MA
MalwareWerewolf/Legacy-iOS-Kit
A multi-purpose script to save blobs, restore, and jailbreak supported legacy iOS devices
Legacy iOS Kit using bash from homebrew
This repo contains some small changes to use the last updated version of bash from homebrew. Since Apple Silicon, the default path where all the homebrew packages are installed is /opt/homebrew.
The default bash used by macOS is outdated, so when running the script from the official repo, you will get an error to update bash but on macOS you can't do that or even if you manage to change the default version, you will get some issues and the OS won't boot anymore.
A more detailed introduction to the script
- (formerly iOS-OTA-Downgrader)
- A multi-purpose script to save SHSH blobs, downgrade/restore, and jailbreak supported legacy iOS devices
- Linux, macOS, and Windows are supported
- Windows usage is not recommended
- Read the "How to Use" wiki page for usage instructions
- Read the "Troubleshooting" wiki page for tips, frequent questions, and troubleshooting
Features
- Restore to iOS 8.4.1 or 6.1.3 on supported 32-bit devices (OTA signed)
- Restore iPhone 4 GSM (iPhone3,1) to unsigned iOS versions (powdersn0w)
- Restore to iOS 10.3.3 on supported A7 devices (OTA signed)
- Option to jailbreak iOS 6.1.3 and 8.4.1 restores
- Restore to unsigned iOS versions with SHSH blobs
- Supports 32-bit devices, iOS 5 to 10
- Supports A7/A8 devices, see SEP/BB Compatibility Chart
- Also supports iPad 2 iOS 4.3.x, iPhone 4 iOS 4.x
- Restore to unsigned iOS versions with iOS 7.1.x blobs (powdersn0w)
- Device support is limited, see below
- The latest baseband will be used for 32-bit devices if applicable
- Place device to pwned iBSS/kDFU mode for 32-bit devices
- Clear NVRAM for devices that support powdersn0w
- Restore iPhone 4 to iOS 7.1.2 with the option to jailbreak
- Restore supported devices to their latest iOS version
- Save onboard and Cydia SHSH blobs for 32-bit devices
- Boot SSH Ramdisk on supported 32-bit devices
Supported devices
- Identify your device here
- Restoring with powdersn0w supports the following devices:
- iPhone 4 GSM - iOS 4.3 to 6.1.3
- iPhone 4S, iPhone 5 (not 5C), iPad 2 Rev A, iPod 5th generation - iOS 5.0 to 6.1.3, 8.0 to 9.3.5
- Using powdersn0w requires iOS 7.1.x blobs for your device
- iPhone 5C and iPad mini 3 devices are NOT supported by OTA downgrades
- These devices still support restoring to other iOS versions with SHSH blobs
- See the table below for OTA downgrading support:
| Target Version | Supported Devices |
|---|---|
| iOS 10.3.3 | A7 devices: |
| iPhone 5S | |
| iPad Air 1 | |
| iPad mini 2 (except iPad4,6) | |
| iOS 8.4.1 | 32-bit devices: |
| iPhone 4S | |
| iPhone 5 | |
| iPad 2, iPad 3, iPad 4 | |
| iPad mini 1 | |
| iPod touch 5 | |
| iOS 6.1.3 | iPhone 4S |
| iPad 2 (except iPad2,4) |
Supported OS versions/distros
Supported architectures: x86_64, arm64, armhf (Linux)
- Ubuntu 22.04 and newer, and Ubuntu-based distros like Linux Mint
- Arch Linux and Arch-based distros like EndeavourOS
- Fedora 36 and newer
- Debian 12 Bookworm and newer, Sid, and Debian-based distros
- openSUSE Tumbleweed
- Gentoo and Gentoo-based distros
- macOS 10.13 and newer
- Windows 8.1 and newer
Tools and other stuff used
- curl
- bspatch
- powdersn0w_pub - dora2ios; LukeZGD fork
- ipwndfu - Linus Henze, synackuk; LukeZGD fork
- ipwnder_lite - dora2ios (used on macOS)
- iPwnder32 - dora2ios (old version with libusb, used on Linux)
- gaster - 0x7ff
- daibutsuCFW - dora2ios; LukeZGD fork
- libimobiledevice, libirecovery - libimobiledevice
- tsschecker - tihmstar; 1Conan fork
- futurerestore - tihmstar;
- LukeZGD fork used on Linux for restoring 32-bit devices
- LukeeGD fork used on Linux/Windows for restoring A7/A8 devices
- futurerestore version used on macOS
- idevicerestore - libimobiledevice; LukeZGD fork
- idevicererestore from daibutsuCFW (used on custom IPSW restores for A5/A6 devices)
- kloader from axi0mX
- kloader from Odysseus (used on iOS 10 only)
- kloader_hgsp from nyan_satan (used on h3lix only)
- partial-zip
- zenity; macOS/Windows builds
- 32-bit bundles from OdysseusOTA, OdysseusOTA2, alitek12, gjest (modified bundles for daibutsuCFW)
- A7 patches from MatthewPierson
- iPad 2 iOS 4.3.x bundles from selfisht, Ralph0045
- EtasonJB
- Pangu
- p0sixspwn
- unthredeh4il
- SSH Ramdisk tar from SSH-Ramdisk-Maker-and-Loader
- Bootstrap tar from SpiritNET