tihmstar / futurerestore

A hacked up idevicerestore wrapper, which allows specifying SEP and Baseband for restoring
GNU Lesser General Public License v3.0
854 stars 278 forks source link

Device can't enter to restore mode #371

Open potryasas opened 2 years ago

potryasas commented 2 years ago

`[TSSC] opening /tmp/futurerestore/sepManifest.plist [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request [TSSR] User specified to not request a baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received user specified to use latest signed baseband [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request downloading Baseband 100 ERROR: Unable to connect to device?! ERROR: Unable to get FirmwarePreflightInfo [WARNING] failed to read BasebandGoldCertID from device! Is it already in recovery? [WARNING] using tsschecker's fallback to get BasebandGoldCertID. This might result in invalid baseband signing status information [TSSC] opening /tmp/futurerestore/basebandManifest.plist [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request [TSSR] User specified to request only a Baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Downloading the latest firmware components... [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request Finished downloading the latest firmware components! Found device in DFU mode requesting to get into pwnRecovery later Found device in DFU mode Identified device as d101ap, iPhone9,3 Extracting BuildManifest from iPSW Product version: 14.3 Product build: 18C66 Major: 18 Device supports Image4: true [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request checking APTicket to be valid for this restore... [Error] ECID inside APTicket does not match device ECID APTicket is valid for 2112104390326 (dec) but device is 581783455859494 (dec) [WARNING] NOT VALIDATING SHSH BLOBS ECID! checking APTicket to be valid for this restore... [Error] ECID inside APTicket does not match device ECID APTicket is valid for 2112104390326 (dec) but device is 581783455859494 (dec) [WARNING] NOT VALIDATING SHSH BLOBS ECID! [IMG4TOOL] checking buildidentity 0: [IMG4TOOL] checking buildidentity matches board ... YES [IMG4TOOL] checking buildidentity has all required hashes: [IMG4TOOL] checking hash for "AOP" OK (untrusted) [IMG4TOOL] checking hash for "Ap,SystemVolumeCanonicalMetadata"BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "AppleLogo" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BasebandFirmware" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "BatteryCharging0" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BatteryCharging1" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BatteryFull" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BatteryLow0" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BatteryLow1" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BatteryPlugin" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "DeviceTree" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "Homer" OK (untrusted) [IMG4TOOL] checking hash for "KernelCache" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "LLB" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "Liquid" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "OS" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RecoveryMode" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreDeviceTree" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreKernelCache" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreLogo" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreRamDisk" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreSEP" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreTrustCache" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "SEP" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "StaticTrustCache" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "SystemVolume" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "ftap" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "ftsp" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "iBEC" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "iBSS" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "iBoot" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "rfta" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "rfts" IGN (no digest in BuildManifest)

failed verification with error: [exception]: what=verification failed! code=84279308 line=1286 file=img4tool.cpp commit count=197 commit sha =aca6cf005c94caf135023263cbb5c61a0081804f [IMG4TOOL] checking buildidentity 1: [IMG4TOOL] checking buildidentity matches board ... NO [IMG4TOOL] checking buildidentity 2: [IMG4TOOL] checking buildidentity matches board ... NO [IMG4TOOL] checking buildidentity 3: [IMG4TOOL] checking buildidentity matches board ... NO [IMG4TOOL] checking buildidentity 4: [IMG4TOOL] checking buildidentity matches board ... YES [IMG4TOOL] checking buildidentity has all required hashes: [IMG4TOOL] checking hash for "AOP" OK (untrusted) [IMG4TOOL] checking hash for "Ap,SystemVolumeCanonicalMetadata"BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "AppleLogo" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BasebandFirmware" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "BatteryCharging0" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BatteryCharging1" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BatteryFull" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BatteryLow0" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BatteryLow1" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "BatteryPlugin" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "DeviceTree" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "Homer" OK (untrusted) [IMG4TOOL] checking hash for "KernelCache" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "LLB" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "Liquid" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "OS" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RecoveryMode" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreDeviceTree" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreKernelCache" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreLogo" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreRamDisk" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreSEP" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "RestoreTrustCache" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "SEP" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "StaticTrustCache" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "SystemVolume" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "ftap" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "ftsp" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "iBEC" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "iBSS" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "iBoot" BAD! (hash not found in im4m) [IMG4TOOL] checking hash for "rfta" IGN (no digest in BuildManifest) [IMG4TOOL] checking hash for "rfts" IGN (no digest in BuildManifest)

failed verification with error: [exception]: what=verification failed! code=84279308 line=1286 file=img4tool.cpp commit count=197 commit sha =aca6cf005c94caf135023263cbb5c61a0081804f [IMG4TOOL] checking buildidentity 5: [IMG4TOOL] checking buildidentity matches board ... NO [IMG4TOOL] checking buildidentity 6: [IMG4TOOL] checking buildidentity matches board ... NO [IMG4TOOL] checking buildidentity 7: [IMG4TOOL] checking buildidentity matches board ... NO [WARNING] NOT VALIDATING SHSH BLOBS IM4M! [Error] BuildIdentity selected for restore does not match APTicket

BuildIdentity selected for restore: BuildNumber : 18C66 BuildTrain : AzulC DeviceClass : d101ap FDRSupport : YES MobileDeviceMinVersion : 1253 RestoreBehavior : Erase Variant : Customer Erase Install (IPSW)

BuildIdentity is valid for the APTicket: IM4M is not valid for any restore within the Buildmanifest This APTicket can't be used for restoring this firmware [WARNING] NOT VALIDATING SHSH BLOBS! [TSSR] Checking BuildIdentity 0 [TSSR] Selected BuildIdentity for request Variant: Customer Erase Install (IPSW) This restore will erase your device data. Entering PwnRecovery (_ota = false)Device found in DFU Mode. Sending iBSS (522504 bytes)... NOTE: Using custom iBSS: /tmp/tmp_l73ffga/ibss.d101ap.patched.img4 [==================================================] 100.0% Booting iBSS, waiting for device to disconnect... Booting iBSS, waiting for device to reconnect... ApNonce pre-hax: Getting ApNonce in recovery mode... INFO: device serial number is DNPT7EQ2HG7F a8 30 e5 6e 92 be ff 53 58 a4 d5 51 2e c0 5b 10 1b 1f 7a 58 8f 96 d3 04 94 42 9c eb 05 3e bd b5 ApNonce from device doesn't match IM4M nonce, applying hax... Writing generator=0x081acb4cc32f0f65 to nvram! Sending iBEC (522504 bytes)... NOTE: Using custom iBEC: /tmp/tmp_l73ffga/ibec.d101ap.patched.img4 [==================================================] 100.0% Booting iBEC, waiting for device to disconnect... Booting iBEC, waiting for device to reconnect... APnonce post-hax: Getting ApNonce in recovery mode... a8 30 e5 6e 92 be ff 53 58 a4 d5 51 2e c0 5b 10 1b 1f 7a 58 8f 96 d3 04 94 42 9c eb 05 3e bd b5 Successfully set nonce generator: 0x081acb4cc32f0f65 Using cached filesystem from '/Users/macbook/Downloads/iPhone_4.7_P3_14.3_18C66_Restore/038-83137-079.dmg' Getting SepNonce in recovery mode... e0 0e 56 43 d5 c0 d6 69 46 ce f4 aa 74 a2 f3 f5 d9 09 4b 17 Getting ApNonce in recovery mode... a8 30 e5 6e 92 be ff 53 58 a4 d5 51 2e c0 5b 10 1b 1f 7a 58 8f 96 d3 04 94 42 9c eb 05 3e bd b5 [WARNING] Setting bgcolor to green! If you don't see a green screen, then your device didn't boot iBEC correctly Recovery Mode Environment: iBoot build-version=iBoot-6723.62.3 iBoot build-style=RELEASE Sending RestoreLogo... Extracting applelogo@2xiphone.im4p (Firmware/all_flash/applelogo@2xiphone.im4p)... Personalizing IMG4 component RestoreLogo... Sending RestoreLogo (13544 bytes)... ramdisk-size=0x20000000 1337 CUSTOM RAMDISK! Personalizing IMG4 component RestoreRamDisk... Sending RestoreRamDisk (104124299 bytes)... Extracting 038-83284-083.dmg.trustcache (Firmware/038-83284-083.dmg.trustcache)... Personalizing IMG4 component RestoreTrustCache... Sending RestoreTrustCache (11837 bytes)... Extracting DeviceTree.d101ap.im4p (Firmware/all_flash/DeviceTree.d101ap.im4p)... Personalizing IMG4 component RestoreDeviceTree... Sending RestoreDeviceTree (36558 bytes)... Extracting sep-firmware.d101.RELEASE.im4p (Firmware/all_flash/sep-firmware.d101.RELEASE.im4p)... Personalizing IMG4 component RestoreSEP... Sending RestoreSEP (1353379 bytes)... 1337 CUSTOM KERNEL! Personalizing IMG4 component RestoreKernelCache... Sending RestoreKernelCache (14838511 bytes)... getting SEP ticket Trying to fetch new SHSH blob Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Received SHSH blobs Cleaning up... [exception]: what=Device can't enter to restore mode code=87949329 line=1342 file=futurerestore.cpp commit count=288 commit sha =8936ddbed3a0c120330773aab03d4260b53527a9 Done: restoring failed! Restore succeeded!``

potryasas commented 2 years ago

the blob does not match the ipsw file and this futurerestore is outdated in suggest using this active fork instead. https://github.com/futurerestore/futurerestore

i use futurerestore fork for tethered downgrade