/Legacy-iOS-Kit

A multi-purpose script to downgrade/restore, save SHSH blobs, and jailbreak legacy iOS devices

Primary LanguageShellGNU General Public License v3.0GPL-3.0

Legacy iOS Kit

  • (formerly iOS-OTA-Downgrader)
  • A multi-purpose script to downgrade/restore, save SHSH blobs, and jailbreak legacy iOS devices
  • Supported on Linux and macOS
  • Read the "How to Use" wiki page for instructions
  • Read the "Troubleshooting" wiki page for tips, frequent questions, and troubleshooting

Features

  • Legacy iOS Kit supports all 32-bit iOS devices, and some A7/A8 64-bit devices
  • Restore to iOS 8.4.1 or 6.1.3 on supported 32-bit devices (OTA signed)
  • Restore iPhone 4 GSM and CDMA (iPhone3,1 and 3,3) to lower iOS versions (powdersn0w)
  • Restore iPhone 3GS and iPod touch 2 to lower iOS versions (24Kpwn/alloc8)
  • Restore 32-bit devices to lower iOS versions with SHSH blobs
  • Restore 32-bit devices to lower iOS versions with iOS 7.1.x blobs (powdersn0w)
    • For iPhone 5 (not 5C), 7.0.x blobs can also be used
    • Device support is limited, see below
  • Hacktivation for iPhone 2G, 3G, 3GS (activate without valid SIM card)
  • Option to jailbreak all 32-bit iOS devices
    • Available on iOS versions 3.1.3, 3.2.2, 4.x, 5.x, 6.x, 7.x, 8.x, 9.1-9.3.4
    • Only unsupported version is jailbreaking iPad 2 on 4.3.x
    • There are three methods of jailbreaking: Backup Restore (g1lbertJB, 5.0-6.1.2 only), Custom IPSW, and SSH Ramdisk
  • Restore to iOS 10.3.3 on supported A7 devices (OTA signed)
  • Restore A7/A8 devices to lower iOS versions with SHSH blobs
    • Limited compatibility due to SEP/BB, see below
  • Save onboard and Cydia SHSH blobs for 32-bit devices
  • Place device to pwned iBSS/kDFU mode for supported devices
  • Boot SSH Ramdisk on supported 32-bit devices
  • Clear NVRAM for devices that support powdersn0w
  • Device activation using ideviceactivation (useful for iOS 4 and lower)
  • The latest baseband will be flashed for A5(X)/A6(X) devices if applicable
  • Dumping and stitching baseband to IPSW (requires --disable-bbupdate)

Supported devices

  • Identify your device here
  • iPhone 5C and iPad mini 3 devices are NOT supported by OTA downgrades
    • These devices still support restoring to other iOS versions with SHSH blobs, see below
  • See the table below for OTA downgrading support:
Target Version Supported Devices
iOS 10.3.3 A7 devices:
iPhone 5S
iPad Air 1
iPad mini 2 (except iPad4,6)
iOS 8.4.1 32-bit devices:
iPhone 4S
iPhone 5
iPad 2, iPad 3, iPad 4
iPad mini 1
iPod touch 5
iOS 6.1.3 iPhone 4S
iPad 2 (except iPad2,4)
  • Restoring with SHSH blobs, jailbreaking, and using SSH Ramdisks are supported on the following devices:
    • Supports all 32-bit iOS devices
    • iPhone 2G, 3G, 3GS, 4, 4S, 5, 5C
    • iPad 1, 2, 3, 4, mini 1
    • iPod touch 1, 2, 3, 4, 5
  • Restoring with SHSH blobs is also supported on most A7/A8 devices:
  • Restoring with powdersn0w is supported on the following devices:
    • iPhone 4 GSM - targets iOS 4.3 to 7.1.1
    • iPhone 4 CDMA - targets iOS 5.0 to 7.1.1
    • iPhone 4S, 5, 5C, iPad 2 Rev A, iPod touch 5 - targets iOS 5.0 to 9.3.5
    • Using powdersn0w requires iOS 7.1.x blobs for your device (7.0.x blobs can also be used for iPhone 5)
  • Restoring with 24Kpwn/alloc8 is supported on the following devices:
    • iPhone 3GS - targets iOS 3.1.3 to 5.1.1
    • iPod touch 2 - targets iOS 3.1.3 to 4.1
  • Restoring to latest iOS version with jailbreak for the following devices:
    • iPhone 4 - iOS 7.1.2
    • iPhone 3GS, iPod touch 4 - iOS 6.1.6
    • iPad 1, iPod touch 3 - iOS 5.1.1
    • iPhone 3G, iPod touch 2 - iOS 4.2.1
    • iPhone 2G, iPod touch 1 - iOS 3.1.3

Supported OS versions/distros

Supported architectures: x86_64, arm64, armhf

Tools and other stuff used