Apple made a poor coding choice with the Iphone in many practical ways. The original jailbreaking of the iphone, was done through safari. The biggest flaw any operating system designer could make is to trust its users, and oh boy did Iphone trust its users... Since all apps on the Iphone were ran in root, by executing arbitrary code... simply by visiting a site, it paved access to the Iphone's entire filesystem. This is where all the modifications occur.
How to Jailbreak?
As simple as a click of a button. Visit http://blackra1n.com/ and download whatever version suits your OS. This tool does not actually use the safari exploit, but a similar exploit in order to gain root and install an app called blackra1n. Once rooted, blackra1n enables you to install three other apps, Rock, Cydia, and blacksn0w. Rock and Cydia are apt-managers for the iphone. Allowing you to install homebrew apps.
To actually jailbreak the iphone, you must make sure your on firmware 3.1.2 . You can google the iphone firmware ipsw which is made public, than run Itunes and hold down shift on the restore button in Itunes and look for your 3.1.2 firmware. After installing the firmware which takes a while, simply exit itunes than run blackra1n and you are rooted.
Few notes, if you decide to use install OpenSSH, change the password from the default alpine since a new worm exploits this, a simple password change would end it all.
With a rooted iphone you can now get support from T-mobile by unlocking it by installing blacksn0w. You can also install cracked iphone apps for free, google "Install0us".
What makes the jailbroken Iphone special however is not all that, but the Terminal. You would find the terminal exactly like ubuntu's gnome-terminal (/bin/bash shell). Now what fun can you do with the terminal?
Well goto Cydia or Rock first, and goto Terminals and install the Terminal. Next goto Security and install Nmap, Netcat, and oh... yeah... Metasploit.
Shall I say more ?
Code: Select all
ebrizzlez-iPhone:~ mobile$ su
Password:
ebrizzlez-iPhone:/var/mobile root# metasploit
-snipped-