MatthewPierson / Vieux

Vieux - A tool for 32/64 Bit iOS downgrades using OTA Blobs
804 stars 146 forks source link

again 241 after updated #17

Closed toromano closed 4 years ago

toromano commented 4 years ago

Device is now in pwned DFU Mode. (11.20 seconds) Exploit worked! SecureROM Signature check remover by Linus Henze Applying patches... Successfully applied patches

Starting iBSS/iBEC patching Looks like you are downgrading an iPad Mini 2 to 10.3.3! Patched iBSS/iBEC About to re-build IPSW Entering PWNREC mode... Getting SHSH... Restoring... Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore. WARNING: Unable to find BbChipID node Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69 Odysseus support: yes INFO: device serial number is F9FSCU [INFO] 64-bit device detected futurerestore init done reading signing ticket resources/restoreFiles/apnonce.shsh is done Found device iPad4,4 j85ap [TSSC] opening resources/restoreFiles/BuildManifest_iPad4,4.plist [TSSR] User specified not to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received [Error] failed to read baseband[Error] Fail code=-15 Failed with errorcode=-15

ERROR.. Return code: 241 Restore Failed. Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists Exiting...

toromano commented 4 years ago

@MatthewPierson

C7XL commented 4 years ago

I'm having this issue as well, same device (iPad Mini 2).

kero990 commented 4 years ago

I got almost the same error, and I ’m also the same device, ipad mini 2, A1439

Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore. WARNING: Unable to find BbChipID node

WARNING: Unable to find BbChipID node Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69 Odysseus support: yes [INFO] 64-bit device detected futurerestore init done reading signing ticket resources/other/apnonce.shsh is done Found device iPad4,4 j85ap [TSSC] opening resources/manifests/BuildManifest_iPad4,4.plist [TSSR] User specified not to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received [Error] failed to read baseband[Error] Fail code=-15 Failed with errorcode=-15

ERROR.. Return code: 241 Restore Failed. Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists Exiting...

kero990 commented 4 years ago

I see the error described as "reading baseband error", but if I remember correctly, the wifi version of the iPad should not have a baseband, right?

C7XL commented 4 years ago

Yea, I got the same error right now. It just stops on that part.

And also, I get excited everytime I visit here and see there are new commits and such hoping for a fix lol

I got almost the same error, and I ’m also the same device, ipad mini 2, A1439

Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore. WARNING: Unable to find BbChipID node

WARNING: Unable to find BbChipID node Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69 Odysseus support: yes [INFO] 64-bit device detected futurerestore init done reading signing ticket resources/other/apnonce.shsh is done Found device iPad4,4 j85ap [TSSC] opening resources/manifests/BuildManifest_iPad4,4.plist [TSSR] User specified not to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received [Error] failed to read baseband[Error] Fail code=-15 Failed with errorcode=-15

ERROR.. Return code: 241 Restore Failed. Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists Exiting...

toromano commented 4 years ago

@MatthewPierson sir pls fix this issue for ipad mini 2 users... For us .... 😔😢😢😢

MatthewPierson commented 4 years ago

I’m going to fix it. I have more important things to do at the moment that take precedent over this for now. I should have a fix out in a day or two

C7XL commented 4 years ago

No worries, I understand priorities. We’ll be here waiting. 👌🏼

Thank you for this tool btw!

I’m going to fix it. I have more important things to do at the moment that take precedent over this for now. I should have a fix out in a day or two

toromano commented 4 years ago

Thks... We are waiting 😌😊☺

MatthewPierson commented 4 years ago

Please try with the latest commit, it has a potential fix for this issue but I can't test myself as I don't have any A7 iPads (This is the same message I'm replying to all relevant issues :) )

I felt bad about this still being an issue so I have something that might fix it, please let me know if it works!

C7XL commented 4 years ago

@MatthewPierson I think it's the same error? The 2 out of 20 times that the exploit worked on my device it gave me this error:

Device is now in pwned DFU Mode. (12.63 seconds) Exploit worked! SecureROM Signature check remover by Linus Henze Applying patches... Successfully applied patches

Starting iBSS/iBEC patching Looks like you are downgrading an iPad Mini 2 to 10.3.3! Patched iBSS/iBEC About to re-build IPSW Entering PWNREC mode... Getting SHSH... Restoring... Note that errors about 'BbSkeyId', 'FDR Client', 'BasebandFirmware Node' and 'ERROR: zip_name_locate: Firmware/all_flash/manifest' are not important. Just ignore them and only report errors that actually stop the restore. WARNING: Unable to find BbChipID node WARNING: Unable to find BbSkeyId node Version: b99eb8140d8e6c23f34e950102bb79e61c72384d - 152 Libipatcher Version: f32e41d850f51448bd6c588ead9c7d6455733f3c - 44 Odysseus Support: yes INFO: device serial number is [INFO] 64bit device detected futurerestore init done reading ticket resources/other/apnonce.shsh done [TSSC] opening resources/manifests/BuildManifest_iPad4,4.plist [TSSR] User specified not to request a Baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received [Error] failed to read Baseband[Error] Fail code=-15 Failed with errorcode=-15

ERROR.. Return code: 241 Restore Failed. Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists Exiting...

C7XL commented 4 years ago

@MatthewPierson I've downloaded the new build just now seeing there's a new supposedly fix and tried it again. It doesn't give me that 241 error anymore but a new one instead (-6):

Device is now in pwned DFU Mode. (14.80 seconds) Exploit worked! SecureROM Signature check remover by Linus Henze Applying patches... Successfully applied patches

Starting iBSS/iBEC patching Looks like you are downgrading an iPad Mini 2 to 10.3.3! Patched iBSS/iBEC About to re-build IPSW Entering PWNREC mode... Getting SHSH... Restoring... Note that errors about 'BbSkeyId', 'FDR Client', 'BasebandFirmware Node' and 'ERROR: zip_name_locate: Firmware/all_flash/manifest' are not important. Just ignore them and only report errors that actually stop the restore. WARNING: Unable to find BbChipID node WARNING: Unable to find BbChipID node

Assertion failed: (data), function plist_copy_node, file plist.c, line 331. Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245 Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69 Odysseus support: yes [INFO] 64-bit device detected futurerestore init done reading signing ticket resources/other/apnonce.shsh is done Found device iPad4,4 j85ap [TSSC] opening resources/manifests/BuildManifest_iPad4,4.plist [TSSR] User specified not to request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received [Error] Did set SEP+baseband path and firmware [WARNING] Failed to read BasebandGoldCertID from device! Is it already in recovery? [WARNING] Using tsschecker's fallback BasebandGoldCertID. This might result in invalid baseband signing status information [WARNING] Failed to read BasebandSerialNumber from device! Is it already in recovery? [WARNING] Using tsschecker's fallback BasebandSerialNumber size. This might result in invalid baseband signing status information [TSSC] opening resources/manifests/BuildManifest_iPad4,4.plist [TSSR] User specified to request only a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Found device in Recovery mode Device already in Recovery mode Found device in Recovery mode Identified device as j85ap, iPad4,4 Extracting BuildManifest from iPSW Product version: 10.3.3 Product build: 14G60 Major: 14 Device supports IMG4: true Got ApNonce from device: 0b 6b e7 ce 99 0a 72 69 1b 33 72 d9 69 f1 2b 66 8d a0 2e d2 checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID [Error] im4m_buildidentity_check_cb: can't find any identity which matches all hashes inside IM4M [Error] getBuildIdentityForIM4M: found buildidentity, but can't read information [Error] BuildIdentity selected for restore doesn't match APTicket

BuildIdentity selected for restore: BuildNumber : 14G60 BuildTrain : Greensburg DeviceClass : j85ap FDRSupport : NO RestoreBehavior : Erase Variant : Customer Erase Install (IPSW)

BuildIdentiy valid for the APTicket: [Error] Verified APTicket to be valid for this restore

ERROR.. Return code: -6 Restore Failed. Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists Exiting...

MatthewPierson commented 4 years ago

Do you have a screenshot of the terminal when this happened? It looks like futurerestore is segfaulting but I can't tell

C7XL commented 4 years ago

@MatthewPierson I've uploaded a video so you can check.

https://youtu.be/2i2BC8K2XNA

MatthewPierson commented 4 years ago

Huh so it seems like its actually using the wrong futurerestore command, it should be using --no-baseband but given that it doesn't wait 10 seconds after the red text displays it means that its not doing it which would explain the error -15 from earlier. Try this version and see if its the same result - https://drive.google.com/file/d/1ED5QSTXRM8rmNbixzvVpAARIZXheefK_/view?usp=sharing

C7XL commented 4 years ago

@MatthewPierson I think that fixed it, it seems to be restoring now. 🤯

EDIT:

Screen Shot 2019-12-20 at 2 18 03 AM
MatthewPierson commented 4 years ago

Well that's fucking annoying, great that its working, but annoying that I wasted the last 5 hours trying to figure this out when all it was was an if statement leading to the wrong thing! Thank you so much for helping me with this though, that video was the main reason I figured it out!

C7XL commented 4 years ago

Haha no worries. Glad I could help in some way, it's the least that I can do! 🤙🏼

Well that's fucking annoying, great that its working, but annoying that I wasted the last 5 hours trying to figure this out when all it was was an if statement leading to the wrong thing! Thank you so much for helping me with this though, that video was the main reason I figured it out!

MatthewPierson commented 4 years ago

Will credit you when I get the proper fix uploaded! Thanks again

toromano commented 4 years ago

İs it solved?? 😲

toromano commented 4 years ago

Huh bu yüzden aslında yanlış futurerestore komutunu kullanıyor gibi görünüyor, --no-baseband kullanıyor olmalı ama kırmızı metin görüntülendikten sonra 10 saniye beklememesi gerektiği için, hatayı açıklayamayacağı anlamına gelmiyor - 15'ten önceki. Bu sürümü deneyin ve aynı sonucun olup olmadığını görün - https://drive.google.com/file/d/1ED5QSTXRM8rmNbixzvVpAARIZXheefK_/view?usp=sharing

How can i use this? Where must i put it? İn vieux folder? Sorry for this. İm a noob

toromano commented 4 years ago

@MatthewPierson Bunu düzelttiğini düşünüyorum, şimdi geri yükleme gibi görünüyor. 🤯

DÜZENLE:

Ekran Görüntüsü 2019-12-20, 02 18 03

Hey sir. downgrade was successful?

toromano commented 4 years ago

@Schnob