Results 1 to 5 of 5

Your favorite Apple, iPhone, iPad, iOS, Jailbreak, and Cydia site.

Thread: Modifying SHSH blobs

  1. #1
    Default Modifying SHSH blobs
    I was attempting to restore my iPod touch 4G from 4.3.5 to 4.3.3, but I didn't have the necessary SHSH blobs to downgrade. This got me thinking about how O could create an SHSH file, and I came to the following conclusion:
    If an SHSH file were to be decompiled and it's code examined, one would see the bits necessary for iTunes to validate the downgrade.
    I realize Apple made it so that each and every iDevice will be unable to use any other iDevice's blobs, but that was done by a program following an algorithm (perhaps something to do with the serial number?), and as such, can be replicated. If it were to be written, a program that will create SHSH files based on pre-existing ones, it would eliminate the need for the worry and hassle of downgrading without SHSH blobs.

  2. #2
    The code's signature would break if you modified the SHSH, even with a hex editor. But, if you succeed, I'll respect you greatly as a hacker as I'd love to go back to iOS 3 and 4.
    My brain has an error at line 300: In function brainInitialize: the function "sarcasm" may not respond to "init".

    <a href=''><img src=''/></a>

  3. The Following User Says Thank You to ReverseEffect For This Useful Post:

    Alfroggy (08-27-2013)

  4. #3
    Capture.JPG i think this might help i have a partial shsh and basically i just copied it and edited it to fit (what i understood)should go with my .ipsw i edited of a 5.1 partial to try and see if it would work with a a 6.1 full shsh since apple only signs partials but i don't know what to do with the highlighted stuff if you do figure out where they go it would be amazing if you could tell me that would be great oh and the stuff high lighted i don't know what do with to make it work the black circles is the stuff im almost 100% sure is where it belongs the stuff circled in red is the one thing i changed the stuff in between the blue circle is obviously the apticket and most definitly needs to change sorry people I'm really wasted so ignore spelling errors don't go grammar Nazi on me

  5. #4
    Retired Moderator Orby's Avatar
    Join Date
    Aug 2010
    Omicron Persei Eight
    Thanked 699 Times in 594 Posts

    The yellow highlighted material is, or should be, the base-64 encoded signature of that particular IMG3 file (e.g., iLLB, kernelcache) along with the APTicket, an additional signature checked by LLB on each boot.

    I can state with near certainty that this blob, if it's constructed from a partial iOS 5.1 SHSH blob, will NOT work with iOS 6.1. The signature will be broken, as the underlying files will have changed.

  6. The Following User Says Thank You to Orby For This Useful Post:

    Alfroggy (08-27-2013)

  7. #5
    Hello.How can I open an SHSH blobs?Is there any software? windows or mac ?

Posting Permissions
  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts