Unofficial 1.1.2 Jailbreak Instructions

Can't wait to update your iPhone but need your third party apps to be there when you're done? You're in luck! We've managed to adapt our old 1.1.1 jailbreak instructions to 1.1.2. In addition, we've managed to clean up quite a few steps; it's much simpler. While this isn't The Dev Team's official method, it will work. Keep in mind that theirs will likely be much prettier. Hit the jump for instructions!
Requirements for this guide:
- Intel Mac
- Tiger, although Leopard may work as well
- Moderate Terminal comfort
- iPhone running version 1.1.1. If you need to downgrade, check out the method on Hackint0sh
- No Installer packages installed. If you've installed any packages, remove them or remove the Installer directory from /var/root/Library (thanks billymayes). If you have packages installed before updating, Installer will think you have them after the update and cause problems.
Keep this in mind: Currently scrolling is not turned on by default in 1.1.2. To scroll your list of applications, install SummerBoard. This guide is only for those who are impatient. Something prettier and simpler is on its way.
- Sync and pray
- Sync your iPhone with iTunes. You may lose all of your information if something goes wrong, so it's a good idea to back up.
- Create Symlink
- Visit Jailbreakme.com and jailbreak your iPhone. When it's finished, you should have Installer.app on your home screen. If you already have Installer, you don't need to do this step.
- Plug iPhone in and open iTunes. Make sure that you have the "Update" button available in iTunes before proceeding.
- Open up Installer, navigate to the "Tweaks (1.1.1)" category, and install "OktoPrep".
- Upgrade to v1.1.2
- Download the 1.1.2 Software update/restore package from Apple. If Safari unzips the file, grab the original from your trash and remove the .zip extension so that it reads iPhone1,1_1.1.2_3B48b_Restore.ipsw
- In iTunes, hold option and click "Upgrade". At the prompt, select the iPhone1,1_1.1.2_3B48b_Restore.ipsw file.
- Once upgraded to 1.1.2, close iTunes.
- Jailbreak
- Download iPHUC and friends from Rapidshare
- Extract the contents so that iphuc, fstab, and iphonefs are all on the Desktop
- If you don't have libreadline, download it and extract the zip to your Macintosh HD
- Open Terminal.app located in Applications>Utilities
- Type cd ~/Desktop and hit return
- Type ./iphuc and hit return
- Type getfile disk iphonefs/disk.dmg 314572800 and hit return. This will take about five minutes so grab something to drink in the meantime. Once complete, there will be a file named "disk.dmg" in your "iphonefs" folder.
- Double click the file to mount it.
- Open the newly mounted Oktoberfest3B48b.UserBundle drive and open the "etc" folder. Replace the fstab file inside the "etc" folder with the supplied fstab file.
- Download AppTapp Installer from Nullriver and place it on your desktop.
- Control click "AppTapp Installer" and click "Show Package Contents". Navigate to Contents>Resources. Copy Installer.app from the "Resources" folder over into the "Applications" folder inside Oktoberfest3B48b.UserBundle. Do the same for libarmfp.dylib, placing it inside usr>lib instead of Applications.
- Unmount the image and feel free to close any open Finder windows.
- Back in Terminal, assuming that you've kept iPHUC up and running, type putfile iphonefs/disk.dmg disk and hit return. This will take another minute or so. When it's finished, reboot the iPhone and close Terminal. You're jailbroken!
- After the phone reboots, activate with iTunes and uninstall "OktoPrep" using Installer.
That's it! If everything went well, you should be enjoying a freshly updated and jailbroken iPhone. If we missed anything, let us know in the comments.
Enjoy!

Delicious
Reddit
Technorati





(iPHUC) /: getfile disk/ iphonefs/disk 314572800
getfile: Failed to open remote file: 1
(iPHUC) /:
Im getting ths error whenever I try to the getfile command..
Type getfile disk iphonefs/disk 314572800 and hit return
Thanks...
Ummm...still not working??
Anyone else?
This is under Mac OS 10.5 BTW...
Nathan
Windows?
Not quite there...
These steps "work" as far as ending up in 1.1.2 fine and having an installer icon on the homescreen but beyond that installer is useless.
Appears I'll need to restore and just wait for another method as of now I'll be at 1.1.2 to start with.
Oh well....hope it works okay for someone
Well...
It would go for it then...
Thanks for any reply
Tom
10.5 mod
putfile iphonefs/disk.dmg disk
PowerPC Mac Instructions?!
Ill probably wait until indepence make a 1 clicker because im not that desperate
iphuc errors
(iPHUC) /: getfile disk iphonefs/disk 314572800
getfile: Failed to open remote file: 8
(iPHUC) /:
any suggestions/help would be appreciated for us that get these messages please reply.
Download the PPC version of iPhuc and this works
(iPHUC) /: getfile disk iphonefs/disk 314572800
getfile: Failed to open remote file: 8
(iPHUC) /:
any suggestions/help would be appreciated for us that get these messages please reply.
still nothing
I have tried both on an intel iMac and MacBook Pro with leopard installed, I have also tried using different versions of itunes and nothing works.
Please if anybody knows how to fix this problem please post a reply, this is the problem.
(iPHUC) /: getfile disk iphonefs/disk 314572800
getfile: Failed to open remote file: 8
(iPHUC) /:
Numerous people are having this problem with no solution, somebody who has better knowledge of the program please help us out.
Email is akavalo66@gmail.com if you have any solutions or post a reply.
Thanks.
Thanks for your help!
Thanks for your help!
do that to get it working
cd ~/Desktop
./iphuc
exit
./iphuc
setafc com.apple.afc2
getfile /dev/rdisk0s1 iphonefs/rdisk0s1 314572800
Still No Go
do that to get it working
cd ~/Desktop
./iphuc
exit
./iphuc
setafc com.apple.afc2
getfile /dev/rdisk0s1 iphonefs/rdisk0s1 314572800
(iPHUC) /: setafc com.apple.afc2
setafc: AMDStartService Failed. Retrying once.
setafc: second attempt returned -402653150
iphuc: please relaunch and try again.
>> Nothing left to do. Exiting.
any suggestions?
do that to get it working
iphuc 0.6.1 with tab completion.
>> By The iPhoneDev Team: nightwatch geohot ixtli warren nall mjc operator
CFRunLoop: Waiting for iPhone.
notification: iPhone attached.
AMDeviceStartService 'com.apple.afc': 0
(iPHUC) /: setafc com.apple.afc2
setafc: AMDStartService Failed. Retrying once.
setafc: second attempt returned -402653150
iphuc: please relaunch and try again.
>> Nothing left to do. Exiting.
So, no go. Did I do anything wrong there?
as u can see i have to do it twice to get it working
macbook-pro-17-de-mna
iphuc 0.6.1 with tab completion.
>> By The iPhoneDev Team: nightwatch geohot ixtli warren nall mjc operator
CFRunLoop: Waiting for iPhone.
notification: iPhone attached.
AMDeviceStartService 'com.apple.afc': 0
(iPHUC) /: ls
.
..
DCIM
Downloads
PDF
Photos
com.apple.itunes.lock_sync
iPhoneDrive
iTunes_Control
(iPHUC) /: exit
>> Nothing left to do. Exiting.
macbook-pro-17-de-mna
iphuc 0.6.1 with tab completion.
>> By The iPhoneDev Team: nightwatch geohot ixtli warren nall mjc operator
CFRunLoop: Waiting for iPhone.
notification: iPhone attached.
AMDeviceStartService 'com.apple.afc': 0
(iPHUC) /: setafc com.apple.afc2
InvalidResponse
setafc: AMDStartService Failed. Retrying once.
InvalidResponse
setafc: second attempt returned -402653165
iphuc: please relaunch and try again.
>> Nothing left to do. Exiting.
macbook-pro-17-de-mna
iphuc 0.6.1 with tab completion.
>> By The iPhoneDev Team: nightwatch geohot ixtli warren nall mjc operator
CFRunLoop: Waiting for iPhone.
notification: iPhone attached.
AMDeviceStartService 'com.apple.afc': 0
(iPHUC) /: setafc com.apple.afc2
(iPHUC) /: ls
.
..
Applications
Library
System
bin
cores
dev
etc
mach
private
sbin
tmp
usr
var
(iPHUC) /:
now the getfile will work, we are on afc2
wierd
may be this the difference ?
iPhuc is instable because it writes "please relaunch and try again."
thanks,
pjan
I bricked it
Tried to get back to 1.1.1 after failing to get 1.1.2 to work, but anySIM 1.1 wouldn't work (probably because the modem firmware didn't get downgraded as well when going from 1.1.2 back to 1.1.1). I tried anySIM 1.2 as well, no avail.
So, when I follow the above instructions again, I get a different error code than before:
iphuc 0.6.1 with tab completion.
>> By The iPhoneDev Team: nightwatch geohot ixtli warren nall mjc operator
CFRunLoop: Waiting for iPhone.
notification: iPhone attached.
InvalidHostID
Could not read data from URL. Error code -10SessionInactive
AMDeviceStartService 'com.apple.afc': -402653154
(iPHUC) /: setafc com.apple.afc2
SessionInactive
setafc: AMDStartService Failed. Retrying once.
SessionInactive
setafc: second attempt returned -402653154
iphuc: please relaunch and try again.
>> Nothing left to do. Exiting.
No way to get to afc2. Anybody having a clue what I could try?
Thanks for your help!
phew
http://www.winandmac.com/mobile/ipho...via-downgrade/
This flashed my baseband back to what it used to be before, so that anySIM could do its magic. Everything back to working condition now... guess I'm gonna stick to 1.1.1 for a gooood long while...
I was privvy to this information when we used it to jailbreak 1.1.1 (before jailbreakme.com and iNdependence), so pretty confident I have done everything right.
The getfile process worked fine, I put the correct fstab in and installer etc.
The putfile process is a little strange. It takes a lot less time to put the dmg back than it did to download. I also got not byte counter putting the disk.dmg like you get when using the getfile command.
I rebooted the phone and re-ran iphuc, the file syste, is not jailbroken. if you type cd / and then ls, where as I should be in the root directory and get the full directory listing, I'm nly getting the jailed file list:
DCIM
Downloads
Photos
com.apple.itunes.lock_sync
disk
iTunes_Control
I have opened re-opened the disk.dmg to make sure my changes took place and the fstab had rw permissions set to the root, so my problem is with the putfile process, its doesn't seem to be writing to the ramdisk??????
Now when I did this with drudge etc a month or so ago, I'm sure the putfile was a different name to differentiate it from the regular putfile but that was an early version of the jailbreak version of iphuc.
Failed to open remote file: 8
i keep ending up with this:
(iPHUC) /: getfile disk iphonefs/disk.dmg 314572800
getfile: Failed to open remote file: 8
Any ideas?
still not working
I'm using the following:
Leopard 10.5
Independence 1.2.5 and even the 1.3 beta (hangsup and crashes)
AppTapp (downloads firmware but gives me an error saying (bootstrap failed. see console)
(see error below)----------
11/11/07 1:21:09 PM [0x0-0x42042].com.nullriver.iphone.bootstrapper[530] Using 009-7698-4.dmg as the Ramdisk Image.
11/11/07 1:21:09 PM [0x0-0x42042].com.nullriver.iphone.bootstrapper[530] Using kernelcache.release.s5l8900xrb as the Kernel Cache.
11/11/07 1:21:09 PM [0x0-0x42042].com.nullriver.iphone.bootstrapper[530] Architecture: i386
11/11/07 1:21:09 PM [0x0-0x42042].com.nullriver.iphone.bootstrapper[530] Stage 0: 0 Killing iTunes...
11/11/07 1:21:10 PM [0x0-0x42042].com.nullriver.iphone.bootstrapper[530] Stage 0: 1 Looking for iPhone...
11/11/07 1:21:10 PM com.apple.launchd[150] ([0x0-0x3c03c].com.apple.iTunes[500]) Exited: Killed
11/11/07 1:21:11 PM [0x0-0x42042].com.nullriver.iphone.bootstrapper[530] ConnectRecoveryCallback: Bad Stage: 0
11/11/07 1:21:11 PM [0x0-0x42042].com.nullriver.iphone.bootstrapper[530] Stage 0: 2 Recovering...
11/11/07 1:22:09 PM [0x0-0x48048].com.nullriver.iphone.bootstrapper[557] Archive: /Users/denexis/Documents/Personal/AppTapp Installer.app/Contents/Resources/iPhone1,1_1.0.2_1C28_Restore.ipsw
11/11/07 1:22:09 PM [0x0-0x48048].com.nullriver.iphone.bootstrapper[557] inflating: /Users/denexis/Documents/Personal/AppTapp Installer.app/Contents/Resources/009-7698-4.dmg
11/11/07 1:22:10 PM [0x0-0x48048].com.nullriver.iphone.bootstrapper[557] inflating: /Users/denexis/Documents/Personal/AppTapp Installer.app/Contents/Resources/kernelcache.release.s5l8900xrb
11/11/07 1:22:10 PM [0x0-0x48048].com.nullriver.iphone.bootstrapper[557] * iPhoneComm v2.0
11/11/07 1:22:10 PM [0x0-0x48048].com.nullriver.iphone.bootstrapper[557] Using 009-7698-4.dmg as the Ramdisk Image.
11/11/07 1:22:10 PM [0x0-0x48048].com.nullriver.iphone.bootstrapper[557] Using kernelcache.release.s5l8900xrb as the Kernel Cache.
11/11/07 1:22:10 PM [0x0-0x48048].com.nullriver.iphone.bootstrapper[557] Architecture: i386
11/11/07 1:22:10 PM [0x0-0x48048].com.nullriver.iphone.bootstrapper[557] Stage 0: 0 Looking for iPhone...
11/11/07 1:22:11 PM [0x0-0x48048].com.nullriver.iphone.bootstrapper[557] ConnectRecoveryCallback: Bad Stage: 0
11/11/07 1:22:11 PM [0x0-0x48048].com.nullriver.iphone.bootstrapper[557] Stage 0: 1 Recovering...
I've tried different methods from different sites. I tried downgrading to 1.0.2 but after downgrading, I'm stuck with independence exiting with error and freezes. I tried the method from iphuc "getfile..." and I get "Failed to open remote file:8"
What should I do now? I'm stuck and going in circles...Need your help..
Anyone else?
This is under Mac OS 10.5 BTW...
Nathan
i keep ending up with this:
(iPHUC) /: getfile disk iphonefs/disk.dmg 314572800
getfile: Failed to open remote file: 8
Any ideas?
we have even tried changing the afc to afc2 but that does not work for the majority of us. That best bet is to just wait a week or so for a gui jailbreaker. if u find out how to fix this please post a reply or email akavalo66@gmail.com
When you restore, you in fact don't hit the restore button, you shift-click the Check for updates button (or upgrade button) in iTunes. When I did this, I retained the pre-jailed filesystem and can now access disk.dmg. I'm excited to see how this goes
u most download it to MAC...
BTW looks like IPHUC the downgrade it doesn`t work in anyway
Downgraded to 1.1.1 but can't reactivate
Needless to say, I lost all my 3rd party apps. Long story short I did a restore - without the option key - after several unsuccessfull attempts at downgrading to 1.1.1. I finally accomplished that yesterday, (downgrading to 1.1.1) and would just prefer to stay at 1.1.1 but I can't get iTunes to activate my AT&T line after the downgrade.
Yet, when I re-update (no option key) back to 1.1.2; as soon as the system's installed, my phone gets activated right away. Again, the question is, once i've downgraded to 1.1.1 how do I reactivate my AT&T service and stay with 1.1.1? Whoever can help, lunch's on me!
My phone toggles between "No Service" and 0 bars.
I tried a few lockdownd files over SSH, rebooted between them, but the results is still the same.
Did I forget something?
Beautiful
1.1.1 to 1.1.2 with all apps working
I since jailbroke my phone on 1.1.1 installed Oktoprep again, updated to 1.1.2 (no option-mac shift-win.) I then ran the jailbreak for 1.1.2 (not without headaches as the jailbreak app kept saying it couldn't connect to my phone, which I solved by downloading a file and installing it to a folder in the root directory) and SUCCESS!!!
I know enjoy a 1.1.2 with installer and access to 3rd party apps. My AT&T service is back on...I'm a happy camper...LOL
raul
Old apps were shown as installed in installer but aren't showing up on springboard. I can uninstall apps and then reinstall them to see them on springboard.
But I'm limited to a couple of apps, because Summerboard is not working.
When I try to uninstall Summerboard 3.0b1 I get "Error during uninstall script execution". SB has the same error message.
I was going to try to use Launcher to launch apps and customize to move apps I don't use to the bottom of the list but annoyingly after I reordered the icons in customize, it ignored my order, left the defaults where they were and moved field test up to the one slot open after installer. So now I don't have access to any of my self-installed apps.
GRR...
Any solutions out there?
Any way to manually install a fresh summerboard or at least to delete it and try to reinstall with installer.
root of installer problem?
Cannot see it
getfile in leopard
1.1.2 need help
Help
Help Me!!!
Isn't there a simple code to put on to unlock the v1.1.2?
Is there a solution?
Downgrading to jailbreak
I'm living in the U.K and bought my O2 iphone on the 13th November and have activated it with the middle O2 tariff which suits me fine. I'm running Tiger OS X version 10.4.11 on an intel iMac. However I only want to unlock my iPhone in order to benefit from the brilliant 3rd party applications I've seen. My iPhone is preprogrammed to version 1.1.2. I have iTunes 7.5. I've downloaded the MobileDevice for 7.4.2. However when I download it, safari and indeed firefox, too, download it as a .zip folder onto my desktop. This means that the whole MobileDevice is in a hierarchal folder system. Consequently, when I use iNdependence MobDev Tool for INdependence v1.3 beta 2, I cannot locate the correct MobileDevice firmware for iTunes 7.4.2.
Furthermore when following the iTunes instructions I don't get the predicted 1015 (if I remember correctly) error message when restoring from the iPhone 1.1.1 restore.ipsw file. Instead I get an error message 1.
Can someone please help me!!! It would be much appreciated.
jailbreak