NOTICE: This unlock will not work on bootloader 3.9. If you try it on a bootloader 3.9, gunlock will complain with the following messages:

geohot’s 112 otb unlocker…

Waiting for data…

Attempt…

Attempt…

Got Header: 77 0b cc

Bootloader version: 3.9_M3S2

Incorrect bootloader version

The following contents are basically from the instructions.txt bundled in the Geohot’s unlocking package. I made some modifications to make it more clear.

1. Get Files

Unlocking tool: OTB 1.1.2 & 1.1.3 Unlocking ToolBaseband: ICE04.02.13_G.fls (local link temporarily removed due to huge traffic, try HERE)

Put all files into a folder, say /unlock, on iPhone.

2. Downgrade Firmware

Put iPhone into DFU mode then use iTunes to downgrade firmware to 1.0.2 (there will be an error 1013 at the end which is normal), this allows to use WiFi during the unlocking procedure. (NOTE: 1.1.1 and above will shutdown WiFi)

3. Unlock It

Issue the following commands to unlock:

launchctl remove com.apple.CommCenter

cd /unlock

chmod 755 *

./gunlock secpack ICE04.02.13_G.fls

launchctl load /System/Library/LaunchDaemons/com.apple.CommCenter.plist

NOTICE: 1.1.3 unlocked with 04.02.13_G.fls.

4. Jump Out of Brick Mode

If iPhone is in brickmode after the unlock, get the elite team bricktool From Here and use it to get out.

Enjoy your OTB 1.1.2/1.1.3 unlocked iPhone.