[X]Assistant

[T0ugh]

Rollback with futurerestore (Odysseus)
\ iPhone (4S, 5, 5C), iPod touch 5G, iPad (2, 3, 4), iPad mini 1 /

IOS firmware | [FAQ] The relevance of the firmware | Apple Device Model IDs | futurerestore | kDFUApp

What is a rollback (downgrade)?

• Rollback (downgrade) - install the old version of iOS, which is officially no longer relevant on the Apple server and is not signed by the SHSH certificate. Officially, you can only flash on the latest, current firmware.
• For informativeness ->Wikipedia

You need to understand the following:

• For rollback usingfuturerestoreneed a jailbreak.
• For rollback usingfuturerestorepreviously saved SHSH required.
• futurerestoresupports ->iPhone (4S, 5, 5C), iPod touch 5G, iPad (2, 3, 4), iPad mini 1
• futurerestoresupports ->Linux and macOS, does not support Windows.

To roll back / restore iOS, we need:

• macOS (10.10 Yosemite, 10.11 El Capitan, 10.12 Sierra).
• Firmware for our device on which we roll back ->IOS firmware
• Previously saved SHSH from the firmware on which we roll back.
• futurerestorefor rollback.
• kDFUApp from repository ->http://repo.tihmstar.net

For example, takefuturerestorefor macOS, iPhone 4S (A1387, A1431) (onboard iOS 9.3.5) with an identifier ->iPhone4,1 (n94ap) and SHSH ->******** 44587-iPhone4,1-7.1.2-11D257.shsh to roll back to iOS 7.1.2
Create a folder on your desktop ->Downgrade
From the archive ->futurerestoreportable ->futurerestore_macosin the folder on your desktop ->Downgrade
SHSH ->******** 44587-iPhone4,1-7.1.2-11D257.shshcopy to the folder on your desktop ->Downgrade
Firmware (iOS 7.1.2, to which we roll back) ->iPhone4,1_7.1.2_11D257_Restore.ipswcopy to the folder on your desktop ->Downgrade

In folder ->Downgrademust be3a file.

******** 44587-iPhone4,1-7.1.2-11D257.shsh ->certificate from the firmware for which we roll back / restore (iOS 7.1.2).
futurerestore_macos ->executable file futurerestore for macOS.
iPhone4,1_7.1.2_11D257_Restore.ipsw ->The firmware for which we roll back / restore (iOS 7.1.2).

For normal operationfuturerestoreadditional packages are needed, we open the terminal and enter commands.
🢃🢃🢃

Open a terminal and enter commands one by one

1. xcode-select --install
   
   
2. / usr / bin / ruby ​​-e "$ (curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"
   
   
3. brew install automake autoconf libtool pkg-config libplist openssl libzip
   git clone https://github.com/tihmstar/libirecovery && cd ./libirecovery && bash autogen.sh && make install
   cd
   git clone https://github.com/tihmstar/libcrippy && cd ./libcrippy && bash autogen.sh && make install
   cd
   git clone https://github.com/tihmstar/libfragmentzip && cd ./libfragmentzip && bash autogen.sh && make install
   cd
   git clone https://github.com/tihmstar/libpartialzip && cd ./libpartialzip && bash autogen.sh && make install
   
   
4. cd / usr / local
   sudo mkdir ssl
   sudo chmod 777 / usr / local / ssl
   cd
   git clone https://github.com/openssl/openssl.git
   cd openssl
   ./config
   make
   make install
   
   
5. brew install curl
   
   
6. ln -s /usr/local/opt/openssl/lib/libcrypto.1.0.0.dylib / usr / local / lib /
   ln -s /usr/local/opt/openssl/lib/libssl.1.0.0.dylib / usr / local / lib /
   ln -s /usr/local/Cellar/openssl/1.0.2j/bin/openssl openssl

After preparing the necessary files and system, go to the main, preparing the device for rollback / recovery.

1.Open Cydia on your device and add a repository ->http://repo.tihmstar.net
2.Install from repository ->kDFUApp.
3.We connect the device to the computer and runkDFUAppfrom the main screen.

4.Activate all switches so that they becomegreenatkDFUApp.

5.It does not matter which version is listed in the Bundle.
6.Pushenter kDFUThe device will go into DFU mode (black screen).

7.Open the terminal.
8.We entercd, press the spacebar and drag the folder to the terminal ->Downgrade



9.Hit Enter

10.To be sure that we are in the right folder, enterlsand hit enter



11.We enterchmod + x futurerestore_macosand hit enter



The next step will be final, after which the rollback / restore will begin. The core team looks like this:

./futurerestore_macos -t **. shsh --latest-baseband --use-pwndfu **. ipsw

Where**the names of the main files in the folder ->Downgrade
My team, with my data looks like this:

./futurerestore_macos -t ******** 44587-iPhone4,1-7.1.2-11D257.shsh --latest-baseband - use-pwndfu iPhone4,1_7.1.2_11D257_Restore.ipsw

If your device is without a SIM, the command will be

./futurerestore_macos -t **. shsh --no-baseband --use-pwndfu **. ipsw

Data example

./futurerestore_macos -t ******** 84401-iPad3,4-7.1.2-11D257.shsh --no-baseband --use-pwndfu iPad3,4_7.1.2_11D257_Restore.ipsw

12.We enter./futurerestore_macos -t ******** 44587-iPhone4,1-7.1.2-11D257.shsh --latest-baseband - use-pwndfu iPhone4,1_7.1.2_11D257_Restore.ipswand hit enter
Do not close the terminal window, do not disconnect the device from the Mac, check everything several times.




Done: restoring succeeded. Congratulations, after successful recovery, block iOS update ->How to disable automatic iOS update

Post has been editedT0ugh - 18.08.17, 12:25

[123asds]

Thank you very much! Finally I was able to roll back my old man 4S without difficulty to 8.3! Certificates from TinyUmbrella were useful after all. I didn’t have shsh signatures for baseband and a miracle, he downloaded it from the epl server ... Super! It's a pity there is no certificate from 7.1.2. It was stitched from 6.1.3 to 8.3 on the 10.13.4 hackintosh. : lol:: rolleyes:: happy:

Nobody knows how to save the certificate which is already in it after the jailbreak now?

Post has been edited123asds - 01.08.18, 17:27

[Batrakov]

[email protected], 19:24

Nobody knows how to save the certificate which is already in it after the jailbreak now?

With JB, you can pull SHSH from the device.
Save SHSH for all devices

Post has been editedBatrakov - 07.08.18, 16:00

[sverccosh]

123asds,

I really don't understand how you do it. I have an error when reading certificates

Post has been editedsverccosh - 07.08.18, 23:12

[alexander_mironov]

Good evening. Please tell me if it is possible with a SHSH certificate (7.0.4) to downgrade the firmware version of iPad 3 from 9.3.5 ->7.0.4

Post has been editedalexander_mironov - 19.08.18, 21:11

[T0ugh]

iKDFU ->https://albyvar.yourepo.com

Supports all 32 bit devices starting from iPhone 4s, iPad 2, iPod Touch 5 and iPad mini 1. Automatically detects what kind of software you need.

@ albyvar25
\\
com.yourepo.albyvar.ikdfu_1.0.deb(2.49 MB)

iKDFU 2.0 ->https://albyvar25.github.io/cydia/

Changelog:
-Redesigned UI
-Way simpler
-Hopefully fixed crash on 10.x devices (need to test)
-Supports 6.0-10.3.3
-Added support for iPhone 3GS
-Faster kloader on 9.x and lower
-Fixed UI issues on some devices
As always, no dependencies needed

@ albyvar25
\\
albyvar.ikdfu_2.0.deb(2.9 MB)


Post has been editedT0ugh - 09.02.19, 12:00

[Viktor100500]

Earth.lukas @ 08/23/17, 16:18

5. Decrypt and patch iBSS. Yes, only iBSS without iBEC, which makes it easy. To do this, look for the bundle for your iDevice here, download, and take from it the file "iBSS.identifier_your_models.RELEASE.patch" (I had "iBSS.p105.RELEASE.patch") - it will be needed for the patch, but for now let's go to Windows, run FCE 365 Firmware Manager (here it is). First iBSS is decrypted with the help of keys (and they are here), and then patched with the help of that file "iBSS.your_mobile_ identifier.RELEASE.patch" and save the file with * .patched extension (let's call it ibss.patched), we will need it later. If you have, like me, iPad2.5 - take my ibss.patched.zip (48.62 KB)

Can you please describe this item in more detail? Nothing is clear at all. I have an iPad2.7. Bundle for him in the application. I'm flashing from 9.3.5 to 8.4.1
PS Update via substitution version iOS 6.0 or 6.1.3. does not work. iOS 8.4.1 arrives, but when you click the "download and install" button, it produces an unknown error.
Down_iPad2,7_8.4.1_12H321.bundle.rar(3.48 KB)

T0ugh @ 09/05/18, 20:18

iKDFU ->https://albyvar.yourepo.com

I tried using the method from the header, using this application to log in to kDFU (since it does not support ipad2.7 in the header) to flash ipad2.7 from iOS 9.3.5 on iOS 8.4.1
At the final step, on the plow. Writes Fatal error = -9. Help me please.

C mistake -9 figured out. The file extension in the command is not shsh, but shsh2. The process started and stopped at about the middle with the following error:

Sending iBSS (78044 bytes) ...
[==================================================] 100.0%
Sending iBEC (282844 bytes) ...
[==================================================] 100.0%
[Error] ERROR: Unable to connect to recovery device
Done: restoring failed.
Failed with errorcode = -94

Post has been editedT0ugh - 21.10.18, 10:10

Reason for editing: Extra spaces

[basa_5]

Viktor100500,
The same mistake. ipad 2.4. On the Internet, found a solution, but the English. I know badly. If anyone needs a link here, unsubscribe if it works.
https://github.com/tih…turerestore/issues/198

Post has been editedbasa_5 - 25.10.18, 13:23

[de_roy]

Good day. Need advice or advice. I have an iPhone 5 on iOS 8.3 without JB, I want to upgrade to ios 9.3.5 and at the same time not to do JB. Is it possible? And how to do this if possible?
Thank.

[T0ugh]

de_roy,
Perhaps if you have shsh from 9.3.5 and you need jail, no shsh, no jail, no 9.3.5.

[Voode]

I am trying to extract apticket.der, which is located in ->/ System / Library / Caches / (ios 6.1 ipad3,6)

but my place is empty.

In the topic I read, it is advised to generate shsh from the device using Odysseus. is meant OTA2?

And in general, do I need to re-sew 6.1 clean in order to update to 8.4.1, or can I immediately 8.4.1 sew asalready mentioned?
There is a simple rollback option for 32 bit devices (tested on ipad3.6) from 10.3.3, which ended up trying to upgrade to 8.4.1 from 6.1) suitable for windows x64.

http://www.3u.com/news...to-ios841-without-shsh
in kdfu entered according to the instructions
http: //3utools.blogspo…r-kdfu-mode-using.html

the only caveat - in the process, the poppy wi-fi address changes to 88: AA: A8: 99: 8A: 9B. this is different, different from the one that is assigned when rolling back from 10.3.3. with the substitution of the firmware version (54: EA: A8: 85: 2D: 5Fhttps: //www.reddit.com..._to_ios_841_from_ios/)

after the firmware just changed it in the terminal with the nvram command wifiaddr = native_address
reboot, re-activation without problems and as a result we have 8.4.1 on board.

All the options for utilities from Odysseus did not help me, according to the manual of 5 messages, the device was never defined as a system one. the remaining methods translated the device into kdfu, but failed to send iBSS and iBEC to the device. tried everything on macbook with high sierra


Post has been editedVoode - 26.12.18, 01:36

[eeriesilence]

A small review on the successful rollback Ipad mini 2.7 from 9.3.5 to 7.1.1.
1.Unfolded according to the instructions in the header on the VM MacOS futurerestore and reached the step with kDFUApp.
kDFUApp on 2.7 does not work.

2. According to the instructionsearth.lukasI did all the steps to the point number 5.
Then we fall into a stupor, since for 9.3.5 there is no bundle for 2.7.

3. We roll back through OTA hack to 8.4.1:
- We start on jailbroken 9.3.5 iFile.
-We go on the way System>Library>CoreServices.
- Find and open the SystemVersion.plist file

Now attention.In lineProductVersionwe enterminimum version 6iosfor your device. In our case for2.7 this6.0.1
In lineProductBuildVersionwrite the version number of the firmware, in our case it is10A8426
Version can be found here.Official firmware for iPhone / iPod / iPad / ATV
Reboot, go to the settings and click updated to 8.4.1.

If the process does not go press again, then the main thing is patience. After downloading, when the install button appears, do not click it.
We leave from your account. Then install the firmware.

4. Return to the instructions.earth.lukas
You need to patch the iBSS file from the current firmware (8.4.1). To do this, download the firmware from the header, after 7z open and search for iBSS, extract it to a place convenient for you.
Bundle for 8.4.1 take hereRollback using futurerestore (Odysseus) (Post adober # 65988502)
Then we do everything according to the instructions, the only thing that you can not mount ipad in dfu in a virtual machine.
To do this, in the usb VM filters specify our ipad. Disconnect the cable from it, restart the PC. Run the virtual macos, wait for the launch and only then connect the tablet.
If you really need someone, I can fill in the virtual image of the virtual machine with everything already ready, just register my files.

Post has been editedeeriesilence - 14.02.19, 14:55

[Adder1983]

good day. can someone tell me how to roll back ipad 2.1 to linux. if you can link with detailed instructions for dummies: rolleyes: otherwise I am not strong in it. thank you in advance. the fourth day I fight with him while he wins

Post has been editedAdder1983 - 05.06.19, 23:29