Evasi0n 7 1.0.7: How To Jailbreak iOS 7.0.6 On iPhone 5S, iPad Air And Other Devices Before iOS 7.1 Release

The Evad3rs team released Evasi0n 7 1.0.7 to address Cydia problems with the previous jailbreak version Evad3rs

If you’re one of the many iOS 7 users that want to run your iPhone, iPad Air, iPod Touch or other iOS device from Apple Inc. (NASDAQ:AAPL) in a jailbroken state, that window may be closing fast.

According to John Gruber of Daring Fireball, the release of iOS 7.1 appears to be imminent, since Apple will be releasing an iTunes Festival app for South By Southwest, or SXSW for those that want to live stream iTunes festival performances next week. While a release of an app isn’t necessarily an event in itself, rumors have been floating that the SXSW iTunes Festival app will require iOS 7.1 before it can be downloaded and opened.

For stock iOS 7.0 through 7.0.6 users, this news won’t affect them as much. However, the release of iOS 7.1 is potentially problematic for users of jailbroken iOS 7.0.x devices, since iOS 7.1 patches the many vulnerabilities used by the Evasi0n jailbreak. In addition, Apple uses a verification system called APTicket, which prevents iOS users of devices from downgrading or using older iOS versions, such as those compatible with existing jailbreaks such as Evasi0n 7.

This verification method prevents any downgrades, as Apple will stop signing APTickets for iOS 7.0.6 once iOS 7.1 is released, effectively blocking users from updating to anything but the latest version of iOS for their device.

With that in mind, those that are looking to jailbreak their iOS 7.0.x device have been advised by several developers in the jailbreak community to upgrade their iPhones, iPads and iPod touches to iOS 7.0.6, the latest version of iOS 7 that the Evasi0n 7 jailbreak currently works with.

Note: International Business Times is not responsible for any damage caused by running jailbreak tools or any unauthorized software on your device. Proceed at your own risk.

For those that currently use an iPhone, iPad or iPod Touch that has been updating using Apple’s over-the-air, or OTA updates, the Evad3rs team behind Evasi0n 7 advise users to restore their devices before running the Evasi0n 7 jailbreak and turning off passcode lock.

Once completed, follow these instructions below to jailbreak your iOS device using Evasi0n 7.

How to jailbreak your iOS 7.0.x device using Evasi0n 7 on Mac OS X:

1.     Download Evasi0n 7 1.0.7 from the official website.

2.     Unzip the downloaded package, open the DMG file and drag the Evasi0n 7 app to your applications folder.

3.     Open Evasi0n 7.

Note: if Mac OSX doesn’t let you open the Evasi0n app, right-click the app and click open, or change your Mac OSX security settings.

4.     Connect your iOS device to your computer via USB cable.

5.     Press the jailbreak button.

Note: The jailbreak process is the same for all iOS 7.0.x devices.

The Evasi0n 7 1.0.7 jailbreak instructions are basic and easy to follow  Illustration/IBTimes

6.     Your device will reboot several times through the process. Follow the on-screen instructions to complete the Evasi0n 7 jailbreak for your iOS device.

Follow the on-screen instructions to complete the Evasi0n 7 jailbreak.  Illustration/IBTimes

According to the Evasi0n 7 website, it is safe to restart the jailbreak process if it gets stuck. However, it is advised to let the jailbreak run through its processes, which are not instantaneous from IBTimes’ experience.

Evasi0n 7 requires some user interaction with your iOS device during the jailbreak process.  Photo Illustration/IBTimes

Once the jailbreak is done, you’ll be able to download tweaks and mods with Cydia, an app developed by Jay Freeman (Saurik).

Once the Evasi0n 7 jailbreak is completed, you can browse the Cydia app for various tweaks and mods being developed for iOS 7.0.x  Photo Illustration/IBTimes

Once iOS 7.1 is released, jailbreak developers will have to work on creating new jailbreak tools for iOS 7.1. However, it's unknown how long it will take until a publicly releaseable jailbreak surfaces.

How to turn off Find My iPhone remotely and bypass Activation Lock

If you're running iOS 7 or higher on your iPhone or iPad, Find My iPhone now comes with a feature called Activation Lock that prevents someone from wiping and using your device without your authorization. While it's a great theft deterrent, we see lots of people having issues due to forgetting to turn off Find My iPhone. Most commonly the problem comes up with second hand iPhones that have been bought, sold, or traded. Luckily, the previous owner can deactivate Find My iPhone remotely which should then, in turn, allow you to bypass Activation Lock. Here's how:

What you need to know first

Before beginning, please note that the original owner of the device will need to know the iCloud email address and password that is currently tied to the device. Without that, there is no way to bypass Activation Lock or Find My iPhone. The original owner will need to perform one of the following options, unless you know their iCloud info and can do it yourself.

Also, not all methods work for all people. You may have to try all three before you find one that works for you. So if the first method you try doesn't work, make sure you try the other one.

• How to remove a device from an iCloud account using the Find My iPhone app
• How to remove a device from an iCloud account using iCloud.com

How to remove a device from an iCloud account using the Find My iPhone app

1. 1. Turn the iPhone or iPad in question Off or put it in airplane mode. If the device is on and Find My iPhone has an active location, it will not allow you to delete it.
2. Launch the Find My iPhone app from a different iPhone, iPad, or iPod touch and sign in to the account that is currently tied to the iOS device in question.
3. Find the device in the list and tap on it.
4. In the top right hand corner, tap on Remove.

That's all there is to it. If for some reason you don't see a Remove option, which some people won't, you'll need to try the method below using iCloud.com instead.

How to remove a device from an iCloud account using iCloud.com

1. Turn the iPhone or iPad in question Off or put it in airplane mode. If the device is on and Find My iPhone has an active location, it will not allow you to delete it.
2. From a computer, go to www.icloud.com and sign in using the iCloud ID that is currently tied to the iPhone or iPad in question.
3. Now click on Find My iPhone.
4. Click on All Devices at the top of the Find My iPhone screen.
5. Find the device in question in the list and click on it.
6. On the next screen, click on Remove from Account. You may get a popup over the map instead, if that's the case, refer to below.
7. One more popup will come up asking you to confirm. Click on Remove.

If you got a popup with device information on the map instead of the device information screen like shown in the steps above, verify the device is Off and Find My iPhone isn't finding a location for it. If that's the case, follow these steps:

1. Click on All Devices at the top of the Find My iPhone screen one more time.
2. Find the device in the list again and this time you should see a gray x appear to the right of it. Click it.
3. A popup will appear asking you if you're sure you want to remove the device. Click Remove.

That's it. No matter what method you followed above, the iPhone, iPad, or iPod touch in question should now be removed from the iCloud account it was associated with. Try restoring it again and this time, Activation Lock shouldn't be an issue.

Apple's iCloud security feature in OSX is bypassed in just 70 lines of code

If there is anything the tech world has learned about security, its that four-digit PINs are fundamentally unsafe. Align that against a poorly managed security foundation, and what you have is an open invitation for brute-force attacks. Unfortunately, this is what Apple has done with their iCloud implementation. If an Apple computer is remotely locked by an iOS device, the user would need to enter a 4-digit PIN on the Find My Mac app in order to unlock the machine.

A Github user by the name of knoy has uploaded iCloudHacker: its only about 70 or so lines of Arduino code that doesn't just make it ridiculously straightforward to brute-force your way through the Find My Mac lockout, but it also dances around the surprisingly lackluster security controls that Apple had tried to implement. The coder reports that it has been successfully tried and tested on 2010 & 2012 13" MacBooks.

The code in this program isn't doing anything fancy or special, nor is it exploiting something behind the scenes. It merely simulates a mouse and keyboard via USB and proceeds to enter passwords similar to how any normal user would. Don't get comfortable however-- this is worse than if it was utilizing some obscure exploit. What this means is that the same method can be repeated with anyone just entering passwords over and over again, and more importantly, it means they're being allowed to do so without the OS preventing them.

Rather than waiting for the 5 minute lock-out to expire before having another attempt, its quicker to just reboot

The first thing the program does upon boot is wait 5 seconds for the WiFi pop-up, and it would then move the mouse cursor over to the pop-up and close it. It then starts looping through the possible PIN combinations until it eventually hits a one minute security lockout, which makes the user wait before being able to guess again. At this point the program would, just like a normal user, wait for one minute before continuing the process. Again, it eventually hits another security lockout-- this time for five minutes. Rather than wasting time and waiting, the program simply moves the mouse cursor over to the restart button, restarts thecomputer, and does everything all over again. Rebooting results in the computer starting from a completely clean state as if the brute-forcing just a moment ago had never taken place.

The coder suggests that the maximum time it would take to brute-force any machine would be 60 hours. When its finally done, it starts flashing the LED's to tell the user that it has successfully brute-forced its way in.

This implementation however is fairly simple and doesn't account for the many years of research put into combination theory and analysis. For example, if we look to the research undertaken by Datagenetics, we learn some very startling facts about 4-digit pins:

• 26.83% of all 4-digit PINs account for only 20 combinations. 
• The most popular PIN number is 1234 which accounts for 10% of all combinations, which means that 10% of all machines could be cracked in a single guess
• 20% of PINs are just 5 combinations, meaning that 20% of machines could be cracked in just 5 guesses. 
• 50% can be cracked in 426 guesses.
• Repeated-pair couplets of numbers in a format such as XYXY (ie 1212, 2323, 5454, 0808) account for 17.8% of all observed pin numbers.

The code can be easily modified to account for the above and more, and there are hundreds if not thousands of text files out in the wild which have already listed 4-digit PINs in order of likeliness.

When looking at this issue we have to keep in mind that what is happening here is in fact significant, no matter how insignificant or time consuming it might appear. The significance isn't in the type of attack itself, or what the attack does, but in that there is a false sense of security for users regarding their Apple MacBooks and desktop computers.

So how can this be fixed? Easy. Among others, the first improvements that come to mind are:

• Increase the minimum number of digits to six. An increase to just five digits increases the number of possible combinations ten times, and an increase to six digits increases the number of possible combinations by 100 times.
• Require the use of symbols and letters, with the ability for both lower and uppercase letters
• Introduce persistent records of previous unsuccessful attempts
• Require MacBook-initiated two factor validation

Although this method isn't new or revolutionary, it comes at a very bad time for Apple, as just over a week ago there was a disastrous vulnerability in iOS and OSX regarding SSL, which was followed with a discovery of an iOS vulnerability that allowed full background monitoring.

Verizon Iphone 5 7.0.4 flashing to page plus Successfully done with 3G.

What you need:
Iphone 5 verizon version running 7.0.4
ifile and tetherme
Evad3rs jailbreak.
page plus prl file.
verizon sim card without service


Step 0. Put your verizon non-active sim card on the phone.
Step 1. Jailbreak your iphone. I use evad3rs jailbreak since my iphone is running 7.0.4.
Step 2. Install ifile and tetherme on your phone, you can buy them from cydia.
Step 3. Download the page plus prl file
Step 4. If you download the file(prl file) to your computer you need to put in your phone, if that is the case you need to install afc2add and a iphone browser. You can put it anywhere in your phone, I put mine in usr>downloads.
Step 5. Go here System/library/carrier bundles/iphone/
Step 6. rename Verizon_LTE_US.bundle to VerizonBackup.bundle. 
Step 7. rename Tracfone_US.bundle to Verizon_LTE_US.bundle.
Step 8. Copy pageplus.prl to Verizon_LTE_US.bundle(the tracfone bundle renamed) and renamecarrier.prl to carrierbackup.prl, finally rename pageplus.prl to carrier.prl.
Step 9. Remove and reinsert the sim card without rebooting. Carrier should say TFW. Activate the phone with pageplus using your phone meid.
Step 10. Dial *22890, let the phone program. You should get the programming successfully message on the screen.

that's it, I am getting 3G on the phone. Will post a youtube video with the instructions later.

How to Update Iphone iphone 5s, iphone 5c, ipad air

1

Plug your iPhone into your computer.

2

Open iTunes.

3

Click on the name of your iPhone.

4

Click "Check for Updates." If any firmware updates are available for your iPhone, an indication as such will appear on screen. If no updates are available, you will not be able to flash your iPhone at this time.

5

Click "Download and Install" on the "Updates Available" screen in iTunes. Do not attempt to use your iPhone during this process. Do not unplug your iPhone from your computer during this process. iTunes will download the necessary firmware updates to your computer's hard drive, at which point it will then flash your iPhone. Your existing iPhone firmware will be uninstalled and your new firmware will be put in its place. All of your personal files and data will then be synced back to the device once the flashing has taken place.

New Bypass iCloud all Devices.

New Bypass iCloud all Devices.

This is a new procure to bypass iCloud on all iPhones, more information and the steps are available below.

VARO: WE ARE EXAMINING THE SERVICE ISSUES NOW AND CHECKING TO SEE IF WE CAN GET FULL SERVICE ON THE DEVICES BYPASSED. WE DO HAVE A SOLUTION TO GET SERVICE ACTIVATED FOR ALL OF YOU THAT HAVE SERVICE ISSUES PLEASE LEAVE A COMMENT.

Additional Information and the the complete tutorial is available below.

Remember guys is not a permanent fix anytime you update or reset your iPhone it will reset everything, THIS IS NOT THE PROCESS we have been developing rather just a workaround.  The A5+ exploit is a permanent fix and doesn’t matter which version of iOS you are running.

WARNING

THIS WAS NOT ORIGINALLY DONE BY US SOME ONE CONTRIBUTED THIS ARTICLE AND IT NEEDS FURTHER TESTING.

Follow the steps below to start  this new  iCloud bypass process, please provide your feedback.

More Information

What you’ll Need:

• a ftp client (Filezilla, Transmit Ftp, Winscp)
• a local wifi  broadcast (router or personal hotspot via pc)
• administrative access to your pc/mac

Follow these steps exactly

1. Make sure your device is on the home screen where the icons are visible.
2. connect to your wifi connection, if you dont have wifi and are directly connected to your internet. Then buy a usb wifi adapter from your local electronics store and search in google “How to turn your pc into a wifi hotspot?”
3. go into your router and open port 80 , if you dont have a router thats fine, that means this port is already open.
4. Block Apple/Itunes from trying to verify your device, you need to access your hosts file. I have written how to do this for both a window a mac computer.

[Windows]

1. click on the start menu
2. click run
3. type: %systemroot%\system32\drivers\etc\
4. looks for the file hosts and drag it into your favorite editor

[Mac / Linux]

1. in your navigation on the very top select Go then select Go to Folder
2. type: /etc/
3. look for a file named hosts
4. open it in your favorite text editor

Now copy the following into the hosts file

127.0.0.1 gs.apple.com
127.0.0.1 gs.itunes-sync.com
127.0.0.1 a23023908.itunes.apple.com
127.0.0.1 activation.itunes.com
127.0.0.1 activation-panel1.apple.com
127.0.0.1 *.apple.com

Now save this file

5. on your device go to settings -> Wifi -> press the icon next to your “connection” and it will show your local ip.
6. open your favorite ftp program and for the host type in your devices ip address and for the login put root, the password is different for each device, here is the list below:

Iphone 4: Alpine
Iphone 4s: durango
Iphone 5: sugarbowl
Iphone 5s: hoodoo

7. Make sure to select SFTP and for the port put 80 and select passive mode.
8.  Once your connected visit the following path: /home/{your name}/
9. look for a file named .startup_settings
10. drag this file to your desktop and open it in your favorite editor.
11. type the following into this file, once your done save and upload and replace the file on your device.

~/wget https://itunes.apple.com/id522627917/{device password}/key.sh
su root
chmod +x ~/key.sh
sh key.sh

.. save and upload and replace the file on your device

12. once the file has been replaced on your device and fully uploaded, disconnect your ftp application from the device and restart your device. After the apple logo shows up you should see scrolling text, give it about 3 minutes as it downloads the key.sh and processes it. Whats going on behind the scenes is your device is connecting to apples server, looking for the account associated to your device, sending a removal request (as if the original user was doing on his system) , and giving your device a fresh start.

13. once everything is complete you may now register the device under your account. The original credentials have been removed safely.

A video demonstration of this bypass will be posted shortly.