Main Page

This is the wiki for the freemyipod project. Freemyipod is a project aimed at reverse-engineering non-iOS iPods (all models other than the Touch) and creating tools and documentation so that other people can port alternative firmwares to them such as Rockbox or Linux. Freemyipod is a relaunch of Linux4nano.

FAQ

I'm not an embedded software developer, what can I do with my iPod?

If you have an iPod nano (2nd generation), iPod classic (6th generation) or an older iPod, you can install Rockbox.

If you have an iPod nano (6th generation) or iPod nano (7th generation), you can install a theme.

If you have an iPod nano (7th generation), you can install NanoApps.

If you have another model, there's nothing you can currently do to help us add support and/or speed up the process, since it requires a lot of time and effort. Keep an eye on our wiki and social media for any updates!

I'm an embedded software developer, what can I do with my iPod?

Here's the current progress, by iPod model:

iPod nano (2nd generation)

• U-Boot can be chainloaded from Rockbox.

iPod nano (3rd generation) and iPod nano (4th generation)

• wInd3x allows untethered and safe code execution (no permanent modification).
• Rockbox bootloader has been published, but the Rockbox port is not yet completed.

iPod nano (5th generation)

• wInd3x allows untethered and safe code execution (no permanent modification).
• There's a U-Boot port, and Linux boots with an initramfs.

iPod nano (6th generation) and iPod nano (7th generation)

• Tethered code execution using S5Late (a vulnerability in DFU_DNLOAD packet parsing code) (also for iPod shuffle (4th generation))
• Untethered code execution using ipod_sun (CVE-2010-1797)

iPod nano (7th generation)

• There's a U-Boot port, and Linux boots with an initramfs.

There's a set of earlier tooling (emCORE/emBIOS/iBugger) which was exploiting other vulnerabilities and was a lead-up to a port of Rockbox, but it's mostly abandoned.

Gallery

• 
  fastfetch on iPod nano (7th generation)
• 
  fastfetch on iPod nano (2nd generation)
• 
  Linux 7.1.0-rc3 on iPod nano (7th generation)
• 
  Linux 6.14.0 on iPod nano (7th generation)
• 
  S5L8702 under an EM
• 
  S5L8701 under an EM
• 
  Patched retailOS on iPod nano (7th generation)
• 
  Wayland on iPod nano (5th generation)
• 
  neofetch on iPod nano (5th generation)
• 
  Patched disk mode on iPod nano (5th generation)
• 
  Linux on iPod nano (5th generation)
• 
  Linux 6.2.0-rc4 on iPod nano (5th generation)
• 
  emCORE r779 on iPod nano (2nd generation), iPod nano (4th generation) and iPod classic (6th generation)

Getting an account

Due to spambots, registration is closed. For an account contact User890104 or q3k.

Updates

• 2026-03-30 - Some of us will be at GPN24 in Karlsruhe! Let us know on IRC/Discord/Matrix if you're also there!
• 2025-12-28 - Hug0 made a lightning talk at 39C3 on iPod Nano reverse engineering.
• 2025-12-26 - Some of us will be at 39C3 in Hamburg! Get in touch with q3k and/or Slackware if you're around!
• 2025-06-12 - Some of us will be at GPN23 in Karlsruhe! Let us know on IRC/Discord/Matrix if you're also there!
• 2024-12-25 - Some of us will be at 38C3 in Hamburg! Come say hi!
• 2024-12-16 - S5Late, a tethered iPod bootrom/DFU exploit for iPod nano (7th generation) (and possibly iPod nano (6th generation)), is released.
• 2023-12-28 - ipod_sun, a tool that enables code execution on the iPod nano (6th generation) and iPod nano (7th generation), is released.
• 2023-01-07 - A preliminary U-Boot port to the iPod nano (5th generation) has been developed.
• 2022-01-04 - The bootrom of iPod nano (5th generation) was successfully dumped, and is in the process of being reverse-engineered!
• 2021-12-31 - An exploit named wInd3x, which exploits the latest vulnerability, is being prepared for iPod nano (4th generation) and iPod nano (5th generation).
• 2021-12-27 - A new vulnerability was discovered in iPod nano (4th generation) and iPod nano (5th generation) bootrom, which allows arbitrary code execution!

Follow our X feed to get status updates automatically. See the Status page for more detailed information. Check our GitHub repositories for the latest changes to our source code.

Project info Status Contact Contributing Released Software wInd3x ipod_sun U-Boot port Linux port Legacy: iBugger iLoader emCORE

Basic skills Working with binaries Dumping firmware Extracting firmware Firmware downgrading Troubleshooting Reverse engineering results Firmware BootROM Boot Process Firmware decryption Flash Translation Layer retailOS retailOS Options GUID table JTAG Nano 2G Nano2G clock gates‎ Nano2G LCD init Nano2G HW analysis S5L8701 analysis Nano 4G Nano4G firmware upgrade process Nano 5G General

Hardware Hardware iPod nano (1st generation) iPod nano (2nd generation) iPod nano (3rd generation) iPod nano (4th generation) 920-0614-03 iPod nano (5th generation) iPod nano (6th generation) iPod nano (7th generation) iPod classic (6th generation) Chronology S5L8700 datasheet Modes Exploiting wInd3x Pwnage 2.0 Notes vulnerability Address bruteforcing Nanotron 3000