Open Ay4y0 opened 4 years ago
Dear User
you have to start the Script as SU
What should I do?((
same problem
Traceback (most recent call last):
File "./ipwndfu", line 66, in
Process: Python [37295] Path: /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python Identifier: Python Version: 2.7.16 (2.7.16) Build Info: python-125000000000000~400 Code Type: X86-64 (Native) Parent Process: bash [34375] Responsible: Terminal [456] User ID: 501
PlugIn Path: /Users/USER/Downloads/*/libusb-1.0.22.mojave.bottle.dylib PlugIn Identifier: libusb-1.0.22.mojave.bottle.dylib PlugIn Version: ??? (0)
Date/Time: 2019-11-01 14:47:49.030 +0800 OS Version: Mac OS X 10.15 (19A583) Report Version: 12 Anonymous UUID: 39B3C06E-C54E-C577-A22B-368C4D9BEEC0
Time Awake Since Boot: 1700 seconds
System Integrity Protection: disabled
Crashed Thread: 0 Dispatch queue: com.apple.main-thread
Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000058 Exception Note: EXC_CORPSE_NOTIFY
Termination Signal: Segmentation fault: 11 Termination Reason: Namespace SIGNAL, Code 0xb Terminating Process: exc handler [37295]
VM Regions Near 0x58: --> __TEXT 0000000107fb4000-0000000107fb6000 [ 8K] r-x/r-x SM=COW /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python
Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 libusb-1.0.22.mojave.bottle.dylib 0x000000010858b5bb remove_from_flying_list + 17 1 libusb-1.0.22.mojave.bottle.dylib 0x000000010858b707 usbi_handle_transfer_completion + 39 2 libusb-1.0.22.mojave.bottle.dylib 0x000000010858c3d9 handle_events + 1012 3 libusb-1.0.22.mojave.bottle.dylib 0x000000010858bd7b libusb_handle_events_timeout_completed + 262 4 libusb-1.0.22.mojave.bottle.dylib 0x00000001085888d5 libusb_exit + 334 5 libffi.dylib 0x00007fff6a951915 ffi_call_unix64 + 85 6 libffi.dylib 0x00007fff6a951255 ffi_call_int + 699 7 _ctypes.so 0x000000010837b650 _ctypes_callproc + 657 8 _ctypes.so 0x0000000108375b77 0x108373000 + 11127 9 org.python.python 0x00007fff409f4319 PyObject_Call + 97 10 org.python.python 0x00007fff40a7040a PyEval_EvalFrameEx + 20636 11 org.python.python 0x00007fff40a74a37 0x7fff409ea000 + 567863 12 org.python.python 0x00007fff40a702c2 PyEval_EvalFrameEx + 20308 13 org.python.python 0x00007fff40a74a37 0x7fff409ea000 + 567863 14 org.python.python 0x00007fff40a702c2 PyEval_EvalFrameEx + 20308 15 org.python.python 0x00007fff40a74a37 0x7fff409ea000 + 567863 16 org.python.python 0x00007fff40a702c2 PyEval_EvalFrameEx + 20308 17 org.python.python 0x00007fff40a6ad5e PyEval_EvalCodeEx + 534 18 org.python.python 0x00007fff40a11c85 0x7fff409ea000 + 162949 19 org.python.python 0x00007fff409f4319 PyObject_Call + 97 20 org.python.python 0x00007fff409feafe 0x7fff409ea000 + 84734 21 org.python.python 0x00007fff409f4319 PyObject_Call + 97 22 org.python.python 0x00007fff40a743d9 PyEval_CallObjectWithKeywords + 159 23 org.python.python 0x00007fff40a3a7b7 0x7fff409ea000 + 329655 24 org.python.python 0x00007fff40a3eba2 0x7fff409ea000 + 347042 25 org.python.python 0x00007fff40a1f07c 0x7fff409ea000 + 217212 26 org.python.python 0x00007fff40a3ed34 0x7fff409ea000 + 347444 27 org.python.python 0x00007fff40a1f07c 0x7fff409ea000 + 217212 28 org.python.python 0x00007fff40a3ed34 0x7fff409ea000 + 347444 29 org.python.python 0x00007fff40a20356 0x7fff409ea000 + 222038 30 org.python.python 0x00007fff40a1ec57 0x7fff409ea000 + 216151 31 org.python.python 0x00007fff40a1e345 0x7fff409ea000 + 213829 32 org.python.python 0x00007fff40a230ae _PyModule_Clear + 346 33 org.python.python 0x00007fff40a81c5b PyImport_Cleanup + 647 34 org.python.python 0x00007fff40a8c316 Py_Finalize + 291 35 org.python.python 0x00007fff40a9e365 Py_Main + 2409 36 libdyld.dylib 0x00007fff6cd38405 start + 1
Thread 1:: org.libusb.device-hotplug 0 libsystem_kernel.dylib 0x00007fff6ce81146 mach_msg_trap + 10 1 libsystem_kernel.dylib 0x00007fff6ce816ac mach_msg + 60 2 com.apple.CoreFoundation 0x00007fff35b220d0 CFRunLoopServiceMachPort + 322 3 com.apple.CoreFoundation 0x00007fff35b21656 CFRunLoopRun + 1705 4 com.apple.CoreFoundation 0x00007fff35b20d38 CFRunLoopRunSpecific + 503 5 com.apple.CoreFoundation 0x00007fff35b20b0d CFRunLoopRun + 40 6 libusb-1.0.22.mojave.bottle.dylib 0x000000010858f344 darwin_event_thread_main + 398 7 libsystem_pthread.dylib 0x00007fff6cf48d76 _pthread_start + 125 8 libsystem_pthread.dylib 0x00007fff6cf455d7 thread_start + 15
Thread 0 crashed with X86 Thread State (64-bit): rax: 0x0000000000000000 rbx: 0x00007fb931c64bc0 rcx: 0x00007fb931c64bc0 rdx: 0x0000000000000307 rdi: 0x00007fb931c64bc0 rsi: 0x0000000000000000 rbp: 0x00007ffee7c4a820 rsp: 0x00007ffee7c4a810 r8: 0x000000000000000c r9: 0x000000000000000c r10: 0x00007fb931d021c0 r11: 0x0000000000000256 r12: 0x00007fb931f008f0 r13: 0x0000000000000000 r14: 0x00007fb931c64c48 r15: 0x0000000000000000 rip: 0x000000010858b5bb rfl: 0x0000000000010202 cr2: 0x0000000000000058
Logical CPU: 1 Error Code: 0x00000004 (no mapping for user data write) Trap Number: 14
Binary Images:
0x107fb4000 - 0x107fb5ff7 org.python.python (2.7.16 - 2.7.16) <06D8CCD9-73E8-3DC7-9CC8-E0671E86B4E5> /System/Library/Frameworks/Python.framework/Versions/2.7/Resources/Python.app/Contents/MacOS/Python
0x10814c000 - 0x10814dfff _locale.so (125) <64A37E78-9FF0-38D2-9A97-3F78FA85C06B> /System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/lib-dynload/_locale.so
0x1081bc000 - 0x1081beffb binascii.so (125) <5D4A08A2-7D33-3E29-B14B-D29A542E6C96> /System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/lib-dynload/binascii.so
0x1081c6000 - 0x1081cfffb datetime.so (125)
External Modification Summary: Calls made by other processes targeting this process: task_for_pid: 0 thread_create: 0 thread_set_state: 0 Calls made by this process: task_for_pid: 0 thread_create: 0 thread_set_state: 0 Calls made by all processes on this machine: task_for_pid: 3122 thread_create: 0 thread_set_state: 0
VM Region Summary: ReadOnly portion of Libraries: Total=364.0M resident=0K(0%) swapped_out_or_unallocated=364.0M(100%) Writable regions: Total=57.6M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=57.6M(100%)
VIRTUAL REGION
REGION TYPE SIZE COUNT (non-coalesced) =========== ======= ======= Activity Tracing 256K 1 Dispatch continuations 8192K 1 Kernel Alloc Once 8K 1 MALLOC 37.4M 22 MALLOC guard page 16K 4 STACK GUARD 56.0M 2 Stack 8712K 2 VM_ALLOCATE 3332K 14 DATA 2807K 83 DATA_CONST 116K 25 LINKEDIT 348.8M 27 OBJC_RO 31.8M 1 __OBJC_RW 1764K 2 TEXT 15.2M 81 UNICODE 564K 1 mapped file 28K 1 shared memory 12K 3 =========== ======= ======= TOTAL 514.4M 271
Model: MacBookAir5,2, BootROM 260.0.0.0.0, 2 processors, Dual-Core Intel Core i3, 2.49 GHz, 4 GB, SMC 2.5f9 Graphics: kHW_IntelHD4000Item, Intel HD Graphics 4000, spdisplays_builtin Memory Module: BANK 0/DIMM0, 2 GB, DDR3, 1600 MHz, SK Hynix, HMT325S6CFR8C-PBN0 Memory Module: BANK 1/DIMM0, 2 GB, DDR3, 1600 MHz, SK Hynix, HMT325S6CFR8C-PBN0 Network Service: Ethernet, Ethernet, en0 PCI Card: sppci_expresscard_name, sppci_unknown Serial ATA Device: Teclast 128GB S550, 128.04 GB Serial ATA Device: HGST HTS725050A7E630, 500.11 GB USB Device: USB 2.0 Bus USB Device: Hub USB Device: Integrated Camera USB Device: Apple Mobile Device (DFU Mode) USB Device: USB 2.0 Bus USB Device: Hub USB Device: ThinkPad USB Laser Mouse USB Device: USB 3.0 Bus Thunderbolt Bus:
I wonder why this section on the site is needed if no one is commenting and helping to solve the problem. Or maybe it depends on the author?...
iOS 12.4 made my iPad Air 1 so slow, that I would like to go back to 10.3.3 but I have the same problem. My iPad doesn't enter the PWNDFU-Mode. Using a MacPro with Mojave to downgrade.
i have same problem.
Homebrew refuses to run anything as root, as a matter of fact, don't even run anything within this project as root, there's no need. As for the actual issue, this may be pyusb related.
Hi bro! Not one of my iPads is entered in pwndfu mode.
I use: Macbook A1370 os 10.14 and Macbook A1342 os 10.11 iPad Air 4.1 and iPad Air 4.2
I tried reinstalling 10.14, but it did not bring any results. I loaded the device into DFU and tried again and again, 10 times, 20 ... 30 ... but always the same "ERROR: Exploit failed. Device did not enter pwned DFU Mode." I tried on different laptops and different systems, with different iPads, different original Lightning cables, but nothing works. Please help, I'm already tired of fighting him ((
`Last login: Tue Oct 29 03:24:52 on console MacBook-Air-Andy:~ andy$ cd /Users/andy/Desktop/1033-OTA-Downgrader-master MacBook-Air-Andy:1033-OTA-Downgrader-master andy$ ./restore.sh Usage: ./restore.sh PathToIpsw (ipsw must be in this directory) Example: ./restore.sh iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw MacBook-Air-Andy:1033-OTA-Downgrader-master andy$ ./restore.sh iPad_64bit_10.3.3_14G60_Restore.ipsw OOOOF, brew is not installed? Installing... ==> This script will install: /usr/local/bin/brew /usr/local/share/doc/homebrew /usr/local/share/man/man1/brew.1 /usr/local/share/zsh/site-functions/_brew /usr/local/etc/bash_completion.d/brew /usr/local/Homebrew ==> The following existing directories will be made group writable: /usr/local/lib /usr/local/sbin ==> The following existing directories will have their owner set to andy: /usr/local/lib /usr/local/sbin ==> The following existing directories will have their group set to admin: /usr/local/lib /usr/local/sbin ==> The following new directories will be created: /usr/local/bin /usr/local/etc /usr/local/include /usr/local/share /usr/local/var /usr/local/opt /usr/local/share/zsh /usr/local/share/zsh/site-functions /usr/local/var/homebrew /usr/local/var/homebrew/linked /usr/local/Cellar /usr/local/Caskroom /usr/local/Homebrew /usr/local/Frameworks ==> The Xcode Command Line Tools will be installed.
Press RETURN to continue or any other key to abort ==> /usr/bin/sudo /bin/chmod u+rwx /usr/local/lib /usr/local/sbin Password: ==> /usr/bin/sudo /bin/chmod g+rwx /usr/local/lib /usr/local/sbin ==> /usr/bin/sudo /usr/sbin/chown andy /usr/local/lib /usr/local/sbin ==> /usr/bin/sudo /usr/bin/chgrp admin /usr/local/lib /usr/local/sbin ==> /usr/bin/sudo /bin/mkdir -p /usr/local/bin /usr/local/etc /usr/local/include /usr/local/share /usr/local/var /usr/local/opt /usr/local/share/zsh /usr/local/share/zsh/site-functions /usr/local/var/homebrew /usr/local/var/homebrew/linked /usr/local/Cellar /usr/local/Caskroom /usr/local/Homebrew /usr/local/Frameworks ==> /usr/bin/sudo /bin/chmod g+rwx /usr/local/bin /usr/local/etc /usr/local/include /usr/local/share /usr/local/var /usr/local/opt /usr/local/share/zsh /usr/local/share/zsh/site-functions /usr/local/var/homebrew /usr/local/var/homebrew/linked /usr/local/Cellar /usr/local/Caskroom /usr/local/Homebrew /usr/local/Frameworks ==> /usr/bin/sudo /bin/chmod 755 /usr/local/share/zsh /usr/local/share/zsh/site-functions ==> /usr/bin/sudo /usr/sbin/chown andy /usr/local/bin /usr/local/etc /usr/local/include /usr/local/share /usr/local/var /usr/local/opt /usr/local/share/zsh /usr/local/share/zsh/site-functions /usr/local/var/homebrew /usr/local/var/homebrew/linked /usr/local/Cellar /usr/local/Caskroom /usr/local/Homebrew /usr/local/Frameworks ==> /usr/bin/sudo /usr/bin/chgrp admin /usr/local/bin /usr/local/etc /usr/local/include /usr/local/share /usr/local/var /usr/local/opt /usr/local/share/zsh /usr/local/share/zsh/site-functions /usr/local/var/homebrew /usr/local/var/homebrew/linked /usr/local/Cellar /usr/local/Caskroom /usr/local/Homebrew /usr/local/Frameworks ==> /usr/bin/sudo /bin/mkdir -p /Users/andy/Library/Caches/Homebrew ==> /usr/bin/sudo /bin/chmod g+rwx /Users/andy/Library/Caches/Homebrew ==> /usr/bin/sudo /usr/sbin/chown andy /Users/andy/Library/Caches/Homebrew ==> Searching online for the Command Line Tools ==> /usr/bin/sudo /usr/bin/touch /tmp/.com.apple.dt.CommandLineTools.installondemand.in-progress ==> Installing Command Line Tools (macOS Mojave version 10.14) for Xcode-10.3 ==> /usr/bin/sudo /usr/sbin/softwareupdate -i Command\ Line\ Tools\ (macOS\ Mojave\ version\ 10.14)\ for\ Xcode-10.3 Software Update Tool
Downloading Command Line Tools (macOS Mojave version 10.14) for Xcode Downloaded Command Line Tools (macOS Mojave version 10.14) for Xcode Installing Command Line Tools (macOS Mojave version 10.14) for Xcode Done with Command Line Tools (macOS Mojave version 10.14) for Xcode Done. ==> /usr/bin/sudo /bin/rm -f /tmp/.com.apple.dt.CommandLineTools.installondemand.in-progress Password: ==> /usr/bin/sudo /usr/bin/xcode-select --switch /Library/Developer/CommandLineTools ==> Downloading and installing Homebrew... remote: Enumerating objects: 16, done. remote: Counting objects: 100% (16/16), done. remote: Compressing objects: 100% (16/16), done. remote: Total 127989 (delta 6), reused 0 (delta 0), pack-reused 127973 Receiving objects: 100% (127989/127989), 30.43 MiB | 1.61 MiB/s, done. Resolving deltas: 100% (93915/93915), done. From https://github.com/Homebrew/brew
==> Homebrew has enabled anonymous aggregate formulae and cask analytics. Read the analytics documentation (and how to opt-out) here: https://docs.brew.sh/Analytics
==> Homebrew is run entirely by unpaid volunteers. Please consider donating: https://github.com/Homebrew/brew#donations ==> Next steps:
brew help
to get startedand run /usr/local/opt/openssl/bin/c_rehash
openssl is keg-only, which means it was not symlinked into /usr/local, because Apple has deprecated use of OpenSSL in favor of its own TLS and crypto libraries.
If you need to have openssl first in your PATH run: echo 'export PATH="/usr/local/opt/openssl/bin:$PATH"' >> ~/.bash_profile
For compilers to find openssl you may need to set: export LDFLAGS="-L/usr/local/opt/openssl/lib" export CPPFLAGS="-I/usr/local/opt/openssl/include"
==> Summary рџЌє /usr/local/Cellar/openssl/1.0.2t: 1,795 files, 12MB ==> Downloading https://homebrew.bintray.com/bottles/libzip-1.5.2.mojave.bottle. ######################################################################## 100.0% ==> Pouring libzip-1.5.2.mojave.bottle.1.tar.gz рџЌє /usr/local/Cellar/libzip/1.5.2: 134 files, 579.9KB ==> Downloading https://homebrew.bintray.com/bottles/pkg-config-0.29.2.mojave.bo ==> Downloading from https://akamai.bintray.com/dc/dcfcba723621eee085ddd5ebadc41 ######################################################################## 100.0% ==> Pouring pkg-config-0.29.2.mojave.bottle.1.tar.gz рџЌє /usr/local/Cellar/pkg-config/0.29.2: 11 files, 627KB ==> Downloading https://homebrew.bintray.com/bottles/libplist-2.0.0_1.mojave.bot ######################################################################## 100.0% ==> Pouring libplist-2.0.0_1.mojave.bottle.tar.gz рџЌє /usr/local/Cellar/libplist/2.0.0_1: 29 files, 345.8KB ==> Caveats ==> libtool In order to prevent conflicts with Apple's own libtool we have prepended a "g" so, you have instead: glibtool and glibtoolize. ==> autoconf Emacs Lisp files have been installed to: /usr/local/share/emacs/site-lisp/autoconf ==> openssl A CA file has been bootstrapped using certificates from the SystemRoots keychain. To add additional certificates (e.g. the certificates added in the System keychain), place .pem files in /usr/local/etc/openssl/certs
and run /usr/local/opt/openssl/bin/c_rehash
openssl is keg-only, which means it was not symlinked into /usr/local, because Apple has deprecated use of OpenSSL in favor of its own TLS and crypto libraries.
If you need to have openssl first in your PATH run: echo 'export PATH="/usr/local/opt/openssl/bin:$PATH"' >> ~/.bash_profile
For compilers to find openssl you may need to set: export LDFLAGS="-L/usr/local/opt/openssl/lib" export CPPFLAGS="-I/usr/local/opt/openssl/include"
For pkg-config to find openssl you may need to set: export PKG_CONFIG_PATH="/usr/local/opt/openssl/lib/pkgconfig"
Cloning into 'ipwndfu_public'... remote: Enumerating objects: 13, done. remote: Counting objects: 100% (13/13), done. remote: Compressing objects: 100% (11/11), done. remote: Total 463 (delta 5), reused 8 (delta 2), pack-reused 450 Receiving objects: 100% (463/463), 1.88 MiB | 1.65 MiB/s, done. Resolving deltas: 100% (235/235), done. No matching processes belonging to you were found Waiting 10 seconds to allow you to enter DFU mode Attempting to get into pwndfu mode Please just enter DFU mode again on each reboot The script will run ipwndfu again and again until the device is in PWNDFU mode checkm8 exploit by axi0mX modified version by Linus Henze s5l8965x support by Matthew Pierson Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:10 ECID:000006F48909A908 IBFL:1C SRTG:[iBoot-1704.10] ERROR: Exploit failed. Device did not enter pwned DFU Mode. No matching processes belonging to you were found Waiting 10 seconds to allow you to enter DFU mode Attempting to get into pwndfu mode Please just enter DFU mode again on each reboot The script will run ipwndfu again and again until the device is in PWNDFU mode checkm8 exploit by axi0mX modified version by Linus Henze s5l8965x support by Matthew Pierson Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:10 ECID:000006F48909A908 IBFL:1C SRTG:[iBoot-1704.10] ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. Exiting. No matching processes belonging to you were found Waiting 10 seconds to allow you to enter DFU mode Attempting to get into pwndfu mode Please just enter DFU mode again on each reboot
MacBook-Air-Andy:1033-OTA-Downgrader-master andy$ ./restore.sh iPad_64bit_10.3.3_14G60_Restore.ipsw [+] Installing dependencies Updating Homebrew... Warning: libtool 2.4.6_1 is already installed and up-to-date To reinstall 2.4.6_1, run
brew reinstall libtool
Warning: automake 1.16.1_1 is already installed and up-to-date To reinstall 1.16.1_1, runbrew reinstall automake
Warning: lsusb 1.0 is already installed and up-to-date To reinstall 1.0, runbrew reinstall lsusb
Warning: openssl 1.0.2t is already installed and up-to-date To reinstall 1.0.2t, runbrew reinstall openssl
Warning: libzip 1.5.2 is already installed and up-to-date To reinstall 1.5.2, runbrew reinstall libzip
Warning: pkg-config 0.29.2 is already installed and up-to-date To reinstall 0.29.2, runbrew reinstall pkg-config
Warning: libplist 2.0.0_1 is already installed and up-to-date To reinstall 2.0.0_1, runbrew reinstall libplist
From https://github.com/MatthewPierson/ipwndfu_public