iOS-OTA-Downgrader icon indicating copy to clipboard operation
iOS-OTA-Downgrader copied to clipboard
verified publisher icon LukeZGD

[ERROR] Baseband firmware is NOT being signed!

Open ragik211 opened this issue 11 months ago • 1 comments

Good afternoon, everyone, I've been trying to roll back my iPhone 5S from iOS 12 to iOS 10 for days now. I tried LeetDown, Ios_Ota_downgrade and the same error everywhere. System: macOS Monterey 12.4 (HACKINTOSH) Device: Iphone 5s 6.2 Firmware: 10.3.3 I take it from 3utools or the official website, not custom. Connection: USB 2.0, original cable. Note: I have 2 phones connected: my main iPhone SE 2022 (as a usb modem, because wifi doesn't work for me) and an iPhone 5s (the one I'm restoring). Program logs: `Last login: Wed Mar 5 16:58:54 on console evgeniy@Mac-Pro-Evgenij ~ % cd /Users/evgeniy/Desktop/Legacy-iOS-Kit_macos_v25 evgeniy@Mac-Pro-Evgenij Legacy-iOS-Kit_macos_v25 % ./restore.sh [Log] Detected existing tmp folder(s).

  • There might be other Legacy iOS Kit instance(s) running, or residual tmp folder(s) not deleted.
  • Running multiple instances is not fully supported and can cause unexpected behavior.
  • It is recommended to only use a single instance and/or delete all existing "tmp" folders in your Legacy iOS Kit folder before continuing. [Input] Select Y to remove all tmp folders, N to run as is (Y/n): -> Yes No

*** Legacy iOS Kit ***

  • Script by LukeZGD -
  • Version: v25.03.03 (d76a800) [Log] Running on platform: macos (12.4 - x86_64) [Log] Checking Internet connection... [Log] Checking for updates... jq: error (at :1): Cannot iterate over null (null) jq: error (at :1): Cannot iterate over null (null) [WARNING] Failed to check for updates. GitHub may be down or blocked by your network. [Log] Finding device in Normal mode... [Log] Getting device info...
  • Device: iPhone SE 2022 (iPhone14,6 - d49ap) in Normal mode
  • iOS Version: 18.2
  • ECID: 2860388379492382

[WARNING] This device is mostly not supported by Legacy iOS Kit.

  • You may still continue but options will be limited to sideloading and other basic features. [Input] Press Enter/Return to continue (or press Ctrl+C to cancel)

evgeniy@Mac-Pro-Evgenij Legacy-iOS-Kit_macos_v25 % evgeniy@Mac-Pro-Evgenij Legacy-iOS-Kit_macos_v25 % ./restore.sh

*** Legacy iOS Kit ***

  • Script by LukeZGD -
  • Version: v25.03.03 (d76a800) [Log] Running on platform: macos (12.4 - x86_64) [Log] Checking Internet connection... [Log] Checking for updates... jq: error (at :1): Cannot iterate over null (null) jq: error (at :1): Cannot iterate over null (null) [WARNING] Failed to check for updates. GitHub may be down or blocked by your network. [Log] Finding device in Normal mode... [Log] Getting device info...

*** Legacy iOS Kit ***

  • Script by LukeZGD -

  • Version: v25.03.03 (d76a800) [WARNING] Current version is newer/different than remote: ()

  • Platform: macos (12.4 - x86_64)

  • Device: iPhone 5S (Global) (iPhone6,2 - n53ap) in Normal mode

  • Device is not activated, select Attempt Activation to activate.

  • iOS Version: 12.5.7 (16H81)

  • ECID: 6549964085208

Main Menu [Input] Select an option: -> Restore/Downgrade Attempt Activation
Save SHSH Blobs
App Management
Data Management
Useful Utilities
Misc Utilities
Exit

*** Legacy iOS Kit ***

  • Script by LukeZGD -

  • Version: v25.03.03 (d76a800) [WARNING] Current version is newer/different than remote: ()

  • Platform: macos (12.4 - x86_64)

  • Device: iPhone 5S (Global) (iPhone6,2 - n53ap) in Normal mode

  • Device is not activated, select Attempt Activation to activate.

  • iOS Version: 12.5.7 (16H81)

  • ECID: 6549964085208

Main Menu > Restore/Downgrade

  • Note: Restoring to latest iOS for 64-bit devices is not supported on macOS, use iTunes/Finder instead for that

[Input] Select an option: -> iOS 10.3.3 Other (Use SHSH Blobs)
Set Nonce Only
IPSW Downloader
Go Back

*** Legacy iOS Kit ***

  • Script by LukeZGD -

  • Version: v25.03.03 (d76a800) [WARNING] Current version is newer/different than remote: ()

  • Platform: macos (12.4 - x86_64)

  • Device: iPhone 5S (Global) (iPhone6,2 - n53ap) in Normal mode

  • Device is not activated, select Attempt Activation to activate.

  • iOS Version: 12.5.7 (16H81)

  • ECID: 6549964085208

  • Only select unmodified IPSW for the selection. Do not select custom IPSWs

  • Select iOS 10.3.3 IPSW to continue

Main Menu > Restore/Downgrade > iOS 10.3.3 [Input] Select an option: -> Select Target IPSW Download Target IPSW
Go Back

[Input] Select your Target IPSW file in the file selection window. [Log] Selected IPSW file: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock.ipsw [Log] Getting version from IPSW Archive: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock.ipsw inflating: ./Restore.plist
[Log] Getting SHA1 hash for /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock.ipsw... [Log] Getting SHA1 hash from AppleDB... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 345k 100 345k 0 0 433k 0 --:--:-- --:--:-- --:--:-- 436k [Log] Using saved SHA1 hash for this IPSW: 46067e863e47f93bc867e865063bd8848cd80e9e [Log] IPSW SHA1sum matches

*** Legacy iOS Kit ***

  • Script by LukeZGD -

  • Version: v25.03.03 (d76a800) [WARNING] Current version is newer/different than remote: ()

  • Platform: macos (12.4 - x86_64)

  • Device: iPhone 5S (Global) (iPhone6,2 - n53ap) in Normal mode

  • Device is not activated, select Attempt Activation to activate.

  • iOS Version: 12.5.7 (16H81)

  • ECID: 6549964085208

  • Only select unmodified IPSW for the selection. Do not select custom IPSWs

  • Selected Target IPSW: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock.ipsw

  • Selected Target IPSW is validated

Main Menu > Restore/Downgrade > iOS 10.3.3 [Input] Select an option: Select Target IPSW
Download Target IPSW
-> Start Restore Go Back

[Input] Pwned Restore Option

  • When this option is enabled, use-pwndfu will be enabled for restoring.
  • It is recommended to disable this option for 10.3.3 OTA restores.
  • This option is disabled by default (N). Select this option if unsure. [Input] Enable this option? (y/N): No
    -> Yes

[Log] Pwned restore option enabled by user. [Log] Found existing saved 10.3.3 blobs: ../saved/shsh/6549964085208_iPhone6,2_n53ap_10.3.3-14G60_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2

  • The device needs to be in Recovery/DFU mode before proceeding. [Input] Send device to recovery mode? (Y/n): -> Yes No

[Log] Entering recovery mode...

  • If the device does not enter recovery mode automatically, press Ctrl+C to cancel and try putting the device in DFU/Recovery mode manually [Log] Finding device in Recovery mode... [Log] Found device in Recovery mode.

  • DFU Mode Helper - Get ready to enter DFU mode.

  • If you already know how to enter DFU mode, you may do so right now before continuing. [Input] Select Y to continue, N to exit recovery mode (Y/n): -> Yes No

  • Get ready... 3 2 1

  • Hold TOP and HOME buttons. 8 7 6 5 4 3 2 1

  • Release TOP button and keep holding HOME button. 8 7 6 5 4 3 2 1 [Log] Finding device in DFU mode... [Log] Found device in DFU mode. [Input] PwnDFU Tool Option

  • Select tool to be used for entering pwned DFU mode.

  • This option is set to ipwnder32 by default (1). Select this option if unsure.

  • If the first option does not work, try many times and/or try the other option(s).

  • Note: Some Intel Macs have very low success rates for A7 checkm8. [Input] Select your option: ipwnder32
    -> ipwnder_lite ipwndfu
    gaster

[Log] Placing device to pwnDFU mode using gaster [main] Waiting for device in DFU mode... [io_get_serial] Found serial number! [main] CONNECTED [main] CPID: 0x8960, BDID: 0x02, STRG: [iBoot-1704.10] ** exploiting with checkm8 [checkm8_s5l8960x] reconnecting [io_reset] ResetDevice: 0 [io_reset] USBDeviceReEnumerate: 0 [checkm8_s5l8960x] running set_global_state() [set_global_state] (1/3) sent: 0, val: 5c0 [set_global_state] (2/3) e000404f [set_global_state] running heap_spray() [heap_spray] (1/3) e000404f [heap_spray] (2/3) 0 [heap_spray] (3/3) e0004051 [set_global_state] (3/3) e00002ed [checkm8_s5l8960x] reconnecting [checkm8_s5l8960x] USBDeviceReEnumerate: 0 [checkm8_s5l8960x] running heap_occupation() [heap_occupation] (1/3) e000404f [heap_occupation] (2/3) e0004051 [heap_occupation] (3/3) e000404f [checkm8_s5l8960x] reconnecting [checkm8_s5l8960x] USBDeviceReEnumerate: 0 [io_get_serial] Found serial number! [checkm8_s5l8960x] pwned! [Log] Checking for device [Log] Found device in pwned DFU mode.

  • Pwned: checkm8 [Log] python2 from pyenv detected, this will be used [Log] Detected libusb installed via MacPorts [Log] Running rmsigchks... *** SecureROM Signature check remover by Linus Henze *** Acquiring device handle. Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:000005F5084857D8 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8] Applying patches... Acquiring device handle. Releasing device handle. Acquiring device handle. Sending 0x10 of data to device. Sending 0x28 of data to device. Patches have already been applied. Exiting.
  • If you get the error "No backend available," install libusb in Homebrew/MacPorts [Log] Downloading firmwares.json... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 5377k 0 5377k 0 0 3352k 0 --:--:-- 0:00:01 --:--:-- 3365k [Log] gaster reset usb_timeout: 5 usb_abort_timeout_min: 0 [IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227 Found the USB handle. [Log] Checking firmware keys in ../resources/firmware/iPhone6,2/14G60 [Log] Getting firmware keys for iPhone6,2-14G60 % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 3469 100 3469 0 0 3075 0 0:00:01 0:00:01 --:--:-- 3075 [Log] Starting local server for firmware keys: /usr/bin/python3 -m http.server -b 127.0.0.1 8888 [Log] httpserver PID: 989 [Log] Waiting for local server Serving HTTP on 127.0.0.1 port 8888 (http://127.0.0.1:8888/) ... 127.0.0.1 - - [05/Mar/2025 17:02:36] "GET / HTTP/1.1" 200 - [Log] Manifest: ../saved/iPhone6,2/14G60.plist [Log] Downloading 14G60 Baseband Version: 9bfdde2b2456181045f74631683fba491d8bf4f2 - 38 libfragmentzip version: 0.64-aaf6fae83a0aa6f7aae1c94721857076d04a14e8-RELEASE init pzb: http://appldnld.apple.com/ios10.3.3/091-23133-20170719-CA8E78E6-6977-11E7-968B-2B9100BA0AE3/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw init done getting: Firmware/Mav7Mav8-7.60.00.Release.bbfw 0% [ 100% [========================================================================== 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ [========================================================================== 99% [==========================================================================100% [===================================================================================================>] download succeeded [Log] Baseband: ../saved/baseband/Mav7Mav8-7.60.00.Release.bbfw [Log] Downloading 14G60 SEP Version: 9bfdde2b2456181045f74631683fba491d8bf4f2 - 38 libfragmentzip version: 0.64-aaf6fae83a0aa6f7aae1c94721857076d04a14e8-RELEASE init pzb: http://appldnld.apple.com/ios10.3.3/091-23133-20170719-CA8E78E6-6977-11E7-968B-2B9100BA0AE3/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw init done getting: Firmware/all_flash/sep-firmware.n53.RELEASE.im4p 0% [ 100% [========================================================================== 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ [==========================================================================100% [===================================================================================================>] download succeeded [Log] SEP: ../saved/iPhone6,2/sep-firmware.n53.RELEASE-14G60.im4p [Log] futurerestore nightly will be used for this restore: https://github.com/futurerestore/futurerestore
  • Builds from here: https://github.com/LukeeGD/futurerestore [Log] Checking for futurerestore updates... [Log] futurerestore main branch will be used for this restore [Log] futurerestore nightly update detected, downloading. [Log] Downloading futurerestore-macOS-RELEASE-main.zip... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 2761k 100 2761k 0 0 688k 0 0:00:04 0:00:04 --:--:-- 1038k x futurerestore [Log] Extracting IPSW: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock.ipsw Archive: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock.ipsw inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/058-74917-062.dmg
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/._058-74917-062.dmg
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/058-74940-063.dmg
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/058-75381-062.dmg
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/BuildManifest.plist
    creating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/ creating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/ inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/applelogo@2x~iphone.s5l8960x.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/applelogo@2x~iphone.s5l8960x.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/applelogo@2x~iphone.s8000.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/applelogo@2x~iphone.s8000.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/applelogo@2x~iphone.s8003.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/applelogo@2x~iphone.s8003.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging0@2x~iphone.s5l8960x.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging0@2x~iphone.s5l8960x.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging0@2x~iphone.s8000.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging0@2x~iphone.s8000.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging0@2x~iphone.s8003.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging0@2x~iphone.s8003.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging1@2x~iphone.s5l8960x.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging1@2x~iphone.s5l8960x.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging1@2x~iphone.s8000.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging1@2x~iphone.s8000.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging1@2x~iphone.s8003.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterycharging1@2x~iphone.s8003.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batteryfull@2x~iphone.s5l8960x.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batteryfull@2x~iphone.s5l8960x.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batteryfull@2x~iphone.s8000.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batteryfull@2x~iphone.s8000.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batteryfull@2x~iphone.s8003.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batteryfull@2x~iphone.s8003.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow0@2x~iphone.s5l8960x.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow0@2x~iphone.s5l8960x.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow0@2x~iphone.s8000.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow0@2x~iphone.s8000.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow0@2x~iphone.s8003.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow0@2x~iphone.s8003.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow1@2x~iphone.s5l8960x.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow1@2x~iphone.s5l8960x.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow1@2x~iphone.s8000.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow1@2x~iphone.s8000.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow1@2x~iphone.s8003.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/batterylow1@2x~iphone.s8003.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/DeviceTree.n51ap.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/DeviceTree.n51ap.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/DeviceTree.n53ap.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/DeviceTree.n53ap.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/DeviceTree.n69ap.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/DeviceTree.n69ap.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/DeviceTree.n69uap.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/DeviceTree.n69uap.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s5l8960x.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s5l8960x.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8000.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8000.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8003.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/glyphplugin@1136~iphone-lightning.s8003.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/iBoot.iphone6.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/iBoot.iphone6.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/iBoot.n69.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/iBoot.n69.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/iBoot.n69u.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/iBoot.n69u.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/LLB.iphone6.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/LLB.iphone6.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/LLB.n69.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/LLB.n69.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/LLB.n69u.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/LLB.n69u.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/recoverymode@1136~iphone-lightning.s5l8960x.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/recoverymode@1136~iphone-lightning.s5l8960x.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/recoverymode@1136~iphone-lightning.s8000.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/recoverymode@1136~iphone-lightning.s8000.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/recoverymode@1136~iphone-lightning.s8003.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/recoverymode@1136~iphone-lightning.s8003.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/sep-firmware.n51.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/sep-firmware.n51.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/sep-firmware.n53.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/sep-firmware.n53.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/sep-firmware.n69.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/sep-firmware.n69.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/sep-firmware.n69u.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/all_flash/sep-firmware.n69u.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/aopfw.im4p
    creating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/ inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBEC.iphone6.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBEC.iphone6.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBEC.n69.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBEC.n69.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBEC.n69u.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBEC.n69u.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBSS.iphone6.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBSS.iphone6.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBSS.n69.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBSS.n69.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBSS.n69u.RELEASE.im4p
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/dfu/iBSS.n69u.RELEASE.im4p.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/Mav10-5.62.00.Release.bbfw
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/Mav10-5.62.00.Release.plist
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/Mav7Mav8-7.60.00.Release.bbfw
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/Mav7Mav8-7.60.00.Release.plist
    creating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/usr/ creating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/usr/local/ creating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Firmware/usr/local/standalone/ inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/kernelcache.release.iphone6
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/kernelcache.release.iphone8b
    inflating: /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock/Restore.plist
    [Log] Running futurerestore with command: ../saved/futurerestore_macos-main -b tmp/bbfw.tmp -p tmp/BuildManifest.plist -s sep-firmware.n53.RELEASE-14G60.im4p -m tmp/BuildManifest.plist --no-rsep --use-pwndfu --skip-blob -t ../saved/shsh/6549964085208_iPhone6,2_n53ap_10.3.3-14G60_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2 /Users/evgeniy/Documents/iPhone6,2_10.3.3_stock.ipsw Version: v2.0.0(cb5376bfd1b5deba512a80578b15daf47257262b-322) img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f-RELEASE libipatcher version: 0.88-1e855d70c84419014e363bdbcaead7b145fe3e1f-RELEASE Odysseus for 32-bit support: yes Odysseus for 64-bit support: yes WARNING: User specified to enable Deprecated/Legacy options, at risk of boot loop! [INFO] 64-bit device detected futurerestore init done reading signing ticket ../saved/shsh/6549964085208_iPhone6,2_n53ap_10.3.3-14G60_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2 is done Checking if SEP is being signed... Sending TSS request attempt 1... response successfully received SEP is being signed! Did set SEP and baseband path and firmware Checking if Baseband is being signed... TSS server returned: STATUS=94&MESSAGE=This device isn't eligible for the requested build. ERROR: TSS request failed (status=94, message=This device isn't eligible for the requested build.) Sending TSS request attempt 1... futurerestore: failed with exception: [exception]: what=Baseband firmware is NOT being signed!

code=31064123 line=474 file=/Users/runner/work/futurerestore/futurerestore/src/main.cpp commit count=322 commit sha =cb5376bfd1b5deba512a80578b15daf47257262b [Log] Restoring done! Read the message below if any error has occurred:

  • Please read the "Troubleshooting" wiki page in GitHub before opening any issue!

  • Your problem may have already been addressed within the wiki page.

  • If opening an issue in GitHub, please provide a FULL log/output. Otherwise, your issue may be dismissed.

  • Save the terminal output now if needed. (macOS: Cmd+S, Linux: Ctrl+Shift+S)

  • Legacy iOS Kit v25.03.03 (d76a800)

  • Platform: macos (12.4 - x86_64)

evgeniy@Mac-Pro-Evgenij Legacy-iOS-Kit_macos_v25 % ß ` I trimmed the output a bit by removing the lines with percentages from 0 to 100

ragik211 avatar Mar 05 '25 15:03 ragik211

hm that is unusual, does it also occur if you select no in the pwned restore option? there is also a chance that it is a network/internet issue

LukeZGD avatar Mar 06 '25 03:03 LukeZGD

Thanks for the quick reply. This happens even if I choose "No". There are no problems with the Internet, the Internet is via an Iphone USB modem via cable. There is the same error in LeetDown

ragik211 avatar Mar 06 '25 08:03 ragik211

use a 1) (is no required blobs)

gamelover-sergei avatar Mar 06 '25 17:03 gamelover-sergei

Can you tell me where and what to choose to roll back without blobs?

ragik211 avatar Mar 06 '25 18:03 ragik211

try to use this test branch for restoring to 10.3.3: https://github.com/LukeZGD/Legacy-iOS-Kit/archive/refs/heads/test.zip

LukeZGD avatar Mar 06 '25 21:03 LukeZGD

Unfortunately, the same mistake. Also, after each such "unsuccessful rollback", the phone falls into recovery mode and you have to flash it.

ragik211 avatar Mar 07 '25 09:03 ragik211

Last login: Fri Mar 7 15:03:37 on console evgeniy@Mac-Pro-Evgenij ~ % cd /Users/evgeniy/Desktop/Legacy-iOS-Kit-test evgeniy@Mac-Pro-Evgenij Legacy-iOS-Kit-test % ./restore.sh

*** Legacy iOS Kit ***

  • Script by LukeZGD -
  • Version: v25.03.03 (000test) [Log] Running on platform: macos (12.4 - x86_64) [Log] Checking Internet connection... [Log] Checking for updates... [WARNING] Current version is newer/different than remote: v25.03.03 (d76a800) [Log] Finding device in Normal mode... [Log] Getting device info...

*** Legacy iOS Kit ***

  • Script by LukeZGD -

  • Version: v25.03.03 (000test) [WARNING] Current version is newer/different than remote: v25.03.03 (d76a800)

  • Platform: macos (12.4 - x86_64)

  • Device: iPhone 5S (Global) (iPhone6,2 - n53ap) in Normal mode

  • Device is not activated, select Attempt Activation to activate.

  • iOS Version: 12.5.7 (16H81)

  • ECID: 6549964085208

Main Menu [Input] Select an option: -> Restore/Downgrade Attempt Activation
Save SHSH Blobs
App Management
Data Management
Useful Utilities
Misc Utilities
Exit

*** Legacy iOS Kit ***

  • Script by LukeZGD -

  • Version: v25.03.03 (000test) [WARNING] Current version is newer/different than remote: v25.03.03 (d76a800)

  • Platform: macos (12.4 - x86_64)

  • Device: iPhone 5S (Global) (iPhone6,2 - n53ap) in Normal mode

  • Device is not activated, select Attempt Activation to activate.

  • iOS Version: 12.5.7 (16H81)

  • ECID: 6549964085208

Main Menu > Restore/Downgrade

  • Note: Restoring to latest iOS for 64-bit devices is not supported on macOS, use iTunes/Finder instead for that

[Input] Select an option: -> iOS 10.3.3 Other (Use SHSH Blobs)
Set Nonce Only
IPSW Downloader
Go Back

*** Legacy iOS Kit ***

  • Script by LukeZGD -

  • Version: v25.03.03 (000test) [WARNING] Current version is newer/different than remote: v25.03.03 (d76a800)

  • Platform: macos (12.4 - x86_64)

  • Device: iPhone 5S (Global) (iPhone6,2 - n53ap) in Normal mode

  • Device is not activated, select Attempt Activation to activate.

  • iOS Version: 12.5.7 (16H81)

  • ECID: 6549964085208

  • Only select unmodified IPSW for the selection. Do not select custom IPSWs

  • Select iOS 10.3.3 IPSW to continue

Main Menu > Restore/Downgrade > iOS 10.3.3 [Input] Select an option: -> Select Target IPSW Download Target IPSW
Go Back

[Input] Select your Target IPSW file in the file selection window. [Log] Selected IPSW file: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw [Log] Getting version from IPSW Archive: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw inflating: ./Restore.plist
[Log] Getting SHA1 hash for /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw... [Log] Getting SHA1 hash from AppleDB... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 345k 100 345k 0 0 508k 0 --:--:-- --:--:-- --:--:-- 513k [Log] Using saved SHA1 hash for this IPSW: 46067e863e47f93bc867e865063bd8848cd80e9e [Log] IPSW SHA1sum matches

*** Legacy iOS Kit ***

  • Script by LukeZGD -

  • Version: v25.03.03 (000test) [WARNING] Current version is newer/different than remote: v25.03.03 (d76a800)

  • Platform: macos (12.4 - x86_64)

  • Device: iPhone 5S (Global) (iPhone6,2 - n53ap) in Normal mode

  • Device is not activated, select Attempt Activation to activate.

  • iOS Version: 12.5.7 (16H81)

  • ECID: 6549964085208

  • Only select unmodified IPSW for the selection. Do not select custom IPSWs

  • Selected Target IPSW: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw

  • Selected Target IPSW is validated

Main Menu > Restore/Downgrade > iOS 10.3.3 [Input] Select an option: Select Target IPSW
Download Target IPSW
-> Start Restore Go Back

[Input] Pwned Restore Option

  • When this option is enabled, use-pwndfu will be enabled for restoring.
  • It is recommended to disable this option for 10.3.3 OTA restores.
  • This option is disabled by default (N). Select this option if unsure. [Input] Enable this option? (y/N): -> No Yes

[Log] Pwned restore option disabled. [Log] Patching iBSS and iBEC... Archive: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw inflating: iBSS.iphone6.RELEASE.im4p
Archive: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw inflating: iBEC.iphone6.RELEASE.im4p
[Log] Pwned iBSS and iBEC saved at: saved/iPhone6,2 [Log] Found existing saved 10.3.3 blobs: ../saved/shsh/6549964085208_iPhone6,2_n53ap_10.3.3-14G60_3a88b7c3802f2f0510abc432104a15ebd8bd7154.shsh2

  • The device needs to be in Recovery/DFU mode before proceeding. [Input] Send device to recovery mode? (Y/n): -> Yes No

[Log] Entering recovery mode...

  • If the device does not enter recovery mode automatically, press Ctrl+C to cancel and try putting the device in DFU/Recovery mode manually [Log] Finding device in Recovery mode... [Log] Found device in Recovery mode.

  • DFU Mode Helper - Get ready to enter DFU mode.

  • If you already know how to enter DFU mode, you may do so right now before continuing. [Input] Select Y to continue, N to exit recovery mode (Y/n): -> Yes No

  • Get ready... 3 2 1

  • Hold TOP and HOME buttons. 8 7 6 5 4 3 2 1

  • Release TOP button and keep holding HOME button. 8 7 6 5 4 3 2 1 [Log] Finding device in DFU mode... [Log] Found device in DFU mode. [Input] PwnDFU Tool Option

  • Select tool to be used for entering pwned DFU mode.

  • This option is set to ipwnder32 by default (1). Select this option if unsure.

  • If the first option does not work, try many times and/or try the other option(s).

  • Note: Some Intel Macs have very low success rates for A7 checkm8. [Input] Select your option: -> ipwnder32 ipwnder_lite
    ipwndfu
    gaster

[Log] Placing device to pwnDFU mode using gaster ** iPwnder32 - RELEASE v3.2.0 [3C152] by @dora2ios Waiting for device in DFU mode... DFU device infomation iPhone 5s (Global) [iPhone6,2] CPID:0x8960 CPRV:0x11 BDID:0x02 ECID:0x000005F5084857D8 CPFM:0x03 SCEP:0x01 IBFL:0x1C SRTG:[iBoot-1704.10] exploiting with checkm8 Device is now in pwned DFU mode! [Log] Checking for device [Log] Found device in pwned DFU mode.

  • Pwned: checkm8 [Log] python2 from pyenv detected, this will be used [Log] Downloading ipwndfu.zip... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 1345k 0 1345k 0 0 624k 0 --:--:-- 0:00:02 --:--:-- 1809k [Log] Detected libusb installed via MacPorts [Log] Running rmsigchks... *** SecureROM Signature check remover by Linus Henze *** Acquiring device handle. Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:000005F5084857D8 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8] Applying patches... Acquiring device handle. Releasing device handle. Acquiring device handle. Sending 0x10 of data to device. Sending 0x28 of data to device. Releasing device handle. Acquiring device handle. Sending 0x10 of data to device. Sending 0x4c of data to device. Releasing device handle. Acquiring device handle. Sending 0x10 of data to device. Sending 0x2c of data to device. Releasing device handle. Successfully applied patches Resetting device state Performing USB port reset. Releasing device handle. Device is now ready to accept unsigned images
  • If you get the error "No backend available," install libusb in Homebrew/MacPorts [Log] gaster reset usb_timeout: 5 usb_abort_timeout_min: 0 [IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227 Found the USB handle. [Log] Entering pwnREC mode... (Attempt 1 of 5) [Log] Sending iBSS... [==================================================] 100.0% [Log] Sending iBEC... [==================================================] 100.0% [Log] Finding device in Recovery mode... [Log] Found device in Recovery mode. [Log] Running tsschecker with command: ../bin/macos/tsschecker -d iPhone6,2 -i 10.3.3 -e 6549964085208 -m ../resources/manifest/BuildManifest_iPhone6,2_10.3.3.plist -o -s -B n53ap -b --apnonce 7ce1657233867e988e1b48988ef98fc28ddf20f5 tsschecker version: 0.413-dd7e883adc94e2289e492b196bfbf67c7e18a544 libfragmentzip version: 0.64-aaf6fae83a0aa6f7aae1c94721857076d04a14e8-RELEASE [TSSC] manually specified ECID to use, parsed "6549964085208" to dec:6549964085208 hex:5f5084857d8 [TSSC] manually specified apnonce to use, parsed "7ce1657233867e988e1b48988ef98fc28ddf20f5" to hex:7ce1657233867e988e1b48988ef98fc28ddf20f5 Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received also requesting APTicket for installType=Update [Error] [TSSR] Error: could not get BuildIdentity for installType=Update [WARNING] [TSSR] failed to build tssrequest for alternative installType Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... Saved shsh blobs!

iOS 10.3.3 for device iPhone6,2 IS being signed! [Log] Successfully saved 10.3.3 blobs: 6549964085208_iPhone6,2_n53ap_10.3.3-14G60_7ce1657233867e988e1b48988ef98fc28ddf20f5.shsh [Log] Manifest: ../saved/iPhone6,2/14G60.plist [Log] Downloading 14G60 Baseband Version: 9bfdde2b2456181045f74631683fba491d8bf4f2 - 38 libfragmentzip version: 0.64-aaf6fae83a0aa6f7aae1c94721857076d04a14e8-RELEASE init pzb: http://appldnld.apple.com/ios10.3.3/091-23133-20170719-CA8E78E6-6977-11E7-968B-2B9100BA0AE3/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw init done getting: Firmware/Mav7Mav8-7.60.00.Release.bbfw 0% [ 100% [========================================================================== 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ [========================================================================== 99% [========================================================================== 99% [==========================================================================100% [===================================================================================================>] download succeeded [Log] Baseband: ../saved/baseband/Mav7Mav8-7.60.00.Release.bbfw [Log] Downloading 14G60 SEP Version: 9bfdde2b2456181045f74631683fba491d8bf4f2 - 38 libfragmentzip version: 0.64-aaf6fae83a0aa6f7aae1c94721857076d04a14e8-RELEASE init pzb: http://appldnld.apple.com/ios10.3.3/091-23133-20170719-CA8E78E6-6977-11E7-968B-2B9100BA0AE3/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw init done getting: Firmware/all_flash/sep-firmware.n53.RELEASE.im4p 0% [ 100% [========================================================================== 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ 0% [ [========================================================================== 99% [==========================================================================100% [===================================================================================================>] download succeeded [Log] SEP: ../saved/iPhone6,2/sep-firmware.n53.RELEASE-14G60.im4p [Log] Extracting IPSW: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw Archive: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw inflating: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore/058-74917-062.dmg

inflating: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore/kernelcache.release.iphone6
inflating: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore/kernelcache.release.iphone8b
inflating: /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore/Restore.plist
[Log] Running futurerestore with command: ../bin/macos/futurerestore_new --latest-baseband -s sep-firmware.n53.RELEASE-14G60.im4p -m tmp/BuildManifest.plist --skip-blob -t 6549964085208_iPhone6,2_n53ap_10.3.3-14G60_7ce1657233867e988e1b48988ef98fc28ddf20f5.shsh /Users/evgeniy/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw Version: c4cf922ca7ed1677e87f70f3fc645c3e6b4baaff - 202 img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f Odysseus support: no INFO: device serial number is DX3SLLQEFFG9 [INFO] 64-bit device detected futurerestore init done reading signing ticket 6549964085208_iPhone6,2_n53ap_10.3.3-14G60_7ce1657233867e988e1b48988ef98fc28ddf20f5.shsh is done [TSSC] opening tmp/BuildManifest.plist [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request [TSSR] User specified to not request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received user specified to use latest signed baseband (WARNING, THIS CAN CAUSE A NON-WORKING RESTORE) [TSSC] opening firmwares.json [DOWN] downloading file https://api.ipsw.me/v2.1/firmwares.json/condensed [TSSC] selecting latest firmware version: 12.5.7 [TSSC] got firmwareurl for iOS 12.5.7 build 16H81 100 [===========================================================================011 [==========> 023 [======================> 034 [=================================> 046 [=============================================> 057 [========================================================> 069 [====================================================================> 080 [===========================================================================092 [===========================================================================100 [===================================================================================================>] [TSSR] Checking BuildIdentity 0 [TSSR] Checking BuildIdentity 1 [TSSR] Selected BuildIdentity for request downloading Baseband 100 [===========================================================================000 [ 000 [ 000 [ 000 [ [===========================================================================100 [===================================================================================================>] [TSSC] opening /tmp/futurerestore/basebandManifest.plist [TSSR] Checking BuildIdentity 0 [TSSR] Checking BuildIdentity 1 [TSSR] Selected BuildIdentity for request [TSSR] User specified to request only a Baseband ticket.

[TSSR] Found undocumented baseband

Request URL set to https://gs.apple.com/TSS/controller?action=2 TSS server returned: STATUS=94&MESSAGE=This device isn't eligible for the requested build. ERROR: TSS request failed (status=94, message=This device isn't eligible for the requested build.) Sending TSS request attempt 1... futurerestore: failed with exception: [exception]: what=baseband firmware is NOT being signed!

code=19333128 line=295 file=main.cpp commit count=202: commit sha =c4cf922ca7ed1677e87f70f3fc645c3e6b4baaff: [Log] Restoring done! Read the message below if any error has occurred:

  • Please read the "Troubleshooting" wiki page in GitHub before opening any issue!

  • Your problem may have already been addressed within the wiki page.

  • If opening an issue in GitHub, please provide a FULL log/output. Otherwise, your issue may be dismissed. kill: usage: kill [-s sigspec | -n signum | -sigspec] pid | jobspec ... or kill -l [sigspec]

  • Save the terminal output now if needed. (macOS: Cmd+S, Linux: Ctrl+Shift+S)

  • Legacy iOS Kit v25.03.03 (000test)

  • Platform: macos (12.4 - x86_64)

evgeniy@Mac-Pro-Evgenij Legacy-iOS-Kit-test %

ragik211 avatar Mar 07 '25 09:03 ragik211

Apple stopped signing firmware...

gamelover-sergei avatar Mar 07 '25 14:03 gamelover-sergei

Apple stopped signing firmware...

stop commenting misinformation please. if you check the log at all you can see that the shsh blob clearly saved and the issue is caused by something else

anyway i cant get back into this issue for a while, maybe in a week or 2 when i am able to test it myself with my 5s. for now im thinking that the problem might be caused by having 2 ios devices connected at the same time (legacy ios kit only supports 1 ios device connected at a time). also try a different internet connection if you can

LukeZGD avatar Mar 07 '25 14:03 LukeZGD

Thank you so much for your reply. Can you tell me how sure you are that this is the problem? I'll just have to buy another wifi adapter. Maybe there is a way to do a rollback without the Internet? Could this be due to an incorrectly configured Hackintosh?

ragik211 avatar Mar 07 '25 14:03 ragik211

im not really sure tbh, i cant test this myself atm. anyway since you mentioned that you have a hackintosh, i have an idea: you can also try to do the restore in a linux live usb, where you will first enter pwndfu using macos, then do the restore on linux (if you get internet working there)

just an idea im throwing out there if its an option for you, i have no clue if it will help doing the restore on linux instead

LukeZGD avatar Mar 07 '25 14:03 LukeZGD

My internet works on Linux, can you tell me how to enter pwndfu using your utility? And restore to Linux too? What distribution is needed and do I need to install dependencies? I will be grateful for a little instruction.

ragik211 avatar Mar 07 '25 14:03 ragik211

yea so using legacy ios kit on mac, go to useful utiltiies and select pwndfu mode. then do the restore/downgrade using legacy ios kit on linux. as for distro, just use latest ubuntu or any variants of it, legacy ios kit will also handle the dependencies automatically

LukeZGD avatar Mar 07 '25 15:03 LukeZGD

Can you tell me more, will legacy ios kit be able to work with pwndfu right away? On macOS, it requires the Iphone to be in normal mode first.

ragik211 avatar Mar 07 '25 15:03 ragik211

yes

normal mode is not required

LukeZGD avatar Mar 07 '25 15:03 LukeZGD

Thanks a lot for the instructions. I tried, and I managed to switch back to iOS 10.3.3. I think you're right that the problem was with two connected devices.

ragik211 avatar Mar 07 '25 18:03 ragik211