Please help me! about ipwndfu

[axi0mX]

Sure.

You don't install ipwndfu using homebrew, but you need to get the dependencies. You don't have to compile or install ipwndfu at all.

Following the README, you need to install dependencies, and you'll also need to download an IPSW and extract a file from it. It's all described here:
https://github.com/axi0mX/ipwndfu/blob/master/README.md#dependencies

Once you do that, ipwndfu should work. Then you can follow the instructions here to jailbreak/downgrade iPhone 3GS (new bootrom):
https://github.com/axi0mX/ipwndfu/blob/master/JAILBREAK-GUIDE.md

Let me know if you have any issues getting it to work. Good luck!

[MorpheinD]

thank you I did finally figure it out but now I am stuck here
(p.s. I on currently on ios 6.1.6 do I still need to download the ios 4 ipsw u mention in the guide or is that only if your on that ios?) thank you again for helping me

MorpheinDs-iMac:~ MorpheinD$ /Users/MorpheinD/Downloads/ipwndfu-master/ipwndfu -p
*** based on limera1n exploit (heap overflow) by geohot ***
Found: CPID:8920 CPRV:15 CPFM:03 SCEP:03 BDID:00 ECID:0000028F9D019D8E SRTG:[iBoot-359.3.2]
Traceback (most recent call last):
File "/Users/MorpheinD/Downloads/ipwndfu-master/ipwndfu", line 487, in
limera1n.exploit()
File "/Users/MorpheinD/Downloads/ipwndfu-master/limera1n.py", line 194, in exploit
dfu.send_data(device, generate_payload(chosenConfig))
File "/Users/MorpheinD/Downloads/ipwndfu-master/limera1n.py", line 154, in generate_payload
f = open('bin/limera1n-shellcode.bin', 'rb')
IOError: [Errno 2] No such file or directory: 'bin/limera1n-shellcode.bin'

[axi0mX]

Thanks! This is a bug in my code. I need to change this to use path relative to my script.

Change directory into ipwndfu-master and that step will work.
cd /Users/MorpheinD/Downloads/ipwndfu-master/

[MorpheinD]

ok great that looked like it worked terminal is now at
MorpheinDs-iMac:ipwndfu-master MorpheinD$

I am currently restoring my iphone 3gs to the custom ipsw I made in redsn0w what step should i take after it finishes I know you have the guide I just really wanna make sure I do this right please help me with the command lines

[MorpheinD]

HEY!!!!!!!! I got it to work!!!!!!! well when I did the -x command it said I needed to download the ios 4.3.5 ipsw and extract the iBss file but it ran perfect and I believe that once I finish downloading the ipsw and finish that it will work so thank you so much for your help and taking the time to write this amazing hack I have literally been wanting something like this for years I am broke right now but on my next paycheck I want to donate some $ via paypal thank you again!!!!!!

[MorpheinD]

p.s. my email is [email protected] plz send me an email with your Paypal info so I can send you some money when I get paid next

[MorpheinD]

so I am a little bit worried now because when I enter the -x command it freezes at dumping NOR 1/8

[MorpheinD]

ok I need serious help I downloaded the 4.3.5 ipsw & put the exact command into terminl you listed in the guide to get the iBss file but once I do it I put the file into the ipwndfu folder and it says the file is corrupt so I looked & the file hs 0kb on the disc & i've done it twice nd both times it says the same thing can you please send me the ibss file that I need to my email I posted earlier I cant do anything with out it and if I can't get that file my phone is stuck in a black screen PLEASE HELP!!!!

[MorpheinD]

ok I need serious help I downloaded the 4.3.5 ipsw & put the exact command into terminl you listed in the guide to get the iBss file but once I do it I put the file into the ipwndfu folder and it says the file is corrupt so I looked & the file hs 0kb on the disc & i've done it twice nd both times it says the same thing can you please send me the ibss file that I need to my email I posted earlier I cant do anything with out it and if I can't get that file my phone is stuck in a black screen PLEASE HELP!!!!

…

On Mon, Apr 17, 2017 at 4:18 AM, axi0mX ***@***.***> wrote: Thanks! This is a bug in my code. I need to change this to use path relative to my script. Change directory into ipwndfu-master and that step will work. cd /Users/MorpheinD/Downloads/ipwndfu-master/ — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#12 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AaU-ZlZKp_yjdpBCTmJsUKJtgYjcSEbSks5rwzyHgaJpZM4M-4kj> .

[axi0mX]

Sure. Run these 2 commands and tell me what the output is:

$ openssl sha1 n88ap-iBSS-4.3.5.img3
$ ls -la n88ap-iBSS-4.3.5.img3

[128keaton]

@MorpheinD download the ipsw from here. It is an Apple link, dont worry. Move the downloaded ipsw into your ipwndfu-master folder and run:
unzip -p iPhone2,1_4.3.5_8L1_Restore.ipsw Firmware/dfu/iBSS.n88ap.RELEASE.dfu > n88ap-iBSS-4.3.5.img3 exactly as shown. Verify the filesize and try again.

[MorpheinD]

@axi0mX
MorpheinDs-iMac:~ MorpheinD$ openssl sha1 n88ap-iBSS-4.3.5.img3
SHA1(n88ap-iBSS-4.3.5.img3)= da39a3ee5e6b4b0d3255bfef95601890afd80709
MorpheinDs-iMac:~ MorpheinD$ ls -la n88ap-iBSS-4.3.5.img3
-rw-r--r-- 1 MorpheinD staff 0 Apr 17 19:16 n88ap-iBSS-4.3.5.im

@128keaton Thank you I wish I would have read that earlier it would have been a lil easier then what I did the way I got it was I opened the 4.3.5 ipsw with archive utility and navigated to the dfu folder then in terminal I typed unzip -p & I drag and dropped the ibss file from the dfu folder and BLAM! that was the correct file so I moved it to the ipwndfu-master folder
now when I look in get info it says the file has 4 KB on disk (1,503 bytes) which I believe is the right file but now everytime I try and run it get stuck at dumping NOR 1/8

[thesupernoah64]

What OS are you running?

[thesupernoah64]

I only had success on OS X Mavericks. Snow Leopard probably won't work as I had the same issue.

[axi0mX]

@MorpheinD is running Snow Leopard.

One issue is that your iBSS is empty. File size is 0.

Can you run this on a newer OS? There is a compatibility issue I need to look into with Snow Leopard but Mavericks and Yosemite are known to work. Lion and Mountain Lion have not been tested, so they may or may not work.

[thesupernoah64]

The iMac 4,1 is not compatible with Mountain Lion and beyond.

[MorpheinD]

I am on snow leopard but it was working earlier up until the program went to find the iBss file which I has forgotten to do so it crashed and I've had problems since
@axi0mX @128keaton so just to be saafe I tried my @128keaton had suggested and for 1 it worked and 2 it left me a file much larger then I had been eable to get in the method I listed earlier so I am going to 1 try a hard reset and use ./ipwndfu to put into pwned dfu and try again if not im goin to try and reinstall in custom ipsw because earlier that had worked lets hope it does fingers crossed!!!!

[128keaton]

also, just a thought, try running a newer version of Python, installing pip again, and then retrying? Your version bundled with Snow Leopard may be too old.
run python in terminal and post the output.

[thesupernoah64]

Well on snow leopard I upgraded python 2.7 to 3.4.6, which after that this didn't work. But on mavericks I did the same thing and it worked out smoothly.

Well on mavericks while installing brew or python 3.4.6 (I forgot) it asked me to install "Command Line Tools" or something. I don't remember the actual name but maybe that's why it isn't working on Snow Leopard.

[thesupernoah64]

http://adcdownload.apple.com/Developer_Tools/command_line_tools_os_x_lion_for_xcode__july_2012/xcode44cltools_10_76938107a.dmg Don't worry, this is an Apple link.

This is the Command Line Tools installer, but unfortunately, you'll need OS X Lion to install it. Or you can download and try it on snow leopard if you want

[MorpheinD]

I am still getting stuck at dumping NOR 1/8 plz help me!!!!! I know I have the correct iBss file now thanks to @128keaton and I know it will work on 10.6.8 because I've had it run all the way thru before except I had the wrong iBss file now though I am stuck I cant even restore to original ios of 6.1.6 in itunes

[MorpheinD]

@thesupernoah64 I think I already have command line tools installed but I think I'd like to try and uninstall pyusb and libusb what commands would I enter for those or would it literally be adding un- to the commands i entered to install them?

[axi0mX]

@MorpheinD Do you have a newer version of OS X? Or Ubuntu?

[MorpheinD]

I don't I know that I can chabg the system.plist to say I have lion and change it back after do you think it'll help? what confuses me is that if you remember that line of script Ishowed you it had worked all the way down until it reached the ibss part and it was because I had a empty file but now I know that I have the right file in the ipwndfu-master folder & I've even put the original ios 6.1.6. on there but it keeps getting stuck at dumping NOR 1/8

…

On Thu, Apr 20, 2017 at 4:14 AM, axi0mX ***@***.***> wrote: @MorpheinD <https://github.com/MorpheinD> Do you have a newer version of OS X? Or Ubuntu? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#12 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AaU-Zi16SHqD0PmUlrrB8cNa6J-40Tlwks5rxzAhgaJpZM4M-4kj> .

[axi0mX]

Don't change system.plist, that won't help.

It is odd. Can you copy and paste the output you are seeing? If it just hangs waiting, press Control+C to get the Traceback message.

[128keaton]

@MorpheinD did you try installing a newer version of Python through Homebrew?

[axi0mX]

@128keaton I don't see why the version of Python would make a difference here.

@MorpheinD If you don't have a computer with a newer/different operating system, I can attempt to debug this issue if you can provide the log output. If ipwndfu just hangs, press Control+C to get the Traceback message.

[128keaton]

@axi0mX I had issues using OS X's version of Python on older installs of OS X.