Jailbreak iPhone 3.1.3 Firmware with PwnageTool 3.1.5 - iPhoneHeat

Jailbreak iPhone 3.1.3 Firmware with PwnageTool 3.1.5

Now that the Dev-Team has release the PwnageTool 3.1.5 to jailbreak iPhone 3.1.3 firmware on Mac OS X. So, it’s time to write a guide on how to jailbreak iPhone 3.1.3 using PwnageTool 3.1.5. PwnageTool along with jailbreaking, also preserves iPhone Baseband so that so may unlock it later.

This guide is for Mac users only because PwnageTool is available for Mac only. Windows users can either use RedSn0w or Sn0wbreeze or wait for the upcoming ready made custom firmwares only at iPhoneheat.com.

PwnageTool can jailbreak:

  • iPhone 3GS (with early bootrom)
  • iPhone 3G
  • iPhone 2G
  • iPod touch 1G
  • iPod touch 2G (with early bootrom + pre-jailbroken)


  • if you have an ipt1g, iphone2g, or iphone3g(and don’t need an unlock), we strongly recommend you to use redsn0w
  • Do not upgrade to 3.1.3 if you need the unlock for 05.11.07 baseband, blacksn0w does NOT WORK!
  • Read this post before proceeding

Please read the complete guide first and then try it.

Disclaimer: This guide is for testing and educational purposes only. Use it at your own risk, we cannot be held responsible if anything goes wrong.

ok… Let’s start jailbreaking iPhone 3.1.3 using PwnageTool.

Jailbreak iPhone 3.1.3 Firmware

Update your iTunes to latest version and Backup your iPhone.

Create a folder on your desktop and name it: Pwnage. Then download the files linked at the bottom and put into Pwnage folder.

(Download through Firefox because Safari often auto extracts ipsw file)

Step 1
Double click PwnageTool_3.1.5 dmg file to mount it.

jailbreak iPhone 3.1.3

Click and drag the PwnageTool icon to Pwnage Folder you created and then open it from there.

Warning Box will Popup. Just hit the OK button.

jailbreak iPhone 3.1.3

Step 2
Make sure you select Expert Mode from Top menu

jailbreak iPhone 3.1.3

Step 3
Select your device. A big Green check mark will appear on the selected device.
Now hit the big Blue Arrow button at bottom right to proceed.

jailbreak iPhone 3.1.3

Step 4
On the next page, PwnageTool will automatically find the IPSW file. If not found then click “Browse for IPSW” button and select the downloaded IPSW OS 3.1.3 file from the Pwnage folder. A check mark will appear next to it.

Then hit Blue Arrow Button to proceed.

Step 5
On the next page you will have 6 choices. Select the General and hit Blue Arrow Button to proceed.

jailbreak iPhone 3.1.3

Step 6
This is the most important step. Please read carefully about selecting activate the phone option. You will know you didn’t choose the right option if you don’t have signal after jailbreaking.

On the next Page you can decide your Root Partition Size where OS resides. Click activate the phone (only if you’re on unofficial carrier).

***Deselect Activate the phone option if you are on official carrier. For the 3.1.3 firmware you may have to increase the size of your root partition slightly for the IPSW build to be successful. I like 1GB.***

jailbreak iPhone 3.1.3

The Bootneuter settings are greyed out for the iPhone 3GS and 3G and iPod Touches. Click the blue arrow button.

jailbreak iPhone 3.1.3

The next screen will show the Cydia settings menu. It allows you to create custom packages so you do not have to manually install them later.

jailbreak iPhone 3.1.3

Go to Download packages tab.and hit the Refresh button to display all the available packages. Double click your desired package, it will be downloaded and will be available under the Select Packages tab.

jailbreak iPhone 3.1.3

When you have downloaded your desired packages, go back to Select Packages tab and check mark the ones you want.

jailbreak iPhone 3.1.3

then hit the Blue Arrow Button to proceed.

Custom Packages Settings will displays listed package settings for your custom IPSW. Leave these settings as is for now. Just click the Blue Arrow Button to proceed.

jailbreak iPhone 3.1.3

On the next Custom Logos Settings menu, you’ll be able to add your own images as boot logos. Click the Browse button to select your Boot logo and Recovery logo. I just use defaults so deselected all options.

jailbreak iPhone 3.1.3

Click the blue arrow button to continue.

Step 7
Now you are  ready to build your custom firmware. Click the build button to select it, then click the blue arrow button to proceed.

jailbreak iPhone 3.1.3 PwnageTool

Step 8
You will be asked to Save your custom .ipsw file. Save it to the same Pwnage folder.

jailbreak iPhone 3.1.3 PwnageTool

Step 9
PwnageTool will start building your custom firmware. Wait until it’s done.

jailbreak iPhone 3.1.3 PwnageTool

If prompted enter your Administrator password and click the OK button.

jailbreak iPhone 3.1.3 PwnageTool

Step 10
When prompted if your iPhone has been Pwned before, Click No. It allows for a more thorough restore.

jailbreak iPhone 3.1.3 PwnageTool

Step 11
You will be asked to turn OFF the device. Make sure it is connected to the USB port.

jailbreak iPhone 3.1.3 PwnageTool

Step 12
NOTE: If you’re already jailbroken (by whatever means), you don’t need to mess around with DFU mode at all.  Just create (or get from a friend) your custom IPSW and Option-Restore (Shift-Restore on Windows) to it via iTunes.  Don’t enter DFU mode at all.  Please make sure you are restoring to the custom IPSW, not the stock one from Apple!  For best results, use the latest iTunes (9.0.1) — which includes a nice new application organizer.

If it’s the first time you’re jailbreaking your iPhone, Be ready to follow directions now to get into DFU Mode.

  • You will be asked to hold the home button and the power button for 10 seconds.
  • Then, you will have to release the power button and hold the home button for 10 seconds to enter DFU.

jailbreak iphone 3.1.3 pwnagetooljailbreak iphone 3.1.3 pwnagetool

If you failed to follow the instruction, it will show you a message asking if you want to retry?. Click Yes.

Unplug the iPhone from the USB. Turn it OFF, then turn it back ON. Reconnect it to USB and turn OFF the iPhone when prompted.

jailbreak iphone 3.1.3 pwnagetool

When followed correctly, PwnageTool will display a message telling your that it successfully entered DFU mode. iTunes will also pop-up.

jailbreak iphone 3.1.3 pwnagetool

jailbreak iphone 3.1.3 pwnagetool

Step 13
In iTunes, hold the Alt/Option key and hit Restore.

jailbreak iphone 3.1.3 pwnagetool

Step 14
from the popup window, browse to the Pwnage Folder and select you custom .ipsw file that you just created and click Open Button.

Step 15
iTunes will now restore the firmware on your iPhone. This can also take up to 10 minutes.

When done. You have successfully Jailbreak iPhone 3.1.3 firmware.

Unlock iPhone 3GS, 3G 3.1.3 firmware

Now in Order to Unlock iPhone 3GS or 3G 3.1.3 firmware follow this old Guide which also works for OS 3.1.3 if you jailbreak iPhone using PwnageTool:

Unlock iPhone 3.1.3 with UltraSn0w

Have fun with iPhone OS 3.1.3 and don’t forget to leave your comments.

If you don’t want to go through all the steps, we suggest iPhone 3G( if don’t care about unlock), 2G,iPod Touch 1G and 2G (old boorrom) to use RedSn0w to jailbreak their devices. Guides are linked below:

alternately, Sn0wBreeze is also an option:

Update 1

As promised here’s the ready made custom firmware:

Download iPhone Custom Firmware 3.1.3

PwnageTool Jailbreak Download

93 comments… add one
amin12307 February 8, 2010, 9:51 pm

can someone help me with jailbreaking the new iphone with bootrom, plZ plZ plZ

iPhoneHeat February 9, 2010, 9:30 am

There’s no jailbreak tool that supports 3GS with new bootrom.. sorry

amin12307 February 10, 2010, 12:30 am

then do you know any way for downgrading my iphone, 3.1.3, 3gs. i find out that i cannot do it with suarki’s server because my “SHSH” files are not saved in suarki’s server.
do you know how to create an server for sign the downgrade the .ipsw file.

iPhoneHeat February 10, 2010, 10:16 am

then you are out of luck .. sorry bro

fgbb68 February 11, 2010, 5:20 am

I wonder if is possible to include ultrasn0w prior to build in point 6?
I have not wifi access to load it after jailbreak.

amin12307 February 13, 2010, 1:46 am

you need to to reset you wifi setting.

tunnelier February 11, 2010, 12:59 pm

“Browse for IPSW…” in my MAC not working?
Delap very …
Help me.

iPhoneHeat February 11, 2010, 3:26 pm

try double clicking.. it also happened to me

Amjn12307 February 12, 2010, 12:38 am

Just click on browse and then click on the blue button . Then you see the browse window

coach February 11, 2010, 2:14 pm

When installing the pwnage tool i get all the way to step 11 and wait for it to tell me to turn off the phone and all it says is for me to connect device to usb and it already is.
Any suggestions?

SB February 12, 2010, 8:24 pm

Can I still jailbreak new iPhone 3GS with firmware 3.1.2 now?

amin12307 February 12, 2010, 11:51 pm

yes u can still jailbreak it with blackra1n and redsn0w + the pwangetool.
and then create an custum ipsw and update to 3.1.3

SB February 13, 2010, 12:25 am

If I jailbreak the 3.1.2 new bootrom 3GS, as far as I know, when the phone goes off, I have to use BlackRa1n to boot it up.

If I first jailbreak it in a Mac, so I can boot it up in Mac with Blackra1n, how about when I am at now at another place, there is a Windows computer, can I also boot it up with Windows version blackra1n?

Amin12307 February 13, 2010, 1:43 am

blackra1n does not care about computer that u have. it just find ur iphone in recovery mode, and jailbreak it agian.

A1varo February 14, 2010, 5:42 am

hi guys accidentally updated my iphone and now its from the start, fabric settings. i just tried this and it didnt work. i did all the steps that i was supposed to do but when i come to the restoring part it says error and fails. its says something with …(1600)..something. can someone help me please? can someone put up his/hers working ipsw on some sites like rapidshare or something? please guys help!

Sb February 14, 2010, 3:40 pm

What is your iPhone model???

fk February 20, 2010, 5:00 am

i m stuck after step 11 ,,,askin connect device to usb but its already connected,,,

iPhoneHeat February 20, 2010, 11:57 am


aschmaling February 20, 2010, 8:00 am

I have tried to JB my iphone, None of the IPSW files i have downloaded work. I have a 3G I phone. Right now i am no jailbroken. I have ATT service so i don’t need it unlocked. Can someone please point me in the right direction to find the proper IPSW file.

Jaspreet February 23, 2010, 10:37 pm

I am new with the I-Phone just got 1 the 3gs i want to jailbreak it and unlock it but at the start of the post it is written that this works only with the old bootrom of the 3gs does it mean that anybody having the new bootrom cannot jailbrak it as of now till the new crack comes out???? and how can we determine if the bootrom is new or old please help i travel a lot and use diff carrier’s at diff places.

iPhoneHeat February 23, 2010, 10:50 pm

Use the F0recast tool to know you device.. search the blog

sahej March 3, 2010, 5:39 pm

does it unlock the baseband 6.04?

Amin12307 March 4, 2010, 12:25 am

how did u get this bashboard, this is not the valet bashboard for 3.1.3 if u are using higher frimaves u need to say the frimave

Daya March 8, 2010, 2:20 pm

I accidentally updated my 3g iphone thru itunes to 3.1.3.. Its baseband now is 5.12.1, please help me out or guide me the instruction. I beieve i can follow it cuz I’ve been around iphone for too long too. I am just a user not a developer like u guy…

Please helpppp cuz im so frustateed

iPhoneHeat March 8, 2010, 4:03 pm

under jailbreak iPhone category you can find RedSn0w guide to jailbreak iphone OS 3.1.3..
you can’t unlock however

Daya March 9, 2010, 7:13 am

Thanks for your prompt reply!

I did downgrade my firmware to 3.1.2 with 5.12.1 baseband.. I also try fuzzyband, but no luck. Any other way to downgrade my baseband?

iPhoneHeat March 9, 2010, 4:13 pm

nope.. sorry

Daya March 10, 2010, 6:25 am

Maybe I need to wait for someone to find way out of this. I believe that I am not alone.

At least, i gutta say thank you for your help! I appreciate that.

Leeroy March 12, 2010, 5:00 pm


* my custom 3.1.3

Jackersuicided March 29, 2010, 7:19 pm

Plz help me guys!

I accidentally updated my iPhone 3GS to OS 3.1.3.
Serial is xxx28 (I believe that this should be old BootROM).
I don’t have SHSH in Cidya server but these steps seems never required about SHSH. (right?)

I had followed the steps int this post, but I couldn’t get expected result.
The iTunes returns the error 1600 or 1604.
And it would roop from the end of step 12 to step 14.

iPhoneHeat March 29, 2010, 11:10 pm

for 3GS.. downgrading to 3.1.2 is required

skamsie April 23, 2010, 3:44 pm

Hello guys,
After reading for a couple of hours on this site i still have a question and i hope you can clear it out for me. I have an Iphone 3G 05.12.01 baseband MB500B model. I understand it can be jailbroken but should i chose to do it with the pwnage tool or with the redsnow? I do not care about the unlock since i have been using same mobile network since 2000. I also have acces to both, pc and mac. Thank you in advance

iPhoneHeat April 24, 2010, 7:14 am
weasels9 April 29, 2010, 3:24 am

I’m in the same boat as Skamzie, but only have a Mac. Running 3.1.3.

I have been in the process of jailbreaking my iPhone since last night using PwnageTool. Finished with jailbreak. Successful, but no cell reception. I’ve been with AT&T since second Gen, so didn’t think I needed to unlock. Now what…??

Thank you in advance, iPhoneHeat!

iPhoneHeat April 29, 2010, 2:08 pm

You must uncheck the ACTIVATE THE PHONE option at step 6..
also try resetting network settings

Lucas April 29, 2010, 5:31 am

I’m form Brasil, so I’m sorry for my mistakes,but It jailbreak the new 3Gs 3.1.3

tj May 3, 2010, 10:51 am

ru sure it will jailbreak the new iphone 3GS, OS 3.1.3

Siobhan Abeta July 26, 2010, 9:55 pm

Great morning, I want to say thanks for an great blog about a subject I have had an curiosity in for quite some time now. I have been exploring in and reading the responses and only wanted to express my many thanks for giving me some really interesting reading material. I anticipate reading more, and taking a more active part in the talks here, while picking up some expertise too!

casio protrek watches July 7, 2011, 12:44 pm

If you like to climb mountains, they need a very good but should be suitable for the watch, and casio protrek watches is a good principle, in the hope that it will accompany you have a good journey.

Apple muncher May 6, 2012, 4:49 pm

I am using the latest version of itunes and when i hold the alt key and press restore the is no pop-un window. What can i do?

Leeroy March 12, 2010, 4:50 pm

If anyone can help im very stuck.

Using the pwnage tool to create my custom 3.1.4 ipsw doesnt work on my 3.1.2 3gs jailbroken by blackra1n.

everytime it completes the checks with itunes after ive option restored to my custom ipsw i get the usb cable and itunes logo on my iphone screen and then an error code.

to get my iphone working again i have to use blackra1n again to by pass this screen so it boots.

im worried because i dont even think it will let my restore to 3.1.3 through apple as this holding screen locks the phone from moving on.

really need some help here anyone

iPhoneHeat March 12, 2010, 7:34 pm

You need to jailbreak iphone on each reboot… it’s called tethered jailbreak..
it’s the best solution for 3GS users ATM.. I strongly recommend to not to got for 3.1.3

Leeroy March 12, 2010, 8:07 pm

but it happens while im restoring… so i run blackrain then also, and the restore will carry on and be complete ???

i know you need blackra1n to reboot because its tethered, just wouldnt have thought to run it alone side the restore of my custom 3.1.3 buolt from pwnage.

in less ive got this really wrong and miss understanding.

iPhoneHeat March 12, 2010, 11:18 pm

sorry could not get you…
you’re restoring custom 3.1.3.. right!
and in the middle you’re asked to restore again??? (recovery screen)

btw.. you should not updating to 3.1.3 unless you’ve SHSH saved @ Cydia

Leeroy007 March 13, 2010, 2:47 pm

SHSH are on file.

I’ve created my custom 3.1.3 ipsw using pwnage 3.1.5

alt+ restore to select my ipsw custom

it does the checks to apple, all fine, it starts the restore

THEN my screen flicks to the USB + iTunes logos and doesn’t do anything from there. If I wait long enough it then puts a error window up. I force quit iTunes then have to use blackra1n to get my phone to boot up.

How do I get round this, so I can restore? I have to use 3.1.3 because apple have stopped signing. Haven’t got alot of choice and I have to restore as my phone is doing some weird stuff.

iPhoneHeat March 13, 2010, 10:50 pm

try ready made custom firmware 3.1.3… can be found under iPhone firmwares category

Leave a Comment