You can jailbreak your iPhone 3GS running the latest iOS 4.1 using the latest PwnageTool. The iOS 4.1 PwnageTool works only for iPhone 3GS old bootrom and will allow you to upgrade to the latest iOS 4.1 without upgrading the baseband.
- Install the latest iTunes version
- Download the PwnageTool 4.1 for iOS 4.1
- Download iOS 4.1 final version for iPhone 3GS
- Backup your iPhone 3GS by syncing it with iTunes to safeguard your important data on the phone.
Step 1: Start the PwnageTool and select iPhone 3GS as shown in the picture below.
Step 2: The pwnageTool for iOS 4.1 will automatically detect the firmware for your iPhone 3GS as shown in the image below.
Step 3: When asked “Do you have an iPhone contract that would activate normally through iTunes?” Click on No.
Step 4: Now the PwnageTool will start creating the custom .ipsw file for your iPhone 3GS.
Step 5: PwnageTool will ask you to authenticate your Mac account, ignore this prompt for now and install iOS4.1Jailbreaker installer package which is included in the .zip file you downloaded for pwangaeTool at the starting of this tutorial. Once this has package is installed, go back to the PwnageTool password prompt which you previously ignored and enter your password so that PwnageTool completes the process.
Once the PwnageTool finishes creating the custom .ipsw for the iOS 4.1 you will see the following “ihaz Success” screen.
Step 6: Now you can restore you iPhone 3GS to the newly created iOS 4.1 custom firmware. Simply click on iPhone icon from the sidebar in the iTunes. Now press the alt button on your keyboard and then click on Restore button in the iTunes and release the alt button. Now iTunes will ask you to select the location for your custom firmware 4.1 file. Select the custom .ipsw file and click on Open.
Step 7: Now iTunes will restore your iPhone 3GS with the custom iOS 4.1 firmware you created with PwnageTool. This will include several automated steps and in the end your iPhone will restart and you will get your iPhone 3GS running iOS 4.1 jailbroken.
Note: If iTunes throws error 1004 or 1015 you just ignore the error as this is normal. But as a result of this error prompt your iTunes will remain stuck in the recovery mode. To bring your iPhone 3GS out of the recovery mode download TinyUmbrella from this link. Run TinyUmbrella and click on Kick Device Out of Recovery. Now your iPhone 3GS will restart normally and jailbroken.
Now to unlock your jailbroken iPhone 3GS running iOS 4.1 you will need a phonebook SIM card if you are not having the official supported carrier SIM. Using the phonebook SIM card you can now access Ultrasn0w 1.1-1 from Cydia to unlock your iPhone 3GS.
Start Cydia and tap on the Manage button located at the bottom of the screen.
- Tap on Sources.
- Tap on Edit(located on the top left of the screen) and then on Add(located on the top left of the screen). You will be prompted to enter a url source as seen in the screenshot below. Type http://repo666.ultrasn0w.com and tap on Add Source to add this repo.
Once the ultrasn0w package is installed on your iPhone you can search for ultrasn0w in Cydia. Tap on the Ultrasn0w from the search result to unlock your iPhone 3GS. Restart your iPhone and now you can use any SIM card.