6 futurerestore

LukeeGD edited this page 2024-12-09 23:06:52 +08:00

Table of Contents

• Requirements
• Usage
• Notes
• Setting nonce generator manually

futurerestore is a tool that allows for restoring 64-bit iOS devices with provided SHSH blobs. Originally made by tihmstar, it has since been forked and is being maintained in futurerestore nightly.

Legacy iOS Kit has features that can serve it as a futurerestore helper of sorts to make usage of the tool much easier. With this, it also serves as an easier and more updated alternative to FutureRestore GUI.

Before using futurerestore, you will need SHSH blobs for your device, and the target iOS version must be compatible with the latest SEP/Baseband/Cryptex. See SEP/BB Compatibility Chart for iOS versions that can be restored to.

Requirements

• A7/A8/A9/A10/A11 device (checkm8 arm64 devices)
• SHSH blobs for target iOS version
• IPSW file for target iOS version

Usage

1. Plug in your device and start the script by running restore.sh
2. When the main menu shows up, input 1 and press Enter/Return to select Restore/Downgrade.
3. Select "Other (Use SHSH Blobs)"
   • See notes below for the "Set Nonce Only" option
4. Select the target IPSW file and SHSH blobs, then select Start Restore.
5. When prompted, select your options and follow the given instructions to put the device in recovery/pwnDFU mode.
   • See notes below about the "Pwned Restore Option”
6. After the restore process, your device will be successfully downgraded/restored to your selected target version.

Notes

• See Notes section in the Restore/Downgrade page regarding version compatibility
• One option that will be prompted after selecting Start Restore is the "Pwned Restore Option." (--use-pwndfu) This option is recommended to be enabled at all times, especially for OTA/onboard/factory blobs where this is required to be enabled.
  • For A7 devices, this option is disabled by default mainly because of difficulties pwning A7 devices (especially on Linux). If this is the case for you, it is recommended to set nonce manually for these devices instead.
• There is also an option to "Set Nonce Only" meaning the device's nonce generator will be set to the selected SHSH blob generator, making the device ready for restoring even without the "Pwned Restore Option" enabled.
• There may be instances where blob validation needs to be skipped. This can be enabled by going to Other Utilities -> Enable Flags -> Enable skip-blob flag, or running Legacy iOS Kit restore.sh with --skip-blob
• In Legacy iOS Kit, the builds of futurerestore currently come from my fork with minimal changes such as disabled update check, fixing the Segmentation Fault that can be encountered when it checks for updates.
• The build of futurerestore used also depend on the target iOS version. For iOS 15 and lower, the main branch is used. The dev branch is only used when restoring to an iOS 16 or newer version.

Setting nonce generator manually

• There is also the option to set the nonce generator of your device manually. You will need to do this if you want to restore with the "Pwned Restore Option" disabled.
• For iOS 10 and older: https://github.com/tihmstar/futurerestore#how-to-use
• For iOS 11 and newer: https://github.com/futurerestore/futurerestore/#using-dimentio
• Using "Set Nonce Only" is also an option as already mentioned in notes above

Scroll Back to Top