iPod Nano 7th Generation Possible Hacks

[n1kn4k]

Originally Posted by Neverfa11ing

Thanks for being so prompt of the first link! Could you upload the extracted firmware for the second link somewhere so I can get that? The easiest way to view the img files is a way I just found out. The only one that will be useful to you is the rsrc.img file and it has the resources folder inside it. The way to get that img file extracted is download win32diskimager (Windows) or a program on Linux that will write an image to a usb disk. Get an applicable program and write the img file to the usb disk. After that the resources folder will be on the usb disk.

To answer your question, I'm not familiar with Clementine but the program CopyTrans Manager has been my favorite and is usually the first for support for new OS's and iPods. Heres a link to the website Free iTunes alternative - Manage iPod iPhone without iTunes. Not sure if they have support yet for the iPod Nano 7th Generation.

Good Luck and Thank You!

Why can't you extract the firmware on that one?

[n1kn4k]

This a screenshot of it open in winrar

[n1kn4k]

Using Win32diskimager, it just makes my usb unreadable, and i have to format it to use it again. I am currently looking at an img to iso converter but its not really working.

[Neverfa11ing]

Originally Posted by n1kn4k

Why can't you extract the firmware on that one?

I could but I'm switching computers around right now and I'm redoing my Linux drive and my Mac is being reset as well. So I could have it done in a week but not till my computers are back into working condition.

[Neverfa11ing]

Originally Posted by n1kn4k

Using Win32diskimager, it just makes my usb unreadable, and i have to format it to use it again. I am currently looking at an img to iso converter but its not really working.

You may want to double check that you are using win32diskimager correctly or if you made that img file correctly. It should be 145,752,064 bytes, if not you probobly created the image file wrong.

[Neverfa11ing]

Found this information on freemyipod.org to update one of my past posts.

appl - Apple logo for booting

bdhw - Bad hardware image

bdsw - Bad software image (Use iTunes to restore)

lbat - Low battery image

chrg - Same as lbat but showing that the iPod is charging

These files are practically useless to any hacking, so these won't be useful to anything really. Just a bunch of images.

fv00 and gpfw both look like their not much more than useless because they're smaller than the images.

So it seems that diag, disk, and osos are the only useful files for a hack. Rsrc is fun to mess with but nothing is going to come from there.

[lesnico]

Originally Posted by Neverfa11ing

So it seems that diag, disk, and osos are the only useful files for a hack. Rsrc is fun to mess with but nothing is going to come from there.

Yes, but it'd be usefull to replace all the horrible wallpapers in our Ipod, but for that, we need to know how to pack and unpack some files, like SilverDB files (.bin) which have all of these pictures !

We need some help !!

[Neverfa11ing]

Yes we do need some help on unpacking those, also in addition to the images in SilverDB file we can change the appl.fw image to some other boot logo as well. Same goes for a few other firmware files.
First thing we need to see is if we can repack this firmware and have it still work.

[lesnico]

So, first of all, we need some tools to :

- Unpack and repack firmwares
- open and preview some files, and edit them

So, we need to work with our favorite hexadecimal editor, but I'm not a programmer.

BUT, I have a little idea, I know people who are "romhackers", it means that they, for example, translated some games from English to french. So they need to study all files and make some tools for it. Maybe I could ask for some help to them ?

[Neverfa11ing]

Those two points you made are absolutely correct, repacking firmwares and editing some files will be the two most important things. If you know those guys see if they can help that would be awesome.

[Zyxxeil]

Im not sure if its even possible to repack this as apple signs it and once you unpack it you break the signature and itunes rejects the firmware, anyways there is a way to bypass this by putting the ipod in a state that allows this kind of custom firmware.

Im just thinking of the top of my head since Seas0npass does this, the problem is that iOS devices are able to enter a pwned dfu state because of the limera1n exploit, not entirely sure on the ipod nano. Seems like the ipod nano shares some structure of iOS devices thats why im making this assumption.

Or i could be wrong and apple doesn't sign the package, at least we are making progress.

BTW, HxD reads the silverimages file just fine and saves it to.

Edit (Again), what we need now is something that will extract the silverimage file and repack it back again. I found this tweet "bit . ly / 13cwYhh"

[Neverfa11ing]

Nice research Zyxxeil. I know for fact that the iPod Nano can go into DFU mode and am very sure it can go into Pwned DFU by using Nan0hail which is built to work with the iPod Nano 6g but also works fine with the 7g. At least putting it into a Pwned DFU. Download link for Nan0hail is here https://docs.google.com/viewer?a=v&p...2ZhYjNjOWIxM2I. I really hope we can find a way to unpack the SilverImagesDB file.

Edit: I just sent out an email to Steven Troughton-Smith to see if he can help us with some of this. I'll let you guys know what will come of this.

[lesnico]

I send an email to a friend of mine who's romhacker and so he'll try to see what he can do. I'll keep you, guys, in touch !

[n1kn4k]

Just saying, win32diskimager does not work to write this img, it just makes the usb unreadable. How to do this with dd?

[Neverfa11ing]

Unpack the image file? If you have linux just unpack it in linux. Can you tell me the exact size of the img file you have?