How to Jailbreak Your iPhone 3GS Using PwnageTool [Mac]

Posted February 15, 2010 at 12:03am by iClarified | Please help us and submit a translation by clicking here | 626312 views
Portuguese (Brazil)  Swedish  Norwegian  Spanish  Dutch  

This tutorial will show you how to jailbreak your iPhone 3GS using PwnageTool for Mac. PwnageTool now supports the latest 3.1.3 firmware.

Step One
Make a folder called "Pwnage" on the desktop. In it, you will need a couple of things. PwnageTool 3.1.5, found here or here

You will also need the 3.1.3 iPhone firmware.
3.1.3 (3GS): iPhone2,1_3.1.3_7E18_Restore.ipsw

When downloading the IPSW file, it is best to download it with Firefox since Safari often auto extracts it!

Step Two
Double click to mount PwnageTool 3.1.5 then drag the PwnageTool icon into the Pwnage folder.

Then from the Pwnage folder double click to launch the PwnageTool application.

Click Ok if presented with a warning.

Step Three
Click to select Expert Mode from the top menu bar

Step Four
Click to select your iPhone. A check-mark will appear over the image of the phone.

Step Five
Click the blue arrow button to continue. You will be brought to the "Browse for IPSW" page. On my laptop, it automatically found the IPSW. If PwnageTool doesn't automatically find the ipsw file you can click Browse for IPSW....

Click to select the found IPSW file, a checkmark will appear next to it. Then click the blue arrow button to continue.

Step Six
You will then be brought to a menu with 7 choices. Click to select General then click the blue arrow button.

The General settings allows you to decide the partition size. Check Activate the phone if you are not with an official carrier then click the blue arrow button.

NOTE*: Deselect Activate if you have an iPhone legitimately activated on an official carrier.
NOTE*: You may need to increase the size of the root partition slightly. My first attempt failed at creating the IPSW until I increased the size to about 695 MB.

The Bootneuter settings are greyed out for the 3G iPhone. Click the blue arrow button.

The Cydia settings menu allows you to create custom packages so you do not have to manually install the necessary them later.

Click to select the Download packages tab. Then click the Refresh button to display all the available packages. Double clicking the package you want will download it and make it available in the Select Packages tab.

Checkmark the ones you want then Click the blue arrow button.

The Custom Packages Settings menu displays listed package settings for your custom IPSW. For know leave these settings as is. Click the blue arrow button to continue.

The Custom Logos Settings menu allows you to add your own images as boot logos. Click the Browse button to select your Boot logo and Recovery logo. If you would like to use the iClarified ones they can be found here: Boot Logo, Recovery Logo

Remember the rules for them: RGB or Grayscale format with Alpha channel and dimensions below 320x480...

Click the blue arrow button to continue.

Step Seven
You are now ready to begin the pwnage process! Click the Build button to select it then click the Blue arrow button to begin.

Step Eight
You will be asked to save your custom .ipsw file. Save it to your Pwnage folder you created on your Desktop.

Your IPSW is now being built. Please allow up to 10 minutes.

You will be asked to enter your administrator password. Do this then click the OK button.

You will be asked if your iPhone has been pwned before. If unsure click the NO button.

Step Nine
If your iPhone isn't already connected to the computer connect it now.

After delivering the payload PwnageTool will have placed your iPhone in recovery mode. Click OK to close the popup message telling you this.

iTunes will also pop-up saying it has detected an iPhone in recovery mode.

Step Ten
In iTunes, hold the Alt/Option key and click Restore.

Step Eleven
Navigate to the Pwnage folder on your desktop using the dialog window that appears. Select the custom IPSW that was created (iPhone2,1_3.1.3_7E18_Custom_Restore.ipsw) and click the Open button.

Step Twelve
iTunes will now restore the firmware on your iPhone. This can also take up to 10 minutes. Once done you will be rebooted into jailbroken iPhone OS 3.1.3!

***THANKS: Thank you to the Dev-Team for their hard work in making this jailbreak and tutorial possible!

Add Comment
nik14 - July 14, 2010 at 10:06pm
Any eta on a jailbreak for a 3GS with the new boot rom? Thanks
AKJHS - July 14, 2010 at 2:07pm
I just have the same problem as the other people. iTunes says: An unknown Error occurred (1604) ... when trying to install 3.1.3. Also My phone won\'t get in recovery mode. Please answer asap. Thanks so much for your help.
ljz - September 18, 2010 at 10:53am
mine too... tried few times, still facing the same problem when tried to retore with the firmware.. error msg (1604) fyi: iphone 3gs - 3.1.3(7E18) - 05.12.01 is there any1 can help on this?? plsss..
ljz - September 18, 2010 at 10:56am
btw, my phone is now freezing on \'connect to itune\' mode and it\'s being locked fr carrier country. thanks
AR3GS32GB - July 13, 2010 at 12:33pm
Dear All, I know that every single days you might be recieving buches of e-mails, but I will really appreciate if you can dedicate just few minutes and answer me about a very serios concern i have and it may be the same concern of others Iphone users that first (1) do not live in USA and as consequences can not open and USA itunes and secondly (2) tells you that the iphone obviously is locked. I have a 3GS iphone with firmware 3.1.3 and baseband 05.12.01, i live in the Netherlands Antilles and my account with Itues obviously is not an USA account as i am not resident of USA. I followed couple of times your instructions with Pwnage tool 3.1.5 (Mac) step by step and everything seems to be fine except when i reach the point that the Pwnage tool 3.1.5 after being created the custom firmware and ask me for a password and introduce the password now ask me also about if my Iphone has been pwnage and I answer (no), them the applicate should at that point to put the Iphone in recovery mode. the couple of times i have been running the applicate step by step the Pwnage does not put my Iphone in recovery mode and it is just freezing, no only that, i would like to know why when i created the custom firmware and try to restore through Itunes, Itunes is always giving an error message? do you may think that this is because Itunes after introduce the new policy that can be able to monitory from where are you log in to they can block any update or anything you would like to do in regards with their software? I just trying to get the logistic of this situation as i notice a lot of people in the block saying that its work, but why no with me? do you by any chance know about others that they may be getting the same situation i do? There is some extra or additional solution you can suggest me in order to active my iphone? i have it that way since almost four month and now that there is IS04 out there i would like to have my iphone working fine. I will really appreaciate your respond in this regards. Regards
Kim - August 27, 2013 at 3:47pm
What a fuckin' idiot lol. I wdulont give my personal info to my GRANDMOTHER over the internet! Cuz she'd be a zombie in that case and would probably want to come over to eat my brains And I dont want that
Anthony Rijo - June 29, 2010 at 8:21am
I have an Iphone 3GS (3.1.3/05.12.1) and i have been trying like a crazy (step by step) to do as exactly you say in your tutorial to do to jailbraek this iphone; everything goes well till i try to install the custom firmware Pwgnage did, but the Itunes always give me an error message that i can not install this firmware; I really need your help (please); I need that in despite i know you all receive a bunch of e-mails that you please kindly help me and send me an e-mail stating why of this error or if there is something else i most do in order to jailbreak my iphone.... Your prompt respond to this inquiry will be highly appreciated. Regards
tatanka - June 23, 2010 at 1:30pm
This latest version of PwnageTool can jailbreak the original iPhone (Edge/2G), iPhone 3G, iPhone 3GS(older bootrom only with baseband 04.26.08) and iPod touch running on iPhone firmware 3.1.3. The custom .ipsw firmware files created with PwnageTool can update iPhone to firmware 3.1.3 without updating its baseband so that it can be unlocked to run on any carrier SIM. Please do not use this with New Bootrom on 3.1.3, it will screw your iphone. iClarified shoutd give this warning in the begining of the tutorial.
Mile - August 27, 2013 at 6:00am
Yes. If you sync'd your iPhone w/ iTunes and then jailbreak; the next time you run iTunes and cnceont the iPhone, iTunes will recognize a new phone as ask you if you want to restore from a prior-backed up version. Select that iTunes will then restore. After finished, check your sync settings (email, bookmarks, music, apps, videos, etc) and sync again. iTunes puts everything back like normal. Cydia installed apps are not backed up/restored. Use AptBackup from the Cydia repository prior to jb'ing and last iTunes backup. Then after the iTunes restore, open Cydia, download AptBackup, and press restore. Now all your jb'd apps are loaded. Just performed this procedure twice in the last 3 days .. great success. The only thing missing is the exact placement of app icons on the SB . and passwords for email accounts are missing (probably a good thing).
394 More Comments
Follow iClarified
Amazon Video App Now Lets You Download and Watch Prime Movies and TV Shows Offline
Updated Aerial Photo Shows Construction Progress on Apple Campus 2
Apple has shared an updated aerial photo of t...
Apple Explores Producing Original Programming to Compete With Netflix, Amazon
Samsung Officially Unveils New Round 'Gear S2' and 'Gear S2 Classic' Smartwatches
Real Racing 3 Gets NASCAR Update [Video]
Electronic Arts has released a NASCAR update ...