#futurerestore-help

1 messages Ā· Page 66 of 1

celest basalt
#

libkrw isn't needed on 13.5

#

[[dimentio]]

mystic axleBOT
#
dimentio

PoC tool for setting/getting nonce without triggering KPP/KTRR/PAC. (requires tfp0)

Author

0x7ff

Version

2.0.0-1

Price

Free

Repo
Bundle ID

com.0x7ff.dimentio

More Info
celest basalt
#

here

dry lodge
#

thanks a lot

#

this is what apnonce comes out even though i used dimentio to set it to 0x11111111***

vivid nova
#

I'm really starting to hate the negative feedback of ppl blaming the guis for FRs 'hit and miss' reliability

lilac wren
#

I haven't had a complaint yet

lilac wren
celest basalt
#

just check if it matches what dimentio says at the end with entangled_nonce

low summit
#

it makes future restore much easier to use. just that im not compatible yet

vivid nova
#

the GUIs make no difference though

celest basalt
#

generator is 0x[16 chars], but apnonce is a longer random string that's determined by the generator

vivid nova
#

All they do is input commands

lilac wren
#

Actually no

dry lodge
celest basalt
#

then it's fine

dry lodge
#

that's awesome!

#

one last thing

#

when editing the .shsh file using notepad++ i cannot find generator string or apnonce, just "nononce", is that normal?

lilac wren
# vivid nova All they do is input commands

There's error parsing with links on how to solve the errors, automatic reboot once on unable to put into recovery so there are less messages in this channel about that, automatically save logs so devs don't have to worry about asking everyone to copy paste logs, etc

#

There's so much more you can do then just generate a command

celest basalt
#

blobsaver won't include generator (at least for A12 and above) but it should still be valid

vivid nova
#

If a GUI is designed to input a command and initiate said execution.. 99% of the fault is on the program it's initiating

lilac wren
#

Yes ofc

vivid nova
#

If there is a problem.. It's presented

lilac wren
# vivid nova If there is a problem.. It's presented

Frgui next update (or new tool idk) called blob analyzer. Will help solve people with AP nonce / ticket mismatch by setting generator for them and trying a few until it finds the correct ap nonce. So yes, the error is presented, but why don't we help make the issues much easier to solve?

vivid nova
#

Because the issues aren't the GUI.. It's FR

lilac wren
vivid nova
#

It's not the generator in most cases

lilac wren
#

For ap nonce does not match ap ticket? I think it is, what else would it be

vivid nova
#

It's either FR not succeeding, ibec issues or recovery problems

lilac wren
#

Oh you mean on the scope of all errors

lilac wren
vivid nova
#

And ppl are led to believe that it's something the GUI installs which is not the case

celest basalt
#

FR doesn't detect device for me after it reboots to recovery btw, I have to Ctrl+C and start it again (both Windows and Linux)

lilac wren
#

Same for everyone, idk anyone who's just worked without having to restart

#

MacOS here and same issue

#

So definitely FR's fault

vivid nova
#

I just hate having to fix something that isn't broken

lilac wren
#

It is broken though

vivid nova
#

No, I'm meaning the GUI

#

I've looked into it several times.. There's nothing to fix

lilac wren
#

Ah ok

#

I mean you could just point people on how to solve the issue through the gui

#

Point is to make it more user friendly right

vivid nova
#

People are top hung up to the 90s where you install a program and it comes with everything you need.. Not like today's day and age where updates give you what you need.. And the programs just run off it

lilac wren
#

Doesn't irestore have a download FR button though, technically it has everything you need ig

vivid nova
lilac wren
#

Yeah but if latest is incompatible

dry lodge
#

guys

vivid nova
#

And fr updates the moment it's open

lilac wren
#

You think FR should auto select the last compatible signed version?

dry lodge
#

in all honesty i was like fuck it and tried to restore to 14.2 from 13.5 on A13 (11 pro max)

vivid nova
#

I think the GUIs should look at the sep checker first to certify compatibility prior to using latest

dry lodge
#

any idea how to get out of recovery or if it's even possible?

celest basalt
#
futurerestore --exit-recovery
#

should work since it didn't even send iBEC yet

vivid nova
#

But my thinking involves more work for a simple app

dry lodge
#

im just happy the installation process didnt start before it failed lol

celest basalt
lilac wren
vivid nova
#

Indeed

lilac wren
#

It's tough because sep and bb can't be just checked automatically, I don't think there's an api

dry lodge
celest basalt
#

I tested it, mine successfully got past iBEC with that

dry lodge
#

i mean restoring to 14.2 on A13

#

haha

celest basalt
#

14.2 seems like a hit or miss though but it did work for a bunch of people so idk

vivid nova
dry lodge
#

hmm

vivid nova
#

Then the gui can just list it

lilac wren
celest basalt
dry lodge
#

i could borrow my sister's mac and try

vivid nova
lilac wren
vivid nova
#

So the api implementation would be iOS whatever.. Yes with latest

#

And the gui would look at that

lilac wren
#

What if ios 14.4.2 came out rn though

#

--latest would be wrong

#

If 14.4.2 was incompatible

vivid nova
#

Apple gives about a week leeway to update

#

So granted the latest did come out.. I'd edit accordingly

lilac wren
#

There's room for error then

vivid nova
#

It would need further implementation to seek out what's currently signed which the checker has too

lilac wren
#

To prevent that, you'd have to have an api for latest signed verified working sep and bb, and you could never use --latest then

#

Oh you're smart lol

#

Just see if latest signed is what your checker has and if so, use --latest

vivid nova
#

Would be a lot of if in the code

#

It would work though

#

It'd be iffy (no pun intended) at first, but it'd succeed

lilac wren
#

Should be "future" proof (pun intended)

vivid nova
#

I don't think ipsw me has latest signed

lilac wren
#

And if somehow you die or something, and your checker is never updated, check with ipswme to see if what your api is saying is even signed.

valid adder
lilac wren
#

Ty cryptic

#

So first firmware in the index is latest signed I think

vivid nova
#

Before this TV burns out, it'll prolly have Jarvis to do auto updating

valid adder
#

Fuck apples restore kernel

vivid nova
#

If i made you a pfp, would you use it?

#

Prolly not..

lilac wren
#

Me or cryptic lol

vivid nova
#

Lil peep

valid adder
#

The last person to make me a lil peep pfp ended up being a pedo

#

But yes I do accept

vivid nova
#

I can assure you TVs may broadcast children, but will never play with one

valid adder
vivid nova
valid adder
#

Jools never made me a pfp

vivid nova
#

Odd.. He played with my remote

#

šŸ‘€

valid adder
#

Is this sep bullshit even fixable

vivid nova
#

It is compatible

#

All I'm going to say: if it works on Apple tv, it'll work on iOS

valid adder
#

@vivid nova and the weird thing is it works some of the time on some devices

#

It’s like there’s a bug in some seps or Kernels in restore mode

#

Or a race condition

vivid nova
#

It would be difficult to create different SEP recognition for separate devices based on what OS when its all the same security. The logic doesn't make sense and would end up putting Apples releases much farther behind imo

valid adder
#

It just depends on restoremode entry

vivid nova
#

This would be like opening up every package of m&ms because you decided to individually wrap each chocolate

valid adder
#

For some reason it’s using 14.2 to enter restoremode

#

It should use latest components to load sep

#

I’ll try that see if it fixes it

sweet thistle
green onyx
#

any loop other than respring cant be fixed except itunes restore

sweet thistle
green onyx
#

ur going to update tho

#

to ios 14.4.1

merry oak
#

Hello I am getting an error in futurerestore going from 13.5 to 14.3: "Device ApNonce does not match APTicket nonce". My blobs were fine when I started so i dont see what the issue is. :(

green onyx
#

set ur generator to what ur blobs have

#

use the gui

merry oak
#

Both were 0x1111?

green onyx
#

if u use frgui, it should tell u how to fix ur error

green onyx
#

and screenshot

#

and use dimentio

#

to set generator

merry oak
merry oak
merry oak
#

Yes I think so.

green onyx
#

futurerestore.exe --exit-recovery

vivid nova
#

Inb4 "cannot execute program, futurerestore.exe does not exist"

merry oak
#

So my blobs are valid though right? And in unc0ver, my generator was already set to 0x1111111, so is dimentio different?

green onyx
#

sets bootnonce in nvram

merry oak
#

Gotcha. Will report back when that's done.

green onyx
#

alright

#

dimenio is a tweak btw

#

[[dimentio]]

mystic axleBOT
#
dimentio

PoC tool for setting/getting nonce without triggering KPP/KTRR/PAC. (requires tfp0)

Author

0x7ff

Version

2.0.0-1

Price

Free

Repo
Bundle ID

com.0x7ff.dimentio

More Info
vivid nova
#

Although.. Nvram with the latest checkra1n also sets nonce too

green onyx
#

true

#

but not many ppl know how to do that

#

damn some repos are down

#

and cydia is being a dick

#

mhm true

vivid nova
#

Ironically they know dimentio 0x111... But not nvram apple.System...

green onyx
#

package

#

true

#

also tsssaver tweak/package has a visual bug

vivid nova
#

Hey Conan.. You're back

green onyx
#

the nonce icon is gone

merry oak
#

Btw the gui was saying this when I tried to just put my stuff in (without my phone plugged in, just testing)

lilac wren
#

ignore and hit ok

green onyx
merry oak
#

1725873098719278_iPhone10,5_d211ap_14.3-18C66_#####.shsh2
iPhone_5.5_P3_14.3_18C66_Restore.ipsw

To me, the 18C66 matches in both but?

green onyx
#

just ignore it like what @lilac wren said

merry oak
#

Lol thought that was a troll

lilac wren
#

yeah I just have a bad regex

lilac wren
merry oak
#

Gotcha xD

green onyx
#

ah i see

lilac wren
#

hey conan, think you can help. i'm trying to compile dimentio but get this when I run as root

#

regular dimentio works fine

#

no but I'm trying to edit it

#

oh you mean compile the one you have?

#

im using the one from 0x7ff

merry oak
#

Hum. I do have dimentio already installed o_o

lilac wren
#

ill try

merry oak
# green onyx use dimentio

turns out that I already have dimentio installed. I was using TSSSaver from that repo. The generator on TSSSaver is different though.

green onyx
merry oak
#

But the blobs still say 0x1111 :\

green onyx
#

set ur generator to 0x111 with dimentio

merry oak
#

I’m not sure how to check that 100%

#

This says 0x1111. Does dimentio have a GUI or terminal where I can see my generator? The blob is set as 0x111 though so I’d imagine it worked

#

But futurerestore seems to thinks it’s not

green onyx
#

dont use u0's generator

#

use dimentio

merry oak
#

But TSS Saver says this. Dunno if I need to look at this

green onyx
#

to set the generator

green onyx
#

su

#

alpine

green onyx
#

dimentio 0x1111111111111111

#

use the 1conan one

merry oak
green onyx
#

yes

#

good

#

and now run futurerestore

#

dont reboot ur phone

merry oak
#

Just reinstalled it before trying this...

#

Should I not future restore?

#

to be fair I saw the repo site said version 2.0.0 and yet i have 2.0.3 but idk if thats something that needs to be looked at.

#

New error! :P

#

Oh is this the error -8 that was on the github?

sinful spade
#

yes

#

and you should probably use cmd

merry oak
#

I did those steps in the github but my screen hasnt turned green yet...

sinful spade
#

it doesn't always turn green

#

mine didn't

#

but my other phone did

#

so

merry oak
#

Okay... the progressbar is moving...

#

Wellp! Looks to have worked!

shut quail
#

Ive been stuck on ap nonce screen

#

Tryed all sort

#

Even the dimentio method

valid adder
#

only turns green on a7-a10

#

this has been fixed in v196

sinful spade
#

that makes sense

valid adder
#

green is just not physically possible on a11 and later

#

there is no hardware

sinful spade
#

so what was fixed

#

nothing turns green now

valid adder
#

it wont print green on >= 0x8015

#

thats what I added

#

the warning message included

#

@sinful spade this the code now

#

before, it didn't have device check

sinful spade
#

oh cool so it doesn't give a false warning

valid adder
#

yep

#

no more noobs restoring

#

because they canceled the restore halfway...

sinful spade
#

that happened to me

valid adder
#

because it didn't turn green...

sinful spade
#

but i didn't cancel it

#

it just actually failed to send ibec for some reason

valid adder
#

windows?

sinful spade
#

no

#

it was on 191 tho

#

big sur

valid adder
#

probably pairing issue

#

usbmuxd

brisk leaf
#

Is nonceset143 any good?

valid adder
#

just use unc0ver

brisk leaf
#

What abt for saving blobs?

#

System info isn’t working for my 14.0.1 iPad Pro

#

^ignore that I just realized that I’m probably just on an old version of unc0ver 6

#

Also, should I keep my generator set to match the blob I used to futurerestore or should I change it back to 0x111111111111?

#

Why is that even the default?

valid adder
#

just get apnonce with latest dimentio + libkrw ran as root

#

then save with tsssaver

brisk leaf
#

Can you elaborate on that first part

valid adder
#

download libkrw and dimentio from cydia

#

login as root in newterm

#

then run

#

dimentio

#

command

brisk leaf
#

And that does what?

valid adder
brisk leaf
#

Oh so specify the apnonce and not just the generator ok

#

What benefits does that have?

dull swallow
valid adder
#

ignore me

dull swallow
valid adder
#

u have a10x

dull swallow
#

oh

valid adder
#

@brisk leaf

dull swallow
#

kek

valid adder
#

this is not needed nvm

dull swallow
#

thought he was 64e

valid adder
#

just use dimentio to set nonce tho

#

anyway

brisk leaf
#

Ok yeah I was confused

valid adder
#

just use tsssaver site

dull swallow
#

yeah

brisk leaf
#

What devices is this necessary for

dull swallow
#

A12+

#

or iPhone XS and above

brisk leaf
#

I have an iPhone 11 Pro

dull swallow
#

including XR

#

yeah

brisk leaf
#

I didn’t do this and my blobs worked fine with futurerestore?

dull swallow
#

or something

#

because they do it for you

brisk leaf
#

Ah

#

Ok

dull swallow
#

like tweaks do it for you

brisk leaf
#

Anyway my actual question was if I should save blobs with the generator 0x1111111111111 moving forward instead of whatever systeminfo used

#

0xdc77cc754eccb488

dull swallow
#

use whatever the blob says

#

which will probably be 0xdc77cc754eccb488

#

since that’s what system info says

brisk leaf
#

That’s what I did when FRing but moving forward should I use the unc0ver default or what system info uses?

#

To save

valid adder
#

@brisk leaf yah do the apnonce method I said earlier for 11 pro

brisk leaf
#

yeah i just decided to stick with whatever systeminfo wants me to use

#

it worked so im just not gonna change anything

valid adder
#

is systeminfo even updated tho?

brisk leaf
#

dk but its runs fine

#

on both my ipad pro and iphone 11 pro both on 14

#

and it seemed to save 14.4.1 blobs perfectly fine

#

should i have derived new before saving since i future restored tho?

empty pollen
#

Hi, I was told that earlier someone was helped with FutureRestore on their 11 Pro

#

I just want to be absolutely sure whether I'm screwed out of FR before I give up and leave disappointed.
Basically I'm working with blobs that I saved from when I first got my phone up until today. I started saving them when I was unjailbroken, and so my generator was randomized.
FR is completely unusable without the correct generator for the blob to use. Correct?

And if that's the case, given also the thread above, I will not be able to use FR. Is this also correct?

sinful spade
#

if you weren’t jailbroken when you saved the blobs then you can’t unless you know the generator but even then

#

idk

#

you probably are

brisk leaf
#

cant you just find the generator and set it with unc0ver before doing fr?

empty pollen
#

If I'm at all able to get the correct generator, then set it and reproduce the nonce on my device, then I can use FR, from what I understand about all this

brisk leaf
#

oh you dont know the generator

empty pollen
#

Yeah

brisk leaf
#

yeah idrk i cant really help

empty pollen
#

The generator was random and since I wasn't jailbroken when the blobs were made, the generator cannot be found unless it's brute forced, and the chances of that are incredibly slim

brisk leaf
#

yeah i doubt theres anything you can do then

empty pollen
#

I'm still almost tempted to at least try it. It's not like I'd be hurting anything by doing that

brisk leaf
#

itll give you a mismatch error if the blob generator is different from the device generator afaik

empty pollen
#

But you can set a generator and then check the nonce, then set the generator again and check again, etc.

brisk leaf
#

i mean in theory yes
but is it worth it

empty pollen
#

By this logic, it can be scripted if the right tools are available

#

Probably not but I still wanna try it

#

I'm insane like that

brisk leaf
#

fair enough

valid adder
#

@empty pollen if you want to bruteforce no need for a script, just use -w flag with fr

empty pollen
#

wait what

#

that's a thing

#

it will brute force the generator?

valid adder
#

always has been

#

no

empty pollen
#

uh

valid adder
#

it will reboot until apnonce matches

empty pollen
#

holyshit

#

that will take forever but that is awesome to know

valid adder
#

this was used for a7 because a7 had apnonce collisions

dull swallow
empty pollen
#

but hypothetically with enough time it'll work for an A13?

valid adder
#

doubt it

empty pollen
#

lol

valid adder
#

sha384

empty pollen
#

indeed

#

with the app im on it spits out the apnonce on the spot

#

script would be way quicker

#

alright well

#

if i was gonna do that

#

im on 13.5.1 rn trying to get to 14.3
what exactly do i set if im using futurerestore gui?

#

i mean obviously i know how to set the files i need but what about the baseband and sep?

brisk leaf
dull swallow
brisk leaf
#

u sure?

#

cuz i have no issues with it and im on a13

#

oh damn your probably right

#

i think it just caused a boot loop on my iphone and i cant rejailbreak on my ipad

empty pollen
#

what do i set baseband and sep to for a 13.5.1 - 14.3 using blobs on A13

brisk leaf
#

no issues until i go to rejailbreak damn

dull swallow
brisk leaf
#

cant even restore rootfs

spare holly
#

😩

brisk leaf
#

what am i supposed to do

#

i cant rejailbreak, rejailbreak with load tweaks disabled, or restore root fs

#

i think system info is the culprit

#

but doesnt help that unc0ver is being extremely unreliable

#

i was able to rootfs and rejailbreak on my phone but i still cant on my ipad

weary ibex
#

its the restore ok ?

brisk leaf
#

rip

#

just searched that string in this channel
not a good sign

vivid nova
jaunty raft
#

Has the success rate improved on the xs max 13.5

vivid nova
#

no

#

stay on 13

jaunty raft
#

Crap ok

weary ibex
#

@vivid nova 14.4āž”ļø14.3 IPHONE 7 (GSM)

vivid nova
#

ok?

weary ibex
#

I restored with iTunes because stuck

vivid nova
#

you can downgrade with valid blobs

weary ibex
#

I did it

vivid nova
#

cool

weary ibex
#

But didn’t work

#

It’s stuck at uknow data request

vivid wagon
#

has my nonce changed? so this blobs can't be use?

valid adder
#

what jailbreak

vivid wagon
#

unc0ver

jaunty raft
#

So if by some chance you mess up and go to 14.4 are you able to go back to 14.3 xs max

valid adder
#

@vivid wagon were you jailbroken when you saved blobs

jaunty raft
#

Ok thanks idk if I should risk it or not

vivid wagon
valid adder
#

thats why

#

you need to be jailbroken when you save blobs

#

for a12-a14

vivid wagon
jaunty raft
#

Why you say that @valid adder

valid adder
#

its pretty high successrate

jaunty raft
#

O ok how long does it take to do everything

vivid wagon
#

I should stay 13.5.1, and wait for 14.4+ jailbreak?

sturdy portal
#

Hi, is it possibile to downgrade my iPhone 7 from iOS 14.4.1 to iOS 14.2? Thanks

#

Oh, I saved iOS 14.2 SHSH

jaunty raft
#

So when it says get your target blob that's my saved blob correct? and then when it says download the ispw from the target version is that 14.4 or 14.3

full osprey
#

Target blobs are the ones you saved, target ipsw is the iOS version you want to go to

jaunty raft
#

ok so basically i have 14.3 blobs saved and then Ill just download 14.3 ipsw as well just wanna make sure I have everything before trying it

full osprey
#

Tbh you’re going to need both 14.4 and 14.3 ipsw

jaunty raft
#

ok well I have both already

#

well I have 14.3 blobs but only 14.3 ipsw im downloading 14.3 ipsw now

full osprey
#

You need 14.3 blobs, 14.3 ipsw , 14.4 ipsw

jaunty raft
#

So which one would I name blob.shsh2 and which one will i name target.ipsw since you said I need both ipsw

dull swallow
#

why install 14.4 ipsw?

full osprey
#

I didn’t know latest flags were working

#

I never said install it

dull swallow
#

i meant download

#

kek

full osprey
#

To get the info needed. I was under the assumption latest flags didn’t work

jaunty raft
#

@dull swallow which ones do I need I have 14.3 blobs saved already should I continue to download 14.3 ipsw

full osprey
#

Your target ipsw is always the version you want to go to

jaunty raft
#

Ok im downloading that now

#

now I used blobsaver to back up my blobs now should I use the nonce from there Im currently on odyssey 13.5

dull swallow
#

are you A12+

jaunty raft
#

yes

#

im on Xs Max

dull swallow
#

fuck i hate nonce entanglement

#

it should be comaptible anyway

#

yeah just use the 14.3 blob

#

you have

jaunty raft
#

Ok what about the nonce

lilac wren
#

Use odyssey's

#

Unless you ever remember setting generator

jaunty raft
#

Umm I have too

#

See

#

I gotta back my phone up first

dull swallow
#

because thats how A12+ works

jaunty raft
dull swallow
#

and you used blobsaver to get the Apnonce

jaunty raft
dull swallow
#

i believe

jaunty raft
#

Hmmm so when I used blob saver I clicked read from device

#

It has manually specify apnonce checked and it read from device

dull swallow
#

ok good

#

it should be valid

jaunty raft
#

That’s what it says so I’m hoping lol

dull swallow
#

why are you hiding your apnonce

jaunty raft
#

Idk if I should or not

dull swallow
#

it literally cant be used for anything lol

jaunty raft
#

O I didn’t know lol

dull swallow
#

only thing it can be used for is restores kekw

jaunty raft
#

O ok well now I gotta backup my phone

valid adder
#

why can I see this anyway lol

dull swallow
#

tru

jaunty raft
#

šŸ˜‚šŸ˜‚šŸ˜‚

#

I’m new to all this

dull swallow
#

new to using the draw tool

#

lol

jaunty raft
#

Everything

#

I’m still trying to see if I can find an iPhone 11 Pro with 14.3

empty pollen
#

what do i set baseband and sep to for a 13.5.1 - 14.3 using blobs on A13

versed atlas
#

can i save my a14 14.3 blobs through system info??

covert ibex
#

no they wont be valid

#

unless you saved the blobs before 14.3 went unsigned

versed atlas
#

i mean my phone already on 14.3 jb

#

only to save 14.4 blobs

covert ibex
#

oh ok

#

system info doesnt have support for libkrw yet which is a requirement now on unc0ver 6.1.x to set nonce

#

just make sure you install libkrw first

versed atlas
covert ibex
#

šŸ‘

versed atlas
#

tnxxxxx

versed atlas
#

is this the section??

covert ibex
#

yeah system info cant read the generator from the nonce yet on the recent unc0ver

green onyx
#

easy af

covert ibex
#

yeah i just gave him the gui to make it easier

#

depends where you like it saved too

#

i prefer tsssaver over shsh host

empty pollen
green onyx
#

yes

empty pollen
#

thank you

green onyx
#

np

ripe merlin
#

do blobs saved in blobsaver work? i was doing some research about matching your device's generator to your blob's

#

but my blob doesn't have a generator attached to it

green onyx
#

no

#

i dont recommend it

#

mainly because blobs saved usually dont have generators

#

just use shsh.host

#

or tsssaver

ripe merlin
#

oh damn i had used blobsaver for ny 14.2 blobs tho

#

yeah i know now my 14.4 is with tsssaver

#

i'm still trying to use the GUI with my 14.2 blob i'll see if it works

celest basalt
#

it may be fine if your generator was set correctly, but unc0ver 6.x and Odyssey's recent versions both seem to have issues with setting the generator

#

!t blobs

mystic axleBOT
# celest basalt !t blobs
blobs

To save blobs on a jailbroken device, install TSS Saver from https://repo.1conan.com/, then open it and press Save Blobs. (If you're using unc0ver on iOS 14, you'll have to update to 6.1.0 or newer and install libkrw from Cydia before TSS Saver will work.)

For A11 and lower, you can also save blobs without jailbreak on https://tsssaver.1conan.com/v2/ by entering your ECID which you can get from iTunes by clicking the serial number twice. A12 and above requires a jailbreak to start saving blobs.

ripe merlin
#

i know my blob was definitely 0x with 16 1's tho i didnt mess around with it

celest basalt
brittle olive
#

Can I save 14.3 blobs? if I'm on it right now!

celest basalt
#

rip

brittle olive
#

But can it be saved ? I mean 14.3 ?

#

it's already unsigned thou

#

but my phone on 14.3

celest basalt
#

onboard blobs can be saved, yes

#

it's a different method of saving than normal

#

the one System Info saves has a generator so it may be useful, but only while the SEP is compatible

ripe merlin
#

i think it worked

#

it says 'Done: restoring succeeded!'

#

i jus wanna confirm

#

restoring to an itunes backup wont update to 14.4 automatically right?

celest basalt
#

oh you're already that far ahead, then yeah your blobs were valid

ripe merlin
#

i'm on the hello screen

celest basalt
ripe merlin
#

i backed up when i was on 13.5

#

so i'm safe to press restore from backup?

celest basalt
#

yes that should be fine

worthy sigil
#

So why does using SHSH blobs allow us to circumvent Apple servers?

celest basalt
# worthy sigil So why does using SHSH blobs allow us to circumvent Apple servers?

tl;dr: when you want to restore/update firmware, iTunes or the device requests an APTicket from Apple's servers, and they return a digitally signed response

the APTicket has a field called APNonce that's supposed to make it impossible to cache the signed response and perform a replay attack

BUT if you have a jailbreak, you can set the generator that determines the value of the APNonce and fool the device into accepting it

worthy sigil
#

Ohhh ok

#

Thanks @celest basalt

ripe merlin
#

look at my name šŸ™‚ the restore worked man damn

worthy sigil
#

Also is there anywhere for me to verify my SHSH blobs? I've been saving them through SysInfo and it's always seemed a bit too easy lol

ripe merlin
#

tsschecker

#

go to tss saver at the top it says blob checker

celest basalt
#

this one works too

worthy sigil
#

Great, thanks @ripe merlin and @celest basalt

orchid blade
#

I'm the big sad I tried to go from 14.4 to 14.2 and it almost worked but when it was restoring it just goes back to the recovery

edgy whale
#

does someone know if ipwndfu works on ubuntu live?

celest basalt
edgy whale
#

cool, ok

zealous bridge
#

doesnt work on Ubuntu

edgy whale
#

oh

#

aight

fathom ridge
#

guys I'm trying to futurerestore my iPhone X 13.5 to 14.2 but its not working

#

Everything goes smoothly until the iBEC part, the green doesnt flash green and it fails

sudden meadow
#

IBEC error solution is pinned and the screen won’t turn green in A11

lost stone
#

Do I need to do anything to prep an iPad mini cell for futurerestore? It’s got the matching generator set in uncover. Do i need to uninstall or disable anything ? Im planning on using the new GUI from coocoo

fathom ridge
lost stone
#

Going from 13.5 to 14.2

worthy sigil
#

Where can I get the iOS 14.3RC ipsw?

worthy sigil
#

They only have iOS 14.3

fathom ridge
#

which device?

worthy sigil
#

iPhone XR

#

I have the blobs

fathom ridge
#

settings>about> copy device model and put it in the ipswme search

lost stone
#

Do I need to install nonceEnabler with unc0ver 5.3.1

fathom ridge
#

[exception]:
what=ERROR: Unable to restore device
what=ERROR: Unable to restore device

code=68026385
code=68026385
line=1038
file=futurerestore.cpp
commit count=194:
commit sha =0ab9df3209ee599f581532d05d331e6abe0f53f3:
Done: restoring failed!

celest basalt
lost stone
#

Is the 14.4.1 sep compatible with 14.2? A12 iPad mini 5

#

Am I in the wrong place to be asking these questions?

#

Ok

#

Thanks

zealous bridge
#

14.2 restores are kinda broken

#

they might work they might not

#

@lost stone

lost stone
zealous bridge
#

you can kick it out

lost stone
#

Is it a luck thing? Should I try several times. Or if it won’t work it won’t work

zealous bridge
#

yeah its a luck thing

#

if it doesnt work it doesnt work

lost stone
#

Is it worth repeating the process until it works? Or should I give up if it fails.

zealous bridge
#

Repeating wont change the outcome

lost stone
#

Ok

#

I presume best to try 14.4 SEP and baseband over 14.4.1, and to avoid using ā€œā€”latestā€

zealous bridge
#

no

#

––latest is fine

lost stone
#

Oh. Ok. Thanks.

lost stone
# zealous bridge no

So no risk in trying right? Any other prep I should do to the device prior to pressing start?

zealous bridge
#

No risk

#

Set your generator properly

lost stone
zealous bridge
#

Ok thats fine

tawny berry
#

hey

#

i’m on iphone 11 14.4

valid adder
#

No

tawny berry
#

would i be able to downgrade to 14.3?

valid adder
#

You need jailbreak to downgrade

tawny berry
#

oooooh aight whew. i previously jailbroke my device but i had to restore cuz i fucked up something

#

thanks, almost jumped the gun

valid adder
#

You never have to restore

tawny berry
#

? it was bootlooping

lost stone
zealous bridge
#

You dont have to

lost stone
vivid nova
#

@valid adder if you bootloop an 11 on iOS 13, what is the likeliness of downgrading via FR to 14?

valid adder
#

100% if your blobs were red saved correctly with 0x11 set when you saved

vivid nova
#

I doubt any jailbreak does that automatically

worthy sigil
#

Unc0ver sets it to 0x111111111111111 automatically

vivid nova
#

But not odyssey

#

Afaik

worthy sigil
#

Yeah Odyssey doesn't

#

If you have your blob, open it, and search for the generator value, use that has your nonce, and you should be able to still

celest basalt
#

So I need a little blob help here.
I just made blobs from onboard .der's (GENERATORLESS THANK GOD) but yeah

1st - how am I supposed to define the APnonce MANUALLY or do I have to crack it with the FR option
2nd - since I do not have a generator there can I just use the generator value for that specific AP?
#

Report sheet if you ask

vivid nova
#

Here's a better idea: stay away from 14

celest basalt
#

(yes I restored to 14.3 since that incident, no fr's)

celest basalt
#

so im making blobs

vivid nova
#

What incident?

celest basalt
#

sigh

#

Fine in a nutshell I edited the plist lol

vivid nova
#

Bruh

celest basalt
#

and you prob remember how that ended up

worthy sigil
#

HAHAHA

#

We've all done it

vivid nova
#

Editing anything is dumb

celest basalt
#

yeah

#

welp

worthy sigil
#

Usually we make backups first

#

But I get oit

#

*it

celest basalt
#

So

#

How am I supposed to know my generator from that AP or how can I set it manually?

worthy sigil
#

Uhhh this is beyond my amazingly limited understanding of futurerestore

celest basalt
#

Ugh fine understood that my well

#

generator

#

its unknown

#

So should I just use the "APnonce bruteforce" option?

worthy sigil
#

That's probably your best bet

celest basalt
#

without generator they're useless for futurerestore

celest basalt
#

It doesn't show up

#

it did for me, but never got through a full restore with them yet, even though FR says it's valid

celest basalt
#

A7 or so was the last where you could do nonce collision in DFU IIRC

celest basalt
worthy sigil
#

How do you dump on-board blobs with SysInfo

celest basalt
#

swipe left on ECID cell, press APTicket

worthy sigil
#

Ohhh that's what that's for

celest basalt
#

with nonce collision you can do about one per 5 seconds so it would take almost 3 trillion years to hit the right one

#

on A7 (I think) there was a bug in DFU where it would commonly generate the same few nonces but that doesn't work on newer devices anymore

celest basalt
#

that's an outdated version

#

[[system info]]

mystic axleBOT
#
System Info

System information in Settings app > General > About, and other sections. Set boot-nonce, save SHSH, battery info etc

Author

ARX8x

Version

2.7.2-1

Price

Free

Repo
Bundle ID

xyz.xninja.systeminfo

More Info
celest basalt
#

use this one

#

Mk

#

it works

#

lets hope i can make use of it

jaunty raft
#

So im getting this error

#

C:\Users\Josh\Desktop>C:\Users\Josh\Desktop\restore\futurerestore-v194.exe -t blob.shsh2 --latest-sep --latest-baseband target.ipsw
Version: 0ab9df3209ee599f581532d05d331e6abe0f53f3 - 194
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f
Odysseus support: no
INFO: device serial number is
[INFO] 64-bit device detected
futurerestore init done
futurerestore: failed with exception:
[exception]:
what=failed to load APTicket at blob.shsh2

code=22282257
line=340
file=futurerestore.cpp
commit count=194:
commit sha =0ab9df3209ee599f581532d05d331e6abe0f53f3:

celest basalt
#

Found it ty :D

lost stone
celest basalt
celest basalt
jaunty raft
lost stone
#

It looks right to me.

celest basalt
lost stone
celest basalt
celest basalt
#

Yeah

#

I just suggest using SHSH

celest basalt
#

Put the blob in, put the device identifier in, put the version of the blob and well

jaunty raft
#

so it says its valid

celest basalt
#

Yeah hope it's valid! :D

celest basalt
#

Wait

#

Why

#

Why does your blob say 14.2 but the IPSW says something weird

celest basalt
#

do you have a fake ipsw or what

celest basalt
jaunty raft
lost stone
jaunty raft
#

and I donwloaded the 14.3 ipsw

celest basalt
#

oh you need the most updated one

celest basalt
#

Failed to load APticket

#

...

lost stone
jaunty raft
#

So my blobs what should I rename it to in my restore folder

celest basalt
#

im not being dumb right? @celest basalt

#

it saves 5 seconds of your life

#

the ipsw is supposed to be the most updated one ?

jaunty raft
celest basalt
#

ah ok

#

at best you prefer the older ipsw if 2 are signed

#

firmware compatibility

valid adder
#

@jaunty raft computers are except, you don’t type the exact path it won’t know where to find it

celest basalt
#

Welp I'm gonna go sleep now

jaunty raft
celest basalt
#

hope you can solve it

valid adder
#

You are tying to access blob.shsh2 in desktop because you didn’t provide a full path

#

You need to do the full path

jaunty raft
#

ok for the command prompt what would I type

#

cd Desktop
futurerestore-v194.exe -t blob.shsh2 --latest-sep --latest-baseband target.ipsw thats what it says in the tutorial do I add anything extra

green onyx
#

Yes

valid adder
#

Not sure how you still don’t understand

#

I just explained what you did wrong

#

It just has blob.shsh2 without a path

green onyx
#

Did u cd in ur folder

valid adder
#

That means it’s looking in the currently directory

green onyx
#

Unless futurerestore and ur blob and ipsw r in the same folder

valid adder
#

You are in desktop

green onyx
#

U gotta write the directory

valid adder
#

Not restore

jaunty raft
celest basalt
valid adder
#

@celest basalt that’s irrelevant

celest basalt
#

You're missing a BM, add one by using the --latest-manifest tag

celest basalt
valid adder
#

Unix doesn’t traverse depth of directories

valid adder
#

He’s in desktop so it’s looking for blob in desktop

green onyx
#

--latest sep and bb means latest manifest

celest basalt
#

mm i usually use 3 but ok

lost stone
green onyx
#

or ok

celest basalt
#

Just hit ok and hope for the best

lost stone
green onyx
#

his blobis 18B92

celest basalt
#

14.2

green onyx
#

his ipsw is 18B92 also

#

hes fine

#

wait

celest basalt
#

I mean like if

green onyx
#

its an ipad

shy magnet
green onyx
celest basalt
#

whats

lost stone
#

Ya. It’s an iPad

green onyx
#

@lost stone is ur ipad wifi only

celest basalt
#

change args to no bb if wifi

lost stone
#

No. It’s cell

green onyx
#

ah good

celest basalt
#

save latest args

#

now fr it

#

hit ok

jaunty raft
#

ok I think I got it running now lol

#

it says downloading baseband

green onyx
#

yep

jaunty raft
#

ok now it says restoring failed

#

what=ERROR: Firmware file target.ipsw does not exist.

code=43122705
line=658
file=futurerestore.cpp
commit count=194:
commit sha =0ab9df3209ee599f581532d05d331e6abe0f53f3:
Done: restoring failed!

#

now does that mean I didnt correctly say where the target.ipsw is located

vivid nova
green onyx
#

wait

#

are u sure u did everything correctly

jaunty raft
celest basalt
#

its a futurerestore gui how is it fucking up

jaunty raft
#

so I have the restore folder on my desktop with futurerestore in it also I renamed my 14.3 blobs blob.shsh.2 and 14.3 ipsw i renamed it to target.ipsw

jaunty raft
green onyx
#

reselect the files

jaunty raft
# green onyx reselect the files

futurerestore-v194.exe -t blob.shsh2 --latest-sep --latest-baseband target.ipsw so for the -t blob.shsh2 do I put where the file is located and target.ipsw to i type where the file is located

celest basalt
#

you'd do it like

#

futurerestore.exe -t "C:\Users\Chris\Documents\iPhone Blobs\blob.shsh2" --latest-sep --latest-baseband "C:\Users\Chris\Documents\iPhone Blobs\target.ipsw"

#

example of where i had my files located

green onyx
#

in the gui

#

it doesnt need to be in the same folder

celest basalt
#

i dont think they were the one using the gui 😳

vivid nova
#

mfs when they change the name of files instead of drag-and-drop into CMD

celest basalt
#

i didnt change the name of the filesss

jaunty raft
celest basalt
#

it was for simplicity sake

vivid nova
green onyx
#

ur not suppose to do that

#

just use the select buttons

#

on the gui

#

how are u complicating this

vivid nova
green onyx
vivid nova
#

why cant fr.exe be opened normally

green onyx
#

it can

#

it just shows the arguments

#

and crashes because theres nothing to it

vivid nova
#

exactly my point

shy magnet
#

fr.exe

green onyx
#

bruh

vivid nova
#

if it was made as an app or cli

sinful spade
#

nfr.app

green onyx
#

fr.zip

vivid nova
jaunty raft
celest basalt
#

wasnt that the point of 2 futurerestore guis being released yesterday or 2 days ago

#

so there was clicky buttons

#

and dropdown menus

vivid nova
#

payload.bin

jaunty raft
celest basalt
#

no

#

open cmd

#

cd to that folder

jaunty raft
vivid nova
sinful spade
#

futurerestore-v194.exe -u -t blob.shsh2 --latest-sep --latest-baseband target.ipsw

lost stone
jaunty raft
jaunty raft
sinful spade
#

put your phone in recovery and paste the command i just sent

green onyx
#

and select the files

#

how hard could it be

celest basalt
#

he isnt using the GUI BROOOO

vivid nova
green onyx
#

fr

sinful spade
jaunty raft
celest basalt
# lost stone Worked

enjoy 14.2 even tho its not so special- oh wait the chinese gps faker works on it

green onyx
#

idfk why he isnt

sinful spade
#

it won't find the phone in recovery for me until i rerun it

celest basalt
#

although them using the gui would probably be safer

green onyx
vivid nova
green onyx
#

@jaunty raft download the win one

celest basalt
#

the fact of the matter is they dont have the gui downloaded

green onyx
#

and unzip

#

and open the exe

#

tell me when u got that

vivid nova
#

i guess with his windows gui i should trash iRestore

sinful spade
#

neither of them actually start futurerestore

sinful spade
#

on my computer

#

idk i didn't try very hard

vivid nova
green onyx
#

has he unzipped and open the exe yet

celest basalt
#

he isnt talking so he probably is downloading it and stuff still

#

either that or they downloaded it opened it

#

saw the clicky buttons

#

and used the right files where it said to

sinful spade
#

not sure why he's not just running the command

valid adder
#

like I said

jaunty raft
#

so when using the gui do I need to place my phone in recovery mode or will it do it itself

valid adder
#

everything is exact

celest basalt
#

it should do it itself ?

valid adder
#

the computer wont know what you are trying to do

#

its case sensitive

jaunty raft
#

ok im making sure I have everything set up gonna try now

celest basalt
#

just put it into recovery or use checkra1n- windows moment
put it into recovery manually as I didn't have luck of fr doing it

#

smh people having it easy with the --latest-sep --latest-baseband

#

with the outdated windows tutorial i used ((the op didnt update the post with --latest at the time)) i had to get these myself

sinful spade
#

there's not...a command to do that!

celest basalt
jaunty raft
#

Is this correct

#

Because so far nothing has happened on my phone I am jailbroken using odyssey

celest basalt
#

did you do the trust prompt

jaunty raft
#

no prompt never showed up

green onyx
celest basalt
#

ok

jaunty raft
#

im literally just sitting waiting for it to pop up

#

ok now its running

celest basalt
#

alright hope for the best my friend

jaunty raft
#

yea im crossing my fingers now its checking hashes

green onyx
#

alright

jaunty raft
#

ummm i think its stuck on checking hashes im still in recovery mode

green onyx
#

just let it run

jaunty raft
#

well looks like i gotta delete itunes and download the other version

green onyx
#

ibec error?

jaunty raft
#

yup

vivid nova
green onyx
#

v245

#

why is everyone from the future

celest basalt
#

true

jaunty raft
#

is there a way to get v245

worthy sigil
#

Do you need to use the -u flag for futurerestore

vivid nova
#

i wouldn't use it...

jaunty raft
#

o ok

celest basalt
#

5am

vivid nova
#

this is like tearing down your front door because the key doesn't work

ember ridge
# zealous bridge you can kick it out

is the ability to kick out and return to your device as normal just for the A12 iPad mini 5 in question earlier here, or is the same true for an A13 11PM 13.7? thanks for your time!

zealous bridge
#

13.7 to 14.2?

ember ridge
#

correct

jaunty raft
zealous bridge
#

14.2 errors are non-fatal

ember ridge
#

thank you šŸ™

jaunty raft
#

which is better 14.2 or 14.3

green onyx
#

14.3

jaunty raft
#

alright looks like ima have to go awhile on 13.5 and not have my backup until i get back home to try it again

lost stone
#

Since upgrading seems to break setting my apnonce. Is there a fix?

celest basalt
jaunty raft
#

wow very confusing

#

indeed

celest basalt
#

because either way my device was wiped completely

#

my key didnt work because the locksmith left the job unfinished

#

so i had to kick the door down to get in

valid adder
#

@green onyx @zealous bridge @celest basalt we did some crazy shit

green onyx
#

lmao what

zealous bridge
#

whats going on

valid adder
#

not yet

#

but soon

celest basalt
#

what

green onyx
#

sneak peek pls

valid adder
#

not a release or fix

#

talking about something crazy

green onyx
#

mhm

zealous bridge
#

lmao ok

green onyx
#

is it futurerestore related

#

or nah

valid adder
#

yes github

green onyx
#

imma check commits

#

brb

valid adder
#

nah

#

not a code change

green onyx
#

hmm

valid adder
#

not in my control

#

I just said to do it

green onyx
#

hol up, but what is it lmao

#

kinda secretive ngl

valid adder
#

repo change

green onyx
valid adder
#

by defition im secreitive

green onyx
#

true

zealous bridge
#

still have no idea what it is

green onyx
#

^

#

did u guys change to gitlab

#

or smthn

valid adder
#

hell no

#

im not pwn

zealous bridge
#

Oh does it include procursus

valid adder
#

nah

#

thats a release related thing

zealous bridge
#

🤨

valid adder
#

but I will add procursus to ci when its ready

#

its a repo change itself

#

github features

worthy sigil
#

Oh my God futurerestore worked the first try

green onyx
#

nice

celest basalt
valid adder
#

its up

vivid nova
green onyx
#

lmao what

valid adder
#

did you unplug it and plug it back in @vivid nova šŸ˜‰

ember ridge
# zealous bridge 14.2 errors are non-fatal

Managed to fubar myself lol. future restore complained about APNonce mismatch and I can't exit recovery mode via Vol Up/Down and Power until apple logo. Just restarts to the same screen lol. whoops. Guess I'm headed to 14.4! d'oh

zealous bridge
#

no it’s fine

green onyx
#

fubar?

#

@ember ridge dont go to ios 14.4

zealous bridge
#

just use exit recovery button

green onyx
#

its fixable

zealous bridge
#

if you’re using GUI

green onyx
#

^

#

if not, run futurerestore.exe --exit-recovery

ember ridge
#

omg haha i was downloading the 14.4 ipsw now. THANK YOU once again šŸ™‚

green onyx
#

np

#

delete the ipsw

#

for 14.4

ember ridge
#

roger that

valid adder
#

@green onyx @zealous bridge did u find it

green onyx
#

find what

valid adder
#

the change we made

green onyx
#

nah, u guys are so secretive

#

deadass, barely any clues

valid adder
#

look at the bar

green onyx
#

im looking at ur repos

valid adder
#

look at the bar in fr

zealous bridge
#

the bar?

ember ridge
#

thank you kind folks, seems to be rebooting fine now šŸ™ . i'll dig into my apnonce mismatch issue and give it another go

green onyx
zealous bridge
#

i saw that

green onyx
#

but thats 2 days ago