iOS-OTA-Downgrader

(formerly 32bit-OTA-Downgrader)

Downgrade/restore iOS devices to signed OTA firmwares

• Please see the "Other notes" section below to serve as answers for FAQs

Supported devices:

• iOS 10.3.3: All A7 devices are supported except iPad4,6 and all iPad mini 3 models
• iOS 8.4.1: All A5, A5X, A6, and A6X devices are supported except iPhone5,3 and 5,4 (iPhone 5C)
• iOS 6.1.3: Only iPhone 4S and iPad 2 devices are supported except iPad2,4 (iPad 2 Rev A)

Prerequisites:

• A supported device:
  • A 32-bit iOS device (any version, jailbreak needed)
  • An A7 device (any version, jailbreak not needed)
• An IPSW for the version you want to downgrade to (the script can also download it for you)
• A macOS or a 64-bit Linux install/live USB
  • See supported Linux distros below
  • A live USB can be easily created with tools like balenaEtcher or Rufus)
• All 32-bit users must install OpenSSH
  • A6/A6X iOS 10 users must install Dropbear (deb) as well
• For 32-bit users using Pangu, install the latest Pangu 7.1.x Untether (deb) or latest Pangu 8.0-8.1.x Untether (deb)

1. Download or git clone this repo
2. Open Terminal and cd to the directory where the script is located (example: cd /home/user/iOS-OTA-Downgrader)
3. Run chmod +x restore.sh

How to use:

1. Plug in your iOS device
2. Run ./restore.sh
3. Select option to be used
4. Follow instructions

Other notes:

• You do NOT need blobs to use this, the script will get them for you
• If the restore process does not work for you, try switching USB ports and/or cables
• This script will verify the IPSW SHA1sum before restoring
• For A7 devices:
  • Do not use USB-C to lightning cables as this can prevent a successful restore
  • checkm8 ipwndfu is unfortunately pretty unreliable, you may have to try multiple times
  • If the script can't find your device in pwnREC mode or gets stuck, you may have to start over
• For 32-bit devices:
  • This script does not modify the IPSW
  • To devices with baseband, this script will restore your device with the latest baseband
  • This script has a workaround for the activation error on devices downgrading from iOS 10
  • This script can also be used to just enter kDFU mode for all supported devices
  • This script can also restore your device to other iOS versions with provided SHSH blobs
  • This script can work on virtual machines, but I won't provide support for them

Supported OS versions/distros:

• Ubuntu 18.04 and Bionic-based distros
• Ubuntu 20.04 and Focal-based distros like Linux Mint 20
• Arch Linux and Arch-based distros like Manjaro
• Fedora 32
• macOS 10.13 High Sierra, 10.14 Mojave, 10.15 Catalina

Tools and other stuff used by this script:

• cURL
• bspatch
• igetnonce
• ipwndfu
• libimobiledevice
• imobiledevice-net for macOS
• python2
• tsschecker
• futurerestore 152 (32-bit)
• futurerestore 249 (Linux) (A7)
• futurerestore 245 (macOS)
• kloader
• kloader5 for iOS 5
• kloader_hgsp for iOS 10
• partial-zip
• 32-bit iBSS patches are from OdysseusOTA, OdysseusOTA2, alitek12, gjest
• A7 iBSS and iBEC patches are from MatthewPierson