Jailbreak iOS four.three Beta on iPhone four The use of PwnageTool Bundle


 This type of jailbreak is strictly limited to iOS developers only, and will require you to have a Mac, and you must also be enrolled in either iPhone Developer Standard or Enterprise Program.

WARNING: The jailbreaking procedure is complex, and hence is meant for advanced users only. It will require you to make your own ramdisk because the latest official version of PwnageTool makes a broken one for iOS 4.3. Proceed at your own risk only. We are not to be held responsible if you end up bricking your iPhone.


  • Cydia is said to be working on iOS 4.3 Beta.
  • It is a semi-tethered jailbreak.
  • Your baseband will not be upgraded during restore process.
  • Use a utility like tetheredboot to boot into tethered mode.


This custom PwnageTool bundle can be downloaded from iPhone-Privacy. You can use these instructions to modify PwnageTool with this bundle to accept iOS 4.3 beta firmware, and then follow the instructions to create iOS 4.3 custom firmware for iPhone 4.

Instructions for making your own ramdisk are posted below:

Tools needed: OS X, xpwntool

  • Unpack the original ramdisk: xpwntool orig_restore_rd.dmg restore_rd.dec.dmg -iv .. -k .. (use the keys from wiki)
  • Mount the ramdisk: hdiutil attach restore_rd.dec.dmg
  • Free up some space: rm /Volumes/ramdisk/(some unneeded large-ish file)
  • Patch asr: mv /Volumes/ramdisk/usr/sbin/asr /tmp/; bspatch /tmp/asr /Volumes/ramdisk/usr/sbin/asr (bundle_path)/asr.patch
  • Change the restore options: edit/Volumes/ramdisk/usr/local/share/restore/options.plist with Property List Editor, add ‘UpdateBaseband’ = false – see http://theiphonewiki.com/wiki/index.php?title=Preventing_Baseband_Update for details
  • Unmount the ramdisk: hdiutil detach /Volumes/ramdisk
  • Re-encrypt the ramdisk: xpwntool restore_rd.dec.dmg pwned_restore_rd.dmg -t orig_restore_rd.dmg -iv .. -k ..
  • Replace the ramdisk inside of CFW produced by the Pwnage Tool withpwned_restore_rd.dmg You can either unzip and re-zip the CFW or replace it inside of /tmp/ipsw dir when PwnageTool is running.




Follow us on Twitter, subscribe to our Facebook Page, find us on LinkedIn