futurerestore-help

[lilac wren]

is it an iTunes one?

[willow cove]

same issue with that .exe

[zinc moon]

Yea

[lilac wren]

go to finder, Cmd shift G, paste this ~/Library/Application Support/MobileSync/Backup

[zinc moon]

Alright

[lilac wren]

can you drag the exe into command prompt and hit enter? see what happens

[lilac wren]

ok then go to your backup

should be the folder with that phone's UDID

[zinc moon]

Lemme find it first

[lilac wren]

ok

[willow cove]

when i put the exe in cmd it shows the software options

[lilac wren]

sort by date modified if you want

[lilac wren]

ok so go to the GUI > Settings > Preview command and turn it on

then click Start FutureRestore and click "Copy only"

[zinc moon]

found it

what now

[lilac wren]

then paste that into cmd prompt, press enter, and futurerestore will start

[lilac wren]

open info.plist and change Unique Identifier and Target Identifier to something else

probably has to be valid though

so change the last number

/letter

[zinc moon]

like what?

oh

[lilac wren]

like change 00008020-001A6C89218A003E to 00008020-001A6C89218A003F

make sure it's still valid hex though, don't change F to G

[willow cove]

as soon as i click start future restore i get the error, nothing about copy

[lilac wren]

ah. my fault, one second

[zinc moon]

ok actually ill have to charge the 7 now

brb

[lilac wren]

oh ok nw

[zinc moon]

i have no idea

where to change stuff

[lilac wren]

can you open it with a plist editor

do you have xcode

actually it's really big

Cmd F for <key>Unique Identifier</key>

change the value

same for <key>Target Identifier</key>

then save

[zinc moon]

Didn’t find those, I’ll try it in a bit since my mom wants the laptop

@green onyx I got my dads iPhone 8 and it’s on 14.4, is there a way for me to save internal blobs and make them non OTA

He def updated this through OTA

[willow cove]

@lilac wren any idea what it could be?

[lilac wren]

idk why the exe isn't working, but I'm preparing a build for you that should let you preview command. gimme like 10 minutes

[willow cove]

Thank You so much

[lilac wren]

np

[green onyx]

no

[celest basalt]

you can save the onboard OTA blobs and use them later with pwndfu though

[lilac wren]

can you try this? https://github.com/CoocooFroggy/FutureRestore-GUI/releases/tag/v1.73

[willow cove]

Sure

ok i have command

[lilac wren]

awesome, so now you can paste that into recovery

[willow cove]

never done that before, how do i do it?

[lilac wren]

sorry idk why I said into recovery

I mean open command prompt

and then paste the command there

so click windows logo at the bottom left and search for "cmd" then click enter

Paste the command into the terminal, and then click enter to start the restore process

[willow cove]

getting an error because my username has a space in it, is there a way around that?

[green onyx]

https://github.com/CoocooFroggy/FutureRestore-GUI/releases/tag/v1.73

POG

NEW UPDATE

poggers

[lilac wren]

Yes, can you surround your name with quotes (") any time you see it

[lilac wren]

haha it's just a simple fix for an oversight

[green onyx]

lol

still pog

[lilac wren]

but I added CI so I never even booted up a VM to make this release

now that was cool

[green onyx]

lol thats pog

[green onyx]

ur command is wrong

[lilac wren]

I think you deleted the slash

after Users

send the command here

[willow cove]

Ok thanks I'll try again after some foods 😊

[lilac wren]

help me I have 30 minutes to finish this entire presentation

[willow cove]

i thinbk its the folder i'm doing it in, i'll try a folder in c:

[lilac wren]

if you send the command here I can help

you might just be formatting it wrong

[willow cove]

@lilac wren the error from using the gui was because my files were in download and i have a space in my username

now I've moved the blobs and ipsw into a folder C:\FR\ - Its working from Gui

[lilac wren]

oh wow

[willow cove]

now i gotta sort this lol

[lilac wren]

yeah haha

[willow cove]

when saving blobs, every time i put my phone into get the ecid it seems the number is different, now i got a bunch of phones all with diff ecid numbers, confusing

[lilac wren]

ECID should never change

[willow cove]

ye

thats what i was thinking

maybe i dont have blobs for this one

if tsssaver would stop timing out i'd be able to check haha

ok i found the right blobs

whats the ApTicket error about?

[zealous bridge]

didnt set your generator

[willow cove]

oh ok its 0x1111111111111111 where do i set it

[lilac wren]

what jb tool

[willow cove]

unc0ver

[zealous bridge]

get dimentio from https://repo.1conan.com/
Open newterm or any terminal app then login as root by running su with the password as alpine
then run
dimentio <generator>
<generator> being the generator in your blobs

[willow cove]

ah nevermind, I got the process mixed up, guess i cant downgrade this phone even though it has blobs

rip

[lilac wren]

why not

[willow cove]

the phones on new ios and cant be JB

[lilac wren]

oh ok

lol how did you even save blobs without a jailbreak

nyu's tool?

[willow cove]

it was JB before

[lilac wren]

ah ok

[willow cove]

i was trying to get to 14.3 using that profile method but after it finished i was stuck on the recovery screen

had to restore, couldnt fix it

[lilac wren]

dang

[willow cove]

Guess i'm selling an iPhone X now then haha

[lilac wren]

it's a X?

[willow cove]

yep

[lilac wren]

use checkra1n lol

then you can downgrade

[willow cove]

latest ios can be jb with checkra1n?

[zealous bridge]

yes

[willow cove]

i'll have to do it when i got to my new house, thats where my imac is

dammit haha

good to know though

[lilac wren]

nice

[willow cove]

cba to make a usb stick for windows

[lilac wren]

oh lol

[willow cove]

not sure where i left it haha

[zealous bridge]

@lilac wren do you think i could manually download the ota and then spoof downloadedstatus somehow

[willow cove]

can checkra1n be used on virtual machine if not i'll just do it another day

[lilac wren]

like through Filza

[zealous bridge]

ye

[lilac wren]

yes with a tweak or Flex maybe?

[zealous bridge]

ik where the location of the ota is

downloadstatus should just be a plist

[lilac wren]

oh ok

then find it I believe in you

I don't think the actual downloaded OTA has a nonce or is signed or anything so you might be fine

[zealous bridge]

alright

wish me luck

[lilac wren]

gl

[regal ivy]

how long should restoring take?

[lilac wren]

20-30 minutes? maybe more

[regal ivy]

ok thanks

also is this normal? https://i.imgur.com/BaRfKCc.png

[lilac wren]

yes I think

[zealous bridge]

is fr stuck here?

[regal ivy]

yes

[zealous bridge]

rip

[regal ivy]

whats that mean

[zealous bridge]

what version of futurerestore you using

means ur probably in a bootloop

[regal ivy]

oh

im using latest

[zealous bridge]

what version

like number

[regal ivy]

245

[zealous bridge]

thats like a year old

[regal ivy]

oh shit

where are the newer versions?

[lilac wren]

Lol

[regal ivy]

oooooh

yeah i see now

what do i do

[lilac wren]

https://github.com/marijuanARM/futurerestore/releases

[zealous bridge]

use itunes to restore to latest version

what does the screen on your device look like

[regal ivy]

like the update screen with progress at halfway

[zealous bridge]

yeah rip

[lilac wren]

F

[green onyx]

pog ppl are using fr again

[lilac wren]

lol

[queen saffron]

how do i set a nonce on an iphone without jaIilbreak?

for futurerestore?

[lilac wren]

you cannot

[green onyx]

^

[willow cove]

I’m back and have set generator, gonna try again now

[lilac wren]

Yay

[willow cove]

[exception]:
what=ERROR: Unable to place device into restore mode
what=ERROR: Unable to place device into restore mode

code=66781201
code=66781201

[green onyx]

restore mode?

whats the size of ur blobs

10kb?

[willow cove]

tried it again and looks like its working

[green onyx]

aight

[fickle drift]

anyone know how to fix checksum verification in idevicerestore?

[willow cove]

Worked perfect, Thanks for help

[green onyx]

why are u using idevicerestore

[fickle drift]

thats what was recommended to me

[green onyx]

what are u trying to do

[fickle drift]

restore from 14.3 to 14.4.2 on 7 plus

[green onyx]

do u mean from 14.4.2

or no

what ios version do u want

[fickle drift]

no to 14.4.2, im stuck in recovery mode

[green onyx]

get futurerestore and run --exit-recovery

[celest basalt]

Or just irecovery -n lol

[fickle drift]

is that from the same git as irestore?

[green onyx]

?

just use https://github.com/CoocooFroggy/FutureRestore-GUI/releases/tag/v1.73

[fickle drift]

i dont understand what im supposed to do in the gui to do that

[green onyx]

download fr

and click exit recovery

[fickle drift]

ok, that put me back into bootloop tho

[green onyx]

restore with itunes if ur in a bootloop

who tf suggested u idevicerestore

[fickle drift]

doesnt work gives me a 9 error

[green onyx]

[fickle drift]

pc cant see my phone anyways

[radiant mountain]

DFU

If it’s software related, then DFU + iTunes restore will almost always fix it

[fickle drift]

except it hasnt the last 2 times i tried it..

[radiant mountain]

In DFU ? Or recovery mode ?

Not the same

[fickle drift]

i held down the vol down button at startup on 7 plus

[radiant mountain]

When the device got recognized by iTunes, was there something displayed on screen ?

DFU don’t display anything, while Recovery prompt a message saying to plug device to PC

[fickle drift]

yeah, just as iphone, no other info

[radiant mountain]

I meant on the device screen

[fickle drift]

oh, i think it was recovery then cos it had a laptop and a lightning cable on screen

[radiant mountain]

Yep, that’s recovery

DFU won’t display anything at all, just like your phone is turn off, but iTunes will saw it and will probably restore it without problem

Retry the manipulation, look online the good manip for your device idk

[fickle drift]

restored back to factory 14.4.2 ty

[lilac wren]

who do you think has irecovery built and installed, especially on windows lmho

[green onyx]

true

[lilac wren]

this is probably late but can't you spoof version then set delay period

[celest basalt]

no because the SEP key generation fails most likely due to my sepOS being too new

[lilac wren]

oh

[celest basalt]

surprisingly, even 14.4 delayed OTA on 14.4 doesn't work

even though 14.4 and 14.4.2 SEP are the same

maybe I should try spoofing to some 14.4 beta build

[celest basalt]

Uhh because he mentioned idevicerestore "lmao"

[celest basalt]

there's an exe

!t libimobiledevice

[mystic axle]

libimobiledevice

Windows: https://github.com/libimobiledevice-win32/imobiledevice-net/releases
macOS: brew install libimobiledevice libirecovery
Linux: sudo apt install libimobiledevice-utils irecovery (irecovery is Ubuntu 21.04+ only)

Added by nyuszika7h#0001 | Used 3 times · Apr 6, 2021, 11:27 PM

[celest basalt]

hmm, this is interesting
https://twitter.com/q3hardcore/status/950043771898441728

q3hardcore 🏖 (@q3hardcore)

Ever wondered where iOS re-downloads system apps from?

https://t.co/LNVXC3wgJ1

where A06794BC-8F97-11E7-9FD5-F742537C7B35/77666FBA-8FB6-11E7-A028-AC9DE333774F is BuildID/SystemImageID (from /System/Library/CoreServices/SystemVersion.plist)

Twitter · Jan 7, 2018, 4:37 PM

what if you can trick iOS into downgrading/updating system apps?

[zealous bridge]

ios 11 lmao

[celest basalt]

also I wonder if changing SystemImageID would help with spoofing SystemVersion for OTAs

[zealous bridge]

i have seen sysimageid in the xmls

never thought abt it tho

[celest basalt]

at first I thought it's just like an UDID or something

[zealous bridge]

if it's a sep problem tho probably not

[celest basalt]

true but then again SEP said nope for 14.3->14.3 when spoofed to 14.0 or 14.2 but worked with 14.3RC

[zealous bridge]

also true

yeah there might be another param

[celest basalt]

bruh why is OTAEnabler not working

[zealous bridge]

lol

[low summit]

Did you guys finally test?

[lilac wren]

we're always testing lol

[zealous bridge]

^

[lilac wren]

if you mean me and dabezt, no he had to go or his Mac had to be used

[low summit]

Lol

Nice excuse

[valid adder]

https://github.com/marijuanARM/futurerestore/commit/9bff1c4e9ba60ce325192a77afbb32aae09d62dd

@lilac wren @zealous bridge

[lilac wren]

you don't believe him? lol

[zealous bridge]

Woah

[valid adder]

@green onyx

[low summit]

I do

[zealous bridge]

So that means

[low summit]

But it's nice excuse

[green onyx]

YO

IPWNDFU

[lilac wren]

Cryptiiiic-Fixes lol

[green onyx]

true

[zealous bridge]

Woooohooooo

[green onyx]

gonna use it

[low summit]

13.7 downgrade true

[green onyx]

to dip to 13.7

[valid adder]

I had these changes locally for about a month, I forgot to push

[zealous bridge]

@valid adder mac required?

[green onyx]

damn

[green onyx]

probably linux required

or macos

[zealous bridge]

i remember a9 had issues with linux

[low summit]

So how u doing it

[valid adder]

@zealous bridge mac is only required if linux exploit doesn't work

[green onyx]

ah

[zealous bridge]

oh

[green onyx]

im gonna use linux

[lilac wren]

ipwnfu is untethered downgrade with blobs?

[zealous bridge]

compiling should work then

[green onyx]

yes

[zealous bridge]

a11-

[lilac wren]

no SEP or BB compatibility?

[green onyx]

^

yes

[low summit]

Gui possible compile?

[valid adder]

you need cctools to compile liboffsetfinder64 on linux

[zealous bridge]

@valid adder will baseband cause any issues

[valid adder]

yes

[green onyx]

rip

fr

damn

[valid adder]

you just have to let it loop for 10 minutes

then escape recovery

[low summit]

Lol still fked?

[valid adder]

FDR is still not fixed tho

lol

[green onyx]

hm

[low summit]

GG

[green onyx]

might not use bc of bb

[zealous bridge]

wont u be bootlooped

[valid adder]

a11 and later only

[green onyx]

ye lmao, i need bb working

[valid adder]

@zealous bridge wasn't on my a11 13.7 was working just no passcode/faceid

[green onyx]

still pog tho

[valid adder]

I used the wrong savage tho

thats why

[zealous bridge]

oh

[green onyx]

did bb work tho?

yes right?

[valid adder]

forgot to test

[green onyx]

hm

[low summit]

Still exciting news

[zealous bridge]

lmfao

Ok well

Idk what to test on

[green onyx]

ur A9 lol

[low summit]

U got Linux vm?

[zealous bridge]

sis has it

[green onyx]

nah an actual dualboot

[zealous bridge]

maybe when she’s sleeping

[low summit]

Let me check my 7

See if I got blobs

[green onyx]

honestly, i would use if bb works

and sep

[low summit]

So I need Linux dual boot to test

Or is gui possible?

[green onyx]

its not that hard to dual boot

[green onyx]

wdym

[low summit]

On a laptop tho

Like a fr gui lol

[lilac wren]

-_-

[zealous bridge]

ipwdfu will def not work on a vm btw

[low summit]

Fk vm lol

[zealous bridge]

guessing it works like checkra1n

[low summit]

U need direct usb

Is it possible with like usb?

[lilac wren]

Eta wen CI for static

[low summit]

Like checkn1x?

[zealous bridge]

Yes but no one’s gonna develop that prob

[low summit]

Froggy ipwndfu gui eta wen

[green onyx]

lol

[lilac wren]

I don't even have a checkm8 device

this iPad is temporary

[low summit]

I'll give you one

[green onyx]

first, getting a compile script is priority imo

[low summit]

I'll mail it

[green onyx]

for dependencies

[valid adder]

procursus static 🙂

mac apt

[zealous bridge]

wen eta release

[low summit]

Oh wait I have Mac lol

2011 mac work?

[green onyx]

mac apt is still priv-beta

[valid adder]

its not that private

its just buggy

[green onyx]

mac users gotta use shitty brew

hm

[low summit]

Don't got Linux tho only a shitty 2011 imac

[valid adder]

oh and btw

this build should work on sierra

[low summit]

Oh shit I have Sierra

Nice

@lilac wren Sierra works with Apple configurator 2?

[lilac wren]

probably

[low summit]

Nice

[zealous bridge]

So you need libipatcher + liboffsetfinder to compile to use fr

Fml

[valid adder]

@low summit

[lilac wren]

YES I got libgeneral working

finally

issue was I had to git clone recursive it seems instead of downloading the git repo as zip

also I used dantheman

[green onyx]

do i just grab dependencies with apt?

[zealous bridge]

bruh

thats a terrible idea

[low summit]

Turns out I only got 11.2 blobs

[valid adder]

@low summit just run the binary on sierra

idk if it runs

need to know to be sure

[green onyx]

how tf do i get dependencies

im bad at this without scripts

[zealous bridge]

source code

[valid adder]

@green onyx building from source

[green onyx]

ah

./configure

make

make install?

[valid adder]

no

[zealous bridge]

@valid adder what fork of libipatcher?

[green onyx]

wait

[zealous bridge]

./autogen.sh

[low summit]

OK I'll try it later. Mac is being used

[valid adder]

@zealous bridge stock

[green onyx]

alright ty

[zealous bridge]

tihms?

[valid adder]

just use my linux script @green onyx

[lilac wren]

Let's go, finally got img4tool working

I'm so happy

[green onyx]

Where?

[valid adder]

https://gist.github.com/Cryptiiiic/2f2f96c9636db544b840161db13336fb

[green onyx]

Alr ty

[zealous bridge]

ok so you need liboffsetfinder64 first

libinsn

and libinsn fucked

clang?

[valid adder]

@zealous bridge wym

@green onyx u just need to change two lines to use the updated code

[zealous bridge]

oh i had the same shit before

i think libgeneral is just fucked on linux

[celest basalt]

https://gist.github.com/nyuszika7h/6789c30878d83801801635499e314bff

[low summit]

Is Mac fr cli @valid adder

[celest basalt]

use my fork of the gist for latest shit

[lilac wren]

where do I get openssl from for tihmstar stuff, I got it with brew but it doesn't recognize in pkg-config

[zealous bridge]

for v201?

wow speed

ty

[celest basalt]

yeah

[zealous bridge]

legend

now lets see if this works

[celest basalt]

shit that was my UDID

[zealous bridge]

@celest basalt what version you going to

[celest basalt]

14.3

[low summit]

Oh shit ur already testing?

[celest basalt]

yeah

[low summit]

Bb is not tested tho

[celest basalt]

@valid adder why does it think my device is 32 bit

[valid adder]

Because of bad dependencies

[green onyx]

Which 2?

[celest basalt]

what else needs changed I'm using your liboffsetfinder64

[valid adder]

It’s either libusb or libusbmuxd that are outdated

[green onyx]

Or imma use nyus

[low summit]

U legit downgrading?

Failsafe 14.3?

[green onyx]

Probably

Ios 13 has better performance than ios 14

For A11

[valid adder]

@green onyx

[low summit]

I like 14 better but never been on 13 on A11

[lilac wren]

Noob question

libipatcher.cpp:28:10: fatal error: 'xpwn/libxpwn.h' file not found
#include <xpwn/libxpwn.h>
         ^~~~~~~~~~~~~~~~

how do I fix this lol

[zealous bridge]

uh which one do we use

[green onyx]

Pog, i chmod and run?

[valid adder]

@green onyx yes

[zealous bridge]

does that fix the 32 bit thing

[green onyx]

Alright

[valid adder]

@lilac wren the error says it all

[lilac wren]

:( fine

[zealous bridge]

Im in the middle of using nyus lol

yep error

multiple definition of “endianness”

what does that mean

in libxpwn

[green onyx]

Ctrl+c and try cryptics? Or just let it run

[valid adder]

yes

[zealous bridge]

guess im using that too

[celest basalt]

close enough

[zealous bridge]

wtf is that error

[celest basalt]

that isn't an error

[valid adder]

lol

[celest basalt]

it's a diff between the two scripts

[valid adder]

thats a diff

lmao

[zealous bridge]

oh i wasnt referring to that

was talking about this

[celest basalt]

smh just use docker

[valid adder]

@celest basalt my monitor has vertical so I can diff the entire file

[valid adder]

@zealous bridge which xpwn did u use

[zealous bridge]

one from ur script

[celest basalt]

nice

[zealous bridge]

how 2 use docker

[valid adder]

/usr/bin/ld64.lld-11

@zealous bridge does that exist?

[celest basalt]

sudo apt install docker.io

[zealous bridge]

ye i have it but idk how to use it

[celest basalt]

put that Dockerfile in a folder

sudo docker build -t futurerestore-static --no-cache .

once it's done:

sudo docker run -it --name futurerestore-static futurerestore-static
sudo docker cp futurerestore-static:/usr/local/bin/futurerestore futurerestore-v201

[zealous bridge]

yes

[celest basalt]

there you have a futurerestore-v201 binary in your current directory

[zealous bridge]

remove it?

the ld file

[valid adder]

wot

[zealous bridge]

lmfao

will give that a try

[celest basalt]

even with cryptic's new compile script it still tries to use iboot32patch

maybe it needs to compile libusb from source?

bc libusbmuxd already is

[zealous bridge]

apt is getting abused rn

[green onyx]

Lmaoo

[low summit]

This gonna work for 11.2 downgrade?

[zealous bridge]

y not

[green onyx]

Probably

Ye, i dont see why not lol

[celest basalt]

[INFO] 64-bit device detected

makes no sense

[low summit]

Lght fking Mac still occupied lmao

[zealous bridge]

time to rm -rf iboot32patch

[celest basalt]

[valid adder]

Ive had no issues on ubuntu

[celest basalt]

this is on Ubuntu, just the build environment is Debian

[valid adder]

@celest basalt who me fr output with no args

[valid adder]

quite odd

show error now

[zealous bridge]

is there a compile script for ipwndfu too

[celest basalt]

bruh

it doesn't need to be compiled

it's a python script

[valid adder]

@celest basalt do u have libipatcher build log

[celest basalt]

uhh I closed that tab but rebuilding with an Ubuntu image rn

so we'll see

[celest basalt]

uh, you probably didn't specify the name right when building

do sudo docker image ls

[zealous bridge]

<none> <none> 68385cf1e161 2 minutes ago 1.56GB
debian latest 0d587dfbc4f4 3 days ago 114MB

[celest basalt]

hmm

try sudo docker run -it --name futurerestore-static 68385cf1e161

[zealous bridge]

gave me a root shell

[celest basalt]

hmm, what if you do ls -l /usr/local/bin/futurerestore

[celest basalt]

ok good

you can close the shell and run the cp command

[zealous bridge]

alright

woohoo

[celest basalt]

same ibootpatch error with Ubuntu build 🤔

@valid adder idk if this matters btw

ERROR: Unable to connect to device?!
ERROR: Unable to get FirmwarePreflightInfo
[WARNING] failed to read BasebandGoldCertID from device! Is it already in recovery?
[WARNING] using tsschecker's fallback to get BasebandGoldCertID. This might result in invalid baseband signing status information

[zealous bridge]

That always happens

Lmao

When you run fr from recovery

[celest basalt]

thought so

@valid adder full build log https://gist.github.com/nyuszika7h/bc874d0f4f0bd14b974f2de7136d700b

  with iBoot64Patcher .....: yes

is there a way i can change ver to 14.3 without alreayd being jailbreaked

[green onyx]

No

[celest basalt]

@valid adder found the issue

I forgot I manually patched iBEC/iBSS in the IPSW

different error now with original IPSW redownloaded

[lilac wren]

yes if you're on <14.3

[zealous bridge]

oh god

ibec 2.0

unable to send ibss

[green onyx]

No way

[valid adder]

subscribe doesn't seem to work on linux

thats the current issue

[celest basalt]

fun fact: if you run futurerestore with sudo it segfaults

[green onyx]

[valid adder]

@celest basalt compile libimobile deps as debug to show logging

also you made sure you can accept pwned images right?

cuz some pwned bootrom require u to reset by sending an image first

futurerestore enters pwndfu for u, u can't already be in pwndfu

[celest basalt]

I'll do that tomorrow, gonna sleep now bc it's almost 4am

[celest basalt]

oh, was I not supposed to manually run ipwndfu

[valid adder]

nah

ipwndfu is fine

just u aren't supposed to boot any images

[celest basalt]

I didn't

[valid adder]

does your patches require an image to reset first? @celest basalt

[celest basalt]

not sure

[valid adder]

yes

a11 does

afaik

[celest basalt]

I did try sending an empty file with irecovery if that's what you mean, didn't help

[valid adder]

ipwndfu -p
ipwndfu --patch
irecovery -f any_valid_file

usb stack is now reset, accepting pwned images

futurerestore -> iBSS, iBEC, iBEC go

[celest basalt]

-p and --patch isn't the same?

[valid adder]

--patch is a feature of the a11 fork

-p pwn just exploits bootrom

--patch patches bootrom

[celest basalt]

oh

do I need to send an actual image or will an empty file work

[valid adder]

just needs to be a valid file

idk about empty

[celest basalt]

I think checkm8-nonce-setter sends an empty junk.txt

anyway gonna try this tomorrow

already turned off my laptop

[shy magnet]

yeah sending anything will work

it won't actually send anyways

just resets connection

[zinc moon]

I just feel like

[low summit]

Is it jb?

[zinc moon]

It’s heating a lot

Not yet

[low summit]

What firmware

[zinc moon]

14.4

[low summit]

Lol L

[zinc moon]

I can checkra1n it

[low summit]

So no sep?

[zinc moon]

Yea I’m not the one with Apple Pay

[low summit]

Do u care?

[zinc moon]

So it doesn’t matter that much

If I had Apple Pay that’d be a different story

[low summit]

I do lol

So sep is kinda important

[zinc moon]

@low summit I woke up at 7:18 and the battery was 100, it’s now 8 and the battery is 92

That’s normal yea?

[low summit]

No

[zinc moon]

Oh

But it’s a replaced one

[low summit]

Should only drop like 1 or 2 percent

[zinc moon]

The capacity is 99

I’ll jailbreak it regardless and see how it is

[low summit]

Wait u mean the life of the battery or just battery?

[zinc moon]

Weymouth

wdym

[scarlet edge]

Battery health prob

[low summit]

Battery health yea

[zinc moon]

Oh

Yea

[low summit]

Lol why u on low power

[zinc moon]

I’ll switch back

[low summit]

Dropping that much over night is kinda sus

Tf

[zinc moon]

Over night? It’s AM

Anyways

I’ll jailbreak it

[low summit]

Did you use it or on idle?

[zinc moon]

And see how it is

I used it

[low summit]

Then it's fine

[zinc moon]

Tiktok, Microsoft teams, discord

[low summit]

Battery life is shit lol

[zinc moon]

Eh

[low summit]

X drops like every minute

[zinc moon]

I’ll NEVER switch back to the 7

[low summit]

Is it an 8 or 8 plus?

[zinc moon]

The 7 had a broken screen, the resolution was worse, the fingerprint reader didn’t work half the time, only 32gb

An 8

[low summit]

Then yea battery isn't good

[zinc moon]

hmm

idk

[low summit]

The max is giving me like way more battery life

[scarlet edge]

Better than mine

[low summit]

What u rocking?

[scarlet edge]

8 Plus at 78% battery health

[low summit]

84 percent on my X

[scarlet edge]

Had it for like 3 years almost 4

[low summit]

Same

[heady edge]

if anyone's interested, my 14.4 A11 cannot be downgraded to 14.3 via the profile method. SSHed and changed the version plist without installing cydia (so rootfs is untouched) and it still failed saying unable to verify update

[low summit]

Yes we know lol

Already tried like 10 times

Sep doesn't work with ota

[heady edge]

darn, what a shame. only blobs saved are for 14.2 for A11 which aren't supported by futurerestore

[low summit]

Fdr error

@zinc moon ipwndfu is back

[zinc moon]

WHAT

???

@low summit bro

[low summit]

Sep and bb could be skipped now on fr

[zinc moon]

Cryptic released 195?

[low summit]

Cryptic fixed ipwndfu

[zinc moon]

You gotta be joking fr

I’m confused

I can use OTA blobs now?

[low summit]

Bro scroll up

Maybe

It needs testing

He haven't tested bb

[zinc moon]

@valid adder you need testers?

[low summit]

Tanbeer and nyu already testing

[zinc moon]

I’m down to save an OTA blob (currently I’m on A11 but I could try it)

And try this

I have an iCloud backup so I’m good

[low summit]

Folklore too I believe

[zinc moon]

Bro fr

[low summit]

Bro scroll up lol

He gave me the beta

[zinc moon]

o

[low summit]

Hold up

[zinc moon]

Lemme see

[low summit]

#futurerestore-help message

Here

[zinc moon]

Do I just use it as normal FR but without SEP and BB?

[valid adder]

its just pwndfu

which is mainly for ota blobs

[zinc moon]

@valid adder so I run the normal command?

[valid adder]

no

you need exploited bootrom + patched bootrom

[zinc moon]

So what should I do to try this? And will I still have cellular?

[low summit]

No idea bb isn't tested lol

[zinc moon]

@low summit I’ll try this by updating to 14.4.2 on the iPhone 7 saving OTA blobs on there

And trying those

If that’s safe I might try it on the 8

[low summit]

OK wait so if I fr my 7 back to ios 11 then can I Ota?

U could downgrade to ios 13

Apparently

[zinc moon]

I’ll see

[low summit]

But bb isn't test

Tested

[zinc moon]

That’s what I’m worried abt

[low summit]

Nyu and tanbeer were testing before but they gone without results

[low summit]

Ur safe with 7

U can fr to 14

[zinc moon]

The 7 is on 14.0.1

[low summit]

Anything goes wrong u could just fr back to 14.0.1

[zinc moon]

That’s IPSW 14.0.1 btw not OTA

So if I used systeminfo it wouldn’t be an OTA blob

Which is why I’m gonna OTA to 14.4.2

[low summit]

Yes it's still gonna be ipsw

[zinc moon]

Wtf no

[low summit]

Typo

[zinc moon]

Oh

Wait so

If I OTAd to 14.4.2 and used sysinfo

[low summit]

Wait just try going to ios 13

[zinc moon]

That wouldn’t be OTA blobs?

???

How would I

Even try that

[low summit]

It would be

[valid adder]

you need blobs

[zinc moon]

On the 7 I can just go to 14.4.2 OTA since that could be jailbroken

[low summit]

It's possible to go to 13?

[valid adder]

yes 13 its possible but baseband is in the way

atv and wifi ipads can go to 13

[zinc moon]

With or without blobs?

[low summit]

With

[valid adder]

blobs are always required for untethered downgrade

[zinc moon]

Hmm

[low summit]

So ipwndfu doesn't bypass bb check?

[valid adder]

ipwndfu has nothing to do with restoring

it just runs the exploit

[low summit]

Getting confused because of folklore lol

[zinc moon]

How about I go to 14.4.2 through OTA, save OTA blobs, go back to 14.0.1 through FR and try the OTA blobs?

Would that work?

[low summit]

Ipwndfu allows for onboard Ota blobs?

To fr

[low summit]

??

Sounds so complex

[zinc moon]

It’s simple

[low summit]

Bro ur fine on the 8 lol

Just save onboard

And then try to go back to 14.4

[zinc moon]

I OTA to 14.4.2, I save OTA blobs, I go back to 14.0.1 through FR then try using the OTA blobs

I’m just doing this for testing lol

[low summit]

14.4.2 is still signed

Lol

[zinc moon]

Yea

That’s how I’m gonna ota to it

[low summit]

So ur not testing anything like that

[zinc moon]

Well

[low summit]

Save onboard 14.4 on 8

Ota to 14.4.2

And then fr back to 14.4

That's a test

[zinc moon]

alright

[low summit]

Since checkm8 works for 14.4.2 anyways

[zinc moon]

Correct

So let’s goooo

[low summit]

Bouta sleep peace. Show me results tmr

[zinc moon]

Good night

[celest basalt]

getting so close to restoring to 14.3

and then

fucking FDR error

[low summit]

lol so thats a thing

[low summit]

@zinc moon u need to go to 14.4.2 to test lol

[zinc moon]

Alright I’ll OTA to it

Ik about 14.4.2 but

Like

What’s the command

To do this

@zealous bridge did it work for you

[zealous bridge]

sup everyone

i just came back from school lmao

[low summit]

It's just an extention to fr lol

[zealous bridge]

gonna test

to 13.7

[low summit]

Fdr error for nyu

Lol

Don't think it works

[zealous bridge]

yay so this should work on A10

[zinc moon]

@zealous bridge is the command as normal

But

[zealous bridge]

@celest basalt where FDR

[zinc moon]

I just remove the latest sep

[zealous bridge]

fatal or non-fatal

[zinc moon]

And latest bb part

[zealous bridge]

––use–pwndfu

remove latest sep

keep latest bb

[celest basalt]

non-fatal

[low summit]

So what sep it uses?

[celest basalt]

it's after sending NORData

[zinc moon]

What sep is used wtf

[zealous bridge]

ffs lmaoo

[zinc moon]

@low summit you reading my mind?

[zealous bridge]

@valid adder does pwndfu downgrade/upgrade the sep or does it just keep the current one

[zinc moon]

@zealous bridge if this works this is huge yea?

[zealous bridge]

i could test ota in that case

[zealous bridge]

are you tryin rn

[zinc moon]

Lemme check if my moms MacBook is with her

[low summit]

13 sep is compatible anyways

It's just bb

[zinc moon]

The laptop is by itself however

My parents are infront of it

[celest basalt]

also there's a weird panic after the failed FR

panic(cpu 0 caller 0xfffffff02178d434): SEP Panic: :skg \/skgs: 0x000171d1 0x00016a60 0x00016a44 0x00012018 0x00011d3c 0x0001351c 0x0000c038 0x0001615c [hnhth]

[zinc moon]

So they’d question me

[celest basalt]

this is the same panic you get when you set passcode on checkra1n

[zealous bridge]

@celest basalt how did you fix ibss

[celest basalt]

but I have passcode off

[zinc moon]

Ramadan Kareem btw

[zealous bridge]

makes sense ig, the screenshots that cryptic sent do explain it

[zealous bridge]

ramadan kareem

[celest basalt]

https://github.com/nyuszika7h/futurerestore/commit/5be61b6eef985a71d383aac0c63147365b2845bf had to comment this out

[zinc moon]

tanbeer could this work in GUI

[low summit]

Can't

[celest basalt]

you have to run futurerestore multiple times for it to enter restore mode though

[low summit]

Too hard

[zealous bridge]

so i need to compile it again :/

[zinc moon]

Right it can’t

[zealous bridge]

for fucks sake

[green onyx]

hello

probably going to be inactive this week lol, its a break

[zinc moon]

Folk did you try the OTA thing

[green onyx]

no

why

[zealous bridge]

prob

[green onyx]

i dont need to use the ota thing

blobs > ota

[low summit]

U can't anyways

Lol

[green onyx]

true

[celest basalt]

first attempt will fail on A11 because it expects you to send an image before you can send iBSS/iBEC
then it will fail because DFU times out while it's extracting the ipsw
then it will fail on the reconnect after it sets the generator
then it will start the restore but FDR error

[green onyx]

bc i have 14.4 sep and bb

[green onyx]

[low summit]

ur doing 13.7 downgrade?

[celest basalt]

no I'm doing 14.3

[zinc moon]

But there’s no ipwndfu option in GUI

Could froggy add that

[zealous bridge]

yeah

[zinc moon]

I’m gonna try this on a11

Will it fail

[celest basalt]

you need a few things for it

[zinc moon]

Like?

[celest basalt]

• compile my branch with https://gist.github.com/nyuszika7h/6789c30878d83801801635499e314bff
• get this https://github.com/MatthewPierson/ipwndfuA11, enter DFU manually, ./ipwndfu -p && ./ipwndfu --patch
• get wiki-proxy.py from https://github.com/marijuanARM/ios-tools and leave it running while FR runs

[zinc moon]

Sounds a bit confusing

I’ll try

[zealous bridge]

@celest basalt do i have to do the subscribe shit on a10 too

[celest basalt]

that probably has to be commented out either way but not sure

[zealous bridge]

alr will try

[celest basalt]

./futurerestore --use-pwndfu -t dumped.shsh --latest-sep --latest-baseband iPhone10,3,iPhone10,6_14.3_18C66_Restore.ipsw -d

this is the command btw

after everything else is done

[zealous bridge]

why latest sep

futurerestore said not to use sep

maybe thats why FDR?

lmfao

[zinc moon]

@celest basalt this is safe?

[zealous bridge]

prob not

lmao

[zinc moon]

This my main phone I don’t want to fuck it

[low summit]

u need to put device into dfu?

[zealous bridge]

bruh

dont use this on ur main

tf are you doing

[low summit]

u could restore lol

[celest basalt]

it failed non-fatally for me so probably safe

[zinc moon]

I’ll do it on the iPhone 7

Instead

[celest basalt]

you can exit recovery after with irecovery -n if it fails like it did for me

[celest basalt]

yes

[celest basalt]

interesting

[low summit]

wait whats the point of sep bypass check if ur gonna be using latest sep again

[celest basalt]

I just want to go to 14.3 to use Taurine

[low summit]

oh wait 14.4.2 sep is compatible with 14.3

[celest basalt]

yes

[low summit]

ipwndfu is just for ota blobs to work oh

[zealous bridge]

not rly

[low summit]

thats what cryptic said

[zealous bridge]

more to remove sep sigchecks

[celest basalt]

I can't skip --latest-sep

[Error] missing argument

[zealous bridge]

lmao wot

[celest basalt]

there isn't a --no-sep unlike --no-baseband

[low summit]

lol so u cant downgrade

[zealous bridge]

fr guide broken

[celest basalt]

you can't just not have SEP

[zealous bridge]

maybe manually specify sep?

14.3 sep

[low summit]

true try that

[zinc moon]

@zealous bridge tanbeer

My 7

Is on 14.0.1

Which was FRd

[zealous bridge]

what fork of ipwndfu do i use for a10

[zinc moon]

Would that count as a OTA blob

[zealous bridge]

?

Would what count as an OTA blob

[low summit]

think its an ipsw blob

lol

[celest basalt]

a FR restore should give you a normal IPSW restore onboard blob

[zinc moon]

Me saving my iPhone 7 blobs in systeminfo

[celest basalt]

or IPSW update blob if you used -u

[zinc moon]

It was FR’d

[zealous bridge]

depends if you pressed shsh or apticket

[zinc moon]

apticket

[zealous bridge]

but both of them should be ipsw

[low summit]

lol

[zinc moon]

oh

[low summit]

fail

[celest basalt]

but it's pointless to save onboard after FR anyway

bc you used a blob to restore in the first place

[zinc moon]

@zealous bridge I’ll update it to 14.4.2 OTA

Save OTA blobs on that

Go back

[low summit]

so ur not really testing anything on ur 7

[zinc moon]

To 14.0.1

[celest basalt]

yeah I probably should test FR with 14.4.2 OTA blobs to see if that works

[zinc moon]

And then use the OTA blobs

To go to 14.4.2

I mean

It proves this can work

[low summit]

well 14.4.2 is still signed

[celest basalt]

I think pwndfu in this case is just to bypass the sigchecks on RestoreRamDisk stuff that fails with OTA blobs?

[zinc moon]

Not sure

[zealous bridge]

yeah true

[zinc moon]

It’ll still prove

That it can work

Even if it’s signed

[low summit]

just go to ios 13

[zealous bridge]

Entering DFU

[low summit]

i have ota blobs for 14.3

[zealous bridge]

in dfu

[low summit]

but its my main

[zinc moon]

What version is the normal 7 at

[low summit]

huh?

[zinc moon]

You’re

Yours

[low summit]

14.4.2

[zinc moon]

[low summit]

my mac is being used like od

cant even get to it

[zealous bridge]

bruh

what module do i need for dfu

[celest basalt]

module?

[zinc moon]

???

[zealous bridge]

pip module

[celest basalt]

nothing afaik

[zealous bridge]

for ipwndfu* sorry

might be wrong python version

[celest basalt]

it only uses stdlib as far as I can tell

use Python 3

[celest basalt]

actually wait

not Python 3 for that

Python 2 for ipwndfu

just ./ipwndfu -p

works for me

[zealous bridge]

still says no module named dfu

[celest basalt]

are you running it from the directory with dfu.py next to it

[zealous bridge]

im running it as a single file

oh wait

nvm

lmfao

exploit failed

guess gotta try again

[low summit]

using ur sis 6s again?

[zealous bridge]

moms 7

why does it fail straight away

i think i might not have libusb or something

[low summit]

lol u switched to ur moms tf

[zealous bridge]

wait

what fork of ipwndfu @celest basalt

do i need to checkra1n jb first or something

[low summit]

do u not need to set nonce anymore?

[celest basalt]

ipwndfuA11 from MatthewPiersen

[fathom fox]

can i restore without jb

[celest basalt]

if you're not on A11 you need the og ipwndfu and a different sigcheck removal tool

depending on device

[fathom fox]

im on a12

[zealous bridge]

do i need to be jailbroken

[fathom fox]

i dont think so to fr

if you use -w

i got my generator and apnonce when i was jb'd

[zealous bridge]

bruh this is still failing

[lilac wren]

wait

im on a12
if you use -w
? lol

[fathom fox]

it might work

[zealous bridge]

brain dead

[lilac wren]

-_-

[fathom fox]

if not im just gonna learn to use swift and just cancel all sigchecks on ios forever

bootrom sigcheck = gone