visualwit/a5-a6x-blobs-dumper

Dump onboard blobs on all 32-bit A5-A6X iOS devices: iPads, iPhones and the iPod touch 5G.

A5-A6X Blobs Dumper

• Dump blobs on A5-A6X 32-bit iOS devices
• macOS and (experimental) Windows support
• Jailbreak required
• See the Wiki Page for step-by-step instructions
• See Troubleshooting if you run into problems

Usage

1. Download required files (IPSW's, Odysseus & FirmwareBundles)

   ./prepare <device model> <ios version>

   e.g. ./prepare iPhone4,1 8.4.1

2. Extract baseband, build custom IPSW, and extract iBEC & iBSS

   ./patchipsw <device model> <device IP>

   e.g. ./patchipsw iPhone4,1 192.168.1.14

3. Enter kDFU mode using pwned iBSS

   ./enterkdfu <device IP>

4. Send pwned iBEC to device in kDFU mode then dump onboard blobs

   ./dumpblobs <device model> <ios version>

Thanks

• dayt0n and xerub for Odysseus.
• s0uthwest, encounter and tihmstar for TSSChecker.
• westbaer, @pod2g, tom3q, planetbeing, geohot and posixninja for iRecovery.
• planetbeing for xpwn
• LukeZGD for binaries & some code for Windows support
• Devjam81 for Odysseus-Windows