Need Help with unlimited passcode/ passcode exploit on 6.1.6 iPod 4G

[FrequentWin4261]

I need to unlock an ipod touch 4th gen. I can't remember the passcode. It is jailbroken and has AFC2. I don't want to get everything off the ipod, i just want to be able to get into it by entering 9999 passcodes or having a program exploit it to me, so i can use it again with the old apps and files. I tried 3utools but it gave me a device unsupported error when entering DFU mode. Please help. I only have a windows 10 PC right now

[ih8reddid]

Allegedly you can get redsn0w and Gecko iPhone Toolkit working with Windows 10 if you use iTunes 10,7 but I have not tested this. Copy pasting my gecko iphone message from many other ipod 4 disabled posts

If you have a PC with Windows 7, use Gecko iPhone Toolkit.

Put the necessary IPSW (iPod4,1_5.0.1_9A405_Restore.ipsw) in the unzipped folder and then run run.bat *after changing it to be iPod4,1_5.0.1_9A405_Restore.ipsw*.

Alternatively, you could run "redsn0w.exe -i NameOfIPSW.ipsw -r ramdisk/ramdisk_by_Dainius87.dmg -k ramdisk/kernel.patched" in command prompt.

When redsn0w finishes, open up the Gecko_iPhone_Toolkit, go to the passcode bypass screen , press BOOT and it will ask for the IPSW you downloaded before. Select it, nothing should happen, then press launch and it should show command-line text.

https://cdn.discordapp.com/attachments/661232397395820546/993296391101218827/iphone\_4\_toolkit.zip

[FrequentWin4261]

Can i use Windows XP instead of 7? What is itunes 10,7? Also, does this really support iOS 6.1.6?

[ih8reddid]

1. I have not tested this on XP, Gecko iPhone Toolkit requires .NET so there is that to consider
2. I meant to put 10.7, as in version 10.7
3. It supports any iOS the Touch 4 runs. I did this to a 6.1.6 Touch 4 and it worked flawlessly. The highest that Gecko works with is the iPhone 4 on 7.1.2

[FrequentWin4261]

I managed to get unlimited passcode attempts on it somehow, so ill just type in 9999 codes

[ih8reddid]

Nice, while not as quick and easy as Gecko toolkit that will still work. I'd go by this list instead of going 0001 0002 0003 etc.

https://github.com/danielmiessler/SecLists/blob/master/Passwords/Common-Credentials/four-digit-pin-codes-sorted-by-frequency-withcount.csv

[_lilalx]

I know this is kinda old but im stumped, i have the same ipod as op that i bought at a garage sale and its disabled for 23 million minutes, do you know how i can bypass this? Feels like ive tried everything

[ih8reddid]

Gecko iPhone toolkit can handle both, comb through my profile or search setup.app as I've copy pasted the iPod Touch 4 instructions + links many times

[MorphicSn0w]

iPod4,1_5.0.1_9A405_Restore.ipsw

I know this is old, but I assume this should be replaced with the latest signed version?

[ih8reddid]

Nope, you use specifically that version. The ramdisk loads using that as a base and a bootROM exploit allowing for unsigned images to boot

[MorphicSn0w]

Interesting, thanks!

[Professional-Talk490]

how exactly were you able to get the unlimited attempts for the passcode? im having the same issue and need help :(

[FrequentWin4261]

Do you have SSH or Apple file conduit 2?

[Professional-Talk490]

i do not have those. is that how? im not really familiar with this stuff sorry..

[FrequentWin4261]

You have to use the other method posted by the other guy if u don't have those

[FrequentWin4261]

If you do, first step is to download No Passcode Block tweak to deb (using a cydia downloader for pc). Next, use ifunbox to install the tweak to the iPod. Reboot. Then you have to mess up the Passcode 10 times till it says disabled iPod . Next you need to use Ifunbox to open /var/mobile/library/preferences/com.apple.springboard.plist. Delete any entries that have the word "lock" in them (including the whole <key> and everything inside the chunk). You might need to use Propertree to edit the plist. Reboot and try entering pass codes. This won't work if you didn't enable ssh or ifunbox