Jul 25

Here is a tutorial on how to use the newly released WinPwn 2.0. It’s fairly easy to use, but here’s a step-by-step guide on the features. To use this version of WinPwn, make sure you first uninstall WinPwn 1.0 if you have it already installed. Installing 2.0 over 1.0 will cause a few problems. Also make sure you are using iTunes version 7.7.

UPDATE: WinPwn has been updated to version It also uses up to 300MB of your computer’s RAM, so it would be a good idea to close other applications (besides iTunes) before starting.

So first, you will need the 2.0 firmware file. If you don’t already have it downloaded, you can download the first generation iPhone firmware file here and the 3G firmware here. If you already have the file, be sure it is the 5A347 build. If you are unlocking the first generation iPhone, you will need the 3.9 bootloader file and the 4.6 bootloader file. Download these items and save them to a folder you will remember, such as your desktop. Now we can get started.


Double click on the WinPwn icon on your desktop. This screen will appear.

Now, click on the “Browse .ipsw” button. Locate the 2.0 firmware file you downloaded earlier, and double click on it.

After a bit, WinPwn will recognize the file as either an iPhone firmware, or an iPhone 3G firmware. Be sure you have the correct firmware for your model.

Now we’ll create our custom firmware. Click on the “IPSW Builder” button on the left. The firmware builder will appear. On the first tab, we have the choice of including Cydia and activating YouTube. You will want to select Cydia. Only select the YouTube activation if you are not on AT&T.

On the second screen, we have the option to add a custom boot and recovery image to the firmware. To add a custom boot or recovery logo, click on the “Boot Logo” or “Restore Logo” buttons to search your computer for boot logos, or you can click “Search Online” to use logos other people have made.

On the third tab, we have the ability to upload custom payloads. To add one to the firmware, check the Custom Payload box and tap Select Payload to find it. This step can be skipped, as it is not necessary for the average user, or for the success of the firmware file creation.

On the very last tab, we have the Advanced options. Here’s an explanation of each of the options. “Activate Phone” will activate the iPhone so you can use it without activating with iTunes. Do not check this if you are with AT&T. I’m not entirely sure what the “No Wipe” feature does, but CMW says it doesn’t make a difference if you check it or not. “Enable Baseband Update” will use the 2.0 baseband with the firmware, be sure to check this. “Neuter Bootloader” will, as it says, neuter the bootloader. You will also want to check that. Next, there’s the option to upgrade of downgrade the bootloader. You will most likely want to upgrade to 4.6 if you have not already. “Unlock Baseband” will unlock your phone for use with other carriers besides AT&T. Second to last, you have the option to autodelete BootNeuter.app. This is advisable. You most likely won’t need it again, and it’s also very dangerous if someone decides to play with it. If you selected any of the bootloader options, you will need to click the Bootloader buttons locate the bootloader files you downloaded earlier. Also, the last few options, the neutered bootloader, bootloader upgrade and downgrade, the baseband unlock, and the autodelete, are not available for the iPhone 3G. These options may come later when advances are made, but for now, they are not.Â

Now that you are done building your firmware, click the “Build .ipsw” button in the lower left. Now locate where you will save your custom firmware. Once you decide where to save it, click Save. You will now see the progress updated as it happens. Once it is finished, you will get a confirmation saying your .ipsw was successfully created. Click OK. You will now be back at the regular WinPwn screen.

Now we will pwn iTunes, so you can restore to your custom firmware file. Click on the “iPwner” button on the left. Now locate the CUSTOM firmware you made a few moments ago and double click on it. You will then get a confirmation saying that iTunes has been pwned. Click OK.

Now that iTunes is pwned, we can restore to our own firmware. Load up iTunes and connect your phone. Now, hold down the sleep/wake button, and slide to turn your phone off. Be sure your phone is off, still plugged in to the computer, and iTunes is open. Now, hold down the sleep/wake button and the home button at the same time for exactly 10 seconds. Then release the sleep/wake button and continue to hold the home button. After a few seconds, if done correctly, iTunes will notify you that it has recognized an iPhone in recovery mode, but your iPhone’s screen will remain dark, as if it is powered off. Click OK on the iTunes pop up. Now hold the Shift button on the keyboard and click on Restore. Locate the custom .ipsw file you created earlier and double click on it. iTunes should extract the software and restore the phone as it usually does. When it is finished, your iPhone will restart. If you selected any of the booloader options, or selected to unlock when you were creating your firmware, BootNeuter will start when your iPhone boots back up. It will proceed flash your bootloader and baseband based on the options you chose earlier. When it is finished, your phone will restart once again. You will now have a jailbroken/activated/unlocked iPhone!

\\ tags: , , ,

106 Responses to “WinPwn 2.0 Tutorial”

  1. iphoneinator Says:

    I have a question.. Will need to check stuff like “enable baseband update” if all we are planning to do is jailbreak the iPhone 3G?

    Thanks a lot for the guide! Y’all are the best at explaining all of this!

  2. Braden Says:

    If you are jailbreaking the iPhone 3G, those options cannot be used. So you will not need to check that. =]

  3. iphoneinator Says:

    oh.. Hah! Thanks.. I have been trying to do this all day and couldn’t get it to work.. When I tried to restore it said “unknown error occurred” I got error (6) (48) (1600) (1601) (1602) (1603)

    Then I gave up and went and ate dinner and came back and realzied winpwn already updated so I’m hoping that’ll fix my problems..

  4. Braden Says:

    Well I hope it works for you. Good luck!

  5. iphoneinator Says:

    any knews on what happens when apple releases 2.1 (check out gizmodo)? Am I gonna have to do this all over again?

  6. Braden Says:

    I’m not completely sure. But this version of WinPwn should work for you. The first version didn’t work with the iPhone 3G.

  7. thabigboss Says:

    HEY DUDES GUESS WHAT MY IPOD WENT BLACK AND NOW MY PC DOESNT FIND IT KOOL UHH ………………. OK SO IF CMW READS THIS :::THANX FOR FUCKING MY TOUCH :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad: :mad:

  8. Braden Says:

    Try a different USB port, or a different computer. Hold down the home button and sleep for a while and see what happens. Try everything before blaming the developer. You chose to use the software.

  9. iphoneinator Says:

    oh! That might have had something to do with it..

  10. thabigboss Says:


  11. thabigboss Says:

    :cry: :cry: :cry: :cry: :cry:

  12. Braden Says:

    Haha. Yeah, maybe. :razz:

  13. akedo1 Says:

    wow.. you are “hacking” into your $3-500 toy and you get mad when you use early barely re-leased buggy hacking software with disclaimers all over it…. and instead of coming on here and asking for help.. you whine like a whuss.. I have had the exact same issue before.. and it was easily fixxed. and no i will not help some whining snivelling whuss.. good luck. ( keep messing with it..and follow some other peoples comments and all will be good……whuss.) SORRY to any mod or admin.. but damn thats too whiny for me…

  14. henry Says:

    where do i get the custom payload at?

  15. asa Says:

    Got a question – Everything works great BUT when itunes restores my music, contacts , pictures ect. the camera stops working!!! It opens and closes. This is the only bug I have found. Anyone else notice this?

  16. asa Says:

    Okay seems to be a BUG being discussed on apple forums….http://discussions.apple.com/thread.jspa?messageID=7602314&tstart=0

    Chalk this up to more problems with apples 2.0 …come on bring out the 2.1 already!!

  17. Braden Says:

    Try restoring from no backups and see what happens.

  18. Braden Says:

    Custom payloads are packages that can be added to the firmware to be installed on the phone. These aren’t necessary for the average user. This step can be skipped. I’ll update the tutorial.

  19. asa Says:

    Okay Restored 3 times and finally found a way around this. I unchecked it so itunes would not re load my pictures and it works now. Camera opens as it should but no old pictures. Kinda Lame but still working…. :roll:

  20. Multinova Says:


    Try to hold sleep/power + home button for quite some time. The device should come back up. Even if it’s only the apple sign.

  21. Multinova Says:

    You can import your Pictures via iTunes :)

  22. Zubair Says:

    Thanks alot….I successfully updated to version 2.0,,,,,,,Thanks for all who contributed on this project…

  23. Apurba Says:

    What should i do if i want to upgrade my 8gb ipod. Its running 1.1.4 and has been pwned already. Should i wait?

  24. Braden Says:

    Click on Restore in iTunes. It’ll ask you if you want to download the new firmware. Once you have the 2.0 firmware on your iPod, download WinPwn and follow this tutorial, except load in the iPod Touch 2.0 instead of the iPhone’s.

  25. sheep-man Says:

    :???: i keep on getting error (6) when im restorinf from my custom firmware.. help please :sad:

  26. whizard Says:

    If your touch is your life, don’t mess with it or deal with the results
    if you use drugs also don’t complain about the fact it messes with your health.
    if you are unsure how things work out don’t try things without reading forums/manuals.

    everything worked fine with me, also ot the black screen and not being recognized, did the same thing again after a restore and then it worked fine

  27. Joe Says:

    Hi, I used Winpwn but Enable Baseband gray out and I cannot click on it. What I did wrong? Also after I restore using iTunes7.7, it failed (sorry do not remember error).
    Please advise,

  28. Jasper Says:

    hi guys, i am using a 1st gen 8gb iphone in singapore… one fine day i updated it to version 2.0… as u noe, it got stucked… i followed the method mention here and end of the day, i still get error 1600… anyone can help?

  29. Jasper Says:

    i did a 2nd attempt… i got 1601 instead

  30. Multinova Says:

    CMW fixed lot’s of errors in the latest winpwn release You can download it from

  31. iphoneinator Says:

    im really glad this guy keeps updating winpwn and fixing all the bugs but on the downside i cant keep up!!!!! :lol: im afraid hes gonna release an update with something REALLY important and im gonna have to do it all over again.

  32. Braden Says:

    Make sure you are using the newest version of WinPwn. An update was released just a while ago. Download from

  33. iphoneinator Says:

    has anyone recieved another mirror? i found one for yesterdays release from ipodtouchfans (i think) but i cant find one for this one! (my computer is blocking the rapidshare and megaupload sites.

  34. gurvir Says:

    Hi I used winpwn, but when i tried to restore using itunes it gave me eror 1403. anyone got the solution???

  35. iphoneinator Says:

    give apples support site a try.. or google..

  36. Mr. Rogers Says:

    alright so i completed all the steps until the end when i restore using iTunes. After its done it fails and gets and error message, i think it was number 6

    im using winpwn

  37. Mr. Rogers Says:

    Ive actaully attempted it a couple times and also got an error number 5
    everything was totally fine and on track right until the end.

    could i get some help please?

  38. GRAZTD Says:

    worked great but i carnt get any sig?? i’m using iphone 3g i followed as you said

    anyone else getting no sig ????

  39. java Says:

    will this UNLOCK my 3G iphone? will i be able to use different sim cards with it?
    currently my iphone is locked to ROGERS network in CANADA.

  40. peptidoglycan Says:

    does this work with the 2nd Gen iphone..? if it does, does it mean i’ll be able to use both appstore and installer together on my iphone ?
    thanx :smile:

  41. Braden Says:

    This will not unlock the iPhone 3G. The unlock options are disabled, since an unlock for the iPhone 3G has yet to be found.

  42. Braden Says:

    Yes, this works with the iPhone 3G, and you will be able to use the App Store and Cydia together. Installer is not yet ported over to the 2.0 firmware just yet, so it’s still unavailable. But you will have Cydia.

  43. Braden Says:

    Are you with AT&T? If you are and you checked the Activate Phone option on the advanced tab when making your firmware, you will have no signal, because the phone will not activate properly. To fix this, make a new firmware, but leave the Activate Phone option unchecked. If this is your problem, that is.

  44. Braden Says:

    Are you sure you’re in DFU mode?

  45. Braden Says:

    Does it block MediaFire?

  46. GRAZTD Says:

    no with o2 in uk using the new winpwn am trying to un-check activate phone and youtube fix just adding cydia

  47. Jasper Says:

    tks brother… can le… i now using a 1st gen 8gb iPhone with version 2.0 after ipwning with the winpwn 2.0.3
    all thanks to iphonefreakz.com


  48. Braden Says:

    That should fix your problem. Good luck!

  49. GRAZTD Says:

    i hope so will reply when restore has finished :)

  50. GRAZTD Says:


    so far so good :grin: :grin: :grin: :grin: :grin: :grin: :grin:

  51. Braden Says:

    I’m glad it worked out for you.

  52. Braden Says:

    Congratulations! And you’re very welcome. :smile:

  53. java Says:

    thanks for the reply Braden. So then i guess i ll have to wait. Am I right to guess that once the unlock option is found its going to be included in a version of WinPwn? (say, 2.0.4 or 3.0 etc)

  54. Braden Says:

    You’re welcome. And yes, once an unlock is found, cmw will update WinPwn to include the unlock.

  55. Mr. Rogers Says:

    DFU mode is just when the usb cord and the itunes logo show up on the iPhone right?

  56. Braden Says:

    Nope. DFU mode is where iTunes says it recognizes an iPhone in recovery mode, but the iPhone’s screen will remain dark, like it’s off.
    Make sure the iPhone is plugged in to the computer, turn it off. Now hold the home button and power button at the same time for exactly 10 seconds. After 10 seconds, release the power button but keep holding the home button. After a while, your computer will recognize the iPhone and iTunes will notify you that it is in recovery mode. Now restore to your custom .ipsw after pwning iTunes.

  57. java Says:

    Another question : :oops:
    How do these sites that are trying to sell their unlocking solutions for the iphone 3G do it then? Are there other ways to do it?

  58. Braden Says:

    I’m not completely sure. I think that they are selling outdated methods, and passing them off as if they work. I think they write their own reviews also, but that’s just me. :grin:

  59. Seanshadow Says:

    I am using an ipod touch 8gb and i followed this tutorial exactly except for the whole iPhone part but i am still getting an error when i try to restore. I am made sure i am in DFU mode

  60. Croft Says:

    Thanks a bunch for the tutorial! I never owned a first gen iphone so jailbreaking is a new experience for me. It’s sounds silly and obvious, but I’m also glad you noted deselecting the “activate” check box for 3g users. Every other tutorial I read didn’t mention it and I’m sure I would of screwed something up.

  61. Apurba Says:

    Yeah I just updated my Ipod Touch 8gb to the original 2.0 by Apple.
    Now should uninstall WinPwn 1.0 and install 2.0? I dont have the firmware to customize either. Should I just use Pwnagetool 2.0?

  62. Apurba Says:

    do i have to pwn my ipod again. When it was 1.1.4 i pwned it already.

  63. Apurba Says:

    Sorry to annoy u so much. Im a noob. Can i use any Ipod Restore file for pwning, or do i need a special one. I have this one but when i was trying to go from 1.1.4 to 2.0 itunes would give me error 1403.

  64. iphoneinator Says:

    if your are currently on 2.0 NOT pwned you need to completely uninstall winpwn 1.0/2.0.0.x then install the latest version. Then you need to download the 2.0 iPod ipsw file from iphonefreakz download page. Then follow tutorial. Did that answer it? (you made it a little confusing :grin: )

  65. Apurba Says:

    yeah i have winpwn 2.0 problem is i also have the file however everytime i open winpen and browse that .ipsw file for 2.0 it gives me error
    Unknown file: C:\Documents and Settings\bmaitxt\Desktop\iPod1,1_2.0_5A347_Restore.ipsw

  66. iphoneinator Says:

    sounds like a problem you would have with installing winpwn over the previous version.. I would suggest uninstling it and completely reinstalling it.. And if it still doesn’t work, reinstall the iPod 2.0 ipsw file it says it can’t recognize.

  67. Braden Says:

    I agree. Try uninstalling it and reinstalling it. Then if that doesn’t work, redownload the iPod firmware file.

  68. Braden Says:

    You’re very welcome. :smile:

  69. Apurba Says:

    yeah thanks everything worked but then the build .ispw thing fails
    it worked once i then pwned itunes but when i try to retore with
    the custom .ispw i get error 1403

  70. jon Says:

    i had the same problem with the build .ipsw i found out the problem was when i selected pictures for boot logo and whatnot it messed it up. if you uncheck that it should work.

    i dont know bout error 1403.. try googling it. sounds like problem with .ipsw

  71. iphoneinator Says:

    @ apurba:
    I had the same problem with build .ipsw and I found the problem was selecting a picture for bootlogo and whatnot and deselecting it fixed it. The error 1403 I don’t know about. Try googling it..

  72. Apurba Says:

    yeah i keep on getting failed to create ipsw file error

  73. iphoneinator Says:

    sorry i said the same thing twice :roll: !

  74. iphoneinator Says:

    and your sure the ONLY thing you have checked is cydia (that means activate, boot logo, restore logo, custom payload, activate, any baseband things, they should all be unchecked. it sounds like a problem with the original .ipsw file. did you ever try redownloading it?

  75. apurba Says:

    yea tried it besides when u build a .ipsw for ipod u only get 3 tabs u dont get the advanced 1 thanks anyway

  76. Stephanie Says:


    I am completely new to this and want to make sure I am doing this correctly. I have a brand new iphone 3g in Australia, I am using an authorised carrier and my iphone says it is Version 2.0 and my modem firmware is 01.45.00. So I need to down load firmware 2.0 3G for my iphone and I do not need to worry about the bootloader? Sorry to ask really simple questions just want to do it right.

  77. iphoneinator Says:

    yes that is correct.. Bootloader is only what you use to unlock your iPhone.

  78. Braden Says:

    Yes. Download the 3G 2.0 firmware and follow the tutorial. Don’t worry about anything associated with bootloaders or basebands.

  79. ivan Says:

    I have the following problem – when I upload the 2.0 firmware to winpwn 2.0 and proceed to creating custom firmware, I cannot check the enable baseband update, neuter bootloader, nor the unlock baseband boxes. Do you have any idea what am I doing wrong?

  80. Braden Says:

    Yes. You loaded in the iPhone 3G firmware. Those options are disabled for the iPhone 3G. If you have an iPhone 3G, you’ll have to wait a while. If you have the first generation, download the first generation 2.0 from the link at the beginning of the tutorial.

  81. ivan Says:

    Thanks Braden.
    I was able to pwn my 3G Iphone using winpwn 2.0. Also I was able to download the BootNeuter through Cydia, and I think that the application unlocked my phone. I will give it a few more attempts with different carriers and will let you know how it goes.
    Regardless of the outcome, I would like to say thank you to everyone contributing to this project.

  82. Braden Says:

    No problem. :smile:

  83. Ciarán Says:

    I just found this guide on how to get an iPhone 3G without contract but unfortunately for me it uses the at&t network and i am in the uk. Heres the link http://www.phonenews.com/how-to-get-an-iphone-3g-for-199-without-contract-3704/

  84. Alex Says:

    I need help!Every time im tryin to creat custom firmware i receive this message – “Failed to creat custom IPSW” or the winpwn closing itself before custom firmware is made.I have tried everything!Can you tell me what i can do?or can someone upload ready custom firmware for me?I have iphone 3g from Fido!Thanks in advance!

  85. Alex Says:

    I need help!Every time im tryin to creat custom firmware i receive this message – “Failed to creat custom IPSW” or the winpwn closing itself before custom firmware is made.Can you tell me what i can do?or can someone upload ready custom firmware for me?I have iphone 3g from Fido!Thanks in advance!

  86. Alex Says:

    I have tried everything!Also i have windows Xp sp 2!

  87. Make the App Store remember your password » iPhone Breaking News, iPhone mods » iPhoneFreakz Says:

    [...] 1.) A jailbroken iPhone (for a WinPwn tutorial, go here. [...]

  88. jay Says:

    for anyone having trouble restoring through Itunes (7.7) having an unknown error 6 all is not lost!

    Persistence is the key, I changed nothing (I knew it was correctly in DFU) – just tried again a 4th time and it worked. Not sure why the 4th time was any different, but I now have 5a347 firmware in the itouch.

  89. John Says:

    Hi. I am having a problem with the bootloader files.

    Everytime I download them they keep on coming up as file not recognized and it shows as a white plain paper on my desktop. Is there an application I need to download so that they can be compatible.

    My PC runs with Vista. Please help me out


  90. lee Says:

    i recently pwned my 8gb iphone 3g and i cant make any calls or texts can anyone help me

  91. Connor Says:

    So, I own a 3G iPhone. As of late, it’s been quite a pain in the rear. I’ve tried to jailbreak it numerous times, and actually accomplished just that last night. I successfully got it into DFU mode (This i know because the Window USB driver recognized a device partaining to “iPhone DFU …”) But! I neglected to uncheck the “Activate iPhone” or whatever the first box may be, which left me with no service. I’ve tried numerous times to re-jailbreak, and am sure that I’m using the newest release of winpwn (, I can’t really seem to get my iPhone back into DFU mode, trying both 10 seconds-release, and also 7 seconds-release. Neither have worked for me, and I’m not sure exactly what to do from here. I run Windows XP, and iTunes 7.7, and since I’ve previously jailbroken (although with a totally different custom firmware that I’m using now, I had to make a new one) I know it’s possible, and I’d like to do it again.

    Please help?

  92. Severin Hansen Says:

    :sad: Hi I’m getting ERROR (6) From iTunes. I tried with and without a simcard from CBBmobil. and i turned it off, COMPLETELY!, and i pressed the home-button and the sleep button for precise 10 sec, i axelly timed it. And hold the home-button; I tried with holding the button all the time and non of time after iTunes noticed, then i hold shift and clicked on restore at the same moment and found the custom file I made earlier. Now it is restoring but i got error 6. I am using 1st generation 2.0.1 and winpwn RC 1, tried 11 times now, and keep saying Restore failed because of ERROR (6)! Please help me!!! I am in need!

  93. descue Says:

    when i open the winpwn icon…all it does is go to itunes… can someone help me?

  94. Jake Says:

    Does anyone have a link to 2.0.1 ispw for winpwn 2.0.04.

  95. Multinova Says:

    i’ve added the links to our firmware page.


  96. Tony Says:

    On the last step, the software extracts but while preparing the restore I keep getting error 1604. Any suggestions/help?

  97. Alexa Says:

    Okay So I did, every thing else except the boot loader section. I down loaded the 3.9 and 4.6 files but It doesnt show up on the IPSW builder!

    HELP. I tried the pwange program on my mac and the same thing happened..what do I do?

  98. popa Says:

    :?: hi, i live in the uk and just got my iphone3g,on contract with o2. i use vista ultimate 64, can i successfully pwn my iphone with winpwn

  99. Shant Says:

    do i check enable baseband and download the 3.6 and 4.9 for the iphone 3g or i just press unlock phone and activate?

  100. CRAIG BUCHAN Says:

    i have a 3g iphone on 201 pwnd firmware, its been working fine till earlier tonight. for some strange reason the wifi is on the blink :sad: i can find my router and enter the password and connect, the icon on the top comes on but when i try any app which uses it it wont connect to the web,. in the wifi settings half the adresses are missing or wrong ???
    i also have a itouch but on 114 and the wifi is fine so i know its not the router. i have checked the settings against the touch, thats how i know the adresses are wrong.
    i have even set up manualy to connect to my router and it stays connected but get nowhere, this could be because it was the same settings as the touch ??
    can you help??

  101. Oliver Says:

    i have an iphone 3g and it worked i succesfully did whats the steps but then wjen i put my rogers simcard it didnt work it didnt have the signal and all that can you give me some advice

  102. Patel Says:

    :???: ok i’ve been looking at this website since the day that i got my 3g 16 gb and i know i wanna do this it doesn’t seem to hard at all just i wanna know how do i get all the things that are on my iphone stored somewhere else?

  103. Patel Says:

    Sorry dumb question i figured it out

  104. Patel Says:

    Ok I really need to get WinPwn and none of the links work on my computer well like i can download them but in the end when everything is installed it wont let me run WinPwn it says something about error and framework stuff anyone have advice?

  105. popa Says:

    you need dot net framework to run it i think you can download it from microsoft :wink: hope it helps

  106. jhonny Says:

    I created the firmware, but a wrong 1600 block the process somebody give me a solution thanks :grin:

Leave a Reply