This is Part 2 of a two-part guide on how to use Prometheus.

Before attempting this guide, everyone should read the introductory article, Prometheus Guide: Introduction. This will explain whether the guides apply to you, and if they do, which ones you should follow, as well as making sure that you fulfil the requirements for it to work.

If you currently have a jailbreak and you want to move to a different firmware with Prometheus’ nonceEnabler method, you must follow Part 1 of the guide before following Part 2 here.

If you currently have no jailbreak, and you want to move to a different firmware with Prometheus’ nonce collision method, do only this part (Part 2) of the guide.

Before you begin following the instructions, read the entire article through once, and watch tihmstar’s video, which outlines the process visually. This will save time and errors in the long run. Make sure you have all the required files ready. These are listed in the introductory article.

This guide uses an upgrade from iOS 9.3.3 to iOS 10.2 as an example, but it can be used to move between any firmwares in principle, if and only if you meet the requirements. If you are using this guide to move between different firmwares, simply replace any mention of iOS 10.2 with the destination firmware you want, and mentions of iOS 10.2.1 with a currently signed firmware. Some examples of other possible Prometheus restores would be iOS 10.2 > iOS 10.2, iOS 10.3 b1 > iOS 10.2, and iOS 9.1 > iOS 10.2.

Instructions

1) Download the iOS 10.2 and iOS 10.2.1 IPSW files for your device from our downloads page. Make sure you have the correct ones for your specific device. Remember some devices, like the iPhone 5s, have multiple models (GSM, Global) with different IPSWs. Select the correct ones.

2) Download the latest version of tihmstar’s futurerestore from the link provided. Unzip the file.

3) Create a folder on your Desktop and call it futurerestore.

4) Find the futurerestore_macos executable inside the “futurerestore-latest” folder you downloaded and unzipped. Copy it into the Desktop futurerestore folder. Copy your two IPSW files, and your iOS 10.2 .shsh2 into the Desktop futurerestore folder too.

5) Rename your iOS 10.2.1 IPSW file from .ipsw to .zip, then double-click it to unzip it.

6) Inside the unzipped iOS 10.2.1 folder there is a file called BuildManifest.plist. Copy it and paste it into your futurerestore folder.

7) Look again in the unzipped iOS 10.2.1 folder for another folder called Firmware. Inside it is a baseband file with the file extension .bbfw. Copy it and paste it into your futurerestore folder.

8) Return to the Firmware folder from Step 7. Inside it, navigate to /all_flash/all_flash.YOUR_BOARD_ID.production. Inside that, find the file entitled sep-firmware(…).im4p. This is the SEP firmware. Do not copy the file ending .plist by mistake. Copy the .im4p file and paste it into your futurerestore folder.

9) The futurerestore folder on your Desktop should now contain these files:

  • iOS 10.2 IPSW
  • iOS 10.2 .shsh2 file
  • iOS 10.2.1 BuildManifest.plist
  • iOS 10.2.1 Baseband Firmware ending .bbfw
  • iOS 10.2.1 SEP firmware ending .im4p
  • futurerestore_macos

10) Open a new Terminal window. Terminal can be found in /Applications/Utilities, or via Spotlight.

11) In Terminal, enter the following command to install the necessary tools for this procedure:

/usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"

Follow any instructions given by the Terminal output to complete the install process.

12) Once Homebrew is installed and the command prompt has returned, enter the following to install ideviceinstaller, which we will need:

brew install ideviceinstaller

Once this is also successfully installed, we need to move one of the files so that futurerestore can find and use it.

13) Navigate to the following folder:

/usr/local/opt/openssl/lib/

If you don’t know how to find that folder, an easy way is to paste the file path into the Finder – Go – Go to Folder… window.

14) Copy the file called libcrypto.1.0.0.dylib.

15) Navigate to the following folder:

/opt/local/lib/

You can use the Finder – Go menu again if necessary. If this folder structure does not exist on your computer, you must create it yourself. Make a folder at the root of your drive called opt, make a folder in it called local, etc.

16) Paste the file libcrypto.1.0.0.dylib into /opt/local/lib/.

17) Return to Terminal. Type cd followed by a space, and drag your futurerestore folder onto the Terminal window. Then press the Enter key.

18) Now type in:

chmod +x futurerestore_macos

19) We will now prepare the futurerestore command, but do not enter it yet. The easiest way to insert the filenames into the command is to type the first few letters of their name, and then press the Tab key on your keyboard to autocomplete the filename. Make sure the correct file has been filled in before continuing, because some files such as the .shsh2 and IPSW may have similar names, and may be autocompleted incorrectly as each other.

a) If you are using the nonceenabler method, currently have a jailbreak, and already followed Part 1 of this guide, use the following command:

./futurerestore_macos -t YOUR-10.2-SHSH-HERE -b YOUR-BASEBAND-FIRMWARE-BBFW-HERE -p YOUR-BUILDMANIFEST.PLIST-HERE -s YOUR-SEP-FIRMWARE-IM4P-HERE -m YOUR-BUILDMANIFEST.PLIST-AGAIN-HERE YOUR-10.2-IPSW-HERE

Do not enter it yet.

b) If you are using the nonce collision method, currently have no jailbreak, and started this guide at Part 2, use the following command:

./futurerestore_macos -t YOUR-10.2-SHSH-HERE -b YOUR-BASEBAND-FIRMWARE-BBFW-HERE -p YOUR-BUILDMANIFEST.PLIST-HERE -s YOUR-SEP-FIRMWARE-IM4P-HERE -m YOUR-BUILDMANIFEST.PLIST-AGAIN-HERE -w YOUR-10.2-IPSW-HERE

Do not enter it yet.

Replace all sections in caps with the names of your files. For example, I would type ./futurerestore_macos -t, then a space, then type the first letters of my SHSH filename, then Tab to complete it, then a space, then -b, space, then type the first letters of my baseband filename, then Tab to complete it, and so on. Take your time and check it thoroughly.

Below are examples of the finished command for an iPhone 5s. The first image is the command for the nonce collision method, the second is for the nonceEnabler (jailbreak) method. Note that the nonce collision method has the -w variable, but the nonceEnabler method does not.

Do not enter the command yet. 

20) a) If you are using the nonceenabler method, currently have a jailbreak, and already followed Part 1 of this guide, now do the following:

Warning: After this step, your device will restart in recovery mode with the correct nonce. You now have 15 minutes to complete the final step of the guide. After that, the device will reboot to recovery again but with the wrong nonce, and you will have to start from the beginning, as well as install additional tools to reboot normally. Avoid this! Have the command from Step 19) a) ready to enter before you continue.

  • Return to the Terminal window which is connected to your device via SSH, which we opened in Steps 7-9 of Part 1 of the guide, and at the #root prompt, type reboot.

20) b) If you are using the nonce collision method, currently have no jailbreak, and started this guide at Part 2, simply do this:

  • Connect your device to your computer.

21) Once your device is ready, that is, connected to the computer (nonce collision method), or connected to the computer and in recovery mode (nonceEnabler method), you should enter the futurerestore command from Step 19. Return to the Terminal window you typed it out into, and hit Enter. This will begin the downgrade process to iOS 10.2.

If everything has gone correctly, Terminal will now show futurerestore downgrading your device. If you are using the nonce collision method, you will have to wait until the correct nonce comes up for the restore to begin. This can take a varying amount of time, from 30 seconds to never (if you are requesting a nonce which does not collide – do not try this). Terminal will print out a list of nonces which your device generates until the generated nonce matches the nonce in your blob. Patience is key.

If you are using the nonceEnabler method, your device should already have the correct nonce thanks to Part 1 of the guide, so the restore should initiate immediately.

22) Wait until the restore completes, and your phone returns to the setup screens. You are now on iOS 10.2!

This process is complicated, and has several parts which can be followed incorrectly. Take your time and read every step all the way through before following it. After Step 20) a), nonceEnabler users should proceed immediately to Step 21, as their device will reboot after 15 minutes and they will have to start again.

If you encounter errors with the process, re-read the guide and browse /r/jailbreak for your issue before asking. It has probably been answered before. If you still have no luck, feel free to ask me in the comments section below, but provide information, or I can’t help. iOS device, version, nonce collision or nonceEnabler method, exact Terminal error you are getting, etc.

Good luck!

  • Alex Georgiou

    hi on step 20 you say go to the terminal where we have SSHed into iphone and reboot. I’m on 9.0.2 with tpf0 enabled via cl0ver. But when i enabled it the cl0ver guide said that if i reboot i will need to enable tpf0 again. So what do i do? Do i reboot and proceed with your guide or is there a different step for us on 9.0.2 there? Please answer as soon as possible. Thanks

    • Joaquim Barbosa

      Nah, you have to reboot. Once you have set the nonce, it is present in nvram, so when you reboot to recovery, you can restore. There is no other way. I don’t think it will be a problem once the nonce is set… Let me know how it goes!

      • Alex Georgiou

        It went exceptionally well! 🙂 All done 9.0.2 to 10.2 in less than 10 mins!

      • Joaquim Barbosa

        That’s great news, well done! Would you mind telling me some details of the cl0ver part? What device model, iOS version, etc do you have, and how did you apply the cl0ver patch? It will be helpful for others in the future. Cheers!

  • Joaquim Barbosa

    I’m not sure. I would try running futurerestore as you have it set up now, and see if it works. If you keep getting an error due to dependencies, ask again here, or follow my guide afterwards. You may already have everything you need.

    What is different in the wifi only command? No baseband file? If you point me to a source for the command I will add it in, thanks!

  • Epikad

    it’s supposed to work i7+ with shsh2 10.2 to 10.1.1

  • Harshdeep Singh

    I have an iPhone 6 with shsh2 blobs saved from both ios10 & ios 10.2.1 . I want to restore to 10.2 but i m on 10.2.1 , is it possible for me to downgrade. I have tried using future restore, my phone was producing nonces from 5 hrs straight but no luck. Can you guys help?

    • Joaquim Barbosa

      No, as my article clearly says, that method only works in specific cases on the iP5s. No other devices will repeat nonces, you need a jailbreak instead.

  • PhantomBP

    Wouldnt the terminal eventually find the perfect nonce? Or is it just repeating. I left it on for more than 10 hours??

    • Joaquim Barbosa

      What device and iOS version are you on? Do you currently have a jailbreak?

      • PhantomBP

        Im using a Ipad Air 2 Wifi on 10.2.1, downgrading to 10.2. And it is not jailbroken.

      • Joaquim Barbosa

        That won’t work. As the introduction clearly states, the nonce collision method only works on very specific devices, namely the iP5s. Trying on a device with no collisions will take, almost literally, forever. It will not work I’m afraid.

      • PhantomBP

        When will you think a update for other devices will come out?

      • Joaquim Barbosa

        Never. The only reason the nonce collision method worked for those devices on those specific firmwares is a bug in the devices which made them repeat nonces. That bug has been fixed in recent firmwares, and other devices never had it at all. It isn’t something you can update the tool to add devices. The only reliable way is with a jailbreak, the iPhone 5s was a lucky exception to the rule…

      • NeXuS46WarrioR

        I have the same problem with my iPhone 5S

  • Arpit Gandhi

    Can this be done using linux VM ? I can’t go past step 12 : brew install ideviceinstaller. this is throwing error

    • Joaquim Barbosa

      It can, but the process will be different. Homebrew does not exist for Linux, so many of the steps, including step 12 won’t work. Try using this guide instead:

      https://www.reddit.com/r/jailbreak/comments/5vjl5s/tutorial_how_to_restore_to_ios_102_with/

      Good luck, and let me know if you have more questions!

      • Arpit Gandhi

        Thanks. that did not work some how on linux VM. I created Mac VM and tried it. It got stuck at “Sending NORData Now”. How long it takes at this step? I cancelled it after 30 min or so. Currently back at iphone 6 iOS 9.0.2. Enabled ftp0 using cl0ver,

        Any suggestion how to fix this?

      • Joaquim Barbosa

        You could try using a USB stick to make a bootable Ubuntu and use that instead of a VM, with the guide I linked above.

        If not, try again with the Mac VM. I think “Sending NORData Now” is a generic step of the process, it doesn’t give information about what is going wrong, I’m afraid.

        Did you activate tfp0 correctly, and are you sure you completed Part 1 of the guide successfully before moving on?

        Good luck!

      • Arpit Gandhi

        No luck. Finally I was at a stage when it was uploading the ramdisk. It got error at 66% and my phone got in the stage where I couldnot recover back. I lost my 9.0.2 JB and had to restore it to 10.2.1. I don’t think there is a way to go back to 10.2 is it?

      • Joaquim Barbosa

        Did you manage to complete the guide?

        If not, did you get any further through it?

  • Arpit Gandhi

    Can this be done using linux VM?

  • ZEUS _

    everything succesful until last step. the last step. about to restore device. waiting for device. failed with error code=-11
    iphone 6 plus jailbroken with jbme ios 9.3.3

    • Joaquim Barbosa

      Did you get it to work on a second try? Do you have any further error information? Thanks.

      • ZEUS _

        I tried 5 times and followed the instructions very carefully.
        I have mac book pro retina with USB 3.0.
        I use the jailbroken method like this
        ./futurerestore_macos -t YOUR-10.2-SHSH-HERE -b YOUR-BASEBAND-FIRMWARE-BBFW-HERE -p YOUR-BUILDMANIFEST.PLIST-HERE -s YOUR-SEP-FIRMWARE-IM4P-HERE -m YOUR-BUILDMANIFEST.PLIST-AGAIN-HERE YOUR-10.2-IPSW-HERE

        the iphone goes into recovery state. itunes shows up. I don’t touch itunes.

        what do you think?

      • Joaquim Barbosa

        And you replaced the command with the filenames of your files? Did you complete part 1 of the guide successfully first?

        What was the full error in terminal when it tries to restore and fails?

        Thanks

      • ZEUS _

        I completed the first part successfully. checked nvram etc..
        I replaced correct file names. I double checked everything.
        it stucks waiting for device. error code 11.
        I can try one more time if you want the full error message

      • Joaquim Barbosa

        1) use 1conan’s website TSS Saver to check your shsh2 file and make sure it’s valid, and that it matches the model of your device.

        2) try having your device unplugged from the computer when you run nonceenabler to patch the device. Plug it back in after if patching succeeds.

        3) try skipping out the reboot to recovery step, and instead issue the futurerestore command straight away without putting the device in recovery.

        4) make sure you have right Sep and baseband files. I think your device has more than one of each inside its IPSW. Google which ones are correct for your device model.

        5) if you see it again, please give the entire error message you are getting, and exactly when it appears, and exactly what you had done before it appeared.

        I know these suggestions are a bit vague, but without more information they’re the best I can do. Other people have reported the same error as you, but without the same fix being used by everyone to succeed. Good luck!

  • Timonline

    I successfully hit the ApNonce but receive the error below:

    Device has requested ApNonce now
    Found device in Recovery mode
    Identified device as n53ap, iPhone6,2
    Extracting BuildManifest from IPSW
    ERROR: zip_open: iPhone_4.0_64bit_10.2_14C92_Restore.ipsw: 11
    ERROR: zip_open: iPhone_4.0_64bit_10.2_14C92_Restore.ipsw: 11
    ERROR: Invalid archive
    [Error] ERROR: Unable to extract BuildManifest from iPhone_4.0_64bit_10.2_14C92_Restore.ipsw. Firmware file might be corrupt.
    Done: restoring failed.
    Failed with errorcode=-3

    Any help will be appreciated.

    • Joaquim Barbosa

      Make sure you have the right IPSW for your device, there are two iPhone 5s models and the IPSWs are different. Make sure you have Global/GSM (whichever is appropriate). After that, make sure you haven’t edited or removed any files from that IPSW, only the 10.2.1 one should be opened to get files out. Lastly, check your futurerestore command. Did you specify the BuildManifest.plist properly (twice, with both the -p and -m flags)?

      Good luck, and let me know if you still have problems!

      P.s. Well done for getting the correct nonce in the end.

    • Joaquim Barbosa

      Did you manage to make it work in the end?

      • Timonline

        Yeah all is good, thanks for asking. I re-downloaded the IPSW. Funny thing is when I ran a diff command on both IPSW (one that failed and one that succeeded), no output was produced. In other words, they’re identical.

        Oh well!

  • Yash Mehta

    not a single apnonce i got from device matches the blobs which i saved 🙁

    • Timonline

      If you still have the output of the future restore command, send it to my gmail at timrashed@gmail.com

      Will look for a pattern to see the most common apnonce and then try to cross reference it with your blob.

      • Yash Mehta

        email id doesnt work.

      • Timonline

        My bad, small typo. tmrashed@gmail.com

      • Yash Mehta

        can i try on 10.2.1 or keep trying with 10.3 b1?

      • Joaquim Barbosa

        You can’t try with 10.2.1, only 10.3 b1, but as my other comment explains, unless you have a specific set of circumstances it still might not work. But 10.2.1 definitely won’t work.

    • Joaquim Barbosa

      What device do you have? If it’s anything except an iP5s it almost certainly won’t work. If it is an iP5s, the blobs which repeat are probably (but not definitely) two that begin 9e4… And 9f4… If you don’t have blobs saved for those nonces, it will not work.

  • madnedroj

    i keep getting sep errorcode=15 anyone know how to fix linux

    • Joaquim Barbosa

      Make sure you have downloaded the correct IPSW for your device (iOS 10.2.1) to get the SEP file from, and make sure it is the right SEP file inside the IPSW. Try following this to help with Linux-specific problems:

      https://www.reddit.com/r/jailbreak/comments/5tmtxm/tutorial_a_complete_guide_to_restoring_iphones/?ref=search_posts

      Good luck, let me know if it works!

      • madnedroj

        Got past now keeps freezing on got apnonce

      • Joaquim Barbosa

        Freezing? Could you give some more information please or the Terminal print-out?

        At what Step of the guide does this happen? Are you doing Part 1+2 of the guide, or just Part 2?

      • madnedroj

        Part 2 of the guide I am using the nonce collision method because I am un-jailbroken it will give me like 15 apnonce from device then freeze

  • Joaquim Barbosa

    If you run futurerestore in terminal with no commands at all it should print out a ‘how to use’ list showing the no baseband command, that may show you how to use it. If it doesn’t specify where to put it, try first where the baseband command would be in the original command, and if that doesn’t work, at the very end of the command. This should not cause a problem, if it fails, it shouldn’t fail in a damaging way and you can just keep experimenting.

    Let me know how it goes and what the correct usage is when you find out please!

  • yOr3z

    Hello, thanks for your guide, clear and concise, thank you so much seriously.

    I currently started the nonce collision method on my iPhone 5s to upgrade from 10.1.1 to 10.2.
    From what I read below, I might be part of those lucky devices which allow for upgrade through this method.

    When I downloaded my .shsh2 from TSS Saver, I noticed that in the iOS 10.2 folder I had six other folders, therefore, six different .shsh2.

    Let’s say that I waited one hour and I had no luck with the first one.
    Will it be useful to start over the method with the others?

    • Joaquim Barbosa

      Thanks for the kind words!

      As for your query, you probably could use the nonce collision method, I believe you can specify multiple nonces which might speed it up.

      BUT…

      You don’t need to do that because you can do the nonceenabler method which will work straight away. Just jailbreak on 10.1.1 first with Yalu b7, then follow parts 1 and 2 of the guide…

      Let me know if you get stuck, and good luck!

      • yOr3z

        Hello Joaquim,

        Thank for you lights!!! Tough work, but I finally managed to do it.
        Please, to anyone, see my comment on the part 1 of this guide if you intend to go from 10.1.1 to 10.2 on iPhone 5s

        y.

      • Joaquim Barbosa

        No problem, I’m glad you got it done ok!

      • yusslayer

        please help ..i done everything and i got About to restore device…

        Waiting for device…

        ERROR: Unable to connect to device in restore mode

        ERROR: Unable to open device in restore mode

        [Error] ERROR: Unable to restore device

        Done: restoring failed.

        please someone i have resolve this in 5 day and not got it..shsh valid all valid but not connect to device in restore mode ..

  • Juan Seijo

    Hi Joaquin !

    I want to Thank you for this tutorial works like a charm !

    I’ve been jailbreaking since iOS 3-4 and like always i came to iDownloadblog for this kind of tutorial

    thanks and keep the good work !

    • Joaquim Barbosa

      Thanks Juan, glad it worked for you!

  • Lakshay Mittal

    I have a windows Pc. Is this method only operational on Macbook? I have collected all the required files just I want to know how to use future restore on windows 10?

    • madnedroj

      no carnt on widows only linux and macos try it with vm

  • ink

    Hello Joaquim,
    Is this method only work with shsh2 blobs saved?
    If i dont have shsh2 blobs 10.2 saved, is it still work?
    regards,

    • Timonline

      The whole point is that you use shsh2 blobs. If you didn’t save them, I’m sorry but you’re out of luck

  • Lakshay Mittal

    I have a windows Pc. Is this method only operational on Macbook? I have collected all the required files just I want to know how to use future restore on windows 10?

    • madnedroj

      Nope not for windows try using vm with macOS or linux

    • Joaquim Barbosa

      I recommend either Ubuntu (free) or macOS Sierra, running in a VM. There are free trials of VMs if you do not already have one. Good luck!

  • madnedroj

    Does anyone know how to fix got apnonce freeze tried restarting pic nothing working or do I need to install something else

  • yusslayer

    please help ..i done everything and i got About to restore device…

    Waiting for device…

    ERROR: Unable to connect to device in restore mode

    ERROR: Unable to open device in restore mode

    [Error] ERROR: Unable to restore device

    Done: restoring failed.
    please someone i have resolve this in 5 day and not got it..shsh valid all valid but not connect to device in restore mode

  • yusslayer

    hai ..is your error solve..i got same error ..if u success please reply me thanks

  • Joaquim Barbosa

    Hi, I asked tihmstar about this error but he is busy at the moment unfortunately. This error seems to be affecting a few people, and none of them seem to have solved it. You don’t seem to have anything in common either except for 6(+) models.

    Please let me know if you manage to fix it, and I’ll write again if I hear of a solution. Sorry not to be more help.

    • ZEUS _

      No. I couldn`t find a solution yet.
      tried so many times.

      • yusslayer

        i got same error in my 5s 9.3.1..i want try linux vm if it work..if u work please tell me..so headache 5 days with no fix

    • timominous

      Hi Joaquim Barbosa, I tried yOr3z’s method in part 1 and it seemed to work until before the final step. I received this error and the device rebooted.

      ERROR: device didn’t accept BasebandData

      ERROR: Unable to successfully restore device

      [Error] ERROR: Unable to restore device

      Done: restoring failed.

      Failed with errorcode=-11

      My hunch is it was because of the baseband file. There were 2 of them and maybe I chose the wrong one. I’m stuck on recovery mode now and when I try using futurerestore again it keeps trying nonce collision.

      • sickbigbrother

        Late reply, I know but I’d been in the same boat (error code 11, phone unresponsive in recovery mode) but was able to reboot the device with some version of the software reiboot.

        Maybe this helps somebody in the same situation. At least give it a try before you restore to 10.2.1 (had to reboot the PC first, then reiboot finally recognized the device in recovery mode)

    • yusslayer

      Hai Joaquin..I got same error like ZEUS..but I’m in iPhone 5s jalibroken 9.3.1 ..any solution. I have try in no jalibroken too..take 5 hour..which blob shsh u suggest have change a luck to restored.

  • Sly-Fi

    Joaquim,
    Thanks for the EXCELLENT tutorials. When unzipping the 10.2.1 .ipsw file for my iPad Air 2 and find two different .bbfw files:
    Mav7Mav8-7.21.00.Release.bbfw and
    Mav10-5.32.00.Release.bbfw

    Which should I use for futurerestore?

  • Lakshay Mittal

    Sir can you tell me the tutorial for linux ? just provide me the link

  • Lakshay Mittal

    Hello sir,
    As you said to me to try on linux vm. I successfully installed ubuntu on vm and now can you please tell me the steps of how to use futurestore on ubuntu vm.
    Thanks. My iphone 6s is running 10.2.1 & I want to downgrade it to 10.2

    • madnedroj

      There’s a tutorial on YouTube

      • Lakshay Mittal

        Sir can you provide me the right link please. As there are alot of videos on Youtube.

      • madnedroj

        I will make tutorial for you on ubuntu

      • Lakshay Mittal

        Thank you so much Sir, So nice of you. I will really appreciate your help. Waiting for your help.

  • Something

    futurerestore can’t seem to detect my iphone once it’s in recovery mode. I get

    can’t init, no device found
    failed with errorcode=-3

    I’m using linux and I have everything else correct, can anyone help me?

  • Lakshay Mittal

    Finally made my day. Searching for this proper guide for days. Now at last stage. its searching correct ApNounce from device.
    Lets see hows much time it will take.
    Patience is key now.
    Fingers crossed.
    In average how much time it will take to find the correct nouce??

    • :D

      5 months

  • Lakshay Mittal

    Hey
    In some Videos I have seen that people update more than one shsh2 file. I have two sh2sh2 files. one for 10.2 and other for 10.2.1. should I update them both or just put 10.2.1 shsh2 blob??

  • sickbigbrother

    Man I wish I was so lucky. I have three different 10.2 blobs saved for the same device (2 with two different versions of tsschecker, one with the tss saver website) … I tried this method here and the similar method from a reddit tutorial. 9.3.3 jbme, Vmware, Sierra, all dependencies installed …

    With the first two blobs I’m getting error 11, with the other one error 3. Already thought I’d have to restore once after the phone (6s) was unresponsive in recovery mode after the irecovery -s command didn’t work when I got error 11 for the first time but was able to reboot with an older version of the reiboot software after some research the next day (at least I’m happy I didn’t prematurely pull the 10.2.1 trigger)

    So pissed I missed the 10.2 signing window by 30 minutes but wasn’t in any hurry cause thought in case I’d have prometheus … But obviously some are lucky, some aren’t. 6s would’ve been my test device, not really sure if I should risk it with my iPad Pro 9.3.3 now.

  • Lennon Carvalho

    I followed the tutorial but used iOS10.3 as the signed ipsw used to get the indicated files. The restore went to 100% but my phone still booting in recovery.
    I tried iRecovery auto-boot true, but it didn’t work.
    Now future restore says cpnonce is wrong, can I set it again or at least get out of recovery? Help please, any info is apreciated.

  • Muhammad F. Elhawwary

    can I downgrade from 10.3.1 to 10.2 using this method ?!

    • Joaquim Barbosa

      Not without a jailbreak (so no).

  • Enes

    Hello man, I wish you are reading my post.
    I have an iPhone 5s. 10.3.1. I was trying to downgrade 10.2. I have SHSH2 blob. I installed the MacOS with VMware. I got every thing. But the last. I really waited so much. The correct Apnonce not coming. What can I do ? plz help me :/

    • Joaquim Barbosa

      It won’t work. The nonce collision method only works on older firmwares, it won’t work on iOS 10.3.1 as far as I know.

  • Wesley Dalton

    I’m using an iphone 6s on ios 10.3.1 and the plist and stuff is from 10.3.1 (which is currently being signed) and my blobs and stuff is from 10.2 and 10.3.1 has 2 bbfw files, one of them is Mav13-2.54.00.Release.bbfw and the other one is Mav10-5.51.00.Release.bbfw. I was wondering which one to use and if there’s even a possibility that this could work for my situation.

    Thanks
    Wesley

    • Joaquim Barbosa

      This can’t work for you because you are currently on 10.3.1 and therefore have no jailbreak. This needs a jailbreak to work except in very specific cases, which you aren’t one of (iP6s 10.3.1). Best you can do is not update further, keep saving blobs, and wait. Cheers!

      • Josh Flanagin

        hi Joaquim, I am having the same issue however i am using an iPhone 6s+. does this still apply and therefore i cannot downgrade or can I simply use one of the two .bbfw files to downgrade. thanks.

  • Matthew Friend

    Where is the guide for doing Prometheus no jailbreak method?