/Legacy-iOS-Kit

A multi-purpose script to save blobs, downgrade/restore, and jailbreak supported legacy iOS devices

Primary LanguageShellGNU General Public License v3.0GPL-3.0

Legacy iOS Kit

  • (formerly iOS-OTA-Downgrader)
  • An all-in-one tool to downgrade/restore, save SHSH blobs, and jailbreak legacy iOS devices
  • Supported on Linux and macOS
  • Read the "How to Use" wiki page for instructions
  • Read the "Troubleshooting" wiki page for tips, frequent questions, and troubleshooting

Features

  • Legacy iOS Kit supports all 32-bit iOS devices, and some A7/A8 64-bit devices
  • Restore to signed OTA versions (iOS 8.4.1 and/or 6.1.3) on A5/A6 devices
  • Restore some 32-bit devices to other iOS versions without blobs
    • This includes downgrading iPhone 3GS, iPhone 4 GSM and CDMA, iPod touch 2, touch 3, iPad 1
  • Restore with SHSH blobs on supported devices
  • Restore to other iOS versions with iOS 7 blobs (powdersn0w)
  • Tethered restores to other iOS versions for A5/A6 and other devices
  • Jailbreak all 32-bit iOS devices on (almost) any iOS version
    • Available on iOS versions 3.1.3 to 9.3.4
    • Only unsupported versions are iOS 9.0.x
  • Hacktivation for iPhone 2G, 3G, 3GS (activate without valid SIM card)
  • Restore to iOS 10.3.3 (signed OTA version) on supported A7 devices
  • Install IPA files for supported devices with AppSync installed
  • Sideload IPA files for supported devices on Linux
  • Save SHSH blobs for signed OTA versions for supported devices
  • Save onboard and Cydia SHSH blobs for 32-bit devices
  • Enter pwned iBSS/kDFU mode for supported 32-bit devices
  • Boot SSH Ramdisk for 32-bit devices
  • Clear NVRAM for 32-bit devices
  • Device activation using ideviceactivation (useful for iOS 4 and lower)
  • The latest baseband will be flashed for A5/A6 devices with baseband
  • Dumping and stitching baseband to IPSW (requires --disable-bbupdate)
  • Dumping and stitching activation records to IPSW (requires --activation-records)

Supported devices

  • Identify your device here
  • iPhone 5C and iPad mini 3 devices are NOT supported by OTA downgrades
    • These devices still support restoring to other iOS versions with SHSH blobs, see below
  • See the table below for OTA downgrading support:
Target Version Supported Devices
iOS 10.3.3 A7 devices:
iPhone 5S
iPad Air 1
iPad mini 2 (except iPad4,6)
iOS 8.4.1 32-bit devices:
iPhone 4S
iPhone 5
iPad 2, iPad 3, iPad 4
iPad mini 1
iPod touch 5
iOS 6.1.3 iPhone 4S
iPad 2 (except iPad2,4)
  • Restoring with SHSH blobs, jailbreaking, and using SSH Ramdisks are supported on the following devices:
    • Supports all 32-bit iOS devices
    • iPhone 2G, 3G, 3GS, 4, 4S, 5, 5C
    • iPad 1, 2, 3, 4, mini 1
    • iPod touch 1, 2, 3, 4, 5
  • Restoring with SHSH blobs is also supported on some 64-bit devices:
    • See SEP/BB Compatibility Chart for iOS versions that can be restored to
    • iPhone 5S, 6, 6S, SE 2016, 7 (including Plus variants)
    • iPad Air 1, 2
    • iPad mini 2, 3, 4
    • iPod touch 6, 7
  • Restoring with powdersn0w is supported on the following devices and target version range:
    • iPhone 4 GSM - iOS 4.0 to 7.1.1 (all versions except 4.2.1)
    • iPhone 4 CDMA - iOS 5.0 to 7.1.1
    • iPhone 4S, 5, 5C, iPad 2 Rev A, iPad 4, iPod touch 5 - iOS 5.0 to 9.3.5
    • iPad 1 - iOS 4.3 to 5.1
    • iPod touch 3 - iOS 4.0 to 5.1
    • Using powdersn0w requires iOS 7.1.x blobs for your device
      • No blob requirement for iPhone 4, iPad 1, iPod touch 3 (7.1.2 and 5.1.1 are signed)
      • For iPhone 5 and 5C, both 7.0.x and 7.1.x blobs can be used
      • For iPad 4, only 7.0.x blobs can be used
  • Restoring to other unsigned versions without blobs is supported on the following devices and target versions:
    • iPhone 3GS - iOS 3.0 to 6.1.3 (all versions)
    • iPod touch 2 - iOS 2.1.1 to 4.1 (all versions)
    • iPhone 2G, 3G, iPod touch 1 - all versions

Supported OS versions/distros

Supported architectures: x86_64, arm64, armhf

Tools and other stuff used