Well, I was not interested to write this post because there is no official release of PwnageTool available to jailbreak iOS 4.1. However, an unofficial release is floating around the web that is said to be working on iPhone 3GS (of course only old bootrom).
It is to inform you that a new jailbreak GreenPoison is also coming soon to jailbreak all devices on iOS 4.1, but if you ar impatient, you can try this method on iPhone 3GS.
All the download links are at the bottom of this post.
Step 1: Download the latest version of PwnageTool.
Step 2: Make sure iTunes is up to date. If not, update iTunes and reboot your computer.
Step 3: Sync and backup your iPhone in iTunes.
Step 4: Download the latest iOS 4 firmware for your specific device and place it on desktop.
Step 5: Launch PwnageTool and select your iPhone.
Step 6: PwnageTool will automatically detect your firmware. Click on the blue arrow to continue.
Step 7: PwnageTool will now ask if you have an iPhone contract that you would normally activate with iTunes. Choose YES if you have a contract with an official carrier (ie. AT&T in the US) and you don’t care about unlocking your device. Click NO if you don’t have a contract with an official carrier and want to unlock your iPhone.
Step 8: PwnageTool will now create the custom IPSW.
While creating the custom firmware, PwnageTool will ask you to authenticate your account on Mac, ignore this prompt for now and install iOS4.1Jailbreaker installer package which is included in the .zip file you downloaded in Step 3 above. Once this has package has been installed, go back to the PwnageTool password prompt which you previously ignored and enter your password so that PwnageTool completes the custom firmware building process.
Step 9: When done, you will see the “iHaz success” message.
Step 10: Now that you have your custom cooked firmware, you need to install this firmware on your iPhone. To do so, plug your iPhone in iTunes. Once iTunes has recognized your iPhone, hold the “Alt/Option” key on Mac and “Shift” key on Windows and click “Restore” at the same time. DO NOT click “Restore” without holding the “Alt/Option” key! A dialog box will pop up and you’ll be able to choose the custom IPSW file you created.
Step 11: PwnageTool will now install your cooked iOS 4 firmware on your iPhone. This process might take a few minutes so be patient. When done, your iPhone will reboot.
If iTunes throws 1004 or 1015 error at you. This is normal, just ignore this error as the firmware has already been successfully installed on the device. But your iPhone at this point will be stuck in Recovery Mode, showing that “Connect to iTunes” screen.
Step 12: To exit your device from Recovery Mode, download the program called TinyUmbrella. Run it and the click on “Kick Device Out of Recovery” button. Your device will now restart normally.
In case the Cydia icon on the homescreen is in white with no repositories added, simply addhttp://apt.saurik.com/cydia-3.7 repo in Cydia to get going! If Safari crashes, addhttp://repo.woowiz.net repository and install Safarifix.
Disclaimer: This guide is unofficial and we won’t recommend you to use it if you don’t know what you are going to do. This guide is for testing and educational purpose only. Follow it at your own risk.
- Download iTunes 10 latest version
- Download PwnageTool for iOS 4.1 (unofficial)
- Download TinyUmbrella here if your phone is stuck at recovery mode.
Download iOS 4.1: