Things You'll Need:
- Apple iPhone
-
Step 1
First, you'll need to restore your iPhone to the factory settings and install the 1.0.2 upgrade. To accomplish this, you'll need to put your iPhone into recovery mode. First dock your iPhone. Then start by holding both the select and sleep buttons for about 25 seconds. It will reboot and return with a yellow sign reading: Connect to iTunes. Now you'll need to fire up iTunes. Choose Restore. To confirm your version, go to Settings > General > About > Version on the iPhone. Be certain to set your Settings > General > Auto-Lock to NEVER.
-
Step 2
Jail breakIn order to write files to your iPhone, you need to jailbreak your iPhone. We'll use a program to use iNdependence to do this. iNdependence asks for the iPhone firmware files. This is a 92mb download you can download - see resources below. This is a .zip file. After downloading, be sure to unzip it. As it is running, you'll see the screen on the left.
-
Step 3
Now, you will need to activate the iPhone. Luckily, this is a single click solution from within iNdependence, It will ask for the iPhone firmware files that you just downloaded.
-
Step 4
Password SetupNow you can use SSH. You will now need to install installer.app from NullRiver. Be certain to set up your wi-fi settings. Installer just downloads from the internet straight to your iPhone. Install the following in order: ssh root@your.iphone.ip. Now change the root password: passwd root
-
Step 5
Add Zip FilesNow copy some files from the zip file onto the iPhone. You can simply do this step with any SFTP client, such as Transmit. Put the files from the zip onto your iphone into these locations, you will not need to create any folders:
/usr/libexec/lockdownd
/etc/termcap
/bin/ice.fls
/bin/nor
/bin/iunlock
/bin/bbupdater -
Step 6
Start HackingNow it's time for the hacking! Login to iPhone via SSH and execute the following. Be patient, this may take about 20 minutes:
chmod +x /bin/iunlock
chmod +x /bin/bbupdater
mkdir /usr/local
mkdir /usr/local/etc
/bin/launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
iunlock ice.fls nor
bbupdater -v -
Step 7
Now run SSH again: minicom -s
It will say no config file found but don't worry about it. Just select serial port setup, and change /dev/modem to /dev/tty.baseband, save setup as dfl, exit.
You now should have intialized the modem and are dumped to a command line within minicom 2.2. Type in:
AT+CLCK=”PN”,0,”00000000″ You should now get an OK response.
Then type
AT+CLCK=”PN”,2
Again you should get an OK response. -
Step 8
Reboot the iPhone and insert your SIM card at this point. You should now have an unlocked iPhone!










