@olive compass https://shsh.host
#futurerestore-help
1 messages · Page 12 of 1
@olive compass https://shsh.host
@celest basalt Thank you! i got it.
I'm trying to restore my iPhone 4S on windows using shsh blobs from ios 6.1.3 and a corresponding ipsw, but i get error 31.
(please ping me if you have any fix)
haha
@modern pecan you can with vieux
I have an iPad 2019 and saved my blobs frewuently since ios 13.5
My Question: Can i restore to every ios version with my saved blobs?
only if the baseband is compatible
@steep horizon you can restore to 13.5-13.7 only if it's a Wi-Fi (no cellular) iPad
otherwise can't go lower than 14.0 even with blobs
my ipad is only wifi that means i can restore to every saved (blobs) firmware?!!
yep, SEP is compatible for 13.4 and higher atm
I need fmi off for ios 12.2.1
Waiting for the day someone forks tihmstar’s FR for windows :( rip s0uthwes
What happens if i FR my iphone from 14 down to 13.7
Oh
I thought baseband would break
But it would still like be usable
So I’m stuck on 13.6.1
F
Might as well update to 14 i mean checkra1n will support A11 eventually right?
Also what’s the difference between A10 and A11? KPP/KTRR?
Cuz on the website it says “A11 devices will be addressed in a future statement”
You bootloop
@storm apex not bootloop, but recovery loop.. kinda the same i guess
@cinder trail if you value your jailbreak you'll ignore ios 14 and save blobs (if possible)

Cuz on the website it says “A11 devices will be addressed in a future statement”
@cinder trail don’t update if you really want Checkra1n
i know this is a dumb question but is it possible to spoof ECID on a device, save onboard blobs on that device, and then use those blobs to downgrade a device with the ECID?
aight
Hey folks, ive done several futur-restores in the past but i'm stuck right now and fear it might be a baseband problem but i'm here to find that out.
So i have a Iphone 6s (A9) on 14.0.1 which i want to get rid off. and lower back to 13.7 which i have saved blobs for.
I set the nonce and add the sep/base/apticket/buildmanifest and it all runs smoothly till halfway the install, error pops up and shows 'Failed with errorcode=-11". When i scroll up and page through the debuginfo i notice alot of http errors, seems like he can't connect to apple with SSL protocol thus bricking my install.. Could anyone shed some light?
i'm also wondering if the nonce can be set in iboot2 since i have acces to that in recovery mode
iOS 14 baseband is incompatible with 13, but that’s all I can really tell you because I’m not familiar with futurerestore
Alright, guess i'll have to be happy with checkrain on 14.0.1, i'm glad that still works. shame of the apps integrity checks. Thanks 🙂
Does futurerestore work with iphone 11 if I have saved blobs from systeminfo?
I may have to do a restore and was wondering if it's possible to go back to ios 13.5
yeah even if your apnonce still happened to be set correctly, the baseband is incompatible so not possible
FYI: ```futurerestore needs to be updated for iOS 14.
Since 14.0.1, Apple has implemented a new step to the restore process that may result with issues upon downgrading back to 14.0 (even with valid blobs). ```
ok, well, I guess I'll just enjoy iOS 14 then
and here we thought 14.0.1 was just a bugfix
well, maybe it doesn't patch jailbreak exploits, but there's more to it then
I am on 13.5 and jailbroken with iphone 11 pro max; i already saved my blobs upto 14.0.1 but i have no clue how to future restore once the jailbreak is released for ios 14. any info is appriciated
i’m on a13 and i have 13.7 and 14.0.1 blobs should i save any other versions
@olive compass check pins
@somber nymph you can only save for signed versions
thank you!
Currently I don’t need to use my blobs cause I’m on iOS 14.0.1
But If I need them how to use the zip file to downgrade?
FutureRestore\
I am on 13.5 and jailbroken with iphone 11 pro max; i already saved my blobs upto 14.0.1 but i have no clue how to future restore once the jailbreak is released for ios 14. any info is appriciated
@olive compass You won't need to futurerestore, and you can't anyways. You'll need to update to 14.0.1 after next stable is released but before it is unsigned (typically a week).
i’m on a13 and i have 13.7 and 14.0.1 blobs should i save any other versions
@somber nymph You don't have a choice, and you can't use futurerestore anyways
But If I need them how to use the zip file to downgrade?
@celest basalt You shouldn't have a zip file, rather a .ipsw. As of now, FutureRestore is in a non-working state for iOS 13 so you'll need to use iTunes to update/downgrade.
Anyone know how to fix error 2?
reading signing ticket C:\Users\Acer\Desktop\futurerestore_win64_v245\6831687087587366_iPad7,11_j171ap_13.7-17H35_15400076bc4c35a7c8caefdcae5bda69c140a11bce870548f0862aac28c194cc.shsh2 is done
[Error] ERROR: Unable to discover device model
[Error] Fail code=-2
Failed with errorcode=-2```
@full osprey probably falls under error 8 so follow that
Bet
@tidal garnet will it ever be usable in the future incase i want to upgrade to 14.0.1 if a jailbreak comes out?
so I have some blobs, For iOS 12.4 can I downgrade my iPhone SE from 14.0.1 to 12.4?
1st gen. 2016
@celest basalt no, SEP and baseband are incompatible
Dang
How about 13.5(.1)to 12.4?
darn, I'll stick to 13 then
Whatever 13 I'm on, probably 13.5 or 13.5.1
Not sure why it’s saving as a zip tho
i promise i tried to research this but i cant find a clear answer: Can I restore my iPhone X from 13.3 to 13.7 ? I have blobs.
not anymore
Hi, there is 2 futurerestore for mac, which one i use for wifi ipad pro 2nd gen
@opal iron use tihmstar’s
Alright
if you have non cellular ipad you can @opal iron
I get what=SEP firmware doesn't signed
screenshot?
Yes, for your nonce to be set
—exit-recovery
with libimobiledevice?
are you trying to restore from 13.7 back to 13.7 @opal iron
13.6 to 13.7
Your blob is also from 13.7
yeah
you'd need to do 14 to 13.7, bu since the baseband is there.. it's not possible
unless your ipad pro is wifi only
it's wifi
okay, so use the 14.0.1 sep
but updating from 13.6 to 13.7 isn't really a huge leap tbh
it's just COVID updates
oh
./futurerestore --exit-recovery
Version: 38b168002bca318c91068fc194abd36e2d54f155 - 180
Libipatcher Version: 18cf8be6788f7e7ad96dac805724b8db7afcb9b0 - 69
Odysseus for 32-bit support: yes
Odysseus for 64-bit support: yes
Exiting to recovery mode
INFO: device serial number is DLXWX1NYHND6
[INFO] 64-bit device detected
futurerestore init done
futurerestore: failed with exception:
[exception]:
what=Could not connect to device in recovery mode.
code=10813457
line=165
file=futurerestore.cpp
commit count=29:
commit sha =2994651a10d8176a298b31e7706b4b6af97975d1:```
still
also.. use this futurerestore https://github.com/s0uthwest/futurerestore/releases/download/245/futurerestore_macOS_v245.zip
180 is pretty old
k, hold on
it's out now
so i should stay on 13.6 or move on to 13.7?
or wait for ios 14 JB
ok 😄
with checkra1n?
isn’t tihmstar 180 actually newer than s0uthwest 245?
that’s what it seems like from github release dates
well, you'd use checkm8 to set the nonce
then you can get to 13.5
@celest basalt 180 was updated around jan/feb
so performance wise, .5 is better?
245 is June 2019
180 is Jan 2020
performance wise.. possibly.. but it's better than semi-tethered checkra1n imo
tihm needs to fix futurerestore
my iphone is on 13.5 too, with checkra1n
idevicerestore works tho
How he can make a restore to 13.5 ?
We just have 14.0.1 SEP
what device?
I mean the IpadPro 2Gen
if you have blobs, you can restore to 13.5
But how because we need the SEP from 13.7 or not and not from 14.0.1
Who even said that
cuz other saying that
You need a signed sep
That is the only requirement
A signed sep
Needs to be compat with the version you are restoring to
@fringe owl the link above provides you with details of the SEP and its compatibility
@vivid nova thanks 
wifi is fine, but not cellular right?
that's right
Who said cellular isn’t fine
14 bb isn’t compatible with 13 but you can still use 13 bb because of blobs
@vivid nova
how can you use the 13 bb if it isn't signed?
ok, but that still doesn't answer how if tss needs a signed baseband
I tested with an SE, 13.7 blobs, and 14.0.1 SEP: first with 13.7 baseband and 13.7 baseband manifest using this command futurerestore -t iPhone8,4_n69ap_13.7.shsh2 -s 14.0.1-sep-firmware.n69.RELEASE.im4p -m 14.0.1-BuildManifest.plist -b 13.7-Mav10-9.71.01.Release.bbfw -p 13.7-BuildManifest.plist iPhone_4.0_64bit_13.7_17H35_Restore.ipsw
It did not work. Here's the error:
[TSSC] opening 13.7-BuildManifest.plist
[TSSR] User specified to request only a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
TSS server returned: STATUS=94&MESSAGE=This device isn't eligible for the requested build.
ERROR: TSS request failed (status=94, message=This device isn't eligible for the requested build.)
Sending TSS request attempt 1... [Error] baseband firmware isn't signed
Failed with errorcode=-3
I also tried restoring with 13.7 baseband and 14.0.1 baseband manifest using this command: futurerestore -t iPhone8,4_n69ap_13.7.shsh2 -s 14.0.1-sep-firmware.n69.RELEASE.im4p -m 14.0.1-BuildManifest.plist -b 13.7-Mav10-9.71.01.Release.bbfw -p 14.0.1-BuildManifest.plist iPhone_4.0_64bit_13.7_17H35_Restore.ipsw
The restoring proceeded, but flashing the baseband failed. Here's the error:
Updating baseband (19)
About to send BasebandData...
sending request without baseband nonce
Sending Baseband TSS request...
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received Baseband SHSH blobs
Sending BasebandData now...
Done sending BasebandData
Updating Baseband in progress...
ERROR: device didn't accept BasebandData
ERROR: Unable to successfully restore device
Updating baseband (19)
Cleaning up...
DONE
Done: restoring succeeded.
My device is now in recovery and I have to restore to 14.0.1
In conclusion, no, you cannot use iOS 13 baseband and restoring to 13.x really is not possible right now, even with blobs
yeh you would have to manually dump itunes saved baseband blobs at the time
they are separate
pretty sure you can flash 13 bb with jailbreak
How is that done? I can still jailbreak with checkra1n so I can try
To save iTunes blobs, when you start to restore through itunes/finder on mac /tmp/PersonalizedBundle_21AE920E-19B7-410C-9563-60AB8502AAF6 with a random uuid is generated, wait for device to enter recovery then you copy the dir out. Then unplug your device and stop the restore.
you will then have every tss ticket possible
for that version
ohh thanks, I'll keep that in mind for future blobs/tickets
if a version stops being signed and i have blobs can i not upgrade anymore?
unsigned
Being unsigned means that you can no longer up or downgrade to that version unless you previously saved blobs for it and are on a jailbreakable version. If you are already on that iOS version, nothing changes for you. You can also no longer save blobs for that version.
Saved by snowball#6826 | 8 | 9/9/2020
oh i’m chilling
ig i gotta wait for a 14.0.1 jailbreak and futurerestore to update
?
great, thanks for help
@night harbor also, you're using the wrong baseband file
Your SE (2016) should be using the 10.00.02 and not 9.71.01.
This is primarily why it didn't work. However, upon using the correct baseband, you'll still go through the restore, but your device will end up in a recovery loop.
Unfortunately due to iOS 14 baseband incompatibility with iOS 13 you have to restore to 13 with the baseband of the version you are restoring to.
@storm apex yes luckily I saved them
Also if you can somehow get 14 to work you can prob flash 13s with jb
This is the current best way
Just pinned
That saves baseband blobs
But flashing after is without blobs prob
Was a thing back in 10.3.3
Will look into it when we have sep downgrades for all devices
@storm apex you can save on device baseband blobs is you are on 13 rn
/usr/local/standalone/firmware/Baseband/DEVICESPECIFICBASEBANDNAME/bbticket.der
People who have throwaway devices, looking for baseband compatability testing for 14/13
im looking into getting a spare/test phone, but prob wont have it for another few weeks
I've got one @valid adder
@vivid nova have you already tested 14.0.1 baseband on 13.6/13.7
yes, but not with the baseband blobs
does restore fail
restore succeeds but device recovery loops
can you checkra1n and set verbose mode to see if it gives any info
i will once checkra1n supports it
no-go
what happend
FDR issue
mind sending verbose(-d) log
Installing DeviceTree (61)
ERROR: FDR 0x7fe537e39540 receiving proxy payload failed: Operation now in progress
WARNING: FDR 0x7fe537e39540 received unknown packet 0x317 of size 2
WARNING: FDR 0x7fe537e39540 received unknown packet 0x1b03 of size 2```
loop tho?
what about 180
180 is the fdr
*183
i love idevicerestore
why
better than itunes
itunes will save baseband blobs tho
so does tss1conan
then what's this <key>BBTicket</key>
oh cool
😉
fixed the pin
so we can use 13 bb
which is nice
@storm apex ignore my stupidity lol
180 - same FDR issue
my blobs also have BBTicket, does futurerestore not use them?
it does, however the ticket won't work if futurerestore keeps giving erroors
[==================================================] 100.0%
Done sending filesystem
Verifying restore (14)
[==================================================] 100.0%
Checking filesystems (15)
Creating Protected Volume (67)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Checking filesystems (15)
Checking filesystems (15)
Checking filesystems (15)
Checking filesystems (15)
Mounting filesystems (16)
Mounting filesystems (16)
Mounting filesystems (16)
About to send KernelCache...
Extracting kernelcache.release.iphone9...
Personalizing IMG4 component KernelCache...
Sending KernelCache now...
Done sending KernelCache
Installing kernelcache (27)
About to send DeviceTree...
Extracting DeviceTree.d101ap.im4p...
Personalizing IMG4 component DeviceTree...
Sending DeviceTree now...
Done sending DeviceTree
Installing DeviceTree (61)
ERROR: FDR 0x7fe537e39540 receiving proxy payload failed: Operation now in progress
WARNING: FDR 0x7fe537e39540 received unknown packet 0x317 of size 2
WARNING: FDR 0x7fe537e39540 received unknown packet 0x1b03 of size 2
WARNING: FDR 0x7fe537e39540 received unknown packet 0x6c of size 2```
nah, it just doesn't continue
wack
when exiting, it leaves a recovery loop
here, i'll try -d
see where it stops
I wonder if this is part of the DFU mitigation...
hi i dont have a Jailbreak phone but i have save the shsh blobs how to restore ,
?
Hello, before I start using futurerestore I have read the guide but need confirmation. I want to restore an iPhone SE (1st G) to its same firmware version, namely iOS 12.4.
So, is that enough:
futurestore -t [Myblob] --latest-sep --latest baseband [IPSW 12.4]
Or should I add the sep and the baseband? And what firmware?
For the blobSHSH2, I have one in the noapnonce folder but when I search for the 16 character, I have this 0x111 ... Is this good because watching tutorials does not seem to be the right info? And looking at an old nonce generator, it's not that either but with newer ones, it's the same 16 characcter
Sorry for the long explanation and my English. Thanks for your help coming.
can't even go to 14.0 at this point...
So there is nothing I can do ? Thx
@valid patio if you are on 12.4 right now and it still boots you can use [[Succession]], otherwise you can only restore to 14.0.1 in iTunes
Installing DeviceTree (61)
ERROR: FDR 0x7fbf01e1fa80 receiving proxy payload failed: Operation now in progress
ERROR: Unable to receive message from FDR 0x7fbf01e1fa80 (-2). 0/2 bytes
ERROR: FDR 0x7fbf01e1fa00 receiving proxy payload failed: Operation now in progress
ERROR: Unable to receive message from FDR 0x7fbf01e1fa00 (-2). 0/2 bytes
ERROR: FDR 0x7fbf01e1fa00 receiving proxy payload failed: Operation now in progress
is this error fatal
well, it was
futurerestore -t 137blob.shsh2 --latest-sep --no-baseband iPad_Pro_HFR_13.7_17H35_Restore.ipsw
tried on both v182 from cryptic and v180 from futurerestore's repo, did anyone actually succeed in futurerestoring back to 13.7 by using 14's sep?
I think jtv did
@vivid nova sorry for ping, need your help
With?
I'm testing on a hackintosh, I can try on a real Mac if you did indeed succeed going back to 13.7
I've gotten back to 13.4 using 14s sep on the Apple TV. This works coinciding with iOS, but the difficulty was the nonce needs to be set via checkm8 or futurerestore will error on the ticket verification. I didn't use --latest anything, but manually specifying the sep works fine
I've tried like 3 or 4 times already on v180(latest) v182 from Cryptic and v245 that doesn't work on 13
hm, I'll try manually specifying sep then
what futurerestore version did you use?
And you'll need to input the buildman.plist twice with the -m and -p args. I used 180 and 245
Hackintosh/vms were always iffy seeing as the USB would disconnect and reconnect, but futurerestore would time out... It works, just a tad difficult
I've used futurerestore flawlessly before on this machine, so I believe it to not be the issue
v245 has an expired cert, I codesigned it with my own and it fails because 14's ipsw's are bigger than 4gb and it doesn't have updated libzip or something
You must be using Catalina
I'm on Mojave

both my machines are
I'm using HS, never once had that expired cert issue
Try running hs on a vm with stock 245
I'll test manually specifying sep first, I don't believe the OS version is the issue
I blame the security if anything..
same fdr
I think Apple snuck something in that futurerestore doesn't know how to process
Because everything checks out at the beginning.. If it was a sep issue, it would fail near the tss read
AMFDRCreateError: AMFDRDataLocalCopy: Failed to read data: code=4
AMFDRCreateError: AMFDRDataCopy: seal:00008011-0014385904F3883A get data failed - foundData is NULL: code=10
AMFDRCreateError: AMFDRSealingMapPopulateSealingManifest: sealingManifest is NULL: code=10
AMFDRCryptoCreateSignedCsr: adding apManifestTruncated to CSR
I've had it fail on the device tree
it fails me there
seems to be a request to https://gg.apple.com/ca/authorize failing
But running debug, the fdr starts when it sends the file system
_AMSupportHttpURLSessionSendSyncNoRetry: HTTP request failed with error Error Domain=NSURLErrorDomain Code=-1001 "The request timed out." UserInfo={NSUnderlyingError=0x1090093d0 {Error Domain=kCFErrorDomainCFNetwork Code=-1001 "(null)" UserInfo={_kCFStreamErrorCodeKey=-2102, _kCFStreamErrorDomainKey=4}}, NSErrorFailingURLStringKey=https://gg.apple.com/ca/authorize, NSErrorFailingURLKey=https://gg.apple.com/ca/authorize, _kCFStreamErrorDomainKey=4, _kCFStreamErrorCodeKey=-2102, NSLocalizedDescription=The request timed out.}
AMSupportHttpURLSessionSendSync: HTTP request failed (status=16)
AMSupportHttpURLSessionSendSync: HTTP request failed, httpResponseData is NULL
_AMFDRHttpMessageSendSync: HTTP request failed (status=16)
_AMFDRHttpMessageSendSync: HTTP request failed, httpResponseDict is NULL
_AMFDRHttpMessageSendSync: HTTP server returned unexpected FDR response code -1
Hi all I’m on a xs max with 13.5 uncover jailbreak, I know I can save blobs and potentially future restore but I’ve never done that process and have no idea what I need to do or how to do it. Can someone DM me and explain the process?
blobs
How to save blobs: FOR A11 AND LOWER ONLY (A12 = 2018 iPhones/iPads) 1)Go to https://tsssaver.1conan.com/ 2)To get ECID: Go in iTunes and click serial number twice 3)To get board config/device model: Get BMSSM from the app store on your iOS device Enter all that into tsssaver and wait. It may take a few minutes. RECOMMENDED: Download&save the resulting zip and upload it to Google Drive or similar as backups.
Saved by snowball#6826 | 27 | 9/2/2020
a12
Saved by snowball#6826 | 18 | 9/8/2020
will futurerestore get windows 10 compatiblity?
@ripe pollen already has it
On the latest version?
yes
does "noapnonce" mean anything
i saved my blobs through systeminfo so if i zip them and send them to my computer will it work
ok
thank
sheet
so futurerestore broke on a12?
o
alright thank
so i set my nonce to shsh blobs nonce then restore
?
i saved my blobs through systeminfo so if i zip them and send them to my computer will it work
@tulip yew it also saves to shsh.host btw
it will show the generator on shsh.host
that’s what you need to set
@tulip yew what version are you trying to restore to
Joe
@tulip yew yes, but what version are you trying to restore to
im not trying to restore yet, if there's a 13.7 jailbreak i'd go to that
f
unless it's a Wi-Fi iPad which has no baseband
@celest basalt @storm apex so i technically could restore my iPad 7 to 13.7
bur i forgot u mentioned something about some nonce
futurerestore
Futurerestore guides: https://gist.github.com/TheRealKeto/7c5191c7495fb750e79f8ce0f0cdcdaa https://docs.google.com/document/d/1WHuwuvnkcEUCwaDuck2dy-MR7q4em38uL4_4Utx2QZ8/
Saved by snowball#6826 | 5 | 8/28/2020
video guides are for pussies
I was able to do this 4 years ago fine I was 15/16 4 years ago
so i cant..
"unconfirmed for the latest"
@tulip yew or can I?
it doesnt say it does NOT work, only uncondirmed
so maybe i can try?
risk it for the biscuit
yes
im on 13.6 rn anyways
im just corious
abt 14
it looks cool but i heared the performance is not that good
especially me being on A10
thats why i may would restore back
im tryna understand first how i prepare everything first
why does it say j171ap in the blob and j172ap on the website?
which board do i have now lol?
how did u save blob
shsh.host
please use tsssaver as well
either directly over the website or over system info
im confused now
i remember trying to save blobs with tsssaver but i somehow couldnt check them
now i see that and i dont have "noappnonce"
so i checked that file name with those on the guide and the first one matches
but that doesnt make any sense
my iPad is A10
not A9 or lower
ill just use the shsh.host blob then
if i were to go to 13.6 and my blobs are that number, do i set my generator to that number too?
i have confuse
oh no i sent my udid
im checkra1n
theres this repo i gotta add
and then i gotta do this terminal command right?
@storm apex i alr prepared everything (manifest, ipsw, 14.0.1 sep, 13.7 blobs) besides that nonce
i hope my blobs work tho
-b —no-baseband riht?
for me?
cuz its wifi only
and for the nonce i need this tweak right
@storm apex yea in my blob the generator is 0x (16x1)
aight
ig everything should work then if i want to restore
im lucky that im wifi only
And the reason it says "unconfirmed for the latest" is because 14.1 has yet to be tested
ohhh
Change ipsw to zip
on windows
Or use WinZip
Wdym you're broke?
isnt winzip paid
WinZip is free
And the reason it says "unconfirmed for the latest" is because 14.1 has yet to be tested
@vivid nova well if i get it to work then we can say the SEP works then 😂
inused
win rar
and some other programm
oh sweet
Not necessarily.. 14.1 is still considered beta.. So sep dont register
so to extract files for bbfw/sep/manifest i use the latest ipsw?
shit
Works with Apple tv

nice
Not necessarily.. 14.1 is still considered beta.. So sep dont register
@vivid nova wait so I cant use 14.0.1?
14.1
So.. What's that got to do with 14.0.1
@valid patio if you are on 12.4 right now and it still boots you can use [[Succession]], otherwise you can only restore to 14.0.1 in iTunes
@celest basalt Thanks 👍🏼
yet another reason Discord needs to roll out inline replies already ^
So I can futurerestore WiFi iPad/iPod to 13.7 using 14 sep?
Can I downgrade from iOS 14 Gm to iOS 13.7 with futurerestore
@celest basalt not possible unless it's a Wi-Fi iPad or an iPod
Is there a way to set nonce on iOS 14 or do I just wait for checkra1n? I have an A10 Wi-Fi iPad
Found this, https://github.com/MatthewPierson/checkm8-nonce-setter, but it only works on macOS unfortunately :/
That can also work on Linux. Just need to know your hardware model (example: iPad7,5) and check in the checkm8-nonce-setter files if your model is compatible. Install python2 and compile libirecovery (the README in the repo has instructions), then follow the commands near the end of the script. Replace python with sudo python2 and ./irecovery with sudo irecovery. Here's the set of commands as an example:
cd checkm8-nonce-setter
git clone https://github.com/LinusHenze/ipwndfu_public.git
cd ipwndfu_public
sudo python2 ipwndfu -p
# if your device fails to enter pwned DFU, hard-reset and try again
cd ../files
sudo irecovery -f iBSS.iPad7,5.img4
sudo irecovery -f iBEC.iPad7,5.img4
# if your device has backlight you may proceed; if not, hard-reset and try again
sudo irecovery -c "setenv com.apple.System.boot-nonce 0x1111111111111111"
sudo irecovery -c "saveenv"
sudo irecovery -c "setenv auto-boot false"
sudo irecovery -c "saveenv"
sudo irecovery -c "reset"
After this the device will boot in recovery. To exit recovery use sudo irecovery -n
It seems that ipwndfu has a really low success rate on Linux
been trying for hours lmao
which variable do I change? I'm pretty new to ipwndfu
just updated it and still give off
*** checkm8 exploit by axi0mX ***
*** modified version by Linus Henze ***
*** s5l8965x support by Matthew Pierson ***
Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:18 ECID:000D62A56CF20094 IBFL:3C SRTG:[iBoot-2696.0.0.1.33]
ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. Exiting.
tried the original ipwndfu version and it works first try, but it doesn't have the signature check remover
ah, I see :/
we are looking into that
can you upgrade from 14.0 to 14.0.1 on linux?
hello?
You’re not smart enough to do this @vivid robin

if thats not possible how bout ios 14.0.1 to 14.0?
yes
yes
great. will try 14.0 instead.

You can set nonces without beeing jailbroken?
i think so
Checkm8 nonce setter
since futurerestore wont continue to flash system if nonce were not set
d
can you upgrade from 14.0 to 14.0.1 on linux?
@frozen lion
@frozen lion yes with idevicerestore
ok thanks
@storm apex can I „update“ my iPad with FutureRestore too?
13.6 to 13.7 iPad 7,11
yea ofc
im checkra1n
yea
its the wifi only one
aight ig then
@storm apex uh since 14.1 released, do I have to use 14.1´s SEP now?
@valid adder you´re smart too, you know that for sure aswell
How can I get APNonce for A13 unjailbroken device?
freeze nonce with with noncestatistics which also will grab the nonce
worked on a9 at least I haven't tried it since
@valid adder hmm so noncestatistics will stop the nonce from changing every time you reboot to recovery?
I’ll test it later
that would make more sense because I didn’t understand how you would use the blobs if nonce changes as soon as you reboot to recovery
it froze tho
this is known
I even unjailbroken restored my 6s
to unsigned
because I saved the blob using nonce
yeah I tried without noncestatistics
Pastebin
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
noncestats is what freezes it
uhh
idk whats wrong
error code -2
its like the right device model thing, idk whats wrong in that
lol
Read your rags
Args
You specified baseband and baseband manifest even you you also said no baseband
hey i7 (a10) user here, restore from 14.0.0 to 13.5 (blob for that version) cannot be done atm? will be possible eventually?
@storm apex Thanks for info, I cannot jailbreak cause I am on 13.5.1
thank u Cryptic and AaronIsAWeeb, lookin forward to see any update regarding that
Is SEP compatible on iOS 14
./futurerestore -t blob.shsh2 -s sep.im4p -m BuildManifest.plist --no-baseband -d targetOS.ipsw```
@storm apex @valid adder yea i saw that then too and did it like capt told me before
same error
think you are installing windows store itunes or some shit
lmao nah
i deleted that asap when some genius said here „windows itunes is shit“
is there maybe a Linux Futurerestore
or something similar
@pseudo stump it works on Linux, but you might have to compile it manually
which is a bit painful with all the dependencies and it never wanted to work fully for me
I just used iRestore (comes with s0uthwest futurerestore v245) on a Win7 VM last time when I needed to restore from 13.3 to 13.5 (that was before iOS 14)
@celest basalt if you're on A12+ you can find it without iTunes, otherwise no
because on A12+ the ECID is just the end of the UDID but on A11- it's completely different
@celest basalt A9 6s:( thanks for the info
How do I downgrade if i have blobs
Cannot
Right now it’s iOS 13.6
can i use --latest-sep and --latest-baseband if im restoring to iOS 14.0?
if not which sep and baseband should i use
k thanks
im restoring to 14.0 in case of a future jailbreak
idrc if it fails because i can just go to 14.0.1
k nevermind its forcing me to
alright
is there any way i can download the sep and baseband without downloading the entire IPSW?
oh thanks
idk if this will help though because the download speed is at ~50 kb/s
idk if thats on my end or apple's
oh wait a minute
when i connect my phone to my computer it uses it as a hotspot
no wonder im getting shit download speeds lmao
i'm getting the error "Unable to place device into recovery mode from Normal mode" even though my device is in Recovery
zero context
ill send a pastebin one sec
oh
mojave 10.14.6
iphone 7 ios 13.5 trying to restore to ios 14.0 using 14.0.1 SEP/BB
ive tried running as root as well
make sure chrome or any other app isn't claiming the usbmuxd interface
check usbmuxd log in console.app
how would i do that?
ill just kill every other app
still not having any luck
im gonna try on windows
k
wont that reset the nonce or something?
yeah
my phone shows the upgrading progress bar half way with the apple logo above it
'tis because the baseband is incompatible
it is?
yup
i thought 14.0.1 BB works with 14.0
oh.. you're not going to 13.5?
are you on mac or windows?
rn windows but i can use mac
if you can, use idevicerestore on mac
that'll get you on the latest
but so far, your datas gone
yeah, futurerestore is still wip
oh i see
tihmstar's futurerestore supports updating??
i use it. iTunes sucks
oh ok
i am going to run out of disk space before this restore finishes, would that cause any issues?
nvm i have like half a gig to spare
ill delete some useless stuff
empty your trash
just did a few mins ago
120 gb.. oof
@primal wolf I mean 14.1 still has no security patches compared to 14.0
yeah i don’t think there’s much of a difference
but it’s kinda weird how they released 14.0.1
i feel like they patched something
well yeah, some important bug fixes
the good ol general system stability improvement and security fixes
Hi! Is it possible to use futurerestore to update an iPhone XS stuck in apple logo bootloop?
no
@shadow ore thanks I will try it tonight
@dire heron wrong channel
okay tahnks
@vivid nova what are itunes blobs
blobs saved by itunes
are they the same as tss blobs
somewhat
can they be used for restores
yes
so what the fuck are they needed for
wdym?
in the event that tss is down and you cant retrieve them online... you can save 'em locally
what if ur on a12
same thing
wont nonce entangement be an issue
no, because itunes uses your devices identifier
so what your saying is i can save a12 blobs without a jailbreak
yes, but its risky
hows it risky
because the process to do so is a bit finicky and you might end up accidentally restoring/updating
when do you have to do it?
when do you have to do it? when the progress bar is half way through?
if you're jailbroken and you have the generator, you can save blobs
so do you save itunes blobs before the restore or during it
before
I don't know for sure if it works with the latest vers of itunes.. Apple may have patched it
and the latest is needed for 14 itunes blobs
Hi ! Anyone can help me with futurerestore ? I try to update an iPhone locked in Apple logo bootloop ... can anyone help me with the command ? I tried ./futurerestore -u ipsw.ipsw —latest-baseband —latest-sep ... doesn’t work ..
Error code =2
@slender carbon what version
if you are on ios 13 the baseband doesnt work so the restore will fail
@slender carbon if you're bootlooped, use itunes
or.. if your device is checkra1n compatible, you may use the method in #common-issues
@cinder trail yes I’m on iOS 13
@vivid nova it doesn’t work with iTunes .. iTunes say incompatible files ...
what device is it?
iPhone XS
@vivid nova but i can enter in recovery or DFU mode that’s why I would like to use futurerestore
Already tried ... same problem
are you on mac?
Same in recovery mode ...
Yes macOS Mojave 10.14 maybe I will update to Catalina ? ? And use the latest iTunes version ?
I connect it to my Mac and after vol.up vol.down, hold power vol down 5seconds, release power but not vol.down
wrong
iTunes detect it in dfu mode
what's on the screen when you place it in DFU?
well, that's the improper way
Ah ?
So it will be the recovery mode not the DFU ?
i'd use idevicerestore
Yes but I can’t because of the bootloop
yes. you can
I will try to update with it .. thanks !
Don’t work ... maybe anyone can help me with the command I need to use ? I tried with ./futurerestore -u ipsw.ipsw —latest-sep —latest-baseband but i have the error code=-2 ...
@storm apex thanks for your answer .. I try to update an iPhone XS in Apple logo bootloop it isn’t jailbroken and I have not the blobs for this devise so .. Do I need to specify the build manifest, sep and baseband ?
The iOS target is signed by Apple at this moment ..
@vivid nova yes but I try to install it mon Mac I don’t know really how to do it I’m browsing ..
I can help you with installing it
@storm apex because I can’t restore this device with iTunes ... it say that the downloaded file isn’t compatible with the device ... (Apple logo bootloop)
@vivid nova will be great !!
so did you download the github package?
okay so extract it and cd to it
Yes I’m on
type in ./autogen.sh
No package ‘libirecovery-1.0’ found
inb4 futurerestore-master noob
@storm apex I can’t CD ../ idevice restore
@slender carbon please don't download as zip
@valid adder I use terminal and git clone what is the problem ? Excuse me I just start on Mac os and all this stuff... this is why I need help ..
earlier you didn't
@valid adder Yes you’re right .. well I will try to never do that again thanks for it
git clone --recursive https://github.com/tihmstar/libirecovery cd ./libirecovery ./autogen.sh make install cd ../idevicerestore ./autogen.sh make install
@storm apex ok and now what the next can you help me ?
git clone --recursive https://github.com/tihmstar/libirecovery cd ./libirecovery ./autogen.sh make install cd ../idevicerestore ./autogen.sh make install
@storm apex exactly that !
@storm apex I can’t seems idevicerestore isn’t correctly installed..:
screenshot?
@slender carbon download the correct ipsw for your device
then just idevicerestore -e /path/to/ipsw
ok so idevicerestore extracted the ipsw file.. now it is waiting for the device ( was previously in DFU) the device restarted in recovery mode and nothing is hapening ... still waiting still in recovery mode
ERROR: Unable to connect to device in restore mode
ERROR: Unable to open device in restore mode
ERROR: Unable to restore device
Yes i tried in DFU (black screen) and recovery mode (cable and a computer on iphone screen)
@valid adder sorry i'm noob but where can i find it ?
How can I future restore from 13.7 to 14.1 on an iPhone X
The reason I want to do it this way is to clear all jailbreak files but keep my data on my phone
Just use itunes
@weary merlin Mentioning of piracy is not allowed
@storm apex ok, if my iphone 7plus 13.7 jailbroken but cant open cydia or any tweak, any way to restore ?
Yes, remove your piracy
@storm apex more clearly, sir?
Itunes restore
@storm apex but it will take up 13.7 to 14! 😅 And 14 not really for jb on A10
The irony of the name not matching the pfp...
If you didn’t pirate, your phone wouldn’t have shit itself
@storm apex sorry? I want to re-jailbreak after install bad tweak but now cant re-jailbreak with checkrain
I dont know really what your mean
You can try using the booploop fix in #common-issues
So if you want to restore now, you can either use iTunes or get Checkra1n to jailbreak to use succession
@storm apex ok, i said above cant re-jailbreak with checkrain, right
And if restorr with itunes, ios 13.7 will be upgrade to 14.1, and cant jb now
and why not
@storm apex i don't know, if i know why, i think not here to request sbd help, right man
@weary merlin what's the issue? Bootloop?
@weary merlin what's the issue? Bootloop?
@vivid nova checkrain hang on booting step, then error -20
Iphone restart and nothing else
Try with safe mode
@vivid nova i tried, replace usb cable, change port, change checkrain 0.11 to 0.10.2, safe mode, bootrain, usb rain,..
Okay, then try the above method
Or #common-issues message
@vivid nova i tried but no lucky
Any error?
Why are you using sudo?
Omg, i add -s then it working!!!!
Good
Many thank @vivid nova . You’re saved my time 😋
So it seems you didn't do safe mode 😉
So it seems you didn't do safe mode 😉
@vivid nova i dont know but before in GUI mode, i checked safe mode option many time
Yeah, at least now it's working
Even in CLI too but not working untill tonight
So remove your bad tweaks and you should be alright
You might have to Restore System in the checkra1n app
You might have to Restore System in the checkra1n app
@vivid nova yes, i think now i will run succession
yes
yes
@vivid nova thank, i trying again
👍
9/10 is because your USB connection got interrupted @slender carbon
i think i foud the problem.
I try to install usbmuxd but i have 2 errors:
Perhaps you should add the directory containing `udev.pc'
to the PKG_CONFIG_PATH environment variable
No package 'udev' found```and
```Package systemd was not found in the pkg-config search path.
Perhaps you should add the directory containing `systemd.pc'
to the PKG_CONFIG_PATH environment variable
No package 'systemd' found```
Maybe you know where can i find them ?
Baseband file comes from firmware ipsw you wnat to restore to, correct?
and sep too?
Ight ty
@storm apex buildmanifest comes from firmware you want to restore too correct?
@storm apex Apparently im mising an agrument. Here's the commands I am using.
-t -s -b -m
Which one am I missing
Nvm I forgot -p
It failed after mounting the file system halfway through the restore
@storm apex
Ohhh forgot it doesn't work with IOS 14 yet....
I tried to FR from iOS 14.0.1 to 13.7 on my iPad 6 (A10), did all the steps the guide mentioned and got an error code -11
Here's the entire log https://pastebin.com/raw/n8wtUdzW
@urban sun futurerestore does not work for iOS 14 yet.
??
The pin literally said downgrading back to 14.0 and never mentioned anything about 13.7
oh just realised
doesnt it work on a Wifi only device
Yes
So future restore wont work without a jailbreak right?
im on iOS 14.1
Got all ios 13 blops
Last time i tried to use it when i was on ios 13.7 but it said my device is unknown
Does future restore even work with ipad 7th generation?
Ok
Ye
Hello people, I want to factory reset my iphone 6s on 14.0.1 (checkra1n), I tried succession but it just hangs at the attaching screen. I tried the "fix" on the github but same error
is there anyway to factory reset without having to update ios?
What seems to be the problem that you'd need to factory reset @frosty forum
Also, in the event of restoring.. you can update to 14.1 and still use checkra1n
I need to active the iphone to access the gsm
well, if checkra1n work with 14.1 I'll just restore via itunes then
im on an iphone 8 13.5
i guess if the #freethesandbox jb for ios 13.7 comes out, i wont be able upgrade cuz the iOS 14 baseband is not compatible with iOS 13.7?
i saved all blobs iOS 13.5.1 and on
You're fine
You're fine
@vivid nova wdym? Are you saying currently signed iOS 14 baseband and SEP is compatible with iOS 13.7?
I heard SEP is, but baseband isnt
correct
@storm apex Hmm aww ok
Guess I'm stuck on iOS 13.5. not too big of a deal I guess. I don't think 13.7 has many more features besides covid exposure
I just hope that apple didn't set the minimum iOS version of the SDKs to be 13.6+ or 13.7+ so I don't get the latest versions of apps ._.
Ok truthfully I don't know what I'm talking about haha
You got me there
But then how does
Later apps only support later versions of iOS?
I thought certain swift apis and stuff have minimum iOS versions
And that's why developers drop support for older iOS versions in newer updates
Ok I see
Later apps only support later versions of iOS?
So specifically what is happening here? Is it cuz devs wanna use new swift apis/functions/libs and some of such swift apis require new versions of iOS?
I’m on u0 jb iPhone 6s iOS 13.5 . Can someone help me restore to factory state without updating
so does anyone know if 14.2 sep is compatible with 14.1
would it be easier to just update to 14.1 now and not worry about futurerestore
Ok this might be asked already but
Consider A12Z. If i have blobs (verified good on verify.shsh.host) for 14.1, could i use futurerestore to update to 14.1 in the future after 14.1 is no longer signed?
wait
since macs r transitioning to apple silicon
will it be possible to downgrade macos versions using "macos blobs"?
macOS isn’t signed afaik
Unless something changed on silicon
You can downgrade all you want it’s just very messy
not yet
ARM Macs already have mandatory codesigning
So it wouldn’t surprise me if they use an iBoot similar to their mobile devices that’s locked down to shit
14.2 SEP is compatible with 13.4. However; the baseband is not.
i believe the bb is compat, but until FR is fixed... that's a no-go
Which futurerestore I should use to downgrade my iPad?
Futurerestore is compatible with iPad Pro 11 (2020)?
@celest basalt try this https://github.com/tihmstar/futurerestore/releases
@sacred cave yes I think
is anyone maintaining s0uthwest's futurerestore now?
So if tomorrow come out a jailbreak for iOS 14.0 and I have the shsh for that version can I update from iOS 13.5?
fr don't work on 14
But I need to erase the iPad or can I use the -u option? (For update the firmware without erasing)
Fr what does it means?
@sacred cave from what I heard the -u option may be buggy/unsafe
i tried the -u option once it works fine
does futurerestore break face id if not done correctly?
what is the correct way to do it?
thank you 🙏
from what to what?
if you're on 13.x, stay
you'll only need to update if the device is stupidly unstable or you just want a fresh start with iOS 14
maybe in the future. Save. Your. Blobs.
is saving blobs with system info fine?
yes
is there a baseband/SEP compatibility chart? I remember there used to be one a while ago
sep
How to check if the latest SEP is compatible with a specified iOS version: https://joshblah555.github.io/JoshTV/SEPCheckr.html
Saved by Capt Inc#4247 | 5 | 11/4/2020
it says unconfirmed; is this expected?
i know that iOS 13.5 is incompatible for those who need basebands, but was hoping to find a website i could check on ever so often so i know whether i should update to iOS 14.1, should a newer version of iOS 14.x (or perhaps 15.x) get released, which has an incompatible SEP/baseband to 14.1
Futurerestore has been updated and is now compatible with iOS/iPadOS 14. This means with valid blobs, you may restore from 14.2 to 14.x or from anything to 14.x. SAVE YOUR BLOBS!!!
I will also be releasing futurerestore versions for High Sierra, Mojave and Catalina
How to compile futurerestore 187 on linux:
-
Fufill requirements stated in https://github.com/marijuanARM/futurerestore
-
Add
#include <linux/limits.h>
toexternal/idevicerestore/src/ipsw.c
andexternal/idevicerestore/src/restore.c -
Add
#define _POSIX_C_SOURCE 200112L
toexternal/idevicerestore/socket.c -
cd external/tsschecker/external
git clone https://github.com/tihmstar/jssy```
5. ```
cd ../../..
./autogen.sh
make
make install
How to compile future restore on Mac
bruh...
how to on windows? 😅 i never understood compiling
Could anyone please help me with saving blobs on iphone xr ios 14.1?? I really cant find anything to help
how exactly do i get the apnonce that will work with my device? according to tsssaver i need to specify one, and from googling around it's different per device, it seems i need a jailbreak to get it? how can i save blobs without a jailbreak? according to the first pin in this channel i need to enter whatever nonce i set in the blobs when restoring, so can i just put anything there, and then i have to specify that to futurerestore if/when i restore to the blobs in the future? from what i understand you can set the nonce manually if you're jailbroken, is that the way to restore?
Have you ever saved blobs @marsh sequoia ?
@faint pewter in order to get the ApNonces for saving blobs you need to know the generator. You can set the generator only with jailbreak. After you have the ApNonce from a known generator (usually 0x1111111111111111) you don’t need anymore the jailbreak
so i need a jailbreak to save blobs now? if i can set the generator with a jailbreak, why can't i use that generator for the blob, and then in the future, after 14.1 stops being signed and i have a jailbreak on ios 13, set that same generator?
or is there something i'm missing?
For a12 device and later ApNonce is required when you save the blobs otherwise the blobs aren’t valid
i know this, but how can i get that without jailbreaking? or is that not possible? if it's based off the generator and you can set it with a jailbreak, why can't i use just 0x1111111111111111 now, and then in the future set that generator on my device before restoring?
@sacred cave no i havent:/
I can confirm you that if you don’t ever saves blobs for your device and you aren’t in a jailbreakable iOS version you can’t save blobs at the moment. When an A12 device (or later) is going to update the device send the apnonce and other information to Apple but generator remains unknown. Generator changes on every reboot, so is impossible to set that (or find a generator from ApNonce) without jailbrek. @faint pewter
You can’t @marsh sequoia
completely impossible to save without jailbreaking? fair enough, can you tell me why i can't use just any generator for the blob, and then set that later before restoring to the blob?
if i need the generator to save working blobs, and i can set that generator with a jailbreak, why can't i just use a generator that my device does not have, but then in the future use that generator to make that blob work?
i believe i asked jakeashacks once on twitter something about this and he said that blobs need to be saved per-device, there can't be a single works-for-everyone blob, and if this idea does work, then a single works-for-everyone blob would be able to exist - from logic i guess this idea doesn't work, but why?
I’m sure that you can’t save blobs without jailbreak (if you don’t ever save it). For creating a valid blob you need 3 things (for a12 and later):
1)ECID
2)Generator
3) ApNonce corresponded to Generator
So if you normally update the generator create the ApNonce and with Ecid, they are sent to Apple that create the blob. When generator changes also ApNonce change so, for example, the ApNonce created with 0x1111111111111111 generator isn’t valid for other generator. This is the reason why you can’t simply choose the generator without knowing the corresponding ApNonce
@faint pewter
For a11 and before you can save blobs without know the ApNonce
not entirely sure i understand?
if you normally update, the generator creates the ApNonce with ecid
i guess this is where the problem happens, since the generator is tied to the ecid through my device?
The ecid never changes but is different from every device. The generator changes at every reboot. The generator isn’t related to the ecid
You can save blobs if you're not jailbroken but you need to be jailbroken at least once to get apnonce thing
And to use the blob you need to be jailbroken to set you nonce back to the one you used when creating the blob
And to use the blob you need to be jailbroken to set you nonce back to the one you used when creating the blob
that's understandable, the only thing i wonder is, if you need to set the nonce back to the one you used earlier anyways, why couldn't you just set it to one that wasn't even extracted from your device?
Then the blob wouldn't work, Apple implemented extra security measures for a12+
For a11 and earlier all you need is your ecid
then the blob wouldn't work
i get this, but why? where is the difference between extracting the apnonce from your device, and just making one up, then setting the device back to that nonce before restoring? where does this stop working?
The ApNonce isn’t create randomly (not completely) and a valid ApNonce (that changes from every device, changes from every generator) must be present when the blob is created and must corresponding to the generator that is currently present on device (because a valid blob contains generator too)
You can set only the generator, not the ApNonce (obviously with jailbreak)
can only the actual device generate the apnonce from the generator?
or is there some secret 4th variable used to generator the nonce, which can't be extracted from the device, but is unique to every device?
for everyone on A12: Good news, bad news.
Good news: Here's a nonce setter (see offsets I've added for my device to port it to your device): https://t.co/sIEPZB8oIc
Bad news: your blobs are useless, A12 has nonce entangling enabled.
Likes
285
how to on windows? 😅 i never understood compiling
try compiling futurerestore and its dependencies in mingw
Note: windows is a dependency hell when it comes to compiling this kind of stuff
@whole swan
hey
while compiling on mac
i get error package requirements ( libfragmentzip>=47) were not met
how to solve this
@rustic blaze can you wait
@vivid nova do you need access to the future restore guide google doc? I’ve been thinking about re-writing the whole sheet / updating it for iOS 14
sure?
@vivid nova sweet. Dm me your email and I’ll add you on it. Any word of if the forked iOS 14 future restore is business as usual or has some adjustment?
just sep compatibility, that’s common sense. I’m talking about commands wise.
'tis all the same
Beautiful. I’ll probably compile it when I get back to try some things out.
you don't need to.. it'll be available to download soon
mind you; you'll need the dependancies
which aren't difficult to install
yup
geosn0w has it distroed
works with a10
i know, but meh
@vivid nova can u send me the link to download the compiled version
All in due time @rustic blaze
To downgrade my iPhone se



