Mirrors/Legacy-iOS-Kit
2
0
Fork 0
mirror of https://github.com/LukeZGD/Legacy-iOS-Kit.git synced 2025-06-22 10:31:44 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,206 Commits 1 Branch 1 Tag
main
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA Open with GitHub Desktop
Ricky Cheung efc93520ec Unify $device_det variables (#769) 
We can ask `cut` to provide us with the value before a delimiter
so we can obtain the current major version.

The original implemention will become a bad idea as Apple starts
shifting to using years as major versions, confusing the tool
into thinking it might be running very legacy iOS versions.

This also fixes issues with saving onboard SHSH for 64-bit devices
on versions before 10.x.

Co-authored-by: Ricky Cheung <rcheung844@gmail.com>
2025-06-21 16:27:38 +08:00
.github
Update ipwndfu again to use latest pyusb, and other changes
2025-06-17 20:30:17 +08:00
bin
Some updates for restoring to latest ios for 64-bit devices (linux only)
2025-06-19 12:39:37 +08:00
resources
Better solution to #744
2025-05-25 19:31:06 +08:00
.gitattributes
Added all files from iOS-OTA-Downgrader-Keys
2021-10-07 21:50:26 +08:00
.gitignore
an update
2025-04-08 19:39:51 +08:00
LICENSE
Big update (script rewrite)
2023-01-13 12:25:27 +08:00
README.md
Save cryptex apticket and seed when dumping blobs for iOS 16+
2025-06-16 15:07:29 +08:00
restore.sh
Unify $device_det variables (#769)
2025-06-21 16:27:38 +08:00

README.md

Legacy iOS Kit

Features

  • Legacy iOS Kit supports all 32-bit iOS devices, and some 64-bit (A7/A8/A9/A10/A11) devices
    • Devices that received iOS 16 and newer will only have limited functionality (e.g. sideloading) and some features like SSH ramdisk are not supported
    • Legacy iOS Kit defines legacy devices as all iOS devices that are vulnerable to checkm8 and older
  • Restore to signed OTA versions (iOS 8.4.1 and/or 6.1.3) on A5/A6 devices
  • Restore to iOS 10.3.3 (signed OTA version) on supported A7 devices
  • Restore supported devices to unsigned versions with SHSH blobs
  • Restore to unsigned iOS versions with iOS 7 blobs (powdersn0w)
  • Restore supported 32-bit devices to unsigned iOS versions "without" blobs
    • Includes downgrading iPhone 2G, 3G, 3GS, iPhone 4 GSM and CDMA, iPod touch 1, 2, 3, iPad 1
    • "without" is in quotes because powdersn0w uses iOS 5/7 blobs for touch 3 and A4 devices, but it is signed for everyone to use
    • Other devices however are true blobless
  • Tethered downgrades/restores to supported iOS versions for A5(X)/A6(X) and some other 32-bit devices
  • Jailbreak all 32-bit iOS devices on nearly any iOS version
    • Available on iOS versions 3.0 to 9.3.4 with some small exceptions
  • Hacktivation for iPhone 2G, 3G, 3GS, 4 GSM (activate without valid SIM card)
  • FourThree Utility - Dualboot iOS 4.3.x for the iPad 2
  • Boot SSH Ramdisk for supported 32-bit and 64-bit devices
  • Save Onboard SHSH blobs for supported 32-bit and 64-bit devices
  • Install IPA files for supported devices with AppSync Unified installed
  • Sideload IPA files for supported devices on Linux (and macOS)
  • Save SHSH blobs from Cydia servers for 32-bit devices
  • Enter pwned iBSS/kDFU mode for supported 32-bit devices
  • Save onboard SHSH blobs for jailbroken 64-bit devices (deverser)
    • This also saves onboard Cryptex APTicket and seed for iOS 16+ (x8A4)
  • Install TrollStore using SSH Ramdisk for supported 64-bit devices on iOS 14/15
  • Clear NVRAM for 32-bit devices
  • Device activation using ideviceactivation (especially useful for iOS 4 and lower)
  • The latest baseband will be flashed for certain A5/A6 devices (for iPhone 4S, 5, 5C, iPad 4, mini 1)
  • Dumping and stitching baseband to IPSW (requires --disable-bbupdate)
  • Dumping and stitching activation records to IPSW (requires --activation-records)
  • Data Management - Backup and restore, mount device, erase all content and settings
  • Misc Utilities - Pair device, export data and battery info, shutdown/restart device, and more

Supported devices

  • Identify your device here
  • iPhone 5C and iPad mini 3 devices are NOT supported by OTA downgrades
    • These devices still support restoring to other iOS versions with SHSH blobs, see below
  • See the table below for OTA downgrading support:
Target Version Supported Devices
iOS 10.3.3 A7 devices:
iPhone 5S
iPad Air 1
iPad mini 2 (except iPad4,6)
iOS 8.4.1 32-bit devices:
iPhone 4S
iPhone 5
iPad 2, iPad 3, iPad 4
iPad mini 1
iPod touch 5
iOS 6.1.3 iPhone 4S
iPad 2 (except iPad2,4)
  • Restoring with SHSH blobs, jailbreaking, and using SSH ramdisks are supported on the following devices:
    • iPhone 2G, 3G, iPod touch 1
    • iPhone 3GS, 4, 4S, 5, 5C
    • iPad 1, 2, 3, 4, mini 1
    • iPod touch 2, 3, 4, 5
  • Restoring with SHSH blobs and using SSH Ramdisks are also supported on some 64-bit devices:
    • iPhone 5S, 6, 6S, SE 2016, 7 (including Plus variants)
    • iPad Air 1, 2
    • iPad mini 2, 3, 4
    • iPod touch 6, 7
    • See SEP/BB Compatibility Chart for iOS versions that can be restored to
    • Although SEP/BB compatibility mostly does not matter anymore for A9(X)/A10(X) devices thanks to turdus merula
  • Restoring with iOS 16.6.x SHSH blobs using futurerestore is also supported on these devices (SSH ramdisks not supported):
    • iPhone 8, X
    • iPad 5
    • iPad Pro 9.7/12.9 1st gen
  • Restoring with powdersn0w is supported on the following devices and target version range:
    • iPhone 4 GSM - iOS 4.0 to 7.1.1
    • iPhone 4 CDMA - iOS 5.0 to 7.1.1 (4.2.x has issues)
    • iPhone 4S, 5, 5C, iPad 2 Rev A, iPod touch 5 - iOS 5.0 to 9.3.5
    • iPad 1 - iOS 3.2 to 5.1
    • iPod touch 3 - iOS 4.0 to 5.1 (3.1.x has issues)
    • Using powdersn0w requires iOS 7.1.x blobs for your device
      • No blob requirement for iPhone 4, iPad 1, iPod touch 3 (7.1.2 and 5.1.1 are signed)
      • For iPhone 5 and 5C, both 7.0.x and 7.1.x blobs can be used
  • Restoring tethered to any version is supported on the following devices:
    • iPhone 4 (3,2 and 3,3), 4S, 5, 5C
    • iPad 2, 3, 4, mini 1
    • iPod touch 3, 4, 5
  • Restoring to other unsigned versions without blobs is supported on the following devices and target version range:
    • iPhone 2G, 3G, 3GS, iPod touch 1, touch 2 - All versions are supported
    • Lowest downgradable version is 2.0. Going to 1.x does not work
    • For jailbreaking support, see below
  • Jailbreaking for 32-bit devices and versions support:
    • iPhone 2G and touch 1 - 3.1.3 only
    • iPhone 3G and touch 2 - 4.2.1, 4.1, and 3.1.3
    • iPhone 3GS - All versions are supported (all release versions from 3.0 to 6.1.6)
    • Other devices - All versions from 3.1.3 to 9.3.4 are supported, with some exceptions
    • For more details, go to the "Jailbreaking" wiki page

Supported OS versions/distros

Supported architectures: x86_64, arm64

  • macOS 10.11 and newer
    • macOS 10.12 and newer recommended for full support
    • macOS 14.6 and newer recommended for Apple Silicon Macs
  • Ubuntu 22.04 and newer, and Ubuntu-based distros like Linux Mint
  • Fedora 40 and newer, Fedora Atomic (Silverblue, Kinoite, etc.) also supported
  • Debian 12 Bookworm and newer, Sid, and Debian-based distros
  • Arch Linux and Arch-based distros like EndeavourOS
  • Less tested distros: openSUSE Tumbleweed, Gentoo, Void Linux

Tools and other stuff used

Description
An all-in-one tool to restore/downgrade, save SHSH blobs, and jailbreak legacy iOS devices
Readme GPL-3.0 340 MiB
Languages
Shell 100%