See Legacy iOS Kit to save onboard blobs
- Dump blobs on A5-A6X 32-bit iOS devices
- macOS required
- Jailbreak required
- See the Wiki Page for step-by-step instructions
- See Troubleshooting if you run into problems
-
Download required files (IPSW's, Odysseus & FirmwareBundles)
./prepare <device model> <ios version>
e.g.
./prepare iPhone4,1 8.4.1
-
Extract baseband, build custom IPSW, and extract iBEC & iBSS
./patchipsw <device model> <device IP>
e.g.
./patchipsw iPhone4,1 192.168.1.14
-
Enter kDFU mode using pwned iBSS
./enterkdfu <device IP>
-
Send pwned iBEC to device in kDFU mode then dump onboard blobs
./dumpblobs <device model> <ios version>
- dayt0n and xerub for Odysseus.
- s0uthwest, encounter and tihmstar for TSSChecker.
- westbaer, @pod2g, tom3q, planetbeing, geohot and posixninja for iRecovery.
- planetbeing for xpwn