Cant make ramdisk

[GoogleCodeExporter]

Im firs time on MAC, it took me about 3 days to get till this step because of 
old tutorials and zero knowlege.

Thing i want to do is to Bruteforce my passcode.

I have iphone 4 iOS 7.0 with passcode lock 4 digits.

since GECKO iphone toolkit cant read my passcode because of iOS 7, i googled 
alot and finded some keybag_sign.patch file,whitch should modify RAMDISK, 
whitch i can copy to windows and use with gecko tools instead of original one 
so i can read my passcode, so i managed to launch MAC OS on my windows as 
wirtual machine, 

i have used iPhone3,1_5.1.1_9B208_Restore.ipsw file for this.

Here is what i have done so far:

When running 

sudo sh ./make_ramdisk_n90ap.sh

i get 1 error and 2 warnings. 

here is a log. (with strange "untrusted file from untrusted user" lines, i can 
remove them by renaming .hg/hrc file to hrk)

Last login: Mon Feb  3 00:29:35 on ttys001
Dainiuss-Mac:~ dainius$ sudo sh ./make_ramdisk_n90ap.sh
Password:
sh: ./make_ramdisk_n90ap.sh: No such file or directory
Dainiuss-Mac:~ dainius$ cd iphone-dataprotection
Dainiuss-Mac:iphone-dataprotection dainius$ sudo sh ./make_ramdisk_n90ap.sh
Found iOS SDK 4.2
not trusting file /Users/dainius/iphone-dataprotection/.hg/hgrc from untrusted 
user dainius, group staff
not trusting file /Users/dainius/iphone-dataprotection/.hg/hgrc from untrusted 
user dainius, group staff
clang -arch armv7 -Wall -isysroot 
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk/ -DHGVERSION="\"9253cb99a012\"" -O3 -I. -framework 
CoreFoundation -framework IOKit -framework Security -miphoneos-version-min=4.0 
-o device_infos device_infos.c device_info.c IOAESAccelerator.c 
AppleEffaceableStorage.c AppleKeyStore.c bsdcrypto/pbkdf2.c bsdcrypto/sha1.c 
bsdcrypto/key_wrap.c bsdcrypto/rijndael.c util.c IOKit.c registry.c 
ioflash/ioflash.c kernel_patcher.c
device_infos.c:9:28: warning: initializing 'CFMutableDictionaryRef' (aka 'struct
      __CFDictionary *') with an expression of type 'CFDictionaryRef' (aka
      'const struct __CFDictionary *') discards qualifiers
      [-Wincompatible-pointer-types]
    CFMutableDictionaryRef out = device_info(-1, NULL);
                           ^     ~~~~~~~~~~~~~~~~~~~~~
1 warning generated.
In file included from device_info.c:4:
./IOKit/IOKitLib.h:187:1: error: expected function body after function
      declarator
__OSX_AVAILABLE_STARTING(__MAC_10_6, __IPHONE_4_3);
^
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk//usr/include/Availability.h:143:53: note: 
      expanded from macro '__OSX_AVAILABLE_STARTING'
  ...__OSX_AVAILABLE_STARTING(_mac, _iphone) __AVAILABILITY_INTERNAL##_iphone
                                             ^
<scratch space>:66:1: note: expanded from macro '__AVAILABILITY_INTERNAL'
__AVAILABILITY_INTERNAL__IPHONE_4_3
^
device_info.c:79:5: warning: implicit declaration of function 'sysctlbyname' is
      invalid in C99 [-Wimplicit-function-declaration]
    sysctlbyname("kern.bootargs", bootargs, &bootargs_len, NULL, 0);
    ^
device_info.c:82:83: warning: passing 'char [256]' to parameter of type
      'const UInt8 *' (aka 'const unsigned char *') converts between pointers to
      integer types with different sign [-Wpointer-sign]
  ...= CFStringCreateWithBytes(kCFAllocatorDefault, bootargs, bootargs_len -...
                                                    ^~~~~~~~
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk//System/Library/Frameworks/CoreFoundation.framework/Header
s/CFString.h:179:72: note: 
      passing argument to parameter 'bytes' here
  ...alloc, const UInt8 *bytes, CFIndex numBytes, CFStringEncoding encoding,...
                         ^
2 warnings and 1 error generated.
make: *** [device_infos] Error 1
ramdisk_tools/restored_external not found, check compilation output for errors
Dainiuss-Mac:iphone-dataprotection dainius$ clear

Dainiuss-Mac:iphone-dataprotection dainius$ sudo sh ./make_ramdisk_n90ap.sh
Password:
Found iOS SDK 4.2
not trusting file /Users/dainius/iphone-dataprotection/.hg/hgrc from untrusted 
user dainius, group staff
not trusting file /Users/dainius/iphone-dataprotection/.hg/hgrc from untrusted 
user dainius, group staff
clang -arch armv7 -Wall -isysroot 
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk/ -DHGVERSION="\"9253cb99a012\"" -O3 -I. -framework 
CoreFoundation -framework IOKit -framework Security -miphoneos-version-min=4.0 
-o device_infos device_infos.c device_info.c IOAESAccelerator.c 
AppleEffaceableStorage.c AppleKeyStore.c bsdcrypto/pbkdf2.c bsdcrypto/sha1.c 
bsdcrypto/key_wrap.c bsdcrypto/rijndael.c util.c IOKit.c registry.c 
ioflash/ioflash.c kernel_patcher.c
device_infos.c:9:28: warning: initializing 'CFMutableDictionaryRef' (aka 'struct
      __CFDictionary *') with an expression of type 'CFDictionaryRef' (aka
      'const struct __CFDictionary *') discards qualifiers
      [-Wincompatible-pointer-types]
    CFMutableDictionaryRef out = device_info(-1, NULL);
                           ^     ~~~~~~~~~~~~~~~~~~~~~
1 warning generated.
In file included from device_info.c:4:
./IOKit/IOKitLib.h:187:1: error: expected function body after function
      declarator
__OSX_AVAILABLE_STARTING(__MAC_10_6, __IPHONE_4_3);
^
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk//usr/include/Availability.h:143:53: note: 
      expanded from macro '__OSX_AVAILABLE_STARTING'
  ...__OSX_AVAILABLE_STARTING(_mac, _iphone) __AVAILABILITY_INTERNAL##_iphone
                                             ^
<scratch space>:66:1: note: expanded from macro '__AVAILABILITY_INTERNAL'
__AVAILABILITY_INTERNAL__IPHONE_4_3
^
device_info.c:79:5: warning: implicit declaration of function 'sysctlbyname' is
      invalid in C99 [-Wimplicit-function-declaration]
    sysctlbyname("kern.bootargs", bootargs, &bootargs_len, NULL, 0);
    ^
device_info.c:82:83: warning: passing 'char [256]' to parameter of type
      'const UInt8 *' (aka 'const unsigned char *') converts between pointers to
      integer types with different sign [-Wpointer-sign]
  ...= CFStringCreateWithBytes(kCFAllocatorDefault, bootargs, bootargs_len -...
                                                    ^~~~~~~~
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk//System/Library/Frameworks/CoreFoundation.framework/Header
s/CFString.h:179:72: note: 
      passing argument to parameter 'bytes' here
  ...alloc, const UInt8 *bytes, CFIndex numBytes, CFStringEncoding encoding,...
                         ^
2 warnings and 1 error generated.
make: *** [device_infos] Error 1
ramdisk_tools/restored_external not found, check compilation output for errors
Dainiuss-Mac:iphone-dataprotection dainius$ hg id
9253cb99a012+ tip
Dainiuss-Mac:iphone-dataprotection dainius$ clear

Dainiuss-Mac:iphone-dataprotection dainius$ sudo sh ./make_ramdisk_n90ap.sh
Password:
Found iOS SDK 4.2
not trusting file /Users/dainius/iphone-dataprotection/.hg/hgrc from untrusted 
user dainius, group staff
not trusting file /Users/dainius/iphone-dataprotection/.hg/hgrc from untrusted 
user dainius, group staff
clang -arch armv7 -Wall -isysroot 
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk/ -DHGVERSION="\"9253cb99a012\"" -O3 -I. -framework 
CoreFoundation -framework IOKit -framework Security -miphoneos-version-min=4.0 
-o device_infos device_infos.c device_info.c IOAESAccelerator.c 
AppleEffaceableStorage.c AppleKeyStore.c bsdcrypto/pbkdf2.c bsdcrypto/sha1.c 
bsdcrypto/key_wrap.c bsdcrypto/rijndael.c util.c IOKit.c registry.c 
ioflash/ioflash.c kernel_patcher.c
device_infos.c:9:28: warning: initializing 'CFMutableDictionaryRef' (aka 
'struct __CFDictionary *') with an
      expression of type 'CFDictionaryRef' (aka 'const struct __CFDictionary *') discards qualifiers
      [-Wincompatible-pointer-types]
    CFMutableDictionaryRef out = device_info(-1, NULL);
                           ^     ~~~~~~~~~~~~~~~~~~~~~
1 warning generated.
In file included from device_info.c:4:
./IOKit/IOKitLib.h:187:1: error: expected function body after function 
declarator
__OSX_AVAILABLE_STARTING(__MAC_10_6, __IPHONE_4_3);
^
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk//usr/include/Availability.h:143:53: note: 
      expanded from macro '__OSX_AVAILABLE_STARTING'
    #define __OSX_AVAILABLE_STARTING(_mac, _iphone) __AVAILABILITY_INTERNAL##_iphone
                                                    ^
<scratch space>:66:1: note: expanded from macro '__AVAILABILITY_INTERNAL'
__AVAILABILITY_INTERNAL__IPHONE_4_3
^
device_info.c:79:5: warning: implicit declaration of function 'sysctlbyname' is 
invalid in C99
      [-Wimplicit-function-declaration]
    sysctlbyname("kern.bootargs", bootargs, &bootargs_len, NULL, 0);
    ^
device_info.c:82:83: warning: passing 'char [256]' to parameter of type 'const 
UInt8 *'
      (aka 'const unsigned char *') converts between pointers to integer types with different sign
      [-Wpointer-sign]
        CFStringRef bootargsString = CFStringCreateWithBytes(kCFAllocatorDefault, bootargs, bootargs_len - 1,...
                                                                                  ^~~~~~~~
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk//System/Library/Frameworks/CoreFoundation.framework/Header
s/CFString.h:179:72: note: 
      passing argument to parameter 'bytes' here
  ...CFStringCreateWithBytes(CFAllocatorRef alloc, const UInt8 *bytes, CFIndex numBytes, CFStringEncoding...
                                                                ^
2 warnings and 1 error generated.
make: *** [device_infos] Error 1
ramdisk_tools/restored_external not found, check compilation output for errors
Dainiuss-Mac:iphone-dataprotection dainius$ 

OS X version : 10.8.3 on windows 7x64bit via vmware 9
XCode version :
Tools revision : 9253cb99a012+ tip

please help.

Original issue reported on code.google.com by dainius....@gmail.com on 2 Feb 2014 at 11:16

[GoogleCodeExporter]

[deleted comment]

[GoogleCodeExporter]

looks like its failing because of an old sdk version, try updating Xcode and 
check the 
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/ folder

Original comment by jean.sig...@gmail.com on 3 Feb 2014 at 1:26

[GoogleCodeExporter]

my xcode version is 4.5 i think, 

if i install never xcode, than i got error that ios4.2.sdk is located, but 
after fem more rows i got error that its not located. strange. 

now im using xcode 4.5 or something, weill check later, but its dont have 
ios4.2 sdk inside,. there are only 6.0sdk, so i sdwnloaded old xcode 3,5 or 
earlier and extracted xcode 4.2.sdk from it. anyway, 

i need to try weith newest xcode? i will.. just tell me waht wersion i should 
choose..

Original comment by dainius....@gmail.com on 3 Feb 2014 at 2:32

[GoogleCodeExporter]

ok, just remove this folder
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/4.2
and run make_ramdisk_n90ap.sh

Original comment by jean.sig...@gmail.com on 3 Feb 2014 at 3:31

[GoogleCodeExporter]

Last login: Mon Feb  3 19:07:44 on ttys000
Dainiuss-Mac:~ dainius$ cd iphone-dataprotection
Dainiuss-Mac:iphone-dataprotection dainius$ make_ramdisk_n90ap.sh
-bash: make_ramdisk_n90ap.sh: command not found
Dainiuss-Mac:iphone-dataprotection dainius$ 

if i run sudo sh ./make_ramdisk_n90ap.sh
then i get:

Last login: Mon Feb  3 19:14:53 on ttys000
Dainiuss-Mac:~ dainius$ cd iphone-dataprotection
Dainiuss-Mac:iphone-dataprotection dainius$ sudo sh ./make_ramdisk_n90ap.sh
iOS SDK not found
Dainiuss-Mac:iphone-dataprotection dainius$ 

since ios4 sdk folder is removed, it cant find ios sdk, so i changed directory 
of ios sdk inside make_ramdisk_n90ap.sh file to pint directly to iOS6 sdk.
trying run:
sudo sh ./make_ramdisk_n90ap.sh

output is:

Last login: Mon Feb  3 19:22:50 on ttys000
Dainiuss-Mac:~ dainius$ cd iphone-dataprotection
Dainiuss-Mac:iphone-dataprotection dainius$ sudo sh ./make_ramdisk_n90ap.sh
Found iOS SDK 4.2
iOS SDK not found in 
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk/
=> check SDKVER/SDK in Makefile
clang -arch armv7 -Wall -isysroot 
/Applications/Xcode.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer
/SDKs/iPhoneOS4.2.sdk/ -DHGVERSION="\"9253cb99a012\"" -O3 -I. -framework 
CoreFoundation -framework IOKit -framework Security -miphoneos-version-min=4.0 
-o device_infos device_infos.c device_info.c IOAESAccelerator.c 
AppleEffaceableStorage.c AppleKeyStore.c bsdcrypto/pbkdf2.c bsdcrypto/sha1.c 
bsdcrypto/key_wrap.c bsdcrypto/rijndael.c util.c IOKit.c registry.c 
ioflash/ioflash.c kernel_patcher.c
device_infos.c:1:10: fatal error: 'stdio.h' file not found
#include <stdio.h>
         ^
1 error generated.
make: *** [device_infos] Error 1
ramdisk_tools/restored_external not found, check compilation output for errors
Dainiuss-Mac:iphone-dataprotection dainius$ 

this is the same error i was getting two days ago, so i reinstalled ewerything 
from scratsh and tryed again and then i opened this isue..

Original comment by dainius....@gmail.com on 3 Feb 2014 at 5:27

[GoogleCodeExporter]

hmmm, seems that i need to change sdk location in makefile file itself too..

Original comment by dainius....@gmail.com on 3 Feb 2014 at 5:38

[GoogleCodeExporter]

that worked somehow. but not untill end. decrypted data is OK but in the end i 
need text that myramdisk is created.

here is output.

http://pastebin.com/5AN4ekXm

Original comment by dainius....@gmail.com on 3 Feb 2014 at 6:00

[GoogleCodeExporter]

ok, looks good, does it boot ok ?

Original comment by jean.sig...@gmail.com on 3 Feb 2014 at 6:03

[GoogleCodeExporter]

did you looked at Pastebin link? 

in the end i have error liek this:

tar: Error exit delayed from previous errors.
"disk1" unmounted.

or it has nothing to do with creating ramdisk?

Original comment by dainius....@gmail.com on 3 Feb 2014 at 6:08

[GoogleCodeExporter]

ha ok, this message is not an error, the ramdisk should be ok, try booting with 
redsn0w.

Original comment by jean.sig...@gmail.com on 3 Feb 2014 at 6:12

[GoogleCodeExporter]

[deleted comment]

[GoogleCodeExporter]

[deleted comment]

[GoogleCodeExporter]

this is how the end of that operation should look like, MYRAMDISK.DMG CREATED

now there is no myramdisk.dmg in /iphone-dataprotection folder...

http://www.youtube.com/watch?v=2Fs6ee1yeq4&feature=player_detailpage#t=917

Original comment by dainius....@gmail.com on 3 Feb 2014 at 6:26

[GoogleCodeExporter]

this operation is not finishing... its not creating ramdisk for me.. 

output:

Dainiuss-Mac:iphone-dataprotection dainius$ sudo sh ./make_ramdisk_n90ap.sh
Password:
Found iOS SDK 4.2
not trusting file /Users/dainius/iphone-dataprotection/.hg/hgrc from untrusted 
user dainius, group staff
not trusting file /Users/dainius/iphone-dataprotection/.hg/hgrc from untrusted 
user dainius, group staff
make: Nothing to be done for `all'.
Archive:  /users/dainius/desktop/iPhone3,1_5.1.1_9B208_Restore.ipsw
  inflating: 038-5512-003.dmg        
TAG: TYPE OFFSET 14 data_length:4
TAG: DATA OFFSET 34 data_length:107b000
TAG: SEPO OFFSET 107b040 data_length:4
TAG: KBAG OFFSET 107b05c data_length:38
KBAG cryptState=1 aesType=100
TAG: KBAG OFFSET 107b0a8 data_length:38
TAG: SHSH OFFSET 107b10c data_length:80
TAG: CERT OFFSET 107b198 data_length:794
Decrypting DATA section
Decrypted data seems OK : ramdisk
/dev/disk1                                              /Volumes/ramdisk
bin/: Already exists
bin/cat: Already exists
bin/launchctl: Already exists
bin/ln: Already exists
bin/mkdir: Already exists
bin/mv: Already exists
bin/rm: Already exists
etc/: Already exists
sbin/: Already exists
usr/: Already exists
usr/bin/: Already exists
usr/lib/: Already exists
var/: Already exists
tar: Error exit delayed from previous errors.
"disk1" unmounted.
"disk1" ejected.
You can boot the ramdisk using the following command (fix paths)
redsn0w -i /users/dainius/desktop/iPhone3,1_5.1.1_9B208_Restore.ipsw -r 
myramdisk_n90ap.dmg -k kernelcache.release.n90.patched
Add -a "-v rd=md0 nand-disable=1" for nand dump/read only access
Dainiuss-Mac:iphone-dataprotection dainius$ 

somebody helpo me please, this is a last step to get my first custom ramdisk...

Original comment by dainius....@gmail.com on 3 Feb 2014 at 8:29

[GoogleCodeExporter]

myramdisk_n90ap.dmg is not created in the current folder ?

Original comment by jean.sig...@gmail.com on 3 Feb 2014 at 9:30

[GoogleCodeExporter]

yes, its there but wasn working, so now created one with 5.0.1 ios amd this one 
loaded to iPhone and i saw in screen Big OK, but now its just showing me 

AppleKeyStore:Sending Lock Change

its ok to see this, but in between them i saw one row witch told something 
about wrong firmware...

so need to wait now... ad will see..

at least its not showing me that error "Giving up" as with originals Gescko 
tools ramdisk.

will try again and again.

mayb eim using wrong keybag patch? its atttached in first post, check it if you 
can please.

Original comment by dainius....@gmail.com on 3 Feb 2014 at 10:36

[GoogleCodeExporter]

in phone in netween AppleKeyStore:Sending  lines i see one line:

AppleBCMWLANCore::handleIOKitBusyWatchdogTimeout(): Error No Succssessful 
firmware download after 6000ms!! Giving Up...

Original comment by dainius....@gmail.com on 3 Feb 2014 at 10:59

[GoogleCodeExporter]

Keybag: SIGN check FAIL

thats what i get. so i think that patch doesnt work for me. 

any suggestions?

Original comment by dainius....@gmail.com on 4 Feb 2014 at 12:12

[GoogleCodeExporter]

it worked!

nice :)

Original comment by dainius....@gmail.com on 4 Feb 2014 at 12:17

[GoogleCodeExporter]

a huge thanks to Supporting me :)
!!!

Original comment by dainius....@gmail.com on 4 Feb 2014 at 12:17

[GoogleCodeExporter]

can you send me the ramdisk you made to test it 

Original comment by iphone5a...@gmail.com on 19 Feb 2014 at 6:34

[GoogleCodeExporter]

Hi, you need to download a .rar from first post, extract it and you will find a 
ramdisk and kernel inside.

http://forum.gsmhosting.com/vbb/f456/iphone-4-ios-7-x-x-passcode-read-windows-on
ly-1777408/

Original comment by dainius....@gmail.com on 20 Feb 2014 at 7:42

[GoogleCodeExporter]

i'm trying to unlock passcode on iphone 4 (3.1) ios 7.1 ..
but it doesn't work .. and according to other guides when i press launch in 
Gecko tool i should see AppleKeyStore:sending on my iphone screen but the only 
thing i see is (AppleBCMWLANCore: :handleIOKiBusyWatchingTimeout(): Error, no 
successful firmware download after 60000 ms!! Giving up...)

Original comment by miros...@gmail.com on 8 Apr 2014 at 6:17

[GoogleCodeExporter]

what you are using for this? contact me by email please, since this is not an 
issue of this issue itself...

Original comment by dainius....@gmail.com on 8 Apr 2014 at 6:27

[GoogleCodeExporter]

dainius....@gmail.com : thanks for your greate work! the solution is work on my 
little sister ip4, i weel doate for 10 beer. have a nice day. 

Original comment by catalin2...@gmail.com on 6 Jun 2014 at 9:41

[GoogleCodeExporter]

dainius....@gmail.com i have the same error as miros...@gmail.com. Is there an 
available custom ramdisk for iOS 7.1.x? 

Original comment by pascual....@gmail.com on 1 Jul 2014 at 2:54

[GoogleCodeExporter]

if you need custom ramdisk for iphone 4 rev 3,1.. just folow a link on #22 
post.. or download here.: http://www37.zippyshare.com/v/64701017/file.html

Original comment by dainius....@gmail.com on 1 Jul 2014 at 5:36

[GoogleCodeExporter]

how this error can be solverd 
in gecko shows this
passcodeKeyboardComplexity : {'rangeMinimum': 0, 'value': 0, 'rangeMaximum': 2}
Trying all 4-digits passcodes...
on the screen this 
IOConnectCallMethod on AppleKeyStore selector 6 returned e00002c9

Original comment by camillew...@gmail.com on 12 Jul 2014 at 10:43

[GoogleCodeExporter]

what is your iOS version?

Original comment by dainius....@gmail.com on 14 Jul 2014 at 2:35

[GoogleCodeExporter]

i got the same error on 7.0.6 iphone 4 cdma

Original comment by jagopisa...@gmail.com on 15 Jul 2014 at 4:41

[GoogleCodeExporter]

iOS: 7.1.1  iphone 4 gsm 

Original comment by camillew...@gmail.com on 15 Jul 2014 at 10:51

[GoogleCodeExporter]

the "IOConnectCallMethod on AppleKeyStore selector 6 returned e00002c9" error 
should be fixed in the latest revision

Original comment by jean.sig...@gmail.com on 16 Jul 2014 at 5:27

[GoogleCodeExporter]

Dear dainius could you rebuild 
teh ramdisk using the latest revision?
And provide me a link of it?
I really apreciate it.
And jean is there any method to create ramdisk
Using windows?
Thank you

Original comment by jagopisa...@gmail.com on 23 Jul 2014 at 5:00