Taimur Asad·

PwnageTool Bundle for Jailbreaking iOS 4.3 Beta on iPhone 4 Released

If the unofficial version of PwnageTool didn’t work for you, alternatively, you can now give PwnageTool bundles a go for jailbreaking iOS 4.3 Beta on iPhone 4. However this kind of jailbreak is strictly limited to iOS developers only, and will require you to have a Mac, and you must also be enrolled in either iPhone Developer Standard or Enterprise Program.

PwnageTool 4.3 (1)

WARNING: The jailbreaking procedure is complex, and hence is meant for advanced users only. It will require you to make your own ramdisk because the latest official version of PwnageTool makes a broken one for iOS 4.3. Proceed at your own risk only. We are not to be held responsible if you end up bricking your iPhone.

Note:

  • Cydia is said to be working on iOS 4.3 Beta.
  • It is a semi-tethered jailbreak.
  • Your baseband will not be upgraded during restore process.
  • Use a utility like tetheredboot to boot into tethered mode. (instructions can be found here)

iOS 4.3 Cydia

This custom PwnageTool bundle can be downloaded from iPhone-Privacy here. You can use the instructions posted here to modify PwnageTool with this bundle to accept iOS 4.3 beta firmware, and then follow the instructions posted here to create iOS 4.3 custom firmware for iPhone 4.

Instructions for making your own ramdisk are posted below:

Tools needed: OS X, xpwntool

  • Unpack the original ramdisk: xpwntool orig_restore_rd.dmg restore_rd.dec.dmg -iv .. -k .. (use the keys from wiki)
  • Mount the ramdisk: hdiutil attach restore_rd.dec.dmg
  • Free up some space: rm /Volumes/ramdisk/(some unneeded large-ish file)
  • Patch asr: mv /Volumes/ramdisk/usr/sbin/asr /tmp/; bspatch /tmp/asr /Volumes/ramdisk/usr/sbin/asr (bundle_path)/asr.patch
  • Change the restore options: edit /Volumes/ramdisk/usr/local/share/restore/options.plist with Property List Editor, add ‘UpdateBaseband’ = false – see http://theiphonewiki.com/wiki/index.php?title=Preventing_Baseband_Update for details
  • Unmount the ramdisk: hdiutil detach /Volumes/ramdisk
  • Re-encrypt the ramdisk: xpwntool restore_rd.dec.dmg pwned_restore_rd.dmg -t orig_restore_rd.dmg -iv .. -k ..
  • Replace the ramdisk inside of CFW produced by the Pwnage Tool with pwned_restore_rd.dmg You can either unzip and re-zip the CFW or replace it inside of /tmp/ipsw dir when PwnageTool is running.

You can follow us on Twitter or join our Facebook fanpage to keep yourself updated on all the latest iPhone jailbreaking and unlocking releases.