Jailbreak iOS 10.2: why should we preserve SHSH2 blobs now!
The developer of Yalu jailbreak tool for iOS 10.1.1, Lucas Todesco urged users of the iPhone and iPad to save blobs certificates for iOS 10.2, wrote on his twitter account. It means you have to save your SHSH2 blobs for the iOS 10.2 before Apple stops signing for this version of iOS.
Italian designer and an expert in the field of information security recommended to anyone who is planning to jailbreak, SHSH2 save digital certificates.
“Recommendation: keep to yourself blobs for iOS 10.1 / 10.2», – wrote Todesco.
Many subscribers appeared natural question about the imminent release of the jailbreak iOS 10.2. However, the answer is not a hacker gained optimism:
“Jailbreak for iOS 10.2 do not plan to, but the operating system is still vulnerable to the technique used. Therefore, it is the second contender for the hacking, “- wrote the developer.
In the following tweets, Todesco explained that his exploit is partially compatible with iOS 10.2.
“iOS 10.2 vulnerable to exploit my KPP. Do not have to spend a zero-day vulnerability to it, “- he said.
“Just want to say that one KPP is not enough, but I will not work on the missing components,” – said the hacker.
Prometheus TSSChecker Tool:
A well-known hacker Tihmstar has a really cool application that was announced last year, called “Prometheus”. The application allows saving your .shsh2 blobs of your iPhone and iPad.
What is SHSH blob?
It is a file of a digital signature with which Apple checks the version of iOS on your device.
Prometheus will not work with certificates saved with TinyUmbrella or savethemblobs. It needs files in a special shsh2 format, they can be prepared using Tsschecker utility.
How to keep .shsh2 blobs using TSSchecker:
To learn how to use Tsschecker to retrieve the certificate for the iPhone and the iPad later in this guide.
Step #1: Download Tsschecker utility from this page (Mac, Windows, Linux) and remove the application from the archive.
Step #2: On your desktop create a folder TSS and place it tsschecker unzipped file.
Step #3: Open TextEdit and connect your iPhone or iPad to your computer.
Step #4: Open iTunes and go to the Device page.
Step #5: On the iTunes front page, we need to learn the ECID and the model identifier of the connected device. Learn they can click on the serial number field.
Step #6 : Copy the two items in TextEdit. In this case, the identifier “iPhone7,2” model as “ECID” – “1234A8956dB162”.
Step #7: Copy the following lines into a text document:
/ Users / username / Desktop / TSS / tsschecker -d IDENTIFIER -e ECID -i 10.2 -s
/ Users / username / Desktop / TSS / tsschecker -d IDENTIFIER -e ECID -i 10.1.1 -buildid 14B150 -s
/ Users / username / Desktop / TSS / tsschecker -d IDENTIFIER -e ECID -i 10.1.1 -buildid 14B100 -s
/ Users / username / Desktop / TSS / tsschecker -d IDENTIFIER -e ECID -i 10.1 -s
Step #8: We need to replace the words written in capital letters. Instead, specify the username account name, change the ID on «iPhone7,2», and ECID – on «1234A8956dB162». Do this for each of the four lines.
Step #9: Once you are ready, open the Terminal.
Step #10: Run the following command
chmod + x ~ / Desktop / TSS / tsschecker
Step #11: Now tsschecker must be executable.
Step #12: Copy each line of the TextEdit document on line at the terminal, pressing Enter after each line. The result should be similar to the following:
Step #13: After performing these steps, you will have saved files in shsh2 format. This digital certificates blobs for iOS 10.2 operating systems, iOS 10.1.1 and iOS 10.1.
Step #14: In any case, you can re-run the above command, adding the parameter apnonce. This will help increase the chances of a downgrade in the future.
For example, the command is as follows:
/ Users /technohacker / Desktop / TSS / tsschecker -d iPhone7,2 -e 1234A5678B912 -i 10.1 -s -apnonce 9804d99e85bbafd4bb1135a1044773b4df9f1ba3
These commands will overwrite the files you’ve already saved. Therefore, pre-move them to another location. Search for files stored in the folder you need to /Users/username next to the folder Documents and Downloads.