futurerestore icon indicating copy to clipboard operation
futurerestore copied to clipboard

Failed with errorcode=-67 11.3 SHSH with 11.3.1 SEP & Baseband

Open kasiimh1 opened this issue 6 years ago • 8 comments

This error happens both with it fetching the sep & baseband Automatically and when pointed to it manually.

Found device iPhone8,1 n71map user specified to use latest signed sep [TSSC] opening firmware.json [DOWN] downloading file https://api.ipsw.me/v2.1/firmwares.json/condensed [TSSC] selecting latest iOS: 11.3.1 [TSSC] got firmwareurl for iOS 11.3.1 build 15E302 100 [===================================================================================================>] downloading SEP 100 [===================================================================================================>] [TSSC] opening /tmp/futurerestore/sepManifest.plist [TSSR] User specified not to request a Baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received user specified to use latest signed baseband (WARNING, THIS CAN CAUSE A NON-WORKING RESTORE) downloading Baseband 100 [===================================================================================================>] [TSSC] opening /tmp/futurerestore/basebandManifest.plist [TSSR] User specified to request only a Baseband ticket. Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received Found device in Normal mode Entering recovery mode... INFO: device serial number is FV waiting for nonce: 41 29 6a 84 d4 c6 58 3f 5c 16 41 89 ca c9 4b b4 df 8a 67 98 Got ApNonce from device: 41 29 6a 84 d4 c6 58 3f 5c 16 41 89 ca c9 4b b4 df 8a 67 98 Device has requested ApNonce now Found device in Recovery mode Identified device as n71map, iPhone8,1 Extracting BuildManifest from IPSW Product Version: 11.3 Product Build: 15E216 Major: 15 Device supports Image4: true Got APNonce from device: 41 29 6a 84 d4 c6 58 3f 5c 16 41 89 ca c9 4b b4 df 8a 67 98 checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID checking APTicket to be valid for this restore... Verified ECID in APTicket matches device ECID Verified APTicket to be valid for this restore [Error] ERROR: SEP does not match sepmanifest Done: restoring failed. Failed with errorcode=-67 Kasims-iMac:~ kasiim$

kasiimh1 avatar May 05 '18 08:05 kasiimh1

Which iOS version are you atm

ProAppleOS avatar May 05 '18 09:05 ProAppleOS

11.2 (15C114)

kasiimh1 avatar May 05 '18 09:05 kasiimh1

How you settet the nonce?

ProAppleOS avatar May 05 '18 09:05 ProAppleOS

The nonce was already set in NVRAM by i think OTA update? Either way it was there and i used that nonce to send for the SHSH so it would match and restore even without a nonce setter. So i have 2 versions of every blob a random one that has a random generator and one that has this nonce that's present on my device.

kasiimh1 avatar May 05 '18 09:05 kasiimh1

@xhj14012 done that. Used this command:

futurerestore -t blob.shsh2 -b baseband.bbfw -p BuildManifest.plist -s sep.im4p -m BuildManifest.plist iPhone.ipsw

Edit: it worked. Thanks.

tigeerguy avatar Jun 14 '18 17:06 tigeerguy

See https://twitter.com/stek29/status/1006424951870586880

stek29 avatar Jun 28 '18 12:06 stek29

Also see tihmstar/libfragmentzip#8

stek29 avatar Jun 28 '18 12:06 stek29