32bit-OTA-Downgrader

• This script can be used to downgrade almost any supported 32-bit device to iOS 8.4.1
• iPhone 4S and some iPad 2 devices also have the option to downgrade to iOS 6.1.3
• This script will also restore your device to the latest baseband (N/A to devices with no baseband)
• This script has a workaround for the activation error on iOS 10 devices
• This can also be used to enter pwnDFU mode for all supported devices
• For iPhone 5C, 8.4.1 OTA DOWNGRADING IS NOT SUPPORTED! Supports entering pwnDFU mode ONLY
• You do NOT need blobs to use this, the script will get them for you

Prerequisites:

• A jailbroken A5/A5X/A6/A6X iOS device on any iOS version (Latest jailbreaks: Phoenix for 9.3.5/9.3.6, h3lix for 10.3.3/10.3.4)
• iOS 8.4.1 or 6.1.3 IPSW for your device
• A macOS or Linux install/live USB (Tested on Xenial (16.04), Bionic (18.04), and Arch-based distros) (a live USB can be easily created with tools like balenaEtcher or Rufus) (macOS tested on 10.13 and 10.14)
• iOS 7 Pangu users: install the latest Pangu 7.1.x Untether (deb)
• iOS 8 Pangu users: install the latest Pangu 8.0-8.1.x Untether (deb)
• The computer and device must be on the same network (for SSH)

How to use:

1. iOS 9 and below: Install OpenSSH, iOS 10: Install MTerminal
2. Download or git clone this repo
3. Open Terminal, cd to the directory where the scripts are located (example: cd /home/user/32bit-OTA-Downgrader)
4. Run chmod +x restore.sh
5. Run ./restore.sh
6. Select option to be used (8.4.1/6.1.3 downgrade or just enter pwnDFU mode)
7. Follow instructions

Some other notes:

• This script uses the futurerestore method for downgrading, NOT the Odysseus method nor modifying SystemVersion.plist
• This script will use a vanilla/unmodified IPSW to restore
• This script only uses iBSS patches from bundles for entering pwnDFU mode, NOT for creating a custom IPSW
• For VirtualBox users, add a New USB Filter in the VM settings for the iOS device to autoconnect to the VM
• For VMWare users, enable Autoconnect USB Devices

Tools used by this script:

• cURL

• bsdiff (bspatch)

• ideviceinfo

• ifuse

• tsschecker

• futurerestore

• xpwntool

• kloader

• kloader5 (iOS 5)

• kloader_hgsp (iOS 10)

• partialZipBrowser (used on buildmanifestsaver.sh)

• iBSS patches are from OdysseusOTA, OdysseusOTA2, alitek12, gjest

Supported devices (iOS 8.4.1 downgrade):

• All A5, A5X, A6, and A6X devices except the 5C are supported

iPhone 4S

• iPhone4,1

iPhone 5

• iPhone5,1
• iPhone5,2

iPad 2

• iPad2,1
• iPad2,2
• iPad2,3
• iPad2,4

iPad 3

• iPad3,1
• iPad3,2
• iPad3,3

iPad 4

• iPad3,4
• iPad3,5
• iPad3,6

iPad mini 1

• iPad2,5
• iPad2,6
• iPad2,7

iPod touch 5

• iPod5,1

Supported devices (iOS 6.1.3 downgrade):

iPhone 4S

• iPhone4,1

iPad 2

• iPad2,1
• iPad2,2
• iPad2,3