Skip to content

102464/iOS-downgrade-tethered

Repository files navigation

Disclaimer

This is BETA software. This may boot loop or brick your device if you don't know what you're doing.

iOS-downgrade-tethered

SORRY THIS PROGRAM MAYBE NOT USABLE YET

This program maybe NOT USABLE. The problem is that kloader reports failed to get kernel_baseel base or just stops working when doing the final step. The reason is unknown. I am not able to find a fix currently. Please use the tutorial (link provided in description) instead.
If someone has a fix please send me a Pull Request.

Description

Downgrade method from here

A simple downgrade script which can downgrade 32-bit devices to ANY version.

Currently supported device is iPad3,1. Supported iOS is iOS 7-9.1. More will add in the future.

IMPORTANT: This tool does not use any BootROM exploits.
Do not power off your device if you have downgraded your device using this tool. It will BRICK your device.
The only way to power off is: jailbreak your device, then run ./kloader pwnediBSS in your shell.

If your device is supported by checkm8 exploitation tool (such as ipwndfu), maybe you can still boot even you have powered off your device.
see also: https://github.com/Benfxmth/a5-a6-tethered-ios-downgrade-bash-scripts

Usage

Install requirements: pip3 install -r requirements.txt (Only supports python3)
Run ./downgrade.py and follow the on-screen instructions.

Problems and Solutions

  • javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    Solution: Run javac InstallCert.java; java InstallCert theiphonewiki.com:80 changeit and retry.

TODO

Future plans:

  • Jailbreak support
  • Add support for iPhone 4S (iPhone4,1)

Credits

@planetbeing for dmg https://github.com/planetbeing/xpwn
@westbaer for irecovery https://github.com/westbaer/irecovery
@nyansatan for dualbootstuff https://github.com/nyansatan/nyansatan.github.io
@Benfxmth for downgrade method and script https://github.com/Benfxmth/a5-a6-tethered-ios-downgrade-bash-scripts
@iH8Sn0w for iBoot32Patcher https://github.com/iH8sn0w/iBoot32Patcher
@JonathanSeals for CoolBooter https://coolbooter.com
@winocm for kloader https://twitter.com/winocm

Although this project is completed, it has not been tested, so maybe it has some CRITICAL bugs. so this is for testing purposes only. Do not use it on your device.