Copyright by ProAppleOS © ; MADE BY @ProAppleOS on Twitter; ANY QUESTION? -> @ProAppleOS on Twitter
How to Downgrade A7 Device from 10.3.x to 10.2/10.2.1 with Blobs
DOING THIS IS AT YOUR OWN RISK! I'M NOT RESPONSIBLE FOR ANYTHING. I´M NOT RESPONSIBLE IF SOMETHING BREAKS! I´M NOT PAYING FOR A NEW DEVICE IF SOMETHING BREAKS ON YOUR DEVICE! AGAIN! DOING THIS IS AT YOUR OWN RISK!
Requirements: a Mac (or virtual Machine) , A7 device on 10.3.x , SHSH Blobs for 10.2 or 10.2.1 , your iDevice on 10.3.x
- Plug your device into Mac. Open iTunes, click on your device.
- Click on your serial Number 3 Times.
- Then you see your iPhones Model identifier.
- If your Model identifier is one of these down you can use this Method to downgrade: iPad4,1 iPad4,2 iPad4,3 iPad4,4 iPad4,4 iPad4,6 iPhone6,1 iPhone6,2
If your model identifier is listed there you can be happy because now you can downgrade to 10.2/10.2.1 with Blobs :)
Currently Supported Devices for DOWNGRADING is just the iPhone 5s, if you want to Downgrade your iPad, you need to find Offsets and put it in Xcode Project and Compile it! How to find Offsets for v0rtex ( https://gist.github.com/uroboro/5b2b2b2aa1793132c4e91826ce844957 ) Video Tutorial ( https://www.reddit.com/r/jailbreak/comments/7iyyfh/tutorial_finding_offsets_for_v0rtex/?st=JB8AZGLS&sh=7780eff2 )
DOWNLOADS:
-
Download iPSW for your Device! You need iOS 10.3.3 IPSW for SEP and baseband and 10.2 IPSW or 10.2.1 IPSW. This depends on which Version you want to restore to. At the end you need 2 IPSW. You can Download iPSW here: www.ipsw.me
-
Download & install Xcode (Xcode from MacAppStore).
-
Download v0rtexNonce. ( https://github.com/arx8x/v0rtexNonce )
-
Download Custom Buildmanifest here (Download that file with your Model identifier you looked up before on iTunes ) ( https://www.dropbox.com/sh/edrpjiek184trc9/AADxrcE2Bz2CGRgbMG9kxub8a?dl=0&lst= )
-
Download latest Version from futurerestore ( http://api.tihmstar.net/builds/futurerestore/futurerestore-latest.zip )
Lets Go :)
-
Unzip v0rtexNonce
-
Open unzipped folder
-
Double click on v0rtexNonce.xcodeproj
-
Click Open
-
Go to Xcode -> Preferences -> Accounts -> click + -> Sign in with your AppleID (no developer account needed)
-
Close Accounts Window
-
Click on the left top at the blue file named v0rtexNonce
-
Change the „Bundle Identifier" to something you want like for example „downgrade.mydevice"
-
Click at the middle on „Unknown Name" and select your AppleID. There is (Personal Team)
-
Wait until the Red text is gone
-
Plug in your device and select at the top next to STOP button your Device.
-
Click on Play Button.
-
Unlock your device.
-
Ignore the popup in Xcode saying „Could not launch v0rtexNonce"
-
Open Settings on your iPhone. Go to General -> Profile & Device Managment -> Click on your Apple ID -> Click on Trust -> Trust again.
-
Now Open v0rtexNonce. If your Device isn´t supported or your Offsets are wrong the App will Crash.
-
If there is „Exploit failed" Reboot and Try again until you get a Nonce in App looks like this ( 0x23ae4a983ds7 )
Now you got your Nonce. Great Lets go further :D
-
Create a folder on Desktop name it „Downgrade"
-
Put the iOS 10.2 IPSW into the „Downgrade" folder.
-
Put the Custom Buildmanifest file you downloaded first into „Downgrade" folder.
-
Open futurerestore folder and put the file futurerestore_macos into the „Downgrade" folder.
-
Change the iOS 10.3.3 IPSW name at the end to .zip
-
Unzip iOS 10.3.3 iPSW (take some seconds)
-
Open folder
-
Get the Baseband file (on iPhone 5s it is Mav7Mav8... .bbfw)
-
Put the Baseband file into „Downgrade" folder
-
Install App „Battery Memory System Status Monitor" open app and go to System and look for Model number ( https://goo.gl/vWJBy4 )
-
Open the folder „all_flash"
-
look for „sep-firmware.(Model number).release.im4p" IMPORTANT take the one .im4p NOT the .im4p.plist for example sep-firmware.n51.release.im4p
-
Put that file into „Downgrade" folder
-
Copy your SHSH2 blob from iOS 10.2 / iOS 10.2.1 and put into „Downgrade" folder.
-
Rename your Blob name to „blob.plist" NOT „blob.shsh2.plist" !
-
Click „use .plist"
-
Open your SHSH Blob.
-
Go to bottom and some of you see Generator „0x23ae4a983ds7" or just generator String „0x23ae4a983ds7"
-
Put that 0x.... from the blob into the v0rtexNonce app and set it.
-
Don´t change anything !
-
Close the file.
-
Rename your blob to „blob.shsh2" NOT „blob.shsh2.plist" or NOT „blob.plist.shsh2"
-
Click "use .shsh2"
Now you are all set for your Downgrade! Now you should have this in the „Downgrade" folder on Desktop: Buildmanifest.plist Mav7Mav8... .bbfw blob.shsh2 futurerestore_macos sep-firmware.(Model number).release.im4p for example sep-firmware.n51.release.im4p iOS 10.2 IPSW
NOW THE DOWNGRADE PROCESS! Be patient! Don´t type anything wrong!
-
Open Terminal
-
write chmod 775 (drag futurerestore_macos file from your Downgrade folder into Terminal) and click enter
-
write cd (drag your Downgrade folder into Terminal) and enter
-
type ls and enter
-
now you should see all the files in your Downgrade folder
-
drag futurerstore_macos file into terminal and click enter (you should see lots of commands)
-
write this ./futurerestore_macos -t (drag blob) -b (drag Mav7) -p (custom BuildManifest) -s (drag sep) -m (custom buildmanifest) (iphone10.2.ipsw)
-
for an example look here ( https://imgur.com/a/wUzZH )
-
Plug your Device in
-
Unlock your Device
-
CROSS FINGERS AND click Enter in Terminal
-
ITS NORMAL THAT YOUR DEVICE TURNS INTO GREEN!
-
Now it should work
-
Wait about 5-10 Minutes
-
at the end it should look like this ( https://imgur.com/a/9Tl6s )
-
Your Phone now Restart.
-
Set up your Device
-
Install Yalu or Saigon
-
Jailbreak :D ALL THIS WAS TESTED WITH IOS 10.3.1 iPHONE 5s
DONE! ENJOY YOUR JAILBREAK :D
-
Feel free to Donate :) https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=AXEXQHKE2GHNC
-
THANKS TO @tihmstar
-
THANKS TO @siguza
-
THANKS TO @arx8x
MADE BY @ProAppleOS on Twitter