There have been a lot of discussions on the Internet related to the
release of the much-awaited Apple TV 3 jailbreak, but the exact date
hasn’t been disclosed yet. Developers have been forced to postpone the
release of the jailbreak because the creation of the hacking software is
a detailed process that requires a lot of effort and preparation.
Nevertheless, the news that the jailbreak for Apple TV 3 is in progress
is true, so here are the latest updates on developers’ work.
Apple Tv 3 Jailbreak : Stay up-to-date and get involved to Jailbreak ATV3
The jailbreak for Apple TV 3 has been through various stages since it
was first announced by developers at Chip Jailbreak Group in 2012. The
first version that was released on the market was tethered, so visitors
were not very pleased with the performance of the software. The majority
of them complained that they had to use a computer connection in order
to boot the device. The information that has been stored on the device
before the boot was deleted when the digital media receiver has been restarted.
As a consequence, developers were forced to start a new research in
order to create an untethered version of the jailbreak. The software is
currently tested and re-tested because engineers want to make sure there
will be no flaws once users decide to install it.
The first tests were
good, but then, developers noticed that part of the information was lost
during the reboot process, so they had to start everything all over
again.
The software is almost ready now, so developers estimate that it will
most likely be released before the beginning of March. Chip Jailbreak
Group assures people that the jailbreak will be worth the waiting as the
software will be endowed with many advanced features and options.
The installation process will be as easy as possible because
engineers want to meet their visitors’ expectations. All users have to
do is download the software and run the program, which will
automatically create a wizard that will guide you through the
installation process. At the end of the installation, users will have
many features to enjoy on their Apple TV 3 streaming player.
Customizing
the screen to showcase the information that is more important for the
user, as well as, sharing photos and videos with the help of other
iOS-based devices is another great feature that developers have prepared
for Apple TV 3 owners.
Wednesday, February 6, 2013
Subscribe to:
Post Comments (Atom)

I cant wait to try that.......
ReplyDeleteokay i can wait
ReplyDeleteThank you for the updates!
ReplyDeleteThis will be my first appple tv jailbreak, and im doing it for the sole purpose of being able to watch regular tv and sports channels. When the release comes out, will that feature already be set up ? Or would there be certain things required to download?
ReplyDeleteI cant wait fir it to come out but in the mean time i am using my jailbroken i5 with xbmc.
ReplyDeleteThanks so much for the update!!!
ReplyDeleteThis comment has been removed by the author.
ReplyDeleteOk I think I've refined your way a we bit I plug apple tv3 into USB so detected by iTunes click restore it downloads its restore file I turn atv off before it completes download . Then go to c:/ users/app data / roaming/ apple computer /apple TV backup cut n past it to desktop .
DeleteModifying a version of TV 2 iwsp file after extracting it as zip I put the firmware from one to other repack put back in directory for backup rename the hard thing is the file size has to match original I use txt doc to adjust file size the it restores my atv3 to a atv2 but with atv3 firmware thank you mike for the idear
Hi there m8 glad to see others working on this just had a look at your way looks promising only thing i tried different to you was wait for iTunes to extract its files to its temp Dir location then I quickly copy past my changes into that temp Dir before it uploads it to the atv3. I'm trying to blend the AppleTV3,1_5.2_10B144b_Restore.ipsw
Deletewith the tv2 version changing firmware files and a few other files Ive edited in the hope of getting the 1080p HD working fun
Ive got some m8s working on this too with promising affects I bricked one atv3 but recovered it so they seem quiet robust to play with i would love a copy of a pre cracked ipsw file for the atv2 would save a lot of time keep on trying we can do this
P.S you need to do more than just change firmware some data editing as well but not hard just time consuming hunting for the right files
DeleteHi mike! what are the few issues? Maybe maxwell or other bright minds can help u out?
Deleteany chance can you post a step by step tutorial on modifying the iwsp file. what files are you taking from atv2. just the dwg?
Deletekernel? leaving the atv3 firmware.
I GOT IT!!! 1.Rename the .dmg files in the sn0wbreeze atv2 ipsw to match the atv3 dmg files. 2.Replace the sn0wbreeze firmware folder with the one from the atv3 ipsw. 3.Rename sn0wbreeze ipsw to match the atv3 ipsw. 4.Restore atv3 with custom ipsw. 5.Done!!
DeleteIs this correct???
close Ive been trying many combinations
Deletebut not restoring with a ipsw file i use the atv3 ipsw file to get iTunes going while it says extracting files at top of page of iTunes i wait for it to verify the files then copy my modified files over top of the extracted one in location: C:\ProgramData\Apple Computer\iTunes
you have to wait until after the verification is done still a bit of hit and miss.
and yes renaming file name also been trying editing the Restore.plist file
i think the kernelcache.release.j33 is causing my prob in tv2 version it uses a .k66 file extension.
seems hard almost impossible to brick the apple tv3 Ive done a lot of bad things to it so far and she always come back to life good luck
I'm pretty close to having iTunes accept my modified files. You should give me your email so we can work together and 'jailbreak' apple TV 3.
DeleteWhat are the "modified files"???
DeleteI'd be happy to beta test for you if you're looking for testers
DeleteThis comment has been removed by the author.
Deleteok i just watched your youtube video and i am missing something. You tried replacing the dwg several times and got the 14 error unknown. Which i can reproduce. The final time it looks like you did not change the dwg just an item the items dfu folder. How does this put the jailbroken version on the apple tv 3? Did I miss something?
DeleteThis comment has been removed by the author.
DeleteThink that video a old one he uploaded ages ago for me not sure but mike has only got it to boot by using a fake apple website some how he try to explain it to my but Linux way over my head and he still had issues with running hd and xbmc properly.
DeleteFrom talking to mike he is trying to find a les complicated way to do it and refine the files so as far as I know the fake apple web way has worked best but way to hard and buggy and we decided this way show easer and better potential hope you don't mind me replying on your behalf mike . Also I have got the atv3 to boot to atv menu after file upload so does work kinda keep trying he's working on just adding xbmc file directly to the coded scrip file but not sure how or what file he modding
yeah m8 all good ok the .dmg files are my target now can modify and upload to atv3
Deletewith success now i know these are image files would anyone know if you can mount them or open them as a image as im sure the apps are in these files and if i could locate the xbmc app or code i can add to the image as atv will take the edited .dmg file every time but without mounting them some how or viewing the unencrypted texts makes it very hard to edit please help me with the image files
If you guys managed to root the device, why don't you extract the keys from the atv3 ipsw keybag so we can decrypt it and inject evasi0n's payload in it?
Deleteas for loading a dmg. www.fileinfo.com/extension/dmg looks like several tools are avail. so have you been able to put xbmc on the 3 yet? i have not been able to get around the 14 error.
DeleteThis comment has been removed by the author.
DeleteGood job Mike........I think u use windows, so just use a ubuntu live disc. Ubuntu has the capability to mount dmg's...
DeleteWe need to find a boot ROM exploit on the apple TV 3 in order to find the key needed to decrypt the files on the ipsw.
DeletePlease...Please....Please make a tutorial on how to install xbmc on atv3.....i dont care about side affects, please post tutorial.
DeleteHow do we make donations??? Funds, Food, Firewater...anything to support the folks making this happen soon!
ReplyDeleteSounds great Mike Davies. I would love to try it out!
ReplyDeleteGreat news, keep up the good work!
ReplyDeleteOo oo oo cant wait for this to arrive :)
ReplyDeleteYeeahh..caant wait..been waiting soo loong ;)
ReplyDeleteShit..
ReplyDeleteMy daugther update my apple tv from 5.02 to the latest new one of ios 6.1 ( 5.2 apple tv ).
I hope that the break still works for my apple tv, I'am realy mad now...
Please can you let me know if it also works with that software.. or can we do a rollback..
NOT SURE HAVEN'T DONE IT MYSELF BUT IF U DOWNLOAD THE OLD IPSW FILE 5.02 THEN WERE THE APPLE TV3 SAYS RESTORE HOLD DOWN SHIFT SELECT THE OLD IPSW FILE YOU JUST DOWNLOADED IT MAY WORK NO HARM IN TRYING GOOD LUCK. WOULD IMAGINE NEW JAILBRAKE WILL SUPPORT 5.2 WHO KNOWS
DeleteTry google: where do i find firmware 5.02 if i want to downgrade.. Firecore website. file needed found on www.iclarified.com
Deletehttp://theiphonewiki.com/wiki/Firmware#iPhone_4_.28GSM_model.29 download from this link.
Delete.dmg2iso not working anyone know what the .dmg files are and how to open as iso file or any other way apart from a .txt file
ReplyDeleteThis comment has been removed by the author.
ReplyDeleteNo mike port 1 is nothing as far as I know
ReplyDeleteBut maybe run a good port sniffer could help
This comment has been removed by the author.
ReplyDeleteThis comment has been removed by the author.
ReplyDeleteI sew ur youtube video . it looks like u put XBMC.
DeleteIs it working ???
Omg mike watch your YouTube vid looking good I'm downloading I funbox can u use ssh console
ReplyDeleteok found some open ports
ReplyDeleteUSB Tunnel by i-FunBox
Fast Network Connection between iOS and PC via USB cable
What is USB Tunnel? Check out creative usages!!
Created USB Tunnels:
iOS Port PC Address
5000 127.0.0.1:5000 Apple AirTunes rtspd
7000 127.0.0.1:7000 Apple AirPlay httpd
62078 127.0.0.1:62078 tcpwrapped
8021 127.0.0.1:8021
7100 127.0.0.1:7100 Apple AirPlay httpd
3689 127.0.0.1:3689 Apple iTunes DAAP
still looking for more
This comment has been removed by the author.
ReplyDeleteThis comment has been removed by the author.
DeleteWill it play Mkv?
ReplyDeleteok ive got the keybag file how do i get the keys out
ReplyDeleteanyone know how to get them ive got a unencrypted accesses to the atv3 files
come on guys some help i have 90% of the files on my desktop have access to Asset Data files boot files and payload files most of what is unencrypted
ReplyDeleteim sure i can get xbmc on this 100% but would like to get the keys i also have found the open ports config file if anyone interested
There is some information here. Might have already seen it though http://theiphonewiki.com/wiki/VFDecrypt_Keys
ReplyDeletethanks m8 i did see that but ill have more of a read have made some very promising progress as have now got a full uncompressed copy of atv3 most of its unencrypted now just need to learn were the keys are so i can decrypted the files inside the ipws before uploading i may be able to do it without but for now im hunting for the keys.
ReplyDeletei also found a file that lists all the ports and maybe able to change and re upload then connect through one of the ports but fur now ill keep hunting for the keys as this will solve everything. I must be assume if know one has got this far lol FTW thanks
You have made good progress. Good Job ,i think you are really close.
Deletei still need help as not sure what im looking at as im a hacker not a ios expert lol Ive found this file H4ASURamDisk.dmg think they could be inside that im going to upload a video so you all can see thanks
ReplyDeleteOk. Just send me your e-mail if you want and i will send a contributor invitation link . You will be able to add and your own posts, videos etc .
DeleteHopefully more people will join to help
Hey Mike you have gotten a lot further them me. Can I have your email so you can tell me how to decrypt the files so we can both be on the same page and work together to jailbreak?
DeleteContributor Invitation sent. You should receive an activation e-mail.
Deletesorry m8 never got it just verify mydakota@hotmail.co.nz
Deleteits mydakota@hotmail.co.nz thanks
ReplyDeleteMike use vmw. Boot Linux make install genpass. genpass will extract the keys good luck some good site in how to use but I'm sure u will work it out
ReplyDeletemike check this website out. it looks like the KBAG (Keybag file) is in the IMG3 file. in order to decrypt the KBAG you need to remove them from IMG3. There is a commad on the website to remove the KBAG from the IMG3 file to decrypt the KBAG.
ReplyDeletei have the keybag file already and the ramdisk file and many more so need to get the genpass.c program
Deletefile downloaded and installed some how im using windows but have backtrack 5 running in a Virtual machine so any help to get genpass working then i should be able to extracted the keys
ok sorry with you now ill read up on that
DeleteBTW the website is http://theiphonewiki.com/wiki/KBAG
ReplyDeleteThere is a lot of thinks i cant know how to do(with those apple stuffs, like seeing the downloaded files of ipsw using ssh). I can see that the jailbreak have a big delay from the date they said that is released.
ReplyDeleteBut i stay happy a lot to see that are guys like Mike trying to see if there is something he can do help. Well, i want to help a lot, but im not a hacker or something(i wanna have some knowledge, but i dont know where do i start).
If i cant help, i just wish you that you find something that can help with this jb.
ok so the possessor key code in the manifest file says the atv3 processor code is s5l8942x not sure how to use this yet lol
ReplyDeleteAsk Pod2g...he'll love 2 help
DeleteI got it Mike...
Delete"Firmware/all_flash/all_flash.k93aap.production/glyphcharging.s5l8942x.img3."
Mike, you need to obtain the keys by decrypting the keybags using the hardware AES engine in the ATV3, this can only be done if you can SSH into the atv3 with root privileges. And you need to use the ATV3 files from inside the ipsw.
ReplyDeleteMore info here http://theiphonewiki.com/wiki/AES_Keys
https://kat.ph/assetdata-t7101911.html
ReplyDeletelink to the files ive extracted form atv3
if anyone can get the keys or help.
download will be slow to start with but them more to download the fast it will get pleases seed as well thanks
theses have the ramdisc and keybag files and many other please help im going to try get more files out of it as some are missing hard to get the files
also some progress on airplay have had lots of trouble tricking apple tv in accepting anything i spoofed my mac to a iPhone mac and seems the atv uses mac filtering probably the first three keys that identity a apple device so making some progress there as well
ReplyDeleteMike has files on his utube channel.....i downloaded them....do i compress them into a zip and then rename it as an ipsw and then restore with itunes?
ReplyDeleteno as the file wont match the ipsw unless you can decrypt it the files are party already decrypted
ReplyDeleteyou could try certain files maybe who knows good luck
....so r the files decrypted or not??? Should i use ifunbox and replace all the payload files with the ones i download (the ones on ur video).
Deletesorry i cant tell you what to do with the files as im trying to crack this too some are decrypted some are not but the keybag and ramdisk files are there i think you need to run genkey to to get the key from the ramdisk im not sure how to do that have been trying good luck
DeleteOk....I think i know a simple way of gettin xbmc...get xbmc.app from a jailbroken atv2 and rename it as "WhatsNew.app". Next, we go into AssetData\payload\replace\Applications and replace the original whatsnew with the xbmc which we renamed as whatsnew. To do this...we use ifunbox while the atv3 is downloading the restore data...this should get the atv3 to boot into xbmc
ReplyDeleteTry ;) Would be nice.
Deletei would....but i dont have a jailbroken atv2 to get the xbmc.app
Deletei have now decrypted the ramdisc file so making progres
ReplyDeleteHey Mike I found the keybag in the ramdisc file but its crypted.
DeleteMike I'm now able to open the keybag file and inside of that are 12 encrypted files.
DeleteAwesome work Mike!!! Any idea on the ETA of the final release of the jailbreak? Sorry, I'm sure you've heard that 1,000 times!!!
ReplyDeleteHay mike good job with the ramdisc by the way you can extract the keybag keys outside of the atv3 as one other guy said you can't lol I thing you can uploaded it to your i4 i5 ph and extract keys using openssh in terminal window
ReplyDeleteAlmost got the keys FTW
awesome!
ReplyDeleteHey guys, you seriously deserve a star on the "walk of fame".
ReplyDeleteI praise you all! Go ahead :) I'm looking forward with it!
It's amazing to follow the progress here. Keep it up! :-)
ReplyDeleteOK here is how do decrypt the H4ASURamDisk.dmg
ReplyDeletejust made a video hope this sheds some more light on this im starting on the keybag file now.
here is the link to my video
"http://www.youtube.com/watch?v=teAe406FONc&feature=youtu.be"
if anyone would like to make a small donation. link to the PayPal donations on my you tube we are getting close but unfortunately we need the use of a ipad with the same processor as the atv3 to decrypt the keybag file and extract keys
Mike in order to extract the keybag just right click on it and and go to 'rename', add the .zip extension then unzip it with 7-zip. Now you have a decrypted key bag. Once you open the file you'll find 12 crypted files and in order to decrypt that, that's were the iPad comes into place. So please people donate so we can get the ipad and jailbreak this bad boy asap.
Deletegood job i missed that one lol as was not using 7 zip if i was a programer i would write a script that would do the decryption out side of a ios device seems strange know one has written a program yet. as to doing it on the ipad3 its going to be a trial im working on getting one for testing but short on the coin for this. and dont want to be the one to say do this and that to your ipad and it gets broken lol so its up to you guys if you want to risk it be warned it will involve messing with the kernel file and few others that is risky good chance a restore will fix anything that goes wrong but dont blame me if it dosnt you might not have a jailbroken ipad when your done may just a broken one lol when i get some funds together i will have a go at this side of things.
DeleteHi mike. Cant get ur donation link to work from my android. Can u tell me what to seach for in youtube so i can make a donation from paypal?
Deletehttps://plus.google.com/109862085861423517855/posts
ReplyDeleteall my videos and a new one decrypting the ramdisc file
So to continue you are looking for someone with an jailbroken Ipad 3 so they can decrypt the files in the keybag? Do you know what commands are necessary to decrypt it? I am sure we can find someone who has a jailbroken ipad 3 whom if we given them detailed instructions will run the command on the files for us. I am willing to jail break my ipad3 if that would help.
ReplyDeleteI have a jailbroken ipad 3.. and an atv3 .. tell me what to do and ill do it :)
ReplyDeleteHi there!!
ReplyDeleteI´ve an Ipad Mini with JB and a APPTV3 too...if needed i can (try) help!!
But need some help too.
so we got the volunteers. :) So we need a list of the steps necessary to extract the keys from the keybag on a jailbroken ipad 3. I am personally not familiar with the process however according to santos we need a zip file supplied to the apple ipad 3 volunteers with the 12 crypted files. And a list of steps necessary to extract the key.
ReplyDeleteAwsomeee guyss. Loving the progress
ReplyDeleteLove the progress but I just returned my Apple TV3 back to Apple. I have no room for a paper weight!
ReplyDeleteHope you guys can do it and if you do I'll buy it back.
Cheers!
I have a iPad 3 and iPad mini as well as ATV3. Let me know if I can help
ReplyDeletenew ipad jb here with a mac book pro, let me know how I can help.
ReplyDeleteok guys before you mess with your ipads just a warning this is risky I really don't want to be responsible for someone bricking there ipad3 as it will involve messing with the kernal and system files good chance of having to restore it after i am working on getting one but are on a tight budget i also want to get a second atv3 to try some hardware hacks i will not do this on my one as yet again risky risky risky and i need the one ive got for testing
Deletebuy one use it for 30 days then return it
Deleteif some one has a mac PC and some time think you can use xcode to simulate the apple tv3 this is just a link for rough idea but more out there wish i had a mac now grrrr this may or may not work but worth looking into 100%
ReplyDeletehttp://forums.macrumors.com/showthread.php?t=449161
get a copy of my files and help in the jail-braking
ReplyDeletethe more people working on this the better.
http://kat.ph/assetdata-apple-tv-3-files-t7101911.html
OK like Santos said for the keybag file 7zip can open also most of the files inside the ramdisc image are extractable using 7zip not sure how this will help but is good to know. we need a good ios emulator that uses system files and firmware there are some close one like xcode but need a mac for that anyone have any idea's on good emulators out there that take firmware and system files let me know i cant find any. i am wishing i had built a mac and brought a ipad3 not a intel pc FTW
ReplyDeleteOk mike has provided us all outa the goodness of his heart all the files need to get the keys from the keybag file and decrypt the Ipsw then we put cydia on and openssh
ReplyDeleteIf some one has a mac or iPhone with the right skills could you do the last part of the magic or send mike your mac lol as if that would happen lol. Mike if I had one you could borrow mine but sorry I don't and your along ways from me so ill send you a little something to help I hope
Thanks m8 you've inspired my hacking again
I have a Mac but have no idea how to do anything lol. I'll be more than willing to follow some directions to finish this jailbreak.
ReplyDeleteI have a MacMini with XCode, iPad3, and AppleTV3.
ReplyDeleteLet me know how I can help.
Will a MacMini suffice for this purpose?
ReplyDeleteOk just posting this mike sent me other day
ReplyDeleteList of device with the A5 processor
HideProducts that include the Apple A5
iPad 2 (A5 dual-core 45 nm) – March 2011; (A5 dual-core 32 nm) – March 2012
iPhone 4S (A5 dual-core 45 nm) – October 2011
Apple TV 3rd generation (A5 single-core, 32 nm) – March 2012
iPod Touch 5th generation (A5 dual-core 32 nm) – October 2012
iPad Mini (A5 dual-core 32 nm) – November 2012
I have an imac, an atv3, an iphone 4a and a ipad 3, how can i help?
ReplyDeleteThis comment has been removed by the author.
ReplyDeleteHI
ReplyDeleteI may say something stupid but i was like Mike (without mac machine) and i tried to create iOS apps and i found this : http://www.souldevteam.net/blog/2012/10/04/os-x-mountain-lion-10-8-2-vmware-image-release-notes-links/
Mountain lion on VMWARE...
That's saved me 1000$ :D
Helped ?
I have the following apple products:
ReplyDeleteiMac (2013), RMBP, IPad 4, IPad Mini, IPhone 5, ATV3, ATV2
I Have the following experience:
CCNA, Cisco Certified Internetwork Expert - Security, Basic Objective-C, Database Programming, HTML
Put me to Work!
First things would be to run the process of extracting keys from one of the ipads iPhone just to get the idea how to do it sure u be fine, then my thoughts would be to try a number of things like while in ssh root access is change a few things like the kernel file etc and key-bag file to try trick it into decrypting the atv3 key-bag and getting the keys not sure if changing the kernel file will work or even crash the ipad may a bit of playing around. it has got to use the same processor as the atv3 single or duel core shouldn't matter as atv3 has 2 but one disabled. you could also try xcode and see if you can modify it to take the atv3 firmware and files probably a long shot but if there was a good emulator we could get this to work maybe you could make a emulator as we could use this on future atv4 5 6 or what ever thanks
Deletehay guys just a quick question is this legal to do lol as i was under the impression that its legal but
ReplyDeletejust want to make sure as had a interesting email sent to me so does anyone know the laws and what countries they are for thanks just want to check as
getting jail 4 jail-breaking would suck.any info guys would be good
see wikipedia for a guide:
Deletehttp://en.wikipedia.org/wiki/IOS_jailbreaking
EU = legal
US = legal
CA = legal
NZ = legal
Cum on when this cuming out man iv got a apple tv 3 just sitting in its box doin nawt becuse you have to pay a lot to get out on it cum on relise it
ReplyDeleteNice use of the english language!!!!
DeleteI had one too but I returned to apple.
ReplyDeleteYou just have to sit tight and wait for Mike to do magic. If he can't at least he tried. He has no obligation. AppleTV without Jailbreak is a paper weight!
Hi,
ReplyDeleteI have a question about the apple tv jailbreak. When i jailbreak my applte tv 3, can i still use airplay?
Is the jailbreak only for the america itunes? and not the dutch itunes store?
Is the itunes store still updated every week?
Following with great interest! Will the jailbreak be able to enable the second A5 core? That would make for some speedy XBMC!
ReplyDeleteGood job guy
ReplyDeleteAfter jailbreak will it be possible to reach subfolders on my PC
ReplyDeletecan i stream my laptop to the apple tv 3 and watch xbmc on the apple tv 3 or can you recomend a pragram for this thank you
ReplyDeleteWarren the best program for that is AirParrot
ReplyDeletehi just wondering weather to buy a apple tv 2 or wait as i am not to sure on how the hole apple tv 3 jailbreak is coming on. could someone please let me know if that its possible to jailbreak the 3g, and if not how long, as the prices for the 2g are rediculous.
ReplyDeletecheers :)
does anyone know if "airplay" will work after the jailbreak with an mid 2010 mbp - now the streaming isn't working / drm is missing
ReplyDeleteWhat about this? It´s a fake??
ReplyDeletehttp://appletv3seasonpass.blogspot.de/
Yes it's a fake.
DeleteIt will take your e-mail address and spam you a lot .
After you complete the survey all you will get is a redirect to firecore official website :))
Thanks John... I assume the fake since I have to give some data.. hehehe. Thanks again
DeleteI feel my patience tested. Thinking of getting an raspberry Pi. http://youtu.be/-HAe84egflM
ReplyDelete