18
SSH Ramdisk
LukeeGD edited this page 2025-06-20 07:14:49 +08:00

Legacy iOS Kit has an option to create and boot an SSH Ramdisk for all supported devices.

Supported devices

  • iPhone 2G, 3G, 3GS, 4, 4S, 5, 5C
  • iPhone 5S, 6, 6S, SE 2016, 7 (including Plus variants)
  • iPad 1, 2, 3, 4, mini 1
  • iPad mini 2, mini 3, mini 4, Air 1, Air 2
  • iPod touch 1, 2, 3, 4, 5, 6, 7

Notes

  • If you have a checkm8 device that supports iOS 16 or newer, it is not supported here. Use SSHRD_Script instead. You may also need to use it on macOS if your device is on iOS 16 and newer.
  • 32-bit devices on iOS 9 or newer may/will have issues on trying to mount and/or access the data partition (/mnt2 or /dev/disk0s1s2)
  • 64-bit devices on lower than iOS 11.3 will have issues writing to the data partition

Usage

  • Run Legacy iOS Kit: ./restore.sh
  • Go to Useful Utilities -> SSH Ramdisk
  • Select option/s needed in SSH Ramdisk Menu

Options

  • Connect to SSH - Connect to the device via SSH
  • Dump Blobs - Dump onboard SHSH blobs of the device. 64-bit devices only.
  • Install TrollStore - Install TrollStore to Tips app of the device. 64-bit devices on iOS 14/15 ONLY.
  • Dump Baseband/Activation - Dump baseband and activation record files from the device. 32-bit devices only.
  • Disable/Enable Exploit - Send commands to set NVRAM variables for powdersn0w devices.
  • Get iOS Version - Get the current iOS version of the device.
  • Clear NVRAM - Send command to clear NVRAM of the device.
  • Update DateTime - Update the date and time of the device to current.
  • Reboot Device - Reboot the device and exit script.
  • Exit - Exit the script.
    • SSH ramdisk is still booted on the device and can be connected to manually or by running ./restore.sh --sshrd-menu

Accessing Data

For accessing data, note the following:

  • Host: sftp://127.0.0.1 | User: root (or mobile) | Password: alpine | Port: 6414
  • Use tools like Filezilla to access the files. Make sure to also run the needed mount command first
  • Mount command for 32-bit devices: mount.sh
  • Mount commands for 64-bit devices:
    • Mount filesystems with this command (for iOS 11.3 and newer): mount_filesystems
    • Mount root filesystem with this command (for iOS 10.3.x/11.x): mount_apfs /dev/disk0s1s1 /mnt1
    • Mount root filesystem with this command (for iOS 10.2.1 and older): mount_hfs /dev/disk0s1s1 /mnt1
    • Warning: Mounting and/or modifying data partition (/dev/disk0s1s2 /mnt2) might not work for 64-bit devices.
    • Warning: Mount filesystems at your own risk: there is a chance of bootlooping on 64-bit devices on older than iOS 11.3.