matthewpierson/vieux

Vieux - A tool for 32/64 Bit iOS downgrades using OTA Blobs

Vieux - A tool for 32/64 Bit iOS downgrades using OTA Blobs

By - Matty (Twitter - @moski_dev)

With help from - Merc (Twitter - @Vyce_Merculous)

---

Requirements

A MacOS machine (Hackintosh or legit Mac) running 10.14.x or higher (VM's DO NOT WORK, CHECKM8 DOESN'T WORK IN A VM)

Compatible iOS device - If your device is 32 Bit it needs to be jailbroken with OpenSSH installed (Some devices need a reboot and rejailbreak after installing OpenSSH)

The ability to read this README

---

Device support

iOS 10.3.3

iPhone 5s, iPad Air, iPad Mini 2 (Not iPad4,6)

iOS 8.4.1

iPhone 5, iPhone 4s, iPad 2, iPad 3, iPad 4, iPad Mini 1, iPod 5

iOS 6.1.3

iPhone 4s, iPad 2 (Not iPad2,4)

---

Usage

Usage: viuex [OPTIONS] [IPSW PATH (If required)]

Options:

  -i, --ipsw PATH		Path to IPSW file
  -c, --clean			  Clean up any leftover files
  -k, --kdfu PATH		"Path/To/patchiBSS" Enter KDFU mode (32 Bit Only, device must be jailbroken)
  -l, --list			  List what devices can be restored to what iOS versions
  -p, --pwn           Enter PWNDFU mode, which will also apply sig patches (64 Bit Only)
  -r, --restore		  "Path/To/.ipsw" Just restore to a custom ipsw
  -s, --shsh PATH	  "Path/To/Save/Location/" Save OTA blobs to a given path for future use (64 Bit Only)
  -v, --version			List the version of the tool
  -y, --credits			List credits and Big Yoshi

---

Installing dependencies

Needs Python3 (At least 3.5)

Also needs Python2 but that comes default with macOS

Run 'pip3 install -r requirements.txt' to install all dependencies

---

Instructions

1. 'pip3 install -r requirements.txt' to install all dependencies
2. 'cd' into the 'Vieux' folder that you either git cloned or downloaded
3. run './vieux -i "PATH/TO/.ipsw"' or, if the that command doesn't work, 'python3 vieux -i "PATH/TO/.ipsw"'
4. Follow what the tool tells you to do
5. Profit?

---

F.A.Q

How do I use this tool?

If you have a 64 Bit device (iPhone 5s, iPad Mini 2, iPad Air) then just connect your device in DFU mode and run the tool, if you have a 32 Bit device then just connect the device in Normal mode, NOT DFU MODE, and run the tool!

What devices does this support/when will it support my iPad XX or iPhone XX?

See above, all compatible devices are already supported. No other devices will ever be supported for the 10.3.3 downgrade. Ever.

Why does the tool not run?

Make sure you have ran "pip3 install -r requirements.txt" before attempting to use this tool. If that doesn't fix the issue, take a screen shot of the error and create an issue on the Github page.

When will other OS's be supported? E.G Linux, Windows, etc...

There will most likely never be Windows support as Windows is an awful OS for any iOS related stuff. Linux support is possible and will most likely come at a later date. macOS only for now, Mojave is best but Catalina works. Lower then Mojave is untested and officially unsupported but feel free to try, just don't expect any help from me if it doesn't work.

Why should I use this over other older methods?

This is by far the fastest tool for OTA downgrades on the market, plus no other tool can do both 32 and 64 Bit downgrades. Also this tool "Just Works (TM)" so there is no reason not to try it!

How can I get help with an error/issue that I can't figure out?

If you have tried everything mentioned in this readme, you can either open an issue on the Github page, tweet @ me (@mosk_i) or send me a DM on twitter (@mosk_i).

Please include as much detail as you can, including but not limited to - Full log from the tool, macOS version, device model/iOS version you are trying to downgrade to and what you have already tried.

MacOS Catalina Security Issues

In MacOS Catalina, there is a new security feature that causes issues with the script. There are two methods to fix this issue as seen below -

Fix 1:

The issue is that Vieux will call certain binaries, and Catalina will display a security message saying: "... cannot be opened because the developer cannot be verified". You will be presented with two options, Move to Trash or Cancel, and you will end up needing to click on Cancel. To avoid this issue, you must give permission to these binaries so that they can run. The easiest way to do so is:

1. Go to the folder Vieux/resources/bin;
2. Ctrl-click on the first binary (futurerestore) and select Open;
3. You will see a security message from Catalina that now has the option Open, click on it;
4. A terminal window will open and do some stuff, you can close it;
5. Repeat steps 2-4 for all other binaries in the folder: igetnonce, irecovery and tsschecker. By doing this process, the binaries are saved as an exception on the security settings, and the main Vieux script will be able to run without facing this issue. Note that if you have tried running the script and encountered this issue, you might need to reset your ipad for the downgrade to work.

Fix 2:

1. Open the 'Vieux' folder in terminal;
2. Run './CatalinaFix.sh';
3. Give your password when prompted;
4. Run Vieux again after the script has finished.

Thanks to Salompas for fix 1 and to riotdream for fix 2/their alternative fix seen here!

How do you pronounce "Vieux"?

"vyuh" apparently, I've had 5 different pronunciations given to me, it's French for "old" which fits well with the old iOS versions this tool downgrades devices to! Not that iOS 6/8/10 are bad at all, even given their age.

---

Credits

@axi0mX - Checkm8/ipwndfu

@tihmstar - Futurerestore/tsschecker

@linushenze - SecureROM Signature Check Remover

@geohotz - Fork of ipwndfu ported to Python3

@Vyce_Merculous - General help/Cleaning up my messy code

@xerusdesign - Testing

Schnob - Testing/Fixing non-cellular iPad support

---

vieux's Issues

usb.core.USBError: [Errno None] Other error

Last login: Fri Dec 20 15:27:20 on console
MacBook-Rodomir:~ rodomirholod$ pip3 install -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt
Requirement already satisfied: bcrypt==3.1.7 in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (from -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt (line 1)) (3.1.7)
Requirement already satisfied: bsdiff4==1.1.9 in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (from -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt (line 2)) (1.1.9)
Requirement already satisfied: cffi==1.13.2 in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (from -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt (line 3)) (1.13.2)
Requirement already satisfied: cryptography==2.8 in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (from -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt (line 4)) (2.8)
Requirement already satisfied: paramiko==2.7.0 in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (from -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt (line 5)) (2.7.0)
Requirement already satisfied: pycparser==2.19 in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (from -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt (line 6)) (2.19)
Requirement already satisfied: PyNaCl==1.3.0 in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (from -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt (line 7)) (1.3.0)
Requirement already satisfied: pyusb==1.0.2 in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (from -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt (line 8)) (1.0.2)
Requirement already satisfied: scp==0.13.2 in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (from -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt (line 9)) (0.13.2)
Requirement already satisfied: six==1.13.0 in /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages (from -r /Users/rodomirholod/Desktop/Vieux-master/requirements.txt (line 10)) (1.13.0)
MacBook-Rodomir:~ rodomirholod$ cd /Users/rodomirholod/Desktop/Vieux-master
MacBook-Rodomir:Vieux-master rodomirholod$ /Users/rodomirholod/Desktop/Vieux-master/vieux -i /Users/rodomirholod/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw

                                           /(//* /                         
                                        /(%@&/*((//*/                      
                                     (((((* %(&@@(*,///                    
                                   ((,((((((((/%%/,/(///                   
                                 ((((((((/*.((((////////**                 
                                (((((((((((((((((///////**.                
                                ((((((((((((((((//////*** .                
                                ((((((((((((((//*//(%#(/*..               
                                (((((((((((////** /%%#(* .                 
                                 (////////////**..##(/* ..                
                                *(/*******,,,,...,* ,...***.               
                               *(((&@@*.......*/***/////(//*////           
                           *** /((#@@@@@@@@@@@@@@@(///(((/**/*///          
                         #&(***/((%@@@@@@@@@@@@@@@(/((((// *****           
                        ((((%(*/((#@@@@@@@@@@@@@@@@((((//****              
                         (((((////(&@@@@@@@@@@@@@(((((//*,,,,           
                          ((((.//* %&&@@&&@@&((((////,.,,/((*          
                           (((/* **(%%&&&&&&&((((//**/** ((//            
                            (((((* ./##%%%%#((///**#&*******           
                             /((*      */(((/****/(((((#(**             
                                                 *(((((((              
                                                  (((((((*               
                                                 *((((((*                 
                                                   (((((                  

Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Files cleaned.
/Users/rodomirholod/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Traceback (most recent call last):
File "/Users/rodomirholod/Desktop/Vieux-master/vieux", line 73, in
ipsw.unzipIPSW(argv[2])
File "/Users/rodomirholod/Desktop/Vieux-master/ipsw.py", line 153, in unzipIPSW
pwndfumode()
File "/Users/rodomirholod/Desktop/Vieux-master/restore.py", line 22, in pwndfumode
device = dfu.acquire_device()
File "/Users/rodomirholod/Desktop/Vieux-master/resources/ipwndfu/dfu.py", line 23, in acquire_device
usb.util.claim_interface(device, 0)
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/util.py", line 205, in claim_interface
device._ctx.managed_claim_interface(device, interface)
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/core.py", line 102, in wrapper
return f(self, *args, **kwargs)
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/core.py", line 167, in managed_claim_interface
self.backend.claim_interface(self.handle, i)
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/backend/libusb1.py", line 811, in claim_interface
_check(self.lib.libusb_claim_interface(dev_handle.handle, intf))
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/backend/libusb1.py", line 595, in _check
raise USBError(_strerror(ret), ret, _libusb_errno[ret])
usb.core.USBError: [Errno None] Other error
MacBook-Rodomir:Vieux-master rodomirholod$ python 3 /Users/rodomirholod/Desktop/Vieux-master/vieux -i /Users/rodomirholod/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw
python: can't open file '3': [Errno 2] No such file or directory
MacBook-Rodomir:Vieux-master rodomirholod$ python 3 /Users/rodomirholod/Desktop/Vieux-master/vieux -i /Users/rodomirholod/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw
python: can't open file '3': [Errno 2] No such file or directory
MacBook-Rodomir:Vieux-master rodomirholod$ python3 /Users/rodomirholod/Desktop/Vieux-master/vieux -i /Users/rodomirholod/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw

                                           /(//* /                         
                                        /(%@&/*((//*/                      
                                     (((((* %(&@@(*,///                    
                                   ((,((((((((/%%/,/(///                   
                                 ((((((((/*.((((////////**                 
                                (((((((((((((((((///////**.                
                                ((((((((((((((((//////*** .                
                                ((((((((((((((//*//(%#(/*..               
                                (((((((((((////** /%%#(* .                 
                                 (////////////**..##(/* ..                
                                *(/*******,,,,...,* ,...***.               
                               *(((&@@*.......*/***/////(//*////           
                           *** /((#@@@@@@@@@@@@@@@(///(((/**/*///          
                         #&(***/((%@@@@@@@@@@@@@@@(/((((// *****           
                        ((((%(*/((#@@@@@@@@@@@@@@@@((((//****              
                         (((((////(&@@@@@@@@@@@@@(((((//*,,,,           
                          ((((.//* %&&@@&&@@&((((////,.,,/((*          
                           (((/* **(%%&&&&&&&((((//**/** ((//            
                            (((((* ./##%%%%#((///**#&*******           
                             /((*      */(((/****/(((((#(**             
                                                 *(((((((              
                                                  (((((((*               
                                                 *((((((*                 
                                                   (((((                  

Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Files cleaned.
/Users/rodomirholod/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Traceback (most recent call last):
File "/Users/rodomirholod/Desktop/Vieux-master/vieux", line 73, in
ipsw.unzipIPSW(argv[2])
File "/Users/rodomirholod/Desktop/Vieux-master/ipsw.py", line 153, in unzipIPSW
pwndfumode()
File "/Users/rodomirholod/Desktop/Vieux-master/restore.py", line 22, in pwndfumode
device = dfu.acquire_device()
File "/Users/rodomirholod/Desktop/Vieux-master/resources/ipwndfu/dfu.py", line 23, in acquire_device
usb.util.claim_interface(device, 0)
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/util.py", line 205, in claim_interface
device._ctx.managed_claim_interface(device, interface)
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/core.py", line 102, in wrapper
return f(self, *args, **kwargs)
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/core.py", line 167, in managed_claim_interface
self.backend.claim_interface(self.handle, i)
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/backend/libusb1.py", line 811, in claim_interface
_check(self.lib.libusb_claim_interface(dev_handle.handle, intf))
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/backend/libusb1.py", line 595, in _check
raise USBError(_strerror(ret), ret, _libusb_errno[ret])
usb.core.USBError: [Errno None] Other error
not worked.
I ask for help in solving this problem

iPad Air can not be recognized

Hello! Matty! I'm running on MacBook Pro Mojave 10.14.6. Why can't I connect the iPad Air that I have entered DFU mode.

Vincents-MacBook-Pro:Vieux-master root# python3 vieux -i /Users/vincent/Downloads/ipad.ipsw
Given IPSW Path is /Users/vincent/Downloads/ipad.ipsw
Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
No device found in DFU mode, assuming device to be 32 Bit...
No valid 32 Bit information found. Exiting...
Vincents-MacBook-Pro:Vieux-master root#

From DUF mode to power on

Every time to Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:0000078F889FA908 IBFL:1C SRTG:[iBoot-1704.10]

The iPhone will automatically disconnect DFU mode and turn on automatically

log

Given IPSW Path is ./14G60.ipsw
Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:0000078F889FA908 IBFL:1C SRTG:[iBoot-1704.10]
^@ERROR: No Apple device in DFU Mode 0x1227 detected after 30.00 second timeout. Exiting.

zlib.error: Error -3 while decompressing data: invalid block type

Could you please help?
File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/zipfile.py", line 1619, in extractall
self._extract_member(zipinfo, path, pwd)
File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/zipfile.py", line 1674, in _extract_member
shutil.copyfileobj(source, target)
File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/shutil.py", line 79, in copyfileobj
buf = fsrc.read(length)
File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/zipfile.py", line 899, in read
data = self._read1(n)
File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/zipfile.py", line 975, in _read1
data = self._decompressor.decompress(data, n)
zlib.error: Error -3 while decompressing data: invalid block type

Return code: 253

The restoring failed with return code: 253

It will restart the phone every times when output “Found: CPID:8960 CPRV:11 ~~~”

It will restart the phone every times when output :
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:00000737F3C551D0 IBFL:1C SRTG:[iBoot-1704.10]
And then will output:
ERROR: No Apple device in DFU Mode 0x1227 detected after 30.00 second timeout. Exiting.

this supported on mac os 10.13 ?

need answer

iphone5s Already in DFU

error：

No device found in DFU mode, assuming device to be 32 Bit...
No valid 32 Bit information found. Exiting...

AssertionError Segmentation fault: 11

hi, i have a problem with your tool vieux... I'm trying to downgrade my iPhone 5S currently with iOS 12.4.3 to iOS 10.3.3, i've followed all your requirements in the github page but it gave me an error and I dont't know what's causing it.

OS 10.15.2 MacBook Pro Retina Mid 2012

log:

./vieux -i "iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw"

                                           /(//* /                         
                                        /(%@&/*((//*/                      
                                     (((((* %(&@@(*,///                    
                                   ((,((((((((/%%/,/(///                   
                                 ((((((((/*.((((////////**                 
                                (((((((((((((((((///////**.                
                                ((((((((((((((((//////*** .                
                                ((((((((((((((//*//(%#(/*..               
                                (((((((((((////** /%%#(* .                 
                                 (////////////**..##(/* ..                
                                *(/*******,,,,...,* ,...***.               
                               *(((&@@*.......*/***/////(//*////           
                           *** /((#@@@@@@@@@@@@@@@(///(((/**/*///          
                         #&(***/((%@@@@@@@@@@@@@@@(/((((// *****           
                        ((((%(*/((#@@@@@@@@@@@@@@@@((((//****              
                         (((((////(&@@@@@@@@@@@@@(((((//*,,,,           
                          ((((.//* %&&@@&&@@&((((////,.,,/((*          
                           (((/* **(%%&&&&&&&((((//**/** ((//            
                            (((((* ./##%%%%#((///**#&*******           
                             /((*      */(((/****/(((((#(**             
                                                 *(((((((              
                                                  (((((((*               
                                                 *((((((*                 
                                                   (((((                  

Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in NORMAL mode
Files cleaned.
iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Traceback (most recent call last):
File "./vieux", line 79, in
ipsw.unzipIPSW(argv[2])
File "/Users/Mac/Desktop/Vieux/Vieux/ipsw.py", line 153, in unzipIPSW
pwndfumode()
File "/Users/Mac/Desktop/Vieux/Vieux/restore.py", line 22, in pwndfumode
device = dfu.acquire_device()
File "/Users/Mac/Desktop/Vieux/Vieux/resources/ipwndfu/dfu.py", line 20, in acquire_device
for device in usb.core.find(find_all=True, idVendor=0x5AC, idProduct=0x1227, backend=backend):
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/usb/core.py", line 1263, in find
raise NoBackendError('No backend available')
usb.core.NoBackendError: No backend available

ERROR: No Apple device in DFU mode 0x1227

Describe the issue
I keep getting the error below every time I try to run Vieux...
"ERROR: No Apple device in DFU mode 0x1227 detected after 30.00 second timeout. Exiting."

I verified that the device is indeed in DFU mode using checkra1n which shows...
"iPhone 5S (GSM) connected in DFU mode."

Terminal Output
#################################################################
SwiftMoves-Mac:Vieux SwiftMove$ ./vieux -i 10.3.3.ipsw

                                           /(//* /                         
                                        /(%@&/*((//*/                      
                                     (((((* %(&@@(*,///                    
                                   ((,((((((((/%%/,/(///                   
                                 ((((((((/*.((((////////**                 
                                (((((((((((((((((///////**.                
                                ((((((((((((((((//////*** .                
                                ((((((((((((((//*//(%#(/*..               
                                (((((((((((////** /%%#(* .                 
                                 (////////////**..##(/* ..                
                                *(/*******,,,,...,* ,...***.               
                               *(((&@@*.......*/***/////(//*////           
                           *** /((#@@@@@@@@@@@@@@@(///(((/**/*///          
                         #&(***/((%@@@@@@@@@@@@@@@(/((((// *****           
                        ((((%(*/((#@@@@@@@@@@@@@@@@((((//****              
                         (((((////(&@@@@@@@@@@@@@(((((//*,,,,           
                          ((((.//* %&&@@&&@@&((((////,.,,/((*          
                           (((/* **(%%&&&&&&&((((//**/** ((//            
                            (((((* ./##%%%%#((///**#&*******           
                             /((*      `*/(((/****/(((((#(**`             
                                                 *(((((((              
                                                  (((((((*               
                                                 *((((((*                 
                                                   (((((                  

Vieux - A tool for 32/64 Bit OTA downgrades

Current version is: 1.0
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in NORMAL mode
Files cleaned.
10.3.3.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:0000020E0E196F24 IBFL:1C SRTG:[iBoot-1704.10]
ERROR: No Apple device in DFU Mode 0x1227 detected after 30.00 second timeout. Exiting.
Place the device into DFU mode again and re-run Vieux
SwiftMoves-Mac:Vieux SwiftMove$
#################################################################

Computer

• VMware Workstation v14.1.5
• MacOS 10.14.4 Mojave
• Python v3.8.0
• Vieux v1.0

iOS Device (please complete the following information):

• Device: iPhone 6,1
• Desired Version: iOS 10.3.3

Unable to get SEPNonce from lockdownd

Apparently I did all the steps but it gives this error and I don't know whether it affects or not. Because I cannot downgarde as if it will give me this error
ERROR: SSH/SCP failed, (need to add more details in this part)

So do I have to jailbreak my phone or something?

usb.core.NoBackendError

I got this error, tried on 2 different MacBook (macOS 10.15):

`XXXXXXXXXX:Vieux-master silvio$ ./vieux -i "/Users/silvio/Downloads/iPad_64bit_10.3.3_14G60_Restore.ipsw"

                                           /(//* /                         
                                        /(%@&/*((//*/                      
                                     (((((* %(&@@(*,///                    
                                   ((,((((((((/%%/,/(///                   
                                 ((((((((/*.((((////////**                 
                                (((((((((((((((((///////**.                
                                ((((((((((((((((//////*** .                
                                ((((((((((((((//*//(%#(/*..               
                                (((((((((((////** /%%#(* .                 
                                 (////////////**..##(/* ..                
                                *(/*******,,,,...,* ,...***.               
                               *(((&@@*.......*/***/////(//*////           
                           *** /((#@@@@@@@@@@@@@@@(///(((/**/*///          
                         #&(***/((%@@@@@@@@@@@@@@@(/((((// *****           
                        ((((%(*/((#@@@@@@@@@@@@@@@@((((//****              
                         (((((////(&@@@@@@@@@@@@@(((((//*,,,,           
                          ((((.//* %&&@@&&@@&((((////,.,,/((*          
                           (((/* **(%%&&&&&&&((((//**/** ((//            
                            (((((* ./##%%%%#((///**#&*******           
                             /((*      */(((/****/(((((#(**             
                                                 *(((((((              
                                                  (((((((*               
                                                 *((((((*                 
                                                   (((((                  

Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in NORMAL mode
Files cleaned.
/Users/silvio/Downloads/iPad_64bit_10.3.3_14G60_Restore.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..

Traceback (most recent call last):
File "./vieux", line 79, in
ipsw.unzipIPSW(argv[2])
File "/Users/silvio/Downloads/Vieux-master/ipsw.py", line 153, in unzipIPSW
pwndfumode()
File "/Users/silvio/Downloads/Vieux-master/restore.py", line 22, in pwndfumode
device = dfu.acquire_device()
File "/Users/silvio/Downloads/Vieux-master/resources/ipwndfu/dfu.py", line 20, in acquire_device
for device in usb.core.find(find_all=True, idVendor=0x5AC, idProduct=0x1227, backend=backend):
File "/Library/Python/3.7/site-packages/usb/core.py", line 1263, in find
raise NoBackendError('No backend available')
usb.core.NoBackendError: No backend available`

Error... Return Code 211

Iphone5S

Please enter the root password to your device (Default is 'alpine')

Connecting to device via SSH...
ERROR: SSH/SCP failed, (need to add more details in this part)
Exiting...

ValueError: The device has no langid

Model: ipad Air

Traceback (most recent call last):
File "./vieux", line 48, in
ipsw.unzipIPSW(path)
File "/Users/song/Desktop/Vieux-master/ipsw.py", line 113, in unzipIPSW
pwndfumode()
File "/Users/song/Desktop/Vieux-master/restore.py", line 26, in pwndfumode
runexploit = checkm8.exploit()
File "/Users/song/Desktop/Vieux-master/resources/ipwndfu/checkm8.py", line 531, in exploit
device.serial_number
File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/usb/core.py", line 830, in serial_number
self._serial_number = util.get_string(self, self.iSerialNumber)
File "/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/usb/util.py", line 314, in get_string
raise ValueError("The device has no langid")
ValueError: The device has no langid

Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Found device in DFU mode [Error] unsupported device mode, please put device in recovery mode or normal mode [Error] Fail code=-3 Failed with errorcode=-3 ERROR.. Return code: 253 Restore Failed. Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists Exiting... inyhrs-iMac:Vieux-master inyhr$

5s 6,1 10.3.3
catalina

[Problem]Is it possible to support iPhone6s (Soc-S8000) in the future?

iPhone6s
S8000

ERROR.. Return code: 249

Hello, help me.
macOS Mojave 10.14.5 iPhone 5s (6,2 ) iOS 12.4.1

Version: c0b554e83f54d39d90cac9791160bf2ccb062aed - 355 [TSSC] manually specified ECID to use, parsed "000002••••" to dec:2981450•••••• hex:2••••••• [Error] [TSSC] manually specified ApNonce=None, but parsing failed

`Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:00000••••••••• IBFL:1C SRTG:[iBoot-1704.10]
Device is now in pwned DFU Mode.
(14.88 seconds)
Exploit worked!
*** SecureROM Signature check remover by Linus Henze ***
Applying patches...
Successfully applied patches

Starting iBSS/iBEC patching
Looks like you are downgrading an iPhone 5s to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
Getting SHSH...
ERROR: Unable to discover device mode. Please make sure a device is attached.
ERROR: Couldn't get ApNonce from device
Version: c0b554e83f54d39d90cac9791160bf2ccb062aed - 355
[TSSC] manually specified ECID to use, parsed "000002••••••" to dec:298145•••••• hex:2b62c4••••••
[Error] [TSSC] manually specified ApNonce=None, but parsing failed

ERROR..
Return code: 249
SHSH Saving Failed.
Please try again and report the error/full logs and the 'errorlogshsh.txt' file if it persists.
Exiting...
`

Issue on iPad mini 2 - Won't recognize DFU mode

Hello, I tried multiple time but it keep saying :

No device found in DFU mode, assuming device to be 32 Bit...

I'm in iPad mini 2.

After that I get a crash from terminal :

Process: igetnonce [13889]
Path: /Users/USER/Desktop/*/igetnonce
Identifier: igetnonce
Version: ???
Code Type: X86-64 (Native)
Parent Process: Python [13877]
Responsible: Terminal [565]
User ID: 501

Date/Time: 2019-12-13 17:39:23.334 -0500
OS Version: Mac OS X 10.11.6 (15G22010)
Report Version: 11
Anonymous UUID: 8CE5518A-ECBE-C96F-225B-72217A77D65D

Time Awake Since Boot: 1200 seconds

System Integrity Protection: disabled

Crashed Thread: 0

Exception Type: EXC_CRASH (Code Signature Invalid)
Exception Codes: 0x0000000000000000, 0x0000000000000000

kernel messages:

VM Regions Near 0x10d4e096b (cr2):
-->
mapped file 000000010ef21000-000000010f15c000 [ 2284K] r-x/r-x SM=COW /Users/USER/Desktop/*

Thread 0 Crashed:
0 dyld 0x00007fff691fe000 _dyld_start + 0

Thread 0 crashed with X86 Thread State (64-bit):
rax: 0x000000000000000d rbx: 0x0000000000000000 rcx: 0x0000000000000000 rdx: 0x0000000000000000
rdi: 0x0000000000000000 rsi: 0x0000000000000000 rbp: 0x0000000000000000 rsp: 0x00007fff50cdeb80
r8: 0x0000000000000000 r9: 0x0000000000000000 r10: 0x0000000000000000 r11: 0x0000000000000000
r12: 0x0000000000000000 r13: 0x0000000000000000 r14: 0x0000000000000000 r15: 0x0000000000000000
rip: 0x00007fff691fe000 rfl: 0x0000000000000201 cr2: 0x000000010d4e096b

Logical CPU: 0
Error Code: 0x0200003b
Trap Number: 133

Binary Images:
0x7fff691fd000 - 0x7fff69234a47 dyld (???) <6B9CD3BA-2D60-3629-A0CB-AB810F55E8DD> /usr/lib/dyld

External Modification Summary:
Calls made by other processes targeting this process:
task_for_pid: 0
thread_create: 0
thread_set_state: 0
Calls made by this process:
task_for_pid: 0
thread_create: 0
thread_set_state: 0
Calls made by all processes on this machine:
task_for_pid: 547
thread_create: 0
thread_set_state: 0

VM Region Summary:
ReadOnly portion of Libraries: Total=308K resident=0K(0%) swapped_out_or_unallocated=308K(100%)
Writable regions: Total=8436K written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=8436K(100%)

                            VIRTUAL   REGION 

REGION TYPE SIZE COUNT (non-coalesced)
=========== ======= =======
STACK GUARD 56.0M 2
Stack 8192K 2
VM_ALLOCATE 4K 2
VM_ALLOCATE (reserved) 12K 2 reserved VM address space (unallocated)
__DATA 240K 3
__LINKEDIT 84K 2
__TEXT 224K 2
mapped file 3080K 4
shared memory 8K 3
=========== ======= =======
TOTAL 67.6M 13
TOTAL, minus reserved VM space 67.6M 13

Model: MacBookPro5,4, BootROM MBP53.00AC.B03, 2 processors, Intel Core 2 Duo, 2,53 GHz, 8 GB, SMC 1.49f2
Graphics: NVIDIA GeForce 9400M, NVIDIA GeForce 9400M, PCI, 256 MB
Memory Module: BANK 0/DIMM0, 4 GB, DDR3, 1333 MHz, 0x0198, 0x393955353432382D3034362E4130304C4620
Memory Module: BANK 1/DIMM0, 4 GB, DDR3, 1333 MHz, 0x802C, 0x31364A54463531323634485A2D3147344D31
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x8D), Broadcom BCM43xx 1.0 (5.106.98.102.30)
Bluetooth: Version 4.4.6f4, 3 services, 18 devices, 2 incoming serial ports
Network Service: AirPort, AirPort, en1
Serial ATA Device: KINGSTON SKC300S37A480G, 480,1 GB
Serial ATA Device: MATSHITADVD-R UJ-868
USB Device: USB Bus
USB Device: Apple Internal Keyboard / Trackpad
USB Device: IR Receiver
USB Device: USB Bus
USB Device: BRCM2046 Hub
USB Device: Bluetooth USB Host Controller
USB Device: USB 2.0 Bus
USB Device: Card Reader
USB Device: USB 2.0 Bus
USB Device: Built-in iSight
USB Device: Apple Mobile Device (DFU Mode)
Thunderbolt Bus:

Also, iTunes recognize my iPad in DFU mode.

Need help on this one.

Thank you

Corret ipse PATH???

/Users/lolk/Desktop/iPad_64bit_10.3.3_14G60_Restore.ipsw is not a zip archive! Are you sure you inserted the correct ipsw path?

hi sir. sorry for this topic. why it said that?

i did the old way:

cd vieux
./vieux -i "PATH/TO/.ipsw"

and said PATH/TO/.ipsw is not a zip archive! Are you sure you inserted the correct ipsw path?

really I m a noob .... how can I use new method ? I don't understand new usage... PLS help me

Error: Exploit failed. Device did not enter DFU mode

Starting IPSW unzipping Continuing... IPSW found at given path... Cleaning up old files... Files cleaned. Unzipping.. Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000005F72B58B7B0 IBFL:1C SRTG:[iBoot-1704.10] ERROR: Exploit failed. Device did not enter pwned DFU Mode. (base) admins-imac:vieux-master admin$
I've tried using python3 instead of ./vieux

Return code :241 issue

hi sir. my mini 2 entered dfu mode finally but new issue:
Device is already in pwned DFU Mode. Not executing exploit.
Exploit worked!
*** SecureROM Signature check remover by Linus Henze ***
Applying patches...
Patches have already been applied. Exiting.

Starting iBSS/iBEC patching
Looks like you are downgrading an iPad Mini 2 to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
Getting SHSH...
Restoring...
Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore.
WARNING: Unable to find BbChipID node
ERROR..
Return code: 241
Restore Failed.
Please try again and report the error + full logs if it persists.
Exiting...

pls help me

Python Error while rebuilding IPSW

I'm on macOS Mojave 10.14.6 (rMBP 15" 2015) and I'm trying to downgrade my iPhone 5s.

This is the error I get:
Starting iBSS/iBEC patching Patched iBSS/iBEC About to re-build IPSW Traceback (most recent call last): File "./vieux", line 48, in <module> ipsw.unzipIPSW(path) File "/Users/mateusz/.Trash/Vieux/ipsw.py", line 111, in unzipIPSW createCustomIPSW64(fname, devicemodel) File "/Users/mateusz/.Trash/Vieux/ipsw.py", line 208, in createCustomIPSW64 if device == "iPhone5s": UnboundLocalError: local variable 'device' referenced before assignment

Here is a screenshot for more readability:

I've tried multiple times and I've even tried moving the IPSW to a different directory.
The python requirements are installed.

python issue with usb iPhone 5s

Traceback (most recent call last):
File "./vieux", line 48, in
ipsw.unzipIPSW(path)
File "/Users/user/Vieux/ipsw.py", line 110, in unzipIPSW
pwndfumode()
File "/Users/user/Vieux/restore.py", line 20, in pwndfumode
device = dfu.acquire_device()
File "/Users/hoangseidel/Vieux/resources/ipwndfu/dfu.py", line 16, in acquire_device
for device in usb.core.find(find_all=True, idVendor=0x5AC, idProduct=0x1227, backend=backend):
File "/usr/local/lib/python3.7/site-packages/usb/core.py", line 1263, in find
raise NoBackendError('No backend available')
usb.core.NoBackendError: No backend available

10.13.6 didn't work

I run this code in MAC 10.13.6,it seems that it not work ):

Return code 241

Hello Matthew,
Thank you first for all this work done.
I used until your update your old method, it worked on the ipad air that I manage for my work (only 10.3.3 in our school, I do not wonder why .... that's how it is, the chef said .....).

I tested "vieux", at home, several times, on my imac in 10.14.6 and I get this screen each time when the script is launched, or the ipad will come out of dfu mode and to boot normally after unzipping.

Two iPad Air A1474 tested on my imac, same results, once this error or once the ipad boot normally and the command stop.

A screenshot when return code 241

ps: sorry for my bad english, i'm french, but suddenly i love the name you chose for this tool

usb.core.USBError: [Errno None] Other error

hi , my ip5s 6,1 booted on dfu correctly but i got this error on Mojave 10.14.6 again and again . how to solve pls need reply :(

Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in NORMAL mode
Files cleaned.
/Users/kaajioi/Desktop/Vieux-master/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Traceback (most recent call last):
File "./vieux", line 79, in
ipsw.unzipIPSW(argv[2])
File "/Users/kaajioi/Desktop/Vieux-master/ipsw.py", line 153, in unzipIPSW
pwndfumode()
File "/Users/kaajioi/Desktop/Vieux-master/restore.py", line 22, in pwndfumode
device = dfu.acquire_device()
File "/Users/kaajioi/Desktop/Vieux-master/resources/ipwndfu/dfu.py", line 23, in acquire_device
usb.util.claim_interface(device, 0)
File "/usr/local/lib/python3.7/site-packages/usb/util.py", line 205, in claim_interface
device._ctx.managed_claim_interface(device, interface)
File "/usr/local/lib/python3.7/site-packages/usb/core.py", line 102, in wrapper
return f(self, *args, **kwargs)
File "/usr/local/lib/python3.7/site-packages/usb/core.py", line 167, in managed_claim_interface
self.backend.claim_interface(self.handle, i)
File "/usr/local/lib/python3.7/site-packages/usb/backend/libusb1.py", line 811, in claim_interface
_check(self.lib.libusb_claim_interface(dev_handle.handle, intf))
File "/usr/local/lib/python3.7/site-packages/usb/backend/libusb1.py", line 595, in _check
raise USBError(_strerror(ret), ret, _libusb_errno[ret])
usb.core.USBError: [Errno None] Other error
KaaJis-MacBook:Vieux-master kaajioi$

İpad mini 2 dfu mode issue

hi sir. I tried but ipad opens on the second try...
when I pressed the enter and my mini2 restart every time . did not started the downgrade. I use hackintosh. how can I fix?

Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken thingsIf you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Starting IPSW unzipping
Invalid filepath/filename.
Please try again with a valid filepath/filename.
Enter the path to the IPSW file (Or drag and drop the IPSW into this window):
/Users/lolk/Downloads/iPad_64bit_10.3.3_14G60_Restore.ipsw
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:000007758BBB7AD8 IBFL:1C SRTG:[iBoot-1704.10]
ERROR: Exploit failed. Device did not enter pwned DFU Mode.

ERROR: Unsupported model...

OS X 10.11
iPad 4,2
ERROR: Unsupported model...

Enhancement - Rerunning script until in PWND

I do not know if this is possible, but similar to 1033-OTA-Downgrader, is it possible to get ipwndfu to keep rerunning until successful, instead of having to enter the command each time.

Ipad 4,1 error

ERROR: Exploit failed. Device did not enter pwned DFU Mode.

This happened every time i tried i tryed usb 3 usb 2 i have tryed the exploit to jailbreak my device and it runs fine. I have tryed the tool approximately 20-30 times (sorry for english. english is not my main language).

Unable to downgrade on my iPad Airs(macOS 10.15.1, iPad Air 4,1)

Starting iBSS/iBEC patching
Looks like you are downgrading an iPad Air to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Traceback (most recent call last):
File "/usr/local/Cellar/python/3.7.5/Frameworks/Python.framework/Versions/3.7/lib/python3.7/shutil.py", line 566, in move
os.rename(src, real_dst)
FileNotFoundError: [Errno 2] No such file or directory: 'IPSW/Firmware/all_flash/sep-firmware.j71.RELEASE.im4p' -> 'resources/other/sep.im4p'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "vieux", line 75, in
ipsw.unzipIPSW(argv[2])
File "/Users/me/Desktop/Vieux-master/ipsw.py", line 147, in unzipIPSW
createCustomIPSW64(fname, devicemodel)
File "/Users/me/Desktop/Vieux-master/ipsw.py", line 320, in createCustomIPSW64
shutil.move("IPSW/Firmware/all_flash/sep-firmware.j71.RELEASE.im4p", "resources/other/sep.im4p")
File "/usr/local/Cellar/python/3.7.5/Frameworks/Python.framework/Versions/3.7/lib/python3.7/shutil.py", line 580, in move
copy_function(src, real_dst)
File "/usr/local/Cellar/python/3.7.5/Frameworks/Python.framework/Versions/3.7/lib/python3.7/shutil.py", line 266, in copy2
copyfile(src, dst, follow_symlinks=follow_symlinks)
File "/usr/local/Cellar/python/3.7.5/Frameworks/Python.framework/Versions/3.7/lib/python3.7/shutil.py", line 121, in copyfile
with open(dst, 'wb') as fdst:
FileNotFoundError: [Errno 2] No such file or directory: 'resources/other/sep.im4p'

//I tried on both of my iPad Airs it shows the same error. Please Help.

segmentation fault python3 vieux -i

mac:10.15.1 Catalina
phone: iPhone 5S
model:6.1

TG:[iBoot-1704.10]
Traceback (most recent call last):
File "vieux", line 73, in
ipsw.unzipIPSW(argv[2])
File "/Users/yigitalicetin/Desktop/Vieux-master/ipsw.py", line 153, in unzipIPSW
pwndfumode()
File "/Users/yigitalicetin/Desktop/Vieux-master/restore.py", line 28, in pwndfumode
runexploit = checkm8.exploit()
File "/Users/yigitalicetin/Desktop/Vieux-master/resources/ipwndfu/checkm8.py", line 532, in exploit
libusb1_async_ctrl_transfer(device, 0x21, 1, 0, 0, b'A' * 0x800, 0.0001)
File "/Users/yigitalicetin/Desktop/Vieux-master/resources/ipwndfu/checkm8.py", line 45, in libusb1_async_ctrl_transfer
assert usb.backend.libusb1._lib.libusb_cancel_transfer(transfer_ptr) == 0
AssertionError
zsh: segmentation fault python3 vieux -i

Is there any other way to run it on lower edition?

how to make it work on 10.13.6?

Error... Return Code 253

`(base) admins-imac:Vieux-master 4 admin$ ./vieux -i /Users/admin/Downloads/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw
Given IPSW Path is /Users/admin/Downloads/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw
Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000005F72B58B7B0 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8]
Device is already in pwned DFU Mode. Not executing exploit.
Exploit worked!
File "rmsigchks.py", line 76
print "ERROR: CPID is compatible, but serial number string does not match."
^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print("ERROR: CPID is compatible, but serial number string does not match.")?

Starting iBSS/iBEC patching
Looks like you are downgrading an iPhone 5s to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
Getting SHSH...
Restoring...
Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore.
Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245
Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69
Odysseus support: yes
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket resources/restoreFiles/apnonce.shsh is done
Found device iPhone6,1 n51ap
[TSSC] opening resources/restoreFiles/BuildManifest_iPhone6,1.plist
[TSSR] User specified not to request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Did set SEP+baseband path and firmware
[WARNING] Failed to read BasebandGoldCertID from device! Is it already in recovery?
[WARNING] Using tsschecker's fallback BasebandGoldCertID. This might result in invalid baseband signing status information
[WARNING] Failed to read BasebandSerialNumber from device! Is it already in recovery?
[WARNING] Using tsschecker's fallback BasebandSerialNumber size. This might result in invalid baseband signing status information
[TSSC] opening resources/restoreFiles/BuildManifest_iPhone6,1.plist
[TSSR] User specified to request only a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Found device in DFU mode
[Error] unsupported device mode, please put device in recovery mode or normal mode
[Error] Fail code=-3
Failed with errorcode=-3

ERROR..
Return code: 253
Restore Failed.
Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists
Exiting...
(base) admins-imac:Vieux-master 4 admin$`

errorlogrestore.txt

Error Code 253

iPhone 5s, in DFU mode, iOs 12.4.3, downgrade to 10.3.3 failed. Tried more than once, have dependencies
MacOS Catalina

Log:

Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:0000060E8B4347C8 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8]
Device is already in pwned DFU Mode. Not executing exploit.
Exploit worked!
*** SecureROM Signature check remover by Linus Henze ***
Applying patches...
Patches have already been applied. Exiting.

Starting iBSS/iBEC patching
Looks like you are downgrading an iPhone 5s to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
Getting SHSH...
Restoring...
Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore.
ERROR..
Return code: 253
Restore Failed.
Please try again and report the error + full logs if it persists.
Exiting...

AssertionError Segmentation fault: 11

iPhone 5s on ios 12.4.4

Error iPad4,1

Describe the issue

I have tried to perform the command but it fails to execute the ipwndfu

Screenshots

Command: python3 vieux -i /Volumes/Macintosh\ SSD/Users/sharkapp/Documents/GitHub/Vieux/1033.ipsw

Computer (please complete the following information):
REQUIRED -

• Computer Model [MacBook Pro (13-inch, Mid 2012)]
• MacOS Version [10.15.2 (19C57)]
• Python Version [Python3.8]
• Vieux Version [Commit "c335a43ea5bd629085e4cfbde45f26e8e1ef566"]

iOS Device (please complete the following information):

• Device: [iPad4,1]
• Desired Version: [iOS 10.3.3]
• Installed Version: [iOS 12.4]

Can this tool downgrade the iPhone 5C？

usb.core.USBError: [Errno None] Other error

admindeMac-mini:Vieux-master admin$ python3 vieux -i "PATH/TO//Downloads/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw"
Given IPSW Path is PATH/TO//Downloads/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw
Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Starting IPSW unzipping
Invalid filepath/filename.
Please try again with a valid filepath/filename.
Enter the path to the IPSW file (Or drag and drop the IPSW into this window):
/Users/admin/Downloads/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Traceback (most recent call last):
File "vieux", line 48, in
ipsw.unzipIPSW(path)
File "/Users/admin/Downloads/Vieux-master/ipsw.py", line 119, in unzipIPSW
pwndfumode()
File "/Users/admin/Downloads/Vieux-master/restore.py", line 20, in pwndfumode
device = dfu.acquire_device()
File "/Users/admin/Downloads/Vieux-master/resources/ipwndfu/dfu.py", line 19, in acquire_device
usb.util.claim_interface(device, 0)
File "/usr/local/lib/python3.7/site-packages/usb/util.py", line 205, in claim_interface
device._ctx.managed_claim_interface(device, interface)
File "/usr/local/lib/python3.7/site-packages/usb/core.py", line 102, in wrapper
return f(self, *args, **kwargs)
File "/usr/local/lib/python3.7/site-packages/usb/core.py", line 167, in managed_claim_interface
self.backend.claim_interface(self.handle, i)
File "/usr/local/lib/python3.7/site-packages/usb/backend/libusb1.py", line 811, in claim_interface
_check(self.lib.libusb_claim_interface(dev_handle.handle, intf))
File "/usr/local/lib/python3.7/site-packages/usb/backend/libusb1.py", line 595, in _check
raise USBError(_strerror(ret), ret, _libusb_errno[ret])
usb.core.USBError: [Errno None] Other error

mini 2 not entered dfu mode after vieux latest update

hi sir. my mini 2 had entered with old methot with ./vieux -i "PATH/TO/.ipsw" after try 10 times . But now, not entered with ./vieux -I ... why new method not working for me? I tried 24 times but not working

iPhone4,1 error restore

MacBook-Pro:Vieux-master salvatoredebari$ ./vieux -i /Users/salvatoredebari/Desktop/Vieux-master/iPhone4,1_6.1.3_10B329_Restore.ipsw
Given IPSW Path is /Users/salvatoredebari/Desktop/Vieux-master/iPhone4,1_6.1.3_10B329_Restore.ipsw
Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Unable to get SEPNonce from lockdownd
NOTE: Unable to get SepNonce from device
No device found in DFU mode, assuming device to be 32 Bit...
Starting iBSS/iBEC patching
Looks like you are downgrading an iPhone 4s to 6.1.3!
Please enter your devices IP address (Find it in WiFi settings):
192.168.1.204
Please enter the root password to your device (Default is 'alpine'):

Connecting to device via SSH...
/usr/local/lib/python3.7/site-packages/paramiko/client.py:837: UserWarning: Unknown ssh-rsa host key for 192.168.1.204: b'117247a089240b0ab775e0aec5c6251e'
key.get_name(), hostname, hexlify(key.get_fingerprint())
Device is not running iOS 10.x, using normal TFP0 kloader...
Please press the home button on your device or unplug and replug it back in.
Waiting 10 seconds for you to do this.
Getting SHSH...
Restoring...
Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore.
ERROR: Unable to connect to FDR client (-2)
ERROR: Failed to start FDR Ctrl channel
ERROR: Unable to successfully restore device
Resoting Failed.
Please try again and report the error + full logs if it persists.
Exiting...
MacBook-Pro:Vieux-master salvatoredebari$

inyhrs-iMac:Vieux-master inyhr$ ./vieux -i /Users/inyhr/Desktop/Vieux-master/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw Traceback (most recent call last): File "./vieux", line 6, in <module> import ipsw File "/Users/inyhr/Desktop/Vieux-master/ipsw.py", line 3, in <module> import bsdiff4 ModuleNotFoundError: No module named 'bsdiff4'

I just wanna downgrade my phone and I can't get past this help

segmentation fault

hi, I have a problem with vieux:
I installed all the needing packages and all, connected my DFU iPhone 5s and started the downgrade, but I got an error

Last login: Wed Dec 25 18:09:48 on ttys000
gabriele@gabrieles-Mac ~ % cd /Users/gabriele/Desktop/Vieux-master 
gabriele@gabrieles-Mac Vieux-master % ./vieux -i "10.ipsw"
                                                                       
                                                                                                             
                                               /(//* /                         
                                            /(%@&/*((//*/                      
                                         (((((* %(&@@(*,///                    
                                       ((,((((((((/%%/,/(///                   
                                     ((((((((/*.((((////////**                 
                                    (((((((((((((((((///////**.                
                                    ((((((((((((((((//////*** .                
                                    ((((((((((((((//*//(%#(/*..               
                                    (((((((((((////** /%%#(* .                 
                                     (////////////**..##(/* ..                
                                    *(/*******,,,,...,* ,...***.               
                                   *(((&@@*.......*/***/////(//*////           
                               *** /((#@@@@@@@@@@@@@@@(///(((/**/*///          
                             #&(***/((%@@@@@@@@@@@@@@@(/((((// *****           
                            ((((%(*/((#@@@@@@@@@@@@@@@@((((//****              
                             (((((////(&@@@@@@@@@@@@@(((((//*,,,,           
                              ((((.//* %&&@@&&@@&((((////,.,,/((*          
                               (((/* **(%%&&&&&&&((((//**/** ((//            
                                (((((* ./##%%%%#((///**#&*******           
                                 /((*      */(((/****/(((((#(**             
                                                     *(((((((              
                                                      (((((((*               
                                                     *((((((*                 
                                                       (((((                  
                                                           
                                                           
Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in NORMAL mode
Files cleaned.
10.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:000002B78D0AC964 IBFL:1C SRTG:[iBoot-1704.10]
ERROR: Exploit failed. Device did not enter pwned DFU Mode.
gabriele@gabrieles-Mac Vieux-master % python3 vieux -i "10.ipsw"
                                                                       
                                                                                                             
                                               /(//* /                         
                                            /(%@&/*((//*/                      
                                         (((((* %(&@@(*,///                    
                                       ((,((((((((/%%/,/(///                   
                                     ((((((((/*.((((////////**                 
                                    (((((((((((((((((///////**.                
                                    ((((((((((((((((//////*** .                
                                    ((((((((((((((//*//(%#(/*..               
                                    (((((((((((////** /%%#(* .                 
                                     (////////////**..##(/* ..                
                                    *(/*******,,,,...,* ,...***.               
                                   *(((&@@*.......*/***/////(//*////           
                               *** /((#@@@@@@@@@@@@@@@(///(((/**/*///          
                             #&(***/((%@@@@@@@@@@@@@@@(/((((// *****           
                            ((((%(*/((#@@@@@@@@@@@@@@@@((((//****              
                             (((((////(&@@@@@@@@@@@@@(((((//*,,,,           
                              ((((.//* %&&@@&&@@&((((////,.,,/((*          
                               (((/* **(%%&&&&&&&((((//**/** ((//            
                                (((((* ./##%%%%#((///**#&*******           
                                 /((*      */(((/****/(((((#(**             
                                                     *(((((((              
                                                      (((((((*               
                                                     *((((((*                 
                                                       (((((                  
                                                           
                                                           
Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in NORMAL mode
Files cleaned.
10.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:000002B78D0AC964 IBFL:1C SRTG:[iBoot-1704.10]
zsh: segmentation fault  python3 vieux -i "10.ipsw"

and a popup appears saying that Python quit unexpectedly.

what can I do? am I doing something wrong?
using macOS catalina.
_{Sent with GitHawk}

again 241 after updated

Device is now in pwned DFU Mode.
(11.20 seconds)
Exploit worked!
*** SecureROM Signature check remover by Linus Henze ***
Applying patches...
Successfully applied patches

Starting iBSS/iBEC patching
Looks like you are downgrading an iPad Mini 2 to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
Getting SHSH...
Restoring...
Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore.
WARNING: Unable to find BbChipID node
Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245
Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69
Odysseus support: yes
INFO: device serial number is F9FSCU
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket resources/restoreFiles/apnonce.shsh is done
Found device iPad4,4 j85ap
[TSSC] opening resources/restoreFiles/BuildManifest_iPad4,4.plist
[TSSR] User specified not to request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
[Error] failed to read baseband[Error] Fail code=-15
Failed with errorcode=-15

ERROR..
Return code: 241
Restore Failed.
Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists
Exiting...

Found undocumented baseband. Errorcode=-3. Return code: 253

Hello from Russia ))

MacBook-Pro-Maksim:Vieux maksim$ ./vieux -i /Users/maksim/Desktop/Vieux/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw
Given IPSW Path is /Users/maksim/Desktop/Vieux/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw
Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in normal mode
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000005F7C8C73030 IBFL:1C SRTG:[iBoot-1704.10]
Device is now in pwned DFU Mode.
(14.92 seconds)
Exploit worked!

• SecureROM Signature check remover by Linus Henze *
  Applying patches...
  Successfully applied patches

Starting iBSS/iBEC patching
Looks like you are downgrading an iPhone 5s to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
Getting SHSH...
Restoring...
Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore.
TSS server returned: STATUS=94&MESSAGE=This device isn't eligible for the requested build.
ERROR: TSS request failed (status=94, message=This device isn't eligible for the requested build.)
Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245
Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69
Odysseus support: yes
INFO: device serial number is F17MCB10FF9R
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket resources/restoreFiles/apnonce.shsh is done
Found device iPhone6,1 n51ap
[TSSC] opening resources/restoreFiles/BuildManifest_iPhone6,1.plist
[TSSR] User specified not to request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Did set SEP+baseband path and firmware
[TSSC] opening resources/restoreFiles/BuildManifest_iPhone6,1.plist
[TSSR] User specified to request only a baseband ticket.

[TSSR] Found undocumented baseband

Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... [Error] baseband firmware isn't signed
Failed with errorcode=-3

ERROR..
Return code: 253
Restore Failed.
Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists
Exiting...

iPhone 5s 6.1 A1533
High Sierra 10.13.6

N41 iPhone 5 missing from ipsw.py

iPhone 5,1 has an iBSS of iBSS.n41 in some models. The IPSW.py script doesn’t seem to include this. Only iBSS.n42

When I edited the py file it ran fine after

Unable to put device into restore mode (Error=-10)

My iPad Air (iPad4,2) after flashing Green for a second and almost started restoring gave me a -10 error and wiped my iPad as a result i had to reinstall iOS 12.4.3...

Return code: 249

Nattaphons-MacBook-Pro:Vieux-master nattaphonsuparsri$ python3 vieux -i /Users/nattaphonsuparsri/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw

                                           /(//* /                         
                                        /(%@&/*((//*/                      
                                     (((((* %(&@@(*,///                    
                                   ((,((((((((/%%/,/(///                   
                                 ((((((((/*.((((////////**                 
                                (((((((((((((((((///////**.                
                                ((((((((((((((((//////*** .                
                                ((((((((((((((//*//(%#(/*..               
                                (((((((((((////** /%%#(* .                 
                                 (////////////**..##(/* ..                
                                *(/*******,,,,...,* ,...***.               
                               *(((&@@*.......*/***/////(//*////           
                           *** /((#@@@@@@@@@@@@@@@(///(((/**/*///          
                         #&(***/((%@@@@@@@@@@@@@@@(/((((// *****           
                        ((((%(*/((#@@@@@@@@@@@@@@@@((((//****              
                         (((((////(&@@@@@@@@@@@@@(((((//*,,,,           
                          ((((.//* %&&@@&&@@&((((////,.,,/((*          
                           (((/* **(%%&&&&&&&((((//**/** ((//            
                            (((((* ./##%%%%#((///**#&*******           
                             /((*      */(((/****/(((((#(**             
                                                 *(((((((              
                                                  (((((((*               
                                                 *((((((*                 
                                                   (((((                  

Vieux - A tool for 32/64 Bit OTA downgrades
Still in BETA so expect issues/broken things
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in NORMAL mode
Files cleaned.
/Users/nattaphonsuparsri/Desktop/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:00 ECID:000004364B37F8D0 IBFL:1C SRTG:[iBoot-1704.10]
Device is now in pwned DFU Mode.
(12.72 seconds)
Exploit worked!
*** SecureROM Signature check remover by Linus Henze ***
Applying patches...
Successfully applied patches

Starting iBSS/iBEC patching
Looks like you are downgrading an iPhone 5s to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
ERROR: Unable to discover device mode. Please make sure a device is attached.
ERROR: Couldn't get ApNonce from device
Getting SHSH...
Version: c0b554e83f54d39d90cac9791160bf2ccb062aed - 355
[TSSC] manually specified ECID to use, parsed "000004364B37F8D0" to dec:4631236704464 hex:4364b37f8d0
[Error] [TSSC] manually specified ApNonce=None, but parsing failed

ERROR..
Return code: 249
SHSH Saving Failed.
Please try again and report the error/full logs and the 'errorlogshsh.txt' file if it persists.
Exiting...

iPhone5s auto reboot in "Entering PWNREC mode..." Line

Iphone 5S Recovery Mode

Can we use this tool with iphone 5S recovery mode?In my iphone not working power button.I cant put it to dfu.