Using QuickPwn (with 2.2 firmware)
intel Mac & PPC
Updated: November 24, 2008
Who is this guide for?
1st generation iPhone owners (3.9 or 4.6 bootloaders, unlocks and activation will remain intact). It will not
unlock you if you aren't already. Use PwnageTool to unlock with instead.
Make sure to sync your iPhone prior to using this tutorial. This way your personal information, and any App Store
applications will be preserved.
I used iTunes version 8.0.2.
Thanks again go out to the iPhone Dev Team for providing this amazing, and FREE program for jailbreaking, activating,
and customizing the 1st generation and 3G iPhones.
You can visit their website here.
Here is an excerpt from the iPhone Dev Team's website about QuickPwn:
"QuickPwn is not a replacement for PwnageTool, they are different tools and provide different features,
QuickPwn is for quickly pwning a device, whereas PwnageTool is designed to custom build and tailor the ipsw
production process, both tools will be actively developed in the future."
"If you don’t want specific things to happen such as baseband updates then PwnageTool should be used to
create a custom .ipsw with your specifics."
My first generation unlocked iPhone was running 2.1 firmware and was updated to 2.2 with iTunes.
This iPhone is not on a contract and was fully personalized. It was also previously Pwn'd, although
you don't have to be to use this tutorial.
Apple has an excellent support document regarding update and restore error messages on the iPhone.
Should you have any troubles,
consult this article.
If you have not already updated to 2.2 firmware via iTunes, then do so. You could restore with iTunes,
it doesn't matter. When I plugged my iPhone in, I received this pop up message, so I clicked Install.
The iPhone was backed up, and then updated.
During the update process you will see a status bar graphic on the iPhone.
When it has finished the iPhone will reboot, and iTunes will confirm the iPhone is on 2.2 firmware.
Your iPhone should be activated (at the SpringBoard) and still unlocked (if it was before).
Download QuickPwn 2.2 from me here,
or via the iPhone Dev Team's download link list
Install QuickPwn. Make sure to drag the program icon from the disk image into your Applications folder!
Do not attempt to run the program from the disk image window, it will cause problems.
Launch QuickPwn. Connect your iPhone and then click OK.
QuickPwn will detect your device.
QuickPwn will then search for the 2.2 firmware on your Mac. Since you just updated, it will be easy to find.
You will be asked if you would like to switch out the standard Apple boot logo, and restore screen which
shows a USB cable pointing at the iTunes program logo.
You will get a PwnApple (pineapple) for the boot logo, and a Steve Jobs caricature for the restore
screen if you select yes. Otherwise, select no to leave them alone.
Your custom 2.2 firmware file (.ipsw) will now be compiled.
QuickPwn will prompt you for your system password. There is nothing nefarious in this request, the reason
it is asking (and PwnageTool asks) is because it is creating your firmware and running commands as the root
account (or superuser) on your computer. There are various processes where unmounting and mounting of a
file systems is necessary. This is performed while using a system UID of 0 which causes the prompt for a
system password. The root access is only for the creation of the ipsw file. So it's completely harmless.
Now simply follow the on screen prompts for putting your iPhone into DFU mode. First press the Sleep/Wake
(or power) button to turn the iPhone off.
You will get 5 seconds to get your fingers in place to press and hold the Sleep/Wake (power) and Home buttons.
Then hold them for 10 seconds.
Then release the Sleep/Wake (power) button.
Continue holding the Home button for 10 seconds.
A couple files will be sent, and iTunes should launch. You may get a pop up message citing error 2001
or similar. Just click ok.
You will also get a pop up about your iPhone being in recovery mode. Once again just click OK. I just
dragged iTunes out of the way at this point.
It will then send the 018-4378-1.dmg file, and some others.
You should see the Pwnage logo on your iPhone at this point, or the Apple logo if you decided not to change it.
You should then receive this message. Understand what it says, then click OK and wait. This stage took about
You will see a few different messages (Replacing kernel, Flashing NOR, Installing bundles,
Syncing file systems) on your iPhone during these three minutes.
You should then see the success message. If it fails, then repeat the process. The process could fail
for numerous reasons, the least of which being you were running (or trying to run) a memory or CPU
intensive program in the background at the same time, et cetera.
The iPhone will reboot. If your iPhone was already personalized, it should still be that way. The only
changes should be that Cydia and Installer have been added to your SpringBoard.
You can confirm your firmware versions here. You are on 2.2 firmware, and your modem (baseband) was
left alone. You are finished.