[jdys_1991]

Originally Posted by blkcadi

^lolz, just blew my whole day up. I wonder if this same path would work on a non-jailbroken phone. Huh, I'll have to do my homework.

You can do this on a non-jailbroken iPhone. However, you would have to create a custom RAM disk, upload and boot from it. This will give you temporary access to the full file system (and all the priveleges like on a proper jailbroken iphone) and could simply use a payload/script to automatically delete the file and reboot phone back to normal mode. This way the phone will stay un-jailbroken with the passcode removed.

The only thing is, I never was able to find a way to create, upload and/or boot a custom RAM disk with the current tools available. They are all outdated, so you would have to code your own tools for this to work.