Main Page

iBugger on the 4G Nano

This is the wiki for the freemyipod project. Freemyipod is a project for reverse-engineering iPods with clickwheel and creating tools and documentation so that other people can port alternative firmwares to them such as rockbox.

Updates

• 2010/08/06 - The wiki has now been moved to www.freemyipod.org
• 2010/08/05 - Recently we've been working on a hardware abstraction project called emBIOS. Follow development here: http://bit.ly/cQAuam
• 2010/08/03 - We can now access the Nano 4G accelerometer.
• 2010/08/02 - serpilliere managed to decrypt the NOR flash on the Nano 3G.
• 2010/08/01 - serpilliere managed to access and dump the NOR flash on the Nano 3G. This code could possibly work on the Classics.
• 2010/07/27 - The server got zapped by lightning but a new one was up and running within a day.
• 2010/02/23 - We can now execute code on everything besides the Nano 5G! Minimalistic iBugger working on Nano 3G!
• 2009/11/01 - iBugger core v0.1 successfully running on Nano 4G! [1]
• 2009/10/26 - USB now (somewhat) functional on Nano 4G via iBugger! This will be used instead of UART to dump memories.

Follow our Twitter feed to get status updates automatically. See the Status page for more detailed information.

Project info Status Contact Contributing Todo list Project summary Released Software iLoader iLoader howto iLoader themes iLoader testing results iBugger emBIOS emBIOS Monitor Protocol Basic skills Working with binaries Dumping firmware Extracting firmware

Software efforts Firmware Bootstrapping sequence Firmware decryption Nano 2G Nano2G clock gates‎ Nano2G LCD init Nano2G FTL Nano 4G Nano4G firmware upgrade process Exploiting Pwnage 2.0 Notes vulnerability Address bruteforcing Nanotron 3000

Hardware efforts Hardware Nano 1G Nano 2G Nano2G HW analysis S5L8701 analysis Nano 3G Nano 4G Nano 5G Classic 1G Classic 2G Classic 3G Chronology S5L8700 datasheet Other guides MPEG movies Modes