Your favorite Apple, iPhone, iPad, iOS, Jailbreak, and Cydia site.
Generalforums, a part of the
Jailbreak / Downgrading / Upgradingsection;
thanx for share. good job....
05-25-2011, 04:45 AM #21
thanx for share. good job.
05-25-2011, 05:42 AM #22
You're almost there. Hard to say where the issue is, could be your ssh client, the initial hash alogorithm, firewall, or ? Try a different ssh client and be sure to give it adequate time to generate the hash host encryption code.
05-25-2011, 01:59 PM #23
i tried the other way with irecovery -f and all i get is the following
irecovery -f 038-0900-005.dmg.ssh
iRecovery - Recovery Utility
by wEsTbAeR-- and Tom3q
Found iPhone/iPod in Recovery mode
Loaded image file (len: 0x32008c4, packets: 25602, last: 0xc4).
Sending 0x32008c4 bytes
Sending 0x800 bytes in packet 0... OK
Error receiving status!
Sending 0x800 bytes in packet 1... OK
Error receiving status!
Sending 0x800 bytes in packet 2... OK
Error receiving status!
Sending 0x800 bytes in packet 3... OK
Error receiving status!
Sending 0x800 bytes in packet 4... OK
Getting more frustrated as I dont want to restore my iphone
I will try everything on a mac this time and see what happens.
06-17-2011, 03:18 AM #24
06-18-2011, 03:08 AM #25
There is one portion of the NAND, however; that is not user-writable (the SCFG, or System ConFiGuration--contains device-unique info such as serial number, UDID, et cetera). Only way you're wiping that is with a hammer and some hydrofluoric acid (or Apple factory-only tools).
The Following User Says Thank You to Orby For This Useful Post:
06-18-2011, 06:42 AM #26
thanks for your quick reply :-)
just feeling hopeless with my idevice
3gs - restore needed - restart loops each few seconds?
:-(( dats why im asking :-)
Last edited by Lord_Jimmy; 06-18-2011 at 06:55 AM.
06-23-2011, 04:16 AM #27
I am trying to follow steps to get access to my iphone 4, but failed on step 6 and 7. I downloaded iOS 4.2.1 from apple, and step 6 finished without error. But, my iphone 4 didn't show Apple logo. Only white blank screen shows up. I ran step 7, but the following message comes up and itunnel_mux.exe just got stuck there.
DData\download\Iphone_recovery\New folder>itunnel_mux.exe --lport 22
[ERROR] locate_AMRecoveryModeDeviceSendFileToDevice: Could not locate marker string!
[INFO] Waiting for new TCP connection on port 22
Could you guys give any advice on this? Should I try with different iOS?
Btw, I couldn't run 'ls' from ssh now. I couldn't find it from /mnt1/bin and /usr/bin as well. Do you know where it is?
@I)estym: 3.x and 4.x use devicetree files that aren't interchangeable. You need to use tetheredboot tool to get into a 'pwned' DFU mode (it does that when ran without arguments), then proceed with itunnel_mux thingie to load ibss, devicetree, ramdisk and kernelcache. Linkie here: Downloads - iphonetunnel-usbmuxconnectbyport - USB mux TCP tunneling and basic iRecovery functionality without libUSB - Google Project Hosting
Last edited by lockelee; 06-23-2011 at 05:10 AM.
06-23-2011, 06:03 AM #28
I finally get access to my iPhone 4, but couldn't see any photo from /mnt2/mobile/Media/Photos. I am wondering iOS4 has feature like encryption hiding photo files Or what I am seeing is real. Could anyone confirm /mnt2/mobile/Media/Photos should contain and show any photo file if there is?
08-13-2011, 03:41 PM #29
I'm sorry I'm kind of a n00b, who over the course of a weekend did not sync his iphone and had a friend of play with his iphone in the middle of a Cydia update. Now I'm stuck with the same problem as many with an iphone stuck on apple logo for a very very long time, and sometimes after rebooting it sticks to the apple logo then reboots after a couple of minutes, only to be stuck again on the apple logo. irecovery, iREB are not kicking it out of recovery, and I cannot access SSH with or without iphone tunnel suite.
I'm trying your solution, thank you very much for the time you put in writing it.
I have an iphone 4 fw4.2.1 bb1.59.00. After building a custom 4.2.1 with sn0wbreeze and unpacking it (iPhone3,1_4.2.1_8C148_Restore.ipsw), I was able to copy:
but i could not find : "Restore Ramdisk 038-0082-001.dmg"
Also, I have two files, one is "038-0019-002.dmg" (580mb) and the other is "038-0032-002.dmg" (16.6mb), which one is the ramdisk?
Thank you for any help!
08-13-2011, 05:35 PM #30
nevermind my post, I went here Jasper 8C148 (iPhone 4) - The iPhone Wiki and figured out that for 4.2.1 it was:
Restore Ramdisk (038-0032-002.dmg)
Key: 06849aead2e9a6ca8a82c3929bad5c2368942e3681a3d57517 20d2aacf0694c0
Thanks again for this amazing tutorial...I'm currently on the white screen step, just got into SSH with the alpine password in cygwin... thank you so much!!!
Now time to figure out the disk mounting etc.. to access my data
08-13-2011, 05:39 PM #31
Congratulations . If the filesystem is good, mounting should be easy.
08-16-2011, 03:25 AM #32
Thanks for your reply. I m still stuck at the mounting. When i try to mounteither drive (sys or data; mnt1 or mnt2), i can see folders in the respective mnt1 or 2, but no data inside. Did i do something wrong? Is there a fix i missed?
Ps: the congratulations should go for the very very well detailed post! It's much more clearer for a noob like me to follow than msftguy's one, which i m sure is great, but for me was like a foreign language!
08-16-2011, 08:49 AM #33
These commands are necessary to mount the two filesystems (also in 1st post):
to mount / (root) filesystem (contains system settings & files, MobileSubstrate dylibs)
-sh-4.0# fsck_hfs /dev/disk0s1
-sh-4.0# mount_hfs /dev/disk0s1 /mnt1/
to mount /usr filesystem (everything else, IE: music, media, photos, apps, etc)
-sh-4.0# fsck_hfs /dev/disk0s2s1
-sh-4.0# mount_hfs /dev/disk0s2s1 /mnt2/
To set the path correctly so you can easily navigate the filesystem:
This is not 'guaranteed' to work. If the commands execute successfully and nothing appears, then it's likely the file system is corrupt or deleted and nothing can be saved.
09-04-2011, 11:37 AM #34Ramdiskbuilder crash for windows
Hi, my ramdisk builder under windows for 3GS 4.1 crashes. I do not have access to a MAC, how can I get it to work? I followed all the steps, but as soon as I start to build ramdisk it crashes. Please I need some help, I want retrieve my pics from 3GS very valuable.
09-04-2011, 01:05 PM #35
It was a long experimental & investigative process creating the procedure for iOS 4.2.1 on Windows.
There are changes necessary when applied to 4.1. Did you create a custom firmware, unzip, and
copy the correct files?
09-04-2011, 01:14 PM #36
09-04-2011, 01:20 PM #37
Did you download ramdiskbuilder from the post links and use the correct decrypting keys?
Are you running with administrator privileges and have read/write access to everything?
Ramdiskbuilder works fine on 4.1. Just re-checked the links and the procedure for iOS 4.1
Last edited by Mes; 09-04-2011 at 01:33 PM.
09-04-2011, 01:41 PM #38
Last edited by krod13; 09-04-2011 at 01:49 PM.
09-04-2011, 01:51 PM #39
I just tested the procedure on my 3GS w/4.1 on Windows 7 without problems.
Key: 581f739963fc3fdbf70dfc695b35d43662a0069b501cb71526 4c32428e759cba
RamdiskBuild created 018-7080-079.dmg.ssh
Maybe the custom firmware is not really custom or it did not extract successfully ???
Sorry, I don't know how to advise you further.
09-04-2011, 02:31 PM #40