iOS-OTA-Downgrader

(formerly 32bit-OTA-Downgrader)

Downgrade/restore iOS devices to signed OTA firmwares

• Please see "Other notes" below to serve as answers for FAQs

Supported devices:

• iOS 10.3.3: All A7 devices are supported except iPad4,6 iPad4,7 iPad4,8 iPad4,9
• iOS 8.4.1: All A5, A5X, A6, and A6X devices are supported except iPhone5,3 and 5,4 (iPhone 5C)
• iOS 6.1.3: Only iPhone 4S and iPad 2 devices are supported except iPad2,4 (iPad 2 Rev A)

Prerequisites:

• A supported device:
  • A 32-bit iOS device (any version, jailbreak needed)
  • An A7 device (any version, jailbreak not needed)
• An IPSW for the version you want to downgrade to (the script can also download it for you)
• A macOS or a 64-bit Linux install/live USB (see distros tested on below) (a live USB can be easily created with tools like balenaEtcher or Rufus)
• 32-bit users only:
  • iOS 7/8 Pangu users: Install the latest Pangu 7.1.x Untether (deb) or latest Pangu 8.0-8.1.x Untether (deb)
  • iOS 9 and below users: Install OpenSSH; The computer and iOS device must be on the same network for SSH to work
  • iOS 10 users: Install MTerminal

1. Download or git clone this repo
2. Open Terminal, cd to the directory where the script is located (example: cd /home/user/iOS-OTA-Downgrader)
3. Run chmod +x restore.sh

How to use:

1. Plug in your iOS device in:

• Normal mode (32-bit)
• Recovery or DFU mode (A7)

2. Run ./restore.sh
3. Select option to be used
4. Follow instructions

Other notes:

• You do NOT need blobs to use this, the script will get them for you
• This script will verify the IPSW with SHA1sum before restoring
• 32-bit only:
  • This script does not modify the IPSW
  • To devices with baseband, this script will restore your device with the latest baseband
  • This script has a workaround for the activation error on devices downgrading from iOS 10
  • This script uses futurerestore "Odysseus method" for downgrading (different from OdysseusOTA/2, which are deprecated)
  • This script only uses iBSS patches for entering kDFU mode
  • This script can also be used to just enter kDFU mode for all supported devices
  • This script can also be used to futurerestore to other iOS versions with provided SHSH blobs
  • This script can work on virtual machines, but I won't provide support for them

OS versions/distros tested on:

• Ubuntu 20.04
• Arch Linux
• Manjaro (Testing branch)
• Fedora 32
• macOS 10.13.6 High Sierra, 10.14.6 Mojave, 10.15.5 Catalina

Tools and other stuff used by this script:

• cURL
• bspatch
• ifuse
• igetnonce
• ipwndfu
• libimobiledevice utilities
• python2
• python3
• tsschecker
• futurerestore 152 (Linux) (32-bit)
• futurerestore 249 (Linux) (A7)
• futurerestore 245 (macOS)
• xpwntool
• kloader
• kloader5 for iOS 5
• kloader_hgsp for iOS 10
• partialZipBrowser
• 32-bit iBSS patches are from OdysseusOTA, OdysseusOTA2, alitek12, gjest
• A7 iBSS and iBEC patches are from MatthewPierson