Apple Abilities for Limera1n exploited devices.

[Latiken]

I would like to know all the abilities or things you can do on iPhone 4 models due to the BootROM exploit called limera1n.
Also, all iPhone 4 models (CDMA, GSM, Verizon, Sprint, AT&T) support this exploit right?

 

[Izen]

Well, limera1n lets you run unsigned code, so you can effectively do anything can be done on an iDevice. As far as user-oriented applications, tethered jailbreaks and the various tools (redsn0w, sn0wbreeze, iFaith) are about all that utilize it. You can rip SHSHs from your device, and you can restore to any firmware with those SHSHs. There was the iDroid project a while back that I believe relied on limera1n to install OpeniBoot over stock iBoot to allow a device to load a custom firmware (that firmware being Android), but that project's dead now and they never got very far with anything other than the original iPhone, iPhone 3G, and iPod Touch 1G. That's about it.

It's really out-dated exploit, so no devs really pay it any mind anymore. No sense in building tools that rely on an exploit that only 3-year-old devices are vulnerable to.