SSH Ramdisk

Legacy iOS Kit has an option to create and boot an SSH Ramdisk for all supported devices.

Supported devices

• iPhone 2G, 3G, 3GS, 4, 4S, 5, 5C
• iPhone 5S, 6, 6S, SE 2016, 7 (including Plus variants)
• iPad 1, 2, 3, 4, mini 1
• iPad mini 2, mini 3, mini 4, Air 1, Air 2
• iPod touch 1, 2, 3, 4, 5, 6, 7

Notes

• If you have a checkm8 device that supports iOS 16 or newer, it is not supported here. Use SSHRD_Script instead. You may also need to use it on macOS due to changes with iOS 16 and newer.
• 32-bit devices on iOS 9 or newer may/will have issues on trying to mount and/or access the data partition (/mnt2 or /dev/disk0s1s2)
• 64-bit devices on lower than iOS 11.3 will have issues writing to the data partition

Usage

• Run Legacy iOS Kit: ./restore.sh
• Go to Useful Utilities -> SSH Ramdisk
• Select option/s needed in SSH Ramdisk Menu

Options

• Connect to SSH - Connect to the device via SSH
• Dump Blobs - Dump onboard SHSH blobs of the device. 64-bit devices only.
  • For 32-bit devices, go to Saving onboard SHSH blobs of current iOS version
• Install TrollStore - Install TrollStore to Tips app of the device. 64-bit devices on iOS 14/15 ONLY.
• Dump Baseband/Activation - Dump baseband and activation record files from the device. 32-bit devices only.
• Disable/Enable Exploit - Send commands to set NVRAM variables for powdersn0w devices.
• Get iOS Version - Get the current iOS version of the device.
• Clear NVRAM - Send command to clear NVRAM of the device.
• Update DateTime - Update the date and time of the device to current.
• Reboot Device - Reboot the device and exit script.
• Exit - Exit the script.
  • SSH ramdisk is still booted on the device and can be connected to manually or by running ./restore.sh --sshrd-menu

Accessing Data

For accessing data, note the following:

• Host: sftp://127.0.0.1 | User: root (or mobile) | Password: alpine | Port: 6414
• Use tools like Filezilla to access the files. Make sure to also run the needed mount command first
• Mount command for 32-bit devices: mount.sh
• Mount commands for 64-bit devices:
  • Mount filesystems with this command (for iOS 11.3 and newer): mount_filesystems
  • Mount root filesystem with this command (for iOS 10.3.x/11.x): mount_apfs /dev/disk0s1s1 /mnt1
  • Mount root filesystem with this command (for iOS 10.2.1 and older): mount_hfs /dev/disk0s1s1 /mnt1
  • Warning: Mounting and/or modifying data partition (/dev/disk0s1s2 /mnt2) might not work for 64-bit devices.
  • Warning: Mount filesystems at your own risk: there is a chance of bootlooping on 64-bit devices on older than iOS 11.3.