Can't boot pongoOS about pongoos HOT 6 OPEN

So, we patch iBoot in a way that when it hands off execution to the next stage (usually the kernel), it will jump to Pongo instead. The problem that you're running into is that your file system is broken and iBoot cannot load the kernel, and it will thus never jump to Pongo.

But once it drops to recovery, you should be able to take the iBEC from the latest IPSW, fetch a valid APTicket for it and upload it to recovery. This iBEC will never run, it's just needed to satisfy iBoot. You would then use the Pongo USB shell to replace the loaded iBEC with an extracted kernel, and attach a custom ramdisk.

from pongoos.

try /Applications/checkra1n.app/Contents/MacOS/checkra1n -cp the c is force cli mode and the p boots to pongoOS
(I don't know if this really helps or not)

from pongoos.

@IIWare Pongo only boots if iBoot exits though.

@Clindbergh I guess you could try uploading a signed iBEC to recovery...

from pongoos.

@Clindbergh I guess you could try uploading a signed iBEC to recovery...

@Siguza: Could you elaborate how that would work? I think I tried it as part of the telnet ramdisk.

How likely do you think is a Hardware (USB) defect? I am thinking about replacing the lightning board.

from pongoos.

I am in the same exact situation with my iPhone 6s (N71mAP) that failed to update because of error 14 (out of space). Running checkra1n -cp restarts the device from DFU into recovery.

See this thread on booting the images using irecovery by entering the commands manually. @ajpayne1 was able to create an SSH ramdisk. I'm still trying to figure that out...

iOS 13.5 / iPhone10,1 / Unable to load ramdisk #9:
danieltroger/telnetd_ramdisk#9

from pongoos.

So, we patch iBoot in a way that when it hands off execution to the next stage (usually the kernel), it will jump to Pongo instead. The problem that you're running into is that your file system is broken and iBoot cannot load the kernel, and it will thus never jump to Pongo.

But once it drops to recovery, you should be able to take the iBEC from the latest IPSW, fetch a valid APTicket for it and upload it to recovery. This iBEC will never run, it's just needed to satisfy iBoot. You would then use the Pongo USB shell to replace the loaded iBEC with an extracted kernel, and attach a custom ramdisk.

Hi sir, sorry for bumping an old issue. But can you recommend a tutorial or write up on how to patch iBoot(ibss,ibec) maybe using IDA, to boot to the next stage? Thank you very much

from pongoos.