THEME IS CLOSED
> Save SHSH for all devices | tsschecker, SHSH2 Blobs Saver, img4tool
T0ugh
Message#1
10.04.14, 17:54
^_^
*********
[online]

Group: Moderators
Messages 5490
Check in: 20.10.09
Apple iPhone 5

Reputation:-  1394  +

Save SHSH for all devices


Attached Image

Usetsscheckerfroms0uthwest
Primary authortsschecker ->@tihmstar, busy with other important things and is not planning any updates yet.


What is SHSH?
  • SHSH is a unique digital signature certificate.
  • For informativeness -> Wikipedia
You need to understand the following:
  • Save SHSH possible from the version of iOS, which is signed by Apple at the moment.
  • What firmware Apple signs can be found ->[FAQ] The relevance of the firmware
  • All certificates are individual for each device, each version of iOS.
  • It does not matter which version of iOS is installed on your device.
  • noapnonce has the format ->* .shsh2
  • apnonce has the format ->* .shshlatest versiontsscheckersaves in the format ->* .shsh2
Why do you need it?
  • Saving SHSH will allow you to later be able to roll back to the firmware, from which there is SHSH.
  • For reflection -> tihmstar's Blog
Rollback tools: To save SHSH we need:
  • tsschecker to save SHSH.
  • Your device ID, internal device name -> Apple Device Model IDs
  • ECID Your device can be found in iTunes (click on the serial number 2 times and see your ECID), it consists of numbers and letters ->00000XXXXXXXXXXX, iTunes 00000 does not show, we add them ourselves.
For example, take tsschecker for Windows, iPhone 5 with ID ->iPhone5,1 (n41ap) and ECID ->00000XXXXXXXXXXX.
Unpacking ->tsschecker-latest.zipvia7-zip
Open the Windows command prompt (cmd.exe), drag and droptsschecker_windows.exe In the command line, press the spacebar and add:
  • -d your_iden identifier --boardconfig internal_name -e your_ECID -i version_iOS -s
At the time of writing this FAQ (12/16/2016), Apple signed 4 firmware (10.1, 10.1.1 (14B100), 10.1.1 (14B150), 10.2). Always check which firmware Apple signs.

-d your_iden identifier --boardconfig internal_name -e your_ECID -i 10.2 -s ->if you want to save the certificate from iOS 10.2
-d your_iden identifier --boardconfig internal_name -e your_ECID -i 10.1.1 --buildid 14B150 -s ->if you want to save the certificate from iOS 10.1.1 (14B150)
-d your_iden identifier --boardconfig internal_name -e your_ECID -i 10.1.1 --buildid 14B100 -s ->if you want to save the certificate from iOS 10.1.1 (14B100)
-d your_iden identifier --boardconfig internal_name -e your_ECID -i 10.1 -s ->if you want to save the certificate from iOS 10.1

-d iPhone5,1 - boardconfig n41ap -e 00000XXXXXXXXXXXX -i 10.2 -s ->my example
-d iPhone5,1 --boardconfig n41ap -e 00000XXXXXXXXXXXX -i 10.2 -s --save-path "C: \ SHSH" ->My example with saving SHSH in a separate folder.

Author (@tihmstar) ->tsscheckerrecommends saving SHSH with one of the temporary values ​​(--apnonce) or for reliability with all 7 values, this will increase your chances of a rollback.

Example:
  • -d your_id --boardconfig internal_name -e your_ECID -i version_iOS -s --apnonce 603be133ff0bdfa0f83f21e74191cf6770ea43bb
  • -d your_id --boardconfig internal_name -e your_ECID -i version_iOS -s --apnonce 352dfad1713834f4f94c5ff3c3e5e99477347b95
  • -d your_id --boardconfig internal_name -e your_ECID -i version_iOS -s - apnonce 42c88f5a7b75bc944c288a7215391dc9c73b6e9f
  • -d your_id --boardconfig internal_name -e your_ECID -i version_iOS -s - apnonce 0dc448240696866b0cc1b2ac3eca4ce22af11cb3
  • -d your_id --boardconfig internal_name -e your_ECID -i version_iOS -s - apnonce 9804d99e85bbafd4bb1135a1044773b4df9f1ba3
  • -d your_id --boardconfig internal_name -e your_ECID -i version_iOS -s - apnonce 9e4c518009d00df190a450b3b47691768812360c
  • -d your_id --boardconfig internal_name -e your_ECID -i version_iOS -s - apnonce 9f4aeec726e7c682339ddb3c6c2dec52662dc517
--apnonce 603be133ff0bdfa0f83f21e74191cf6770ea43bb
--apnonce 352dfad1713834f4f94c5ff3c3e5e99477347b95
- apnonce 42c88f5a7b75bc944c288a7215391dc9c73b6e9f
--apnonce 0dc448240696866b0cc1b2ac3eca4ce22af11cb3
--apnonce 9804d99e85bbafd4bb1135a1044773b4df9f1ba3
--apnonce 9e4c518009d00df190a450b3b47691768812360c
- apnonce 9f4aeec726e7c682339ddb3c6c2dec52662dc517

Automatic way to get all ->(--apnonce) Windows Solution
Createnonces.txt in folder ->tsschecker (where the main files are located), with the following content:
603be133ff0bdfa0f83f21e74191cf6770ea43bb
352dfad1713834f4f94c5ff3c3e5e99477347b95
42c88f5a7b75bc944c288a7215391dc9c73b6e9f
0dc448240696866b0cc1b2ac3eca4ce22af11cb3
9804d99e85bbafd4bb1135a1044773b4df9f1ba3
9e4c518009d00df190a450b3b47691768812360c
9f4aeec726e7c682339ddb3c6c2dec52662dc517

Createautosaveapnonce.txt in folder ->tsschecker (where the main files are located), with the following content:
echo off
FOR / F %% A IN (nonces.txt) DO mkdir C: \ SHSH \ %% A | tsschecker_windows.exe tsschecker -d your_id - boardconfig internal_e -e your_ECID -i version_iOS -s - apnonce %% A --save-path C: \ SHSH \ %% A -s
pause

In my case, I saved the certificates in a separate folder ->C: \ SHSH

My example:
echo off
FOR / F %% A IN (nonces.txt) DO mkdir C: \ SHSH \ %% A | tsschecker_windows.exe tsschecker -d iPhone5,1 --boardconfig n41ap -e 00000XXXXXXXXXXXX -i 10.2.1 -s - apnonce %% A --save-path C: \ SHSH \ %% A -s
pause

Change the extension ->autosaveapnonce.txt on autosaveapnonce.bat and run -> autosaveapnonce.bat
Attached Image

Attached Image

After automatic execution of all necessary actions in the command window, in the folderC: \ SHSH directories with apnonce will be created, in each of which a certificate will be saved in the format * .shsh -> ******** 06671_iPhone5,1_n41ap_10.2.1-14D27.shsh
Attached Image

Attached Image

For safety, send certificates to your email!
noncestatistics allows you to choose the best apnonce for iPhone 5S, iPad Air
This method is relevant exclusively for iPhone 5S, iPad Air.

For example, takenoncestatisticsfor Windows, iPad Air with ID ->iPad4,2 (j72ap).
Unpacking ->noncestatistics-latest.zipvia7-zip
Open the Windows command prompt (cmd.exe), drag and dropnoncestatistics_windows.exe In the command line, press the spacebar and add:
  • noncestatistics -t 500 nonces.txt ->selection of 500 apnonce will take about an hour.
  • noncestatistics -t 1000 nonces.txt ->the selection of 1000 apnonce will take about 2 hours.
Attached Image

After the completion of the apnonce selection, we look at the statistics.
Drag and dropnoncestatistics_windows.exe In the command line, press the spacebar and add:
  • noncestatistics -s nonces.txt
Attached Image

Of greater interest are the last 7 apnonce, with these apnonce you need to save SHSH.
After automatic execution of all necessary actions in the command window, in the folderC: \ Users \ UserName The saved text file will appear -> nonces.txt with all apnonce.
For safety, send certificates to your email!

Attached Image

After automatic execution of all necessary actions in the command window, in the folderC: \ Users \ UserName The saved certificate will appear in the format * .shsh2 -> ******** 06671_iPhone5,1_n41ap_10.2-14C92.shsh2 In my case, I saved the certificate in a separate folder -> C: \ SHSH (--save-path "C: \ SHSH").
If an error occurs while saving the certificate ->[Error] [TSSC] parsing firmware.json failed Download file -> https://api.ipsw.me/v2…mwares.json/condensed (condensed), rename to -> firmware.json (with a dot) and copy to the folder C: \ Users \ UserName \ AppData \ Local \ Temp .
Attached Image

For safety, send certificates to your email!

Removing SHSH from the device


Attached Image

Useimg4toolfroms0uthwest
Primary authorimg4tool ->@tihmstar, busy with other important things and is not planning any updates yet.


You need to understand the following:
  • Jailbreak is required to extract SHSH.
  • This is relevant if you do not have a previously saved SHSH from the installed version of iOS.
  • This method is relevant only for 32-bit devices, 64-bit requires * .shsh2 saved with -> tsschecker
To extract SHSH we need:
  • Device with jailbreak.
  • Any file manager -> iFunBox / iTools / iMazing to save apticket.der on PC.
  • APTicket ->apticket.der, which is in ->/ System / Library / Caches /
  • img4tool to convert apticket.der to * .shsh
For example, take img4tool for Windows, iPhone SE with ID ->iPhone8,4 (n69uap).
Unpacking ->img4tool-latest.zipvia7-zip
Open the Windows command prompt (cmd.exe), drag and dropimg4tool_windows.exe In the command line, press the spacebar and add:
  • --convert -s name of future_ertificate.shsh C: \ specify_full_path_to_APTicket \ apticket.der
--convert -s iPhone8,4_n69uap_10.2.shsh C: \ SHSH \ apticket.der ->my example with converting apticket.der to * .shsh

Attached Image

After automatic execution of all necessary actions in the command window, in the folderC: \ Users \ UserName The saved certificate will appear in the format * .shsh -> ********. shsh
Attached Image

For safety, send certificates to your email!

Checking saved SHSH


Attached Image

Useimg4toolfroms0uthwest
Primary authorimg4tool ->@tihmstar, busy with other important things and is not planning any updates yet.


You need to understand the following:
  • img4tool allows you to check SHSH only from x64 devices.
  • You can check SHSH saved with -> tsschecker or img4tool
  • You can check both formats (* .shsh2 ->noapnonce) and (* .shsh ->apnonce latest version tsschecker saves in the format ->* .shsh2).
To check SHSH we need:
  • Firmware for a device with an iOS version similar to SHSH version -> IOS firmware
  • img4tool to check SHSH
For example, take img4tool for Windows, iPhone SE with ID ->iPhone8,4 (n69uap), firmware -> iPhoneSE_10.2_14C92_Restore.ipsw and saved SHSH ->******** 99324_iPhone8,4_n69uap_ 10.2 - 14C92 .shsh2
Unpacking ->img4tool-latest.zipvia7-zip
Unpacking ->iPhoneSE_10.2 _ 14C92 _Restore.ipswvia 7-zip
We needBuildManifest.plist which is at the root of the unpacked firmware ->iPhoneSE_10.2_14C92_Restore \ BuildManifest.plist
Open the Windows command prompt (cmd.exe), drag and dropimg4tool_windows.exe In the command line, press the spacebar and add:
  • -v C: \ specify_full_path_to_BuildManifest \ BuildManifest.plist -s C: \ specify_full_path_to_SHSH \ .shsh2
-v C: \ iPhoneSE_10.2_14C92_Restore \ BuildManifest.plist -s C: \ SHSH \ ******** 99324_iPhone8.4_n69uap_10.2-14C92.shsh2 ->my example

Attached Image

After automatic execution of all necessary actions in the command window, we will see the result ->[IMG4TOOL] file is valid! (SHSH worker) or [IMG4TOOL] file is invalid! (SHSH non-working) .

Post has been editedT0ugh - 31.01.19, 16:25


--------------------
T0ugh
Message#2
05.03.17, 16:26
^_^
*********
[online]

Group: Moderators
Messages 5490
Check in: 20.10.09
Apple iPhone 5

Reputation:-  1394    +

  • You can discuss and get help on this FAQ by creating a topic in the sectioniOS - First Aid ->Picture
M
Topic is closed


Post has been editedT0ugh - 06.03.17, 19:56


--------------------



 mobile version    Now: 04/12/19/16: 14