#futurerestore-help
1 messages · Page 68 of 1
What do you mean?
onboard blobs
@lilac wren
cool trick
@green flower I said dimentio
wait I don't understand what you did haha
@lilac wren partialZibBrowser to download components without downloading the entire ipsw
so I got the build manifest
then I verified my shsh blob
yes
and it's directly from apple?
I use 
then run the commands by hand over ssh @covert lily
so that script is useless of me ;-;
I don't have a Mac or a Hackintosh
Assumedly I need to ssh into a mac...
oh
you use arch
that's what u mean
yeh
all you need is to replace the entitlements of dd
and run the dd command on rdisk1
over ssh
yes it worked lmao
so that generated blob is for 14.4.1?
cos it's running 14.3 currently
yes it's valid
screenshot commands u ran
read ip
echo "Device's IP address is ${ip}"
echo "[*] Assuming given IP to be correct, if connecting to the device fails ensure you entered the IP correctly and have OpenSSh installed..."
echo "[!] Please enter the device's root password (Default is 'alpine')..."
ssh root@${ip} "cat /dev/rdisk1 | dd of=dump.raw bs=256 count=$((0x4000))" &> /dev/null
echo "[!] Dumped onboard SHSH to device, about to copy to this machine..."
echo "[!] Please enter the device's root password again (Default is 'alpine')..."
scp root@${ip}:dump.raw dump.raw &> /dev/null
if test -f "dump.raw"; then
echo ""
else
echo "[#] Error: Failed to to copy 'dump.raw' from device to local machine..."
exit
fi
echo "[!] Copied dump.raw to this machine, about to convert to SHSH..."
img4tool --convert -s dumped.shsh dump.raw &> /dev/null
if img4tool -s dumped.shsh | grep -q 'failed'; then
echo "[#] Error: Failed to create SHSH from 'dump.raw'..."
exit
fi
ecid=$(img4tool -s dumped.shsh | grep "ECID" | cut -c13-)
mv dumped.shsh ${ecid}.dumped.shsh # Allows multiple devices to be dumped as each dump/converted SHSH will have a filename that links the SHSH to the device
generator=$(cat ${ecid}.dumped.shsh | grep "<string>0x" | cut -c10-27)
echo "[!] SHSH should be dumped successfully at '${ecid}.dumped.shsh' (The number in the filename is your devices ECID)!"
echo "[!] Your Generator for the dumped SHSH is: ${generator}"
echo "[@] Written by Matty (@mosk_i) - Enjoy!"
echo ""```
I checked w 1Conan's blob checker
it works fine
iPad Pro 9.7 inch cellular
Gimme a few minutes.....
@valid adder when you do an update OTA, your phone generates an AP Nonce in DFU mode right? (is the terminology right? your phone enters DFU and communicates with Apple while on the Apple logo?) Otherwise, is it generating its ap nonce while "awake"?
same thing with an iTunes update/restore without recovery mode first
no
ota:
ota sets nvram to a generator, requests a new apnonce using the new generator, saves a tss apticket, boots into restore mode, since nonce is set it works
we just hijacked the ota method to use ticket replay attack

ah, so it does generate an ap nonce while awake?
IOAESAccelerator
is this what we already do for normal FR though
yes
fr is replay attack
separt is literally sep anti replay technology
hence why we need latest sep
why doesn't base iOS have this art thing
Does futurerestore's built in --exit-recovery argument work on iOS 14?
why not, we're literally downgrading iOS since it doesn't have it right
Anyone available to help with the recent futurerestore GUI that was released?
wait actually don't answer that, don't want to bother you unless I have an essential question haha
idk the guy who made it is here somewhere

Lmho
@leaden oar you do realize that the gui exists so people wont need help...
that too
It won’t open on my windows comp that’s why I’m here. It just doesn’t seem to open
I’ve tried the univ version too
did you
Sorry
double click it
That’s what I do but then nothing happens
what version of windows
I tried opening it through command prompt as well but nothing seems to happen. Windows 7
if you still have the universal, open terminal and type java -jar [drag universal build here]
That’s what I tried and nothing happens I’m not sure if I’m missing something else that I may need perhaps?
you need java
try java --version
Are there any specific requirements. My computer is kind of old
you need java :P, do java --version to see if it's installed
and what version is installed
??? I need to own Windows 7 to install it? what flummery is this
It says could not create the java virtual machine a fatal exception has occurred
when you did --version? lol what
Yeah :/
when did you get java
are you sure it's installed
you may want to uninstall it and get it again
Yesterday I downloaded the most recent version
👌
and lmk
windows 10 spoiled you hasn't it
That worked it says 1.8.0_281
I bought a windows 10 license ok
I bought one too
i activated it by batch file like 5 years ago

not gonna reinstall to un-pirate windows

that is the latest version... if you do java -jar [drag .jar here] it just closes the process with no error or anything? or it just stays stuck at the next line?
i have 11.0.10 
It saying something about an exception in thread “main”
ok then it's my fault :(
paste the exception here if you can
I assume it's checking for windows dark mode
but windows 7 doesnt have it

that has to be fake right
nope
lol what
is that a cheese grater

hackintosh
wow
I can get 50 fps :)
well at least you can have render distance 64 or something
and only use 10 gbs of ram
ah
which never in stock
I just realized that its 90 fps at 4k
forgot I have a 4k monitor
idek what to say lol, minecraft looks good
I spent way too much money in 2020
im cooler i have Intel Iris Plus Graphics 655 1536 MB
We hold these truths to be self-evident, that all men are created equal, that they are endowed by their Creator with certain unalienable Rights, that among these are Life, Liberty and the pursuit of Happiness.--That to secure these rights, Governments are instituted among Men, deriving their just powers from the consent of the governed, --That whenever any Form of Government becomes destructive of these ends, it is the Right of the People to alter or to abolish it, and to institute new Government, laying its foundation on such principles and organizing its powers in such form, as to them shall seem most likely to effect their Safety and Happiness. Prudence, indeed, will dictate that Governments long established should not be changed for light and transient causes; and accordingly all experience hath shewn, that mankind are more disposed to suffer, while evils are sufferable, than to right themselves by abolishing the forms to which they are accustomed. But when a long train of abuses and usurpations, pursuing invariably the same Object evinces a design to reduce them under absolute Despotism, it is their right, it is their duty, to throw off such Government, and to provide new Guards for their future security.--Such has been the patient sufferance of these Colonies; and such is now the necessity which constrains them to alter their former Systems of Government. The history of the present King of Great Britain is a history of repeated injuries and usurpations, all having in direct object the establishment of an absolute Tyranny over these States. To prove this, let Facts be submitted to a candid world.
@lilac wren 
wow
@covert lily what board config
I’m sorry it’s not your fault it’s probably cause my system is so old. Exception in thread “main” com.sun.jna.platform.win32.Win32Exception: the handle is invalid. At com.sun.jna.platform.win32.Advapi32Util.registryValueExistsAdvapi32Util.java:521 at MainMenu.getSystemThemeMainmenu.java:509 at MainMenu.mainMainMenu.java:446 at Main.mainMain.java:3
ok will add a checker, if you're under windows 10 don't try for dark mode
Hopefully that’s all correct
not your fault
Thanks for just making me feel like I’m not crazy lol.
for what?
bc windows 7 gets mad if you look for windows 10 registries

You rock!
you as well :)
J128AP
i think it's dir
ty it worked :)
told me unknown command idk
its an alias
I’ll try it out and let you know how it goes!
thank you
Thank you! 🙏
nah its good
soon, busy with school but I have @valid adder's request for auto sent logs almost done
are u in post secondary?
after high school
I'm in my second year of HS
@lilac wren I will do something cool for mac
It opened for me ! Now I can try and get to 14.3 thanks alot. Pretty awesome for a 16 year old lol.
oh cool!! we're buddies
ah third then
👀 whats that
can I use openjdk instead of oracle @lilac wren
awesome! and ty ig haha
you can try idk if it works
wdym O_O
trying
no
ok then go ahead :)
gradle shadowjar
thanks
np
whats -all vs normal
includes dependencies, I use a few libraries
have to parse json, extract tar xz, extract zip, etc. too boring to do manually
Question, why does iOS keep its generator the same in nvram, it doesn't ever reboot during update does it? or when exactly
it shuts off to go to dfu mode i think, and then reboots once after it receives filesystem, but does it need ap nonce here?
how do u add a dep
build.gradle, under dependencies
yeh but looking for more info
wdym, if you find a dependency online they'll give you the group, name, and version
if it's on a repo
if it's manual, I just use intellij to do it for me under project settings > modules > dependencies
intellij is probably the best ide for java
i love intellij
did you know
eclipse sucks
IntelliJ has a major update every quarter, including many minor updates and plugin support? One of its most recent updates gives it full native github support, including repositories and pull requests and branches without writing a single line of git. By the way, did you know you can .gitignore files with a simple right click? no need to go searching for your file. Did I mention that the software can automatically determine each file's types by simply adding a new file? It automatically parses and colors many languages, not just limited to Java. Did you now that the Ultimate version includes code duplication warnings, so that you can find out how to make your code more efficient? Really handy for when your Rpi has a bad cpu :(. By the way, it's possible to simply debug code by spamming alt-tab. This will give you a list of errors and quick fixes for all of them. Also, IntelliJ has smart code replacement, and will automatically suggest improvements such as swapping if else chains with a switch statement. Also, you can easily import other libraries per project with less than 6 clicks. By the way, you can import methods by clicking the tab key after writing an object / element. Never have to type "import" again! Also, IntelliJ smartly determines run time errors such as code that is never reachable, return statements that are unnecessary, and even variables that will always be null!
nice
yes haha
@valid adder on ≤A11, is ap nonce created by just hasing the generator with sha 384? or is there more to it
imagine using eclipse instead of intellij
you are not very intellijent if you did that
eclipse is utter trash
true
jetbrains in general is cool
ye, their products are nice
>>> hashlib.sha384(int.to_bytes(0x1111111111111111, 8, 'little')).hexdigest()
'27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138aed82a875bc0f0c8e6a6c487fadf074086'
seems like that's all
ty! :)
@lilac wren same way for all devices except a9 and lower is sha 1 a10 and later is sha384 shortented to 64 characters starting in a12, after getting the apnonce hash, it is entangled
ah ok, ty both
@celest basalt add a substring 64 please
oh you're right
27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138aed82a875bc0f0c8e6a6c487fadf074086
27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae
checked against tsssaver
>>> hashlib.sha384(int.to_bytes(0x1111111111111111, 8, 'little')).hexdigest()[:64]
'27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae'
I get miss match
set generator with [[dimentio]]
is this valid hex, i need an example of a random generator 0xb6d96a54d2a8bc37
don't know how it really works lol, is it valid as long as each digit is [0-9] or [a-e]
0-9 a-f
oh ty
Hey gang. If I shaved blobs while non-JB on an A13 11PM using blobsaver (and the .shsh2 files are valid across two diff checking tools), am I shit out of luck to use future restore? I keep getting the ApNonce does not match APTicket nonce error. I'm currently JB'd on 13.7 but no idea what the generator was when I originally saved the blobs
Out of luck
damnnit. I should have used TSSSaver .. ugh
You can only save blobs while jailbroken, otherwise you can never recreate the AP nonce that blobsaver read
TSS Saver is nice because it automatically sets your generator when you save blobs: therefore you will always know the generator that creates your ap nonce
but still requires JB correct?
Yes
thanks Froggy
oh well. at least I finally have the 13.7 JB I've been waiting ages for !
very good to know!
Hey guys can someone help me 🙂
I got an Iphone XR on ios 14.4 and i dont get it how can i reset this to 14.3
is there a way that i can get a SHSH Bubble from ios 14.3 for my device
Unfortunately not, you can only save blobs while jailbroken and 14.4 is not a jailbreakable firmware. You also can only save blobs while Apple is signing the version, and Apple is not signing 14.3 anymore
if you were on 14.3 or lower you could save onboard blobs, but if you're on 14.4 and never saved blobs for that device before you basically can't
so unfortunately i really cant do anything
i start saving now bloobs on 14.4 and 14.4.1
those blobs will be useless once your device reboots
need a jailbreak to save long term usable blobs, just stay on 14.4 and don't update
Can we use 14.4 SEP and baseband?
So I have an A12, and kad#no idea 14+ was jailbreakable until a week after they stopped signing those firmwares. On 13.5 and didn’t save any blobs. There’s absolutely nothing I can do?
You like me we can do nothing 🙂
nope except save blobs for 14.4 and wait
Damn I guess I’ll eat this L
oh
For future reference, I just hashed online with SHA 384, 0x1111, and got 27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138aed82a875bc0f0c8e6a6c487fadf074086
hol up
not sure how long i substring it to
i have A11
oh yay :) can you tell me
yep thats the apnonce
for 0x1111
the entire thing?
uh
isn't it cut off at 64 digits or nah
shsh.host doesnt give the entire thing
27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae
this is all i get
maybe
np
question, there are 2 probable scenarios for ap ticket - nonce mismatch right
- didn't set generator to match the blob's generator
- saved blobs with random generator = random ap nonce
I'm not missing a scenario right?
not asking you haha
I mean in general
ah i see
like for people who come here for help
nobody came here with another scenario? all people who got this error were either 1 or 2?
ooh yeah I'll add that
@topaz solar mind explaining the bug that happened on Odyssey here? https://twitter.com/TSSSaver/status/1331814820174184448
Was it that on Odyssey, dimentio read the wrong generator or what, it seems kind of vague
otherwise it reads an invalid generator and nonce
so it just saved with no generator and no nonce?
and is this bug still present
ngl kinda strange that its A12+
well bc a11 pairs are known
so who cares if there is no ap nonce
I think it saves with 0x1111 and the matching ap nonce, doesn't even read from device *except for ECID
could be wrong
There's an iPhone 12 mini??
is this just the renamed XR
wait no it's different. off topic anyways I'm just not caught up
successfully went from 13.5 to 14.3 on 11 pro max thanks for the guides
Yay I'm first post on r/jailbreak rn
hey guys can someone help me, i'm trying to futurerestore my iPhone 11 pro (13.5) to ios 14.3 on my windows pc but when i run the command it fails and says
Extracting iBEC.d431.RELEASE.im4p...
Personalizing IMG4 component iBEC...
Sending iBEC (1709144 bytes)...
ERROR: Unable to send iBEC component: Unable to find device
ERROR: Unable to send iBEC to device.
Cleaning up...
[exception]:
what=ERROR: Unable to send iBEC
code=64684049
line=987
file=futurerestore.cpp
commit count=194:
commit sha =0ab9df3209ee599f581532d05d331e6abe0f53f3:
Done: restoring failed!
iphone xs max 13.5 -> 14.3 w/ blobs saved properly. Found "<key>updateInstall</key>" in the blob, so I should be fine to use the update argument in the gui? Trying to avoid a restore because I'm lazy...
I'd wait a bit longer
There's a fix in the pin
wait a bit longer for what exactly?
I do have a mac I could use
I'm not really in a rush, so I may just wait a bit. If Apple releases an IOS with an incompatible SEP/Baseband, I'd be outta luck for 14.3 though, right?
thanks!
Yes, but the likeliness of that happening is less than zero seeing as 14.5 beta is compatible
There’s a tag now josh
Sounds good. should i be keeping an eye on a certain fork of futurerestore or is the official fine. (as far as updates go for stability)
Who's Josh
Mr tv
Gunna go unplug myself..
!t ibec
Fix for error code 3, 8, and 10 aka the iBEC error in futurerestore
- Uninstall all apple drivers via device manager.
- Uninstall all apple products including itunes and apple device support stuff via control panel uninstall a program. MAKE SURE TO CHECK UNINSTALL DRIVER WHEN UNINSTALLING
- Unplug and replug device.
- Check device manager for more apple stuff and uninstall if so with same driver checkbox.
- Disconnect device.
- Install itunes64 exe from apple.com itself, no windows store bullshit. (It will be labeled windows 7, 8 but install it on windows 10, it works fine)
- Plug in device in recovery.
- iboot (recovery) driver should show up under usb in device manager. Uninstall it and check the with software box.
- Run futurerestore.
- Unplug and replug your device.
- Run futurerestore again
@lavish rock
How was it ever an issue to begin with? ibec never failed to send on prev versions
Yes it did
Not to my experience
I wrote my original fix message 2.5 years ago
It’s a driver issue
Nothing we can do about it without our own cert and driver
If it's a driver issue, yet iOS is able to restore via iTunes.. How does that work?
I'm glad that mac doesn't have drivers
I think, maybe FR can retry a set number of times to send ibec before calling it quits on the first
Like build a threshold
How's reliability on other devices?
@lilac wren that was fantastic, very comprehensive, but you didn’t include too many technical terms so that someone who has been educated for at least 6 years would understand most of what you’re trying to say.
all about balance
you do realize that it literally does not matter
it doesn't matter what the name is
what the path is
what the folder is
that is for convenience
Isnt name limited to a set # of characters?
that applies to all forms of applications
ah okay it says get a blob for target version but then it also says to get one from ipsw does the target version mean the version im on?
im on ios 13.5 and wanna go to 14.3 iphone 11
You need:
- Previously saved blob for the version you want to go to
- Ipsw for the version you want to return to
- SEP/Baseband/Build Manifest from the ipsw of the iOS version currently signed (latest iOS version usually)
If you’re manually specifying I’m sure all this is needed iirc. If you’re using latest flags some might not be needed
it definitely failed on 245
Should I futurerestore my iPhone 11 Pro Max from 13.5 to 14.x yet or hold out longer?
i have no clue whatsoever what i am doing. literately first time using or trying to do this without just doing straight through iTunes like back in the day. i swear you were able to restore to a version even without it being sign by apple through iTunes, like i was on like ios 9 or 10 and was able to go to the latest version which at the time was 11 or 12 i am forgetting right now. (i mean i have been jailbreaking since like the 3rd gen ipod) is there a updated youtube video or something?
its a little bare bones for me atleast to kinda understand. like i dont know certain terms etc and feel like there isnt much explanation on certain things
I dont think so
@valid adder its stuck
halfway on the iphone
on the futurestore it says
Unknown operation (80)
Unknown data request 'PersonalizedData' received
im gonna try again
@valid adder same stuff
im gonna try again but with fr 194
why did you not use 194????
thank yoy so much
hi
i hvae problem with futurestore tool
i have iphone 11 promax with 13.5
and i have 14.3 shsh blobs
any help please?
i did it before the futurestore process
use [[dimentio]] to set the generator
ok i will try it
wait what
use dimetnio
great man 🙂
poggers
what dose it mean ?

so on the gui page, at the end it says "exit recovery". Do i have to put the device inm recovery manually or does the tool do it itself?
FutureRestore should do it itself
okay thank you
so i dont have to do any additional steps that arent in the little guide?
yes
Do set your generator
okay thx
i used u0, didnt it do it automatically to 0x111?
i have blobs with 0x111
should be fine then right?
it sometimes doesn't set your generator, I'd use dimentio to ensure it's set or to set it yourself
np
yes you should be
nah haha I had no clue when I was restoring as well
np
guess ill attempt it then later
nice alright
any idea? baseband firmware not being signed 😦 , blobs all have
you're trying to use unsigned bbfw? you can use --latest rn

Hi!!! Can my XR restore from 14.4 to 14.3 with shsh saving?
no
Not at all
Oh tks :(((((
uhm what do i have to do in newterm to set generator using dimentio?
su
alpine
dimentio (generator)
ex. dimentio 0x1111111111111111
just type that in? so like su enter alpine enter and so on?
yes
okay thanks a lot
np
thank you! I tried to write the post with a "know nothing" POV, kinda like me 2 weeks ago. It'd be nice to time travel and tell myself this stuff haha
okay think dimentio worked thanks again
i need some 😫 help here, i tried, shown this
have you set your generator on your device?
I told the dev to add a warning about generator...
bc idiots save blobs with blobsaver even on A14 unjailbroken and they think they're all good
honestly that was me like 5 weeks ago
i had no clue what a generator was
glad tss saver did it all for me
blobsaver definitely needs to add a warning if you don't specify generator
meanwhile me: updated my XR from 13.5 jailbroken to 14.0 beta (but at least I was 100% aware what I was doing and that I'd be waiting for months with no way back)
why though lol
bc I wanted to use some iOS 14 features that just didn't work that well on 13
hiding apps in app library is a very nice thing for me even though the actual app library is shit... tweaks like HideYourApps cause the hidden icons to be scattered across the home screen when in safe mode/jailed state
ah true
anyway once I jumped to 14 I couldn't stop updating bc I was getting impatient waiting for a JB so I rather chose to have new iOS features and bugfixes... so I replaced my XR with an X on 14.3 
hm
but if I hadn't updated to iOS 14 then Icon Themer probably wouldn't be a thing (though Apple has effectively killed it off in 14.5)
Dunno if I'd agree with what you did haha but whatever works best for you
I didn't make any money from it or anything but it went viral on tiktok etc.
not like I care much about clout from random tiktok users who barely know how to use their phone but it's still kinda cool
yeah but a shortcut for unjailbroken devices
it creates webclips
oh that's cool
i feel like it existed though
I remember using it with url schemes on like iOS 12
well, in a shitty way yes
not icon themer, just the thing in general
with this http://icustom.tooliphone.net
yeah but before 14.0 that always opened a blank page before the target app
I saw the webclip docs mentioned TargetApplicationBundleIdentifier added in 14.0
which got rid of that redirect
also theming with Shortcuts on pre-14.3 always opened the Shortcuts app prior to opening the actual app
oh that's cool, apple just accepting theming now lol
even on 14.3+ they insist on showing a completion banner every time you open a shortcut icon
well not really
first problem: it never worked with system apps (except for 14.3b1-b2)
if the bundleid starts with com.apple. it's ignored
in 14.5 they actually killed it off
the property is now ignored for all apps, not just system apps
ah I see
unless the profile is installed via MDM
wow so they specifically said they dont want theming
well, in 14.3 they made the old school Shortcuts way a tiny bit better like I said
before it opened the Shortcuts app and then the target app
now it opens the app immediately but shows a completion banner on top of the screen for a few seconds
Create a single-step shortcut with the Open App action, then add the shortcut to the Home screen
So it's still possible but you have to have like 40 shortcuts now?
yeah
can't you like turn off "show when run" or no
and the annoying banner whenever you open one
nah that's not an option for those
oh bc it's a webclip?
Wait so is it a profile with webclips, or a shortcut that opens an app
Icon Themer creates a profile with webclips
and those show a banner...from the shortcuts app? lol why
Shortcuts itself doesn't install profiles but they're still technically webclips, just a different kind
those don't, no
oh ok
but on 14.5+ the target app thing doesn't work anymore so it's back to showing a blank page before the target app
also on 14.0-14.4.1 you didn't even need a URL scheme for webclips if you had the bundle ID
hm that's silly of them
technically, both methods of theming are webclips, but the plist keys make the difference
3 important keys: ApplicationBundleIdentifier, ShortcutIdentifier, URL
if #1 is present it launches the app directly without a redirect
except in 14.5+?
if #2 is present that makes it show a banner on 14.3 and above
and #3 is just the URL
for shortcut icons, the URL is always like shortcuts://run-shortcut
ah
so a webclip is not just the URL, you're saying it also has ApplicationBundleIdentifier and ShortcutIdentifier
what if it has an app as the AppBundleId but also a url for some other app, what would it do in that case
Shortcuts
14.0-14.2: bundleid is always com.apple.shortcuts and url is shortcuts://run-shortcut/... (opens shortcuts then target app)
14.3-14.5: bundleid is target app, shortcutidentifier is set, url is still shortcuts://run-shortcut/... (opens app directly with banner)
Icon Themer
14.0-14.4.1: bundleid is the target app, no shortcutidentifier, optionally a url (opens app directly, no banner)
14.5: no bundleid or shortcutidentifier, just a url (opens blank page then target app/url)
then it makes the specified app open that URL
oh
%hook VCVoiceShortcutClient
-(void)showSingleStepCompletionForWebClip:(id)arg1 completion:(/*^block*/id)arg2 {
return;
}
this gets rid of the banner btw
but it has to be a tweak
yeah
aw
and then it's pretty useless
yeah lol
I do have an idea though
probably stupid question for a dev, but how did you know you needed to hook specifically VCVoiceShortcutClient and showSingleStepCompletionForWebClip
pretty sure you can just edit an iTunes backup to change the files in /var/mobile/Library/WebClips
like where does it say that, or do you just look for like "shortcuts" in headers or something
I ran strings on dyld_shared_cache and grepped for shortcut/workflow, but this is a better solution https://developer.limneos.net/?ios=14.4
i save it on tss save blob..
any idea how to generate on my device?
is the bundle ID still workflow's
nah on 14.3+ it's the actual app bundle ID
this is getting off topic so we could move to DMs or something
if you saved with tss saver your generator is probably 0x1111
set it with dimentio
you mean this right?
how to find device generator? you mean this https://shsh.host/??
no, use [[dimentio]]
rip i got exposed
😭
that's what matters
is this support window or mac?
its on the device itself
You can get it from your package manager (Cydia, Sileo etc)
and you run it using a terminal on this device like NewTerm
the app right
not the website
most people saved using the website so
yeah ik
yeah people should just save the generator too
on some tutorials it says its optional but imo it should be necessary
lol
ah but there was a small period of time where it was bugged right?
dimentio wouldve still worked
i think
does coolstar even know that its broken?
oh
I'll edit the post to make it correcter
that was the probably the best solution without an immediate fix anyway
Odyssey was (is?) bugged and did not allow tools that used dimentio to read generator (and thus, AP Nonce) correctly, leading to invalid blobs being saved. Luckily, blob saving programs were able to work around this quickly. Although, I believe this would just cause your blobs to be invalid with no AP Nonce, not sure if it would cause AP Nonce - AP Ticket mismatch.
wdym wrong?
like it was something random or?
I just read this tweet from a while ago
https://twitter.com/TSSSaver/status/1331811331217846273
if you're on odyssey please set your generator using dimentio in terminal before saving. (otherwise it reads an invalid generator and nonce)
like
dimentio 0x1111111111111111
dimentio is already installed and is a dependency of the app
By invalid generator and nonce though
do you mean it's random or it doesn't exist
hm ok
and also has a wrong ap nonce that doesn't match the random generator?
i don't think that still applies
imagine they were all valid
i just use system info 
even if reading didnt work setting shouldve
it set a random generator but they worked
probably
so as long as they set before saving they should be fine

lol why

so if i change my bootnonce in system info to 0x111 and then save blobs will it save those blobs with that generator?
system info saves the current generator anyway
so you dont even have to set tbh
0x4206942069... is better
oh since when
missed a good opportunity there smh
.
oh funny you’re talking about it here
unc0ver moment i guess
lol
hey guys! i used futurerestore to restore from 13.5 to 14.2 on my 11 pro max successfully a couple of days ago. I restored my data using iTunes but i fucked up when it comes to WhatsApp and lost all its data (message history, media, etc.). I really need to get it back, is it possible to restore backup again from iTunes without having to update to 14.4? And if not, is it possible to run FR AGAIN from 14.2 to 14.2 using blobs?
if you have a 14.2 backup just use it again
and im pretty sure whatsapp has icloud backup support
I think you can turn iCloud on for whatsapp right? check settings, iCloud.
so you can just download it from there if you have one
unfortunately icloud backups were disabled and i hadn't noticed! 😦
you can restore backup from itunes
what do you mean use it again? just plug in the iphone to itunes and restore from backup?
yep
wow!
as long as you made the backup before 14.2
yeah on 13.5
if not you need to edit the backup
i don't
then thats fine
and it wipes my phone right?
no
wait wait
well
if you're jailbroken
im jailbroken on unc0ver
just move the whatsapp data from the backup to your phone
iMazing can easily get app data
true
and use filza I think to just put it back
yeah I was able to view the data on iMazing but I can only export them as PDF, excel, etc.
imazing has whatsapp support
I mean the app data
you need to purchase a license to restore a backup
go to filesystem, app data or something
im going to look rn, thought filesystem was free
ok ill plug in my phone to imazing and check
but you cant easily restore that to whatsapp
yes that's what i used to do on Android
tried that it messes some things up
best option is just to restore the backup
it'll wipe user data but it wont force you to update
the ios filesystem is intact
i honestly had no idea that was possible, someone told me that i'd need to access Setup Assistant first, which is only achievable by formatting everything
that's awesome! I've only had "new" data for a day so i don't really care about it, I just need whatsapp back
yeah you can restore an itunes backup at any point
final thing
is it possible to backup and restore apps without having to redownload them every time?
yeah i have it but never used it
so i take backups then move them to PC?
yeah its stored locally too
since my data is getting wiped after restoring itunes backup
ok
thank you so much guys!
np, make sure to turn icloud on
Im going through the WhatsApp data rn and don't see anything pertaining to chats :(
i was only able to view the chats on imazing, but merely as an explorer
group.net.whatsapp.Whatsapp.shared/ChatStorage.sqlite @lilac wren
there are "whatsapp transfer" apps floating around but they all have the exact same GUI (with minor differences) and they seem sketchy as heck
can they just copy the whole appgroup thing though?
yeah but it causes some problems
do you think i should try that before the itunes restore thing/
yes
where can i find that in the itunes backup? what's the directory?
its in iMazing
if you explore your backup's filesystem
theres a folder called "App Groups"
is that included in Appsync Unified?
expand that and you should see it
nope
its called "Apple File Conduit 2" in Cydia
great! installing it now
you can press the "copy to pc" button and just copy it to your desktop or something, make sure you copy the whole folder
you can use imazing itself to copy the files over to your device
ok
i have the itunes backup on a different disk drive so i need to transfer it to its original directory first i believe
you dont have to
on imazing you can go to edit > preferences
then to the backup tab
then you can add paths to where your backups are stored
should look something like that just press the + sign and browse for the path
Shared > group.net.whatsapp.Whatsapp.shared
luckily there's a free alternative
but im not allowed to post the name here for some reason
😄
if you're not allowed to post the name its probably piracy..
on iMazing it lets you do 10 transfers for free
need to do more than 10 files
when i tried exporting my chats as PDF, it only exported like 10 of them
images arent part of the .sqlite
oh the folder doesn't count as a file :/
haha
lol
transferring to desktop
next step would be to access my phone's file system and copy/overwrite the folder right?
yeah
you've no idea how happy i'd be if it works out.. i'm one of those lazy people who keep everything on whatsapp (contacts, media, important messages, notes)
i just realised this is #futurerestore-help
lol we've been off-topic
for so long
yeah my bad!
go to #genius-bar
ok
how can i insert this application? any guide line?
When I try and open it, cmd blinks in then out and nothing else happens, im on windows
why are you opening futurerestore
lol
lol nice
thats kinda cool
im famous 😎
true
Lmho
💯
lol made an account just for that
yeah ig, it was sign in with google though
so took 5 seconds
besides it's my coocoofroggy email not my actual one
ah thats good
Any checkra1n users here
Can you checkra1n to like SSH only or something
Or some way to set nonce without the full jailbreak
dont think so
if i get this what am i supposed to set with dimentio? 0x12644c2ee1802e right?
no
ecid is your device id
not your generator
looks like you dont have a generator in your blob
F
were you jbroken with unc0ver or odyssey at the time of saving blobs
unc0ver
i got error: unable to place device into restore mode
run again
at least i didnt get the apnonce error i was getting before 😆
running again
unable to send ibec, i thought i fixed that error downloading that previous version of itunes
!t ibec
Fix for error code 3, 8, and 10 aka the iBEC error in futurerestore
- Uninstall all apple drivers via device manager.
- Uninstall all apple products including itunes and apple device support stuff via control panel uninstall a program. MAKE SURE TO CHECK UNINSTALL DRIVER WHEN UNINSTALLING
- Unplug and replug device.
- Check device manager for more apple stuff and uninstall if so with same driver checkbox.
- Disconnect device.
- Install itunes64 exe from apple.com itself, no windows store bullshit. (It will be labeled windows 7, 8 but install it on windows 10, it works fine)
- Plug in device in recovery.
- iboot (recovery) driver should show up under usb in device manager. Uninstall it and check the with software box.
- Run futurerestore.
- Unplug and replug your device.
- Run futurerestore again
follow this
But how I set that generator in terminal
type that command in
Just type that generator and hit enter
yes along with "dimentio"
I’m sorry but I don’t understand
in newterm just become root by typing 'su' the password is alpine
then run that command
Excuse me. Why does this error occur?
Are you restoring to 14.2
Yeah
14.2 restores are broken
Why?
Can I restore to version 14.1?
Ok, thanks
Do you recommend 14.4 or 14.4.1?
Can those versions be jailbroken with checkra1n?
iPhone X
both of them can
14.4 is better because its a lower version though the two are basically the same
I understand. Thanks a lot
👍
Yw
ty Cryptic
the crosspostingg
rip
Hi all, has anyone successfully futurerestored an iphone 12 mini? I have a spare device that I just want to try to futurerestore to the 14.4 but am unable to, I keep getting the following error when trying to request a baseband ticket. My command to run futurerestore is ./futurerestore-v194 -d -t blob.shsh2 --latest-sep --latest-baseband --latest-sep /tmp/iPhone13,1_14.4_18D52_Restore.ipsw
[TSSR] User specified to request only a Baseband ticket.
[TSSR] Found undocumented baseband
<snip>
Request URL set to https://gs.apple.com/TSS/controller?action=2
TSS server returned: STATUS=162&MESSAGE=An internal error occurred.
ERROR: tss_send_request: Unhandled status code 162
yes and why would u futurerestore to 14.4
I just wanted to make sure that my custom compiled tsschecker is working on a device that isn't going to be jailbroken
I dont have blobs for other versions so I can't check any other version besides 14.4 or 14.4.1
Have you seen the 162 error code before?
yeah, I'm using the macOS precompiled version

./futurerestore-v194
Version: 0ab9df3209ee599f581532d05d331e6abe0f53f3 - 194
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f
libipatcher version: 0.82-0b2f79ff0917ef9b8a92475d93d9466b23fc2322
Odysseus for 32-bit support: yes
Odysseus for 64-bit support: yes
Did i get the wrong binary?
@unborn sonnet the problem is your compiled tsschecker most probably
let me try using a blob from 1conan
mmm youre right, using a blob from 1conan seems to work
thanks! gotta see what went wrong with my local tsschecker
does anyone know of an up to date prebuilt tsscheck for macOS? I have a script to automatically pull the latest blob but I dont know of one that is built for the newest devices / firmwares
actually odd i just resaved the blob and it seems to be happy too
i guess something just went wrong with the blob i saved before
can i downgrade to ios 14.2 on an iphone 6s plus?
if you have blobs for it
what is blobs?
To save blobs on a jailbroken device, install TSS Saver from https://repo.1conan.com/, then open it and press Save Blobs. (If you're using unc0ver on iOS 14, you'll have to update to 6.1.0 or newer and install libkrw from Cydia before TSS Saver will work.)
For A11 and lower, you can also save blobs without jailbreak on https://tsssaver.1conan.com/v2/ by entering your ECID which you can get from iTunes by clicking the serial number twice. A12 and above requires a jailbreak to start saving blobs.
oof
hmm will we get in the future a feature to create blobs?
?
u can already save blobs
Please rewrite the question
so at the moment you just can save them but dont create older one
Grammar not found
because u cant
sry my english is not the best
Bro if we could save older ones why would everyone be on iOS 14 @naive prism
seeing that ur on 14.4, even if u had 14.3 blobs, u cant downgrade
so the qeustion can we see in the future a feature to create older blobs for older versions
no
In the future!!!
^
yeah for example a feature to create blobs for 14.1
can we get this feature in the future?
No!
wdym, ur suppose to save blobs when its signed
if u didnt, thats an L
but 14.1 is not signed anymore
It’s not signed
You have to saved blobs when the iOS is still being signed @naive prism
you dont will go baack to the version anytime because they never get signed again
Exactly
user
Derbaday is typing...
