mirror of
https://github.com/LukeZGD/Legacy-iOS-Kit.git
synced 2025-02-21 10:42:29 +01:00

- some fixes for classification and futurerestore checks of A9/A10 checkm8 iPads - use pangu again on 7.1.x for now. lyncis has an issue with appsync atm. not sure if there are other issues.. its easy to switch to lyncis later anyway when it gets updated, even on devices already jailbroken with pangu
13 KiB
13 KiB
Legacy iOS Kit
- (formerly iOS-OTA-Downgrader)
- An all-in-one tool to restore/downgrade, save SHSH blobs, and jailbreak legacy iOS devices
- Supported on Linux and macOS
- Read the "How to Use" wiki page for instructions
- Read the "Troubleshooting" wiki page for tips, frequent questions, and troubleshooting
Features
- Legacy iOS Kit supports all 32-bit iOS devices, and some 64-bit (A7/A8/A9/A10/A11) devices
- Devices that received iOS 16 and newer will only have limited functionality (such as sideload on Linux etc.)
- For S5L8900 devices (iPhone 2G, 3G, touch 1), some features like SSH ramdisk are not available
- Restore to signed OTA versions (iOS 8.4.1 and/or 6.1.3) on A5/A6 devices
- Restore to iOS 10.3.3 (signed OTA version) on supported A7 devices
- Restore supported devices to unsigned versions with SHSH blobs
- Restore to unsigned iOS versions with iOS 7 blobs (powdersn0w)
- Restore supported 32-bit devices to unsigned iOS versions "without" blobs
- Includes downgrading iPhone 2G, 3G, 3GS, iPhone 4 GSM and CDMA, iPod touch 1, 2, 3, iPad 1
- "without" is in quotes because powdersn0w uses iOS 5/7 blobs for touch 3 and A4 devices, but it is signed for everyone to use
- Other devices however are true blobless
- Tethered downgrades/restores to supported iOS versions for A5(X)/A6(X) and some other 32-bit devices
- Jailbreak all 32-bit iOS devices on nearly any iOS version
- Available on iOS versions 3.0 to 9.3.4 with some small exceptions
- Hacktivation for iPhone 2G, 3G, 3GS, 4 GSM (activate without valid SIM card)
- FourThree Utility - Dualboot iOS 4.3.x for the iPad 2
- Boot SSH Ramdisk for supported 32-bit and 64-bit devices
- Save Onboard SHSH blobs for supported 32-bit and 64-bit devices
- Install IPA files for supported devices with AppSync Unified installed
- Sideload IPA files for supported devices on Linux
- Save SHSH blobs from Cydia servers for 32-bit devices
- Enter pwned iBSS/kDFU mode for supported 32-bit devices
- Save onboard SHSH blobs for jailbroken 64-bit devices (deverser)
- Install TrollStore using SSH Ramdisk for supported 64-bit devices on iOS 14/15
- Clear NVRAM for 32-bit devices
- Device activation using ideviceactivation (especially useful for iOS 4 and lower)
- The latest baseband will be flashed for certain A5/A6 devices (for iPhone 4S, 5, 5C, iPad 4, mini 1)
- For more info on baseband, go to Baseband Update wiki page
- Dumping and stitching baseband to IPSW (requires
--disable-bbupdate
) - Dumping and stitching activation records to IPSW (requires
--activation-records
) - Data Management - Backup and restore, mount device, erase all content and settings
- Misc Utilities - Pair device, export data and battery info, shutdown/restart device, and more
Supported devices
- Identify your device here
- iPhone 5C and iPad mini 3 devices are NOT supported by OTA downgrades
- These devices still support restoring to other iOS versions with SHSH blobs, see below
- See the table below for OTA downgrading support:
Target Version | Supported Devices |
---|---|
iOS 10.3.3 | A7 devices: |
iPhone 5S | |
iPad Air 1 | |
iPad mini 2 (except iPad4,6) | |
iOS 8.4.1 | 32-bit devices: |
iPhone 4S | |
iPhone 5 | |
iPad 2, iPad 3, iPad 4 | |
iPad mini 1 | |
iPod touch 5 | |
iOS 6.1.3 | iPhone 4S |
iPad 2 (except iPad2,4) |
- Restoring with SHSH blobs, jailbreaking, and using SSH ramdisks are supported on the following devices:
- iPhone 2G, 3G, iPod touch 1 (SSH ramdisks not supported for these)
- iPhone 3GS, 4, 4S, 5, 5C
- iPad 1, 2, 3, 4, mini 1
- iPod touch 2, 3, 4, 5
- Restoring with SHSH blobs and using SSH Ramdisks are also supported on some 64-bit devices:
- See SEP/BB Compatibility Chart for iOS versions that can be restored to
- iPhone 5S, 6, 6S, SE 2016, 7 (including Plus variants)
- iPad Air 1, 2
- iPad mini 2, 3, 4
- iPod touch 6, 7
- Restoring with iOS 16.6.x SHSH blobs using futurerestore is also supported on these devices (SSH ramdisks not supported):
- iPhone 8, X
- iPad 5
- iPad Pro 9.7/12.9 1st gen
- Restoring with powdersn0w is supported on the following devices and target version range:
- iPhone 4 GSM - iOS 4.0 to 7.1.1
- iPhone 4 CDMA - iOS 5.0 to 7.1.1 (4.2.x has issues)
- iPhone 4S, 5, 5C, iPad 2 Rev A, iPod touch 5 - iOS 5.0 to 9.3.5
- iPad 1 - iOS 3.2 to 5.1
- iPod touch 3 - iOS 4.0 to 5.1 (3.1.x has issues)
- Using powdersn0w requires iOS 7.1.x blobs for your device
- No blob requirement for iPhone 4, iPad 1, iPod touch 3 (7.1.2 and 5.1.1 are signed)
- For iPhone 5 and 5C, both 7.0.x and 7.1.x blobs can be used
- Restoring tethered to any version is supported on the following devices:
- iPhone 4 (3,2 and 3,3), 4S, 5, 5C
- iPad 2, 3, 4, mini 1
- iPod touch 3, 4, 5
- Restoring to other unsigned versions without blobs is supported on the following devices and target version range:
- iPhone 2G, 3G, 3GS, iPod touch 1, touch 2 - All versions are supported
- Lowest downgradable version is 2.0. Going to 1.x does not work
- For jailbreaking support, see below
- Jailbreaking for 32-bit devices and versions support:
- iPhone 2G and touch 1 - 3.1.3 only
- iPhone 3G and touch 2 - 4.2.1, 4.1, and 3.1.3
- iPhone 3GS - All versions are supported (all release versions from 3.0 to 6.1.6)
- Other devices - All versions from 3.1.3 to 9.3.4 are supported, with some exceptions
- For more details, go to the "Jailbreaking" wiki page
Supported OS versions/distros
Supported architectures: x86_64, arm64 (armhf deprecated)
- macOS 10.11 and newer (10.12 and newer recommended for full support)
- Ubuntu 22.04 and newer, and Ubuntu-based distros like Linux Mint
- Fedora 37 and newer, Fedora Atomic (Silverblue, Kinoite, etc.) also supported
- Debian 12 Bookworm and newer, Sid, and Debian-based distros
- Arch Linux and Arch-based distros like EndeavourOS
- Less tested distros: openSUSE Tumbleweed, Gentoo, Void Linux
Tools and other stuff used
- curl
- bspatch
- powdersn0w_pub - dora2ios; LukeZGD fork
- ipwndfu - axi0mX, Linus Henze, synackuk; LukeZGD fork
- ipwnder_lite - dora2ios (used on macOS); LukeZGD fork
- iPwnder32 - dora2ios (old version with libusb used on Linux)
- gaster - 0x7ff; verygenericname/Nathan fork
- daibutsuCFW - dora2ios; LukeZGD fork
- daibutsu - dora/kok3shidoll, Clarity
- libimobiledevice - libimobiledevice
- libirecovery - libimobiledevice
- libideviceactivation - libimobiledevice
- ideviceinstaller - libimobiledevice
- ifuse - libimobiledevice
- static-cross-openssh - scp and ssh binaries (used on Linux only)
- usbmuxd2 - tihmstar; LukeZGD fork (used on Linux only)
- anisette-server from Provision - Dadoum (used for sideloading on Linux)
- AltServer-Linux - NyaMisty (used for sideloading on Linux)
- Sideloader - Dadoum (used for sideloading on Linux)
- tsschecker - tihmstar; 1Conan fork (v413)
- futurerestore - tihmstar
- LukeZGD fork used for restoring 32-bit devices
- LukeeGD fork used for restoring A7 devices
- futurerestore nightly used for restoring A8/A9/A10/A11 devices
- iBoot32Patcher - dora2ios fork
- idevicerestore - libimobiledevice; LukeZGD fork
- kloader from Odysseus
- kloader from axi0mX (used on iOS 4/5 only)
- kloader for iOS 5
- kloader_hgsp from nyan_satan (used on h3lix only)
- jq
- partialZipBrowser
- zenity; macOS build
- 32-bit bundles from OdysseusOTA, OdysseusOTA2, alitek12, gjest (modified bundles for daibutsuCFW)
- A7 patches from MatthewPierson
- iPad 2 iOS 4.3.x bundles from selfisht, Ralph0045
- datautils0 - comex (used for iPad 2 4.3.x kernel diffs)
- sshpass
- Bootstrap tar from SpiritNET
- Cydia HTTPatch for 3.1.3 downgrades/jailbreaks
- EverPwnage
- Lyncis
- Pangu
- p0sixspwn
- evasi0n7
- evasi0n
- g1lbertJB
- UntetherHomeDepot
- greenpois0n
- Some patches from PwnageTool, sn0wbreeze, redsn0w
- Many patches for the 3GS are made using patchers by Merculous (including Bundle-Creation)
- SSH Ramdisk tars from Ralph0045's SSH-Ramdisk-Maker-and-Loader and msftguy's ssh-rd
- 64-bit SSH Ramdisk stuff is based on Nathan's SSHRD_Script (iOS 12+), and exploit3dguy's iram tar from iarchive.app (iOS 8)