PwnageTool 4.1.3 Unlock Edition has been released which can update the baseband of iPhone 3GS and iPhone 3G to 06.15.00 so that they can be unlocked using Ultrasn0w 1.2 on iOS 4.2.1 or iOS 4.1 firmware. Follow the steps below on how to update iPhone 3GS, 3G baseband to 06.15.00
WARNING: YOU DO THIS AT YOUR OWN RISK! PLEASE UNDERSTAND THE CONSEQUENCES OF UPDATING TO 06.15.00
- There is no way to come back down from 06.15, and there’s no hiding the baseband version from Apple. You’ll be voiding your warranty in a very obvious way.
- If some future baseband comes out with a critical fix, you won’t be able to update to it if it remains down in the 05.xx sequence (then again, you wouldn’t update to it if you wanted to keep your unlock anyway).
HOW TO: Update iPhone 3GS, 3G to 06.15.00 BaseBand for iOS 4.2.1 Unlock
Step 1: Download iPad 3.2.2 from here (for 06.15.00 baseband).
Step 3: Download PwnageTool 4.1.3 from here. [Refer Update 1 at the end of this post]
Step 4: Start PwnageTool 4.1.3 and point it to iOS 4.2.1 / 4.1 firmware file.
Step 5: You will be prompted to update your baseband to 06.15.00 so that iPhone 3GS / iPhone 3G which can be unlocked later using Ultrasn0w 1.2.
Step 6: Point PwnageTool 4.1.3 to iOS 3.2.2 for iPad. PwnageTool will now fetch the exploitable 06.15.00 baseband from 3.2.2 firmware and will replace it the baseband in iOS 4.2.1 / 4.1.
Step 7: Click the next arrow now to allow PwnageTool to create this custom ipsw file for you.
Step 8: Set up your device in DFU (Device Firmware Update mode) and not into Recovery mode. DFU mode is a mode where iPhone will be made to force a restore of the firmware into whatever version firmware it is given.
Getting your iPhone into DFU mode is somewhat tricky, and it may require some patience and practice because timing is essential to get it to DFU mode and not into recovery mode.
- Open iTunes and connect the iPhone to your Mac.
- Press and hold the Home button and the Power button at the same time.
- After exactly 10 seconds release the Power button. Continue holding the home button until computer recognizes your iPhone.
After iTunes recognizes the iPod Touch/iPhone, let go of the Home button otherwise it will go into recovery mode and you will have to do the entire DFU process over again. You will know when you have put your iPod Touch/iPhone correctly into DFU mode when the display is blank and that you do not have anything on your device.
Step 9: Now, restore your iPhone, iPod touch or iPad to this custom firmware 4.2.1 / 4.1 file. Select the right device icon from the iTunes sidebar. Now press and hold left “alt” (option) button on Mac (Left “Shift” button on Windows) on the keyboard and then click on “Restore” (Not “Update” or “Check for Update”) button in the iTunes and then release this button. This will make iTunes prompt you to select the firmware file. Select the right ipsw file and click on “Open”.
Step 10: Be patient at this point! Your iPhone screen at this point will be showing a progress bar indicating installation progress. After the installation is completed, your iPhone 3GS, 3G will restart automatically.
Voila!! You now have a jailbroken iPhone 3GS or 3G on 06.15.00 baseband, which can now be unlocked easily using Ultrasn0w 1.2.
[Update 1]: There’s an error in the bundle for the iPhone3GS 4.1 that prevents the new baseband from being used. If you know your way around OSX, please download the fixed bundle, and unzip it if Safari hasn’t already done so. Then “Show Package Contents” of PwnageTool.app, navigate to Contents->Resources->FirmwareBundles and drop it there.
[Update 2]: Follow step-by-step guide to unlock your iPhone 3GS or iPhone 3G on iOS 4.1 / 4.2.1 running BaseBand 06.15.00.