button to continue.



    Step Five:

    When the restore is in progress check the "/Users/'your username'/Library/Caches/Cleanup At Startup" folder you opened before. A new folder will appear with a name similar to 'iPhone Temporary Files.noindex'. When the folder appears, select it, and press Command+c to copy it to the clipboard.



    Open the 'MOST IMPORTANT FILES IN THE WORLD' folder you made before and paste 'iPhone Temporary Files.noindex' there. This will make a copy of your unique iBEC and iBSS.



    Make sure you finish these steps before the restore is completed and you're done!

    All the credit for the technique goes to DevTeam

    P.S. Thanks to Melech518 for all the screenshots!

    UPDATE: If you have already obtained a USB Dump from Purplera1n.com, no need to follow the guide

    UPDATE 2: Seems that Purplera1n just gives iBSS so if you want iBEC as well (can't restore to totally stock 3.0 without it), follow this method as well.
    This article was originally published in forum thread: How to Capture Your iPhone 3GS iBEC and iBSS on Mac started by sayam View original post
    Comments 159 Comments
    1. eballesq's Avatar
      eballesq -
      Quote Originally Posted by swpelchat View Post
      This is great, but the process involves two restores rather than one like the Mac method described in this thread. Is there a way to do this on Windows only once?
    1. Melech518's Avatar
      Melech518 -
      Quote Originally Posted by realiti2000 View Post
      Hello,
      what I found a bit strange:

      At first I've tried the guide posted on the iPhone Dev Team blog (guide by iClarified). I succeeded in getting the iBEC. Getting iBSS was not so successful so I used the guide here.

      What's a bit strange:
      When you look at the file date (created / modified) for the iBEC I got using the iClarified guide then the date is today (at the time of the procedure).

      When you look at the file date for the iBEC / iBSS received via method mentioned here on modmyi then the date shows 21 of May 2009 for me.
      Could this be an issue? Are those files really the correct files signed by Apple?
      Quote Originally Posted by ameerkhan View Post
      i have one question, i did the process as "Melech518" and i got both of the files with me, but i just wanted to ask that the files that i have are Modified on "21st May" where as the screen shot that iClearified posted it shows that the file is Modified today (whenever they did the restore and got the files), are all my iPhone's iBEC and iBSS files the same whenever i do the restore or the ones we need for the JB should be modified as its shown there? thanks.
      Okay, It is not a coincidence we ALL have the May 21st creation date. But also dont forget, we did not create these files, these are the files apple put on the phones when they were created, when the software was written, when the iBSS and iBEC were assigned. I believe that with the iClarified method, the files you are taking off the phone are a copy of the "iPhone Temporary Files.noindex", hence being created whenever you do the restore. With the method I provided we are copying the actual files from the phone. If you noticed when doing the iClarified method, the files you are copying are all "shortcuts" to an original. I traced these shortcuts to the "iPhone Temporary Files.noindex" to find the originals more or less and came up with this method. I hope this made a little sense and cleared up some concerns.
    1. johnrs's Avatar
      johnrs -
      Just wanted to check that I have done this right.

      I have followed the guide on page 1 of this thread.

      I have a folder called "iPhone Temporary Files.noindex" & in there are 3 DMG files, BuildManifest.plist, Firmware Folder, Kernelcache.release and a restore.plist

      Do I need to do anything else?

      Thanks
    1. Melech518's Avatar
      Melech518 -
      Thats it!
    1. johnrs's Avatar
      johnrs -
      Cool. Thanks
    1. ameerkhan's Avatar
      ameerkhan -
      Cleared everything! thanks!
    1. lilskaterpunk's Avatar
      lilskaterpunk -
      Wicked! Im gonna have to try the Windows way (iClarified). Ill see how it goes...
    1. reeko's Avatar
      reeko -
      Quote Originally Posted by sayam View Post
      Reeko, both Geohot and DevTeam has made all the 'stuff' possible so please don't say that either one of them is lying as both deserves EQUAL respect though some believe either of the two is superior . . .
      Forget that long assed post. We would have no Dev team if it wasnt for GeoHots initial work. DevTeam are fame hungry whether you like them or not.

      I just hate how this makes the front page news whereas GeoHots purplera1n doesn't get a mention. And i hate how even the dev team say you don't need this if you have been to purplera1n.com. The only benefit is being able to stock restore to 3.0.

      Dev team havent even showed proof of their jailbreak yet on the 3GS, and they ALWAYS release pictures/ a video.
    1. A Retired Mod's Avatar
      A Retired Mod -
      I have all my files....Bring on the J/B tool!!
    1. ryan christopher's Avatar
      ryan christopher -
      Wonder if today is going to be a jailbreak kind of day
    1. bmp06gti's Avatar
      bmp06gti -
      omg hurry the **** up with the jail break already

      laaaaaaaaaaaaaaaaag
    1. ajmi982's Avatar
      ajmi982 -
      Hey everyone,

      Is there a guide to do this on windows? I got my ECID and created the file through PurpleRa1n but think it is best i follow the dev teams method and get BOTH files. As mentioned, they will end up implementing the files into the jailbreak.

      Thanks.
    1. Azzo's Avatar
      Azzo -
      Hi! I think this method does not work!!
      I compared both.. I think the files you get with this method are the same for everyone! They both have the same size like in the original firmware.
      After capturing them in the tmp folder they have a few more bytes..

      On Mac I just typed that in terminal before the dfu restore and I got both files: "while sleep 1; do cp -R /tmp/PersonalizedRestoreBundle.* ~/Desktop; done"

      All IMHO

      Bye Azzo
    1. billchase2's Avatar
      billchase2 -
      Thanks for the guide. I don't think I'll bother with it though until the jailbreak is released.
    1. Melech518's Avatar
      Melech518 -
      Quote Originally Posted by Azzo View Post
      Hi! I think this method does not work!!
      I compared both.. I think the files you get with this method are the same for everyone! They both have the same size like in the original firmware.
      After capturing them in the tmp folder they have a few more bytes..

      On Mac I just typed that in terminal before the dfu restore and I got both files: "while sleep 1; do cp -R /tmp/PersonalizedRestoreBundle.* ~/Desktop; done"

      All IMHO

      Bye Azzo
      Like I told you on the Dev Blog, these are ALL the same exact files whether you do it with the command line, the iClarified /tmp method, or the Cleanup At Startup method here. In the end you will get the same results. There is no wrong or right way to do this, it is very simple and each method works the same. Each way is unique in its simplicity and that alone.
    1. meagain's Avatar
      meagain -
      Quote Originally Posted by Melech518 View Post
      Then do this process for each phone
      Yes I know - But i have a 2 iPhone family here. I did husband's last night with this method and I need to do mine now. I'm referring to different file names, etc. to distinguish.

      Cleanup At Starup & iPhone Temporary Files.noindex would be the same names for my stuff on my Mac as his. So to keep our phones seperate in my iMac, I have to rename something but I think it won't work if I rename the files?
    1. HDClown's Avatar
      HDClown -
      The method posted in the first post of this thread will net get you the correct files. The IBSS and IBEC obtained in the "Cached At Logon" folder is the unsigned one that is inside the firmware bundle. That's why EVERYONE's has the same date.

      If you've read dev-team blog or twitter posts from dev-team members, you'll know that the IBSS is custom signed by apple, over the internet, when you do a restore, which means the modified date will be the same date/time you do your restore. This is why the ones people are grabbing from the Cached At Logon folder are wrong! Also, consider the fact that the dev-team blog is linking to iClarified's guide as their recommended steps.


      The only way to get your signed one is to get them from /tmp (Mac) or %temp% (PC) via method posted in iClarified or other methods. Grabbing the IBSS this way is HARD though, but it only shows up for about 3 seconds.

      If you are on a PC, diffrnt setup a grabber that watched all files going through the %temp% path and grabs the files for you. difrnt.com ECID Grabber & iBEC and iBSS Grabber

      If you are on a Mac, do the following:
      -open terminal
      -type: mkdir Pwnage_save
      -hit enter.
      -type: while [ 1 ]; do cp -R /tmp/* /Users/your_username/Pwnage_save/; done
      -Hit enter
      -Start a DFU mode restore

      Both IBEC and IBSS are made during DFU mode, but to be safe, I suggest you also use the above method during a REGULAR restore, which dumps IBEC only. I haven't run md5's against the IBEC's from the 2 different modes though. They may indeed be the same.

      If you look at MuscleNerd's twitter stream, he comments that it's important to get your IBEC and your IBSS. The ECID grab w/purplera1n gets you your signed IBSS (which you also get through the restore method from temp location), but not your IBEC. So you want to do these steps to get your IBEC as well.

      At the end of the day, better safe then sorry if you want to JB 3GS. Do every method that pops up IMO.
    1. eballesq's Avatar
      eballesq -
      Quick question for the experts -- I ran the "iBEC and iBSS Grabber" program and performed a DFU restore. The resulting files captured are named:

      iBEC.n88ap.RELEASE.dfu (103 KB)
      iBSS.n88ap.RELEASE.dfu (103 KB)

      Were my efforts successful?
    1. pcmartinez's Avatar
      pcmartinez -
      what about if you have 3.1 beta install already can you get the IBEC and IBSS.
    1. ugotpwned5's Avatar
      ugotpwned5 -
      Quote Originally Posted by eballesq View Post
      Quick question for the experts -- I ran the "iBEC and iBSS Grabber" program and performed a DFU restore. The resulting files captured are named:

      iBEC.n88ap.RELEASE.dfu (103 KB)
      iBSS.n88ap.RELEASE.dfu (103 KB)

      Were my efforts successful?
      Yes Buddy.