edwin170 / downr1n Goto Github PK

Hi, when it is near the end and almost starting to boot up, the message appeared:
"[*] Patching kernel ...
Reading work/kernelcache...
[NOTE] Image4 payload data is LZSS compressed, decompressing...
RuntimeError: pylzss not installed, cannot use LZSS compression"

I tried install pylzss manually and update python but no dice.

I think the latter. But could someone explain it lmao. For example I have my iPhone 8 Plus on iOS 16.6 jailbroken with palera1n. If I decide to completely reset using itunes and then can I use this guide to downgrade to iOS 14 or iOS 15?

Hi, when I do ./downr1n --downgrade 14.3. It gets past all everything but when the futurestore stage is starting it gives me the error "ApNonce from device doesn't match IM4M nonce after applying ApNonce hax. Aborting!" after sending the iBEC.

I am running this on MacOS 10.15.7

This is the console log:

`Checking if SEP is being signed...
Sending TSS request attempt 1... response successfully received
SEP is being signed!

WARNING: user specified is not to flash a baseband. This can make the restore fail if the device needs a baseband!

If you added this flag by mistake, you can press CTRL-C now to cancel
Continuing restore in 10 9 8 7 6 5 4 3 2 1 Downloading the latest firmware components...
Finished downloading the latest firmware components!
Found device in DFU mode
requesting to get into pwnRecovery later
Found device in DFU mode
Identified device as j96ap, iPad5,1
Extracting BuildManifest from iPSW
Product version: 14.3
Product build: 18C66 Major: 18
Device supports Image4: true
checking if the APTicket is valid for this restore...
Verified ECID in APTicket matches the device's ECID
checking if the APTicket is valid for this restore...
Verified ECID in APTicket matches the device's ECID
[IMG4TOOL] checking buildidentity 0:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 1:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 2:
[IMG4TOOL] checking buildidentity matches board ... YES
[IMG4TOOL] checking buildidentity has all required hashes:
[IMG4TOOL] checking hash for "Ap,SystemVolumeCanonicalMetadata"BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "AppleLogo" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryCharging0" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryCharging1" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryFull" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryLow0" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryLow1" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryPlugin" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "DeviceTree" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "KernelCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "LLB" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "OS" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RecoveryMode" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreDeviceTree" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreKernelCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreLogo" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreRamDisk" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreSEP" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreTrustCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "SEP" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "StaticTrustCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "SystemVolume" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "ftap" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "ftsp" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "iBEC" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "iBSS" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "iBoot" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "rfta" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "rfts" IGN (no digest in BuildManifest)

failed verification with error:
[exception]:
what=verification failed!
code=84279308
line=1286
file=img4tool.cpp
commit count=197
commit sha =aca6cf005c94caf135023263cbb5c61a0081804f
[IMG4TOOL] checking buildidentity 3:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 4:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 5:
[IMG4TOOL] checking buildidentity matches board ... NO
[IMG4TOOL] checking buildidentity 6:
[IMG4TOOL] checking buildidentity matches board ... YES
[IMG4TOOL] checking buildidentity has all required hashes:
[IMG4TOOL] checking hash for "Ap,SystemVolumeCanonicalMetadata"BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "AppleLogo" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryCharging0" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryCharging1" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryFull" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryLow0" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryLow1" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "BatteryPlugin" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "DeviceTree" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "KernelCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "LLB" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "OS" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RecoveryMode" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreDeviceTree" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreKernelCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreLogo" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreRamDisk" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreSEP" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "RestoreTrustCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "SEP" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "StaticTrustCache" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "SystemVolume" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "ftap" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "ftsp" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "iBEC" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "iBSS" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "iBoot" BAD! (hash not found in im4m)
[IMG4TOOL] checking hash for "rfta" IGN (no digest in BuildManifest)
[IMG4TOOL] checking hash for "rfts" IGN (no digest in BuildManifest)

failed verification with error:
[exception]:
what=verification failed!
code=84279308
line=1286
file=img4tool.cpp
commit count=197
commit sha =aca6cf005c94caf135023263cbb5c61a0081804f
[IMG4TOOL] checking buildidentity 7:
[IMG4TOOL] checking buildidentity matches board ... NO
[WARNING] NOT VALIDATING SHSH BLOBS IM4M!
[Error] BuildIdentity selected for restore does not match APTicket

BuildIdentity selected for restore:
BuildNumber : 18C66
BuildTrain : AzulC
DeviceClass : j96ap
FDRSupport : YES
MobileDeviceMinVersion : 1253
RestoreBehavior : Erase
Variant : Customer Erase Install (IPSW)

BuildIdentity is valid for the APTicket:
IM4M is not valid for any restore within the Buildmanifest
This APTicket can't be used for restoring this firmware
[WARNING] NOT VALIDATING SHSH BLOBS!
Variant: Customer Erase Install (IPSW)
This restore will erase all device data.
Device found in DFU Mode.
Getting firmware keys for: j96ap
Patching iBSS
Extracting iBSS.ipad5.RELEASE.im4p (Firmware/dfu/iBSS.ipad5.RELEASE.im4p)...
payload decrypted
iBoot64Patch: Staring iBoot64Patch!
iOS 14 iBoot detected!
iBoot64Patch: Inited ibootpatchfinder64!
iBoot64Patch: Added sigpatches!
iBoot64Patch: Added unlock nvram patch!
iBoot64Patch: Added freshnonce patch!
iBoot64Patch: has_kernel_load is false!
iBoot64Patch: Applying patch=0x18038dfa4 : 000080d2
iBoot64Patch: Applying patch=0x18038dffc : 000080d2
iBoot64Patch: Patches applied!
Patching iBEC
Extracting iBEC.ipad5.RELEASE.im4p (Firmware/dfu/iBEC.ipad5.RELEASE.im4p)...
payload decrypted
iBoot64Patch: Staring iBoot64Patch!
iOS 14 iBoot detected!
iBoot64Patch: Inited ibootpatchfinder64!
iBoot64Patch: Added sigpatches!
iBoot64Patch: Added unlock nvram patch!
iBoot64Patch: Added freshnonce patch!
iBoot64Patch: has_kernel_load is true!
iBoot64Patch: Added debugenabled patch!
iBoot64Patch: Added bootarg patch!
iBoot64Patch: Applying patch=0x87000f068 : 000080d2
iBoot64Patch: Applying patch=0x87000f0b4 : 000080d2
iBoot64Patch: Applying patch=0x870003094 : 000080d2c0035fd6
iBoot64Patch: Applying patch=0x870003600 : 000080d2c0035fd6
iBoot64Patch: Applying patch=0x87002df14 : 000080d2c0035fd6
iBoot64Patch: Applying patch=0x870014500 : 1f2003d5
iBoot64Patch: Applying patch=0x8700109e4 : 200080d2
iBoot64Patch: Applying patch=0x870011fd8 : 69cf2110
iBoot64Patch: Applying patch=0x8700559c4 : 72643d6d6430206e616e642d656e61626c652d7265666f726d61743d307831202d76202d726573746f72652064656275673d30783230313465206b65657073796d733d30783120616d66693d3078666620616d66695f616c6c6f775f616e795f7369676e61747572653d30783120616d66695f6765745f6f75745f6f665f6d795f7761793d3078312063735f656e666f7263656d656e745f64697361626c653d30783100
iBoot64Patch: Applying patch=0x870011fe4 : fa0309aa
iBoot64Patch: Applying patch=0x870012000 : 3ace2110
iBoot64Patch: Patches applied!
Repacking patched iBSS as IMG4
Repacking patched iBEC as IMG4
Sending iBSS (201198 bytes)...
[==================================================] 100.0%
Booting iBSS, waiting for device to disconnect...
Booting iBSS, waiting for device to reconnect...
Sending iBEC (776686 bytes)...
[==================================================] 100.0%
Booting iBEC, waiting for device to disconnect...
Booting iBEC, waiting for device to reconnect...
INFO: device serial number is F9FQC69YGHK9
ApNonce pre-hax:
Getting ApNonce in recovery mode... 3f 6f 44 a9 42 1c 83 70 6f 5e 8c 11 f8 ad c5 8f 2c 32 bc f1
ApNonce from device doesn't match IM4M nonce, applying hax...
Writing generator=0xaa9b8f3c282761da to nvram!
Sending iBEC (776686 bytes)...
[==================================================] 100.0%
Booting iBEC, waiting for device to disconnect...
Booting iBEC, waiting for device to reconnect...
APnonce post-hax:
Getting ApNonce in recovery mode... 2d 4b d5 cf 45 2f 35 cf 6a 3d 58 1c 30 88 8f fe 8b be b7 ea
Cleaning up...
[exception]:
what=ApNonce from device doesn't match IM4M nonce after applying ApNonce hax. Aborting!
code=54198340
line=827
file=/Users/runner/work/futurerestore/futurerestore/src/futurerestore.cpp
commit count=308
commit sha =9554c0068dc50e141872ced5da2bd95baa595805
Done: restoring failed!
if you are on linux please try above command if futurerestore failed
if futurerestore didn't finish succesfully please try to run (with sudo or without) this command: /Users/fin/downr1n/binaries/Darwin/futurerestore -t blobs/iPad5,1-14.3.shsh2 --use-pwndfu --skip-blob --rdsk work/rdsk.im4p --rkrn work/krnl.im4p --latest-sep --no-baseband ipsw//iPad_64bit_TouchID_14.3_18C66_Restore.ipsw
if futurerestore restore sucess, you can boot using --boot`

The home button is broken on my iPhone7 after running this script, is there a way to fix it.

Here is what the terminal says(this is not my problem,and another person the iPhone is connected to usb 2.0)
"[[*] Device entered DFU!
Patchimg some boot files...
trst
libusb: warning [op_get_configuration] device unconfigured
libusb: error [op_get_activ_config_descriptor] device unconfigured
[17:58:48.535][3] Could not get old configuration descriptor for LIBUSB_ERROR_NOT_FOUND
[17:58:48.585][3] Connecting to new device on location 0x1001b
[17:58:48.633][3] Connected to v2.0 device 2 on location 0x1001b e9f6e7f238e24lec5a43dab10ee54757ff9c9bbc"

anton@anton-desktop:/media/anton/Ubuntu For Gays/bruh/winra1n3/downr1n$ sudo ./downr1n.sh --downgrade 14.8
[*] Command ran: sudo ./downr1n.sh --downgrade 14.8
[19:55:50.943][3] usbmuxd v1.1.1 starting up
[19:55:50.943][3] Using libusb 1.0.25
[19:55:50.944][3] Initialization complete
downr1n | Version 3.0
Created by edwin, thanks palera1, and all people creator of path file boot

[] Waiting for devices
libusb: warning [op_get_configuration] device unconfigured
libusb: error [op_get_active_config_descriptor] device unconfigured
[19:56:58.974][3] Could not get old configuration descriptor for device 1-28: LIBUSB_ERROR_NOT_FOUND
[19:56:58.981][3] Connecting to new device on location 0x1001c as ID 1
[19:56:59.131][3] Connected to v2.0 device 1 on location 0x1001c with serial number 8345a4f14650cec6fbce5974747b7d6b481f5391
[] Detected normal mode device
/media/anton/Ubuntu For Gays/bruh/winra1n3/downr1n/binaries/Linux/ideviceinfo: error while loading shared libraries: libssl.so.1.1: cannot open shared object file: No such file or directory
/media/anton/Ubuntu For Gays/bruh/winra1n3/downr1n/binaries/Linux/ideviceinfo: error while loading shared libraries: libssl.so.1.1: cannot open shared object file: No such file or directory
Hello, on 14.8!
[] Switching device into recovery mode...
/media/anton/Ubuntu For Gays/bruh/winra1n3/downr1n/binaries/Linux/ideviceinfo: error while loading shared libraries: libssl.so.1.1: cannot open shared object file: No such file or directory
/media/anton/Ubuntu For Gays/bruh/winra1n3/downr1n/binaries/Linux/ideviceenterrecovery: error while loading shared libraries: libssl.so.1.1: cannot open shared object file: No such file or directory
[/] if your device can't enter into recovery mode please try to force reboot and put it on recovery mode
[] Waiting for device in recovery mode
[19:57:06.284][3] Removed device 1 on location 0x1001c
[] Waiting for devices
[] Detected recovery mode device
[] Getting device info...
Detected cpid, your cpid is 0x8010
Detected model, your model is d101ap
Detected deviceid, your deviceid is iPhone9,3
[] To get into DFU mode, you will be guided through 2 steps:
[] Press any key when ready for DFU mode
Get ready (0)
Release side button, but keep holding volume down (9)
Release side button, but keep holding volume down (2)
[] Device entered DFU!
[] Continuing...
[] Extracting ipsw, hang on please ...
'ipsw/extracted//BuildManifest.plist' -> 'work/BuildManifest.plist'
[] Got extract the IPSW successfully
[] Creating ramdisk
[-] Ramdisk is already created so SKIPPING ...
[] Booting ramdisk
usb_timeout: 5
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: RESET
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: SPRAY
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: SETUP
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: PATCH
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Now you can boot untrusted images.
usb_timeout: 5
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[] Waiting for the ramdisk to finish booting
libusb: warning [op_get_configuration] device unconfigured
libusb: error [op_get_active_config_descriptor] device unconfigured
[19:58:46.915][3] Could not get old configuration descriptor for device 1-40: LIBUSB_ERROR_NOT_FOUND
[19:58:46.920][3] Connecting to new device on location 0x10028 as ID 2
[19:58:47.021][3] Connected to v2.0 device 2 on location 0x10028 with serial number ramdisk tool Sep 18 2022 20:14:43
[19:58:47.022][2] device_control_input: Got unhandled payload type 5
[19:58:47.123][2] device_control_input: Got unhandled payload type 5
Error connecting to device: No error information
[] Mounting filesystems ...
seputil: Gigalocker file (/mnt7/2AB1A94C-88B7-58C1-807C-0A0A23F155F7.gl) exists
seputil: Gigalocker initialization completed
sepi digest (48 bytes): 904cdb98a0e58d32e0c13173fd46fa361d8a8f37d41782d2a16c64924a868f28862163b90c28a820a7413999ad31fc4e
sepi nonce (20 bytes): eff6b5c4d7ce5ddddceaf5405542b92774bf5d6b
rsep digest (48 bytes): 85172acdedc54e6736148729b60022624c47ec5fc5822ff75af1d88fadfd346a488670b454aa3c0134f67164b5cdba2c
rsep nonce (20 bytes): eff6b5c4d7ce5ddddceaf5405542b92774bf5d6b
[] Dumpped SHSH
[] Patching kernel ...
./downr1n.sh: строка 910: [: слишком много аргументов
[] kernel patched with kpf
Reboot into recovery mode ...
[19:59:57.431][3] Removed device 2 on location 0x10028
[] To get into DFU mode, you will be guided through 2 steps:
[] Press any key when ready for DFU mode
Get ready (0)
Release side button, but keep holding volume down (9)
Release side button, but keep holding volume down (2)
[] Device entered DFU!
[ ]Patching some boot files...
[] Finished moving the boot files to work
[] Decrypthing ibss and iboot
usb_timeout: 5
usb_abort_timeout_min: 0
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: RESET
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: SETUP
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: SPRAY
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: PATCH
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Now you can boot untrusted images.
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.

Hi, I am quite new to linux and when i tried to downgrade my iphone 6s to ios 14.8, the commands wont go pass "found USB handle". I dont know if im missing some driver or smth. Please help.

Code:
jason@jason-GF63-8RD:~/Downloads/downr1n$ sudo ./downr1n.sh --downgrade 14.8
[sudo] password for jason:
[*] Command ran: sudo ./downr1n.sh --downgrade 14.8
[22:35:49.241][3] usbmuxd v1.1.1 starting up
[22:35:49.241][1] Another instance is already running (pid 15640). exiting.
downr1n | Version 1.0
Created by edwin, thanks sunst0rm, and all people creator of path file boot

[] Waiting for devices
[] Detected DFU mode device
[] Getting device info...
0x8000
n71ap
iPhone8,1
[] Continuing...
extracting ipsw, hang on please ...
Archive: ipsw/iPhone_4.7_14.8_18H17_Restore.ipsw
'ipsw/extracted//BuildManifest.plist' -> 'work/BuildManifest.plist'
now the IPSW is extracted
[] Creating ramdisk
[-] Ramdisk is already created so SKIPPING ...
[] Booting ramdisk
usb_timeout: 5
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Now you can boot untrusted images.
usb_timeout: 5
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
bind(): Address in use
Error creating socket for listen port 2222: Address in use
[] Waiting for the ramdisk to finish booting
seputil: Gigalocker file (/mnt7/9AD9337E-2FED-517A-8218-72ED70655D64.gl) exists
seputil: Gigalocker initialization completed
sepi digest (20 bytes): 20402a449340e9e619921e6b2fab74abb8bb2fdd
sepi nonce (20 bytes): 96376e5d4855ac9d21c2752a1ed320333109b500
rsep digest (20 bytes): 17aea80c5aca463d7a7296027afd32c81a2eb60b
rsep nonce (20 bytes): 96376e5d4855ac9d21c2752a1ed320333109b500
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f-RELEASE
Compiled with plist: YES
Saved IM4M to work/IM4M
Dumpped SHSH
[] Patching kernel ...
Reading work/kernelcache...
[NOTE] Image4 payload data is LZSS compressed, decompressing...
Extracted extra Image4 payload data: to work/kpp.bin.
Extracted Image4 payload data to: work/kcache.raw
sending incremental file list
kcache.raw

sent 90 bytes received 43,638 bytes 17,491.20 bytes/sec
total size is 38,764,544 speedup is 886.49
sending incremental file list
Kernel15Patcher.ios

sent 99 bytes received 1,139 bytes 2,476.00 bytes/sec
total size is 128,736 speedup is 103.99
./downr1n.sh: line 820: [: too many arguments
receiving incremental file list
kcache.patched

sent 43 bytes received 14,480,760 bytes 4,137,372.29 bytes/sec
total size is 38,764,544 speedup is 2.68
[] To get into DFU mode, you will be guided through 2 steps:
[] Press any key when ready for DFU mode
Get ready (0)
Release power button, but keep holding home button (9)
Release power button, but keep holding home button (2)
[] Device entered DFU!
[ ]Patchimg some boot files...
trst
[] Finished moving the boot files to work
[] Pwning device
usb_timeout: 5
usb_abort_timeout_min: 0
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Stage: RESET
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Stage: SETUP
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Stage: SPRAY
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Stage: PATCH
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Now you can boot untrusted images.
[*] Resetting DFU state
usb_timeout: 5
usb_abort_timeout_min: 0
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
usb_timeout: 5
usb_abort_timeout_min: 0
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Now you can boot untrusted images.
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.

after extracting the files from the ipsw (14.5) and inflating them , it says " creating ramdisk " but its stuck there for hours . how do i fix this?

anyway im using this on an iphone 12mini(the small version) that has iOS 16.3.1 or 16.4 i dont actually remember , and im trying to downgrade it to 14.5

Hi,
First of all thank you for the great tool for downgrading.

I would like to know if A8X (iPad Air2) devices are supported? AS I know A8X is a checkm8 device, but when I'm trying to downgrade after entering DFU mode I get "unable connect to the device" error message.

In your latest commit (9de56c3)
You tried to fix ipsw
path was wrong, this works for linux
replace ipsw/.ipsw with ./ipsw/.ipsw

restoring works now (too lazy to make pr)

also it wont detect ipsw

./downr1n.sh --downgrade 14.8

line 904
"$dir"/gaster decrypt work/"$(awk "/""${model}""/{x=1}x&&/iBSS[.]/{print;exit}" work/BuildManifest.plist | grep '' |cut -d> -f2 |cut -d< -f1 | sed 's/Firmware[/]dfu[/]//')" work/iBSS.dec

result

Get ready (0)
Release power button, but keep holding home button (9)
Release power button, but keep holding home button (2)
[] Device entered DFU!
[ ]Patchimg some boot files...
trst
[] Finished moving the boot files to work
[] Pwning device
usb_timeout: 5
usb_abort_timeout_min: 0
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Stage: RESET
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Stage: SETUP
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Stage: SPRAY
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Stage: PATCH
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Now you can boot untrusted images.
[*] Resetting DFU state
usb_timeout: 5
usb_abort_timeout_min: 0
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
usb_timeout: 5
usb_abort_timeout_min: 0
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8000
Found the USB handle.
Now you can boot untrusted images.
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.

SO: Catalina 10.15.7

please help me !

some weird

sent 96 bytes received 1146 bytes 828.00 bytes/sec
total size is 128736 speedup is 103.65
./downr1n.sh: line 833: [: too many arguments <-- here
receiving file list ... done
kcache.patched

line 833

if [ ! $(remote_cmd "/mnt1/private/var/root/kpf15.ios /mnt1/System/Library/Caches/com.apple.kernelcaches/kcache.raw /mnt1/System/Library/Caches/com.apple.kernelcaches/kcache.patched") ]; then
echo "you have the kernelpath already installed "
fi

I have an ipad air 2 and when i used downr1n it got stuck in dfu and now anything i try to get it out isnt working and downr1n said it worked successfully is there a fix for this or is my ipad bricked?

Hello, i try downloading iphone 7 from 15.7.9 to 14.8, or 14.3.(trying both)

Using linux distributions Ubuntu 22.04 LTS

After restored, scripts say - restore successfully.
Then i try use —boot option, and get nothing..
PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: RESET
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: SPRAY
ret: true
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: SETUP

and got looped(out of script like on above) … wait about 10-20m
stuck on dfu…than restore to 15.7.9…

mentioning pylzss in the readme should solve it

Hi, I'm trying to downgrade an Activation Locked (iCloud) iPhone X at iOS 16.4.1, down to 16.1. It is stuck on the line [*] Waiting for the ramdisk to finish booting, and the iPhone starts up into normal mode. Here is the full log:

sudo ./downr1n.sh --downgrade 16.1
[*] Command ran: sudo ./downr1n.sh --downgrade 16.1
downr1n | Version 1.0
Created by edwin, thanks sunst0rm, and all people creator of path file boot

[*] Waiting for devices
[*] Detected normal mode device
Hello, iPhone10,6 on 16.1!
[*] Switching device into recovery mode...
Telling device with udid 206e2f7122bb97de727bf3772d22222a7ccf4596 to enter recovery mode.
Device is successfully switching to recovery mode.
[*] Waiting for device in recovery mode
[*] Getting device info...
0x8015
d221ap
iPhone10,6
[*] To get into DFU mode, you will be guided through 2 steps:
[*] Press any key when ready for DFU mode
Get ready (0)
Release side button, but keep holding volume down (9)
Release side button, but keep holding volume down (2)
[*] Device entered DFU!
[*] Continuing...
extracting ipsw, hang on please ...
Archive:  ipsw/iPhone10,3,iPhone10,6_16.1_20B5050f_Restore.ipsw
ipsw/extracted//BuildManifest.plist -> work/BuildManifest.plist
now the IPSW is extracted
[*] Creating ramdisk
[-] Ramdisk is already created so SKIPPING ...
[*] Booting ramdisk
usb_timeout: 5
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8015
Found the USB handle.
Stage: RESET
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8015
Found the USB handle.
Stage: SPRAY
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8015
Found the USB handle.
Stage: SETUP
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8015
Found the USB handle.
Stage: PATCH
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8015
Found the USB handle.
Now you can boot untrusted images.
usb_timeout: 5
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
bind(): Address already in use
Error creating socket for listen port 2222: Address already in use
[*] Waiting for the ramdisk to finish booting

If there is any other information that I need to send to further debug this issue, please let me know.

You answered NO. so using the 14.8.
[*] Downloading ipsw, it may take few minutes.
curl: (6) Could not resolve host: null

[*] Patching kernel ...
Reading work/kernelcache...
[NOTE] Image4 payload data is LZFSE compressed, decompressing...
Extracted Image4 payload data to: work/kcache.raw
sending incremental file list
kcache.raw

sent 91 bytes received 44.632 bytes 8.131,45 bytes/sec
total size is 40.566.812 speedup is 907,07
sending incremental file list
rsync: [sender] link_stat "/home/tranthanhtu/Desktop/downr1n/binaries/Kernel15patcher.ios" failed: No such file or directory (2)

sent 18 bytes received 12 bytes 60,00 bytes/sec
total size is 0 speedup is 0,00
rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1338) [sender=3.2.7]

I am wanting to use this do downgrade my iPhone from 15.7.3 to 15.7.1. Do I have to boot my phone with a computer every time I want to start it, or can I just start it like normal? (Un-jailbroken)

in usb boot , it says error:new session to port 62878 failed 61

I have a macos, also it doesn't work on linux. What the terminal says:
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID:0x1227
CPID:0x8010
Found the USB handle.
Stage: PATCH
ret:true
It doesn't end.I entered:"sudo ./downr1n.sh --downgrade 14.2" (with dualra1n the same)

"SystemError: PY_SSIZE_T_CLEAN macro must be defined for '#' formats" after "extracting kernel"

The whole thing seems to have crashed now, been hanging for about half an hour.

Running Kali Linux 6.3.0 64 bit, base is Debian 6.3.7

Hello,

I'm trying to downgrade a iPhone6S from 15.4.1 to 14.8. I put it in DFU mode and exec ./downr1n.sh --downgrade 14.3 --debug, but the next output is given:

+ unzip -n ipsw/iPhone_4.7_14.3_18C66_Restore.ipsw -d ipsw/extracted
+ cp -v ipsw/extracted//BuildManifest.plist work/
'ipsw/extracted//BuildManifest.plist' -> 'work/BuildManifest.plist'
+ echo '[*] Got extract the IPSW successfully'
[*] Got extract the IPSW successfully
+ '[' '' = 1 ']'
+ '[' true ']'
+ mkdir -p blobs
+ cd ramdisk
+ chmod +x sshrd.sh
+ echo '[*] Creating ramdisk'
[*] Creating ramdisk
+ ./sshrd.sh 15.6
jq: error (at <stdin>:1): Cannot index number with string "firmwares"
parse error: Invalid numeric literal at line 1, column 9

Also, trying --jailbreak option, the same error is given:

[*] Getting device info...
Detected cpid, your cpid is 0x0000
Detected model, your model is 
Detected deviceid, your deviceid is 
jq: error (at <stdin>:1): Cannot index number with string "firmwares"
parse error: Invalid numeric literal at line 1, column 9

Kind regards

Is it possible to downgrade and then JB with Unc0ver?

If not i could pay for a solution that allowed that, I really need to downgrade my IOS 15.7.5 to 14.2 Unc0ver to install a particular tweak. My telegram is @pedrocintraa

I'm trying to downgrade iPhone 7 to 14.8
futurerestore completes successfully, but when I run ./downr1n.sh --boot I get this:

[*] Pwning device
usb_timeout: 5
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: RESET
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: SPRAY
ret: true
[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: SETUP
ret: true
...

There are hundreds of [IOKit] Waiting for the USB handle... lines.
Additionally, while executing device cyclically appears and disappears in Finder. It doesn't react to button combinations at all, so I can't re-enter DFU or perform force restart.

I used ./palera1n --dfuhelper to exit DFU, it just prints <Info>: Waiting for devices, finishes and nothing happens.
Sometimes it shows <Error>: libirecovery error: -3 (Unable to connect to device).

I tried to downgrade multiple times, run ./downr1n.sh --boot on another PC with Linux - behaviour the same. However, in this state, I can restore and update device using Finder.

iPhone 6s, IOS 15.7.5 have jailbreak, rootless

Attemping linux usb fixes please wait...
Ubuntu or Debian Detected!
Done!
Please unplug and replug your iDevice!
did you unplug and replug your iDevice? so press [ENTER]
[*] Executing futurerestore ...

Press ENTER to continue <-
terminate called after throwing an instance of 'tihmstar::exception'
what(): can't init, no device found

I figured out it was a tethered boot after i downgraded and now i want to remove the downgrade

constantly says

[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPId:0x8003
Found the USB handle.
Stage: PATCH
ret: false

until the terminal lags and nothing happens
I let it go for 10 minutes or so, ran sshrd_Script and rebooted it into real dfu mode, same issue
Tried swapping cables, usb ports, etc to no avail

helppppp

[WARNING] BUG WORKAROUND recompressing images with bvx2 makes them not boot for some reason. Skipping compression
Repacking patched iBSS as IMG4
Repacking patched iBEC as IMG4
Sending iBSS (1415555 bytes)...
[==================================================] 100.0%
ERROR: Device is in an invalid state
Booting iBSS, waiting for device to disconnect...
Booting iBSS, waiting for device to reconnect...
ApNonce pre-hax:
INFO: device serial number is FD6W46KXJCM2
Getting ApNonce failed
Cleaning up...
[exception]:
what=Failed to get apnonce from device!
code=50790468
line=775
file=/Users/runner/work/futurerestore/futurerestore/src/futurerestore.cpp
commit count=308
commit sha =9554c0068dc50e141872ced5da2bd95baa595805
Done: restoring failed!

if you are on linux please try above command if futurerestore failed
if futurerestore didn't finish succesfully please try to run (with sudo or without) this command: /Users/otto/ios/downr1n/binaries/Darwin/futurerestore -t blobs/iPhone10,5-13.4.shsh2 --use-pwndfu --skip-blob --rdsk work/rdsk.im4p --rkrn work/krnl.im4p --latest-sep --latest-baseband ipsw//iPhone_5.5_P3_13.4_17E255_Restore.ipsw
if futurerestore restore sucess, you can boot using --boot

========================

Hello，today i try to downgrade my iphone 7 plus from ios 16.7.2 to ios 13.4，i got the following error when “Reboot into recovery mode”

And, when i type the suggestion command in command line with sudo, i got another error:

========================
Found device in Recovery mode
Device already in recovery mode
Cleaning up...
[exception]:
what=--use-pwndfu was specified, but device found in recovery mode!
code=61734980
line=942
file=/Users/runner/work/futurerestore/futurerestore/src/futurerestore.cpp
commit count=308
commit sha =9554c0068dc50e141872ced5da2bd95baa595805
Done: restoring failed!

=========================

How can i resolve it? pls let me know~

I try to install this ''python3 -m pip install pyliblzfse'' but not working THANKS

i downgraded to ios 14.8 then i used sudo ./downr1n.sh --jailbreak 14.8 --taurine, And i got Stuck on:

Now you can boot untrusted images.
[*] Resetting DFU state
usb_timeout: 5
usb_abort_timeout_min: 0
[libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
Found the USB handle.
[*] Booting device
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
Attempting to connect... 
opening device 05ac:1281...
Setting to configuration 1
Setting to interface 0:0
Connected to iPhone8,4, model n69ap, cpid 0x8003, bdid 0x02
[==================================================] 100.0%Command completed successfully

[==================================================] 100.0%

and the screen of my phone is black but it has bright so its not fake dfu
im also using Iphone SE(1st gen)

hope you can helpme!

hello i have this iphone 7 plus after doing it and downgrading to 14.8 i cant boot it up the power + sound button also when i try to run the command --boot it gives me this error [libusb] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8010
Found the USB handle.
Stage: PATCH
ret: true
for anything i do and i also tryed to re downgrade but it still gives the same error and jailbreak but im thinking that the iphone is dead and also its it dfu mode

Iphone 7 (GSM)
IOS 15.7.7
iCloud Owner Locked

==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[==================================================] 100.0%
[*] Waiting for the ramdisk to finish booting
libusb: warning [op_get_configuration] device unconfigured
libusb: error [op_get_active_config_descriptor] device unconfigured
[17:06:16.172][3] Could not get old configuration descriptor for device 3-11: LIBUSB_ERROR_NOT_FOUND
[17:06:16.193][3] Connecting to new device on location 0x3000b as ID 2
[17:06:16.226][3] Connected to v2.0 device 2 on location 0x3000b with serial number ramdisk tool Sep 18 2022 20:14:43
[17:06:16.227][2] device_control_input: Got unhandled payload type 5
[17:06:16.631][2] device_control_input: Got unhandled payload type 5
Error connecting to device: No error information
seputil: Gigalocker file (/mnt7/61356D0D-CA84-501B-B517-90171B8E3E3B.gl) exists
seputil: Gigalocker initialization completed
sepi digest (48 bytes): 6cd78b731e8b1477a59d42c31620bca9d4690ebbe2b0749beaa4bce6c013cf8497a8451ece840b98f0a5b7a285e87fb7
sepi nonce (20 bytes): 3e4e655722b021817f7e1313026586371dddfd6e
rsep digest (48 bytes): 3bd977b45548330b94b9ce693f08911e29be962cfa213e6307ebd2075ecc6d02f615ac00b0f4bb0c9904d658994f26de
rsep nonce (20 bytes): 3e4e655722b021817f7e1313026586371dddfd6e
dd: warning: partial read (238 bytes); suggest iflag=fullblock
16365+19 enregistrements lus
16365+19 enregistrements écrits
4192117 octets (4,2 MB, 4,0 MiB) copiés, 1,3252 s, 3,2 MB/s
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f-RELEASE
Compiled with plist: YES
Found IM4R extracting generator: ok
Saved IM4M to blobs/iPhone9,3-15.7.shsh2
[*] Converting blob
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f-RELEASE
Compiled with plist: YES
Saved IM4M to work/IM4M
Dumpped SHSH
[*] Patching kernel ...
Reading work/kernelcache...
[NOTE] Image4 payload data is LZFSE compressed, decompressing...
Extracted Image4 payload data to: work/kcache.raw
sending incremental file list
kcache.raw

sent 14.891.065 bytes  received 35 bytes  4.254.600,00 bytes/sec
total size is 40.108.060  speedup is 2,69
sending incremental file list
rsync: [sender] link_stat "/home/mateo/downr1n/binaries/Kernel15patcher.ios" failed: No such file or directory (2)

sent 18 bytes  received 12 bytes  60,00 bytes/sec
total size is 0  speedup is 0,00
rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1338) [sender=3.2.7]

I am getting stuck on "SystemError: PY_SSIZE_T_CLEAN macro must be defined for '#' formats" in terminal when trying to dualboot or downgrade ios

[] Waiting for devices
[] Detected DFU mode device
[] Waiting for devices
[] Detected DFU mode device
[*] Getting device info...
ERROR: Unable to connect to device
ERROR: Unable to connect to device
ERROR: Unable to connect to device

[IOKit] Waiting for the USB handle with VID: 0x5AC, PID: 0x1227
CPID: 0x8003
Found the USB handle.
Stage: PATCH
ret: false

i am trying to put device on dfu mode from recovery screen its not working i followed same steps
i have iphone 7 plus

Everytime I try to downgrade I have to download new ipsw because the script isnt detecting the ipsw which is in ipsw folder

I followed all the steps and installed all the required files, the whole process goes smoothly till i get to futurerestore command. I press enter and it tells me "cant init, no device found". I don't understand how it cant find my phone even though it was detected the whole way. If there's a fix for this, please, tell me!

Attempting to downgrade my iPhone 7 (currently on iOS 15.6.1) to 14.3 using a hackintosh running macOS Sonoma, and I just get the following

[*] Command ran: ./downr1n.sh --downgrade 14.3
Cloning into 'ramdisk'...
[*] Downloading futurerestore please wait...
Archive:  futurerestore-macOS-RELEASE.zip
  inflating: futurerestore-macOS-v2.0.0-test-Build_308-RELEASE.tar.xz  
x futurerestore
fatal: not a git repository (or any of the parent directories): .git

mv: rename gaster to /Users/clark/Desktop/ok/binaries/Darwin/: No such file or directory)

does this on both of my MacBooks one on 10.13 one on 10.15

Any chances to fix deep sleep for A8X devices?
In my case it goes deep sleep right away after screen is locked and I have to wait while it's fully discharged.

Once future restore starts restoring and after red yellow green display blinking I'm getting next error:

Personalizing IMG4 component iBoot...
Personalizing IMG4 component RestoreSEP...
Personalizing IMG4 component SEP...
Sending NORData now...
Done sending NORData
Checkpoint 1545 complete with code 0
Checkpoint 1683 complete with code 0
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Unmounting filesystems (29)
Checkpoint 1637 complete with code 0
Checkpoint 1556 complete with code 0
Checkpoint 1686 complete with code 0
Checkpoint 1620 complete with code 0
Checkpoint 1687 complete with code 0
Checkpoint 1557 complete with code 0
About to send FDR Trust data...
Sending FDR Trust data now...
Done sending FDR Trust Data
Checkpoint 1558 complete with code 0
Checkpoint 1559 complete with code 0
Checkpoint 1560 complete with code 0
Checking for uncollected logs (44)
Checkpoint 1561 complete with code 0
Checking for uncollected logs (44)
ERROR: Could not read data (-256). Aborting.
ReverseProxy[Ctrl]: (status=2) Terminated
Cleaning up...
[exception]:
what=ERROR: Unable to restore device

code=92995638
line=1419
file=/tmp/Builder/repos/futurerestore/src/futurerestore.cpp
commit count=308
commit sha  =9554c0068dc50e141872ced5da2bd95baa595805
Done: restoring failed!

if nothing works just try to run (with sudo or without) this command: /home/user/downr1n/binaries/Linux/futurerestore -t blobs/iPad5,3-14.3.shsh2 --use-pwndfu --skip-blob --rdsk work/rdsk.im4p --rkrn work/krnl.im4p --latest-sep --no-baseband ipsw/iPad_64bit_TouchID_14.3_18C66_Restore.ipsw
if futurerestore restore sucess, you can boot using  --boot

Tried this command. With sudo getting:

Futurerestore is up to date!
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket blobs/iPad5,3-14.3.shsh2 is done
User specified to use latest signed SEP
Segmentation fault 

Without sudo same as initially.

Trying to downgrade ipad air 2 from 15.7.8 to 14.1 (14.3 tried as well, same errors)
Ubuntu 22.04.03, default python 3.10

./downr1n.sh: 第 1205 行：18249 Killed: 9 "$dir"/iBoot64Patcher work/iBSS.dec work/iBSS.patched > /dev/null

macOS 12.6.5

I have a friend who has an amd processor and I want to know if this will work?

tranthanhtu@tranthanhtu-VivoBook-15-ASUS-Laptop-X507MA-X507MA:~/Desktop/downr1n$ ./binaries/Linux/futurerestore -t blobs/iPhone9,2-14.3.shsh --use-pwndfu --skip-blob --rdsk work/rdsk.im4p --rkrn work/krnl.im4p --latest-sep --latest-baseband ipsw/iPhone_5.5_P3_14.3_18C66_Restore.ipsw
Version: v2.0.0-test(ca45da2fb075ccf2921bbc04d5aef74e3e71b743-304)
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f-DEBUG
libipatcher version: 0.88-1e855d70c84419014e363bdbcaead7b145fe3e1f-DEBUG
Odysseus for 32-bit support: yes
Odysseus for 64-bit support: yes
Checking for updates...
Error: Futurerestore is outdated! Please download the latest futurerestore! exitting...

hello, I got the following issue while running the --downgrade, And it's stuck on "Mounting filesystems".

device: iPhone SE iOS 12.2

000167.803994 wlan0.A[31] handleAdjustBusy@1551:AdjustBusy timeout in 120000 ms!

iPhone 6sp was downgraded to 13.6 and fingerprint cannot be used. Downgraded to 14.2, fingerprint can be used. Which version of IOS 13 can use fingerprint? Thanks!