Thursday, November 12, 2015

Bypass iCloudLock on iPhone4 Verizon 7.1.2 (on a Mac)

Preface

I got this Verizon iPhone4 from Craigslist, the guy of course told me the iPhone had clean ESN and it he cleared it from iTunes so I could activate it. That was not true, a few emails he claimed he cleared it and then he disappeared  so there I was stuck with an iCloudLocked iPhone completely useless.
Searching about it there seem to be a way to bypass the iCloudLock, some said use these IP's on iTunes by all of those never worked, others said just JailBreak it but it wouldn't take that either, then some said there is a way to bypass but only works on iPhone4, using the ssh_rd.jar method and after quite a few tries that worked for me on the Mac.

Required

   - Hacktivate Tool for iPhone4 (win only version once installed  find the ssh_rd_rev04b.jar file and move it to the Mac. They keep moving/hiding this file around so you have to dig for it. In a couple of days I'll place a copy in my web site if you cannot find it.
   - Make sure your Mac has Java installed mine had JDK1.8,  my Mac is on Mavericks 10.9.5
   - You need to have net access

The tries

The Hacktivate Tool for iPhone4 : in a few words this tool injects stuff that allows to access the area where the initial setup is located, which is just a Setup.app that gets launched when you need to do the initial setup of the locked iphone if you can delete this Setup.app it won't show its nasty face and you can start using the iPhone as when it was new without a lock


 Tried the exe it on a VM on my Mac  but it never worked for me as it wouldn't get too far, then I found another post with the similar idea but from the command line they had a newer ssh_rd.jar and manual set of instructions, I tried that one several times but it'll fail but it gave me the plan of attack and I went that way.



 Steps for the working method


   - After many tries on the manual method it was obvious this could be done on a Mac pure command line no funny GUI or tools, as the manual method wouldn't complete I dag into the Hactkivate tool(Win version) and found an earlier ssh_rd_rev04.jar file there pulled it from the VM to the Mac.

   - Open a Terminal and run it like this of course being in the same folder where the jar file is. Need to put the iPhone into DFU mode.
java -jar ssh_rd*.jar
 It goes thru a whole bunch of downloading this, patching this ... until it gets done and it asks to SSH to the iPhone

   - Open another Terminal and SSH using the built-in ssh from the Mac like this, using the alpine password

ssh root@127.0.0.1 -p 2022

 -  The ssh_rd tool did its pirouette and leaves the iPhone ready to get into the area where the Setup.app is, deleting this app is all we need to go straight to the iPhone as when there was no lock. Once you SSH successfully in do the cmds below

cd /mnt1
mount.sh
ls  (you'll see the Setup.app here)
rm -rf Setup.app


   This leaves the iPhone in Recovery mode, just get out of it ,  reboot and Voila!! there it is you can slide and get into the iPhone now.

 Easy as Pie ;-)

No comments:

Post a Comment