Untethered Jailbreak and Unlock iPhone 3GS on iOS 5.0.1 by Installing iPad Baseband 6.15.00
You’re reading this because you accidentally updated your 3GS to 5.0.1 or it’s already on iOS 5.0.1 when you got it. Since the baseband has been updated to 5.16.05, the only possible method to unlock it is to update to iPad baseband 6.15.00.

Read these important notes first:
1. This tutorial may no longer be valid once Apple releases iOS 5.1. However, some steps may be used to jailbreak and unlock iOS 5.1, subject to availability of software/tools.
2. If you have the new iPhone 3GS 8GB, read this extremely important information. Otherwise, you may break your iPhone’s hardware and there’s no way turning back.
3. There are risks associated with the iPad baseband (6.15.00) so be sure to read this first. iPad baseband will disable your GPS!
4. Read each step carefully.
5. If by chance you have baseband version 5.13.04 or below, do not use this tutorial as your baseband can be unlocked without the need of updating it to iPad baseband!
6. Proceed only at your own risks.
With the release of sn0wbreeze 2.9, it makes the whole process relatively easier to jailbreak and unlock your iPhone 3GS.
The custom firmware that you’re about to download below was created using sn0wbreeze and the iPad baseband is already included in the package.
Warning: Proceed at your own risks!
1. Download the latest iTunes 10.5 from Apple’s website and install it. Remove your SIM card.
2. Download custom iOS 5.0.1 (already hacktivated, jailbroken):
- iPhone 3GS with new bootrom + untethered jailbreak + hacktivated + baseband 6.15.00 included
- iPhone 3GS with old bootrom + untethered jailbreak + hacktivated + baseband 6.15.00 included
* not sure if you have an old or new bootrom? Use f0recast v1.3 (Windows or Mac) to check
3. Download iREB (Windows only) or the latest redsn0w (Windows or Mac). You need one of these to pwn-DFU your device to allow it to accept custom firmware.
4. Launch iBooty and follow on-screen instructions on how to pwn-DFU your iPhone. If you use redsn0w, go to Extras -> Pwned-DFU and follow on-screen instructions.
5. Once you have pwned DFU your iPhone, launch iTunes 10.5. Click Shift+Restore (Windows) or Option+Restore (Mac) and point it to the custom firmware you just downloaded in Step 2.
6. iTunes will begin restoring so just wait until the process is finished. If you get error 3194 during restore, read here.
7. When restore is complete, you will find that you now have iOS 5.0.1 and baseband 6.15.00.
8. Install ultrasn0w 1.2.5 by following the instructions here.
9. Disable 3G and Cell Data by going to Settings -> General ->Network. Insert your SIM card and your iPhone should connect to your network.
Post unlocking – iMessage not working? Read this.
Any issues? Leave your comments below but please make sure that you didn’t miss any step above!
Did it work? Buy me a beer! Never required but always appreciated!
Share This Article
Sign up Free Email Newsletter
Stay Updates with this Blog. Get Free email newsletter updates, Enter your Email here:Don't forget to confirm your email subcription


73 Comments to “Untethered Jailbreak and Unlock iPhone 3GS on iOS 5.0.1 by Installing iPad Baseband 6.15.00”
iphone 3gs is running very slow when upgraded to ios 5.0.1 on ipad baseband 5.16.00
any solution to this? google couldn't help.
Hi, I had previously followed the steps in the "Jailbreak and Unlock iPhone 3GS iOS 5.0.1 using Sn0wbreeze Custom Firmware and iPad Baseband 6.15.00" tethered unlock. Do I follow these steps to jailbreak/unlock untethered, or is there another way?
this will unlock your phone and gives you untethered jailbreak
cannot get custom iOS 5.0.1 firmware from filefactory.
what's the error message?
My bad. Now needs FileFactory Premium to get a file over 500M.
FileFactory changed this after the MegaUpload.com issue
We'll try to find a new file hosting option
Same here. "This file is only available to Premium Members
It is larger than the free download limit of 500 MB.
This is only a temporary restriction while we are adding additional capacity."
FileFactory changed this after the MegaUpload.com issue
We'll try to find a new file hosting option, hope this is really just temporary
Hey if i am in iOS 4.1 with iPhone 3GS baseband 06.15.00 i can follow this tutorial?¿? or i have to update mi iPhone to 5.0.1??? I need a answer.
yes you can use this
Hey there,
Great tutorial – just wondering if all 3GS phones produced after week 28 last year are affected or just the 8GB. All the info on the Toshiba chip is about 8GB so I am not sure if this applies to me or not…I have a 32GB 3GS from week 31.
Thank you very much for your help!!
too risky…!
hi i have a 3gs with ios5.01 and bb 5.16.05 of week 43…how do i unlock my phone
there's no way
Hello,
I’ve got an 3GS built in 2012 (exchange for a broken one) with ios 5.01 and baseband 5.16.05.
I dont need an unlock (because it is already unlocked officially), but I would like to jailbreak it. Is it possible without an upgrade to 6.15.00?
Thank you!
just use redsn0w 0.9.10b5
did bootrom checkwith f0recast v1.3 and says
jailbreakable? NO
Unlockable? Upgrade to IPad BB
don't see "untethered" at all. is that mean it's new bootrom?
Why it says it's non-jailbreakable?
I am also waiting for FileFactory come back. Thanks
f0recast is probably outdated and was not updated… it's now untethered for up to iOS 5.0.1
f0recast v1.3 does not tell if my phone has an old or new bootrom.
Thanks for that fast answer!
Yes? Don’t I have to use baseband 6.15.00 for a jailbreak if have currently 5.15.05? And is there no risk me with an 3gs, 2012 week 3?
Sorry for those stupid questions – i’m new to that stuff and dont want to make any failure ..
the baseband is only for unlocking…. so you can jailbreak it without the need of changing the baseband
So I got it unlocked and it is showing Firmware of 06.15.00 but when I put in the Sim card it doesn't find the network. I tried disabling 3G and Cell Data per the instruction above and I've tried a few restarts but it still isn't showing. Any other suggestions?
Thanks for the hard work.
install iPad baseband again
Sadly that didn't appear to work…
i assume you already installed ultrasn0w from cydia.
filefactory doesn't work until now. Is there any link for custom iOS 5.0.1 (already hacktivated, jailbroken)?
filefactory has some limitations now, working on moving the files…
in the meantime you can build your own custom iOS with sn0wbreeze
thanks man. I'll just wait for your files. im a newbie and i don't know how to build my own custom iOS with snowbreeze.
1. download sn0wbreeze 2.9.1 from ih8sn0w.com
2. download iOS 5.0.1 (Google search) or sn0wbreeze can download it for you
3. use simple mode
4. follow on screen instructions
can i use this redsn0w 0.9.10b5 to pwdDFU my iphone on step3? and on step5, should i hold the SHIFT button(win) and click RESTORE on iTunes? And i have a new bootrom (iPhone 3gs) (using iDetector), is it compatible if i download iOS 5.0.1 using sn0wbreeze?
yes that should work
is sn0wbreeze PC only?
yes, pwnage tool or redsn0w for Mac can build custom firmware too
i did SIMPLE MODE and restoring was successful (cydia installed)but still the BB is 5.16.05? did i missed something?
use advanced mode, under unlock select install iPad baseband
Thank you, thank you, THANK YOU ! Thanks a lot for all your help and tips, it has worked like a charm !
why is it that my baseband still on 05.16.05 but i already restored my phone using the ipsw i downloaded from sn0wbreeze and follow the intructions? do i have to donate?
just try again
I have finally an issue after doing this process.
I have used an Unthetered IOS 5.0.1 and the phone works well. Unlock is also ok. The problem is that every 2-3 boot, I have to do a Tethered boot. Any ideas about that ?
the same with me. it takes too long to boot up and stuck in apple logo. maybe it's a CON.
Hi!
So I tried to build my own iOS, but sn0wbreeze keeps saying invalid IPSW after downloading. Am I missing something?
use latest sn0wbreeze from ih8sn0w.com
hi!
I have a 3gs on 4.3.3 with bb6.15. I wanted to update it to 5.0.1 so i dled sn0wbreeze and cooked a custom ipsw with it. Put it in Pawned DFU mode with ireb, did shift+restore got as far as "waiting for iphone" on itunes and with the snowflake icon on the phone then I encountered error 14 on itunes. What did I do wrong?
Custom firmware update fail (PwnageTool until 4.0.1). You have to restore the device with a custom firmware. Update to a custom firmware isn't working. Device isn't bootable. 2
USB Problem. Check the USB connection and try other direct ports or maybe the USB cable is an older one. Device isn't bootable.
You're trying to 'update' to a beta firmware instead of performing a restore. Device is still bootable if you kick it out of recovery mode.
Rebooting your Mac or PC may resolve this issue.
Root file-system partition size was set too small in the ramdisk's options plist.
yeah I also looked up this error code and was directed to this solution. Didnt make much sense at first. Tried a LOT of stuff and made more custom ipsw until one finally worked! I had to update some windows stuff to get it working right. Then i got the "no service" error which was easily remedied by reflashing the ipad baseband via redsn0w. Hope my phone will run smoothly now *fingers crossed*
Thanks for all your help!!
nice work!
do you have mirror link to Download custom iOS 5.0.1 newboot rom??
Thanks
What can i do for unlock iphone 3gs 5.0.1. 05.16.05, if it made AFTER 28 WEEKS 2011?
nothing much…
I have tried the jailbreak and unlock and finally made it work.. it is now seeing the network provider and there is a signal. however.. i tried sending a text and making a call but it doesnt work.. its also working very slow. what did i do wrong? please help!!!
Can someone upload the Old bootrom one to mediafire?
It says "all download slots are in use"
Yer, plz upload the ipsw's to a different server :S
It sais: only downloadable for premium loosers uhh users
Kinda pointless: jailbreaking ur fone for free apps, but needing to pay do download the needed files…
filefactory changed their policy recently
I keep on getting error 1600 or 1604, I enter fine into DFU mode, then when it is preparing iphone for resore or verifying with apple it gives me the error. Thanks in advance for the help
did you DFU using redsn0w or iREB? DFU = black screen
iREB –> home+power then home, then i get "expoliting limerain" on ireb, then the confirmation and iphone screen IS black. But when i try to restore the custom firmware it gives me back error 1604 first, then if i try again 1600 until i redo the procedure to enter again into DFU i get restart with 1604.
I've tryed using tinyumbrellas server, but it doesnt work i get other errors
check your hosts file, if you need to restore to latest iOS i.e. 5.1, then remove any entry that points to Cydia
No, i want to upgrade to ios5.0.1 and i cannot remove the entrys pointing to cydia because i have the ipad baseband
if you have the iPad baseband, you must build a custom firmware
thanks for that information, i know it. So starting again:
I keep on getting error 1600 or 1604, i have 3gs on bb6.15. Im doing the procedure written here: DFU mode with iREB and custom 5.0.1 firmware made with sn0wbreeze
do u have any ideas?
rebuild the custom IPSW
done, no improvements.
thanks
Jumbofiles links to custom iOS 5.0.1+ bb 6.15.00+JB + hacktivated for old and new bootrom
sn0wbreeze_iPhone_3GS-5.0.1-9A405_newbootrom_hacktivated_ipadBB.ipsw – 676.5 Mb
sn0wbreeze_iPhone_3GS-5.0.1-9A405_oldbootrom_hacktivated_ipadBB.ipsw – 676.5 Mb
RK at beijingiphonerepair does so much for iphone community so I d/l the files from filefuctory links above and u/l to Jumbofiles. I hope I formatted the links correctly to work with comments here.
Jumbofiles for free users> no timeouts or CAPTCHA's + d/l more than one file at a time +1GB file limit. Currently speeds are better than with my premium filefuctory.
Hi iphonerepair,
I would really appreciate your help now. Since the custom ios 5.0.1 jailbroken, hacktivated is not available, I followed your advice on creating my own with Snowbreeze(latest version). So I downloaded with Snowbreeze, picked simple ~ and it throw me the custom file. I shift clicked restore button on iTunes, everything went smooth until I set up the phone. The problem I have right now is, Safari, Mail and other apps are closing right after taping them.
Is there a way to fix this?
I didn't save my SHSH files before proceeding because the 3Gs (old bootrom) was bricked. BTW I have BB 6.15.00
Please let me know, again, I would really appreciate it!
EZ
did you restore to iOS 5.1? the jailbreak is tethered, use iBooty or redsn0w > extras > just boot
No, I upgraded from 4.2.1 to 5.0.1
It's fixed now, I guessed that something was wrong with the file I used to restore, which was created on Sn0wbreeze. So I went in, and instead of picking Simple~ I made a custom one without the "update to ipad baseband" because I already had BB 6.15.00 so it worked perfectly.
Now, for some strange reason, when installing Ultrasn0w I get an error 1, mentioning the script(first) returned an error and I cannot use my SIM card.
I'm guessing it's because the source host of ultrasn0w is having some problem or there's something wrong with my wifi, I'll have a look.
Thanks a lot for your help, iPhoneJailbreak.me FOR THE WIN
i ask u now, i want to do the same thing: i have 3gs BB 6.15 and i want to update to 5.0.1
What string did u add to the hosts file? 74.208.151.171 gs.apple.com? 74.208.151.171 does not seem to work
How is the phone working in terms of speed?
as long as you have the shsh for 5.0.1 you can add that to your hosts file
I followed all the steps above but i get “No service” after unlocking.
reflash the iPad baseband
any news if there is a new host for the 5.0.1 files? file factory will not let me download them w/out premium membership.
this happened after i installed the Jailbreak and Unlock iPhone 3GS on iOS 5.0.1 by Installing iPad Baseband 6.15.00