News tagged ‘MuscleNerd’

MuscleNerd from the iPhone Dev-Team announced via twitter that an unlock for iPhone 3GS with 05.12.01 baseband from iPhone firmware 3.1.3 will be released soon:

@MuscleNerd will there be a unlock software coming out for the 3gs 3.1.3 baseband 05.12.01 when the new iPhone 4g comes out??
@EmmanueGT yep..so don't sell or give away your 3GS (at same time, remember not to accept Apple FW upgrades in future)

Wow! Hours after iPad 3G sales launch and it has already been jailbroken! Below is a video of MuscleNerd where jailbroken iPad 3G runs Cydia.

MuscleNerd used the jailbreak called "Spirit". It's a tool that makes untethered unlock of iPad, iPod Touch 3G and iPhone 3GS and DevTeam promises it will be available soon. Stay tuned for further instructions how to save your SHSH Blobs and then use Spirit to jailbreak your device.

Read the rest of this entry »

MuscleNerd just released redsn0w 0.9.5 beta - the first public jailbreak of iPhone OS 4. This utility is only for developers of jailbroken apps, so they can update apps for firmware 4.0. The jailbreak only supports the iPhone 3G and runs on MAC OS X. There is no carrier unlock right now.

You can download RedSn0w 0.9.5 and get more info here.

Yesterday MuscleNerd uploaded a video of an iPhone 3GS that runs the iPhone OS 4 (beta version). Along with a new OS it also runs Veency, an unauthorized VNC-app for the iPhone (so it can be runned only on jailbroken devices).

That means that new OS can also be jailbroken by the methods that were used for the previous versions. We may only hope Apple won't make any security updates before its official release.

That didn't take long. In less than 24 hours hackers managed to jailbreak Apple iPad, to get a root access to a file system. The first video of a jailbreaked iPad was recently published by Musclenerd, famous hacker from DevTeam. This was a team work of Musclenerd, chronicdevteam, comex and chpwn.

Watch the video:

Read the rest of this entry »

Yesterday iTunes update was found to have issues with those of iPod Touches and iPhones that were tethered jailbroken with blackRa1n. If you have one of these, you will be unable to rejailbreak your device after rebooting it with blackra1n. The problem is being experienced only by Windows users. iH8Sn0w has an explanation:

"Blackra1n hooks to the dll that has different offsets of what it is actually looking for".

Read the rest of this entry »

Recently MuscleNerd, the member of DevTeam, reported the presence of an interesting security bug in Safari for the iPhone. It will probably allow a quick remote jailbreak of iPhone or iPod Touch simply by connecting the device to an external website created for this purpose.

The bug was discovered by two hackers Ralph Phillip and Vincenzo Iozzo, who won the prize of $15 000 during CanSecWest. Their initial idea was to use a web portal to do the exploit of the SMS database and retrieve it's content.

Gull1hack, the tool that promises to jailbreak all iPhones and iPod Touches with the latest iBoot, is a fake. Here is a twitter comment from MuscleNerd, hacker from DevTeam:

It looks like the guys who created Gull1hack used two different iPhone 3GS's (or perhaps 3GS and 3G) - one with the old iBoot and one with the new one. Here is a quick conversation between MuscleNerd and Gull1hack:

Read the rest of this entry »

A few days ago in an IRC channel the DevTeam and GeoHot discussed and summarized the state of the exploits found in the new baseband 05.12.01 in firmware 3.1.3. GeoHot explains that an exploit that had previously discovered and used in blacksn0w is still present in the new firmware released by Apple. It appears that both he and MuscleNerd are working on the same exploit, and if this were true, it would be a really good start to team up and release a new unlock tool.

Here is their discussion:

< visnet_ > What does geohot tweet mean?
< %geohot > its my bb exploit for safekeeping
< %Par4doX > geohot: did you turn that over to the dev team or are you doing something with it?
< %geohot > my days of turning things over are done
< %geohot > i hope its different from the one they have
< %geohot > but they prob already have it
< %geohot > its the one i orig wanted to release blacksn0w with
< %Par4doX > it’s still there in the new bb
< %geohot > yep, just checked
< %geohot > but then opted to use xemn since it was public
< Evan > Oo, it carries over from 05.11 to 05.12?
< %geohot > why wouldn’t it, apple doesn’t fix things proactivly
< @MuscleNerd > geohot we prob should figure out a way to know if we have same exploit double blind, otherwise we may release 2 different ones at same time
< %geohot > any suggestions?
< @MuscleNerd > not sure how to do that without making it easy to brute force tho
< %geohot > yea, i salted the hash
< @MuscleNerd > yeah
< @MuscleNerd > hmm maybe if we both hash the stack dump
< @Confucious > Can you two take this out of public sight?
< @MuscleNerd > the stack itself, not the header before it or the registers after it
< Her > muscle: any notice about the exploits are the same ?
< %geohot > we are working on it
< %geohot > cryptography, perfect for people who don’t trust each other

We should not expect much for the firmware 3.1.3 since the rumors predict the firmware 3.2 for mid-March. However these news are really good for owners of locked devices.

As expected iH8sn0w released f0recast, the application that allows us to know a lot of useful information about all we can do with our iPhone.

Just connect the iPhone with the cable to see what is version of the baseband or iBoot. The utility will also give valuable information if we can perform a jailbreak (tethered or untethered). It will also tell if the Phone is unlockable and will give a suggestion what unlock software can be used.

You can download it directly from here. Unfortunately there is no Mac version for now.

MuscleNerd just posted interesting comment on Twitter, saying that the application is inaccurate regarding to the iPhone 3GS. There might be a new update soon. For all other devices the application works just fine.

Read the rest of this entry »

Sherif Hashim has discovered an exploit which may allow unlock of the latest iPhone OS 3.1.3 baseband 05.12.01. Such unlock utilities for previous baseband versions were called blacksn0w, ultrasn0w и and yellowsn0w. MuscleNerd, the member of DevTeam, has already confirmed it is working. So the timing of the unlcok release is totally up to them right now.

Here is an official update from DevTeam:

"We’ve started to look at his crash but it’s a long road between any given crash and a fully working unlock, and we couldn’t put an ETA on it even if we wanted to. It’s not even guaranteed that an working unlock will come from this particular crash — it’s just too early to tell."

H8sn0w has just released the new version of Sn0wbreeze 1.4. Sn0wbreeze is a jailbreak utility with functionality similar to PwnageTool. The new version supports firmware 3.1.3 jailbreak for the following devices:

• iPhone 2G
• iPhone 3G
• iPhone 3GS - old bootrom
• iPod Touch 1G
• iPod Touch 2G - non MC

Sn0wbreeze is a Windows application, so Mac users have to wait for the upcoming release of PwnageTool by the DevTeam. Alternatively, both Mac and Windows users can use Redsn0w to run jailbreak (no custom firmware though).

You can download the new version of sn0wbreeze here.

MuscleNerd continues to argue that we should not use sn0wbreeze. Especially users who have unlocked their iPhone with blacksn0w utility:

MuscleNerd, a member of the DevTeam, posted an interesting tweet. He claims that a new version of PwnageTool to jailbreak the Firmware 3.1.3 will be released soon.

However he also warns the owners of an iPhone 3G or 3GS, suggesting not rush for firmware update. In other words, the improvements of firmware 3.1.3 are minimal, so if you are comfortable with firmware 3.1.2 just stay with that.

In addition to announcing a new version of Redsn0w, MuscleNerd has announced a PwnageTool port to Windows and Linux:

When asked about PwnageTool, MuscleNerd said via twitter "they can compile now for wxwidgets for redsn0w 0.9, so pwnagetool port can be based on this", "and so that means, pwnagetool port for windows and linux. For OSX it's all on @wizdaz of course "

PwnageTool lets you build custom ipsw files which can include personalized boot logos as well as automatic installation of applications. There is also project called Sn0wBreeze, a port of PwnageTool to Windows. However a port from DevTeam is of course more preferrable.

The latest version of PwnageTool 3.14 can be downloaded here.

MuscleNerd, the member of DevTeam, started working on a new version of redsn0w. The update will add support of the latest firmware 3.1.2:

Redsn0w is an easy to use, multi-platform, multi-device jailbreaking tool for the iPhone 2G, iPhone 3G, iPhone 3GS (old iBoot) and iPod touch (first and second generation). It is available for Linux, Mac OS X and Windows. You can download redsn0w utility here.