Skip to content

Experimental script that enters kDFU mode on an iOS device in pwned DFU mode via an SSH ramdisk. Currently non-working.

Notifications You must be signed in to change notification settings

LeoI07/Pwned-DFU-to-kDFU-Converter

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Pwned DFU to kDFU converter for 32/64-bit devices

What's the point?

Some tools are designed to work with kDFU mode and do not work properly with pwned DFU mode. This tool will allow you to enter kDFU mode without needing to jailbreak your device.

There's no warranty provided!

How to use it

Getting the requirements:

bash Requirements.sh

Making the ramdisk:

bash Ramdisk_Maker.sh -d <device> -i <version>

Getting a dropbear_rsa_host_key (only needed on 64-bit devices, requires a jailbreak) :

bash get_dropbear_key.sh

Booting it :

Put the device in pwned DFU mode and:

bash Enter_kDFU.sh -d <device>

Note: You need libirecovery

Does it work?

Not on any devices I've tested it on. The ramdisk boots from kDFU mode on an iPad2,5, but it does not re-enter kDFU.

Credits/Thanks to

  • @Ralph0045 for his SSH ramdisk maker and loader
  • @iH8sn0w for iBoot32Patcher
  • msftguy for ssh-rd
  • @daytonhasty for Odysseus and kairos
  • @mcg29_ for compare script
  • @Jakeashacks for rootlessjb
  • @tihmstar for partialzipbrowser
  • @xerub for img4lib
  • @tihmstar for libfragmentzip, partialZipBrowser and tsschecker
  • @axi0mX for his ios-kexec-utils fork
  • @LukeZGD1 for iOS-OTA-Downgrader, which some code is borrowed from

About

Experimental script that enters kDFU mode on an iOS device in pwned DFU mode via an SSH ramdisk. Currently non-working.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Shell 100.0%