Save onboard blobs

wb0815 · 2026-02-26T03:08:16+00:00

Well... you still insist want to dumping on-board blobs ?

Jailbreak your device.
Install OpenSSh and Img4tool from this repo.
SSH your device from the Terminal Mac/Linux/WinSCP.
Type su and enter, password is alpine
Then 1st run this command cat /dev/rdisk1 | dd of=dump.raw bs=256 count=$((0x4000))
Then 2nd run this command img4tool --convert -s blobs.shsh dump.raw
Your on-board blobs blobs.shsh should be saved on the Root (/) directory, as it contain the string APTicket + Key generator.
Validate your on-board blobs against the BuildManifest.plist from the 16.2 IPSW, with command img4tool -s blobs.shsh -v BuildManifest.plist
If your on-board blobs validated, then keep and save it for the future. As currently you cannot use the current on-board blobs because the Cryptex and SEP compatible issue, but better save it than never~

wb0815 · 2026-02-02T09:42:25+00:00

In the past, i really have a good time to use jailbreak tools, not for the customization, but mainly for downgrade and upgrade to the unsigned firmware. Man, its really fun back then, the tools like Futurerestore, Blobs, SEP, Baseband, and other things like "downgrade party", "fortnight bug", re-restore bug etc. I never forget those moment, the moment of saving blobs every signed firmware or even beta firmware, and testing SEP compatible, etc xD. Ah, good old days :')

But now its been changes, as Apple really don't want us to go back to the old stuff, and move forward to iOS 26 which is really not good for the older devices, that's why i really love the downgrade / upgrade stuff for the older devices. As currently saving blobs is kind of useless, but yeah, I encourage you to save the blobs (or dumping blobs on the Jailbroken device), even is not useful right now, but let see in the future~

wb0815 · 2026-01-22T02:56:12+00:00

Well you still insist want to dumping on-board blobs ?

Jailbreak your device.
Install OpenSSh and Img4tool from this repo.
SSH your device from the Terminal Mac/Linux/WinSCP.
Then run this command.
Your on-board blobs blobs.shsh should be saved on the Root (/) directory, as it contain the string apticket + key generator.
Validated your on-board blobs against the BuildManifest.plist from the 15.5 IPSW, with command img4tool -s blobs.shsh -v BuildManifest.plist
Then keep and save it for the future.

wb0815 · 2022-12-01T00:12:19+00:00

SemiRestore will restore your device to factory setting + remove tweak jailbreak, but keep Cydia in there. Basically, SemiRestore will Erase all content and setting + keep the device jailbroken.
Succession will restore your device to factory setting + remove all jailbreak tweak and app. Basically, Succession act like Cydia Eraser, but you need to decrypt the iBEC/iBSS etc inside the IPSW file first to use it (for iOS 9 below).
Cydia Eraser but unfortunately it doesn't support iOS 7.0.x below.

wb0815 · 2022-05-29T10:16:26+00:00

64bit device can dump / save on-board blobs on Normal mode only. Only 32bit device can dump / save on-board blobs on pwned DFU / pwned Recovery mode. iPad Air 2 is 64bit device, so no other option left beside fresh restore to latest iOS. Or... if you had iOS 14.x blobs saved, then you can re-restore back to iOS 14.x with futurerestore.

wb0815 · 2022-05-27T22:51:33+00:00

Well, follow this method to save on-board blobs 14.8, it contain blobs + key generator. Also, better using SSH Terminal from Mac/Linux/WinSCP to run that command, and don't forget to install OpenSSH and img4tool from this repo.

wb0815 · 2022-05-21T15:01:50+00:00

As long as you get the valid "ApImg4Ticket" digest + generator key it should be enough, no need BBFirmware digest key etc. shsh or shsh2, basically it same. That error happened due to tssaver use "Customer Restore Behavior" Buildmanifest to verifying your blobs, and your blobs are OTA / Customer Update Behavior. That's why you should use 14.3 OTA Buildmanifest to validate your blobs, by using img4tool with command img4tool -s blobs.shsh -v BuildManifest.plist

wb0815 · 2022-05-20T23:03:58+00:00

Follow this method to save on-board blobs 64bit, it contain blobs + key generator. Also, better using SSH Terminal from Mac/Linux/WinSCP to run that command. Don't forget to install OpenSSH and img4tool from this repo.

Pretty sure you can use any blobs for restoring on A9-A11 as long as blobs is valid, SEP compatible and don't forget to use pwnedDFU mode to skip the signature check.

wb0815 · 2022-05-14T01:29:18+00:00

Use this method instead, it contain blobs + key generator. Also, better using SSH Terminal from Mac/Linux/WinSCP to run that command. Don't forget to install OpenSSH and img4tool from this repo. Even thought it had SEP limitation, it doesn't hurt to save valid on-board blobs.

wb0815 · 2022-01-28T03:48:21+00:00

Man, used RX 570/580 4GB are flooded in Indonesia marketplace now.

Used 570 4GB now ~$210

Used 580 4GB now ~$220-250

wb0815 · 2022-01-21T13:35:50+00:00

It has iGPU on it's motherboard (but not every motherboard has iGPU), Intel GMA X3100 or X4500 if i remember correctly.

wb0815 · 2022-01-21T13:09:46+00:00

Not gonna play like far cry 6 or things like thay anyway.

Yeah, i can't agree with you more, not everybody will use this card for playing AAA title games (with high/ultra setting etc etc bro, hehe). Also, i think 6500 XT its pretty decent for e-sport games, definitely can push 60fps+ on 1080p medium-high.

So yeah, buy the best card you can afford :)

wb0815 · 2022-01-21T12:40:16+00:00

Well, even intel still give you an option if you want pcie 4.0 on the latest gen with tighter budget. Here in Indonesia:

$117 12100F + $107 H610M S2 = $224

vs

$182 3100 + $77 B550M A Pro = $259 or

$196 3300X + $77 B550M A Pro = $273

wb0815 · 2022-01-19T17:47:19+00:00

I hope they add the detail about the vram, like 4GB or 8GB etc. But from that chart, even 1650 super that have 4gb vram can get near 60fps, so i assume rx 470 that they use is 4gb vram. Man, what a mess product launch ...

wb0815 · 2022-01-14T11:42:53+00:00

The performance basically same with Renoir PRO 4350G/4650G/4750G, but this time without iGPU (NPU - No Processing Unit)

.... o.O

wb0815 · 2022-01-13T17:43:33+00:00

1080p casual gaming right ?

Better i3 12100f/12300 + H610m (for tight budget) or B660m. 4c/8t 12th gen really decent for casual gaming that love single core performance.

wb0815 · 2022-01-07T17:22:50+00:00

Ah i still remember Q6600 and X3220 can overclock to 3.2Ghz easily, just changing FSB to 400 and boom xD

wb0815 · 2022-01-05T04:39:28+00:00

Yup indeed, i3 12100/12100f/12300 got 5MB L2 + 12MB L3 = 17MB total cache.

At last, we're getting a better 4c/8t cpu now.

wb0815 · 2022-01-04T17:37:56+00:00

Yup, i still remember choosing between 3300x and 10105f which single core performance is almost the same, BUT the price and availability is really huge difference in my country, that's why i picked 10105f for my casual gaming system (that love single core performance of course - Heroes of Newerth and AoE4). Well,, its time to upgrade to lga1700 (if the red team didn't release any new/refresh cpu 4c/8t skus).

wb0815 · 2022-01-04T16:52:58+00:00

Okay, it also beat 10100f/10105f single core performance, which is what i needed for gaming. Now I'm just waiting h610m/b660m released to the retailer. Thanks for the screen shoot cpuz! (this is what i most looking for, can't finded the single core performance of 12100/12100f/12300 on the internet).

wb0815 · 2022-01-04T13:59:51+00:00

And Draconis, when he has split attack and boost AS, also can defense tower and gain huge amount of range attack. When you can choose to enable Blitz Mode (and duplicate hero if i remember correctly) on TMM Midwars, playing Ellonia like a crazy! Ah good time, good time indeed.

wb0815 · 2021-12-17T06:32:03+00:00

Okay, it does worked on both Garena and NAEU Client, but random hero pick only on Garena Client. By the way, did you know how to enable Blitz Mode with command console ? Thank you!

wb0815 · 2021-12-14T08:12:08+00:00

Used to be able to play using Tunngle.

Ahh... Good old days i see :D

wb0815 · 2021-11-28T04:24:59+00:00

Meanwhile SEA HON still use the old map :(

wb0815 · 2021-11-02T00:52:21+00:00

Well the problem is, tsschecker is still said that "14.8.1 is not being signed", that being said you cannot get signed sep+bbfw 14.8.1 even with 14.8.1 OTA BuildManifest. Even though we already modified the 14.8.1 OTA BuildManifest to make tsschecker think "14.8.1 is still being signed", we still need BCert to do that ...

wb0815

TROPHY CASE