Ramdisk Hack

This allows unsigned ramdisks to be booted. It was first publicized by ZiPhone

Credit
The dev team

Exploit
Passing boot args specifying a ramdisk in ram > 0x9C000000 allows any ramdisk to be booted.

Implementation

 * PwnageTool
 * ZiPhone