matthewpierson / checkm8-nonce-setter Goto Github PK

A nonce setter for devices compatible with checkm8

Shell 100.00%

checkm8-nonce-setter's Introduction

checkm8-nonce-setter

A nonce setter for devices compatible with checkm8

iOS version doesn't matter. If your device is compatible with checkm8 + Linus Henze's Signature Check Remover then you can set your nonce and downgrade. This script is macOS only.

Instructions -

"./main.sh"

Thats it. The script will tell you what to do.

You need git installed for this to work. There shouldn't be any other dependencies

After setting nonce with this, you can futurerestore with the shsh you used during the script.

Keep in mind SEP and Baseband both need to be compatible with the version you are trying to downgrade to. This script doesn't change that, only allows you to set your nonce without being jailbroken.

Basically, this is useless unless some iOS 13 SEP + Baseband is compatible with iOS 12, but someone may find some use for it.

Please don't ask me stupid questions, I'll just ignore you. Please don't use issues to ask stupid questions, just for actual issues thanks.

Support includes :

iPhone 5s

iPhone 7

iPhone 7 Plus

iPhone X

iPad Air 1

iPad Mini 2

iPad 6th Gen (2018)

iPad Mini 3

iPad 7th Gen (2019) (Thanks to @RazMashat on twitter for keys =) )

iPod Touch 7th Gen (2019)

SUPPORT COMING FOR:

iPad Pro (10.5 Inch) (Need firmware keys)

iPad Pro (12.9 Inch 2nd Gen) (Need firmware keys)

I will expand support when more devices are supported by checkm8 + Linus Henze's Signature Check Remover

checkm8-nonce-setter's People

Contributors

Stargazers

Watchers

checkm8-nonce-setter's Issues

ither unsupported device or no device found

Hello, brother, my macbook 10.14.6，phone:x 13.4，after I installed mojave security update 2020-002, I couldn't fix the g value, and it kept showing "Either unsupported device or no device found", and I reinstalled the system and did not install the 2020-002 update , Normal use, is there any solution?

(Request) iPad Pro 9.7 A9X

@MatthewPierson is there way to add support to iPad Pro 2016 with A9X? I looked everywhere and couldn't find a solution do downgrade my iPad.

iPad 7th Gen is apparently not supported

Well theres nothing much to say here other than the iPad 7th Gen doesn't work. When trying to input a generator value and hitting enter it outputs this:

*** Matty's Checkm8 APNonce Setter ***
Do you want to input a generator? (y,n)
y
Please enter your desiered generator.
0x1111111111111111
Your generator is 0x1111111111111111
0x1111111111111111
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
Either unsupported device or no device found.
Exiting..

Would there be a way to fix that?

iPad 6th Gen is apparently not supported

iPad 6th Gen is apparently not supported.............

When trying to input a generator value and hitting enter it outputs this:

Would there be a way to fix that?

ipwndfu loop after typing nonce and dfu mode

Device: iphone 7 plus 13.2.3 w/blobs
I get this after typing my nonce in and pressing enter and putting my phone into DFU mode. After getting in DFU mode it stays there for a bit and it says:

checkm8 exploit by axi0mX *
modified version by Linus Henze *
s5l8965x support by Matthew Pierson *
Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:001A05CC1844ED26 IBFL:3C SRTG:[iBoot-2696.0.0.1.33]
But then soon right after this message, the phone is kicked into recovery mode and i get this:
ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. Exiting.
No matching processes belonging to you were found
Waiting 10 seconds to allow you to enter DFU mode
--
Here's the full log:
Cloning into 'ipwndfu_public'...
remote: Enumerating objects: 463, done.
remote: Total 463 (delta 0), reused 0 (delta 0), pack-reused 463
Receiving objects: 100% (463/463), 1.87 MiB | 2.41 MiB/s, done.
Resolving deltas: 100% (239/239), done.
Starting ipwndfu
No matching processes belonging to you were found
Waiting 10 seconds to allow you to enter DFU mode
Attempting to get into pwndfu mode
Please just enter DFU mode again on each reboot
The script will run ipwndfu again and again until the device is in PWNDFU mode
checkm8 exploit by axi0mX *
modified version by Linus Henze *
s5l8965x support by Matthew Pierson *
Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:001A05CC1844ED26 IBFL:3C SRTG:[iBoot-2696.0.0.1.33]
ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. Exiting.
No matching processes belonging to you were found
Waiting 10 seconds to allow you to enter DFU mode

[request] add iphone 8+ and iphone 8

Akayn already added the function for the iPhone X/8+/8 for loading unsigned images.
https://github.com/akayn/ipwndfu

iPhone x no recovery mode

Hi bro,Thank you for sharing this excellent instrument, With iPhone 5s I don't have any problems, It works well, While with iPhone X he can't send him to recovery mode. What can it be? Thanks 🙏 ( macOS Mojave version 10.14.6)

*** Matty's Checkm8 APNonce Setter ***
Do you want to input a generator? (y,n)
y
Please enter your desiered generator.
0x1111111111111111
Your generator is 0x1111111111111111
0x1111111111111111
Supported Device
iPhone10,6
Supported device found.
Please connect device in DFU mode. Press enter when ready to continue

Cloning into 'ipwndfu'...
remote: Enumerating objects: 432, done.
remote: Total 432 (delta 0), reused 0 (delta 0), pack-reused 432
Receiving objects: 100% (432/432), 1.90 MiB | 3.29 MiB/s, done.
Resolving deltas: 100% (217/217), done.
Starting ipwndfu
2019-11-25 19:05:12.317 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:12.318 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:12.319 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:12.320 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:12.321 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:12.322 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
No matching processes belonging to you were found
Waiting 10 seconds to allow you to enter DFU mode
Attempting to get into pwndfu mode
Please just enter DFU mode again on each reboot
The script will run ipwndfu again and again until the device is in PWNDFU mode
*** checkm8 exploit by axi0mX ***
Found: CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:0E ECID:000908590498402E IBFL:3C SRTG:[iBoot-3332.0.0.1.23]
Device is now in pwned DFU Mode.
(2.92 seconds)
2019-11-25 19:05:27.552 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:27.552 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:27.553 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:27.553 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:27.554 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:27.555 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
Device is an iPhone X, using akayn's signature check remover
Heap repaired.
Bootrom Patched
you can now load unsigned firmware
and debug the next boot stages
Device is now in PWNDFU mode with signature checks removed (Thanks to Linus Henze & akayn)
Entering PWNREC mode
Entered PWNREC mode
Current nonce
NONC: a70c80fffaf615a6d7cea73fe3c337b146257617ff35b66f6d7779166fb06798
Setting nonce to 0x1111111111111111
Waiting for device to restart into recovery mode
New nonce
NONC: a70c80fffaf615a6d7cea73fe3c337b146257617ff35b66f6d7779166fb06798
We are done!

You can now futurerestore to the firmware that this SHSH is vaild for
Assuming that signed SEP and Baseband are compatible
MacBook-Pro:checkm8-nonce-setter-master salvatoredebari$

What patches do the iBSS/iBEC images have?

Not necessarily an issue, just curious on what patches are used for this script to work.

Hope to get the support of A9X

Hi, I have decrypted most of the iPad Pro 9.7 inch firmware keys and uploaded some to iPhonewiki, but when I try to restore these versions with fr I found that fr does not set the Nonce value correctly, so I hope the tool will support A9X ,is it possible? I can provide the necessary assistance if you need it.

AMD Hackintosh - Exploit failed on iPhone X

Keep getting this error

"ERROR: Exploit failed. Device did not enter pwned DFU Mode.
No matching processes belonging to you were found"

iPhone X - macOS Catalina 10.15.7 (AMD Ryzentosh via OpenCore bootloader)

iPad Air 2

Hello :)

Are you planning to add support for A8X

thanks

Too many arguments & Iphone 7 not supported

/Desktop/checkm8-nonce-setter-master$ ./main.sh
Cloning into 'ipwndfu_public'...
remote: Enumerating objects: 13, done.
remote: Counting objects: 100% (13/13), done.
remote: Compressing objects: 100% (11/11), done.
remote: Total 463 (delta 5), reused 8 (delta 2), pack-reused 450
Receiving objects: 100% (463/463), 1.88 MiB | 738.00 KiB/s, done.
Resolving deltas: 100% (235/235), done.

Do you want to input a generator? (y,n)
y
Please enter your desiered generator.
0x1111111111111111
Your generator is 0x1111111111111111
0x1111111111111111
Enter device model please
iphone 7
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
Your iphone 7 is not supported, sorry.
Exiting...

(Request) iPhone SE (A9)

Please add support for iPhone SE

SEP firmware is unsigned error

I have setted the nonce using it , nonce was set successfully. But on future restore it says the SEP firmware is not being signed. I unchecked the Set nonce to Blob on future . can I downgrade from 15.2.1 to 14.1 using the blobs ?

checkm8-nonce-setter file igetnonce is broken

Hello,
My instructions to how to downgrade iphone where
./main.sh
0x1111111111111111

If you get an error saying permission denied for igetnonce, then run:
cd files
ldid -S igetnonce
ldid -S irecovery
ldid -S lsusb
ldid -S eclipsa8000
ldid -S eclipsa8003

and then i used these commends because i got error igetnonce is broken and after trying these commends always i got error cd: to many arguments can you please fix the igetnonce. I added screenshots then maybe you understand better what is wrong.
Best wishes!

Support for iPhone 6

Hi, I have an iPhone 6 and i would like to help you to add support for it.
Tell me how i could help/test

(Request) Add Iphone 8. 😢

Can you guys add Iphone 8 badly needed, I can't use my iphone 8 now because of the update (IOS15) and I can't use my phone now and I think downgrading is the only way to use it. 😢

ETA for iPad Air 2

Are you planning to add support for A8X processor? If yes, when?

iPad 7th gen not working

Hi, I have an error while using your tool with the iPad 7th gen (2019)
I know that it's available in the README but I can't get it to work
I have the following message : "ERROR: Unable to discover device model"

Requires the script to be run from the same dir

No biggie, but I'm opening this in case anyone else does the same thing. The command in the README states that you should be in the same folder, but it was just a little surprising that it was a requirement.

~/Unsynced documents/futurerestoring » checkm8-nonce-setter-master/main.sh
*** Matty's Checkm8 APNonce Setter ***
Do you want to input a generator? (y,n)
y
Please enter your desiered generator.
0x1111111111111111
Your generator is 0x1111111111111111
0x1111111111111111
checkm8-nonce-setter-master/main.sh: line 82: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 89: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 96: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 103: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 110: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 117: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 123: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 129: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 135: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 141: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 147: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 153: files/igetnonce: No such file or directory
Either unsupported device or no device found.
Exiting..

Update to Python3

Can this be updated to Python3 already? Come on now! :)

Iphone 6s

Can you add 6s please :( 🙏🙏🙏🙏

Either unsupported device or no device found

Either unsupported device or no device found.
Exiting..

why do i get this error after i put the generator key?

unstable exploit

This error repeats itself hundreds of times, I've had no success over the past few days.

Starting ipwndfu
Waiting 10 seconds to allow you to enter DFU mode
Attempting to get into pwndfu mode
Please just enter DFU mode again on each reboot
The script will run ipwndfu again and again until the device is in PWNDFU mode
*** checkm8 exploit by axi0mX ***
*** modified version by Linus Henze ***
*** s5l8965x support by Matthew Pierson ***
Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0C ECID:00022859389B8D26 IBFL:3C SRTG:[iBoot-2696.0.0.1.33]
ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. Exiting.
No matching processes belonging to you were found
Waiting 10 seconds to allow you to enter DFU mode
Attempting to get into pwndfu mode

ipwndfu works first try (iPhone 7), it seems Linus's modified version makes it very unstable, you should make a version with the original.

@DaemonJWS - Twitter.

matthewpierson / checkm8-nonce-setter Goto Github PK

checkm8-nonce-setter's Introduction

checkm8-nonce-setter

checkm8-nonce-setter's People

Contributors

Stargazers

Watchers

Forkers

checkm8-nonce-setter's Issues

Recommend Projects

Recommend Topics

Recommend Org