SSH Ramdisk

Legacy iOS Kit has an option to create and boot an SSH Ramdisk for all supported devices.

Notes

• Supported devices: All 32-bit devices, most 64-bit (A7/A8/A9/A10) devices
• If you have a checkm8 device that supports iOS 16 or newer, it is not supported here. Use SSHRD_Script instead. You may also need to use it on macOS if your device is on iOS 16 and newer.
• 32-bit devices on iOS 9 or newer may/will have issues on trying to mount and/or access the data partition (/mnt2 or /dev/disk0s1s2)
• 64-bit devices on lower than iOS 11.3 will have issues writing to the data partition

Usage

• Run Legacy iOS Kit: ./restore.sh
• Go to Useful Utilities -> SSH Ramdisk
• Select option/s needed in SSH Ramdisk Menu

Options

• Connect to SSH - Connect to the device via SSH
• Dump Blobs - Dump onboard SHSH blobs of the device. 64-bit devices only.
  • For 32-bit devices, go to Saving onboard SHSH blobs of current iOS version
• Install TrollStore - Install TrollStore to Tips app of the device. 64-bit devices on iOS 14/15 ONLY.
• Dump Baseband/Activation - Dump baseband and activation record files from the device. 32-bit devices only.
• Disable/Enable Exploit - Send commands to set NVRAM variables for powdersn0w devices.
• Get iOS Version - Get the current iOS version of the device.
• Clear NVRAM - Send command to clear NVRAM of the device.
• Update DateTime - Update the date and time of the device to current.
• Reboot Device - Reboot the device and exit script.
• Exit - Exit the script.
  • SSH ramdisk is still booted on the device and can be connected to manually or by running ./restore.sh --sshrd-menu

Accessing Data

For accessing data, note the following:

• Host: sftp://127.0.0.1 | User: root (or mobile) | Password: alpine | Port: 6414
• Use tools like Filezilla to access the files. Make sure to also run the needed mount command first
• Mount command for 32-bit devices: mount.sh
• Mount commands for 64-bit devices:
  • Mount filesystems with this command (for iOS 11.3 and newer): mount_filesystems
  • Mount root filesystem with this command (for iOS 10.3.x and newer): mount_apfs /dev/disk0s1s1 /mnt1
  • Mount root filesystem with this command (for iOS 10.2.1 and older): mount_hfs /dev/disk0s1s1 /mnt1
  • Warning: Mounting and/or modifying data partition (/dev/disk0s1s2 /mnt2) might not work for 64-bit devices.
  • Warning: Mount filesystems at your own risk: there is a chance of bootlooping on 64-bit devices on older than iOS 11.3.
  • Warning: The mount_filesystems command will likely have issues on tether downgraded devices.