Saturday, February 2, 2013

How-To Save Your SHSH Blobs & Create A Custom IPSW


The latest iOS has just been launched. You want to upgrade. But what if you are actually disappointed with the upgrade (like many had been with iOS6) and downgrade? Apple doesn't let downgrade be done that easily. But as we know every lock has to have an unlock key, SHSH blobs come into play. These are hash file systems created by Apple Inc. to control manual downgrading of OS. It consists of 3 things mainly - Device Type (eg. iPhone 4 GSM), firmware version(eg. 5.0.1) and device's unique ECID. SHSH blobs can be used to downgrade firmware version and they are the only way out for that. For those who do not want to jailbreak or fear it, you should know that while it is a widespread misconception that you can only save SHSH blobs if you have a jailbroken iDevice, but let me clear one thing, you DO NOT need a jailbroken iDevice in order to be able to save SHSH blobs.
Therefore, in order to be able to retain the ability of downgrading the firmware or even before jailbreaking it is always advisable that you save your SHSH blobs for "just in case" type conditions.

Note: This method only works for iOS versions upto 5.1.1. You can not restore to iOS 6.0.0 and later versions with this method.

So, lets see how to save these SHSH blobs and how can they be used to downgrade.

Step 1: Download TinyUmbrella for your specific operating system.
Step 2: Open TinyUmbrella and ignore all the errors that come in way by clicking OK.


Step 3: Click on advance tab and uncheck the 'Request SHSH from Cydia' option. 


Step 4: Check the directory in which you want your blobs to be saved. You need these blobs later so you need to be careful that you dont loose the file.


Step 5: When you have checked everything click on Save SHSH and you will see some files(.plist if on Windows and .shsh if on Mac OS X) emerge in the folder you mentioned in directory in the last step.


There you go, you now have SHSH blobs saved. It is that simple.



Now lets have a look at how to use these by making a custom IPSW file for those "just in case" conditions we talked about above.

Step 1: Download Redsn0w.
Step 2: Head over to this post and download the respective IPSW firmware file.
Step 3: Open the zip file and then open redsn0w.exe.


Step 4: Then click on Extras and then click on SHSH blobs.


Step 5: Now, click on stitch. This option will enable you to make a custom IPSW.


Step 6: Now here you need two things: your firmware IPSW file and your SHSH blob file. Direct it to the IPSW file you downloaded in Step 2. After you have done this click on Local and direct it to the blob file. When directing blobs, some people find it hard to know which file to direct it to. So, as i said above in windows its a .plist file in .known_devices folder and in mac its .shsh file. Direct redsn0w to the respective blob file of your iDevice.


Sometimes, APticket failure comes up here or blobs cannot be verified because Apple has closed signing system for the respective firmware(this generally comes up for quite old firmwares). DO Not worry. You can use the remote option to get around this.


Now redsn0w will make a custom IPSW which can be used anytime to restore to the firmware you wanted to preserve.


To downgrade or restore to this IPSW file, go to iTunes and go to your iDevice's info tab. Click on Restore while pressing the shift key and when it asks direct it to the IPSW file you want to restore or update to.


When you click on Open you may again get APticket failure. Do Not worry. Put your device in DFU mode by switching it off, then holding the power button for 3 seconds, then holding Home+Power button for 10 seconds and then Home button for 15 seconds.
When your iTunes shows it has found a device in recovery mode but your iPhone's screen is black, that means you have successfully put it in DFU mode. You should try restoring now and it should go butter smooth.:)


The process is now complete and you can enjoy your iDevice with the iOS version you liked better, once again.

7 comments:

  1. What do I do when I get this error:
    "The iPhone 'iPhone' could not be restored. This device isn't eligible for the requested build."
    Any ideas?

    Using:
    - an iPhone 4 on the latest iOS (it is currently locked to SoftBank Japan - I've relocated to the States)
    - the latest Mac OSX
    - the version of RedSn0w that the dashboard links to
    - the latest iTunes

    ReplyDelete
    Replies
    1. "Note: This method only works for iOS versions upto 5.1.1. You can not restore to iOS 6.0.0 and later versions with this method."

      You should have read this line. But no worries you can still use stock iOS 6.1.3 build or iOS 5.1.1 SHSH build normally. You won't loose any data.

      Delete
    2. Honestly I spammed all the boards I could find for a possible solution. After further research it turns out my cell company intentionally makes their phones unlockable, regardless of whether the phone is paid off (read *YOURS*) or if you're no longer in the country... (>_<)

      Delete
    3. Interesting! So unlike many other sources you are saying i can not upgrade my iPhone 4 from iOS 5.1.1 to iOS 6.1.2!? I don't want 6.1.3 cause I don't want to lose my jailbreak.
      If so, can I go to 6.1.3 first and then downgrade to 6.1.2??
      I do have my 6.1.2 SHSH blob in hand and redsn0w confirms the blob is fine incl. AP-Ticket. - Thanks!

      Delete
  2. stitching for this ipsw is not currently available. i have use ipsw 6.1.3, 6.1.1, and 6.0.1. all of this ipsw not suitable while stitching. why? help me. please. i use iphone 4s. i want to downgrade

    ReplyDelete
    Replies
    1. As written in the tutorial itself,
      "Note: This method only works for iOS versions upto 5.1.1. You can not restore to iOS 6.0.0 and later versions with this method."

      Delete
  3. I have have iTunes 10.1(54) on all my Macs, using OSX 10.6.5. (Maybe you already understand why I don't want to upgrade any of them.) I have 2 iPads, FC707LL/A 3rd generation, one still running 5.1.1 (yay!) and the other I gave to my father, and someone upgraded the software to 6.1.3 (10B329). I filled my Dad's iPad's hard drive so it could not install the update to iOS 7, it may have downloaded it already. So I am working to return his iPad to 5.1.1- and trying to protect my iPad against such future problems.
    I also bought a refurb Dell laptop running Win 7HP, I am so angry with Apple.
    I am waiting for a friend to tell me which disk cloner to use on the Dell, so I can use that without fear (it came without restore disks).
    OK so I have followed instructions for Mac, and Tiny Umbrella doesn't see my iPad
    I am guessing TinyUmbrella needs a higher version of iTunes to see the iPad, because iTunes can't see this iPad either. Nor does it show up in Finder.
    Is that right? I can't use Tiny Umbrella on this OS and version of iTunes to save the SHSH blobs from my iPad?

    I am afraid to use the Windows PC with the latest iTunes, if I connect my iPad to that computer, even with the Wifi off, I am pretty sure it's going to mess with my 5.1.1 and I will have even more trouble.

    How can I safely safe the SHSH blobs without tripping the trapdoors that will force me to upgrade?

    Thank you

    ReplyDelete

ShareThis