SSHRD_Script VS deverser

If you want to install TrollStore to a checkm8 vulnerable device without installing other jailbreak tools, SSHRD can do it. Should work on both linux and macos. You should know what you are doing, i am not responsible for your dataloss.

If you don't want to jailbreak, SSHRD_Script via the old coretrust bug probably still works, maybe, unless it relies on some server-side thing that changed and broke it: https://github.com/verygenericname/SSHRD_Script

I was considering to use the SSHRD script on an iPhone X with iOS 16.5 and previously passcode enabled (palera1n for example has some restrictions for this combo).

Then I found this script: https://github.com/verygenericname/SSHRD_Script but the outcome is the same. Pwnd DFU is working at first try (shows "checkm8" is used). Then it uploads the ramdisk, but again screen still black, no verbose output and seems like its still in pwnd DFU mode.

you can dump 14.1 blobs off the device with https://github.com/verygenericname/SSHRD_Script

A checkm8 device (A7-A11) # Creating SHSH blobs First, we need a ramdisk to boot and save blobs without any problems I will use in this tutorial the verygenericname's sshrd ramdisk. ## Actions

Use SSHRD_Script https://github.com/verygenericname/SSHRD_Script to get into the filesystem to find the owner's email so you can contact them about their phone. Could be nice to contact if they lost their phone, or they can remove FMI legitimately if they no longer want it.

The closest you could get is to use https://github.com/verygenericname/SSHRD_Script to browse the filesystem using SFTP (Cyberduck seems to be the go-to), or the reset function to reset the device but not update iOS version.

SSHRD script should works.

I cant remember for sure what i did, but in my Web history seems that this tool may work. It saves an .shsh (not shsh2) but still i was able to reatores my 7 just fine.

For the on-device blobs, if you have a mac you could use eg. Déverser, it can surely be done on linux, if you just look at that script. I'm not personally sure if img4tool has been built for windows but if it is then it shouldn't be a problem. (you need to get jailbroken for this of course, eg. using Xina15)

no point. even if you save blobs, you won’t be able to downgrade because of SEP. You can save them with Déverser if you really want to though

Deverser GitHub

you can try this. https://github.com/MatthewPierson/deverser

When saving blobs, it’s for the currently signed versions. Like if I were to save blobs right now, it would be for iOS 16.0.2 (optionally some betas too). If you want to save onboard blobs, you need an iPhone X/8 and lower to do it. Use deverser https://github.com/MatthewPierson/deverser

Using deverser. And yes

This is incorrect. iOS 14.3 SEP is compatible with iOS 16 beta. Also, you can save onboard blobs with deverser before updating so you can always pwndfu + futurerestore back to iOS 14.3.

Save your onboard blobs with Deverser then upgrade if you want to. To do this, you need a Mac and you need to jailbreak your 5S (use checkra1n).