Difference between revisions of "Bluefreeze"

From The iPhone Wiki
Jump to: navigation, search
(straightened usage explanation)
Line 1: Line 1:
{{delete|Claiming false functionality<br />'''A downgrade is not possible w/o SHSH blobs'''}}
 
   
 
'''Bluefreeze''' is a tethered downgrade solution by a group called the Private Dev Team. It claims to allow the downgrade of a device to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 without [[SHSH]] blobs saved via [[TinyUmbrella]] or [[iFaith]]. iDevices that are supported are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.
 
'''Bluefreeze''' is a tethered downgrade solution by a group called the Private Dev Team. It claims to allow the downgrade of a device to [[iOS]] 4.3, 4.3.5, or 5.0 from 5.0.1 without [[SHSH]] blobs saved via [[TinyUmbrella]] or [[iFaith]]. iDevices that are supported are iPhone 3GS, iPod touch 3G, and all [[S5L8930|A4]] devices.
Line 18: Line 17:
 
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
 
* [https://github.com/ThePrivateDevTeam/Bluefreeze GitHub]
 
* [http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html Guide]
 
* [http://theprivatedevteam.blogspot.com/2011/12/bluefreeze-bootfreeze-initial-release.html Guide]
  +
  +
[[Category:GUI Tools]]

Revision as of 23:40, 13 December 2011

Bluefreeze is a tethered downgrade solution by a group called the Private Dev Team. It claims to allow the downgrade of a device to iOS 4.3, 4.3.5, or 5.0 from 5.0.1 without SHSH blobs saved via TinyUmbrella or iFaith. iDevices that are supported are iPhone 3GS, iPod touch 3G, and all A4 devices.

Download

Usage

  • Step 1: Use iFaith to get an iOS 5.0.1 SHSH blob
  • Step 2: Open the iFaith SHSH file. Bluefreeze will change md5 and iOS version. For example, if downgrading to iOS 5.0 on an iPod touch 3G from iOS 5.0.1:
<ios>5.0.1 (9A405)</ios> -> <ios>5.0 (9A433)</ios>
<ipsw_md5>c13c14abcde18bbdb7d70c8563f56ac1</ipsw_md5> -> <ipsw_md5>989b8327acab76e7632443a0e179250c</ipsw_md5>
  • Step 3: Save the modified file, and use it to build an iOS 5.0 custom firmware. Even though the firmware has fake shsh blobs on it, iTunes will still accept it. (iREB will be used to bypass error 16XX)
  • Step 4: Since there are no shsh blobs present the device will boot up into DFU mode. A bootrom exploit, known as Limera1n, will be used to bypass Apple's blob checker per se. (Tool used: redsn0w)
  • Step 5: Device will boot up, and one will have a tethered downgrade.

External Links