downgrade tethered checkm8 idevices ios 14, 15.
A MOD VERSION OF DOWNR1N TO TEST CHECKRA1N ON IT, CURRENTLY NOT WORKING.
downgrades are shit tbh xd, I mean dualboot is much better option if you have the storage needed.
download the ipsw and put it into ipsw/ directory
on linux use this without sudo.
Example: ./downr1n.sh --downgrade 14.3
--downgrade downgrade tethered your device to ios 14.
--dfuhelper A helper to help get A11 devices into DFU mode from recovery mode
--jailbreak jailbreak with pogo. usage ./downr1n --jailbreak 14.8
--taurine jailbreak with taurine. usage ./downr1n --jailbreak 14.3 --taurine
--boot this boot the device.
--dont-restore this will avoid the restore using futurerestore, this can be used if you wanted only create the boot files. example: --downgrade 14.3 --dont-restore
--fixBoot that will boot the device using fsboot
--debug Debug the scrip
unzip
, python3
, libimobiledevice-utils
, libusbmuxd-tools
.iPSW
file containing iOS 14 or 15
there is a mode name dfu which the device is in black screen but when we downgrade the device recovery mode turn into black screen as well so to put the device into pwndfu mode you need to put it on the real dfu mode by pressing poweroff+(volumendown or homebutton) look at a tutorial on youtube to got it, when you are already pwndfu execute ./binaries/$(uname)/gaster pwn to pwdnfu but the device must be on dfu mode to success, if the device is not, it will loop.
if you want to try fix the recovery mode. copying firmware/all_flash/* of a ipsw from the version that you are or you were before downgrade to the ipsw from the ios that you want to downgrade. that should come back the recovery mode.
problems with futurerestore so execute manual ./binaries/$(uname)/futurerestore -t blobs/(oneoftheblobs) --use-pwndfu --skip-blob --rdsk work/rdsk.im4p --rkrn work/krnl.im4p --latest-sep (only if your device has baseband use it --latest-baseband if not use --no-baseband') ipsw/*.ipsw
to improve the boot. rn not working at all but you can try it sometimes we have problems like deep sleep or the ios doesnt boot so i add two option for that reason --localboot and --fsboot. both are patchers by palera1n team in order to fix some problems in the boot so you must use it when you will create boot files for example --downgrade () --dont-restore (--localboot) or (--fsboot), when that finish creating that you just have to boot for example --boot (--localboot) or (--fsboot), its not neccessary that you need to use them but if you had some problems you can
jailbreak with dualra1n-loader: ./downr1n --jailbreak (YourVer = 14.3) # this is not a jailbreak. when i said jailbreak i mean the process to install sileo and boostrap the device therefore dualra1n-loader only install sileo and bootstrap with the kernelpatched
taurine: ./downr1n --jailbreak (YourVer = 14.3) --taurine #not recommended
futurerestore thank you for futurerestore.
mineek because sunst0rm
exploit for asrpatcher
iSuns9 thank you for restored_external64patche
Nathan for the ramdisk
tihmstar for pzb/original iBoot64Patcher/original liboffsetfinder64/img4tool
xerub for img4lib and restored_external in the ramdisk
libimobiledevice for several tools used in this project (irecovery, ideviceenterrecovery etc), and nikias for keeping it up to date
Ralp0045 amazing dtree_patcher and kernel64patcher ;)