How to jailbreak iPhone 3GS 3.1 firmware using Pwnage 3.1.3 for Mac

Note: This tutorial is for iPhone 3GS and MAC users only. Windows users subscribe to my blog or follow me on Twitter, so that I can give you a heads up when the windows jailbreak tool(Redsn0w) for 3.1 is out!

Let’s find out under what conditions this tutorial will work:

• If you have an iPhone 3GS 3.0/3.0.1 which is already jailbroken with either redsn0w or pwnage then you can use this tutorial.
• If you have an iPhone 3GS running 3.1 firmware and have saved SHSH to Cydia , then you can downgrade to 3.0. Once you are done downgrading, you can use the tutorial below.
• If you have an iPhone 3GS running 3.1 firmware but didn’t save SHSH to Cydia, then you CANNOT use this tutorial as it won’t work.

.

(In a nutshell, this tutorial is for iPhone 3GS users who are on 3.0 or 3.0.1 firmware. If you updated to 3.1 without saving your SHSH  to Cydia then this Pwnage 3.1.3 release is useless for you)

Here are the steps to jailbreak iPhone 3GS 3.1 firmware using Pwnage 3.1.3:

1) Create a folder named Pwnage on your desktop. In that folder download the following files

i) Pwnage 3.1.3: Download it from here – Link 1 or Link 2
ii) iPhone 3GS 3.1 firmware: Download it from here – Link

(Please use firefox instead of safari if not it will be downloaded as a zip file)

2) Mount PwnageTool 3.1 by double clicking PwnageTool_3.1.dmg and drag the PwnageTool icon that opens up, into the Pwnage folder.Then from the Pwnage folder double-click PwnageTool application.

3) Select “Expert Mode” from the top menu bar.

4) Select your iPhone (In this case iPhone 3GS) and click the blue button to continue.

5) Now browse for the IPSW file. Remember you downloaded it in Pwnage folder. (In some cases it may automatically be found).
Click on the IPSW file, if you do it right, a green check mark will appear next to it. Now click the blue button to continue.

6) On the following screen you will see 7 different options.

Inside General settings DO NOT CHECK ‘Activate the phone’ option. Repeat: Since you are using an iPhone 3GS, irrespective of whether you are on an official carrier or not, you always need to make sure that the option is UNCHECKED.
Increase the size of the root partition slightly. To about 695 MB. Then click blue button.

Skip the Bootneuter settings by just clicking the blue button.

You will then be taken to Cydia settings where you can create custom packages so you don’t have to manually install them later.

Select the Download packages tab. Then click the Refresh button to display all the available packages. Double click the package that you want to download in order to make it available in the Select Packages list.

In the Select Packages tab, check the packages you want and click the blue arrow button.

On the following Custom Packages Settings screen. Leave all the settings as it is and click the blue arrow button.

You will then reach the boot logo settings. Just skip this step and click the blue button.

7) On the following screen click the “build” button to start the pwnage process (i.e build your own IPSW file).

8 ) Save the custom firmware(IPSW file) in Pwnage folder on the desktop (which you created in step 1) and wait for about 15 mins for it to be built.

9) Enter your administrator password.

10) Whether or not your iPhone has been pwned before just select NO on the next screen.

11) Keep your iPhone connected to your mac and switch it off, when indicated.

12) Now the part where you have to pay rapt attention and follow directions to enter DFU mode.

i) Hold the home and power buttons for 10 seconds.

ii)Release the power button and hold the home button for 10 seconds.

On doing this you will get a notification that reads successfully entered DFU (recovery) mode.

13) In iTunes, hold the Alt/Option key and click restore simultaneously. A new window will open where you can select the CUSTOM firmware that you built in step 7.

14) Browse to the Pwnage folder on your desktop.Select iPhone2,1_3.1_7C144_Custom_Restore.ipsw file and click the choose button. (REMEMBER: you have to choose CUSTOM IPSW in this step)

15) iTunes will then restore your iPhone 3GS using the custom firmware in about 15 minutes.

16) You will then get the option of setting up your iPhone either as a new phone or restoring from backup.

17) Now just restart your iPhone and you will find cydia on your springboard. Hurray you are done

NOTE: Once you are done jailbreaking, you can unlock your iPhone 3.1 using ultrasn0w to use any carrier! Here is the tutorial – Link .

Tagged as: 3.1, 3gs, iPhone, jailbreak