Introduction: PWNING Your IPod Touch, Step by Step

Picture of PWNING Your IPod Touch, Step by Step

The Process of pwning your iPod will actually modify your bootloader so you can run unsigned Firmware images, there's a small risk o(none if you follow instructions) however i'm not liable for anything that happens to your iToy, this is for "educational purposes only"
That translates into allowing you to create a custom firmware, with every payload, repository or, boot image you want, and if you do that wrong you can screw up your iPod (never new of somebody) only if you don't follow instructions

- Unlike Ziphone (*cough* stolen code *cough*), iLiberty +, iDemocracy or any iProgram if you restore your iPod, you wont loose your jailbreak, (theorically ill explain that later), and you won't be in the need of re-jailbreak and start from scratch.

- You can customize your Boot Images and restore ones

-Is the Dev Team's Official jailbreak (dev team is the people who cracked 2.0, and 1..0 and unlocked the iPhone first, Zibri, Geohot they come from Dev Team)

- Is the Most Stable Jailbreak


-can easly spot a jailbroken iPhone / iPot with the logos

- Works only for firmware 1.1.4 and 2.0 (not all the betas, and haven't tried with 1.1.5)

Step 1: Get Some Soldiers

Picture of Get Some Soldiers

Since This ain't no One man army, then you need the following

- iTunes (7.5 or up 7.7)
- WinPwn 1.001 from here WinPwn
- 1.1.4 [/ Firmware] download link

- iPod Touch
-a Holy Relic

If You are in firmware 1.1.4 (turn your iPod on and then go to settings / general / about / Version it should say 1,1.4 (4A102)

Are you on 1.1.4?
-YES: go to Step 3
-NO: go to Bonus stage 2

Step 2: BONUS: Upgrade to 1.1.4

Picture of BONUS: Upgrade to 1.1.4

- Open iTunes and connect your iPod
- then click + shift on the restore button
- a window will popup look for your 1.1.4 you've downloaded
- open it and let iTunes do the work for you
-Light up a candle for your Holy Relic
- when you're asked if you want to restore to a backup simply click new iPod and give it a name, but DON'T add Music.

Step 3: IPwning: Modyfing the Bootloader

Picture of IPwning: Modyfing the Bootloader

This is the most important step, if your iPod gets bricked (never knew of one fully bricked) it's gonna happen here

Some Safety tips.
- DO NOT disconnect your iPod in the middle of the process, wait until it says that it has been Pwned

- Be sure the firmware you Downloaded is iPod, not iPhone (a way to Brick it) and that it end with ".ipsw"

Now onto The Program:

Your iPod should be running 1.1.4 and connected
1.-Open Winpwn
2.-Click .ipsw Builder
3.- Browse to your 1.1.4 copy
4.- let it work
5.- take a deep breathe and make sure the candle is still lighted
6.- Click iPwner
NOTE: do not freak, it's normal that your iPod turns off, and on, and that white text flashes trough the screen and DO NOT DISCONECT your iPod unless the white box says it!
7.- it Will enter recovery mode
8.- its flashing the boot loader
9.-Congrats You're now a hacker kid, but remember iPod Hacking ain't like dusting crops boy!

Step 4: .ipsw Builder

Picture of .ipsw Builder

Now let's start the fun, and make our own .ipsw

1.- click .ipsw Builder
2.- a new window will popup (fig. 2)
3.- Select your payloads , here you can add what ever you want, this is my flavor

Basic Payloads: Recomended
Installer instincitv Shuffle
Open SSH Smb Preferences (NOT OLD)
Bsd Subsystem Tap Tap Revolution
Boss Tool Parking Lot
Jiggy Runtime iPhysics
all Sources
4.-Do you Want Custom Images?
-Switch to the Custom Images Tab
-Select the "Use Custom images" option
-Select he Image for Boot logo, and Restore Logo. They can be obtained from internet or HD
- Turn Off the Candle, we don't want to burn down the house

5.- Now Hit Build and let the Pc decide the name, and save it in somewhere you will remeber ej. Deskopt

Step 5: Final Restoring

Picture of Final Restoring

now you got a Custom .ipsw file, and a Pwned iPod, so we'll just put them in a bowl and stir well.

1.- Open iTunes and plug your iToy
2.- Make a Shift + click hit on the Restore Button
3.-open your custom .ipsw
4.- Let it Restore (can take a while)
5.-Prevent Keyboard Problems
-Open up contacts
-add a new contact
-Type randomly for 10 seconds
-Cancel and tap cancel again
NOTE: if your iPod freezes just restart it (home button + sleep/wake till it turns off then turn it again)
6.- Load your iPod with music and your grandma's last vacation in tahiti pics and videos
7.-open Bosstool in the Springboard (the home)
8.-click free disk space, relocate fonts and applications (fig. 2)
9.- head to installer and start downloading stuff

Step 6: ENCORE

Picture of ENCORE

if you experience any problem with your iPod, coming from an app, or anything follow this simple teps

1.- Start again from step 5
2.- You're done

NOTE: that's why i said that you won't loose youre jailbreak
Hope this helps people, if you got any problems with your ipod there are gret sites you can go to like
iPodtouchfans (i'm MrCrawley in there)

just remember, before starting a new thread SEARCH, if i can help you don't hesitate in leaving a comment and as soon as i'm able ill answer.

COMING SOON: WinPwn 2.0 n00b Proof guide to jailbreaking 2.0 firmware


peanutbutterman (author)2010-02-05

is it possable to jailbreak my software version 3.1.3 i cant find anything that can help but i diddnt look verry hard:(

ax275 (author)peanutbutterman2010-12-27

Find a wifi spot and go to and it will jailbreak wirelessly...

ihordyky (author)peanutbutterman2010-05-21

NOooooooooo do not use blackra1n it bricks it up
the only way to jailbreak 3.1.3 is spirit

Gage987 (author)2009-12-09


conradev (author)2009-02-16

Update your ipod touch to the NEWEST FIRMWARE AND RUN QUICKPWN. IT IS AS EASY AS THAT!!!!!!!!!

yes, it easy as that, but when i made this instructable 2.0 were only developer betas, so this was the safest way of doing it.

cruisingkitty (author)2008-09-17

How soon will you be able to pwn version 2.0?

actually there are 2 ways of doing it (2.0.X) quickPwn (no restore needed iLiberty like) and the winPwn 2.5 wich follows the same process as this instructable, if you like i might make an instructable for quickpwn waddaya say?

Now that I actually Have an Ipod Touch, (second gen) that would be flipping sweet dude! Rock on!

hey now you can! just look for redsn0w! (it have some cons, like it can't be rebooted without going into jailbreak-less mode *it's semitethered*)

wizzim (author)phant0m_sp00f3ra2009-01-15

I tried quickPwn and it had easy easy installation. The thing i didnt like was the installer, it was really hard to use. =(

AnarchistAsian (author)2008-11-30

why are your apps all crooked??

In the pic? cause i took the screenshot in the moment when all the icons wiggle so you can rearranger in any colour u like :P

ha ha, cool. wow, iphones can take screen shots?

Yep, you just press the two buttons at the same time :P it's implemented by apple from firmware 2.0 till date

OOOHHHH soon it'll be just like a computer... hmm, could you run linux on it?

Yes, last week was finnaly ported the 2.6 kernel, althought there are still missing the drivers for the audio wifi,. There's no write support for the NAnd but the kernel is there. is a plain terminal, in a while we'll see a nice GUI and maybe Ubuntu mobile, but theyre trying to port android to it (wich is a linux based OS to)

when that happens i am SO getting an itouch. :D

I'm just waiting for the 2g Jailbreak, to buy one. Last week sold mine 32gb 1g so im kinda sad but it's effing cooL!

WHAT??? why would you sell it just to upgrade? you should sell it later...

no i didn't sell to upgrade. I bought it for 500$ in mexico, and a guy offered me about 4500 after like 10 months so it was a great deal, so i sayed yes and i was thinking bout getting an Xbox 360 (elite in here is about 550$) so it was a good deal. But i got no itme to play Xbox so i0m considering geting a 2g. I'm a fanboy, but not so harcore :P

$500??? mexico??? 450? i know you didn't mean 4500

That's weird, the most iphone ever cost was $400

nop mate, first iPhone wasn't selled in mexico, and right now Telcel is selling Pay-as-you-go iPhones for 800(8g) and 1000 (16g) and iPod touch 32g runs for 610 dollars, and price for 32g 1gen was 750 dollars at the applestores, so i got it from mexican ebay partner

oh, mexican ebay partner... but only atnt sells them...

Nop, here in mexico there's no At&T; so the selected carrier is telcel. and the mexican partner is called mercadolibre its powered by eBay.

OH, you're talking about mexico... it was cheaper i america, i fink...

LOL sorry i never said i was in mexico, and yeah its cheaper in USA :S right now an iPod touch 2g is running for about 620 dollars :s its kind of making me anger but anyway waht can i do about it¿

ha ha iphone 3g costs 200 dollars here...

yeah i know that totally sucks for us but anyway i just got a 17" macbook Pro with the cash of my iPod so it was worth (got it for about 1800 dollars in an offer here at office max) :D

ha ha, ok... here, you can get one for the cheapest at 999... you should try ebay... it can still even be new, but at a better price...

yep, but with the dollar transaction it was cheaper than the 2,799 dollard that the Steveness wants t me to shell in apple store USA :P


OriginalMacMan (author)2008-10-08

You can just take a picture of the screen by pressing the sleep and menu button real quick or just hold your finger on an image while on line to save it!!!

yep, on the 2.x.x Firmware you can do that, apple throw a bone at us LOL

TOMBenterprise (author)2008-09-22

I have version 1.15, does anyone know of any method to jailbreak it?

well if you download the winpwn 2.5 it has a nice GUI, and it goes from 1.1.4.-2.0.2 i suggest getting your iTy in DFU and then shift click to a copy of 1.1.4 cause 1.1.5 has compatibility problems with summerboard, or get a 2.1 copy and update! also iLiberty works (Ziphone too, but it will hurt your iPod)

Ward_Nox (author)2008-07-25

do know that the title implys this is a way to break your iPod i think u meant PMPING your ipod touch

no, the process of modifing the bootloader is called PWNING it, cause the program is called PWNage Tool. and if you mean "to break" as a bricking way, it's not if you follow the instructions and don't disconect the iPod from the pwnage tool until it's done, and yeah it might also be a way of pmping the iPot

look up pwn in the urban dictionary it will explain my confusion

About This Instructable




Bio: This is something about myself
More by phant0m_sp00f3ra:PWNING your iPod Touch, step by step
Add instructable to: