UltraSn0w 1.2 - Unlock for iOS 4.2.1 on iPhone 3GS, 3G is Out Now! - iPhoneHeat

UltraSn0w 1.2 – Unlock for iOS 4.2.1 on iPhone 3GS, 3G is Out Now!

The iPhone Dev-Team has just released the UltraSn0w 1.2 to unlock iOS 4.2.1 on  iPhone 3G and iPhone 3GS. We strongly recommend you to read the Dev-Team blog post first.

Today we’re pleased to announce our free carrier unlock for iPhone3G/3GS owners with a baseband later than 05.13.04.  The unlock for that baseband exploited the AT+XAPP command, thanks to a crash initially discovered by @sherif_hashim (@Oranav also found this crash).  So what hole are we exploiting today, since Apple closed that AT+XAPP hole?  Well, we’re exploiting the exact same hole!

It turns out that the very first iPad firmware 3.2.2 has baseband version 06.15.00 still vulnerable to AT+XAPP.  The iPad baseband is built for the exact same baseband chip as the iPhone3G/3GS — they’re fully compatible! Some of us have been running 06.15 for weeks now on our iPhones in preparation for this release.

Since 06.15 is a higher version than 05.14 or 05.15 (where AT+XAPP is gone), anyone stuck at those versions can simply upgrade to 06.15 to unlock again!  Luckily for us, Apple *still* provides the iPad FW 3.2.2 with this vulnerable baseband right from their own servers. (Grab it now, before they take it down!)

We’ve been busy updating both PwnageTool and redsn0w to make the baseband update as seamless as possible.

  1. First up is “PwnageTool 4.1.3 Unlock Edition”.  It has a special dialog box which will ask you if you want to update to the iPad baseband.  You must already have the iPad 3.2.2 IPSW on your computer (see the above link)….so just point PwnageTool at it (or let it find it on its own if you’re in “simple” mode).
  2. Directly after PwnageTool 4.1.3 is available, the official ultrasn0w repo http://repo666.ultrasn0w.com will be updated with ultrasn0w 1.2, which covers iPhone 4 baseband 01.59.00 and iPhone 3G/3GS basebands 04.26.08, 05.11.07, 05.12.01, 05.13.04 and now 06.15.00.
  3. Finally, we’ll release an update to redsn0w today for those without Macs and can’t run PwnageTool.  The new redsn0w will give you the option to update your baseband to 06.15 too.


  1. There is no way to come back down from 06.15, and there’s no hiding the baseband version from Apple.  You’ll be voiding your warranty in a very obvious way.
  2. If some future baseband comes out with a critical fix, you won’t be able to update to it if it remains down in the 05.xx sequence (then again, you wouldn’t update to it if you wanted to keep your unlock anyway).
  3. Starting with FW 4.2.1 if you have 06.15 on your iPhone you won’t ever be able to restore to stock firmware (it will fail).  You’ll need to only restore to custom IPSWs (then again, if you’re unlocker you should already be doing that).

Certainly don’t update to 06.15 if you don’t need to!  Only do this if you need the unlock and you’re stuck on 05.14 or 05.15, and you’re willing to assume the above risks.

This PwnageTool also contains a 4.2.1 bundle for iPhone3G owners…for all else, it’s still only 4.1.  If you have an iPhone3GS with an old bootrom, the new redsn0w will handle 4.2.1 for you (in fact it covers 4.2.1 for all devices, even though some of them are still tethered at 4.2.1 until @comex can work some untethering magic).  iPhone3GS users with old bootroms who want to go to 4.2.1 should not use this PwnageTool! Update to stock 4.2.1 first, then use the upcoming redsn0w to update your baseband.

Please feel free to use our comments section for questions.  We have some very knowledgeable and helpful moderators:  angiepangie, Confucious, dhlizard, and Frank55!

Official Bittorrent Releases

PwnageTool 4.1.3  – PwnageTool_4.1.3_Unlock_Edition.dmg.5994102.TPB.torrent

SHA1 Sum = adda6d882dce1b5117d01586037de289407e038a

A detailed step-by-step instruction on how to use PwnageTool and upcoming RedSn0w to jailbreak and prepare baseband for UltraSn0w 1.2 unlocking will be posted shortly. Stay Tuned!


Read MoreYou can follow us on Twitter, Join us at Facebook, and also Subscribed to RSS Feed to receive latest updates.

Also checkout:

64 comments… add one
AfRoO November 29, 2010, 2:51 am

yea they made it again

AfRoO November 29, 2010, 3:06 am

I Hace iPHONE 3GS 4.1 new bootroom, and nothing happen still no service after long time searching so what next 🙁

hillaryjw March 2, 2011, 11:14 am

You probably should use an older version of pwnage tool. I was having this problem too because I was just pwnage tool 4.2 which doesn’t let you adjust the bandwidth to 6.15 which is where you need it to be for ultrasn0w to actually work. So, download pwnage tool 4.1.3 and you should be able to readjust the bandwidth which will prep your phone to work in ultrasn0w.

Gallifrey November 29, 2010, 2:53 am

this method have some cons….

latium November 29, 2010, 5:44 am

I agree with you, because u need to update the bb to 06.15 in order to unlock with the new ultrasn0w 1.2, I don’t like that because we will get stuck into a forced BB and is not possible to restore the iphone with the original fw but only with a custom IPSWs, my opinion I do not like this method, I hope they find some new exploit into the new bb.

latium November 29, 2010, 11:27 pm

Some people are experiencing loosing the Wi-Fi after they update the BB to 6.15.00, like I said before it is not a good method to unlock the iphone stay away from this. That is my opinion.

Wadezo November 29, 2010, 2:58 am


Hi November 29, 2010, 4:57 am

Do u play runescape?

Wadezo November 29, 2010, 3:02 am

how do I use this, it’s a .dmg file :[ can neone lend a hand?

Plezuraddikt November 29, 2010, 3:08 am

My friend has a 3G on iOS 4.1 with baseband 5.14. Does she have to upgrade to 06.15 or can I just do the unlock and update to 4.2.1 with the new redsn0w?

bhen November 29, 2010, 3:09 am

how do i upgrade to 06.15?

iPhoneHeat November 29, 2010, 3:49 am

guide in process

AfRoO November 29, 2010, 3:51 am


Ahmad November 30, 2010, 4:54 pm

I have Windows Vista 32-Bit and have a Iphone 3gs iOS 4.1 New bootroom and hav upgraded the Baseband with redsn0w beta5 and unlocked it with Ultrasn0w 1.2 and it’s working perfectly 🙂 Thanks!!!!!

najAF November 29, 2010, 3:51 am

just wait for new redsnow to come and upgrade to it

bhen November 29, 2010, 4:03 am

would it take long? or should i borrow a mac?

leonard November 29, 2010, 3:23 am

is this working on ios 4.1 02.10.04? i need to unlock please help me.

Roald November 29, 2010, 3:29 am

Ok guys I have an iPhone 3G with IOS 4.0.2 modem firmware 05.14.02 the wi-fi don’t work because the update to 4.0.2 IOS How can I unlock this darn thing??? I tried Cyder 2 but I don’t know how to use it. Before I get scorched I NEVER UPDATED THIS THING I PURCHASED ON EBAY AS IS. I have a 2G iPhone and will like to get this 3G to work with T-mobile any help will be appreciated.

Roald November 29, 2010, 8:48 pm

This sucks I have done the redsn0w and updated the Baseband and now since I have no Wi-Fi I cannot unlock I tried Cyder 2 but there’s no way i can get the package to download from repo666.ultrasn0w.com

Aster November 29, 2010, 3:39 am

I hv a firmware of 04.26.08,is it possible for me to upgrade to ios 4.2.1..Will I be able to use the Internet tethering option coz it’s very important to me..Can sm one help????

Aster November 29, 2010, 3:52 am

I forgot to mention tat I’m using an iPhone 3gs on ios 3.0(unofficial)

Aster November 29, 2010, 3:41 am

If I use redsnow to jailbreak ma iPhone 3gs,will be an untethered jailbreak??

najAF November 29, 2010, 3:52 am

can i upgrade to 6.15 with old redsnow

Nuno Neves November 29, 2010, 4:00 am

For Iphone 4. Any idea when it’s gonna be out???

vloweer November 29, 2010, 4:02 am

so wait, i have to choose ipad pwnagetool for my iphone ???

apple hater November 29, 2010, 4:43 am

I have a same problem ( 3Gs new bootrom, FW 4.1, BB 05.14.02 ) nothing happen still no service after long time searching …..

slik4u November 29, 2010, 4:43 am

plz i have 3g 4.1 with bb 5.14. How do i unlock my phone.ply help

draco809 November 29, 2010, 5:03 am

what about bb 5.14.02…

Mr.Etcho November 29, 2010, 5:10 am

What about 4.1/bb:02.10.04 guyzzzz ???!!!!!

steve November 29, 2010, 5:25 am

Hi, how about the iphone 3gs 5.12.04? thanks in adv

iPhoneHeat November 29, 2010, 6:08 am

Simply install ultrasn0w from cydia

steve November 29, 2010, 11:21 am

sorry, i meant to say 5.14.02 on an iphone 3gs 4.1
what do i do from there? thanks a lot

sowat99 November 29, 2010, 5:30 am

this is also what I am waiting for… 🙁

Latium November 29, 2010, 5:31 am

Hi guys don’t try anything yet, because u need to update the bb to 06.15 in order to unlock with the new ultrasn0w 1.2, I don’t like that because we will get stuck into a forced BB and is not possible to restore the iphone with the original fw but only with a custom IPSWs, my opinion I do not like this method, I hope they find some new exploit into the new bb.

vinir November 29, 2010, 5:33 am

what about Iphone 4g 02.10.04???

Ordinary_guy November 29, 2010, 5:46 am

Hey guyz.. I have a serious problem. Ok I have Mac.. I builded a custom 4.1 for both 3G and 3GS. After it all done I first restore the custom for 3G and I did get the 06.15.00 baseband. However when I restore a custom for 3Gs I didn’t get the baseband 06.15.00.the baseband I got is still 05.14.02!!!! Anyguy could help? I did everything the same way as I did on the 3G…

iPhoneHeat November 29, 2010, 6:07 am

PwnageTool is being updated to fix this issue..

Ordinary_guy November 29, 2010, 6:22 am

Thanks iPhoneheat.. Can I ask u another question.. About the custom firmware and the stock firmware. In my experience, the custom firmware seem to drain more battery life than the stock one. Is it true?

draco809 November 29, 2010, 6:15 am

guys my iphone 3gs is old bootrom on version 4.2.1 bb 5.14.02 jailbroken with the new redsn0w… how can i unlock it?

sandy November 29, 2010, 8:43 am

I am on the same situation. Let me know if you are able to unlock ?

ferrara5 November 29, 2010, 6:51 am

I have iphone 3g with io 4.2.1 bb 5.15 bootlogger 6.02.
my phone is jb with lasted redsnow.
I have windows computer.
I get the instruction about upgrading my bb 6.15,

but don’t understand if I need to un jailbreak my phone for new redsnow and do I need to downgrade to io 4.1? the only reason I ask is that is says you can only restore with a custom ipsw and there isn’t one for 4.2.1 only 4.1?????

Please help I don’t want to do anything until I know what is the right way for my circumstances.

sandy November 29, 2010, 8:41 am

hi iphone Team, i have iphone 3GS. Its jail broken. I have been waiting for unlock procedure for this model.

I have IOS 4.1 with BB 5.14.02. Please help. I have been waiting for this from 3 months.
Questions: Do i need to upgrade the BB to 6.15.00 to unlock.

ashtonchan November 29, 2010, 12:38 pm

hey guys, i have a 3G with 05.12.01 baseband, can i unlock with this coz it says “with a baseband later than 05.13.04.” in the first paragraph. please confirm. thanks.

AfRoO November 29, 2010, 2:22 pm

The Dev-Team has updated redsn0w to version 0.9.6beta5 for unlockers. Below is all the info.

Update #2: The new redsn0w 0.9.6beta5 is out. It gives both Windows and OSX users the ability to flash the iPad 06.15 baseband on iPhone3G or iPhone3GS. It fetches the baseband files directly from Apple for now (the only IPSW you ever point it at is the stock IPSW for the FW on your iPhone right now). There may be a long delay while it’s doing this (their servers are currently getting pounded).
windows user :http:// sites.google.com/a/iphone-dev.com/files/home/redsn0w_win_0.9.6b5.zip?attredirects=0&d=1

OSX user: http:// sites.google.com/a/iphone-dev.com/files/home/redsn0w_mac_0.9.6b5.zip?attredirects=0&d=1

If you do flash your baseband via redsn0w, please keep it plugged into USB the whole time. You don’t want your battery to die during the flash process!…

hope fully for iPHONE-HEAT to give u more info

Good luck,

kj November 29, 2010, 3:41 pm

i have 3g which i accidentally upgraded and then down graded , however after using redsn0w0.9.6b5 to upgrade the base band and ios4.1 my phone does not boot again.

it has a symbol of apple on screen any help

Mr.Etcho November 30, 2010, 4:57 am

Guyz can anybody tell me when the unlock for iphone 4g wz bb 02.10.04 we be release ??

AfRoO December 6, 2010, 4:22 am

Guyz your iPHONE 3G/3Gs Stuck on Recovery Mode after Upgrading to iOS4.1/4.2 Baseband 6.1.5??
it’s okey, Text me I have the solution.


catch yea there

RAY December 8, 2010, 8:19 pm

AfRoO: my iphone 3GS stuck at recovery mode after upgrading it to 4.2.1 and JB with ultrasn0w 0.9.6beta5. Please help me thank you

RAY December 8, 2010, 8:20 pm

also i tried to restore it through itunes, it reach to a point and gave me an error. 1015 something

kaner75 January 5, 2011, 10:50 pm

I have a iphone 3gs 4.2.1FW & MF 05.15.04.
I’ve already JB it, downloaded cydia on it. I accidently downloads ultrasn0w and now I can’t get any service with my AT&T Carrier. I can’t make call, receive call or text. I need your help on this? Do can I do to fixthis, so I can make call with my carrier I’m still under contract with them?

Thanks you
Cain Garcia

dericks January 24, 2011, 5:53 pm

Hi there,

I have iphone 3g version 4.2.1 on baseband 5.15.04.

I have jailbroken it using redsnow.

Itried to change the baseband to 6.15 for unlocking, but eveytime it says baseband fetch error. I tried 20 – 30 times. Hence my phone is not unlocked.

Is there anyone who can help me with this.

Either a way to unlock my phone for any carrier to work?

Or another way to upgrade to 6.15?
Thank you.

Ordinary_guyz January 24, 2011, 6:46 pm

Well u need to connect to Internet when u wanna fetch the ipad baseband

dericks January 25, 2011, 6:57 pm

Thanks man, but i am connected to net when i do it, but all the time it says baseband fetching error.

Thts the prob.

Any solution???

Ordinary_guyz January 25, 2011, 8:51 pm

Hmmm.. That’s weird.. Before I always get this error. But when I connect to Internet, it works like charm. Maybe you should restore it with a custom firmware that already update the baseband. All u need is the pawnage tool 4.1.3 unlock edition.. Google it..;) I hope that’s help because this is really the last option..

Ordinary_guyz January 25, 2011, 8:53 pm

I mean pwnage tool

dericks January 26, 2011, 12:46 am

I did that too. but currently pwange tool is available for mac only and i am win user.

So do you know ant s/w that works on win platform or is there win version of Pwange tool???

Ordinary_guyz January 26, 2011, 6:06 am

Well Derick.. I’m running out of option here. I guess u have to try with redsn0w a few more times. It might work one of the time.or u can borrow ur Friend’s mac. I’m sure u have a friend who’s own a mac.

By the way where are u from?

Dericks March 3, 2011, 2:36 pm

Dear ordinary_guyz

None of my friend has Mac here. i am from India and so most of us use windows users.
I have tried redsnow n number of times and now m tired of it.

Hoping to get some unlock for 5.15.04 soon without changing baseband.
Anyways thnx for ur help.

Danny July 13, 2011, 8:07 am

Hi. I have a jailbroken 3G 3.1.3, baseband 05.14.02.
Is there a way for me to unlock it? I am not sure about upgrading my bb. Or is it possible to update my 3.1.3 -> 4.1?

Leave a Comment