21 pagesV  1 2 3 4 5 6 > »  
 
REPLY
> Rollback with futurerestore (prometheus) | iOS 8.x.x, 9.x.x -> 10 <->11, 12 (x64)
T0ugh
Message#1
20.02.17, 22:08
^_^
*********
[offline]

Topics Curator
Group: Moderators
Messages 5632
Check in: 20.10.09
Apple iPhone 5

Reputation:-  1448  +

Rollback with futurerestore (prometheus)
\ jailbreak method /


Attached Image

What is a rollback (downgrade)?
  • Rollback (downgrade) - install the old version of iOS, which is officially no longer relevant on the Apple server and is not signed by the SHSH certificate. Officially, you can only flash on the latest, current firmware.
  • For informativeness ->Wikipedia
You need to understand the following:
  • For rollback usingfuturerestoreneed a jailbreak.
  • For rollback usingfuturerestoreneed SHSH from iOS 10.2, saved usingtsschecker(* .shsh2 ->noapnonce) ->Save SHSH for all devices
  • For rollback,futurerestoreRequires files from the current firmware that Apple signs (at the time of writing this FAQ (02.22.2017), Apple signed iOS 10.2.1 (14D27) ->[FAQ] The relevance of the firmware ), the key role is played by the file -> sep -firmware. *****. RELEASE.im4p, sep With iOS 10.2.1 firmware compatible with iOS 10.2 firmware, but not compatible with iOS 10.1.1. This means that if you have iOS 10.1.1 on your device, the next time you restore it to iOS 10.1.1, you will receive a disabled Touch ID or an error, since, sep iOS 10.1.1 is not compatible with sep from iOS 10.2.1. You can roll back the device only on iOS 10.2, due to compatibility sep from iOS 10.2.1 -> see sep compatibility with current firmware .
  • futurerestore supports ->iPhone (5S, 6, 6 Plus, 6S, 6S Plus, SE, 7, 7 Plus, 8, 8 Plus, X), iPod touch 6G, iPad (Air, Air 2, 5, 6), iPad Pro (9.7, 12.9, 12.9 (2G), 10.5), iPad mini (2, 3, 4)
  • futurerestore supports ->Linux and macOS, does not support Windows.
To roll back / restore iOS, we need: For example, take futurerestore for macOS, iPad Air (A1475) (onboard iOS 10.2) with an identifier ->iPad4,2 (j72ap) and SHSH ->******** 09796_iPad4,2_j72ap_10.2-14C92.shsh2
Create a folder on your desktop ->Downgrade
From the archive ->futurerestoreportable ->futurerestore_macosin the folder on your desktop ->Downgrade
SHSH ->******** 09796_iPad4,2_j72ap_10.2-14C92.shsh2 copy to the folder on your desktop -> Downgrade
From the archive ->iPhoneSSHportable ->tcprelay.py, usbmux.py, usbmux.pycin the folder on your desktop ->Downgrade
Firmware (iOS 10.2, which we roll back) ->iPad_64bit_10.2_14C92_Restore.ipswcopy to the folder on your desktop ->Downgrade
Firmware (iOS 10.2.1, current, signed by Apple) ->iPad_64bit_10.2.1_14D27_Restore.ipsw change the extension -> iPad_64bit_10.2.1_14D27_Restore.zip
Double click ->iPad_64bit_10.2.1_14D27_Restore.zip The archive will be unzipped.
Open the folder ->iPad_64bit_10.2.1_14D27_Restore ->BuildManifest.plist copy to the folder on your desktop -> Downgrade
Open the folder ->iPad_64bit_10.2.1_14D27_Restore \ Firmware ->Mav7Mav8-7.21.00.Release.bbfw copy to the folder on your desktop -> Downgrade
For devices without a SIM - this is not relevant, for them there is no* .bbfw , skip this step.
In folder ->\ Firmware multiple versions* .bbfw
Apple releases firmware that is suitable for multiple devices, device models. For example, you have an iPhone 6.
iPhone_4.7_10.2.1_14D27_Restore is suitable for 2x devices ->iPhone 6 and iPhone 6S, in firmware ->iPhone_4.7_10.2.1_14D27_Restore \ Firmware will be the 2nd version of the firmware for the modem (Mav10-5.32.00.Release.bbfw (iPhone 6) and Mav13-2.41.00.Release. bbfw (iPhone 6S)).
What is your version of the modem, you can find out ->Modem Versions

Be careful, carefully check all the data.

Attached Image
Open the folder ->iPad_64bit_10.2.1_14D27_Restore \ Firmware \ all_flash \ all_flash.j72ap.production ->sep-firmware.j72.RELEASE.im4p copy to the folder on your desktop -> Downgrade
In folder ->\ Firmware \ all_flash multiple versionsall_flash. *****. production
Apple releases firmware that is suitable for multiple devices, device models. For example, you have an iPhone 6.
iPhone_4.7_10.2.1_14D27_Restore is suitable for 2x devices ->iPhone 6 and iPhone 6S, in firmware ->iPhone_4.7_10.2.1_14D27_Restore \ Firmware \ all_flash there will be 3 folders
all_flash.n61ap .production \ sep-firmware. n61 .RELEASE. im4p (iPhone 6)
all_flash.n71ap .production \ sep-firmware. n71 .RELEASE. im4p (iPhone 6S),
all_flash.n71map .production \ sep-firmware. n71m .RELEASE. im4p (iPhone 6S))

iPhone 6S is available in 2 versions, they differ in different processors ->n71ap (Samsung A9 processor), n71map (TSMC A9 processor).
What is the internal name of your device, you can find out ->Apple Device Model IDs
In the case of iPhone 6S, iPhone 6S Plus, iPhone SE, immediately install on the device ->BmsmThe program will accurately determine the internal name of the device.

Be careful, carefully check all the data.

Attached Image

In folder ->Downgrade must be 9 files.
For devices without a SIM will be8 files, * .bbfw for them is missing.
Attached Image
******** 09796_iPad4,2_j72ap_10.2-14C92.shsh2 ->certificate from the firmware for which we roll back / restore (iOS 10.2).
BuildManifest.plist ->file with information for iTunes, we take from the current firmware ->iOS 10.2.1.
futurerestore_macos ->executable file futurerestore for macOS.
iPad_64bit_10.2_14C92_Restore.ipsw ->firmware for which we roll back / restore (iOS 10.2).
Mav7Mav8-7.21.00.Release.bbfw ->firmware for modem, we take from the current firmware ->iOS 10.2.1<- relevant for devices with SIM.
sep-firmware.j72.RELEASE.im4p ->is used to download the software of the kernel system and data, we take from the current firmware ->iOS 10.2.1
tcprelay.py ->file for iPhoneSSH
usbmux.py ->file for iPhoneSSH
usbmux.pyc ->file for iPhoneSSH

Install ->Python 3 Mac OS Xon macOS.
For normal operationfuturerestoreadditional packages are needed, we open the terminal and enter commands.
⬇⬇⬇
Open a terminal and enter commands one by one
Attached Image
  1. xcode-select --install

  2. / usr / bin / ruby ​​-e "$ (curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"

  3. brew install automake autoconf libtool pkg-config libplist openssl libzip
    git clone https://github.com/tihmstar/libirecovery && cd ./libirecovery && bash autogen.sh && make install
    cd
    git clone https://github.com/tihmstar/libcrippy && cd ./libcrippy && bash autogen.sh && make install
    cd
    git clone https://github.com/tihmstar/libfragmentzip && cd ./libfragmentzip && bash autogen.sh && make install
    cd
    git clone https://github.com/tihmstar/libpartialzip && cd ./libpartialzip && bash autogen.sh && make install

  4. cd / usr / local
    sudo mkdir ssl
    sudo chmod 777 / usr / local / ssl
    cd
    git clone https://github.com/openssl/openssl.git
    cd openssl
    ./config
    make
    make install

  5. brew install curl

  6. ln -s /usr/local/opt/openssl/lib/libcrypto.1.0.0.dylib / usr / local / lib /
    ln -s /usr/local/opt/openssl/lib/libssl.1.0.0.dylib / usr / local / lib /
    ln -s /usr/local/Cellar/openssl/1.0.2j/bin/openssl openssl

After preparing the necessary files and system, go to the main, preparing the device for rollback / recovery.
1. Open the terminal.
2. We enter cd , press the spacebar and drag the folder to the terminal -> Downgrade
Attached Image

Attached Image
3. Hit Enter
Attached Image
4. To be sure that we are in the right folder, enter ls and hit enter
Attached Image

Attached Image
5. We enter ./tcprelay.py -t 22: 2222 , press Enter and minimize the window.
Attached Image

Attached Image
6. Open a new terminal window, enter ssh [email protected] -p 2222
Attached Image
7. We press Enter, we specify the password alpine and hit enter
Attached Image

Attached Image
8. Open the ******** 09796_iPad4,2_j72ap_10.2-14C92.shsh2 using TextEdit, scroll to the bottom, where we will see the following:
Attached Image
generatoreach * .shsh2 is individual if you don’t have in * .shsh2generator, this certificate is not suitable for rollback.
9. We enter nvram com.apple.System.boot-nonce =0xfeb5b165a4cc3774 and hit enter
Attached Image

Attached Image
10. We check if our parameters are applied, we enter nvram -p , press Enter and minimize the window.
Attached Image
11. Open a new terminal window, enter cd , press the spacebar and drag the folder to the terminal -> Downgrade
Attached Image

Attached Image
12. Hit Enter
Attached Image
13. To be sure that we are in the right folder, enter ls and hit enter
Attached Image

Attached Image
14. We enter chmod + x futurerestore_macos and hit enter
Attached Image

Attached Image
The next step will be final, after which the rollback / restore will begin. The core team looks like this:
./futurerestore_macos -t **. shsh2 -b **. bbfw -p BuildManifest.plist -s **. im4p -m BuildManifest.plist **. ipsw

Where**the names of the main files in the folder ->Downgrade
My team, with my data looks like this:
./futurerestore_macos -t ******** 09796_iPad4,2_j72ap_10.2-14C92.shsh2 -b Mav7Mav8-7.21.00.Release.bbfw -p BuildManifest.plist -s sep-firmware.j72.RELEASE.im4p - m BuildManifest.plist iPad_64bit_10.2_14C92_Restore.ipsw

If your device is without a SIM, the command will be
./futurerestore_macos -t **. shsh2 -s **. im4p -m BuildManifest.plist **. ipsw --no-baseband

Data example
./futurerestore_macos -t 7939302025234321_iPad5,1_j96ap_10.2-14C92.shsh2 -s sep-firmware.j96.RELEASE.im4p -m BuildManifest.plist iPad_64bit_TouchID_10.2_14C92_Restore.ipsw --no-baseband

15. We enter ./futurerestore_macos -t ******** 09796_iPad4,2_j72ap_10.2-14C92.shsh2 -b Mav7Mav8-7.21.00.Release.bbfw -p BuildManifest.plist -s sep-firmware.j72.RELEASE.im4p - m BuildManifest.plist iPad_64bit_10.2_14C92_Restore.ipsw and hit enter
Do not close the terminal window, do not disconnect the device from the Mac, check everything several times.
If after entering the main command,futurerestoregave an error, useReiboot(or with the command ->./futurerestore_macos --exit-recovery) to take the device out of recovery mode and describe in detail the error received.
Attached Image
Attached Image
Attached Image
Attached Image
Done: restoring succeeded. Congratulations, after successful recovery, block iOS update ->How to disable automatic iOS update

Different nuances when working with futurerestore (prometheus)


The basic instruction is written taking into account the jailbreak from Yalu, where it is integrated ->Dropbear ssh and patched nvram to install yourgeneratorwith * .shsh2.
This means that in all other cases we need to installOpenssh and patch "Nvram" .
Let's say we decided to roll back from iOS 9 to iOS 10,iPhoneSSH(only relevant for jailbreak from Yalu) is not needed, use ->Openssh from Cydia.
To patch"Nvram" you need to install -> ios-kern-utils (. * deb) -> github.com/Siguza/ios-kern-utils/releases
How to install (. * Deb) read ->Installing * .deb and * .ipa (Post directorgeneral # 2890657)
Openssh have established "Nvram" patched up.

We do everything according to the basic instructions ->Rollback with futurerestore (prometheus)except for the following nuances.
  • iPhoneSSH we do not need as Python 3 Mac OS X for its work.
  • Step5. skip it.
  • Step6. Open a new terminal window, enter ssh [email protected] (you must provide your IP address).
    Your device should be connected to Wi-Fi, go to Settings ->Wi-Fi, click next to the name of the connected network and look at the first line (IP Address), for example, my IP address is> 192.168.1.33
  • Step7. and 8. We do according to the basic instructions.
  • Step9. We enter nvpatch com.apple.System.boot-nonce and hit enter
  • We enternvram com.apple.System.boot-nonce =0xfeb5b165a4cc3774and hit enter
  • Further, all according to the basic instructions.
If you have a device with iOS 9.3.4, 9.3.5 for patch"Nvram" use -> Phoenixnonce
  • Download -> PhoenixNonce.ipa and using Cydia Impactor install on device.
  • Run PhoenixNonce, in the line entergeneratorfrom * .shsh2 ->"Set" ->"Success".
  • Further we act according to the main instruction.
If you have a device with iOS 10.2.1, 10.3, 10.3.1, 10.3.2, 10.3.3 for the patch"Nvram" use -> v0rtexNonce
  • Download ->v0rtexNonce.zip , change the extension ->v0rtexNonce. ipa and using Cydia Impactor install on device.
  • Run v0rtexNonce, in the line "Set generator" entergeneratorfrom * .shsh2 ->"Enter" ->"OK".
    v0rtexNonce supports all devicesbut not for all devices, iOS versions in the v0rtexNonce database there are necessary offsets, The author is constantly working on this, if you get an error, you just have to wait.
  • Further we act according to the main instruction.
If you have a device with iOS 11.0, 11.0.1, 11.0.2, 11.0.3, 11.1, 11.1.1, 11.1.2 for a patch"Nvram" use -> NonceSet1112
  • Download -> NonceSet1112_v1.1.ipa and using Cydia Impactor install on device.
  • Run NonceSet1112, in the string "SET / CHANGE NONCE" entergeneratorfrom * .shsh2 ->"Save / Restore Now" ->"OK".
  • Further we act according to the main instruction.
If you have a device with iOS 11.2, 11.2.1, 11.2.2, 11.2.5, 11.2.6, 11.3, 11.3.1 for a patch"Nvram" use -> noncereboot1131UI
  • Download -> noncereboot1131UI.ipa and using Cydia Impactor install on device.
  • Run noncereboot1131UI, in the line "Enter your generator here" entergeneratorfrom * .shsh2 ->"Enter" ->"OK".
  • Further we act according to the main instruction.
If you have a device with iOS 12.0, 12.0.1, 12.1, 12.1.1, 12.1.2 for the patch"Nvram" use -> unc0ver If you have an iPhone 5S device (iPhone6.1, iPhone6.2), iPad Air (iPad4.1, iPad4.2, iPad4.3), iPad mini 2 (iPad4.4, iPad4.5, iPad4.6) ->Apple signs iOS 10.3.3 (OTA) for A7 (processor) - these devices came out with iOS 7.x.x
For these devices, you can use SEP from iOS 10.3.3 if you need to roll back within iOS 8.x.x, 9.x.x-> 10.2 <-> 10.3.3, 11.1.2 -> 10.2 <-> 10.3.3 and special -> Buildmanifest .
-> - means to any available iOS (from which there is. * shsh2) in this gap.
<-> - means any version of iOS (from which there is. * shsh2) in this gap.

Use (added support for iOS 11)futurerestorefromencounter , supports ->Linux, macOS and Windows (Windows 7 is recommended).
Use (added support for iOS 12)futurerestorefroms0uthwest , supports ->Linux, macOS and Windows (Windows 7 is recommended).
Primary authorfuturerestore ->@tihmstar, busy with other important things and is not planning any updates yet.

Archive
iOS 10.3 beta 1 ->iOS 10.2 (not relevant)
Rollback with futurerestore (prometheus)
\ jailbreak method /
\ This method is relevant exclusively for iPhone 5S, iPad Air /
\ This method does not guarantee 100% result /
\ iOS 10.3 beta 1 must be installed on the device.


Attached Image

You need to understand the following:
  • For rollback using futurerestore Requires SHSH from iOS 10.2, saved using tsschecker (* .shsh ->apnonce) -> Save SHSH for all devices
  • For rollback, futurerestore Requires files from the current firmware that Apple signs ( at the time of writing this FAQ (02.22.2017), Apple signed iOS 10.2.1 (14D27) ->[FAQ] The relevance of the firmware ), the key role is played by the file -> sep -firmware. *****. RELEASE.im4p, sep With iOS 10.2.1 firmware compatible with iOS 10.2 firmware, but not compatible with iOS 10.1.1. This means that if you have iOS 10.1.1 on your device, the next time you restore it to iOS 10.1.1, you will receive a disabled Touch ID or an error, since, sep iOS 10.1.1 is not compatible with sep from iOS 10.2.1. You can roll back the device only on iOS 10.2, due to compatibility sep from iOS 10.2.1 -> see sep compatibility with current firmware .
  • futurerestore supports ->iPhone (5S, 6, 6 Plus, 6S, 6S Plus, SE), iPod touch 6G, iPad (Air, Air 2), iPad Pro (9.7, 12.9), iPad mini (2, 3, 4)
  • futurerestore supports ->Linux and macOS, does not support Windows.
To roll back / restore iOS, we need:
  • macOS (10.10 Yosemite, 10.11 El Capitan, 10.12 Sierra).
  • iOS 10.3 beta 1 installed on our device -> iOS 10.x.x - discussion
  • Two firmware for our device, iOS 10.2 (to which we roll back) and iOS 10.2.1 (current, signed by Apple) -> IOS firmware
  • Previously saved SHSH (* .shsh ->apnonce) from iOS 10.2.
  • Internal device name -> Bmsm / Apple Device Model IDs
  • Device Modem Version -> Modem Versions <- relevant for devices with SIM.
  • futurerestore for rollback.
For example, take futurerestore for macOS, iPad Air (A1475) (onboard iOS 10.3 beta 1) with an identifier ->iPad4,2 (j72ap) and SHSH ->******** 09796_iPad4,2_j72ap_10.2-14C92.shsh
Create a folder on your desktop ->Downgrade
From the archive ->futurerestoreportable ->futurerestore_macosin the folder on your desktop ->Downgrade
SHSH ->******** 09796_iPad4,2_j72ap_10.2-14C92.shsh copy to the folder on your desktop -> Downgrade
Firmware (iOS 10.2, which we roll back) ->iPad_64bit_10.2_14C92_Restore.ipswcopy to the folder on your desktop ->Downgrade
Firmware (iOS 10.2.1, current, signed by Apple) ->iPad_64bit_10.2.1_14D27_Restore.ipsw change the extension -> iPad_64bit_10.2.1_14D27_Restore.zip
Double click ->iPad_64bit_10.2.1_14D27_Restore.zip The archive will be unzipped.
Open the folder ->iPad_64bit_10.2.1_14D27_Restore ->BuildManifest.plist copy to the folder on your desktop -> Downgrade
Open the folder ->iPad_64bit_10.2.1_14D27_Restore \ Firmware ->Mav7Mav8-7.21.00.Release.bbfw copy to the folder on your desktop -> Downgrade
For devices without a SIM - this is not relevant, for them there is no* .bbfw , skip this step.
In folder ->\ Firmware multiple versions* .bbfw
Apple releases firmware that is suitable for multiple devices, device models. For example, you have an iPhone 6.
iPhone_4.7_10.2.1_14D27_Restore is suitable for 2x devices ->iPhone 6 and iPhone 6S, in firmware ->iPhone_4.7_10.2.1_14D27_Restore \ Firmware will be the 2nd version of the firmware for the modem (Mav10-5.32.00.Release.bbfw (iPhone 6) and Mav13-2.41.00.Release. bbfw (iPhone 6S)).
What is your version of the modem, you can find out ->Modem Versions

Be careful, carefully check all the data.

Attached Image
Open the folder ->iPad_64bit_10.2.1_14D27_Restore \ Firmware \ all_flash \ all_flash.j72ap.production ->sep-firmware.j72.RELEASE.im4p copy to the folder on your desktop -> Downgrade
In folder ->\ Firmware \ all_flash multiple versionsall_flash. *****. production
Apple releases firmware that is suitable for multiple devices, device models. For example, you have an iPhone 6.
iPhone_4.7_10.2.1_14D27_Restore is suitable for 2x devices ->iPhone 6 and iPhone 6S, in firmware ->iPhone_4.7_10.2.1_14D27_Restore \ Firmware \ all_flash there will be 3 folders
all_flash.n61ap .production \ sep-firmware. n61 .RELEASE. im4p (iPhone 6)
all_flash.n71ap .production \ sep-firmware. n71 .RELEASE. im4p (iPhone 6S),
all_flash.n71map .production \ sep-firmware. n71m .RELEASE. im4p (iPhone 6S))

iPhone 6S is available in 2 versions, they differ in different processors ->n71ap (Samsung A9 processor), n71map (TSMC A9 processor).
What is the internal name of your device, you can find out ->Apple Device Model IDs
In the case of iPhone 6S, iPhone 6S Plus, iPhone SE, immediately install on the device ->BmsmThe program will accurately determine the internal name of the device.

Be careful, carefully check all the data.

Attached Image

In folder ->Downgrade must be 6 files. (6 files including one (* .shsh ->apnonce), in this method (* .shsh ->apnonce) may be several.
For devices without a SIM will be5 files, * .bbfw for them is missing. (5 files including one (* .shsh ->apnonce), in this method (* .shsh ->apnonce) may be several.
Attached Image
******** 09796_iPad4,2_j72ap_10.2-14C92.shsh ->certificate from the firmware for which we roll back / restore (iOS 10.2), in this method (* .shsh ->apnonce) may be several.
BuildManifest.plist ->file with information for iTunes, we take from the current firmware ->iOS 10.2.1.
futurerestore_macos ->executable file futurerestore for macOS.
iPad_64bit_10.2_14C92_Restore.ipsw ->firmware for which we roll back / restore (iOS 10.2).
Mav7Mav8-7.21.00.Release.bbfw ->firmware for modem, we take from the current firmware ->iOS 10.2.1<- relevant for devices with SIM.
sep-firmware.j72.RELEASE.im4p ->is used to download the software of the kernel system and data, we take from the current firmware ->iOS 10.2.1

For normal operationfuturerestoreadditional packages are needed, we open the terminal and enter commands.
⬇⬇⬇
Open a terminal and enter commands one by one
Attached Image
  1. xcode-select --install

  2. / usr / bin / ruby ​​-e "$ (curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"

  3. brew install automake autoconf libtool pkg-config libplist openssl libzip
    git clone https://github.com/tihmstar/libirecovery && cd ./libirecovery && bash autogen.sh && make install
    cd
    git clone https://github.com/tihmstar/libcrippy && cd ./libcrippy && bash autogen.sh && make install
    cd
    git clone https://github.com/tihmstar/libfragmentzip && cd ./libfragmentzip && bash autogen.sh && make install
    cd
    git clone https://github.com/tihmstar/libpartialzip && cd ./libpartialzip && bash autogen.sh && make install

  4. cd / usr / local
    sudo mkdir ssl
    sudo chmod 777 / usr / local / ssl
    cd
    git clone https://github.com/openssl/openssl.git
    cd openssl
    ./config
    make
    make install

  5. brew install curl

  6. ln -s /usr/local/opt/openssl/lib/libcrypto.1.0.0.dylib / usr / local / lib /
    ln -s /usr/local/opt/openssl/lib/libssl.1.0.0.dylib / usr / local / lib /
    ln -s /usr/local/Cellar/openssl/1.0.2j/bin/openssl openssl

After preparing the necessary files and system, go to the main, preparing the device for rollback / recovery.
1. Open the terminal.
2. We enter cd , press the spacebar and drag the folder to the terminal -> Downgrade
Attached Image

Attached Image
3. Hit Enter
Attached Image
4. To be sure that we are in the right folder, enter ls and hit enter
Attached Image

Attached Image
5. We enter chmod + x futurerestore_macos and hit enter
Attached Image

Attached Image
The next step will be final, after which the rollback / restore will begin. The core team looks like this:
./futurerestore_macos -t **. shsh2 -b **. bbfw -p BuildManifest.plist -s **. im4p -m BuildManifest.plist -w **. ipsw

Where**the names of the main files in the folder ->Downgrade
My team, with my data looks like this:
./futurerestore_macos -t ******** 09796_iPad4,2_j72ap_10.2-14C92.shsh -b Mav7Mav8-7.21.00.Release.bbfw -p BuildManifest.plist -s sep-firmware.j72.RELEASE.im4p - m BuildManifest.plist -w iPad_64bit_10.2_14C92_Restore.ipsw

You can use several certificates at once (* .shsh ->apnonce)
-t **. shsh -t **. shsh -t **. shsh -t **. shsh -t **. shsh

Data example
./futurerestore_macos -t ******** 09796_iPad4,2_j72ap_10.2-14C92.shsh -t ******** 09796_iPad4,2_j72ap_10.2-14C92_1.shsh -t ******* * 09796_iPad4,2_j72ap_10.2-14C92_2.shsh -b Mav7Mav8-7.21.00.Release.bbfw -p BuildManifest.plist -s sep-firmware.j72.RELEASE.im4p -m BuildManifest.plist -w iPad_64bit_10.2_14C92_r

If your device is without a SIM, the command will be
./futurerestore_macos -t **. shsh2 -s **. im4p -m BuildManifest.plist -w **. ipsw --no-baseband

Data example
./futurerestore_macos -t 7939302025234321_iPad5,1_j96ap_10.2-14C92.shsh -s sep-firmware.j96.RELEASE.im4p -m BuildManifest.plist -w iPad_64bit_TouchID_10.2_14C92_Restore.ipsw --no-baseband

6. We enter ./futurerestore_macos -t ******** 09796_iPad4,2_j72ap_10.2-14C92.shsh -b Mav7Mav8-7.21.00.Release.bbfw -p BuildManifest.plist -s sep-firmware.j72.RELEASE.im4p - m BuildManifest.plist -w iPad_64bit_10.2_14C92_Restore.ipsw and hit enter
Do not close the terminal window, do not disconnect the device from the Mac, check everything several times.
Picking apnonce can take quite a long time. There are no guarantees that a suitable apnonce will be found for iOS rollback / recovery.
If after entering the main command,futurerestoregave an error, useReiboot(or with the command ->./futurerestore_macos --exit-recovery) to take the device out of recovery mode and describe in detail the error received.
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Done: restoring succeeded. Congratulations, after successful recovery, block iOS update ->How to disable automatic iOS update


Post has been editedT0ugh - 18.04.19, 01:20
Reason for editing: v.2.0b (full)
T0ugh
Message#2
01.03.17, 15:10
^_^
*********
[offline]

Topics Curator
Group: Moderators
Messages 5632
Check in: 20.10.09
Apple iPhone 5

Reputation:-  1448  +

M
Please do not flood, carefully read the cap / topic.
In this topic, we discuss only futurerestore!


Post has been editedT0ugh - 01.03.17, 15:23


--------------------
kup2012
Message#3
07.03.17, 21:06
Man from Cupertino
*********
[offline]

Group: Friendssavagemessiahzine.com
Messages 2509
Check in: 31.07.12
Apple iPhone 5s

Reputation:-  301  +

Prometheus utility author ->@tihmstar reported thatWindows utility will not be released!
If installedWindows -->use a virtual machine.

Post has been editedkup2012 - 07.03.17, 21:07


--------------------
In QMS I do not help, I do not advise!
Va1kyr
Message#4
15.03.17, 16:51
Local
*****
[offline]

Group: Friendssavagemessiahzine.com
Messages 255
Check in: 31.12.10
Apple iPhone 5s

Reputation:-  12    +

errorcode = -20 and that's it. Although how many mistakes the fence ... this does.
(iPad Air, 8.1.2 JB). I tried different instructions that I found.

UPD: Surprisingly, without any problems, rolled back from 10.3 b1 (instruction ->jailbreak method).

Post has been editedVa1kyr - 20.03.17, 00:57


--------------------
Apple iPhone 5s 32GbiOS 10.3.3+ Apple iPad Air 16Gb Wi-FiiOS 10.2Jb
Computershik
Message#5
23.03.17, 18:06
Symbian Developer
*******
[offline]

Group: Curators
Messages 731
Check in: 13.08.14
Nokia E90 Communicator

Reputation:-  74  +

Zdarov! I have an iPhone 5S, stood iOS 10.1.1, flew sidium, updated to 10.2.1.
Neither shsh nor shsh2 have any. I plan to put 10.3 beta 1 to roll back to 10.2.
I shsh2 from 10.2.1 it makes sense to save, to roll back to 10.2? Or is it too late / impossible / pointless?

I read the cap, read the whole topic, a lot of noise and nothing is clear.

Post has been editedComputershik - 23.03.17, 18:07


--------------------
Curator

4 download


NokiaN8 / C3-00Prototype / 5800XM / 5530XM / N97mini / 2700 / С6-00 / 6260/7610 / N73 / N72 / E72 / 603 / Lumia520 / SamsungWave525 / MicrosoftLumia532 / iPhone 5S / MotorolaW208
Batrakov
Message#6
23.03.17, 20:41
Old resident
*******
[offline]

Group: Friendssavagemessiahzine.com
Messages 740
Check in: 04.11.07
Apple iPhone 6s

Reputation:-  21  +

Computershik @ 03/23/17, 20:06*
I shsh2 from 10.2.1 it makes sense to save, to roll back to 10.2?

Not.
==============================
Now you can demolish jail according to the instructions.http: //www.ipodhacks14…ia-eraser-alternative/
I have not tried it myself yet.

Post has been editedBatrakov - 23.03.17, 20:42


--------------------
iPhone 6S (11.4.1 + Electra1141-1.3.2)
iPad Pro 2 12.9 "(12.1.1 + unc0ver)
armagedroyd2014
Message#7
23.03.17, 22:39
Local
*****
[offline]

Group: Friendssavagemessiahzine.com
Messages 333
Check in: 03.03.13
Apple iPhone 8 Plus

Reputation:-  11  +

Can I still roll back to 10.2 with 5S 9.3.3?


--------------------
Batrakov
Message#8
28.03.17, 09:44
Old resident
*******
[offline]

Group: Friendssavagemessiahzine.com
Messages 740
Check in: 04.11.07
Apple iPhone 6s

Reputation:-  21  +

A week or two will close the subscription 10.2.1.
SHSH2 from 10.2 can be used while being signed 10.3?
Is there any compatibility of files from 10.3 (it seemed to be on beta)?

Post has been editedBatrakov - 05.04.17, 13:09


--------------------
iPhone 6S (11.4.1 + Electra1141-1.3.2)
iPad Pro 2 12.9 "(12.1.1 + unc0ver)
T0ugh
Message#9
28.03.17, 12:02
^_^
*********
[offline]

Topics Curator
Group: Moderators
Messages 5632
Check in: 20.10.09
Apple iPhone 5

Reputation:-  1448  +

Batrakov @ 03/28/17, 09:44*
Is there any compatibility of files from 10.3 (it seemed to be on beta)?

SEP (Secure Enclave Processor)
Secure enclave- This is a coprocessor built into Apple T1, Apple S2, Apple S3, Apple A7 and newer processor series A. processors.Secure enclaveuses encrypted memory and includes a hardware random number generator.Secure enclaveensures that all cryptographic operations are performed to manage data protection keys and ensures the integrity of the data protection system even in the event of a kernel security breach. Data exchange betweenSecure enclaveand the program processor is limited to a mailbox that is controlled by interrupts, and general data buffers in memory.
ATSecure enclaveversion of the microkernel L4 is used, which was modified by Apple. This microkernel is signed by Apple, checked for entry into the safe iOS download sequence, and updated during the individual software update process.
During device boot, a dynamic key is created that is associated with the device UID. This key encrypts the device’s memory area.Secure enclave. On all processors except Apple A7, the dynamic key is also used to authenticate the memory.Secure enclave. The Apple A11 processor uses an integrity tree to prevent retransmission of safety-critical memory.Secure enclave. This tree is authenticated using a dynamic key and nonce values ​​stored in the SRAM on the chip.
In addition, all data stored by the coprocessorSecure enclavein the file system, they are encrypted using a key that is associated with a UID and an anti-repeat counter. Secure Enclave's anti-replay services are used to invalidate data outside of events that indicate anti-replay boundaries, including but not limited to the following:
  • change passcode;
  • Enable / Disable Touch ID or Face ID;
  • add / remove fingerprint;
  • reset Face ID;
  • add / remove Apple Pay card;
  • erasing all content and settings.
Secure enclavealso responsible for processing the data received by the Touch ID and Face ID sensors. It verifies the data with registered fingerprints or persons and allows access or purchase on behalf of the user.

SEP Compatibility Chart ->iOS SEP (Secure Enclave Processor) Compatibility on ALL 64bit Device! <-
+ The status of the 12.2 SEP (don't use it!) & Futurerestore

Archive
iOS 10.2
From sep from iOS 10.3 everything works ->reddit.com/r/jailbreak/ - 1 / reddit.com/r/jailbreak/ - 2
From sep from iOS 10.3.1 everything works ->reddit.com/r/jailbreak/ - 1
From sep from iOS 10.3.2 everything works ->twitter.com
From sep from iOS 10.3.3 everything works ->reddit.com/r/jailbreak/ - 1
sep from iOS 11 is incompatible with iOS 10.x.x ->reddit.com/r/jailbreak/ - 1

iOS 11.1.2
From sep from iOS 11.2, iOS 11.2.1 everything works ->reddit.com/r/jailbreak/ - 1
From sep from iOS 11.2.2 everything works ->reddit.com/r/jailbreak/ - 1
From sep from iOS 11.2.5 everything works ->reddit.com/r/jailbreak/ - 1
From sep from iOS 11.2.6 everything works ->reddit.com/r/jailbreak/ - 1
sep from iOS 11.3 is incompatible with iOS 11.1.2 ->reddit.com/r/jailbreak/ - 1

iOS 11.3.1
From sep from iOS 11.4 everything works ->reddit.com/r/jailbreak/ - 1
From sep from iOS 11.4.1 everything works ->reddit.com/r/jailbreak/ - 1
IPhone X has compatibility issues sep 11.3.1 c 11.4.x, Face ID does not work, other problems are possible ->reddit.com/r/jailbreak/ - 1
From sep from iOS 12.0 / 12.0.1 everything works (A7 - A8) ->reddit.com/r/jailbreak/ - 1 /
sep is not compatible with devices on A9 processors - A11!
From sep from iOS 12.1 - 12.1.3 everything works (A7 - A8) ->reddit.com/r/jailbreak/ - 1 /
sep is not compatible with devices on A9 processors - A11!


Post has been editedT0ugh - 25.04.19, 13:56
Reason for editing: upd


--------------------
Batrakov
Message#10
04.04.17, 09:41
Old resident
*******
[offline]

Group: Friendssavagemessiahzine.com
Messages 740
Check in: 04.11.07
Apple iPhone 6s

Reputation:-  21    +

armagedroyd2014 @ 03.24.17, 00:39*
Can I still roll back to 10.2 with 5S 9.3.3?

Yes you can!


--------------------
iPhone 6S (11.4.1 + Electra1141-1.3.2)
iPad Pro 2 12.9 "(12.1.1 + unc0ver)
Batrakov
Message#11
05.04.17, 08:31
Old resident
*******
[offline]

Group: Friendssavagemessiahzine.com
Messages 740
Check in: 04.11.07
Apple iPhone 6s

Reputation:-  21  +

* T0ugh
At the sixth point an error occurs.
Previously, this was not. What is the reason?
Attached Image

Understood ... You need to delete the file known_hosts
When you first connect to the selected SSH server, the program will ask you for confirmation of the authenticity of the public key provided by the server:
The authenticity of host 'mars.phys.petrsu.ru (172.20.180.10)' can't be established.
RSA key fingerprint is 3a: 12: 77: a3: 8d: 83: c8: 49: fd: f7: 66: e4: ad: ae: 0e: 44.
Are you sure you want to continue connecting (yes / no)?
If the “fingerprint” of the key matches the one specified on this page, type yes and press Enter. By answering this question in a different way (for example, simply pressing Enter), the program will consider that the authenticity of the remote server causes you to doubt and break the connection:
Host key verification failed
If you have recognized and accepted the key, the program will save a copy of the server's public key on your local computer in the file ~ / .ssh / known_hosts:
Warning: Permanently added '172.20.180.10' (RSA) to the list of known hosts
and on subsequent connections, it will compare the key provided by the server with this local copy, without requiring you to confirm. If the key later provided by the server differs from the one stored in the cache, the SSH client will issue a warning message and break the connection:


P.S .: if an error occurs on the final team:
[Error] can't init, no device found
Failed with errorcode = -3

Then put the device into recovery mode using ReiBoot and run the final command again.
Or
5- In the same terminal (terminal A), type auto-boot = false, in this case, it would be impossible for the autoboot to proceed with prometheus instead.
If you’re on your own booty go).
In the same terminal again (terminal A) type in “reboot“ and enter.
If you’re laundering it
6- Device should not be in recovery mode.
now run: chmod + x futurerestore_macos (in terminal A, and go to the next step).


Post has been editedBatrakov - 06.04.17, 13:28


--------------------
iPhone 6S (11.4.1 + Electra1141-1.3.2)
iPad Pro 2 12.9 "(12.1.1 + unc0ver)
blabla3k
Message#12
05.04.17, 15:02
Novice
***
[offline]

Group: Active users
Messages 36
Check in: 20.07.12
Jiayu G4 Standart

Reputation:-  -1  +

Hello everyone! Pts do not kick much straight, read both the cap and related topics, and the topic itself but not completely, but did not understand anything, I have an airypair first from 10.2.1, can I at least roll back to 10.2 in some way? for rollback, you need shs from 10.2 but where to get them if I didn’t have 10.2, I still have a groove, excuse me for the noob questions.
Batrakov
Message#13
05.04.17, 17:15
Old resident
*******
[offline]

Group: Friendssavagemessiahzine.com
Messages 740
Check in: 04.11.07
Apple iPhone 6s

Reputation:-  21  +

Blabla3k @ 04/05/17, 17:02*
I have ayped air first with 10.2.1, can I at least roll back to 10.2 in any way?

No, you can not.


--------------------
iPhone 6S (11.4.1 + Electra1141-1.3.2)
iPad Pro 2 12.9 "(12.1.1 + unc0ver)
Aid nirvana
Message#14
06.05.17, 21:49
User
****
[offline]

Group: Friendssavagemessiahzine.com
Messages 81
Check in: 08.11.09
Xiaomi Mi Max 2 4/64

Reputation:-  21  +

Get updated from 9.3.2 to 10.2 (Apple iPad Pro)?
T0ugh
Message#15
06.05.17, 22:03
^_^
*********
[offline]

Topics Curator
Group: Moderators
Messages 5632
Check in: 20.10.09
Apple iPhone 5

Reputation:-  1448  +

* Aid Nirvana,
It turns out if all the nuances are met.


--------------------
pchela812
Message#16
14.05.17, 20:35
Visitor
**
[offline]

Group: Active users
Messages 24
Check in: 07.12.10
Apple iPhone 6s

Reputation:-  2  +

Hello. I'm trying to ipad air c 9.3.3 roll 10.2
An error occurs:

[Error] Devicenonce does not match APTicket nonce
[Error] maybe you forgot -w?
Done: restoring failed.
Failed with errorcode = -20


--------------------
[iPhone 6s 16gb iOS 12.1.2 JB] [iPad Air 32gb iOS 10.3.3 JB]
T0ugh
Message#17
14.05.17, 21:04
^_^
*********
[offline]

Topics Curator
Group: Moderators
Messages 5632
Check in: 20.10.09
Apple iPhone 5

Reputation:-  1448  +

[Error] Devicenonce does not match APTicket nonce

https://github.com/tih...uturerestore/issues/49
If you do everything correctly, perhaps shsh2 you are using is not suitable for rollback.


--------------------
pchela812
Message#18
14.05.17, 21:22
Visitor
**
[offline]

Group: Active users
Messages 24
Check in: 07.12.10
Apple iPhone 6s

Reputation:-  2  +

T0ugh @ 05.14.17, 21:04*
If you do everything correctly, perhaps shsh2 you are using is not suitable for rollback.

Here at this moment garbage:
iPad-Air: ~ root # nvram com.apple.System.boot-nonce = 0x91c1f7019f6 *****
nvram: Error setting variable - 'com.apple.System.boot-nonce': (iokit / common) general error
* T0ugh
On the site Konon checked the certificate and it is working. I do not understand why it does not work

Post has been editedT0ugh - 02.06.17, 14:24
Reason for editing: Extra spaces


--------------------
[iPhone 6s 16gb iOS 12.1.2 JB] [iPad Air 32gb iOS 10.3.3 JB]
intelfx86
Message#19
02.06.17, 05:23
Visitor
**
[offline]

Group: Active users
Messages 21
Check in: 15.02.16
Apple iPhone 5s

Reputation:-  0  +

I confirm the compatibility of SEP / baseband images from 10.3.2 for iPhone 5s (GSM). I just flashed my phone from 9.3.3 to 10.2 using the latest SEP / baseband (out of 10.3.2). Touch ID works. In other words, the method is still relevant.
Here at this moment garbage:
iPad-Air: ~ root # nvram com.apple.System.boot-nonce = 0x91c1f7019f6 *****
nvram: Error setting variable - 'com.apple.System.boot-nonce': (iokit / common) general error

* pchela812did you run nonceEnabler on your phone? Even if launched, sometimes it does not work. A symptom of a nonceEnabler failure is the words "got wrong hit" and a lot of searching for kbase in its exhaust. If this is the case for you, you can follow the following instructions (commands are for GNU / Linux with libimobiledevice / libirecovery installed, if you don’t have one, look for a similar way to do the same, I’m not familiar with other OSs):
  1. Disable password protection / Touch ID
  2. Transfer phone to recovery mode (`sudo ideviceenterrecovery`)
  3. In recovery mode, reset NVRAM devices (`sudo irecovery –r`)
  4. Go back to normal mode (`sudo irecovery -n`)
  5. Restore jailbreak and run nonceEnabler again

In my case, the execution of these actions led to the fact that nonceEnabler worked quickly (without "got wrong hit" and a long search for kbase), after which I managed to set nonce and execute the rest of the method without problems.
lapocalypsel
Message#20
23.06.17, 14:38
Visitor
**
[offline]

Group: Active users
Messages 17
Check in: 07.06.12
Apple iPad mini 2

Reputation:-  0  +

Is it possible to firmware iPad mini 2 x64 iOS 9.3.2 with Jail on iOS 10.2?
T0ugh
Message#21
24.06.17, 00:10
^_^
*********
[offline]

Topics Curator
Group: Moderators
Messages 5632
Check in: 20.10.09
Apple iPhone 5

Reputation:-  1448  +

* lapocalypsel
If all the nuances are met - YES.


--------------------

21 pagesV  1 2 3 4 5 6 > » 


 mobile version    Now: 06/22/19/04: 04