PwnageTool Jailbreaking iOS 4.3 Beta 1 on iPhone 4 Released !

If the unofficial version of PwnageTool didn’t work for you, alternatively, you can now give PwnageTool bundles a go for jailbreaking iOS 4.3 Beta on iPhone 4. However this kind of jailbreak is strictly limited to iOS developers only, and will require you to have a Mac, and you must also be enrolled in either iPhone Developer Standard or Enterprise Program.

PwnageTool 4.3 (1)
WARNING: The jailbreaking procedure is complex, and hence is meant for advanced users only. It will require you to make your own ramdisk because the latest official version of PwnageTool makes a broken one for iOS 4.3. Proceed at your own risk only. We are not to be held responsible if you end up bricking your iPhone.

  • Cydia is said to be working on iOS 4.3 Beta.
  • It is a semi-tethered jailbreak.
  • Your baseband will not be upgraded during restore process.
  • Use a utility like tetheredboot to boot into tethered mode. 
iOS 4.3 Cydia
This custom PwnageTool bundle can be downloaded from iPhone-Privacy here. You can use the instructions posted here to modify PwnageTool with this bundle to accept iOS 4.3 beta firmware, and then follow the instructions posted here to create iOS 4.3 custom firmware for iPhone 4.
Instructions for making your own ramdisk are posted below:
Tools needed: OS X, xpwntool
  • Unpack the original ramdisk: xpwntool orig_restore_rd.dmg restore_rd.dec.dmg -iv .. -k .. (use the keys from wiki)
  • Mount the ramdisk: hdiutil attach restore_rd.dec.dmg
  • Free up some space: rm /Volumes/ramdisk/(some unneeded large-ish file)
  • Patch asr: mv /Volumes/ramdisk/usr/sbin/asr /tmp/; bspatch /tmp/asr /Volumes/ramdisk/usr/sbin/asr (bundle_path)/asr.patch
  • Change the restore options: edit /Volumes/ramdisk/usr/local/share/restore/options.plist with Property List Editor, add ‘UpdateBaseband’ = false – see for details
  • Unmount the ramdisk: hdiutil detach /Volumes/ramdisk
  • Re-encrypt the ramdisk: xpwntool restore_rd.dec.dmg pwned_restore_rd.dmg -t orig_restore_rd.dmg -iv .. -k ..
  • Replace the ramdisk inside of CFW produced by the Pwnage Tool with pwned_restore_rd.dmg You can either unzip and re-zip the CFW or replace it inside of /tmp/ipsw dir when PwnageTool is running.
[via Redmonpie]
For more news coverage, you can follow us on Twitter or become a fan on our Facebook page, we will keep you updated with posts over the web

If you found this post useful, dont forget to click the +1 button =>  

Follow GreenPois0n on Google+

blog comments powered by Disqus