苹果iPhone软件破解全攻略

6月29日苹果公司推出其首款手机产品——iPhone，上市两个 多月以来，销量已经过百万，然而其绑定AT&T的服务，让其他地区用户无法使用其通讯功能，全球的黑客都箭指苹果iPhone，终于于近日 modmyiphone小组将其通过软件方式进行了破解。手机中国各位专家齐心合力验证了这个方法，并将破解的详细步骤公布出来，提供给各位苹果迷。

准备工作

下载并安装iUnlock软件包，你必须确保你的iPhone运行在1.0.2版本固件上，否则将无法保证破解的顺利进行。

第一步

有一些初步的准备工作，你需要一个安装有SSH的iPhone，使用SSH配合SFTP工具，可以将电脑与iPhone进行连接，从而对文件执行编辑和管 理等操作。另外一个很重要的步骤是：执行“Settings”->“General”->“Auto-Lock”或者将你的iPhone设置 为“Never”。这一操作可以保证在破解过程中iPhone不会自动锁定。

第二步

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14335.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

将SIM卡取出，将ICE03.14.08_G.fls, iUnlock, and nor三个文件通过SFTP工具传送至iPhone的/user/bin文件夹下。

第三步

打开Terminal命令窗口（相当于Windows的命令提示符状态）“Applications”->“Utilities”->“Terminal”，并键入“ssh -l root your.ip.address”命令。

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14336.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

接着Terminal命令窗口会提示输入密码，密码为“dottie”。输入后命令提示符会另起一行，紧接着执行“launchctl unload -w /System/Library/LaunchDaemons/com.apple.CommCenter.plist”将这个文件下载到本地。之后命令 提示符会另起一行。
第四步
输入“cd/usr/bin”，换行后接着输入“chmod +x iunlock”，继续换行，输入“./iunlock ICE03.14.08_G.fls nor”，换行。接着大约等待20分钟左右，会看到进度条，不用多久就会达到100%。

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14337.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14338.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14339.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14340.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14341.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

OK，进行到这里，将命令窗口关闭，打开一个新的Terminal窗口。快捷键是Apple+N键。让SSH连接到手机，键入：“ssh -l root your.ip.address.here

第五步

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14342.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

输入“minicom -s”，接着会弹出菜单，选择“Serial Port Setup”一项。

第六步

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14343.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

接着会弹出一个新窗口，选择“A”，删除多余的空格，只留下“/dev/tty.baseband”，回车，接着按下“ESC”键返回到主菜单。

第七步

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14344.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

选择“Save setup as dfl”项，它会提示一些错误，但是不用管它，继续，执行“bbupdater -v”，然后选择“Exit”返回。

第八部

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14345.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

输入“AT S7=45 S0=0 L1 V1 X4 &c1 E1 Q0”回车，有可能它会连接失败，如果出现这种情况需要卸载CommCenter，重新安装一次。这种情况出现的机率很小。

第九部

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14346.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

接着输入“AT+CLCK="PN",0,"00000000"”回车，接着输入“AT+CLCK="PN",2”回车，第一次执行有可能回产生错误，如果这种情况出现，那就重试一次，看到“OK”就说明一切正常。

第十步

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14347.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

现在，重新打开一个Terminal命令，输入“ssh -l root your.ip.address”，接着输入密码“dottie”。再输入“/bin/launchctl load /System/Library/LaunchDaemons/com.apple.CommCenter.plist”回车。

第十一步

打开我们心爱的FTP工具（在前面我已经介绍过SFTP的使用方法，当然你还可以使用CyberDuck、Transmit或者其他FTP工具。）可以参照第二步的操作进行。

screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onmouseover="if(this.width>screen.width*0.7) {this.resized=true; this.width=screen.width*0.7; this.style.cursor='hand'; this.alt='Click here to open new window\nCTRL+Mouse wheel to zoom in/out';}" onclick="if(!this.resized) {return true;} else {window.open('http://digi.tech.qq.com/images/liuxin/07/9.10/10/14348.jpg');}" onmousewheel="return imgzoom(this);" alt="" border="0">

将我们的文件传到iUnlock文件夹中，其中有一个名为“lockdownd”文件，上传到iPhone的“/usr/libexec”文件夹中，选择“YES”覆盖原文件。

将新的SIM卡插入手机中，重启手机。你可以看到左上角的运营商地标志已经换成新的，从此您已经是这一款完全破解版iPhone的主人了！