fanbeifan/downr1n

downgrade tethered checkm8 idevices ios 14, 15.

downr1n

Downr1n enables tethered downgrades of checkm8 iOS devices to iOS 15, 14 and 13.

In general, dual booting is a better option than downgrading if you have the necessary storage. if you activate the localboot path it would be ultra better believe me xd.

Usage

1: Download the IPSW file and place it in the ipsw/ directory.

2: Execute the script without using 'sudo' on Linux. if it doesn't work please use sudo then.

Example: ./downr1n.sh --downgrade 14.3

The various command-line options are as follows:

  --downgrade        : Downgrade your device to iOS 14 tethered.

  --dfuhelper        : A helper tool to transition A11 devices from recovery mode to DFU mode.

  --jailbreak        : Jailbreak with pogo. Usage: `./downr1n.sh --jailbreak 14.8`.

  --taurine          : Jailbreak with taurine. Usage: `./downr1n.sh --jailbreak 14.3 --taurine`.

  --boot             : Boot the device.

  --keyServer         use this option to downgrade when the keys server is in problem. only on MacOS. use ex: --downgrade 14.8 --keyServer 

  --dont-restore     : Avoids using futurerestore, this can be used to only create boot files. Example: `--downgrade 14.3 --dont-restore`.

  --fixBoot          : Boots the device using fsboot.

  --debug            : Debug the script.

---

Dependencies

• please execute this command: python3 -m pip install pyimg4[compression] fastapi aiohttp ujson wikitextparser uvicorn.
• A disabled passcode on A10 and A11 devices.
• unzip, python3, libimobiledevice-utils, libusbmuxd-tools, xz-utils.
• An .iPSW file containing iOS 15, 14, 13.
• A device running macOS or a Linux distro. It is recommended to use macOS, as it is likely more stable and faster.

Issues Putting Device in PwnDFU Mode

• A DFU mode exists where the device's screen is black. However, when downgrading the device, recovery mode also turns black. To put the device into PwnDFU mode, you need to put it into real DFU mode by pressing poweroff+(volume down or home button). Look for a tutorial on YouTube to understand how. Once in PwnDFU mode, execute ./binaries/$(uname)/gaster pwn to succeed. If the device is not in DFU mode, it will loop.

importants things

• downgrading ios 16 to 14 or another version, you will have to bypass the setup somehow. good luck on it.

• on ios 13 the touch id doesn't work so the home button on iphone 7 will not work sadly.

• you can't downgrade to ios 14.2 lower on a11 devices

Warnings

• I am NOT responsible for any data loss. The user of this program accepts responsibility should something happen to their device. If your device is stuck in recovery, please run one of the following:
  • futurerestore --exit-recovery
  • irecovery -n

fix some problems

• please execute wikiproxy.py manually if it gives problem with server key. for ex: sudo python3 wikiproxy.py

• if the error still after above fix, if this happend to you when you are downgrading with futurerestore again please add this arg --keyServer for example ./downr1n.sh --downgrade 14.5 --keyServer.

• remember if you will use the next command or will activate localboot it is better that you first downgrade and when you success you can use --jailbreak to jailbreak the device and it will ask you to activate localboot path. why do this because the localboot need to be executed after --jailbreak

Need Help?

• Join my discord server: Dualra1nServer

How to Jailbreak?

• Jailbreak with dualra1n-loader: ./downr1n --jailbreak (YourVer = 14.3). Note: this does not actually jailbreak the device. When I say "jailbreak," I'm referring to the process of installing Sileo and bootstrapping the device. Dualra1n-loader only installs Sileo and bootstraps with the kernel patch.

• Taurine: ./downr1n --jailbreak (YourVer = 14.3) --taurine. Note: this is not recommended.

This project was created with love by Edwin :)

Credits

• thanks to uckermark for the amazing dualra1n-loader

• thanks to sasa for the code of download futurerestore ;|

Other credits for tools and codes used in downr1n

• wikiproxy.py.

• futurerestore without futurerestore it couldn't be downgraded.

• palera1nLegacy some code based on palera1n legacy.

• exploit for asrpatcher

• iSuns9 thank you for restored_external64patcher

• Nathan for the ramdisk

• m1sta for pyimg4

• tihmstar for pzb/original iBoot64Patcher/original liboffsetfinder64/img4tool

• xerub for img4lib and restored_external in the ramdisk

• libimobiledevice for several tools used in this project (irecovery, ideviceenterrecovery etc), and nikias for keeping it up to date

• Ralp0045 amazing dtree_patcher and kernel64patcher ;)

• mineek because the original idea.