Jailbreak iOS 4.3.5 Using PwnageTool to preserve Baseband

Apple has released iOS 4.3.5 updating your iDevice frimware ,obviously you’ll lose your jailbreak. To jailbreak your iDevice by using Pwnage tool you should follow these below mention steps. Pwnage Tool bundles has advantage over Redsnow as it can preserve your base band for unlocking via Ultrasnow, “iPad 2 users should stay away from this update as there is no jailbreak for it.”

Compatibility

• iPhone 4
• iPod touch 3G
• iPod touch 4G
• iPad 1

Requirements

• Download iOS 4.3.5
• PwnageTool 4.3.3
• PwnageTool Bundle
• iTunes 10.4
• Tetheredboot utility

Download all above files before proceed, after completing your downloading follow these steps.

Extract Custom Bundle

Extract the .zip folder. Now you will find a .bundle file, move this file to your desktop

Pwnage tool app

Drag the PwnageTool app to the /Applications folder, right click over it and simply click on “Show Package Contents” as shown in the pic.

Place .bundle file

Go to Contents/Resources/FirmwareBundles/ and paste the .bundle file that you copied to your desktop in this location.

Create Custom Firmware

Launch Pwnage Tool

Launch PwnageTool in Expert mode, and select your iDevice and click on next button.

ipsw Firmware

Browse for iOS 4.3.5 IPSW firmware for your iDevice.

Jailbroken Firmware.

After this click on Build to start making a jailbroken firmware as shown below.A custom .ipsw file will then be created by PwnageTool for your iDevice which will be jailbroken.

DFU Mode

To put your device in DFU mode , hold down both the “Home” and “Power” button for ten seconds, Then release “Power” button but keep holding the ‘Home’ button for ten more seconds now your device would be in DFU mode.

Start iTunes

Restore your device to your pre-jailbroken custom 4.3.5 .ipsw files by doing this ,Start iTunes, click on your device icon from the sidebar in iTunes. Then press and hold left “alt” (option) button on Mac, or Left “Shift” button if you are on Windows on the keyboard and then click on “Restore” button in the iTunes and then release this button.

iTunes prompt you to select the location for your custom firmware 4.3.5 file. Select the required custom .ipsw file that you created above, and click on “Open”.
Wait till iTunes installs the new firmware 4.3.5 on your device.Once the installation is done, your device will be jailbroken on iOS 4.3.5.

Booting in Tethered Mode

This is tethered jailbreak so you have to run this small tetheredboot utility by following these steps.

• Extract the tethered boot .zip file which you have download before
• we need two files from the custom iOS 4.3.5 firmware namely:kernelcache.release.n90 and iBSS.n90ap.RELEASE.dfu. To do this, make a copy of your custom iOS 4.3.5 file that you created above, change the extension of this file from .ipsw to .zip, and then extract this .zip file.
  Now copy kernelcache.release.n90 file, and then copy iBSS.n90ap.RELEASE.dfufiles which are found under /Firmware/dfu/.
  Move all these files, and tetheredboot utility to a new folder named “tetheredboot” on the desktop.

Commands

Turn off your iOS device, and start Terminal on OS X and run the following commands:

sudo -s

enter your administrator password, then:

/Users/Tech/Downloads/tetheredboot/tetheredboot
/Users/Tech/Downloads/tetheredboot/iBSS.n90ap.RELEASE.dfu
/Users/Tech/Downloads/tetheredboot/kernelcache.release.n90

You need to replace “Tech” with the name of the directory on your PC.
If the command given above does not work you can always try ‘tetheredboot -i ibss -k kernel’ instead of ‘tetheredboot ibss kernel’:

/Users/Tech/Desktop/tetheredboot/tetheredboot –i
/Users/Tech/Desktop/tetheredboot/iBSS.n90ap.RELEASE.dfu -k
/Users/Tech/Desktop/tetheredboot/kernelcache.release.n90

You should now see some code running in the Terminal window, at some point, it will ask you to enter DFU mode. Now follow the following steps to enter DFU mode:

• Hold Power and Home buttons for 10 seconds
• Now release the Power button but continue holding the Home button for 10 more seconds

You device should now be in DFU mode
Now wait for your device to boot, Terminal at this point will be showing “Exiting libpois0n” message. After a short while, your device will be booted in a jailbroken tethered mode !

Related Posts

• Jailbreak iOS 5.0.1 Final Using Sn0wBreeze v2.8b11 (Tutorial)
• Jailbreak iOS 5 Gold Master (GM) using Sn0wbreeze 2.8b8 [Tutorial]
• Jailbreak iOS 5.0.1 Using Redsn0w 0.9.9b9 [Direct Download Links]
• Unlock iOS 5 On iPhone 4 / 3GS Using Ultrasn0w 1.2.4 Or Gevey SIM
• Download Find My Friends App Free For iOS 5