关于iPhone的部分有用的链接

寂夜清风

著名的Dev的站(会及时更新很多信息)

http://iphone-dev.com/
  z3 Z3 C9 t6 W8 c
. x' n( u7 @; c  F- v  w) H! f- @  Z主要是关于破解的相关的讨论
http://www.hackint0sh.org/forum/
! v, a5 n% V* A# X
关于Dev小组的很多信息会在这里发布http://www.hackint0sh.org/forum/forumdisplay.php?f=129

* T- K/ n  o+ C2 p& C
Dev的正式信息整理站
( }! Y; \' u5 I. phttp://iphone.fiveforty.net/wiki/index.php/Main_Page

一个关于破解的站
http://www.iphone-hacks.com

一个综合站..(非官方APPLE站)

- k2 z9 O+ y& `$ B! v$ u! dhttp://www.tuaw.com/
# q( A1 V5 x# j8 [
7 B( k" {' _4 M1 y大陆的比较火的论坛
http://www.weiphone.com/

7 Y7 V# v  \7 y# v' R$ g( J& {http://bbs.iphone.com.cn/
0 o; ~' ^& W# |
" ~% W# \. M' u- u8 F2 ?香港的论坛
http://www.iphone.org.hk/

  Z1 Y3 h6 t6 }7 C- U- _6 g台湾的一个论坛
3 B6 |: t2 Z6 p( Ghttp://iphone.robofun.net/

xyz1937

木有机器哇！

寂夜清风

http://forums.macrumors.com/showthread.php?p=4308881
" R0 V6 h, h. ~0 M

                           Ipod Touch Full JailBreak guide for WINDOWS                        
: t- i: Y9 g2 K- v& G$ [  H                                                                                                                                THIS IS FOR WINDOWS!
Hey all, I take NO CREDIT for this guide, i followed it on the #itouch irc channel from the amazing PlanetBeing!
) j2 q9 e% S/ g4 a
/ T4 u7 n  i0 V) pEnjoy!

--

: L6 b8 e9 U3 Y; I* [7 l8 |, }RESTORE IPOD FIRST then download iphuc http://rapidshare.com/files/61742428/iphuc.zip
-------------------
5 s/ e' ]4 S+ K: S% x  ]1. Load http://jailbreak.toc2rta.com on iPod

6 G6 `7 j4 }- `7 j. Z2. Exit iTunes, and kill ituneshelper.exe process
5 C; V2 b2 Y4 A
3. Extract iPhuc to directory on computer
8 S% }3 S( X, T% {- e# J
4. Copy iTunesMobileDevice.dll from C:\Program Files\Common Files\Apple\Mobile Device Support\bin to the same folder as iPhuc.exe

. c( f5 N2 r) d. Q- W+ d% I7 t5. Copy readline5.dll from

  O; k' w0 y: q2 h3 h. p* S& b0 Shttp://gnuwin32.sourceforge.net/down...ne-bin-zip.php to the same folder as iPhuc.exe
2 ]3 g$ S& ]4 U' s4 y
6. Run iPhuc.exe

7. Plug in your iPod
$ U$ E+ F  ~6 Z# l( T4 c2 F1 ^5 T( a
8. In iPhuc type "getfile /dev/rdisk0s1 rdisk0s1 314572800", this will take a while as it's a 300mb file
. `9 X5 v# p% i! J
9. Make a backup copy of rdisk0s1 that you just downloaded.
7 H0 y1 F( _* S+ T+ L
10. You now need to do some hex editing. The tool I use for doing this is HxD (http://www.mh-nexus.de/hxd/). Open rdisk0s1 with your hex editor.

+ _; H) r( e4 I# F) M: K11. Search for the ASCII string "noexec" in the file.

2 z) j4 E: \! d1 l7 M9 ~The second hit should look like the /etc/fstab file: /dev/disk0s1 / hfs ro 0 1
8 b6 I. q1 V- a1 v4 x* I5 n
6 y# _: F& s( g/dev/disk0s2 /private/var hfs rw,noexec 0 2

8 Q9 Z# ~7 c% OOnly, of course, hex editors will just display newlines as a '.'

character or similar. This series of characters are often found at

0xF8F9000-0xF8F9045. They will have the following character codes:

2F 64 65 76 2F 64 69 73 6B 30 73 31 20 2F 20 68 66 73 20 72 6F 20 30 20

31 0A 2F 64 65 76 2F 64 69 73 6B 30 73 32 20 2F 70 72 69 76 61 74 65 2F

) J7 W6 [+ Y& N' }' Q8 C4 g  E76 61 72 20 68 66 73 20 72 77 2C 6E 6F 65 78 65 63 20 30 20 32 0A
* x8 ^+ m4 Q" |5 @( _6 c
" J( I( r4 S6 s8 s; y% K(In "find" make sure it's set to find hex values)

- O, J7 q, B: {12. Change these to /dev/disk0s1 / hfs rw 0 1 /dev/disk0s2 /private/var
1 k2 B! Z0 s' p- I  N/ t' Y
  e# }8 x$ Q% _0 `9 p- `& ?9 H! [hfs rw 0 2
# L6 x2 @' l! `& U9 p. H
With newlines padding the end of the string so it ends up being exactly the same size as the old /etc/fstab. The new series of characters ought to be:
9 q+ G6 ~" w  Z3 h
! ^: k# z- O, ]& R5 s2F 64 65 76 2F 64 69 73 6B 30 73 31 20 2F 20 68 66 73 20 72 77 20 30 20
7 a; Z: c3 P4 ]: v# \, G
31 0A 2F 64 65 76 2F 64 69 73 6B 30 73 32 20 2F 70 72 69 76 61 74 65 2F
2 M1 @9 i  \: ]* ~6 g
5 k/ s3 Q* B  G7 G7 G" p76 61 72 20 68 66 73 20 72 77 20 30 20 32 0A 0A 0A 0A 0A 0A 0A 0A

% e: e8 Z6 O" A8 A* E13. Save your changes. I'm assuming that you're replacing the old rdisk0s1 file on your hard drive with this modified version. As a final safety check, make sure the file sizes of your modified version and your backup versions are exactly the same, down to the last byte.

14. Upload the modified rdisk0s1 image to your iPod. In iPhuc, type
# u$ i2 B6 T6 s6 e7 E
) n$ g+ @# S1 f- Q3 U, _4 C. U7 s"putfile rdisk0s1 /dev/rdisk0s1".
1 i+ m* a* T+ X3 ^. H/ W0 m
15. Exit iPhuc and reboot your iPod
7 [% b, e7 ^$ G+ j  \/ N' u
% k2 \! c/ ~$ O16. Open iPhuc again so it connects to your freshly rebooted iPod. As a
8 k: E: [8 l: I* Z8 p$ Z/ T* ?
2 [/ M+ a; v8 R/ H& w( Tcheck, type "getfile /etc/fstab". This will download fstab to iPhuc's

; h' M3 g0 Z* sdirectory. Open it up with your favorite text editor and confirm that
% K( e8 ], U9 n  S: I
the changes we have made are still there. If they are, congratulations.

6 ]# }3 s2 L3 T# A7 xYou have a jailbroken iPod. Sort of.
$ l, o- Q& ^. }# [
8 p0 o4 t: p  k5 [' W9 V17. We now need to install ssh and associated tools. This is all now old

' T. `+ @: E/ s9 S6 hterritory, but unfortunately, everything is either "one-click" or
  s& t' o6 P( r
designed for Macs. Thus we need to do some sweating here. Download

" l. }& n: g1 C. b" L7 Fhttp://iphone.natetrue.com/dropbearkey.exe. You will also need
: H- z$ \. f) J7 i
: \" F9 @* D% S# P3 j# @3 w  |! Ocygwin1.dll from

http://www.dll-files.com/dllindex/dl....shtml?cygwin1.
  W  z* Z+ A( _# s, U# C& \) c9 p
+ B, n5 |  H0 p0 m6 Z: z18. Open CMD and do:

dropbearkey -t rsa -f dropbear_rsa_host_key
dropbearkey -t dss -f dropbear_dss_host_key
1 ~' i. }3 Y: j( Y- g2 r5 w" R# C, O
4 Q+ s0 f9 e& }3 c5 WYou should now have two files in that directory, dropbear_rsa_host_key

: |1 I, m# Y  x$ Y- e1 V, ^# z, P6 sand dropbear_dss_host_key. Copy or move these into your iPhuc directory.
+ y$ N' R- v0 }( w# E) Q6 S
19. Download and extract http://iphone.natetrue.com/BSD_Base-2.0.tar.gz
4 A9 X3 f1 z/ f" p7 l* u  c" S+ o
# d) i' q0 |# x' z( a2 ginto your iPhuc directory.
, @) Q3 J, B2 e1 I- g, y
20. Download and extract

http://www.abigato.com/iphone-ssh-kit-vr1.tar.bz2 into your iPhuc
) W" d8 `7 p8 Z5 E
directory. Make sure dropbear, fd6, au.asn.ucc.matt.dropbear.plist,

glob6, goto, osh and sh6 are in the same directory as iPhuc.exe. Move
7 T2 v. z$ G0 t1 p; u
them there if you have to.
. M! U% _9 m6 q& }" c
4 K- ]1 \; S* U- l21. Open up iPhuc and type in "mkdir /etc/dropbear",

22. "cd /etc/dropbear".

9 e$ @  ?, }* U# t, B) X/ H---
/ V; N6 O  d9 P4 K) D+ O1 WDIRECTORIES ARE
/etc/dropbear/dropbear_rsa_host_key,

/etc/dropbear/dropbear_dss_host_key, /bin/chmod, /bin/sh and

/usr/bin/dropbear
( {2 a$ L8 i  Q  [9 Z. N---

+ ^( l) h$ `7 e23. "putfile dropbear_rsa_host_key"
2 D. N( n7 ?( [* h
9 D& D) \/ J2 |) k* K1 K, N24. "putfile dropbear_dss_host_key"

25. "cd /bin"

26. "putfile chmod"

27. Rename sh6 in your iPhuc directory to sh, then "putfile sh" in
& p2 B+ O4 O  U: f  W$ i2 n2 h6 w- y
iPhuc.

8 p  k+ `; C# j) ~$ g28. "cd /usr/bin"
( b. v! h9 @5 J) S6 D
$ w" i4 x: L0 Q- S0 q, k; F) l0 `29. "putfile dropbear"

30. Make sure /etc/dropbear/dropbear_rsa_host_key,
4 ?! N( h0 r  f4 m) t
/etc/dropbear/dropbear_dss_host_key, /bin/chmod, /bin/sh and
: A. C& I: i$ e9 Z' _
/usr/bin/dropbear now exist on your iPod with iPhuc.
1 O. N( o; k6 F* ^: G! q3 s
31. "cd /usr/sbin"
/ j! J/ R0 t$ ?9 {) O5 t) M
  M) U+ n* J7 r32. "getfile update"
! j! \" H8 x$ a& ~$ C' ^7 G
  A/ ^& h9 h* R& t1 v33. In Windows Explorer, rename "update", which you just downloaded, to

"update.orig".

& ]. w1 o& d5 Z) g1 d34. Rename "chmod" in the iPhuc folder to "update".
, i' K, F& d; w$ Y2 V  o, d
6 r0 o, [9 d1 i5 y! \0 b3 x! V35. In iPhuc, "putfile update", so you're replacing /usr/sbin/update
8 {6 S! [. O, |2 W& W  }9 ~
with chmod.
! x/ ^6 B( ~- a) v: P
& H- H0 v5 l5 z7 ~7 k36. "cd /System/Library/LaunchDaemons/"

+ C( D& v4 R! ]# g37. "getfile com.apple.update.plist"

/ f" {4 Y# p; K! [: d* {8 ?38. Open com.apple.update.plist in a text editor

Right after it says <string>/usr/sbin/update</string> add:
  O- a5 D/ ]$ a
2 q- @2 n* y6 z0 L! o, x<string>555</string>
/ \7 k3 X4 c3 B, x<string>/bin/chmod</string>
4 P* B# M3 f4 x# N  p  Z' \<string>/bin/sh</string>
+ ^9 X3 b6 }' X; n<string>/usr/bin/dropbear</string>
3 @% f/ c/ O  h
! @: T2 }$ \$ L3 d3 @# n$ H: \39. Save the file. Upload the modified version with "putfile

6 Q; f5 q/ F% x! U9 vcom.apple.update.plist"

40. Also, "putfile au.asn.ucc.matt.dropbear.plist"
1 _. f5 T6 D4 Y8 I2 U1 h* `
  U) ~  R2 Z" }4 M41. Reboot the iPod twice. The first reboot should set the required
/ a0 t  V* G0 s4 R% S6 p
permissions. The second should start the ssh server (since proper

permissions are now set). And close iPhuc.
! O" _9 `" u. |3 l6 {
. P4 B# U$ p( A8 p( ^9 F42. Theoretically, SSH should be working now. Find out the IP of your

- }9 p' f+ l" }iPod in the iPod's wireless settings.
% k) U, J% y% ^; d. k& T8 D
43. Try to ssh to it with Putty

; Y7 O9 d" P/ D* R, z; g; a& H(http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html).
5 A5 V* z2 D7 l  _: _3 f
Username root, password alpine.
  e( f8 T/ m- r( W5 }
3 U9 G2 M* M) @2 [) m- a* w---
8 D$ E; T: l1 cSo, okay, now we need to get sftp running, do some clean-up and then I
! u5 V4 N+ T8 ^- d' r7 a
* `" W3 W' s* y: M5 C7 athink we can install Installer.app and be good.
) J' Y+ _+ G5 g/ k8 r5 \$ B/ d
Download WinSCP (http://winscp.net/download/winscp404setup.exe)
---

% D1 A* K' A0 N3 `( H44. Download http://apps.iphonexe.com/24940.zip. You will need
* g/ U" z' f/ B/ H
7 i# C( f# Z- @  G6 N& l/libexec/sftp-server, /usr/bin/scp and /usr/lib/libarmfp.dylib from that

archive. Extract them all to your iPhuc folder.
& S. G0 F4 f, M  n
* i# u9 Q, K9 g/ n& n/ i: k45. Using iPhuc's putfile capability, put sftp-server in /usr/libexec/,
/ s  U% `- ^6 e, i- W" w
& f' g& }# ^! x5 V. ^' \4 Gput scp in /usr/bin/, and put libarmfp.dylib in /usr/lib/.

4 b9 t( D- }  J; K  A! j6 d! q2 q46. Remember that BSD_Base folder you extracted? We need to raid it for

7 A) k) J( W0 l8 gsome commands. You will need /bin/ls, /bin/mv, /bin/pwd, and /bin/csh.

2 G( O. H; G3 H! o7 j/ k1 B+ `+ NCopy those to your iPhuc directory.

47. In iPhuc:
9 |7 c" M* T. P& A  d
0 T, N7 Z/ r& S5 B9 D* M* v, Lcd /bin
putfile ls
( l5 ?; k" s# w6 G0 |9 ]# ]% y+ Dputfile mv
& x$ \7 g, \5 X- ]putfile pwd
putfile csh
) y' J% X# V' X$ ^2 }
48. SSH into your iPod. What we now need to do is chmod them all
( g- v* Z3 }* V* [: X- q: ]3 p7 A
0 x. Y7 ?6 J1 [* W$ aexecutable.

3 J% f7 G. c, E" v; o49. In SSH, "/bin/chmod 555 /bin/ls"
# @1 s: ]: g4 x, |3 v% W50. "/bin/chmod 555 /bin/mv"
51. "/bin/chmod 555 /bin/pwd"
52. "/bin/chmod 555 /bin/csh"
53. "/bin/chmod 555 /usr/bin/scp"
54. "/bin/chmod 555 /usr/libexec/sftp-server"
/ E' W" @0 ~8 J# z# F# P
1 m8 H# |: u$ v; s( pTheoretically, sftp should work now, yes.
( t! I+ j* G$ H- h
5 o0 ]* k) [& ?% H4 e1 }0 }55. Also upload glob6 to "/bin" with iPhuc and in SSH, "/bin/chmod 555
0 Q) O% {( V# O8 ?8 ]0 V
, B) Y& ~; ?8 d8 T( M/bin/glob6".
" y! `1 O0 W6 U+ Q& T2 B% U
56. Type "/bin/csh" to test out this shell (in SSH). This has advantages

; p/ e) ~/ u2 K! _" |) A' z$ T2 Tof not requiring you to type in the full path of every executable in the

future.
2 m8 u$ P5 Q( w9 Q$ q2 T
57. In SSH "cd /var/root".

& z* \& }$ F2 T) _; q+ c0 N8 g58. Type ls. You should have a Library, Mediaold, and Media directory.
6 u4 K3 Q$ p! Z- n
59. "mv Media Media_sym"

+ O+ y; c6 r) ~9 V60. "mv Mediaold Media"
% \9 `6 Y" G/ `' z, g
. ~2 x$ e$ w9 o' V61. Reboot your iPod and check your iPod in iTunes.
1 I2 }9 [% E* K' i9 [* S
* P6 S/ w: A: H; I) i* D5 y---
On to installing AppTap
( B; D( w6 F) l: h8 E---
9 Q% m1 V& c. s0 X
62. Download and install 7-zip (http://www.7-zip.org/). We need it to

1 F% ~/ f) ?* L- Hcrack open the dumb Installer.app Nullsoft installer.

4 g' x: ?( T% r6 p& F* q* D63. Download the Windows installer for Installer.app at
! m" ~% t& j" w
http://www.nullriver.com/~adam/AppTappInstaller.exe
: G" D; ^2 a# ^& p3 |, U: p
64. Use 7-zip to open AppTappInstaller.exe and extract the Installer.app

* U: V. A. O6 o, o& ufolder from it.
8 z4 E8 N9 s8 v, l( Q
2 y4 j4 f( s* n5 B& I3 d/ O% ^65. Use SFTP to upload Installer.App into /Applications on your iPod.

66. In SSH, type "/bin/chmod -Rf +x /Applications/"

, N3 c/ x, i* L5 W3 [- Y# c. v67. Slide to unlock your iPod then in SSH type
- j3 s8 U( _/ A
* N) c" P. a& s# i/Applications/Installer.app/Installer and hit return to launch
/ X2 D. o9 t7 e* M! G5 {: x/ z
Installer.
/ F9 p$ k! I: f& A' K
68. After AppTapp opens, press control+c in SSH to close it
+ |0 j" ^/ p) q; G
69. Open Safari on the iPod and navigate to

! v7 t+ U+ s/ I8 h0 Y% I9 Jhttp://conceitedsoftware.com/iphone/beta. Please make sure while you're

doing this that the hacked TIFF image isn't loaded again. So if starts
* z# w, p* _2 W0 u
loading, hit the X.
5 W* T5 s7 v2 s; {3 a9 `( u
, s% P: r$ ~  Y( ?& r$ K70. Tap yes to add it to Installer

71. Back in ssh, type "/Applications/Installer.app/Installer" and hit

  z% y. U" {2 }7 }# y8 H* ]return to launch Installer again.

; `. D* X8 c' N" W) g72. Install the Community Sources package.

73. Install Trip1PogoStick located under the "System" category to

enable scrolling and applications.

3 c9 V, y4 x% v74. Restart the iPod. You should be done.

( @  `( ?$ E0 z7 w- \
$ O) u4 m9 g" i. }4 q; \3 R

Here are the full links:
+ O) @/ _: Z1 t4 ~
5 [* `( h9 t' L2 H, Hreadline5.dll
http://gpsim.sourceforge.net/gpsimWi...061112-bin.zip
. ?8 k" \7 |' ?8 q/ g" a$ K{http://gpsim.sourceforge.net/gps ... .2-20061112-bin.zip}

cygwin1.dll
http://www.dll-files.com/dllindex/dl....shtml?cygwin1
{http://www.dll-files.com/dllindex/dll-files.shtml?cygwin1}

8 C# w8 k4 f" N. L/ P' {5 u+ {9 pPutty:
5 W$ q$ i5 o1 c' I2 a* [, [http://www.chiark.greenend.org.uk/~s.../download.html
{http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html}