Available Firmware：OTB1.1.2 Firmware & OTB 1.1.3 Firmware (bootloader v 4.6)

Operation Procedure：Downgrade 1.0.2 Firmware → Activate 1.0.2 Firmware → Unlock iPhone

Tools：Windows system、iTunes、gunlock hacking files、paycay1.0.2 firmware activating tools、WinSCP transmissing tools and Apptapp repairing tools

Attention：This tutorials can hack iPhone with bootloader v 4.6, which finally will make your iphone support SIM with GSM network to call.The finising of  this tutorial owes to the methods provided by George Hotz, a foreigh hacker, and n000b, a native hacker. 

gunlock download（redownload）　paycay download　Apptapp download　WinSCP download

Page 1      Original Soft Hacking iPhone（provided by foreign hacker）

Page 2      New Soft Hacking iPhone （provided by native hacker）

The following is provided by George Hotz：

　　Note：This tutorial is George Hotz's method. We will let you know after testing whether there is the simpler hacking method or not.

　　1. Whether 1.1.3 firmware or 1.1.2 firmware, please download to 1.0.2 firmware with iTunes. If yours is 1.1.3, then the order is 1.1.3→1.1.2→1.1.1→1.0.2; if yours is 1.1.2, then the order is 1.1.2→1.1.1→1.0.2。

1.0.2 firmware download 　1.1.1 firmware download　1.1.2 firmware download　1.1.3 firmware download

　　2. When 1013 mistake appears after downloading to 1.0.2, you will find a yellow triangle on your screen of your phone. Then choose "Firmware 1.0.2" and find the restoring mode of your phone with Apptapp.

　　3. After hopping, there is an inactivating picture appearing on the screen. Now download and discompress paycay, double click fine 跳出后，iPhone“(CLICK HERE) activate.bat”to activate iPhone.

　　4. After activating, install BSD Subsystem and OpenSSH, Term-vt100 with Installer or PC iBus.

　　5. Input IP address of your phone with the downloaded WinSCP. After successful connection, set up a new unlock file on /usr/bin/, that is /usr/bin/unlock，and then upload all the gunlock file to this content.

　　Set the attribute of unlock file and all files under unlock file as 755. After uploading, enter "Setting → Auto-Unlock → set it as "Never", and then open Airplane Mode.

　　6 Back to first page of ipone and open Term-vt100, input the following orders (you may input orders by putty)

　　cd /usr/bin/unlock
　　./a.sh

　　Friendly Note: if the above orders don't work, please input the following orders.

　　launchctl unload /System/Library/LaunchDaemons/com.apple.CommCenter.plist
　　cd /usr/bin/unlock
　　./gunlock secpack ICE04.02.13_G.fls
　　launchctl load /System/Library/LaunchDaemons/com.apple.CommCenter.plist

　　7. When you get a hint“Enjoy your unlocked iPhone”, then that means you have finished unlocking your phone. At this time, you can insert a SIM and try to make a call to your friend.

　　Attention：If you finish all the above steps, your iphone doesn't any SIM message, then please download bricktool file and upload all the files under bricktool to /usr/bin/ of your iphone.

bricktool download

　　Reopen Term0vt100 and input the following orders:

　　cd /usr/bin
　　chmod +x bricktool
　　bricktool d

　　After inputting, restart your iphone, then you can find the SIM message on the screen of your phone.

[1] [2] Next