How to Save iOS 10.3.3 SHSH2 Blobs for Future iOS Downgrades

10

Those who have been working with iOS, specifically jailbreaking, for a long time will probably remember the now dead method of downgrade to unsigned firmware version using SHSH blobs. These are essentially files from Apple’s verification server that tell iTunes the iOS version that are for is still being signed and that you can install it. A program called TinyUmbrella was used in order to save these SHSH blobs for use to downgrade in the future.

This method of downgrading hasn’t worked for quite a few years now, but it seems to be making somewhat of a comeback. A new method of backing up the newer SHSH blob files (SHSH2) has now been released. A tool named Prometheus made by iOS developer tihmstar has been released. This tool is able to restore 64-bit iOS devices that are jailbroken, to unsigned iOS versions (provided you have SHSH2 blobs for that version).

The developer of the downgrade tool has released a second tool called tsschecker which allows you to save .shsh2 blob files for your iOS devices. This tool can be quite complicated to use, so it is easier for most people to use TSSSaver. TSSSaver runs on tsschecker, except it is a web based version of the tool. This means you not only don’t need to download any files and play around with commands, but you also don’t even need to use a computer to do it if you have your device’s ECID.

Requirements & Notes

  • This will only backup SHSH blobs for iOS versions which are still being signed by Apple.
  • .shsh2 blob files are unique to each device, meaning you cannot simply use the blobs of another device with your own.
  • You do not need to be jailbroken in order to backup .shsh2 blobs.
  • You do not need to have iOS 10.3 installed on your device to save SHSH2 blobs for it.
  • You will need the ECID number of your device.
  • If you are using an iPhone 6s or iPhone SE you will need the board configuration of your device (see instructions below to find it). If you are using any other device, you can skip step 5.

Written Guide

The first thing you will need to backup your .shsh2 blobs is the ECID number of your device. This can be found in one of two ways:

Using iTunes:

  1. Plug your device into your computer using a lightning cable.
  2. Open iTunes on the computer.
  3. Navigate to the summary page for the device within iTunes.
  4. Click on the serial number until it changes to ECID.
  5. To copy the number click the Edit tab in the top tab bar and then click Copy ECID.

Using Cydia (no computer required):

  1. Open Cydia on your jailbroken iOS device.
  2. Search for and install UDID Calculator.
  3. Open the newly installed app and copy the ECID value within.

If you are using an iPhone 6s or iPhone SE, you will also need to find the board configuration of your device. You do NOT need to do this for any other device (unless TSSSaver asks for it):

  1. Download and install the Battery Memory System Status Monitor app from the App Store onto the device you want to save SHSH2 blobs for.
  2. Once installed, open the app and tap on the System tab at the top of the screen.
  3. In here you should see the devices Model on the first line. This is what you need to use for the board configuration. It will be something like ‘N71mAP’.

 

Saving SHSH2 Blobs With TSSSaver

  1. Open your browser of choice and navigate to tsssaver.1conan.com.
  2. In the ECID box, select either Hex or Dec for the ECID type. If you used iTunes to find the ECID number select Hex, and if you used UDID Calculator select Dec.
  3. Paste the ECID number you copied for your device into the ECID text box.
  4. Select your device type and model under the Identifier section.
  5. This step is only for iPhone 6s and iPhone SE users: A box should appear under the device selection box asking for the Board Configuration (see instructions above to find it). Type the board configuration of your device into this box.
  6. Confirm you are not a robot by ticking the I’m not a robot checkbox.
  7. Click submit, wait a few second, and the page should give you a link to the .shsh2 blobs for your device.
  8. Click the link and ensure there the folders within contain .shsh2 files. If they do, download them by either clicking the Download ZIP, save to Google Drive, save to Dropbox, or save to OneDrive options. Keep these files safe as you may need them for future downgrades.

Video Guide

ALSO SEE: How to Restore to iOS 10.2 Unsigned Using Prometheus on iPhone, iPod touch or iPad

10 COMMENTS

  1. hi is it possible for me to be able to downgrade to ios 10.3.3 unsigned from ios 11.1 on my iphone 6 device i saved blobs and i saw 11.1 and 11.0.1 i didn’t see blobs for 10.3.3 and i’m currently on 11.1

  2. Can someone please answer this? Are SHSH blobs saved from the current installed iOS version, or from the current one being signed by apple at the moment of doing the process. i.e.I have 9.0.1 I used tsssaver and the file said it was from 10.3.3. Is this right? I always thought you only could save the blobs of the version you had installed.
    Thanks in advance for whoever responds. I couldn’t find anything online and had this doubt for a long time.

    • It is based on what version apple is signing when you save the blobs. The version running on the device is completely irrelevant in this case since it is just the devices ECID that is used to save the blobs, not the device itself.

  3. hi
    i did save but it says the shshs size is 0kb
    is somethiong wrong somewhere ?? bcos in ur video u have 54kb why i have 0kb ?
    or it didnt save it
    pls help

LEAVE A REPLY

Please enter your comment!
Please enter your name here