Tutorial: Jailbreak and unlock iOS 5 on iPhone 3GS/4 with sn0wbreeze 2.8 beta 8 (Windows)

   Morning Dev Team released a new version of ultrasn0w 100% compatible with the new iOS 5 and thanks to it you can unlock your terminals. Considering that the iOS 5 released by Apple on Wednesday is identical to the iOS 5 GM released last week, iH8sn0w claims that sn0wbreeze can be used to make a custom ipsw for the new operating system. This custom ipsw should keep the baseband intact during the restore process and after the restore you can use the new version of ultrasn0w to decode your terminals.

Terminals compatible with sn0wbreeze 2.8 beta 8 are:

  • iPhone 3GS – old bootrom – untethered jailbreak;
  • iPhone 3GS – new bootrom – tethered;
  • Iphone 4 - tethered;
  • iPad 1 - tethered;
  • iPod Touch 3G - tethered;
  • iPod Touch 4 – tethered.

ultrasn0w only decodes the following basebands:

  • iPhone 3GS – 04.26.08, 05.11.07, 05.12.01, 05.13.04. 06.15.00;
  • iPhone 4 – 01.59.00.

I have not tried this tutorial, I am NOT responsible for the eventual blocking of your terminals. sn0wbreeze is known for having problems at times! Use this tutorial AT YOUR OWN RISK!

sn0wbreeze hacktivates the terminals, so you will be able to use the device even if you do not have the telephone card of the operator on which it is coded.

UPDATED: Starting with October 15 you can no longer restore to iOS 5 so the tutorial won't help you at all.

Step 1

Download sn0wbreeze 2.8 beta 8 de here.

Downloaded iOS 5 available here.

Step 2

If necessary, change the extension of the firmware file downloaded in step 1 from .zip to .ipsw (if necessary). If you are on Windows Vista / 7 then right click on sn0wbreeze and select Run as Administrator. You will receive a warning message not to distribute the program, press ok then press the blue button to continue. On Windows XP sn0wbreeze does not work properly and I do not recommend you to use it.

Step 3

Now you will be greeted by a screen that asks you to search in the computer where you saved the iOS 5.0 file, after the program checks the file then the ok sign will appear, then press the blue button to continue. iH8sn0w tried to implement a drag&drop module for files, but unfortunately it doesn't work properly, so I recommend you avoid using it.

Step 5

The program has 3 working options: simple mode, expert mode and baseband preservation mode. Simple mode will customize the ipsw based on preset settings, and expert mode will give you the opportunity to customize everything you want to insert in the firmware, in this tutorial I will explain expert mode. Baseband preservation mode will give you the opportunity to make a custom ipsw without jailbreak but which does not update the baseband.

Step 6

Now we get to the slightly more complicated things. In this screen sn0wbreeze it will show the options we have in the firmware configuration, the General option is the one that will take you through all the others, so we will select this one. Select General and then press the blue button to continue.

Step 7

Now you will reach the screen that has only 5 options available compared to the previous versions. The first one is Enable Battery Percentage and allows activating the option to see the battery percentage; the second allowed to hack the terminal; the third is the installation of OpenSSH which gives us the possibility to access the system files of the terminal via Wi-Fi and the fourth is Root Partition size which gives us the possibility to select the space allocated to the system partition, I recommend you to leave the value there. Press the blue button to continue.

Step 8

Now you will reach the menu where you can select applications from Cydia/from the computer to be automatically installed in ipsw. Select the desired .deb files from the computer using the browse option, then press the blue button to continue.

Step 9

After selecting the appropriate files, you reach the main menu where you must select Build ipsw to start the process by which your custom ipsw is made.

After pressing the blue button you will reach a menu where you can choose if you want to play PacMan or see the classic rotated.

To run PacMan you must have flash installed, unfortunately it didn't work for me even though I have flash so you can play with the option to see if it works.

After you finish customizing the ipsw, you will see the message below.

Step 10

Now press the ok button to enter the terminal in Pwned DFU Mode using sn0wbreeze. It is very important to follow the steps below. Connect the device to the PC.

First, turn off your device.

  • press the Power button for 3 seconds;
  • while holding down Power press and Home and keep them pressed for another 10 seconds;
  • release the Power button and hold only home and the device enters DFU Mode.

Step 11

After the process is finished, open iTunes, hold down the Shift button on the keyboard while pressing restore and select the custom ipsw made with sn0wbreeze, it should have a name similar to this sn0wbreeze_iPhone 4-5.0.ipsw and it should be on the desktop. iTunes will go through the restore process and when it finishes you should have iOS 5 jailbroken and hacktivated on your terminal.

Step 12

Now that you have customized the ipsw and put the terminal in DFU Mode and restored, you must restart the terminal in tethered mode in order to have part of the jailbreak. To do this, go to the desktop and look for the folder iBooty-for-5.0. If you don't run iBooty, you won't be able to open Cydia/Safari in any way.

Step 13

Open iBooty, re-enter the terminal in DFU Mode and iBooty will automatically restart it in tethered mode and you will have a jailbroken terminal ready to be used!

Step 14

After the device restarts, open Cydia, go to Source and add http://repo666.ultrasn0w.com. Normally, it must already be added, but if it is not, you can add it yourself.

Step 15

After adding the source, go to search, search ultrasn0w and install it.

Step 16

After the installation is finished, you will see a button on the screen asking you to reset the device to implement the ultrasn0w changes. Considering that we all have tethered jailbreak now, you must follow the steps below to restart your terminal! Mobilesubstrate prevents the restart of the device so that you will only have the Apple logo on the screen after the iPhone is reset.

Step 17

When you have displayed the apple on the screen, simultaneously press the Home + Lock buttons and keep them pressed for 10 seconds. In these 10 seconds the terminal will reset and the apple will disappear from the screen. After the 10 seconds have passed, release the Lock button and keep the Home button pressed for another 15 seconds and the terminal will go into tethered mode.

Step 18

Now that you have the terminal in DFU Mode, you must restart iBooty and the program will start the device in tethered mode and you will be able to use Cydia.

You must repeat steps 17 and 18 every time you close or restart the terminal, otherwise you will not be able to use it.