Skip to content

Instantly share code, notes, and snippets.

@jihyo-song
Last active August 8, 2017 17:35
Show Gist options
  • Save jihyo-song/0724639bb3f4f2ce2129ac1ed88b68a1 to your computer and use it in GitHub Desktop.
Save jihyo-song/0724639bb3f4f2ce2129ac1ed88b68a1 to your computer and use it in GitHub Desktop.
Futurerestore Latest 126 (ip5s 9.0.2 -> 10.3.1) with -d parameter.
Last login: Sat May 27 12:27:28 on ttys000
Admins-Mac:~ admin$ cd desktop/futurerestore-latest/
Admins-Mac:futurerestore-latest admin$ ls
xxxxxxxxxxxxxx_iPhone6,2_n53ap_10.3.1-14E304_732fbc5f7bc45275b5b19c2254a98d0ed6057f5a.shsh2
BuildManifest.plist
LICENSE
Mav7Mav8-7.60.00.Release.bbfw
New Text Document.txt
cacert.pem
futurerestore_linux
futurerestore_macos
iPhone_4.0_64bit_10.3.1_14E304_Restore.ipsw
latest-sha-futurerestore.txt
nonceEnabler
nvrampatcher
sep-firmware.n53.RELEASE.im4p
signature.txt
Admins-Mac:futurerestore-latest admin$ ./futurerestore_macos -h
Version: de907d3fa854275b296af0e18818467d72cc59fa - 126
Usage: futurerestore [OPTIONS] IPSW
Allows restoring nonmatching iOS/Sep/Baseband
-t, --apticket PATH Apticket used for restoring
-b, --baseband PATH Baseband to be flashed
-p, --baseband-manifest PATH Buildmanifest for requesting baseband ticket
-s, --sep PATH Sep to be flashed
-m, --sep-manifest PATH Buildmanifest for requesting sep ticket
-w, --wait keep rebooting until nonce matches APTicket
-u, --update update instead of erase install
--latest-sep use latest signed sep instead of manually specifying one(may cause bad restore)
--latest-baseband se latest signed baseband instead of manually specifying one(may cause bad restore)
--no-baseband skip checks and don't flash baseband.
WARNING: only use this for device without baseband (eg iPod or some wifi only iPads)
Admins-Mac:futurerestore-latest admin$ ./futurerestore_macos -t xxxxxxxxxxxxxxx_iPhone6,2_n53ap_10.3.1-14E304_732fbc5f7bc45275b5b19c2254a98d0ed6057f5a.shsh2 -b Mav7Mav8-7.60.00.Release.bbfw -p BuildManifest.plist -s sep-firmware.n53.RELEASE.im4p -m BuildManifest.plist iPhone_4.0_64bit_10.3.1_14E304_Restore.ipsw -d
Version: de907d3fa854275b296af0e18818467d72cc59fa - 126
[INFO] 64bit device detected
futurerestore init done
reading ticket xxxxxxxxxxxxxxxx_iPhone6,2_n53ap_10.3.1-14E304_732fbc5f7bc45275b5b19c2254a98d0ed6057f5a.shsh2 done
[TSSC] opening BuildManifest.plist
[TSSR] ecid=1189651455682924
[TSSR] nonce=?T9???}?H?????+?-
[TSSR] sepnonce=????`??C"O[`?L??? X
NOTE: Unable to find BbCalibrationManifestKeyHash node
NOTE: Unable to find BbFactoryActivationManifestKeyHash node
NOTE: Unable to find BbFDRSecurityKeyHash node
WARNING: Unable to find BbSkeyId node
DEBUG: Applying restore request rules for entry AppleLogo
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryCharging0
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryCharging1
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryFull
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryLow0
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryLow1
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryPlugin
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry DeviceTree
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry KernelCache
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry LLB
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry OS
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RecoveryMode
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RestoreDeviceTree
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RestoreKernelCache
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RestoreLogo
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RestoreRamDisk
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RestoreSEP
DEBUG: Adding action ESEC to TSS entry
DEBUG: Adding action EPRO to TSS entry
DEBUG: Applying restore request rules for entry SEP
DEBUG: Adding action ESEC to TSS entry
DEBUG: Adding action EPRO to TSS entry
DEBUG: Applying restore request rules for entry iBEC
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry iBSS
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry iBoot
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
[TSSR] User specified not to request a Baseband ticket.
common.c:printing 5271 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>@Locality</key>
<string>en_US</string>
<key>@HostPlatformInfo</key>
<string>mac</string>
<key>@VersionInfo</key>
<string>libauthinstall-293.1.16</string>
<key>@UUID</key>
<string>ECF2A0BD-C95A-167F-9326-DA1ED66740F2</string>
<key>ApECID</key>
<integer>1189651455682924</integer>
<key>UniqueBuildID</key>
<data>
rXPX34sciygEPKnNd8tNnGKup9I=
</data>
<key>ApChipID</key>
<integer>35168</integer>
<key>ApBoardID</key>
<integer>2</integer>
<key>ApSecurityDomain</key>
<integer>1</integer>
<key>AppleLogo</key>
<dict>
<key>Digest</key>
<data>
Qrcf8fWmVOSAdIQBK3ao2s/o0PI=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>BatteryCharging0</key>
<dict>
<key>Digest</key>
<data>
2NeFQ2MnVhTkaK/yahv5ntHvjQc=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>BatteryCharging1</key>
<dict>
<key>Digest</key>
<data>
I1o+j58K+UlswbdFR+wwI579yCs=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>BatteryFull</key>
<dict>
<key>Digest</key>
<data>
e/CkrzgIISEh+4sMSQkqOesoOMI=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>BatteryLow0</key>
<dict>
<key>Digest</key>
<data>
7iSpMfn61WDtPcjzhB0I0lH9lQ4=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>BatteryLow1</key>
<dict>
<key>Digest</key>
<data>
aVBhIo5Nscl4vSXJYhen0qQt2og=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>BatteryPlugin</key>
<dict>
<key>Digest</key>
<data>
kILU/qYPpV3205ZCsQ9PlJ466N4=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>DeviceTree</key>
<dict>
<key>Digest</key>
<data>
3a95W9zx6l7kHc6JBuHBKdLa0+U=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>KernelCache</key>
<dict>
<key>Digest</key>
<data>
fHGq2ntCEpJYJaLO+oZBhMvYDls=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>LLB</key>
<dict>
<key>BuildString</key>
<string>iBoot-3406.60.10~39</string>
<key>Digest</key>
<data>
ZvG80kreoING02sBrrHHd/HfKxs=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>OS</key>
<dict>
<key>Digest</key>
<data>
p1xmjf8uEDpK3O7d+UPZ7xKFpXk=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>RecoveryMode</key>
<dict>
<key>Digest</key>
<data>
NgLPXZ6MxkmkRAuRebf7MuiSHt0=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>RestoreDeviceTree</key>
<dict>
<key>Digest</key>
<data>
Ntb0nT4ZTNmHDeZp8NghBiOn7jk=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>RestoreKernelCache</key>
<dict>
<key>Digest</key>
<data>
sPBDS5EFdGwKWMCVguhTbNNtnFM=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>RestoreLogo</key>
<dict>
<key>Digest</key>
<data>
l5qdKpIyEAFDdjiipmNUg4D61rU=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>RestoreRamDisk</key>
<dict>
<key>Digest</key>
<data>
KqhXNDXKDttJbELPdCysw/2ucYo=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>RestoreSEP</key>
<dict>
<key>Digest</key>
<data>
GQ0TBKuDowod85GQNj0PytAcZug=
</data>
<key>Trusted</key>
<true/>
<key>ESEC</key>
<true/>
<key>EPRO</key>
<true/>
</dict>
<key>SEP</key>
<dict>
<key>Digest</key>
<data>
8f416tccbv7XfZsaSYbvu0cN/Vw=
</data>
<key>Trusted</key>
<true/>
<key>ESEC</key>
<true/>
<key>EPRO</key>
<true/>
</dict>
<key>iBEC</key>
<dict>
<key>BuildString</key>
<string>iBoot-3406.60.10~39</string>
<key>Digest</key>
<data>
2k98yvhxnEuGCZ41xmQbA0Hxmyo=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>iBSS</key>
<dict>
<key>BuildString</key>
<string>iBoot-3406.60.10~39</string>
<key>Digest</key>
<data>
MtXV19NgE3YsK6lOQtaGGAB0e+Y=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>iBoot</key>
<dict>
<key>Digest</key>
<data>
0P6x5qwNi9fN/M6cAggS4ToAWEA=
</data>
<key>Trusted</key>
<true/>
<key>EPRO</key>
<true/>
<key>ESEC</key>
<true/>
</dict>
<key>ApNonce</key>
<data>
D/RUOdPLw33ESPW5HgeKhLIr6C0=
</data>
<key>@ApImg4Ticket</key>
<true/>
<key>ApSecurityMode</key>
<true/>
<key>ApProductionMode</key>
<true/>
<key>SepNonce</key>
<data>
pLKl+GCGgUMiT1tgp0z95T8JWAw=
</data>
</dict>
</plist>
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
common.c:printing 7281 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>@ServerVersion</key>
<string>2.1.0</string>
<key>ApImg4Ticket</key>
<data>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 up for free to join this conversation on GitHub. Already have an account? Sign in to comment