Taimur Asad on March 20, 2010, 9:01 pm

Unlock iPhone 3.1.3 05.11.07 Baseband with Blacksn0w

A fix has been released to unlock the latest iPhone 3.1.3 firmware on 05.11.07 baseband using Blacksn0w. Most of you who have tried to unlock iPhone 3.1.3 with 05.11.07 baseband using blacksn0w might have faced this problem where the said tool is unable to unlock iPhone 3G and 3GS. This is because blacksn0w is locating a function to patch by searching the binary for a reference to string "SIM is not supported". In iPhone OS 3.1.3, Apple has replaced the same function in a way that it now uses the string "Verified". Since the location to patch is determined by instruction search&replace, the said patch still works in iPhone 3.1.3 after changing the string and its length in Blacksn0w binary.

Now to get it to work, simply follow the simple step by step guide posted below to unlock your iPhone 3G and iPhone 3GS (05.11.07 baseband only) on iPhone OS 3.1.3 using blacksn0w.

NOTE: This has been tested on iPhone 3GS, 3.1.3 firmware on 05.11.07 baseband only. NOT the latest 05.12.01 baseband.

Step 1: Download blacksn0w.deb from the official blackra1n site here and unpack it using 7-zip (Download link here).

Step 2: Make sure you have OpenSSH installed on your iPhone:

Open Cydia. Touch on “Search” tab and then search for “OpenSSH”.

Install “OpenSSH” and reboot your iPhone.

Step 3: Connect your iPhone with your computer. Make sure iTunes is not running.

Step 4: Download and install Cyberduck for Mac (download link given below). Enter the following details to login to your phone:

Server: The IP address of your iPhone. Settings –> WiFi –> <Your Network Name>
Username: root
Password: alpine
Protocol: SFTP (SSH File Transfer Protocol)

For Windows, download and install WinSCP from here and enter the following details to login to your phone:

Hostname: The IP address of your iPhone. Settings –> WiFi –> <Your Network Name>
User name: root
Password: alpine
Protocol: SCP

Step 5: Copy the System\Library\LaunchDaemons\com.apple.CommCenter.plist from blacksn0w.deb to /tmp/ directory on the phone.

Step 6: Download the patched blacksn0w.dylib file from here and copy it over to /usr/lib/ on the phone.

Step 7: Now try to execute a test load via the MobileTerminal app on your iPhone. Download “MobileTerminal” app from Cydia if you haven’t already and run the following command to login via root.

su root
alpine

Once you have logged in, enter the following command in one go as stopping CommCenter will disconnect/pause WiFi and SSH.

launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist ; launchctl load /tmp/com.apple.CommCenter.plist ; launchctl start com.apple.CommCenter

Make sure you get signals with your T-Mobile SIM card.

Step 8: Now if test load is successful, copy the com.apple.CommCenter.plist file from /tmp/ directory on the phone to /System/Library/LaunchDaemons/. Reboot you phone now and it should all work.

If test load does not work, the phone will freeze, wait 20 seconds and reboot via (Power+Home) buttons combination.

Also check out our complete jailbreaking guides for iPhone 3.1.3 firmware for iPhone 2G, 3G, 3GS and iPod touch 1G/2G using redsn0w 0.9.3, redsn0w 0.9.4, sn0wbreeze, PwnageTool 3.1.5. Unlocking can be done using ultrasn0w or blacksn0w.

For iPhone 3.1.2 firmware, you can use blackra1n, PwnageTool, redsn0w, sn0wbreeze, ultrasn0w and blacksn0w to jailbreak and unlock your iPhone and iPod touch. [Thanks to axenory for the hat tip via twitter]

UPDATE 1: Blacksn0w RC2 has now been released which includes this fix. More info can be found here.