iAπειρον

[iAπειρον @iApeiron]

https://t.co/rbEC7jR1n7 savethemblobs has been updated with a workaround for recent issues

[md @exploit3dguy]

Some update on the SEP tool I’ve promised:

Tethered blackbird downgrades: ✅
Untethered blackbird downgrades with SHSH blobs: ✅
Decrypt SEP KBAGs: ✅

What’s left: fix up A10 support, optimise exploit on A9 to be more reliable and clean up the code.

ETA: when it’s done, 🔜

[J @Morpheus______]

@serhatisb Tethered only, if you don't have saved blobs for the relevant versions.

But if you saved blobs from way back when, this will now (with a lot of work) effectively allow downgrading permanently untethered, for those APTicketed versions only.

[J @Morpheus______]

#checkm8 in two moves: iBSS/iBEC/iLLB/iBoot are effectively same image. What's needed now is to dump/decrypt each device class (A7-11)'s iBoot and patch out the part which verifies APTicket/IMG4 signatures, or
(Better yet) create a dynamic pathfinder.

Then the real game begins.

[iAπειρον @iApeiron]

@AppleDry05 @zhuowei Have you ever tried to grab apticket using kloader64, like we do with shsh from 32bit devices? I wonder if anyone has accomplished this

[iAπειρον @iApeiron]

@rA9_main @thejailbreakhub The gist is gone. Do you have info to share?
I have iOS 14 blobs for a couple devices. And a couple 5S on iOS 8.x I’d love to be able to restore.

[md @exploit3dguy]

Impossible has been done.

First successful blackbird downgrade on iPhone 6s to iOS 10.0.1 tethered without SHSH blobs. It was painful but it was worth it at the end :))

W/ passcode fully working.

[iAπειρον @iApeiron]

@dora2ios Cool project!! I’d love to try this on my A7!

[iAπειρον @iApeiron]

@kok3shiDev @LukeZGD1 put together a cool project by bundling these tools together this way!

[GeoSn0w @FCE365]

iOS Jailbreak Downloads - Download Jailbreak Tools for All iOS Versions

Read More: https://t.co/DhCE6MQF0i #jailbreak

[iAπειρον @iApeiron]

Checkm8 and tools utilizing it have changed the game.
I have an iPhone 5S currently on iOS 8.4.
Can I grab on-board blobs and restore it to 8.4?
@alitek123 @2Klasic @axi0mX @tihmstar @LukeZGD1 @dora2ios @moski_dev @LinusHenze

[Pierre-Marc Bonneau @ShadowLee19]

Following instructions on https://t.co/KurqUamoYG, I could successfully convert dumped blobs into a .plist file that can *hopefully* be used with idevicerestore later to downgrade.

[iAπειρον @iApeiron]

@dora2ios Cool!

[iAπειρον @iApeiron]

@alitek123 @2Klasic @SashaKirichenko @dora2ios @ee_csw @trsvsr @daytonhasty Also. I’m very out of practice, out of the loop. What would be the quickest way to check iCloud lock status?

And is there an easy and reliable way to “wipe” jailbroken devices without doing a full restore?

[iAπειρον @iApeiron]

Interested in 32-bit idevices?
iPhone 3G, 3GS, 4, 4S, 5,
iPad 1, 2, 4.
Soon selling my collection. Most have shsh blobs for downgrade.

[iAπειρον @iApeiron]

@alitek123 @2Klasic @SashaKirichenko @dora2ios @ee_csw @trsvsr @daytonhasty

[tihmstar @tihmstar]

Fun fact: There are more Apple devices with a public BootROM exploit, than without

[iAπειρον @iApeiron]

@dora2ios Cool!

[iAπειρον @iApeiron]

@daytonhasty True

[iAπειρον @iApeiron]

@dora2ios Very nice work!