How to Unlock Your iPhone With PwnageTool (Mac)

Posted April 3, 2008 at 9:29am by iClarified | Please help us and submit a translation by clicking here | 212283 views

These are detailed instructions on how to unlock your iPhone using PwnageTool for Mac OS X.

Step One
Download the PwnageTool from here to your desktop.

Step Two
Double click the downloaded file( to extract PwnageTool.

Step Three
Double click PwnageTool to launch the application from your Desktop.

Step Four
If prompted that PwnageTool is an application that was downloaded from the internet click the Open button.

Step Five
If you would like PwntageTool to automatically check for update then click the Yes button.

Step Six
Click the Browse .ipsw button in PwnageTool.

Step Seven
A window will appear in which you should choose the .ipsw file for the firmware you would like to unlock then click the Open button.

If you do not have the firmware .ipsw file you can find its download location here.

Step Eight
Click the iPwner button which will now be activated!

Step Nine
You will be asked to connect your iPhone and put it into recovery mode.

The easiest way to do this is to hold down your Sleep/Wake button for 3 seconds. The power slider will appear. Slide this to the right to power off your iPhone. Then hold down the Home button as you connect the iPhone to the dock. After a few seconds the recovery screen will appear. (iTunes logo and cable).

Step Ten
PwnageTool will then let you know your phone is being pwned and to please wait for a reboot.

Step Eleven
Once you phone has rebooted click the IPSW Builder button in PwnageTool.

Step Twelve
From the menu that appears select:
- Enable baseband update
- Neuter bootloader
- Unlock baseband
- Activate phone

Then click the OK button.

Step Thirteen

IPSW Builder will now ask you for the bootloader images.

Download bootloaders.rar from here onto your Desktop. Double click this to extract its contents.

Mirrors: Filebeam, MediaFire, Direct

Click the browse button for the bootloader 3.9 image and select BL-39.bin file from your Desktop.

Click the browse button for the bootloader 4.6 image and select BL-46.bin file from your Desktop.

Finally click the OK button.

Step Fourteen
IPSW will ask you to select where to save the custom ipsw file. Click the Save button.

Step Fifteen
IPSW Builder will then ask you to login using your administrator username and password. Do this then click the OK button.

Step Sixteen
PwnageTool will then show you that IPSW Builder has completed successfully.

Step Seventeen
Launch iTunes using its icon in the dock if its not already open.

Step Eighteen
Select your iPhone from the list on the left. Hold down the Option and click the Restore button.

Step Nineteen
Select the custom firmware file (iPhone1,1_1.1.4_4A102_Custom_Restore.ipsw) we just created and click the Open button.

Step Twenty
iTunes will then restore to our new custom firmware.

Step Twenty One
Once iTunes restore is complete your iPhone will reboot and autolaunch BootNeuter. BootNeuter will then proceed to Flash Bootloader and Flash Baseband. Do not interrupt this process. Once BootNeuter is done it will reboot the iPhone on its own and your Pwnage process will be complete!

NOTE***: After pwning your iPhone it is highly recommended that you install BSD Subsystem and SSH.

THANKS***: Make sure to thank asap18, bgm, Bugout, bushing, chris, dinopio, drudge, Fred_, ghost_000, gray, kroo, MuscleNerd, NerveGas, netkas, np101137, planetbeing, pr3d4t0r, pumpkin, pytey, roxfan, sam, Turbo, w___, wizdaz, Zf, Sam and others. These guys have put alot of hard work into making this a reality.

You can send donations to using paypal.

Add Comment
sdgxdwe - August 22, 2013 at 4:03am Must also be seen that the medical trouble lifting of the ills of institutional exposure. Hospitals and patients,
ReutM - August 3, 2013 at 6:43pm
** Great site for permanent factory unlocks - sim free your mobile phone. It cost me only 7 usd!
CoachOutlet - October 17, 2012 at 12:35pm Coach Outlet Coach Outlet Online Coach Oulet Coach Oulet Online Coach Factory Outlet Coach Factory Online Coach Outlet Coach Factory Outlet
R - June 20, 2009 at 2:01am
If your getting 1600 error try creating a new custom firmware with pwnage and\\or change your usb cable. Worked for me.
Daniel - May 2, 2009 at 9:10am
Go to iPwner it and it doesnt detect my iPhone in restore mode. Tryed skipping that step, doing it on QuickPwn to see what would happen and then build an IPSW, doesnt work, the firware is not compatible or there is an error. Try using the newest PwnageTool [not used in this tutorial] and whenver i select the right ipsw, even the one it gave me to download and use, says its the wrong bundle or isnt a recognized ISPW.
88 More Comments
Follow iClarified
New Apple TV to Support Bluetooth Gaming Controllers, Faster Wi-Fi, More
The new Apple TV will reportedly feature a re...
Apple and Cisco Announce Partnership to Deliver 'Fast Lane' for iOS Enterprise Users
The Mac Pro Can Run Six 4K Monitors at 60Hz With Just the Built-In Graphics Cards [Video]
Apple Releases OS X 10.11 El Capitan Beta 8 to Developers
Apple has released OS X 10.11 El Capitan beta...
Android Wear Now Officially Works With iPhone
Google has announced the release of Android W...