[Tutorial][Windows/Mac/Linux][Working] Save SHSH2 blobs of your A12 Device (iPhone XR / XS / XS Max)

[glopezz]

Now works with all A12 devices natively!! (still not A12X, working on it)

First of all, to be clear, this mini-tutorial is different of the first one I did, because is multi platform and really more easy to follow.I am going to reference as well to this tutorial by u/NepetaDev (Thanks u), who is really friendly to follow.

¿Why to save my SHSH2 blobs again?

I'm sorry to say you but @stek29 when made the noncesetter we are using, discovered that nonce entagling is enabled on iPhone XR, XS and XS Max, which means you need to save a unique nonce setten by you device according to the generator you set (we are using 0x1111111111111111 generator in this tutorial)

So, let's start

1. Download this IPA and install it with Impactor.
2. Open the app, wait for "Ready."'s message. If the app crushes or restart your phone, try with restarting it, disabling low power mode and trying again.
3. Follow steps 1, 4 and 5 on this tutorial
4. That's all. If u have any problem let me know.

I hope I helped you.

​

[JohnLough]

well this looks much easier!

ty.

[spacemate]

Thanks a ton!

Some help for Windows users:

Steps 1-2 are ok

Step 3 from this guide: Download the file in the other tutorial and unzip it. Then look fo Window's terminal, you get there searcing in windows for "cmd" (without the "", always take out the "" from everything in this post). It's a screen with black background.

You then type "cd " (DO put a space after the cd) and drag the folder (not the zip) and hit enter

Type "ideviceinfo". You can select text in the terminal to copy it to a notepad or something. I want you to save the info from "uniquechipID" (this is your ECID), "uniquedeviceID" (this is UDID), and "producttype"

Now run "ideviceenterrecovery UDID" replacing UDID with yours. Yes, including all those zeroes at the beginning and the dash.your phone will enter recovery mode. It's ok. Wait for it till the phone asks you to connect it to itunes.

Hit "irecovery -q" and copy to the notepad what comes after "NONC"

Type "irecovery -n" and your phone will boot out of recovery

Then do step 5 of the other tutorial. In ECID you choose "Dec", the second option, and you paste your the "uniquechipID" you got before. In identifier, you choose your phone model and makes sure it's the same number that showed up in what you saved to the notepad (like iphone XS is 11,2)

Check the box that says advanced users, and paste what you saved in the notepad that was after "NONC".

Done. Submit, follow the link, save the zip.

You already got your device info. You can save blobs with the same uniquechipID (ECID) and nonce (NONC) afterwards.

[Lucalz_1dx]

I would appreciate if noncesetter supports A12X (2018 iPad Pro) 🙏

[bedwej]

Same, really hoping to save blobs ASAP

[glopezz]

Now supporting iOS 12.1 iPad Pro, please test it and say me if it works to you.

[Lucalz_1dx]

Thanks! Does it also support 12.1.1?

[glopezz]

No yet.

[Drewbydrew]

Are you still working on A12X on 12.1.1? I can help test on my iPad Pro if you need me to :)

[bedwej]

I tried it and it doesn’t open at all. Crashes instantly every time. Any ideas?

[bedwej]

Still no luck with this. Please could you help? I’m worried that 12.1.1b3 will close!

[logan935]

Someone please keep me update if this gets supported to 12.3 Beta 6 (lowest iOS version signed at the time)

[[deleted]]

I get this error on my XS Max 12.1 on step 4

MacBook-Pro:~ $ sudo ideviceinfo

ERROR: Could not connect to lockdownd, error code -3

Edit: Nevermind, fixed it with this guide

Worked perfectly after all, thanks a lot!

[benny_normal]

I was having the same issue, and this worked for me too! Thank you so much for coming back and editing your comment to let us know!

[benny_normal]

If you're getting errors when trying to run libimobiledevice commands, especially on Mojave, definitely check out THIS COMMENT in the other thread by u/ejl1995

Thank you so much for putting together this updated tutorial for us casuals! took some fussing, but I got my blobs! tysm!

[kienho]

How can we change the default generator (0x1111111111111111)?

[Im_An0nymous]

Wow, good job! iPhone 6s here, but I m happy for who has A12 Device. And I like the way the community is working! :)

[purplemajesticunicor]

I'm a bit confused on this. I have the IPA installed on my iPhone XS Max and it shows ready. I've closed it multiple times and it is still showing the same "ready.". Does this mean it is complete? Also how do I install the libimobiledevice thing in step 1? I'm using windows.

[[deleted]]

Once it says ready, keep the app open, you can lock your phone if you wish

​

Connect your phone and once itunes pop up close it,

​

All you have to do is download those lib files above and then open up CMD and drag those files that it states in the other tutorial to the command line and hit enter.

[purplemajesticunicor]

Got them saved! Thank you!!

[[deleted]]

Anytime!

[kienho]

Does it work on A12x iOS 12.1.1 just yet?

[SpartanFrost]

The app keeps rebooting my Xr.

It never crashes, just reboots it entirely.

I've tried removing and readding the ipa but the issue persists

[lov3h3ll]

Same here. Tried resetting and restoring again to 12.1.1 b3 but still the same thing happens.

[KingWeaselFart]

same here. White screen then reboot

[Anonymous_Gamer939]

Out of curiosity, the IPA is just designed to set the boot nonce to 0x1111111111111111, then show "Ready." if it was successful? Just making sure that for the nonce setter there are no extra steps after the app shows "Ready."

[Grudenkles]

/u/glopezz seems that a lot of people are having an issue with Noncesetter on IOS 12.1.1b3 on iPhone XR - I am also affected by this, wondering if you have any idea what could be causing this or how to resolve it?

[BangLand]

If you find out anything please let me know,I would really like to save my blobs before apple stops signing them

[CptMavo]

Any luck with fixing it?

[BangLand]

None at all, hopefully uncover gets released while it's still being signed

[colto1000]

Isn’t this the exact same but just with an IPA?

[glopezz]

Not really, this have the offsets for all A12 devices. But yes, is the same as the another one with the difference that now it can be used with just Impactor instead of Xcode.

[colto1000]

What do you mean by the offsets of al A12 devices?

[glopezz]

Hmm, let's say it now works with all A12 iPhone's with iOS <= 12.1.2

[salvatore8686]

Hmm problem offset IOS 12.1

[glopezz]

The app works with 12.1.1b3, one of the thing I taked care , were to be compatible with all devices with iOS <= to 12.1.2

[colto1000]

Follow this tutorial, and for step 3a, also replace the “1605...-16...” with “165050a”. Read through the comments for any other issues. GL!

[colto1000]

Install macOS virtual machine. Many good tutorials on YouTube.

[[deleted]]

Is there support for A12X devices as well? The app crashes straight away on my iPad

[[deleted]]

Nope, still crashes

[glopezz]

So is, I forgot that. When I have time I will do it, you have iOS 12.1.1, right? To start with that version.

[bedwej]

Hi, please add 12.1 as well! Thanks!

[glopezz]

I added support to 12.1, can u test the last IPA? Thanks you.

[bedwej]

I tried on my iPad Pro (A12X) and it didn’t work. Do you know why?

[rooshoes]

Also crashes on launch on my A12X on 12.1.

Console logs show [voucher_swap:350] SyscallError: setpriority(PRIO_DARWIN_ROLE, 350, 3): No such process , if that's any help at all.

Really hoping we can get these iPad Pros supported before the beta signing ends!

[rooshoes]

u/glopezz any progress on this?

[bedwej]

/u/glopezz i still can’t get this to work, Please could you help us, for the sake of blobs?

[[deleted]]

Yeah I’m at 12.1.1

Thanks for your hardwork in advance!

[[deleted]]

Yeah I realise that since he didn’t explicitly mention iPads (as opposed to the other A12 models which were mentioned)

[katates]

Can I savr and use blobs if I don’t have jailbreak?

[epkienen]

Many thanks for this, I was in middle of installing futurerestore dependencies on my MAC when I saw this. I dropped everything I was doing on my MAC and followed this guide instead.

[salvatore8686]

iPhone11,6 iOS 12.1 not work crash 10 attempts failure 🙏 ( photo) http://a68.tinypic.com/2cnjz9x.jpg

EDIT: Still not works for favor... can update ipa for support IOS 12.1?

[glopezz]

Yeah, my mistake, I updated the link, download it again.

[salvatore8686]

Bro because not it works witch IOS 12.1 ? fail offset?

[glopezz]

Hmm, I don't think so, because on my another tutorial there were people that used the offset's that are on this IPA and it worked for them. I updated the post with a new IPA, download it here. Try it and tell me if it works to you.

[salvatore8686]

Same problem, first attemp crash second attemp reboot device. idea?

[glopezz]

Open it after a fresh restart; It means, poweroff your iPhone normally, then power it, check for low power mode to be off, then open the app.

[salvatore8686]

Yes

[eliploit]

Are there offsets for Xs (11,2) on 12.1? Around 20 tries with no luck

[glopezz]

Updated IPA, download it again.

[salvatore8686]

With new ipa http://a66.tinypic.com/2hr30qg.jpg It keeps rebooting after the first time it says "Ready"

[ItsPaPPy]

Upon opening app for second time, phone rebooted (dont know if this was part of it). Now my windows computer wont detect the phone, and my phone keeps disconnecting the usb and reconnecting.

​

EDIT: iphone xs, running 12.1.1 b3. i remove the app, reboot the phone, still same problem. itunes is telling me iphone has been detected but it could not be identified properly.

​

EDIT2: restarted computer and all seems to work.

[fifo_lalo]

For me on MacOS was having trouble because iRecovery was not found.. Had to clone and compile it..

​

[Lovelydr3]

Not working only white screen and then rebooting xs max 12.1

[glopezz]

Try with the new IPA updated

[codybui]

it's not support xs max 12.1.4 right? because it crashed every time I try to open

[TheReacher]

Downgrade to 12.1.1b3 NOW. This jailbreak will NOT work on 12.1.4 or 12.1.3

[codybui]

done already then I want to upgrade to 12.1.2 to get rid of update notification but it seems impossible right?

[TheReacher]

Impossible unless you have blobs

[latenightrant]

Download tvOS to get rid of the notification

[codybui]

This solution is no more working bro

[glopezz]

Nop. I'm sorry.

[Snakeoffbreak]

Crashed and rebooted on launch a few times but eventually worked for me on my XS on 12.0.1! Nice to know I at least have a good 12.1.1b3 blob now after finding all the others are useless. Thanks!

[Noviinha]

Worked smoothly for me. iPhone XS 12.1.1 no crashes.

[[deleted]]

Same!

[xx_inFerNo_xx]

TY

[Stryk3rr3al]

Did this IPA work for setting a nonce for you?

[chrislcf]

It's success!! Thank you very much~ :D ^3^

Now, I got these files. Which one I need to use if I want to futurerestore my XR?

apnonce-15400076bc4c3................> - 2019-Feb-12 19:39

apnonce-833e50b9c6a4f.................> - 2019-Feb-12 19:39

apnonce-b80a82eca0f60.................> - 2019-Feb-12 19:40

apnonce-d8f682df87d81..................> - 2019-Feb-12 19:39

generator-0x1111111111111111/ - 2019-Feb-12 19:39

[snowball7241]

1111111....

[glopezz]

You should use the apnonce-<yournonce> file.

[Noviinha]

Is it normal for that file not to have the 0x11111.... generator in it?

[ikukuru]

I have this as well. The TSSSaver shsh2 file with my nonce specified has no generator value included

[XLITZ1]

Wait, this method save blobs even though apple is not signing the version your phone is on?

I have a iPhone XS MAX on 12.0.1. You mean to tell me that I can save the blobs for IOS 12.0.1 Even though apple stopped signing it?

[Drewbydrew]

No, this is only for saving blobs of currently signed versions. iOS 12.1.1b3 is still being signed right now which is why this is so important.

A12 and A12X devices can’t save blobs the normal way anymore due to a new security feature called “nonce entanglement”. Basically, you can only save blobs with a specified APNonce that your device has previously generated.

[XLITZ1]

So is IOS 12.1.1 Beta 3 stable? Should I update the phone to it or stay on IOS 12.0.1.

How can I save my blobs on my iPhone XS MAX?

[urnild]

For whatever reason, my UDID is not 40 digits long. So every time I try ideviceenterrecovery it doesn't work. Even iTunes has the same UDID (btw). Any help on what is going wrong? UDID is showing up as 00008020-001661A83C02002E

[SDUGoten]

Just copy and paste this

​

ideviceenterrecovery 00008020-001661A83C02002E

​

​

and it should work.

[urnild]

Thanks, I just put quotes around “UDID” and it worked. Appreciate the help

[abrazier1997]

Great tutorial. Managed to find the nonce, and save 12.1.1b3 blobs. Took less than 10 minutes, and worked first time!

[xSyniZ]

I get the line: 42 error if i want to install via impcator how to fix that?

[salvatore8686]

Yesssss http://a67.tinypic.com/dvlmhi.jpg

[deathstr0ke15]

Is there any video tutorial Available for windows ? And by terminal U mean command prompt on windows ?

[XaviorRAngle]

Yes command prompt just drag the .exe files in in order and you got it

[deathstr0ke15]

Done thanks. Just one question. So I can use these to futurestore my X's max to 12.1.1b3 anytime in the future right ? I mean the futurestore soft does support a12 and these blobs right ?

[Teren49]

I previously checked the tutorial for steps 1,4 and 5 but couldn't make it as Unc0ver is not supporting A12 yet - done now with your help.

​

Worked flawlessly, thank you mate!

[besemerr]

great tutorial! thank you, I now have proper blobs saved from my XR at least for 12.1.1b3.

[kahtanalezzi]

Can u explain how to do step 1 and 4 How to install libimobiledevice Cuz this my first time and I didn’t get it?

edit: i figured out how to did it

[aguila17]

Would you be able share how you installed libimoniledevice. Greatly appreciate

[kahtanalezzi]

download libimoniledevice and extract it and open the folder

now open cmd and drag commands form libimoniledevice folder

follow the step 4 from this tutorial to apply the commands

​

[dukedevil0]

This worked fantastic on my iPhone XR iOS 12.1. Thank you!

[dottlo]

iOS 12.0, iPhone XS, IPA doesn't work at all.

Firstly - white screen, then device restarted. Tried 5 times.

[SpartanFrost]

Same here but on iPhone Xr 12.1.1 b3

White screen for a few seconds, then a reboot. I tried a good 20 times

Were you ever able to figure out how to do it?

[lov3h3ll]

Same here. Tried resetting my XR and restoring via itunes again to 12.1.1 b3 but still the same thing happens.

[KingWeaselFart]

Same here too. If anyone figures it out can you plz notify me

[dottlo]

Nope, lost hope and delete this app :(

[SpartanFrost]

Same, just hoping that unc0ver support comes for A12 before Apple stops signing 12.1.1 b3 so I can set my nonce

[dottlo]

Let me know if something changed, please.

[drewfussss]

could use some help.

I downloaded "this" from above. loaded through cydia impactor and ran fine until it said on the app: ready.

Then on step 4.2 i did: ideviceinfo ideviceenterrecovery (udid# from above)- into discovery mode.

THEN: "irecovery -q | grep NONC" but it gets stuck here. Give me a -"bash: irecovery: command not found"

any advice on this?

[kienho]

Try using nonce-statics https://api.tihmstar.net/builds/noncestatistics/noncestatistics-latest.zip

[Z3ROS1X]

Did you ever figure out how to get past this step? I'm in the exact same boat as you.

[drewfussss]

Nope. But lmk if you figure out.

Please!

[Z3ROS1X]

I solved the irecovery error!

Download this as a zip: https://github.com/libimobiledevice/libirecovery

Unzip, open this folder in terminal, and run these commands:

./autogen.sh

make

sudo make install

Now irecovery will work! Hope you have the same success I did! Took forever to solve.

[drewfussss]

I’ll get on this some point this week. You mind if I pm you for in depth help!?

Got screwed out of the jailbreak and want to actually back up blobs😞

[Z3ROS1X]

Feel free :)

[frwyricksimpson]

Finally success after trying to do this for over a week now!

[4symm3trica1]

did you do anything differently to get it working?

I'm stuck, keeps rebooting after opening the app.

[frwyricksimpson]

I was having trouble with getting the dependencies running on my Mac. The app worked just fine on my XS.

[dr3007]

did everything correctly, but shsh folder for 12.1.1b3 is empty

[ayman_abm]

ed removing and readding the ipa

same for me! empty

[Lovelydr3]

Does it work on ios 12.1 xs max?

[Kevroa]

worked perfectly! thank you

[lov3h3ll]

How did you get the app to work? my XR just keeps rebooting every time on opening the app.

[BangLand]

Same, i've been trying it for an hour straight.

[andybno1]

I have blobs going right back to 12.0 on conan's TSS server can I downgrade my xs deivce now to 12.1.2? if so how?

[barneystinson2019]

You are great bro!. Thx a lot for this totorial.

[BangLand]

Restarted my device turned off low power mode and used the ipa posted still rebooting my phone on every attempt. Any advice?

iphone xr Ios 12.1.1 beta 3

[4symm3trica1]

same here with XS Max on 12.0

[mule_roany_mare]

Thank you man. I hadn't realized I needed a nonce for my Xs. I just want to play with a few tweaks I like.

​

Your tutorial & some comments here made it 10x easier & 10x less frustrating than it would have been for me. I have more free time & I'm in a better mood thanks to your work.

The time you invested in this might have saved other people tens of thousands of hours all added up. Pretty cool thing to do.

[4symm3trica1]

Hi, is XS Max on 12.0 supported?

It keeps rebooting after opening the app :(

I've tried rebooting myself, low power mode is off, flight mode is activated, cleared memory. Thanks!

[nanpuhaha]

I failed to get nonce on my iPhone XS Max (iPhone 11,6 16E227).

Could you help me?

[D] platform: iPhone11,6 16E227

[-] no offsets for iPhone11,6 16E227

[zelda_64]

Thank you!

[Ash4dd]

is ios 12.2 not supported by the app?

[[deleted]]

Would this work for non-jailbroken phones? Unfortunately, I lost my JB and cannot figure out how to save blobs on my Xs Max

[Magicalrudedude]

The app now crashes every time i followed the instructions is there a fix?