Mirrors/Legacy-iOS-Kit
2
0
Fork 0
mirror of https://github.com/LukeZGD/Legacy-iOS-Kit.git synced 2025-10-02 20:09:46 +02:00
Code Issues Packages Projects Releases Wiki Activity
Page: SSH Ramdisk
Pages
Activation App Management Baseband Update Data Management Hacktivation Home How to Use Install IPA AppSync Jailbreaking with Legacy iOS Kit Jailbreaking Misc Utilities OTA Downgrade Pwning Using Another iOS Device Restore 32 bit Device Restore A7 Device to iOS 10.3.3 Restore Downgrade Restore iPhone 4 and older SSH Ramdisk Save SHSH blobs from Cydia servers Saving SHSH blobs Saving onboard SHSH blobs of current iOS version Sideloading on Linux TrollStore Troubleshooting checkm8 a5 futurerestore powdersn0w
Clone
20
SSH Ramdisk
LukeeGD edited this page 2025-07-19 11:33:42 +08:00
Table of Contents

Legacy iOS Kit has an option to create and boot an SSH Ramdisk for all supported devices.

Notes

  • Supported devices: All 32-bit devices, most 64-bit (A7/A8/A9/A10) devices
  • If you have a checkm8 device that supports iOS 16 or newer, it is not supported here. Use SSHRD_Script instead. You may also need to use it on macOS if your device is on iOS 16 and newer.
  • 32-bit devices on iOS 9 or newer may/will have issues on trying to mount and/or access the data partition (/mnt2 or /dev/disk0s1s2)
  • 64-bit devices on lower than iOS 11.3 will have issues writing to the data partition

Usage

  • Run Legacy iOS Kit: ./restore.sh
  • Go to Useful Utilities -> SSH Ramdisk
  • Select option/s needed in SSH Ramdisk Menu

Options

  • Connect to SSH - Connect to the device via SSH
  • Dump Blobs - Dump onboard SHSH blobs of the device. 64-bit devices only.
  • Install TrollStore - Install TrollStore to Tips app of the device. 64-bit devices on iOS 14/15 ONLY.
  • Dump Baseband/Activation - Dump baseband and activation record files from the device. 32-bit devices only.
  • Disable/Enable Exploit - Send commands to set NVRAM variables for powdersn0w devices.
  • Get iOS Version - Get the current iOS version of the device.
  • Clear NVRAM - Send command to clear NVRAM of the device.
  • Update DateTime - Update the date and time of the device to current.
  • Reboot Device - Reboot the device and exit script.
  • Exit - Exit the script.
    • SSH ramdisk is still booted on the device and can be connected to manually or by running ./restore.sh --sshrd-menu

Accessing Data

For accessing data, note the following:

  • Host: sftp://127.0.0.1 | User: root (or mobile) | Password: alpine | Port: 6414
  • Use tools like Filezilla to access the files. Make sure to also run the needed mount command first
  • Mount command for 32-bit devices: mount.sh
  • Mount commands for 64-bit devices:
    • Mount filesystems with this command (for iOS 11.3 and newer): mount_filesystems
    • Mount root filesystem with this command (for iOS 10.3.x and newer): mount_apfs /dev/disk0s1s1 /mnt1
    • Mount root filesystem with this command (for iOS 10.2.1 and older): mount_hfs /dev/disk0s1s1 /mnt1
    • Warning: Mounting and/or modifying data partition (/dev/disk0s1s2 /mnt2) might not work for 64-bit devices.
    • Warning: Mount filesystems at your own risk: there is a chance of bootlooping on 64-bit devices on older than iOS 11.3.
    • Warning: The mount_filesystems command will likely have issues on tether downgraded devices.

Scroll Back to Top