Phone is still booting into iOS 15 #17

reidcool · 2022-07-19T01:05:42Z

As far as I can tell there's no errors & I'm doing everything correctly but my phone still boots into iOS 15 after running ./boot.sh

https://bin.0xfc.de/?5fc20031b0a6728e#4XbwrjmguHe4HkqhUYkL73kRmvyrkXhwUNGD82woMPdU

mineek · 2022-07-19T04:28:24Z

The restoring process didnt succeed, try to restore until it works. After that you can boot. Also try to update your futurerestore.

reidcool · 2022-07-23T23:53:55Z

So I updated futurerestore and tired about a half dozen times

I got a bit further but it still fails at restoring the device for some reason

Any ideas?

`Device found in DFU Mode.
Sending iBSS (1456228 bytes)...
[==================================================] 100.0%
Booting iBSS, waiting for device to disconnect...
Booting iBSS, waiting for device to reconnect...
ApNonce pre-hax:
INFO: device serial number is F4GXVKVAJC67
Getting ApNonce in recovery mode... 15 40 00 76 bc 4c 35 a7 c8 ca ef dc ae 5b da 69 c1 40 a1 1b ce 87 05 48 f0 86 2a ac 28 c1 94 cc
Sending iBEC (1456228 bytes)...
[==================================================] 100.0%
Booting iBEC, waiting for device to disconnect...
Booting iBEC, waiting for device to reconnect...
APNonce from device already matches IM4M nonce, no need for extra hax...
Successfully set nonce generator: 0xbd34a880be0b53f3
Extracting filesystem from iPSW
[==================================================] 100.0%
Getting SepNonce in recovery mode... 82 9d 71 59 2d d2 ad 3d 30 0b 16 e8 44 be 03 fa 9e 80 cb 8e
Getting ApNonce in recovery mode... 15 40 00 76 bc 4c 35 a7 c8 ca ef dc ae 5b da 69 c1 40 a1 1b ce 87 05 48 f0 86 2a ac 28 c1 94 cc
Recovery Mode Environment:
iBoot build-version=iBoot-6723.140.2
iBoot build-style=RELEASE
Sending RestoreLogo...
Extracting applelogo@2x~~iphone.im4p (Firmware/all_flash/applelogo@2x~~iphone.im4p)...
Personalizing IMG4 component RestoreLogo...
Sending RestoreLogo (13820 bytes)...
ramdisk-size=0x20000000
1337 CUSTOM RAMDISK!
Personalizing IMG4 component RestoreRamDisk...
Sending RestoreRamDisk (105538711 bytes)...
Extracting adc-nike-d20.im4p (Firmware/isp_bni/adc-nike-d20.im4p)...
Personalizing IMG4 component ISP...
Sending ISP (9081533 bytes)...
Extracting 018-61747-017.dmg.trustcache (Firmware/018-61747-017.dmg.trustcache)...
Personalizing IMG4 component RestoreTrustCache...
Sending RestoreTrustCache (12134 bytes)...
Extracting DeviceTree.d201ap.im4p (Firmware/all_flash/DeviceTree.d201ap.im4p)...
Personalizing IMG4 component RestoreDeviceTree...
Sending RestoreDeviceTree (41167 bytes)...
1337 CUSTOM KERNEL!
Personalizing IMG4 component RestoreKernelCache...
Sending RestoreKernelCache (19162585 bytes)...
ERROR: Failed to place device in restore mode
Cleaning up...
[exception]:
what=ERROR: Unable to place device into restore mode

code=89391172
line=1364
file=/Users/runner/work/futurerestore/futurerestore/src/futurerestore.cpp
commit count=289:
commit sha =c15e30b290141e47383de93aa6b0273b7b6df8d6:
Done: restoring failed!
[] Done!
[] Cleaning
[*] Done!
reiddacosta@Reids-MacBook-Pro sunst0rm %
`

Arna13 · 2022-07-24T08:24:11Z

I'd suggest using a different cable

reidcool · 2022-07-24T14:39:17Z

This is so frustrating, I made it to this screen but the restore never completes and takes me to the iOS restore screen.

Ive tried a different cable & a different IPSW

Variant: Customer Erase Install (IPSW)
This restore will erase all device data.
Device found in DFU Mode.
Sending iBSS (1438499 bytes)...
[==================================================] 100.0%
Booting iBSS, waiting for device to disconnect...
Booting iBSS, waiting for device to reconnect...
ApNonce pre-hax:
INFO: device serial number is F4GXVKVAJC67
Getting ApNonce in recovery mode... 15 40 00 76 bc 4c 35 a7 c8 ca ef dc ae 5b da 69 c1 40 a1 1b ce 87 05 48 f0 86 2a ac 28 c1 94 cc
Sending iBEC (1438499 bytes)...
[==================================================] 100.0%
Booting iBEC, waiting for device to disconnect...
Booting iBEC, waiting for device to reconnect...
APNonce from device already matches IM4M nonce, no need for extra hax...
Successfully set nonce generator: 0xbd34a880be0b53f3
Extracting filesystem from iPSW
[==================================================] 100.0%
Getting SepNonce in recovery mode... 4a e5 84 ad 68 0e 84 3a 59 41 11 24 eb c4 66 92 ce 7f 92 9c
Getting ApNonce in recovery mode... 15 40 00 76 bc 4c 35 a7 c8 ca ef dc ae 5b da 69 c1 40 a1 1b ce 87 05 48 f0 86 2a ac 28 c1 94 cc
Recovery Mode Environment:
iBoot build-version=iBoot-6723.62.3
iBoot build-style=RELEASE
Sending RestoreLogo...
Extracting applelogo@2x~~iphone.im4p (Firmware/all_flash/applelogo@2x~~iphone.im4p)...
Personalizing IMG4 component RestoreLogo...
Sending RestoreLogo (13819 bytes)...
ramdisk-size=0x20000000
1337 CUSTOM RAMDISK!
Personalizing IMG4 component RestoreRamDisk...
Sending RestoreRamDisk (104124567 bytes)...
Extracting adc-nike-d20.im4p (Firmware/isp_bni/adc-nike-d20.im4p)...
Personalizing IMG4 component ISP...
Sending ISP (9045133 bytes)...
Extracting 038-83284-083.dmg.trustcache (Firmware/038-83284-083.dmg.trustcache)...
Personalizing IMG4 component RestoreTrustCache...
Sending RestoreTrustCache (12112 bytes)...
Extracting DeviceTree.d201ap.im4p (Firmware/all_flash/DeviceTree.d201ap.im4p)...
Personalizing IMG4 component RestoreDeviceTree...
Sending RestoreDeviceTree (41121 bytes)...
1337 CUSTOM KERNEL!
Personalizing IMG4 component RestoreKernelCache...
Sending RestoreKernelCache (18723903 bytes)...
getting SEP ticket
Trying to fetch new SHSH blob
Request URL set to https://gs.apple.com/TSS/controller?action=2
futurerestore(48078,0x105395600) malloc: Heap corruption detected, free list is damaged at 0x60000001db60
*** Incorrect guard value: 4444439499500526978
futurerestore(48078,0x105395600) malloc: *** set a breakpoint in malloc_error_break to debug
Sending TSS request attempt 1... [] Done!
[] Cleaning
[*] Done!

mineek · 2022-07-24T14:41:21Z

Please join the discord server for additional help, its a bit hard solve it via github.

reidcool · 2022-07-24T14:42:33Z

Okay, Thanks I'll join

D0lcegabbana · 2022-07-26T20:54:04Z

This is so frustrating, I made it to this screen but the restore never completes and takes me to the iOS restore screen.

Ive tried a different cable & a different IPSW

Variant: Customer Erase Install (IPSW) This restore will erase all device data. Device found in DFU Mode. Sending iBSS (1438499 bytes)... [==================================================] 100.0% Booting iBSS, waiting for device to disconnect... Booting iBSS, waiting for device to reconnect... ApNonce pre-hax: INFO: device serial number is F4GXVKVAJC67 Getting ApNonce in recovery mode... [15 40 00 76](tel:15 40 00 76) bc 4c 35 a7 c8 ca ef dc ae 5b da 69 c1 40 a1 1b ce 87 05 48 f0 86 2a ac 28 c1 94 cc Sending iBEC (1438499 bytes)... [==================================================] 100.0% Booting iBEC, waiting for device to disconnect... Booting iBEC, waiting for device to reconnect... APNonce from device already matches IM4M nonce, no need for extra hax... Successfully set nonce generator: 0xbd34a880be0b53f3 Extracting filesystem from iPSW [==================================================] 100.0% Getting SepNonce in recovery mode... 4a e5 84 ad 68 0e 84 3a [59 41 11 24](tel:59 41 11 24) eb c4 66 92 ce 7f 92 9c Getting ApNonce in recovery mode... [15 40 00 76](tel:15 40 00 76) bc 4c 35 a7 c8 ca ef dc ae 5b da 69 c1 40 a1 1b ce 87 05 48 f0 86 2a ac 28 c1 94 cc Recovery Mode Environment: iBoot build-version=iBoot-6723.62.3 iBoot build-style=RELEASE Sending RestoreLogo... Extracting applelogo@2x~~iphone.im4p (Firmware/all_flash/applelogo@2x~~iphone.im4p)... Personalizing IMG4 component RestoreLogo... Sending RestoreLogo (13819 bytes)... ramdisk-size=0x20000000 1337 CUSTOM RAMDISK! Personalizing IMG4 component RestoreRamDisk... Sending RestoreRamDisk (104124567 bytes)... Extracting adc-nike-d20.im4p (Firmware/isp_bni/adc-nike-d20.im4p)... Personalizing IMG4 component ISP... Sending ISP (9045133 bytes)... Extracting 038-83284-083.dmg.trustcache (Firmware/038-83284-083.dmg.trustcache)... Personalizing IMG4 component RestoreTrustCache... Sending RestoreTrustCache (12112 bytes)... Extracting DeviceTree.d201ap.im4p (Firmware/all_flash/DeviceTree.d201ap.im4p)... Personalizing IMG4 component RestoreDeviceTree... Sending RestoreDeviceTree (41121 bytes)... 1337 CUSTOM KERNEL! Personalizing IMG4 component RestoreKernelCache... Sending RestoreKernelCache (18723903 bytes)... getting SEP ticket Trying to fetch new SHSH blob Request URL set to https://gs.apple.com/TSS/controller?action=2 futurerestore(48078,0x105395600) malloc: Heap corruption detected, free list is damaged at 0x60000001db60 *** Incorrect guard value: 4444439499500526978 futurerestore(48078,0x105395600) malloc: *** set a breakpoint in malloc_error_break to debug Sending TSS request attempt 1... [] Done! [] Cleaning [*] Done!

I have this error too
iPhone 8 15.6 downgrade to 14.5.1

reidcool closed this as completed Jul 24, 2022

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Phone is still booting into iOS 15 #17

Phone is still booting into iOS 15 #17

reidcool commented Jul 19, 2022 •

edited

Loading

mineek commented Jul 19, 2022 •

edited

Loading

reidcool commented Jul 23, 2022 •

edited

Loading

Arna13 commented Jul 24, 2022

reidcool commented Jul 24, 2022

mineek commented Jul 24, 2022

reidcool commented Jul 24, 2022

D0lcegabbana commented Jul 26, 2022

Phone is still booting into iOS 15 #17

Phone is still booting into iOS 15 #17

Comments

reidcool commented Jul 19, 2022 • edited Loading

mineek commented Jul 19, 2022 • edited Loading

reidcool commented Jul 23, 2022 • edited Loading

Arna13 commented Jul 24, 2022

reidcool commented Jul 24, 2022

mineek commented Jul 24, 2022

reidcool commented Jul 24, 2022

D0lcegabbana commented Jul 26, 2022

reidcool commented Jul 19, 2022 •

edited

Loading

mineek commented Jul 19, 2022 •

edited

Loading

reidcool commented Jul 23, 2022 •

edited

Loading