usbliter8

usbliter8 is a bootrom exploit that enables tethered downgrades on supported A12/A13 devices. Legacy iOS Kit supports this functionality through its A12/A13 module. See the A12/A13 Tethered wiki page for supported devices and iOS versions.

For more information about the exploit and its hardware requirements, visit the usbliter8 repo.

What board should I get?

Recommended hardware: Waveshare RP2350 USB-A board and a Lightning-to-USB-A cable.

Flashing

1. Download the UF2 files to be used for flashing here: https://github.com/LukeZGD/Legacy-iOS-Kit-Keys/releases/download/a/usbliter8-v1.0.zip
2. While holding down the BOOT button (see the images for its location), connect the RP2350 board to your PC or Mac.

_{GIF from Waveshare.}

3. Once the RP2350 drive appears, copy the appropriate UF2 file for your board. For the Waveshare USB-A, use usbliter8.waveshare_rp2350_usb_a.uf2.
4. After flashing completes, the onboard LED should blink orange briefly, then turn steady orange, indicating that the board is ready and waiting for a device.

Pwning

1. Put your A12/A13 device into DFU mode. You can use Legacy iOS Kit's DFU Mode Helper if needed:

./restore.sh --dfuhelper

2. Connect the RP2350 board to your PC/Mac or power adapter using a USB-C cable.
3. Connect the A12/A13 device in DFU mode to the board's USB-A port.
4. The onboard LED should cycle through different colors during the process. Once it turns steady green, the pwning process is complete.
5. Disconnect your A12/A13 device from the board and connect it directly to your PC or Mac.
6. Run Legacy iOS Kit. The main menu should display Pwned: usbliter8.
   • If Pwned: usbliter8 does not appear or the device is not detected, the pwning process may have failed. Put the device back into DFU mode and try again.