Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

again 241 after updated #17

Closed
toromano opened this issue Dec 15, 2019 · 23 comments
Closed

again 241 after updated #17

toromano opened this issue Dec 15, 2019 · 23 comments

Comments

@toromano
Copy link

toromano commented Dec 15, 2019

Device is now in pwned DFU Mode.
(11.20 seconds)
Exploit worked!
*** SecureROM Signature check remover by Linus Henze ***
Applying patches...
Successfully applied patches

Starting iBSS/iBEC patching
Looks like you are downgrading an iPad Mini 2 to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
Getting SHSH...
Restoring...
Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore.
WARNING: Unable to find BbChipID node

Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245
Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69
Odysseus support: yes
INFO: device serial number is F9FSCU
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket resources/restoreFiles/apnonce.shsh is done
Found device iPad4,4 j85ap
[TSSC] opening resources/restoreFiles/BuildManifest_iPad4,4.plist
[TSSR] User specified not to request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
[Error] failed to read baseband[Error] Fail code=-15
Failed with errorcode=-15

ERROR..
Return code: 241
Restore Failed.
Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists
Exiting...

@toromano
Copy link
Author

@MatthewPierson

@C7XL
Copy link

C7XL commented Dec 16, 2019

I'm having this issue as well, same device (iPad Mini 2).

@kero990
Copy link

kero990 commented Dec 19, 2019

I got almost the same error, and I ’m also the same device, ipad mini 2, A1439

Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore.
WARNING: Unable to find BbChipID node

WARNING: Unable to find BbChipID node
Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245
Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69
Odysseus support: yes
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket resources/other/apnonce.shsh is done
Found device iPad4,4 j85ap
[TSSC] opening resources/manifests/BuildManifest_iPad4,4.plist
[TSSR] User specified not to request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
[Error] failed to read baseband[Error] Fail code=-15
Failed with errorcode=-15

ERROR..
Return code: 241
Restore Failed.
Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists
Exiting...

@kero990
Copy link

kero990 commented Dec 19, 2019

I see the error described as "reading baseband error", but if I remember correctly, the wifi version of the iPad should not have a baseband, right?

@C7XL
Copy link

C7XL commented Dec 19, 2019

Yea, I got the same error right now. It just stops on that part.

And also, I get excited everytime I visit here and see there are new commits and such hoping for a fix lol

I got almost the same error, and I ’m also the same device, ipad mini 2, A1439

Note that errors about 'BbSkeyId', 'FDR Client' and 'BasebandFirmware Node' are not important, just ignore them and only report errors that actually stop the restore.
WARNING: Unable to find BbChipID node

WARNING: Unable to find BbChipID node
Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245
Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69
Odysseus support: yes
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket resources/other/apnonce.shsh is done
Found device iPad4,4 j85ap
[TSSC] opening resources/manifests/BuildManifest_iPad4,4.plist
[TSSR] User specified not to request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
[Error] failed to read baseband[Error] Fail code=-15
Failed with errorcode=-15

ERROR..
Return code: 241
Restore Failed.
Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists
Exiting...

@toromano
Copy link
Author

@MatthewPierson sir pls fix this issue for ipad mini 2 users... For us .... 😔😢😢😢

@MatthewPierson
Copy link
Owner

I’m going to fix it. I have more important things to do at the moment that take precedent over this for now. I should have a fix out in a day or two

@C7XL
Copy link

C7XL commented Dec 19, 2019

No worries, I understand priorities. We’ll be here waiting. 👌🏼

Thank you for this tool btw!

I’m going to fix it. I have more important things to do at the moment that take precedent over this for now. I should have a fix out in a day or two

@toromano
Copy link
Author

Thks... We are waiting 😌😊☺

@MatthewPierson
Copy link
Owner

Please try with the latest commit, it has a potential fix for this issue but I can't test myself as I don't have any A7 iPads (This is the same message I'm replying to all relevant issues :) )

I felt bad about this still being an issue so I have something that might fix it, please let me know if it works!

@C7XL
Copy link

C7XL commented Dec 20, 2019

@MatthewPierson I think it's the same error? The 2 out of 20 times that the exploit worked on my device it gave me this error:

Device is now in pwned DFU Mode.
(12.63 seconds)
Exploit worked!
*** SecureROM Signature check remover by Linus Henze ***
Applying patches...
Successfully applied patches

Starting iBSS/iBEC patching
Looks like you are downgrading an iPad Mini 2 to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
Getting SHSH...
Restoring...
Note that errors about 'BbSkeyId', 'FDR Client', 'BasebandFirmware Node' and 'ERROR: zip_name_locate: Firmware/all_flash/manifest' are not important.
Just ignore them and only report errors that actually stop the restore.
WARNING: Unable to find BbChipID node
WARNING: Unable to find BbSkeyId node
Version: b99eb8140d8e6c23f34e950102bb79e61c72384d - 152
Libipatcher Version: f32e41d850f51448bd6c588ead9c7d6455733f3c - 44
Odysseus Support: yes
INFO: device serial number is
[INFO] 64bit device detected
futurerestore init done
reading ticket resources/other/apnonce.shsh done
[TSSC] opening resources/manifests/BuildManifest_iPad4,4.plist
[TSSR] User specified not to request a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
[Error] failed to read Baseband[Error] Fail code=-15
Failed with errorcode=-15

ERROR..
Return code: 241
Restore Failed.
Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists
Exiting...

@C7XL
Copy link

C7XL commented Dec 20, 2019

@MatthewPierson I've downloaded the new build just now seeing there's a new supposedly fix and tried it again. It doesn't give me that 241 error anymore but a new one instead (-6):

Device is now in pwned DFU Mode.
(14.80 seconds)
Exploit worked!
*** SecureROM Signature check remover by Linus Henze ***
Applying patches...
Successfully applied patches

Starting iBSS/iBEC patching
Looks like you are downgrading an iPad Mini 2 to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
Getting SHSH...
Restoring...
Note that errors about 'BbSkeyId', 'FDR Client', 'BasebandFirmware Node' and 'ERROR: zip_name_locate: Firmware/all_flash/manifest' are not important.
Just ignore them and only report errors that actually stop the restore.
WARNING: Unable to find BbChipID node
WARNING: Unable to find BbChipID node

Assertion failed: (data), function plist_copy_node, file plist.c, line 331.
Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245
Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69
Odysseus support: yes
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket resources/other/apnonce.shsh is done
Found device iPad4,4 j85ap
[TSSC] opening resources/manifests/BuildManifest_iPad4,4.plist
[TSSR] User specified not to request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
[Error] Did set SEP+baseband path and firmware
[WARNING] Failed to read BasebandGoldCertID from device! Is it already in recovery?
[WARNING] Using tsschecker's fallback BasebandGoldCertID. This might result in invalid baseband signing status information
[WARNING] Failed to read BasebandSerialNumber from device! Is it already in recovery?
[WARNING] Using tsschecker's fallback BasebandSerialNumber size. This might result in invalid baseband signing status information
[TSSC] opening resources/manifests/BuildManifest_iPad4,4.plist
[TSSR] User specified to request only a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Found device in Recovery mode
Device already in Recovery mode
Found device in Recovery mode
Identified device as j85ap, iPad4,4
Extracting BuildManifest from iPSW
Product version: 10.3.3
Product build: 14G60 Major: 14
Device supports IMG4: true
Got ApNonce from device: 0b 6b e7 ce 99 0a 72 69 1b 33 72 d9 69 f1 2b 66 8d a0 2e d2
checking APTicket to be valid for this restore...
Verified ECID in APTicket matches device ECID
checking APTicket to be valid for this restore...
Verified ECID in APTicket matches device ECID
[Error] im4m_buildidentity_check_cb: can't find any identity which matches all hashes inside IM4M
[Error] getBuildIdentityForIM4M: found buildidentity, but can't read information
[Error] BuildIdentity selected for restore doesn't match APTicket

BuildIdentity selected for restore:
BuildNumber : 14G60
BuildTrain : Greensburg
DeviceClass : j85ap
FDRSupport : NO
RestoreBehavior : Erase
Variant : Customer Erase Install (IPSW)

BuildIdentiy valid for the APTicket:
[Error] Verified APTicket to be valid for this restore

ERROR..
Return code: -6
Restore Failed.
Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists
Exiting...

@MatthewPierson
Copy link
Owner

Do you have a screenshot of the terminal when this happened? It looks like futurerestore is segfaulting but I can't tell

@C7XL
Copy link

C7XL commented Dec 20, 2019

@MatthewPierson I've uploaded a video so you can check.

https://youtu.be/2i2BC8K2XNA

@MatthewPierson
Copy link
Owner

Huh so it seems like its actually using the wrong futurerestore command, it should be using --no-baseband but given that it doesn't wait 10 seconds after the red text displays it means that its not doing it which would explain the error -15 from earlier. Try this version and see if its the same result - https://drive.google.com/file/d/1ED5QSTXRM8rmNbixzvVpAARIZXheefK_/view?usp=sharing

@C7XL
Copy link

C7XL commented Dec 20, 2019

@MatthewPierson I think that fixed it, it seems to be restoring now. 🤯

EDIT:
Screen Shot 2019-12-20 at 2 18 03 AM

@MatthewPierson
Copy link
Owner

Well that's fucking annoying, great that its working, but annoying that I wasted the last 5 hours trying to figure this out when all it was was an if statement leading to the wrong thing! Thank you so much for helping me with this though, that video was the main reason I figured it out!

@C7XL
Copy link

C7XL commented Dec 20, 2019

Haha no worries. Glad I could help in some way, it's the least that I can do! 🤙🏼

Well that's fucking annoying, great that its working, but annoying that I wasted the last 5 hours trying to figure this out when all it was was an if statement leading to the wrong thing! Thank you so much for helping me with this though, that video was the main reason I figured it out!

@MatthewPierson
Copy link
Owner

Will credit you when I get the proper fix uploaded! Thanks again

@toromano
Copy link
Author

İs it solved?? 😲

@toromano
Copy link
Author

Huh bu yüzden aslında yanlış futurerestore komutunu kullanıyor gibi görünüyor, --no-baseband kullanıyor olmalı ama kırmızı metin görüntülendikten sonra 10 saniye beklememesi gerektiği için, hatayı açıklayamayacağı anlamına gelmiyor - 15'ten önceki. Bu sürümü deneyin ve aynı sonucun olup olmadığını görün - https://drive.google.com/file/d/1ED5QSTXRM8rmNbixzvVpAARIZXheefK_/view?usp=sharing

How can i use this? Where must i put it? İn vieux folder? Sorry for this. İm a noob

@toromano
Copy link
Author

@MatthewPierson Bunu düzelttiğini düşünüyorum, şimdi geri yükleme gibi görünüyor. 🤯

DÜZENLE:
Ekran Görüntüsü 2019-12-20, 02 18 03

Hey sir. downgrade was successful?

@toromano
Copy link
Author

@Schnob

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants