Experience your legacy devices like never before.
| Download File | Version | Date | Hash | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| v1.1 | 2025/09/24 |
Details
|
||||||||||||||
| v1.1 | 2025/09/24 |
Details
|
||||||||||||||
| v1.1 | 2025/09/24 |
Details
|
sep_racer
Improved A9(X) exploit's success rate
Update sep_block version
kpf
Fixed support for iOS 18.4+
turdusra1n
Fixed sigcheck patch for A9X
Added option to exit after SEPROM exploit
Standardized shellcode for all devices
Added ciphertext saving feature for SEPROM exploit(s)
Added checkra1n mode for tethered iOS 12.0-14.8(.1) (unofficial)
Added palera1n compatibility mode for tethered iOS 15.0+ (unofficial)
Changed the current block to be saved in the block directory (the directory must exist).
Improved sigcheck patch flow
Improved the process of entering DFU mode from recovery mode
Improved payload build chain
Added missing cache cleaning to improve reliability of shellcode execution
Added softDFU mode detection and fixed to not run checkm8 when device is in softDFU mode (iBSS/LLB DFU mode).
Remove libirecovery dependency
macOS: Improved checkm8 success rate
Linux: New USB backend built from scratch
turdus_merula
Added tethered support for 18.4-18.6
Added an experimental feature to bypass the check if the APTicket does not contain a StaticTrustCache/RestoreTrustCache in iOS 12.0-12.0.1.
Hiding unnecessary idevicerestore options
Disabled the option to save pte ciphertext block without using seprom_fwrace
Added a check to see if the IM4M (blob) and device ECID match
pongoOS
Fix A9X early iOS 10 issue
The program may get stuck before/after iBSS/iBEC/PongoOS transmission.
This may be due to USB connection issues, if you encounter this, start over from the beginning.
Restoring to iOS 10 may result in your device getting stuck in recovery mode.
Until a future update fixes the issue, restore to iOS 10.3.3 first before downgrading to your target version.
Restoring to iOS 9 from a higher version may result in a restore failure.
If you encounter this issue, restore to iOS 10.0-10.2.1 first, then downgrade to iOS 9.
Restoring to a version that is too old using pre-installed blobs may fail.
Perform a tethered downgrade first, then retry the untethered downgrade.
Restoring any device using pre-installed blobs from factory may not restore baseband correctly.
Baseband features & activation may not work.
Tethered restores may work fine.
For devices with a baseband chip, if Found non-customer FDR hashes. pops up during a restore, it's almost certain you'll have baseband issues.
There is no fix for now.
Workarounds might be developed in the future.
Some A9 devices on iOS 9 cannot be activated. Complain to Apple.
iOS 10 & 11 may fail to boot when restoring or tether booting, getting stuck on "recfg done".
Solution: Force reboot and try again. In case your device panics instead of hanging, report the issue.
The latest baseband firmware for iPhone 7 Global (iPhone9,1 and iPhone9,2) & iPad Pro (A10X) Cellular is not compatible with iOS 10.
No cellular features, activation may not be possible. YMMV.
Q: What is turdus merula?
A: turdus merula is a tool that allows you to downgrade your iOS/iPadOS device to any version you want, tethered or untethered (A valid SHSH blob is required for untethered downgrades).
Q: What is SHSH blob?
A: SHSH blob is a file generated by Apple that signs a specific iOS/iPadOS version. It can only be obtained while Apple is still signing that version. SHSH blob is required for untethered downgrades and are uniquely tied to each device.
Q: What is the difference between tethered and untethered downgrades?
A: A tethered downgrade requires connecting the device to a computer every time it boots,
but it does not require a valid SHSH blob.
An untethered downgrade functions like a normal system boot without requiring a computer,
but it does require a valid SHSH blob.
Q: What devices are supported?
A: Devices with A9 to A10X chips running iOS/iPadOS are supported. Devices with A11 and later chips are not supported. Support for A8 devices and tvOS may be considered in the future, but it is currently undecided.
Q: What iOS/iPadOS versions are supported?
A: All iOS/iPadOS versions that the supported devices have previously run are supported.
Note that tethered downgrades may have a more limited range of supported versions.
Q: How does this differ from futurerestore?
A: futurerestore requires a compatible SEP to work, which restricts which iOS/iPadOS versions you can downgrade to.
turdus merula does not have this limitation and thus supports all iOS/iPadOS versions.
Q: Will turdus merula ever be open-source?
A: An open-source version of turdus merula is planned for the future, but the current focus is on stability, reliability, and bug fixes.
Q: Found an issue?
A: Report it here: GitHub Bug Tracker
Q: Is there any guide?
>> Untethered Downgrade Guide
>> Tethered Downgrade Guide
Clarity
kok3shidoll
Mineek
Alfie CG
axi0mX
Cryptic
littlelailo
Nick Chan
Siguza
staturnzz
tihmstar
windknown
xerub
checkra1n team
libimobiledevice