Mirrors/Legacy-iOS-Kit
2
0
Fork 0
mirror of https://github.com/LukeZGD/Legacy-iOS-Kit.git synced 2024-12-03 13:24:18 +01:00
Code Issues Packages Projects Releases Wiki Activity
An all-in-one tool to restore/downgrade, save SHSH blobs, and jailbreak legacy iOS devices
236 Commits 1 Branch 1 Tag 358 MiB
Shell 100%
d870f5d8ca
Go to file
LukeZGD d870f5d8ca Add more messages in the SSH and pwnDFU part 
- Lets the user know their options/steps for a successful SSH connection
- Also add message regarding pwnDFU
2021-03-05 12:49:07 +08:00
resources Update futurerestore.sh 2021-03-05 11:27:37 +08:00
.gitattributes Initial commit 2019-11-19 19:53:00 +08:00
.gitignore More fixes and remove stuff not needed 2020-09-17 11:04:34 +08:00
README.md Add more messages in the SSH and pwnDFU part 2021-03-05 12:49:07 +08:00
restore.sh Add more messages in the SSH and pwnDFU part 2021-03-05 12:49:07 +08:00

README.md

iOS-OTA-Downgrader

(formerly 32bit-OTA-Downgrader)

Downgrade/restore and jailbreak iOS devices to signed OTA firmwares

  • Linux and macOS are supported by this downgrade script/tool
    • Windows users can create a Linux live USB (see Requirements)
  • iOS 8.4.1 and 6.1.3 downgrades have the option to jailbreak the install
  • You do NOT need blobs to use this, the script will get them for you
  • This script can also restore your device to other iOS versions that you have SHSH blobs for (32-bit devices only, listed under Supported devices)
  • Please read the "Other notes" section for frequent questions and troubleshooting

Supported devices:

  • You can identify your device here
  • iPhone 5C and iPad mini 3 devices are NOT supported (OTA versions are not signed)
  • iPhone 5C can still be restored to versions that you have SHSH blobs for
Target Version Supported Devices
iOS 10.3.3 A7 devices:
iPhone 5S
iPad Air 1
iPad mini 2 (except iPad4,6)
iOS 8.4.1 32-bit devices:
iPhone 4S
iPhone 5
iPad 2, iPad 3, iPad 4
iPod 5th gen
iOS 6.1.3 iPhone 4S
iPad 2 (except iPad2,4)

Requirements:

  • A supported device in any iOS version (listed above):
    • A 32-bit device (jailbreak needed)
    • An A7 device (jailbreak not needed)
  • An IPSW for the version you want to downgrade to
  • A 64-bit Linux install/live USB or a supported macOS version
    • See supported OS versions and Linux distros below
    • A Linux live USB can be easily created with tools like balenaEtcher or Rufus
  • Users with 32-bit devices must install OpenSSH
    • Users in iOS 10 (A6/A6X) must also install Dropbear (Cydia repo)
For Pangu 32-bit users:
  • For 32-bit users using Pangu, install the latest untether for your iOS version here

How to use:

  1. Download iOS-OTA-Downgrader here and extract the zip archive
  2. Plug in your iOS device
  3. Open a Terminal window
  4. cd to where the zip archive is extracted, and run ./restore.sh
    • You can also drag restore.sh to the Terminal window and press ENTER
  5. Select option to be used
  6. Follow instructions

Supported OS versions/distros:

Other notes:

  • If something in the process does not work for you, try switching USB ports and/or cables (also try using a USB 2.0 port)
  • This script will verify the IPSW SHA1 before restoring
  • For users having issues related to missing libraries or tools, re-install dependencies with ./restore.sh Install
    • Alternatively, delete the libimobiledevice or libirecovery folder in resources then run the script again
  • For A7 devices:
    • Do not use USB-C to lightning cables as this can prevent a successful restore
    • checkm8 ipwndfu is unfortunately pretty unreliable, you may have to try multiple times (for Linux users, also try in a live USB)
    • If the script can't find your device in pwnREC mode or gets stuck, you may have to start over
    • Use an Intel PC/Mac as entering pwnDFU (checkm8) may be a lot more unreliable on AMD devices
    • Other than the above, unfortunately there's not much else I can do to help regarding entering pwnDFU mode.
  • For 32-bit devices:
    • To devices with baseband, this script will restore your device with the latest baseband (except when jailbreak is enabled, and on iPhone5,1 as there are reported issues)
    • This script can also be used to just enter kDFU mode for all supported devices
    • As alternatives to kloader/kDFU, checkm8 A5 or ipwndfu can also be used in DFU advanced menu
      • To enter DFU advanced menu, put your iOS device in DFU mode before running the script
    • This script can work on virtual machines, but I won't provide support for them
    • If you want to use manually saved blobs for 6.1.3/8.4.1, create a folder named saved, then within it create another folder named after your ProductType (example: iPad2,1). You can then put your blob inside that folder.
      • The naming should be: (ECID in Decimal)_(ProductType)_(Version)-(BuildVer).shsh(2)
      • Example: 123456789012_iPad2,1_8.4.1_12H321.shsh
  • For jailbreak option:
    • If you have problems with Cydia, remove the ultrasn0w repo and close Cydia using the app switcher, then try opening Cydia again
    • If you can't find Cydia in your home screen, try accessing Cydia through Safari with cydia:// and install "Jailbreak App Icons Fix" package (Cydia repo)
  • For jailbreak option (on iOS 8.4.1 downgrades only):
    • Stashing is already enabled and nosuid is removed from fstab, so no need to install "Stashing for #etasonJB" package
    • To fix LaunchDaemons not loading on startup, install "Infigo" package (Cydia repo)
    • Warning: If your device bootloops with EtasonJB, it may not work with the jailbreak option as well! (I think this applies to some but not all 8942/8945 users) If this happens, bootloop protection will trigger and you won't be able to open Cydia

Tools and other stuff used by this script: