[GUIDE] Jailbreaking 1.1.2 (Windows)

[Sidetalker]

Don't forget the Thanks button if I helped you!

UDPATE (1-3-08): Hi guys! I'm back from Honduras and today is my birthday! I'm glad that this thread hasn't left its long standing position on the first page! Also I hope you will all be happy to know that post-1.1.3, a jailbreak guide by your truly will be available ASAP! Also please let me know if you want any changes to the guide (improvements, error fixes, etc). And finally, if people want to download the guide to view offline or print I will make that possible! (Just let me know if you want it and the first person to ask will make it happen)

iDemocracy 2.0 RELEASED!

Download iDemocracy 2.0 here
Download necessary .NET Framework 3.0 here

For those of you that don't know, iDemocracy pretty much automates everything this guide outlines. So unless you are really interested in messing around and doing things yourself...use iDemocracy

This guide is for Windows users who have a iPhone (any Firmware version including Out of Box) and want to upgrade it to 1.1.2 and jailbreak it. This guide requires you to have an original SIM card (the one that came with your iPhone) and includes no instructions on unlocking.

I have also made this guide extremely spelled out, however, if something is unclear to you, let me know in the comments and I will revise it!

I take no responsibility for you messing up your iPhone while using my guide...etc.

Oh yeah one last thing before we start. The thanks button makes people feel good

For Starters:

*Note*
You may not need all of these files depending on what Firmware version you have. You can either download them all or download them as I tell you they are necessary throughout the tutorial
*Note*

Warning: You need WiFi for all tutorials!

Download 1.1.2 Firmware here
Download 1.1.1 Firmware here
Download 1.0.2 Firmware here
Download 1.0.2 Baseband Downgrade Pack here
Download 1.1.2 Jailbreak Pack here
Download iBrickr here

BEFORE DOING ANYTHING. SYNC WITH ITUNES!!!

Is this the guide for you? (THIS GUIDE INCLUDES NO INSTRUCTIONS ON UNLOCKING)

- If you have a Firmware 1.1.1 (or below) activated iPhone
- Follow the first Guide (It's right under this blue text )

- You have a Firmware 1.1.2 activated iPhone without OktoPrep (not Out of Box)
- Follow the second Guide (hit ctrl - F and type in "scndz")

- You have a Firmware 1.1.2 activated iPhone with OktoPrep
- Follow the third Guide (hit ctrl - F and type in "thrdd")

- You have a Firmware 1.1.2 activated iPhone Out of Box
- Follow the fourth Guide (hit ctrl - F and type in "frth")

- You are Troubleshooting...
- Look in the Troublshooting Guide (hit ctrl - F and type in "trblz")

The Process (1.1.1 or below):

Step 1: If you are on this step, you have iPhone firmware version 1.0.2 or below and it has been activated through iTunes (skip to the next step if you are already on 1.1.1). Open iTunes and connect your iPhone. Shift-click the "Update" button in iTunes under the iPhone tab and navigate to your 1.1.1 Firmware (download here). Allow your iPhone to complete the update to 1.1.1. Restore your iPhone to the latest restore file through iTunes. Don't worry about syncing songs, pictures, movies, etc. yet.

Step 2: If you are on this step, you have iPhone firmware version 1.1.1 and it has been activated through iTunes. Restore your iPhone to Firmware 1.1.1 by shift-clicking on "Restore" in iTunes and navigating to your 1.1.1 Firmware (download here). Allow iTunes to complete the restore and activate your iPhone before proceeding to the next step. Visit www.jailbreakme.com URL on your iPhone. Click "Install AppSnapp". Your iPhone will navigate to another page and briefly show a blue square in the upper corner before Safari crashes. At this point a status HUD should pop-up and display the status of the jailbreak. If you do not see this status HUD, go back to www.jailbreakme.com and try it again. After a successful jailbreak, your iPhone will soft-restart and you will see Installer.app on your homescreen. At this point I find it's best to do a manual restart (hold the power button until the "slide to power off" slider appears. Slide it off, then hold the power button until the iPhone starts back up). This step is optional though.

Step 3: If you are on this step, you have a jailbroken (if you have Installer.app, you are jailbroken) iPhone running 1.1.1 firmware. Click on Installer on you iPhone homescreen and allow it to check and refresh your sources. If necessary, update Installer (you will see an Installer update in the update tab in Installer if this is necessary). Under the Install tab, navigate to Tweaks (1.1.1) > OktoPrep and download OktoPrep. After the download, click the home button and allow the iPhone to soft-restart. Back in iTunes, shift-click on "Upgrade" (NOT RESTORE!) and navigate to your 1.1.2 Firmware (download here). If iTunes is already prompting you to upgrade to 1.1.2 it is not necessary to shift-click...simply click "Upgrade" and allow your iPhone to be upgraded (NOTE: if you do this, iTunes will automatically download the firmware taking around 5 mins at broadband speeds). Activate your iPhone through iTunes.

Step 4: If you are on this step, you have an activated iPhone running firmware 1.1.2 and had installed OktoPrep on 1.1.1 before upgrading. Close out of iTunes. Unzip and open the folder containing the 1.1.2 Jailbreak (download here). Double-click on windows.bat and hit enter when Command Prompt pops up. A Java window will pop up (I would suggest to check "Install SSH" but that's up to you). Click Jailbreak! A progress bar will pop up and Command Prompt will start displaying code. Let the program run (it should take under 10 minutes). After it's finished it will say "Done! Reboot your device (it will automatically reboot once after you do so)". And wala! JAILBROKEN

The Process (1.1.2 without OktoPrep NOT Out of Box): scndz

Step 1: If you are on this step, you have iPhone firmware 1.1.2 and did not install OktoPrep when on 1.1.1. You will need all of the downloads provided above, please download them now. Enter recovery mode on your iPhone by holding the power and home buttons until the "connect to iTunes" picture appears. Once iTunes recognizes your iPhone, shift-click on "Restore" and navigate to your 1.1.1 Firmware. Allow iTunes to downgrade your 1.1.2 firmware to 1.1.1. When finished iTunes should give you error #1015.

IF YOU HAVE VISTA! and you experience troubles with iBrickr... On Windows Vista iBrickr will only work after a restart and it will only work once. Restart your computer and open iBrickr and you should be good to go. However, if you close out of iBrickr, you will need to restart again.

Step 2: If you are on this step, you downgraded your iPhone to 1.1.1 and got error #1015. Open iBrickr and it should give you the option to boot the phone or to "Begin Downgrade to Firmware 1.0.2". Click on Begin Downgrade to Firmware 1.0.2 and follow the instructions provided (instead of going to the iBrickr folder for 1.0.2.ipsw, go to where you manually downloaded the firmware). After following iBrickr's instructions, activate your 1.0.2 iPhone with iTunes.

Step 3: If you are on this step you have an activated iPhone running firmware 1.0.2. Open iBrickr and click "Free My Phone!". If your iPhone is in recovery mode after the jailbreak close and open iBrickr... when iBrickr sees your iPhone in restore mode, click "Boot phone now" and allow your phone to boot. After your iPhone is "freed" (jailbroken) click on Applications and Install PXL using iBrickr's instructions and install BSD Subsystem and OpenSSH (in that order).

Step 4: If you are on this step you have an activated iPhone running firmware 1.0.2 with OpenSSH installed. Open winscp405.exe (referred to as WinSCP from now on and found in the 1.1.2 Baseband Downgrade Pack). For Host Name: Enter your current wifi IP address on my iPhone (check this by going to Settings > Wi-Fi > and clicking the blue arrow next to your SSID), Port number: 22, User Name: root, Password: dottie, Private key file: Leave blank, file protocol: SCP. Hit Save... and save the profile as iPhone (Hit yes if it asks you if you're sure you want to save a password). Now double-click on your new iPhone profile and allow up to a minute for your Host Keys to be generated (click yes when it asks you if you want to allow the Host Keys to be generated).

Step 5: If you are on this step you have an activated iPhone running firmware 1.0.2 and should be attached to your iPhone through WinSCP. Navigate to the /usr/bin folder on your iPhone and drag and drop the following folders from the Downgrade Pack to the /usr/bin folder on the iPhone:

ICE03.14.08_G.eep
ICE03.14.08_G.fls
iEraser
bbupdater
secpack
secpack.bin

After the transfer completes, exit out of WinSCP.

Step 6: If you are on this step you have an activated iPhone running firmware 1.0.2 with extra files in the usr/bin directory. Double-click on Putty.exe and use the same settings and password you used in WinSCP to login. (NOTE: when you type in the password, nothing will appear. Just type normally and hit enter when you are done typing dottie and everything will be fine). Type in the following hitting enter after each line:

launchctl

unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist

exit (without this you will still be in launchctl and it will not recognize the command cd)

cd /usr/bin

chmod +x iEraser

chmod +x bbupdater

iEraser

bbupdater -v

The last command issued returned "baseband unresponsive to pinging". THIS IS GOOD! Now type in the following and hit enter:

bbupdater -f *.fls -e *.eep (the _'s are spaces: bbupdater_-f_*.fls_-e_*.eep)

After this process ends, backspace the text "PuTTy" that was left behind and issue this command:

bbupdater -v

This returns a slew of data which (roughly translated) means...SUCCESS!!!

NOTE: If you experience problems with Step 6 of the guide (the step you just did) try using this guide.

Step 7: f you are on this step you have an activated iPhone running firmware 1.0.2 and have flashed the baseband. Back in iTunes, shift-click "Update" and navigate to your 1.1.1 firmware. Allow iTunes to update your iPhone to firmware 1.1.1 and then activate your iPhone using iTunes.

Step 8: If you are on this step you have an activated iPhone running firmware 1.1.1. Visit www.jailbreakme.com URL on your iPhone. Click "Install AppSnapp". Your iPhone will navigate to another page and briefly show a blue square in the upper corner before Safari crashes. At this point a status HUD should pop-up and display the status of the jailbreak. If you do not see this status HUD, go back to www.jailbreakme.com and try it again. After a successful jailbreak, your iPhone will soft-restart and you will see Installer.app on your homescreen. At this point I find it's best to do a manual restart (hold the power button until the "slide to power off" slider appears. Slide it off, then hold the power button until the iPhone starts back up). This step is optional though.

If you want to stay at 1.1.1 for now, just stop here and enjoy your jailbroken 1.1.1

Step 9: If you are on this step, you have a jailbroken (if you have Installer.app, you are jailbroken) iPhone running 1.1.1 firmware. Click on Installer on you iPhone homescreen and allow it to check and refresh your sources. If necessary, update Installer (you will see an Installer update in the update tab in Installer if this is necessary). Under the Install tab, navigate to Tweaks (1.1.1) > OktoPrep and download OktoPrep. After the download, click the home button and allow the iPhone to soft-restart. Back in iTunes, shift-click on "Upgrade" (NOT RESTORE!) and navigate to your 1.1.2 Firmware (download here). If iTunes is already prompting you to upgrade to 1.1.2 it is not necessary to shift-click...simply click "Upgrade" and allow your iPhone to be upgraded (NOTE: if you do this, iTunes will automatically download the firmware taking around 5 mins at broadband speeds). Activate your iPhone through iTunes.

Step 10: If you are on this step, you have an activated iPhone running firmware 1.1.2 and had installed OktoPrep on 1.1.1 before upgrading. Close out of iTunes. Unzip and open the folder containing the 1.1.2 Jailbreak (download here). Double-click on windows.bat and hit enter when Command Prompt pops up. A Java window will pop up (I would suggest to check "Install SSH" but that's up to you). Click Jailbreak! A progress bar will pop up and Command Prompt will start displaying code. Let the program run (it should take under 10 minutes). After it's finished it will say "Done! Reboot your device (it will automatically reboot once after you do so)". And wala! JAILBROKEN

The Process (1.1.2 with OktoPrep): thrdd

Step 1: If you are on this step, you have an activated iPhone running firmware 1.1.2 and had installed OktoPrep on 1.1.1 before upgrading. Close out of iTunes. Unzip and open the folder containing the 1.1.2 Jailbreak (download here). Double-click on windows.bat and hit enter when Command Prompt pops up. A Java window will pop up (I would suggest to check "Install SSH" but that's up to you). Click Jailbreak! A progress bar will pop up and Command Prompt will start displaying code. Let the program run (it should take under 10 minutes). After it's finished it will say "Done! Reboot your device (it will automatically reboot once after you do so)". And wala! JAILBROKEN

The Process (1.1.2 Out of Box): frth

Step 1: If you are on this step you have an Out of Box iPhone with firmware 1.1.2. Enter recovery mode on your iPhone by holding the power and home buttons until the "connect to iTunes" picture appears. Once iTunes recognizes your iPhone, shift-click on "Restore" and navigate to your 1.1.1 Firmware (download here). Allow iTunes to downgrade your 1.1.2 firmware to 1.1.1. When finished iTunes should give you error #1015.

IF YOU HAVE VISTA! and you experience troubles with iBrickr... On Windows Vista iBrickr will only work after a restart and it will only work once. Restart your computer and open iBrickr and you should be good to go. However, if you close out of iBrickr, you will need to restart again.

Step 2: If you are on this step you have just downgraded your Out of Box iPhone to firmware 1.1.1 and gotten error #1015. Open iBrickr (download here). One of the options it will give you will say something similar to "reboot phone" (I haven't done this myself but I will as soon as I can and let people know). Click on "reboot phone" (or the similar command) and iBrickr will attempt to reboot your phone. Activate your iPhone through iTunes after it has booted up (at this point don't worry about having no service, it will come back when we upgrade to 1.1.2 again).

Note: Many people will experience trouble with rebooting the iPhone with iBrickr for various reasons... If you are one of those people hang tight, I will post an alternate method the second I have time.

Step 3: If you are on this step you have an activated iPhone running firmware 1.1.1. Visit www.jailbreakme.com URL on your iPhone (you need WiFi to do this as the Edge network won't be working). Click "Install AppSnapp". Your iPhone will navigate to another page and briefly show a blue square in the upper corner before Safari crashes. At this point a status HUD should pop-up and display the status of the jailbreak. If you do not see this status HUD, go back to www.jailbreakme.com and try it again. After a successful jailbreak, your iPhone will soft-restart and you will see Installer.app on your homescreen. At this point I find it's best to do a manual restart (hold the power button until the "slide to power off" slider appears. Slide it off, then hold the power button until the iPhone starts back up). This step is optional though.

Step 4: If you are on this step, you have a jailbroken (if you have Installer.app, you are jailbroken) iPhone running 1.1.1 firmware. Click on Installer on you iPhone homescreen and allow it to check and refresh your sources. If necessary, update Installer (you will see an Installer update in the update tab in Installer if this is necessary). Under the Install tab, navigate to Tweaks (1.1.1) > OktoPrep and download OktoPrep. After the download, click the home button and allow the iPhone to soft-restart. Back in iTunes, shift-click on "Upgrade" (NOT RESTORE!) and navigate to your 1.1.2 Firmware (download here). If iTunes is already prompting you to upgrade to 1.1.2 it is not necessary to shift-click...simply click "Upgrade" and allow your iPhone to be upgraded (NOTE: if you do this, iTunes will automatically download the firmware taking around 5 mins at broadband speeds).

Step 5: If you are on this step, you have an iPhone at the activation screen running firmware 1.1.2 and had installed OktoPrep on 1.1.1 before upgrading. Close out of iTunes. Unzip and open the folder containing the 1.1.2 Jailbreak (download here). Double-click on windows.bat and hit enter when Command Prompt pops up. A Java window will pop up (I would suggest to check "Install SSH" but that's up to you). Click Jailbreak! A progress bar will pop up and Command Prompt will start displaying code. Let the program run (it should take under 10 minutes). After it's finished it will say "Done! Reboot your device (it will automatically reboot once after you do so)". And wala! JAILBROKEN

Optional Step 6: If you are on an O2 contract (untested with PAYG) then use this for EDGE settings (Settings > General > Network > EDGE):

APN: mobile.o2.co.uk
username: faster
password: web

(thanks dilinator)

Troubleshooting: trblz

Tip #1: If you get this message:

at java.lang.thread.run <unknown Source>

when running the 1.1.2 Jailbreak, go here and get the latest updates for java!

Tip #2: Also if the 1.1.2 Jailbreak closes out right after opening go here and get the latest updates for java!

Past Updates:

UDPATE (11-13-07): Thanks so much for the interest in my guide! I will do my best to answer all of your questions and update this guide frequently as new information on the 1.1.2 firmware is unveiled! Thanks!!!

UDPATE (11-15-07): I have uploaded the 1.1.2 Baseband Downgrade Pack to SendSpace and updated the links. Anyone who was having trouble with RapidShare should be fine now!

UDPATE (11-16-07): Thanks again for the overwhelming interest in this guide! I have updated the guide to include Jailbreaking an Out of Box 1.1.2 iPhone!!! I have not tested this as I don't have an Out of Box 1.1.2 iPhone to test with but when you do PLEASE post your results or where things went wrong! (also a few other minor updates)

UDPATE (11-17-07): iDemocracy2 is available and this whole guide is pretty much useless

UDPATE (11-17-07): Uh-oh...some people are forgetting the thanks button!!! Comeon guys I worked my arse off on this guide

UDPATE (11-19-07): Thanks to seanobx a fix for the 1.1.2 Jailbreak problem that many people have been having has been discovered! If you get this message:

at java.lang.thread.run <unknown Source>

when running the 1.1.2 Jailbreak, go here and get the latest updates for java! Also added a troubleshooting section...

UDPATE (12-21-07): Hey everyone! I'm so happy to see the overwhelming response my guide has been getting since I posted it. I have been doing my best to answer everyones' questions and have even personally walked several people through the entire process. Unfortuantely, I won't be around the forums for the next week or so... CAUSE I'M GOING TO HONDURAS FOR CHRISTMAS!!! Yeah I know you're all jealous. The remote island/villa thing that we're staying on will almost certainly have no internet connection and there is no hope of cell reception. I'll be back January 3rd (my birthday) and active as can be on the forums! BYE!

[jrdan24]

Is this still only possible on intel only. I have windows AMG and from what I have heard it only works on macintel and windowsintel. Is that true?

Jordan

[Sidetalker]

Is this still only possible on intel only. I have windows AMG and from what I have heard it only works on macintel and windowsintel. Is that true?

Jordan

I don't know... sorry

If I were you I would give it a shot though :/

[owen243]

Requires AT&T Sim Card. For UK Iphones i take it we needa 02 Sim card Right ?

[Sidetalker]

Requires AT&T Sim Card. For UK Iphones i take it we needa 02 Sim card Right ?

Yeah sorry I should have put default SIM card...Just trying to make it clear that this is not a guide for unlocking. thanks for pointing that out ill change it!

[mysteria]

hi is there other links other than the rapidshare one?
coz it doesn't seems to be able to d/l

[Sidetalker]

hi is there other links other than the rapidshare one?
coz it doesn't seems to be able to d/l
Digg

ive tried several times to upload it to this site but it just wont work... ill email it to you if you reply back to me within 3 mins (im goin to sleep)

[aziatiklover]

already that was fast haha

[Sidetalker]

already that was fast haha

i do what i can

[mysteria]

sidetalker : my add is [email protected]

tks!!

[Sidetalker]

[email protected]

tks!!

wow you got lucky man that was my last refresh before goin up to bed! be sure to hit the thanks button

oh and usually its not wise to post your email on a public forum...use PMs next time

EDIT: Crap. yahoo's upload max is 10megs and the file is 14.4 mb...

heres a tut for rapidshare:

1. Click on the link
2. Click "Free" at the bottom right of the table near the bottom of the page
3. Sit and wait while looking at the countdown "Download ticket reserved. In 0.4 minutes your download will be ready."
4. When the time runs out, choose any download mirror, type in the 4 digit code, and hit download.
5. The download should automatically begin.

Your welcome

[rperalta]

Firmware 1.1.1 link does not work?

[Sidetalker]

Firmware 1.1.1 link does not work?

my apologies ill fix it immediately.

EDIT: Fixed.

[rperalta]

my apologies ill fix it immediately.

EDIT: Fixed.

Thanks Sidetalker!!!

[Sidetalker]

you bet! Bedtime for now everyone... I will answer any and all questions tommorow!

[Entropy248]

After jailbreaking 1.1.2, is it possible to use iBrickR, iPhoneBrowser, or another similiar program to upload files onto the iPhone? In other words, after "updating" the phone, do I need Wi-Fi to upload files?

[jaredb03]

I am unable to erase the baseband. when i use iEraser and then check it with bbupdater -v i still have the baseband. any ideas why it isn't working?

This is what i get:

# launchctl
launchd% unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
launchd% exit
# cd /usr/bin
# chmod +x iEraser
# chmod +x bbupdater
# iEraser
Resetting the Baseband...Done
Opened: /dev/tty.baseband
iEraser: tool by geohot
thanks to gray and the dev team for the implementation
thanks to nightwatch for the awesome toolchain
and thanks to anonymous, iProof, lazyc0der, and dinopio for the idea for this cool trick
this tool erases your main fw, starting at 0x20000. you need this for the testpoint to work
you need a file called secpack matching your current firmware version in this folder
see http://iphonejtag.blogspot.com for instructions on finding this file
Waiting for data...
Got Header: 77 0b cc
02 00 85 00 02 00 FF FF 85 02 03 00
SECPACK
02 00 04 02 06 00 01 00 00 00 00 00 0B 02 03 00
02 00 02 08 06 00 00 00 00 00 00 00 08 08 03 00

Erase
02 00 05 08 02 00 00 00 07 08 03 00
02 00 06 08 06 00 01 00 00 00 A0 00 AD 08 03 00
Hopefully the main flash was erased, wait for the next step...
# bbupdater -v
Resetting target...
pinging the baseband...
issuing +xgendata...
firmware: DEV_ICE_MODEM_04.02.13_G
eep version: EEP_VERSION:208
eep revision: EEP_REVISION:1
bootloader: BOOTLOADER_VERSION:4.6_M3S2
Done

[GordonChil]

I am unable to erase the baseband. when i use iEraser and then check it with bbupdater -v i still have the baseband. any ideas why it isn't working?

This is what i get:

# launchctl
launchd% unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
launchd% exit
# cd /usr/bin
# chmod +x iEraser
# chmod +x bbupdater
# iEraser
Resetting the Baseband...Done
Opened: /dev/tty.baseband
iEraser: tool by geohot
thanks to gray and the dev team for the implementation
thanks to nightwatch for the awesome toolchain
and thanks to anonymous, iProof, lazyc0der, and dinopio for the idea for this cool trick
this tool erases your main fw, starting at 0x20000. you need this for the testpoint to work
you need a file called secpack matching your current firmware version in this folder
see http://iphonejtag.blogspot.com for instructions on finding this file
Waiting for data...
Got Header: 77 0b cc
02 00 85 00 02 00 FF FF 85 02 03 00
SECPACK
02 00 04 02 06 00 01 00 00 00 00 00 0B 02 03 00
02 00 02 08 06 00 00 00 00 00 00 00 08 08 03 00

Erase
02 00 05 08 02 00 00 00 07 08 03 00
02 00 06 08 06 00 01 00 00 00 A0 00 AD 08 03 00
Hopefully the main flash was erased, wait for the next step...
# bbupdater -v
Resetting target...
pinging the baseband...
issuing +xgendata...
firmware: DEV_ICE_MODEM_04.02.13_G
eep version: EEP_VERSION:208
eep revision: EEP_REVISION:1
bootloader: BOOTLOADER_VERSION:4.6_M3S2
Done

I had a similar problem. I made a mistake by downloading a different baseband pack than the one that was included in this tutorial. Once I downloaded the correct pack and ran those steps which you mention, the baseband was deleted successfully. And then updated successfully with the next step.

May not be your problem, but thought I'd share.

[jaredb03]

No i for sure have the pack from this post. i downloaded it again and tried again with the same results just to make sure. Thanks though. Anything else to try?

[fekz]

Having a problem with the appsnap on jailbreakme.com. I click on install appsnap, safari simply crashes. No hud, no indication of installation. I've tried several times.