How To Jailbreak Apple TV2 on iOS 4.2 with PwnageTool

Apple has already released iOS 4.2 version for Apple TV 2G.Here is a step by step guideline for those who want to jailbreak their Apple TV2 on iOS 4.2 with PwnageTool.Developer behind popular nitoTV plugin @nitoTV tested that the PwnageBundle which is being used in this guide to jailbreak ATV2 on iOS 4.2 is not from official sources but it works without any problem.

Disclaimer: If you do not have your SHSH blobs backed up for your AppleTV at 4.1 i HIGHLY advise avoiding any upgrading whatsoever, tethered or not, until a real proper jailbreak is available.


* A MicroUSB cable
* An Intel Apple laptop Running Snow Leopard
* AppleTV 4.2 ipsw AppleTV2,1_4.2_8C150_Restore.ipsw
* PwnageTool 4.1.2 ( 4.1.3 is untested but could potentially work as well) (this is an unofficial mirror and still works as of 11-29-10)

The steps are as follows:

Step 1: Move this entire folder to the desktop.

Step 2: Open Terminal app.

Step 3: Run the following commands.

cp -r ~/Desktop/tethered/AppleTV2,1_4.2_8C150.bundle /Applications/

cp ~/Desktop/tethered/Info.plist /Applications/

Step 4: Run PwnageTool on the 4.2 ipsw and saving into the ~/Desktop/tethered folder with the default name PwnageTool gives it.

Step 5: Back in the terminal run the following:

unzip -j ~/Desktop/tethered/AppleTV2,1_4.2_8C150_Custom_Restore.ipsw Firmware/dfu/iBSS.k66ap.RELEASE.dfu kernelcache.release.k66 -d ~/Desktop/tethered/

Step 6: Restore the AppleTV to the ~/Desktop/tethered/AppleTV2,1_4.2_8C150_Custom_Restore.ipsw firmware.

Step 7: Unplug and then replug the USB, after the AppleTV has finished started up, plug in the power cable.

Step 8: Run the following commands in terminal:

cd ~/desktop/tethered

./tetheredboot -i iBSS.k66ap.RELEASE.dfu -k kernelcache.release.k66

Step 9: MANUALLY put the AppleTV in DFU.

DFU mode:

* Hold Menu for 7 Seconds

* Without releasing menu, press power for 7 seconds

successful output from tetheredboot looks like this:

Initializing libpois0n

No matching processes belonging to you were found

Waiting for device to enter DFU mode

Device must be in DFU mode to continue

opening device 05ac:1227…

Found device in DFU mode

Checking if device is compatible with this jailbreak

Checking the device type

Identified device as AppleTV2,1

Preparing to upload limera1n exploit

Resetting device counters

Sending chunk headers

Sending exploit payload

Sending fake data

libusb:error [darwin_transfer_status] transfer error: timed out

Exploit sent

Reconnecting to device

Waiting 2 seconds for the device to pop up…

opening device 05ac:1227…

Uploading iBSS.k66ap.RELEASE.dfu to device

[==================================================] 100.0%

libusb:error [darwin_reset_device] ResetDevice: device not responding

libusb:error [darwin_close] USBDeviceClose: no connection to an IOService

Waiting 10 seconds for the device to pop up…

opening device 05ac:1281…

Setting to configuration 1

Setting to interface 0:0

Uploading kernelcache.release.k66 to device

[==================================================] 100.0%

libusb:error [darwin_transfer_status] transfer error: device not responding (value = 0xe00002ed)

Step 10: If all went well, unplug USB and plug in HDMI and your AppleTV should be ready to go. You will need to repeat 7-9 every time you restart your AppleTV, this isn’t a convenient process by any stretch!

Step 11: To get nitoTV installed ( i couldn’t get the cydia, or custompackage sot work in PT)

apt-get install wget

wget -O- | apt-key add –

echo “deb stable main” > /etc/apt/sources.list.d/awkwardtv.list

apt-get update

apt-get install com.nito.nitotv

That’s all.

Download PwnageBundle designed for AppleTV2 jailbreak resting on iOS 4.2.

Click On Ads To Buy

This Post Has 6 Comments

  1. Mkerbel

    what folder is to be moved in step 1???????

  2. guest

    I get stuck at step 9 with this message “Cannot open iBSS file ‘iBSS.k66ap.RELEASE.dfu'”.
    please help.

  3. Urs Kobald

    Okey, but i become the error message:

    dyld: unknown required load command 0x80000022
    Trace/BPT trap

    on step 8. I have OSX 1.5.8! Any Idea?


  4. NightLion

    These directions are worthless. What is AppleTV2,1_4.2_8C150.bundle ?? Where does the bundle come from? I doubt anyone has even tried this.

  5. Purgatory

    Just a though but maybe the link in the article that says… “Download PwnageBundle designed for AppleTV2 jailbreak resting on iOS 4.2.”

    Some thinking is required.

Leave a Reply