Those who have been working with iOS, specifically jailbreaking, for a long time will probably remember the now dead method of downgrade to unsigned firmware version using SHSH blobs. These are essentially files from Apple’s verification server that tell iTunes the iOS version that are for is still being signed and that you can install it. A program called TinyUmbrella was used in order to save these SHSH blobs for use to downgrade in the future.
This method of downgrading hasn’t worked for quite a few years now, but it seems to be making somewhat of a comeback. A new method of backing up the newer SHSH blob files (SHSH2) has now been released. While these cannot be used to downgrade your device just yet, a tool named Prometheus made by iOS developer tihmstar is due to be released on new years eve. This tool will supposedly be able to restore 64-bit iOS devices that are jailbroken to unsigned iOS version (provided you have SHSH2 blobs for that version).
The developer of the upcoming downgrade tool has released a second tool called tsschecker which allows you to save .shsh2 blob files for your iOS devices. This tool on its own is quite complicated to use, however there is also another web-based tool called TSS Saver which makes the process much easier.
Requirements & Notes:
- This tool will only backip .shsh2 files for iOS versions which are still being signed by Apple.
- .shsh2 blob files are unique to each device, meaning you cannot simply use the blobs of another device with your own.
- You do not need to be jailbroken in order to backup .shsh2 blobs, however the downgrade itself will only work with already jailbroken devices.
- You will need the ECID number of your device.
The first thing you will need to backup your .shsh2 blobs is the ECID number of your device. This can be found in one of two ways:
- Plug your device into your computer using a lightning cable.
- Open iTunes on the computer.
- Navigate to the summary page for the device within iTunes.
- Click on the serial number until it changes to ECID.
- To copy the number click the Edit tab in the top tab bar and then click Copy ECID.
Using Cydia (no computer required):
- Open Cydia on your jailbroken iOS device.
- Search for and install UDID Calculator.
- Open the newly installed app and copy the ECID value within.
Once you have found your ECID number you can get to actually backing up your SHSH2 blobs:
- Open your browser of choice and navigate to tsssaver.1conan.com.
- In the ECID box, select either Hex or Dec for the ECID type. If you used iTunes to find the ECID number select Hex, and if you used UDID Calculator select Dec.
- Paste the ECID number you copied for your device into the ECID text box.
- Select your device type and model under the Identifier section.
- Confirm you are not a robot by ticking the I’m not a robot checkbox.
- Click submit, wait a few second, and the page should give you a link to the .shsh2 blobs for your device.
- Click the link and ensure there the folders within contain .shsh2 files. If they do, download them by either clicking the Download ZIP, save to Google Drive, or save to Dropbox options. Keep these files safe as you may need them for future downgrades.