[HELP] Trying to downgrade iPhone 5S 12.5.6 with an OTA 10.3.3 blobs

This page summarizes the projects mentioned and recommended in the original post on /r/jailbreak

Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
  • futurerestore

    Discontinued iOS upgrade and downgrade tool utilizing SHSH blobs (by s0uthwest)

  • Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Odysseus support: no futurerestore.exe: unknown option -- l Usage: futurerestore [OPTIONS] iPSW Tool, which supported latest restore unsigned firmware methods for iOS/tvOS devices. General options: -t, --apticket PATH Signing tickets used for restoring -u, --update Update instead of erase install (requires appropriate APTicket) NOT recommended to use this parameter, if you update from jailbroken firmware! -w, --wait Keep rebooting until ApNonce matches APTicket (ApNonce collision, unreliable) -d, --debug Verbose debug output (useful for error logs) --exit-recovery Exit recovery mode and quit Options for SEP: --latest-sep Use latest signed SEP instead of manually specifying one (may cause bad restore) -s, --sep PATH SEP to be flashed -m, --sep-manifest PATH BuildManifest for requesting SEP ticket Options for baseband: --latest-baseband Use latest signed baseband instead of manually specifying one (may cause bad restore) -b, --baseband PATH Baseband to be flashed -p, --baseband-manifest PATH BuildManifest for requesting baseband ticket --no-baseband Skip checks and don't flash baseband WARNING: only use this for device without a baseband (eg. iPod touch or some Wi-Fi only iPads) Homepage: https://github.com/s0uthwest/futurerestore Original project: https://github.com/tihmstar/futurerestore C:\Users\okurz\Downloads\futurerestore_win64_v245\hey>futurerestore.exe -t C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\6102269454256_iPhone6,2_n53ap_10.3.3-14G60_603be133ff0bdfa0f83f21e74191cf6770ea43bb.shsh2 -w C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw --latest-sep --lastes-baseband Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Odysseus support: no futurerestore.exe: unknown option -- lastes-baseband Usage: futurerestore [OPTIONS] iPSW Tool, which supported latest restore unsigned firmware methods for iOS/tvOS devices. General options: -t, --apticket PATH Signing tickets used for restoring -u, --update Update instead of erase install (requires appropriate APTicket) NOT recommended to use this parameter, if you update from jailbroken firmware! -w, --wait Keep rebooting until ApNonce matches APTicket (ApNonce collision, unreliable) -d, --debug Verbose debug output (useful for error logs) --exit-recovery Exit recovery mode and quit Options for SEP: --latest-sep Use latest signed SEP instead of manually specifying one (may cause bad restore) -s, --sep PATH SEP to be flashed -m, --sep-manifest PATH BuildManifest for requesting SEP ticket Options for baseband: --latest-baseband Use latest signed baseband instead of manually specifying one (may cause bad restore) -b, --baseband PATH Baseband to be flashed -p, --baseband-manifest PATH BuildManifest for requesting baseband ticket --no-baseband Skip checks and don't flash baseband WARNING: only use this for device without a baseband (eg. iPod touch or some Wi-Fi only iPads) Homepage: https://github.com/s0uthwest/futurerestore Original project: https://github.com/tihmstar/futurerestore C:\Users\okurz\Downloads\futurerestore_win64_v245\hey>futurerestore.exe -t C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\6102269454256_iPhone6,2_n53ap_10.3.3-14G60_603be133ff0bdfa0f83f21e74191cf6770ea43bb.shsh2 -w C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw --latest-sep --lastest-baseband Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Odysseus support: no futurerestore.exe: unknown option -- lastest-baseband Usage: futurerestore [OPTIONS] iPSW Tool, which supported latest restore unsigned firmware methods for iOS/tvOS devices. General options: -t, --apticket PATH Signing tickets used for restoring -u, --update Update instead of erase install (requires appropriate APTicket) NOT recommended to use this parameter, if you update from jailbroken firmware! -w, --wait Keep rebooting until ApNonce matches APTicket (ApNonce collision, unreliable) -d, --debug Verbose debug output (useful for error logs) --exit-recovery Exit recovery mode and quit Options for SEP: --latest-sep Use latest signed SEP instead of manually specifying one (may cause bad restore) -s, --sep PATH SEP to be flashed -m, --sep-manifest PATH BuildManifest for requesting SEP ticket Options for baseband: --latest-baseband Use latest signed baseband instead of manually specifying one (may cause bad restore) -b, --baseband PATH Baseband to be flashed -p, --baseband-manifest PATH BuildManifest for requesting baseband ticket --no-baseband Skip checks and don't flash baseband WARNING: only use this for device without a baseband (eg. iPod touch or some Wi-Fi only iPads) Homepage: https://github.com/s0uthwest/futurerestore Original project: https://github.com/tihmstar/futurerestore C:\Users\okurz\Downloads\futurerestore_win64_v245\hey>futurerestore.exe -t C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\6102269454256_iPhone6,2_n53ap_10.3.3-14G60_603be133ff0bdfa0f83f21e74191cf6770ea43bb.shsh2 -w C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw --latest-sep --latest-baseband Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Odysseus support: no [INFO] 64-bit device detected futurerestore init done reading signing ticket C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\6102269454256_iPhone6,2_n53ap_10.3.3-14G60_603be133ff0bdfa0f83f21e74191cf6770ea43bb.shsh2 is done Found device iPhone6,2 n53ap user specified to use latest signed SEP (WARNING, THIS CAN CAUSE A NON-WORKING RESTORE) [TSSC] opening firmware.json [DOWN] downloading file https://api.ipsw.me/v2.1/firmwares.json/condensed [TSSC] selecting latest iOS: 12.5.6 [TSSC] got firmware URL for iOS 12.5.6 build 16H71 100 [===================================================================================================>] downloading SEP 100 [===================================================================================================>] [TSSC] opening download/sepManifest.plist [TSSR] User specified not to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received user specified to use latest signed baseband (WARNING, THIS CAN CAUSE A NON-WORKING RESTORE) downloading baseband 100 [===================================================================================================>] [TSSC] opening download/basebandManifest.plist [TSSR] User specified to request only a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Found device in Normal mode Entering recovery mode... INFO: device serial number is DX3NJJCRFFGD [WARNING] -w is ONLY for ApNonce collision! If you didn't intend this, remove the -w flag. waiting for ApNonce: 60 3b e1 33 ff 0b df a0 f8 3f 21 e7 41 91 cf 67 70 ea 43 bb Got ApNonce from device: 60 3b e1 33 ff 0b df a0 f8 3f 21 e7 41 91 cf 67 70 ea 43 bb Device has requested ApNonce now Found device in Recovery mode Identified device as n53ap, iPhone6,2 Extracting BuildManifest from iPSW Product version: 10.3.3 Product build: 14G60 Major: 14 Device supports IMG4: true Got ApNonce from device: 60 3b e1 33 ff 0b df a0 f8 3f 21 e7 41 91 cf 67 70 ea 43 bb checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID [Error] im4m_buildidentity_check_cb: can't find any identity which matches all hashes inside IM4M [Error] getBuildIdentityForIM4M: found buildidentity, but can't read information [Error] BuildIdentity selected for restore doesn't match APTicket BuildIdentity selected for restore: BuildNumber : 14G60 BuildTrain : Greensburg DeviceClass : n53ap FDRSupport : NO RestoreBehavior : Erase Variant : Customer Erase Install (IPSW) BuildIdentiy valid for the APTicket: IM4M isn't valid for any restore with this BuildManifest This APTicket can't be used for restoring this firmware [Error] APTicket can't be used for this restore To exit recovery mode, use --exit-recovery Done: restoring failed. Failed with errorcode=-44

  • futurerestore

    A hacked up idevicerestore wrapper, which allows specifying SEP and Baseband for restoring

  • Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Odysseus support: no futurerestore.exe: unknown option -- l Usage: futurerestore [OPTIONS] iPSW Tool, which supported latest restore unsigned firmware methods for iOS/tvOS devices. General options: -t, --apticket PATH Signing tickets used for restoring -u, --update Update instead of erase install (requires appropriate APTicket) NOT recommended to use this parameter, if you update from jailbroken firmware! -w, --wait Keep rebooting until ApNonce matches APTicket (ApNonce collision, unreliable) -d, --debug Verbose debug output (useful for error logs) --exit-recovery Exit recovery mode and quit Options for SEP: --latest-sep Use latest signed SEP instead of manually specifying one (may cause bad restore) -s, --sep PATH SEP to be flashed -m, --sep-manifest PATH BuildManifest for requesting SEP ticket Options for baseband: --latest-baseband Use latest signed baseband instead of manually specifying one (may cause bad restore) -b, --baseband PATH Baseband to be flashed -p, --baseband-manifest PATH BuildManifest for requesting baseband ticket --no-baseband Skip checks and don't flash baseband WARNING: only use this for device without a baseband (eg. iPod touch or some Wi-Fi only iPads) Homepage: https://github.com/s0uthwest/futurerestore Original project: https://github.com/tihmstar/futurerestore C:\Users\okurz\Downloads\futurerestore_win64_v245\hey>futurerestore.exe -t C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\6102269454256_iPhone6,2_n53ap_10.3.3-14G60_603be133ff0bdfa0f83f21e74191cf6770ea43bb.shsh2 -w C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw --latest-sep --lastes-baseband Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Odysseus support: no futurerestore.exe: unknown option -- lastes-baseband Usage: futurerestore [OPTIONS] iPSW Tool, which supported latest restore unsigned firmware methods for iOS/tvOS devices. General options: -t, --apticket PATH Signing tickets used for restoring -u, --update Update instead of erase install (requires appropriate APTicket) NOT recommended to use this parameter, if you update from jailbroken firmware! -w, --wait Keep rebooting until ApNonce matches APTicket (ApNonce collision, unreliable) -d, --debug Verbose debug output (useful for error logs) --exit-recovery Exit recovery mode and quit Options for SEP: --latest-sep Use latest signed SEP instead of manually specifying one (may cause bad restore) -s, --sep PATH SEP to be flashed -m, --sep-manifest PATH BuildManifest for requesting SEP ticket Options for baseband: --latest-baseband Use latest signed baseband instead of manually specifying one (may cause bad restore) -b, --baseband PATH Baseband to be flashed -p, --baseband-manifest PATH BuildManifest for requesting baseband ticket --no-baseband Skip checks and don't flash baseband WARNING: only use this for device without a baseband (eg. iPod touch or some Wi-Fi only iPads) Homepage: https://github.com/s0uthwest/futurerestore Original project: https://github.com/tihmstar/futurerestore C:\Users\okurz\Downloads\futurerestore_win64_v245\hey>futurerestore.exe -t C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\6102269454256_iPhone6,2_n53ap_10.3.3-14G60_603be133ff0bdfa0f83f21e74191cf6770ea43bb.shsh2 -w C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw --latest-sep --lastest-baseband Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Odysseus support: no futurerestore.exe: unknown option -- lastest-baseband Usage: futurerestore [OPTIONS] iPSW Tool, which supported latest restore unsigned firmware methods for iOS/tvOS devices. General options: -t, --apticket PATH Signing tickets used for restoring -u, --update Update instead of erase install (requires appropriate APTicket) NOT recommended to use this parameter, if you update from jailbroken firmware! -w, --wait Keep rebooting until ApNonce matches APTicket (ApNonce collision, unreliable) -d, --debug Verbose debug output (useful for error logs) --exit-recovery Exit recovery mode and quit Options for SEP: --latest-sep Use latest signed SEP instead of manually specifying one (may cause bad restore) -s, --sep PATH SEP to be flashed -m, --sep-manifest PATH BuildManifest for requesting SEP ticket Options for baseband: --latest-baseband Use latest signed baseband instead of manually specifying one (may cause bad restore) -b, --baseband PATH Baseband to be flashed -p, --baseband-manifest PATH BuildManifest for requesting baseband ticket --no-baseband Skip checks and don't flash baseband WARNING: only use this for device without a baseband (eg. iPod touch or some Wi-Fi only iPads) Homepage: https://github.com/s0uthwest/futurerestore Original project: https://github.com/tihmstar/futurerestore C:\Users\okurz\Downloads\futurerestore_win64_v245\hey>futurerestore.exe -t C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\6102269454256_iPhone6,2_n53ap_10.3.3-14G60_603be133ff0bdfa0f83f21e74191cf6770ea43bb.shsh2 -w C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw --latest-sep --latest-baseband Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Odysseus support: no [INFO] 64-bit device detected futurerestore init done reading signing ticket C:\Users\okurz\Downloads\futurerestore_win64_v245\hey\6102269454256_iPhone6,2_n53ap_10.3.3-14G60_603be133ff0bdfa0f83f21e74191cf6770ea43bb.shsh2 is done Found device iPhone6,2 n53ap user specified to use latest signed SEP (WARNING, THIS CAN CAUSE A NON-WORKING RESTORE) [TSSC] opening firmware.json [DOWN] downloading file https://api.ipsw.me/v2.1/firmwares.json/condensed [TSSC] selecting latest iOS: 12.5.6 [TSSC] got firmware URL for iOS 12.5.6 build 16H71 100 [===================================================================================================>] downloading SEP 100 [===================================================================================================>] [TSSC] opening download/sepManifest.plist [TSSR] User specified not to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received user specified to use latest signed baseband (WARNING, THIS CAN CAUSE A NON-WORKING RESTORE) downloading baseband 100 [===================================================================================================>] [TSSC] opening download/basebandManifest.plist [TSSR] User specified to request only a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Found device in Normal mode Entering recovery mode... INFO: device serial number is DX3NJJCRFFGD [WARNING] -w is ONLY for ApNonce collision! If you didn't intend this, remove the -w flag. waiting for ApNonce: 60 3b e1 33 ff 0b df a0 f8 3f 21 e7 41 91 cf 67 70 ea 43 bb Got ApNonce from device: 60 3b e1 33 ff 0b df a0 f8 3f 21 e7 41 91 cf 67 70 ea 43 bb Device has requested ApNonce now Found device in Recovery mode Identified device as n53ap, iPhone6,2 Extracting BuildManifest from iPSW Product version: 10.3.3 Product build: 14G60 Major: 14 Device supports IMG4: true Got ApNonce from device: 60 3b e1 33 ff 0b df a0 f8 3f 21 e7 41 91 cf 67 70 ea 43 bb checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID [Error] im4m_buildidentity_check_cb: can't find any identity which matches all hashes inside IM4M [Error] getBuildIdentityForIM4M: found buildidentity, but can't read information [Error] BuildIdentity selected for restore doesn't match APTicket BuildIdentity selected for restore: BuildNumber : 14G60 BuildTrain : Greensburg DeviceClass : n53ap FDRSupport : NO RestoreBehavior : Erase Variant : Customer Erase Install (IPSW) BuildIdentiy valid for the APTicket: IM4M isn't valid for any restore with this BuildManifest This APTicket can't be used for restoring this firmware [Error] APTicket can't be used for this restore To exit recovery mode, use --exit-recovery Done: restoring failed. Failed with errorcode=-44

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • Vieux

    Vieux - A tool for 32/64 Bit iOS downgrades using OTA Blobs

  • This is not how you downgrade 5s to iOS 10. I used Vieux in the past to do so.

  • iOS-OTA-Downgrader

    Discontinued A multi-purpose script to save blobs, restore, and jailbreak supported legacy iOS devices [Moved to: https://github.com/LukeZGD/Legacy-iOS-Kit]

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts