Using QuickPwn

intel Mac & PPC

Updated: June 2, 2009





Who is this guide for?
  • 3G iPhones owners (who don't care about an unlock - potentially never).
  • Any firmware version. You will be updating/restoring to 2.2.1 firmware anyway.
  • Officially unlocked 3G iPhones.
  • Pwned or not.
  • I used iTunes 8.1.1. iTunes 8.2 will not work! To uninstall iTunes 8.2 read this.
  • I used OS X 10.5.7.
  • Make sure to Sync your iPhone prior to using this tutorial. This way your personal information, and any App Store applications will be preserved.


Thanks again go out to the iPhone Dev Team for providing this amazing, and FREE program for jailbreaking, activating, and customizing the 1st generation and 3G iPhones. You can visit their website here.

Here is an excerpt from the iPhone Dev Team's website about QuickPwn:

"QuickPwn is not a replacement for PwnageTool, they are different tools and provide different features, QuickPwn is for quickly pwning a device, whereas PwnageTool is designed to custom build and tailor the ipsw production process, both tools will be actively developed in the future."

"If you don't want specific things to happen such as baseband updates then PwnageTool should be used to create a custom .ipsw with your specifics."


My 3G iPhone was running 2.2 firmware (and on 02.28.00 baseband) and was updated (I highly recommend you restore) to 2.2.1 with iTunes normally. This iPhone is on a contract and was fully personalized. In this case, I don't care if this phone can be unlocked (I do have another 3G that I do care about the unlock that I wrote an PwnageTool guide for).

Apple has an excellent support document regarding update and restore error messages on the iPhone. Should you have any troubles, consult this article.

If it any point in this tutorial you should receive this pop up message from iTunes, go ahead and install the carrier settings update. It is completely harmless.

iPhone




Step 1.

Launch iTunes and plug in your iPhone. Click the Restore button. Updating is an option, but I find it can cause issues, including loss of storage space (lots of it).

iPhone



You will be asked if you'd like to back up your iPhone first.

iPhone



The iPhone was backed up, and then updated.

iPhone

iPhone



During the update process you will see a status bar graphic on the iPhone.

iPhone



When it has finished updating, you'll receive this message.

iPhone



iTunes will confirm the iPhone is on 2.2.1 firmware.

iPhone




Step 2.

Download QuickPwn 2.2.5 from me here, or via the iPhone Dev Team's download link list here.

Double click the QuickPwn_2.2.5.dmg. It will open the window seen below. Install QuickPwn. Make sure to drag the program icon from the disk image into your Applications folder!   Do not attempt to run the program from the disk image window, it will cause problems.

iPhone




Step 3.

Launch QuickPwn. Connect your iPhone and then click OK.

iPhone



QuickPwn will detect your device.

iPhone



QuickPwn will then search for the 2.2.1 firmware on your Mac. Since you just updated, it will be easy to find.

iPhone





You will be asked if you would like to switch out the standard Apple boot logo, and restore screen, which shows a USB cable pointing at the iTunes program logo.

iPhone




You will get a PwnApple (pineapple) for the boot logo, and a Steve Jobs caricature for the restore screen if you select yes. Otherwise, select no to leave them alone.

iPhone       iPhone



Your custom 2.2.1 firmware will now be compiled.

iPhone



QuickPwn will prompt you for your system password. There is nothing nefarious in this request, the reason it is asking (and PwnageTool asks) is because it is creating your firmware and running commands as the root account (or superuser) on your computer. There are various processes where unmounting and mounting of a file systems is necessary. This is performed while using a system UID of 0, which causes the prompt for a system password. The root access is only for the creation of the ipsw file. So it's completely harmless.

iPhone



You will receive instructions on how to put the iPhone into DFU mode. Simply follow the on screen prompts to do this. Note there are many ways to get into DFU mode since 10.5.6 complicated the process.

If you are unable to enter DFU mode, the iPhone Dev Team posted the following information (Warning, many Mac users complain of loss of track pad and keyboard use and USB issues):

OS X 10.5.6 introduced a bug that affected the use of DFU mode with some Macs. There have been previously published hacks and techniques to fix this, but here is another method that can be used to temporarily restore DFU functionality in order to use QuickPwn or PwnageTool.

  1. You will need an account with ADC (Apple Developer Connection) this is free and takes a few minutes to sign up, you should read the terms and conditions carefully and you should only sign up if you are thinking of developing applications in the future - http://developer.apple.com/mac/
  2. Download the disk image “IOUSBFamily-315.4-log.dmg” for Mac OS X 10.5.5 Build 9F33” (yes, that is a “5” in 10.5.5 - this is a developer debug package of the USB kernel extension).
  3. Unplug non-vital USB equipment, such as external DVD writers, USB scanners, and USB mass storage devices. At the most leave a keyboard and mouse connected.
  4. Install IOUSBFamily-315.4.1.pkg from within the disk image
  5. Reboot your system!
  6. Perform necessary DFU activity with QuickPwn or PwnageTool.
  7. Download the disk image IOUSBFamily-327.4.0-log.dmg” for Mac OS X 10.5.6 Build 9G55”
  8. Install IOUSBFamily-327.4.0.pkg from within the disk image
  9. Reboot your system!
  10. Reattach your USB peripherals.


Another option is to use a USB hub (powered or unpowered) to get into DFU mode.


First turn off your iPhone.   iTunes may open, you can just drag it out of the way.


iPhone



You will get 5 seconds to get your fingers in place to press and hold the Sleep/Wake (power) and Home buttons. Then hold them for 10 seconds.

iPhone




Then release the Sleep/Wake (power) button.

iPhone



Continue holding the Home button for 10 seconds.

iPhone



A couple files will be sent, and iTunes may launch. You may get a pop up message citing error 2001 or similar. Just click ok.

iPhone



You may also get a pop up about your iPhone being in recovery mode. Once again just click OK. I just dragged iTunes out of the way at this point.

iPhone



It will then send the 018-4443-16.dmg file, and some others.

iPhone



You should see the Pwnage logo on your iPhone at this point, or the Apple logo if you decided not to change it.

iPhone



You should then receive this message. Understand what it says, then click OK and wait. This stage took about three minutes.

iPhone



You will see a few different messages (Replacing kernel, Flashing NOR, Installing bundles, Syncing file systems) on your iPhone during these three minutes.

iPhone       iPhone



You should then see the success message. If it fails, then repeat the process. The process could fail for numerous reasons, the least of which being you were running (or trying to run) a memory or CPU intensive program in the background at the same time, et cetera.

iPhone



The iPhone will reboot. If your iPhone was already personalized, it should still be that way. iTunes will confirm that you are still on 2.2.1 firmware, and that your photos and videos, et cetera are still present.

iPhone



The only changes should be that Cydia and Installer have been added to your SpringBoard.

iPhone



You can confirm your firmware versions here. You are on 2.2.1 firmware with the new modem firmware. You are finished.

iPhone       iPhone







Return to top of page