How to Jailbreak Your iPhone 3GS Using PwnageTool (Mac) [4.1]

Posted October 20, 2010 at 12:48pm by iClarified | Please help us and submit a translation by clicking here | 102446 views

These are instructions on how to jailbreak your iPhone 3GS on iOS 4.1 using PwnageTool for Mac.

Step One
Make a folder called "Pwnage" on the desktop. In it, you will need a couple of things. PwnageTool 4.1, found here

You will also need the 4.1 iPhone firmware.
4.1.0 (3GS): iPhone2,1_4.1_8B117_Restore.ipsw

When downloading the IPSW file, it is best to download it with Firefox since Safari often auto extracts it!


Step Two
Double click to mount PwnageTool then drag the PwnageTool icon into the Pwnage folder.


Then from the Pwnage folder double click to launch the PwnageTool application.


Click Ok if presented with a warning.


Step Three
Click to select Expert Mode from the top menu bar


Step Four
Click to select your device. A check-mark will appear over the image of the device. Click the blue arrow button to continue.


Step Five
You will be brought to the "Browse for IPSW" page. Click the Browse for IPSW... button.


From the popup window select your firmware from the Pwnage folder then click the Open button.


Step Six
You will then be brought to a menu with several choices. Click to select General then click the blue arrow button.


The General settings allows you to decide the partition size. Check Activate the phone if you are not with an official carrier then click the blue arrow button.

NOTE*: Deselect Activate if you have an iPhone legitimately activated on an official carrier.


The Cydia settings menu allows you to create custom packages so you do not have to manually install the necessary them later.


Click to select the Download packages tab. Then click the Refresh button to display all the available packages. Double clicking the package you want will download it and make it available in the Select Packages tab.


Checkmark the ones you want then click the blue arrow button.


The Custom Packages Settings menu displays listed package settings for your custom IPSW. For know leave these settings as is. Click the blue arrow button to continue.


Step Seven
You are now ready to begin the pwnage process! Click the Build button to select it then click the Blue arrow button to begin.


Step Eight
You will be asked to save your custom .ipsw file. Save it to your Pwnage folder you created on your Desktop.


Your IPSW is now being built. Please allow up to 10 minutes.


You will be asked to enter your administrator password. Do this then click the OK button.


Step Nine
Once your ipsw has been built you will be asked to connect your iPhone to the computer. Once it detects your device PwnageTool will guide your through the steps to putting your iPhone into DFU mode.


Press and hold the power and home buttons for 10 seconds.


Then release the power button and continue holding the home button for 10 seconds.


Once your iPhone is successfully in DFU mode, PwnageTool will prompt you to launch iTunes.


Step Ten
Once In iTunes, hold the Alt/Option key and click Restore.


Step Eleven
Navigate to the Pwnage folder on your desktop using the dialog window that appears. Select the custom IPSW that was created and click the Choose button.


Step Twelve
iTunes will now restore the firmware on your iPhone. This can also take up to 10 minutes. Once done you will be rebooted into jailbroken iOS 4.1!


***THANKS: Thank you to Geohot and the Dev-Teams for their hard work in making this jailbreak and tutorial possible!

Share
Add Comment
dunno78 - December 13, 2010 at 5:04pm
Old bootrom unlocked 3GS currently on 4.0.1 -- when I try to restore to a pwnage tool cooked 4.1, using the Pwnage Tool and ipsw links above, iTunes says my device is not eligible for that build. I see in other sites that some people recommend UNchecking the \"Activate this phone\" in expert mode -- if I do that, will I lose my ability to unlock with Ultrasn0w?
Slyppry - November 16, 2010 at 11:43am
I am lost. I have an iBook running Leopard 10.5.8, running the new Pwnage Tool, trying to upgrade a 3gs new bootrom to 4.1 from 4.0 without updating the baseband. I cooked the firmware with PT and followed the steps for the DFU Mode within PT. Problem is, on the step where you are holding only the Home button, it only counts to 6 and then stops. The iphone itself starts up on its own shortly after that, normal startup. If I keep holding the Home button, after PT stops counting at 6, the iphone goes into Recovery (?) where it shows the screen to connect to itunes and itunes opens automatically, saying it detected an iPhone in recovery mode and that it needs to be restored to continue. I thought that it worked! WRONG. I continue to follow the directions, holding the alt/option button while clicking restore, selecting the custom fw, and itunes looks like it is going to work, puts the iphone in dfu (Black screen) but then pops up with error 21. I have to use TinyUmbrella to kick it out of recovery mode. I have tried this about 15 times, I have also cooked the firmware a total of 3 times, thinking maybe it was just a software glitch. I tried putting the iphone into DFU myself. I have tried the Pwnage Tool DFU button so many times that I can hear that beep in my sleep. I have tried using the custom fw on my PC to do the restore, no luck, same error 21. Any and all help would be greatly appreciated. iPhone 3gs, Model MB716LL, currently on iOS 4.0 (8A293) trying to upgrade to 4.1.
Nick - November 2, 2010 at 4:17am
After done restoration i got error 29, and the phone booted itself into recovery mode. So i use tinyumbrealla to kick out and get into springboard. However, my phone 3gs 16gb on baseband 05.11.07 with old bootroom without SHSH saved on cydia, restarted itself every 3-4 minutes. I\'ve been stuck in this loop for a few days already. Any help would appreciate.
luck - November 1, 2010 at 1:24am
will this work on my 3gs 5.11 baseband?
jackjohn - October 31, 2010 at 9:21pm
hi, after following the instructions, i have the cydia app on my phone but when i try to open it, it just opens and closes. please help!!
70 More Comments
Follow iClarified