A new more reliable way is now available to jailbreak your 1.1.3 iPhone.
Be sure to do it from an 1.1.2 unlocked phone, wifi on and auto-lock to "Never".
First off, download the tar file from there
Once downloaded, you'll have the folder Jailbreak-1.1.3 available in your download folder as follows:
Angelantonio:Downloads$ cd Jailbreak-1.1.3
Angelantonio:Jailbreak-1.1.3$ ls
README ipatcher
Services.plist sources
chown umount
com.devteam.rm.plist update-prebinding-paths.txt
cp vfdecrypt
ditto vncontrol
dmg2img vsu
install.sh wget
Copy everything from the folder to your iPhone root folder as follows:
Angelantonio:Jailbreak-1.1.3$ scp -r ./* root@192.168.2.34:/
root@192.168.2.34's password:
README 100% 1824 1.8KB/s 00:00
Services.plist 100% 4591 4.5KB/s 00:00
chown 100% 14KB 14.0KB/s 00:00
com.devteam.rm.plist 100% 623 0.6KB/s 00:00
cp 100% 95KB 95.1KB/s 00:00
ditto 100% 23KB 22.8KB/s 00:00
dmg2img 100% 18KB 18.4KB/s 00:00
install.sh 100% 3364 3.3KB/s 00:00
ipatcher 100% 15KB 15.1KB/s 00:00
base64.c 100% 2281 2.2KB/s 00:00
base64.h 100% 1011 1.0KB/s 00:00
COPYING 100% 18KB 17.6KB/s 00:00
dmg2img.c 100% 9517 9.3KB/s 00:00
dmg2img.h 100% 1424 1.4KB/s 00:00
Makefile 100% 364 0.4KB/s 00:00
README 100% 682 0.7KB/s 00:00
Makefile 100% 160 0.2KB/s 00:00
README 100% 120 0.1KB/s 00:00
util.c 100% 3680 3.6KB/s 00:00
util.h 100% 397 0.4KB/s 00:00
vfdecrypt.1 100% 796 0.8KB/s 00:00
vfdecrypt.c 100% 11KB 11.1KB/s 00:00
vfdecrypt.h 100% 4248 4.2KB/s 00:00
umount 100% 15KB 14.6KB/s 00:00
update-prebinding-paths.txt 100% 5995 5.9KB/s 00:00
vfdecrypt 100% 19KB 19.0KB/s 00:00
vncontrol 100% 9260 9.0KB/s 00:00
vsu 100% 8988 8.8KB/s 00:00
wget 100% 602KB 602.3KB/s 00:01
Connect to your iPhone and get to the root folder as follows:
Angelantonio:Jailbreak-1.1.3 stephanedeluca$ ssh root@192.168.2.34
root@192.168.2.34's password:
# cd /
# ls
Applications cores ipatcher update-prebinding-paths.txt
Library cp mach usr
README dev opt var
Services.plist ditto private vfdecrypt
System dmg2img sbin vncontrol
bin etc sources vsu
chown iTunes_Control tmp wget
com.devteam.rm.plist install.sh umount
Run the installer script as follows -- be patient this process take 15 mins at least:
# sh install.sh
--12:15:09-- http://appldnld.apple.com.edgesuite.net/content.info.apple.com/
iPhone/061-4061.20080115.4Fvn7/iPhone1,1_1.1.3_4A93_Restore.ipsw
=> `/private/var/restore.zip'
Resolving appldnld.apple.com.edgesuite.net... 84.96.219.199, 84.96.219.214
Connecting to appldnld.apple.com.edgesuite.net|84.96.219.199|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 169,950,551 (162M) [application/octet-stream]
100%[====================================>] 169,950,551 335.88K/s ETA 00:00
12:22:56 (355.57 KB/s) - `/private/var/restore.zip' saved [169950551/169950551]
keyDerivationAlgorithm 0
keyDerivationPRNGAlgorithm 0
keyDerivationIterationCount 0
keyDerivationSaltSize 0
keyDerivationSalt
blobEncryptionIVSize 0
blobEncryptionIV
blobEncryptionKeySizeInBits 0
blobEncryptionAlgorithm 0
blobEncryptionPadding 0
blobEncryptionMode 0
encryptedBlobSize 0
encryptedBlob
dmg2img v0.3a is derived from dmg2iso by vu1tur (to@vu1tur.eu.org)
/private/var/decrypted.dmg --> /private/var/disk0s1.dd
reading property list, 67461 bytes from address 128314665 ...
partition 0: begin=336, size=430, decoded=284
partition 1: begin=994, size=430, decoded=284
partition 2: begin=1651, size=430, decoded=284
partition 3: begin=2311, size=58695, decoded=39524
partition 4: begin=61227, size=430, decoded=284
partition 5: begin=61909, size=26, decoded=10
partition 6: begin=62131, size=26, decoded=10
partition 7: begin=62353, size=26, decoded=10
partition 8: begin=62614, size=516, decoded=342
partition 9: begin=63326, size=851, decoded=565
partition 10: begin=64373, size=504, decoded=333
partition 11: begin=65112, size=1541, decoded=1032
partition 12: begin=66888, size=434, decoded=286
decompressing:
opening partition 0 ... 0.00 % ok
opening partition 1 ... 0.00 % ok
opening partition 2 ... 0.00 % ok
opening partition 3 ... 100.00 % ok
Archive successfully decompressed as /private/var/disk0s1.dd
mount_hfs: Resource busy
cp: omitting directory `/etc/ssh'
cp: cannot stat `/Library/LaunchDaemons/*': No such file or directory
[i] Performing the lockdownd patch
[i] found unpatched 1.1.2 lockdownd-outdated-ipe, patching
[i] patch succeeded
[i] Lockdownd patch succeeded
** /dev/rvn0
** Checking HFS Plus volume.
** Detected a case-sensitive catalog.
** Checking Extents Overflow file.
** Checking Catalog file.
** Checking Catalog hierarchy.
** Checking Extended Attributes file.
** Checking volume bitmap.
** Checking volume information.
** The volume LittleBear4A93.UserBundle appears to be OK.
** /dev/rvn0
** Checking HFS Plus volume.
** Detected a case-sensitive catalog.
** Checking Extents Overflow file.
** Checking Catalog file.
** Checking Catalog hierarchy.
** Checking Extended Attributes file.
** Checking volume bitmap.
** Checking volume information.
** The volume LittleBear4A93.UserBundle appears to be OK.
chown: /private/tmp/MediaCache: No such file or directory
mkdir: cannot create directory `/private/var/logs/Baseband': File exists
Et voilà! The iPhone reboots in 1.1.3 firmware. This works also with a 1.1.2 OTB and SIMStealth sim.