Skip to content

Instantly share code, notes, and snippets.

@encounter
Last active February 20, 2018 03:40
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save encounter/a68685407b6eb24aa8f47091cd347ee3 to your computer and use it in GitHub Desktop.
Save encounter/a68685407b6eb24aa8f47091cd347ee3 to your computer and use it in GitHub Desktop.
$ futurerestore -t /my/shsh/file --latest-baseband --latest-sep iPhone_4.0_64bit_11.1.2_15B202_Restore.ipsw
Version: 451804fd967684c434ef031703c9676066ab195b - 153
Odysseus Support: no
[INFO] 64bit device detected
futurerestore init done
reading ticket ../../Downloads/unknown-2.dms done
Found device product iPhone8,4
Found device board n69ap
user specified to use latest signed sep
[TSSC] opening firmware.json
[DOWN] downloading file https://api.ipsw.me/v2.1/firmwares.json/condensed
Found device product iPhone8,4
[TSSC] selecting latest iOS: 11.2.1
[TSSC] got firmwareurl for iOS 11.2.1 build 15C153
100 [===================================================================================================>]
downloading SEP
100 [===================================================================================================>]
[TSSC] opening /tmp/futurerestore/sepManifest.plist
[TSSR] Using devVals->deviceBoard n69ap
WARNING: Unable to find BbSkeyId node
[TSSR] User specified not to request a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
user specified to use latest signed baseband (WARNING, THIS CAN CAUSE A NON-WORKING RESTORE)
downloading Baseband
100 [===================================================================================================>]
[TSSC] opening /tmp/futurerestore/basebandManifest.plist
[TSSR] Using devVals->deviceBoard n69ap
WARNING: Unable to find BbSkeyId node
[TSSR] User specified to request only a Baseband ticket.
ERROR: Unable to get BasebandFirmware node
ERROR: Unable to find required BbGoldCertId in parameters
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Found device in Normal mode
Entering recovery mode...
INFO: device serial number is x
Found device in Recovery mode
Identified device as n69ap, iPhone8,4
Extracting BuildManifest from IPSW
Product Version: 11.1.2
Product Build: 15B202 Major: 15
Device supports Image4: true
Got APNonce from device: 37 76 98 37 39 dc 12 3e bf cc 9f fa 1a d2 6a 1f bc 38 90 6f
checking APTicket to be valid for this restore...
Verified ECID in APTicket matches device ECID
checking APTicket to be valid for this restore...
Verified ECID in APTicket matches device ECID
Verified APTicket to be valid for this restore
Variant: Customer Erase Install (IPSW)
This restore will erase your device data.
Extracting filesystem from IPSW
[==================================================] 100.0%
Extracting iBEC.n69.RELEASE.im4p...
Personalizing IMG4 component iBEC...
Sending iBEC (354519 bytes)...
waiting for device to reconnect...
Getting SepNonce in recovery mode... 49 03 46 3e 6c 05 92 a1 1e b2 00 01 87 1c 93 37 bb fb 74 74
Getting ApNonce in recovery mode... 37 76 98 37 39 dc 12 3e bf cc 9f fa 1a d2 6a 1f bc 38 90 6f
[WARNING] Setting bgcolor to green! If you don't see a green screen, then your device didn't boot iBEC correctly
Recovery Mode Environment:
iBoot build-version=iBoot-4076.20.48
iBoot build-style=RELEASE
Sending RestoreLogo...
Extracting applelogo@2x~iphone.im4p...
Personalizing IMG4 component RestoreLogo...
Sending RestoreLogo (12214 bytes)...
ramdisk-size=0x20000000
Extracting 058-84556-102.dmg...
Personalizing IMG4 component RestoreRamDisk...
Sending RestoreRamDisk (59143765 bytes)...
Extracting DeviceTree.n69ap.im4p...
Personalizing IMG4 component RestoreDeviceTree...
Sending RestoreDeviceTree (133515 bytes)...
Extracting kernelcache.release.iphone8b...
Personalizing IMG4 component RestoreKernelCache...
Sending RestoreKernelCache (14014919 bytes)...
Trying to fetch new SHSH blob
WARNING: Unable to find BbSkeyId node
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received SHSH blobs
About to restore device...
Waiting for device...
Device x is now connected in restore mode...
Connecting now...
Connected to com.apple.mobile.restored, version 15
Device x has successfully entered restore mode
Hardware Information:
BoardID: 2
ChipID: 32771
UniqueChipID: x
ProductionMode: true
Starting FDR listener thread
About to send NORData...
Found firmware path Firmware/all_flash
Getting firmware manifest from build identity
Extracting LLB.n69.RELEASE.im4p...
Personalizing IMG4 component LLB...
Extracting applelogo@2x~iphone.im4p...
Personalizing IMG4 component AppleLogo...
Extracting batterycharging0@2x~iphone.im4p...
Personalizing IMG4 component BatteryCharging0...
Extracting batterycharging1@2x~iphone.im4p...
Personalizing IMG4 component BatteryCharging1...
Extracting batteryfull@2x~iphone.im4p...
Personalizing IMG4 component BatteryFull...
Extracting batterylow0@2x~iphone.im4p...
Personalizing IMG4 component BatteryLow0...
Extracting batterylow1@2x~iphone.im4p...
Personalizing IMG4 component BatteryLow1...
Extracting glyphplugin@1136~iphone-lightning.im4p...
Personalizing IMG4 component BatteryPlugin...
Extracting DeviceTree.n69ap.im4p...
Personalizing IMG4 component DeviceTree...
Extracting recoverymode@1136~iphone-lightning.im4p...
Personalizing IMG4 component RecoveryMode...
Extracting iBoot.n69.RELEASE.im4p...
Personalizing IMG4 component iBoot...
Personalizing IMG4 component RestoreSEP...
Personalizing IMG4 component SEP...
Sending NORData now...
Done sending NORData
About to send RootTicket...
Sending RootTicket now...
Done sending RootTicket
Waiting for NAND (28)
Updating S3E Firmware (58)
Checking filesystems (15)
Checking filesystems (15)
Checking filesystems (15)
Checking filesystems (15)
About to send FDR Trust data...
Sending FDR Trust data now...
Done sending FDR Trust Data
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Creating partition map (11)
Creating filesystem (12)
About to send filesystem...
Connected to ASR
Validating the filesystem
Filesystem validated
Sending filesystem now...
[==================================================] 100.0%
Done sending filesystem
Verifying restore (14)
[==================================================] 100.0%
Checking filesystems (15)
Checking filesystems (15)
Checking filesystems (15)
Mounting filesystems (16)
Mounting filesystems (16)
Mounting filesystems (16)
About to send KernelCache...
Extracting kernelcache.release.iphone8b...
Personalizing IMG4 component KernelCache...
Sending KernelCache now...
Done sending KernelCache
Installing kernelcache (27)
About to send DeviceTree...
Extracting DeviceTree.n69ap.im4p...
Personalizing IMG4 component DeviceTree...
Sending DeviceTree now...
Done sending DeviceTree
Certifying Savage (61)
Flashing firmware (18)
[==================================================] 100.0%
Updating gas gauge software (47)
Updating gas gauge software (47)
Updating Stockholm (55)
About to send FUD data...
Found FUD component 'AOP'
Extracting aopfw-s8000aop.im4p...
Personalizing IMG4 component AOP...
Sending FUD data now...
Done sending FUD data
About to send FUD data...
Found FUD component 'AOP'
Extracting aopfw-s8000aop.im4p...
Personalizing IMG4 component AOP...
Sending FUD data now...
Done sending FUD data
Updating baseband (19)
About to send BasebandData...
WARNING: Unable to find BbSkeyId node
Sending Baseband TSS request...
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received Baseband SHSH blobs
Sending BasebandData now...
Done sending BasebandData
Updating Baseband in progress...
About to send BasebandData...
Sending BasebandData now...
Done sending BasebandData
Updating Baseband completed.
Updating SE Firmware (59)
Fixing up /var (17)
Creating system key bag (50)
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
Cleaning up...
DONE
Done: restoring succeeded.
@Yiudeyk3
Copy link

How did you get pass throught the ECID check for the device and ticket?? I have been doing a heavy research as to why I can't get pass throught that, and I have saved my ECID with the iTunes's ECID locator. Everything works well, but when it gets to verify the APTicket it says that the ECID does not match with the device. I have used both TSSChecker from you and tihmstar latest version, but I still get the same error. The only one that works pretty well is the SHSH files from TSSSaver from Conan. Any help?

@Yiudeyk3
Copy link

Even tihmstar says that ECID must be either dec or hex eg. 5482657301265 or ab46efcbf71. ECID (Decimal): UDID
ECID (Hex): iTunes Version. Connan saves my shsh files as itunes version and they work with your futurerestore. I don't want to blame you, but is there a bug in futurerestore to not switch to DEC from HEX when checking with the device? Thank you, much appreciated.

@Yiudeyk3
Copy link

I tried saving with Decimal but it changes the HEX to a different one than my device with Conan's TSSSaver, and TSSChecker (both) does the same thing. I just want to know what's going on with these tools. btw, all of my shsh are valid using conan's website and tihmstar's img4 checker tool too.

@Yiudeyk3
Copy link

I think the conversion during the process in futurerestore from HEX to DEC does not work, or YOUR tsschecker and tihmstar's saves the shsh wrongly without automatically converting the HEX to DEC numbers, or DEC to HEX numbers. Right?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment