SSH Ramdisk iOS Devices A7-A11

Creating the ramdisk

1. Download and unzip the ramdisk files.


2. Open a terminal and drag the ramdisk folder into it.


3. Run bash create.sh [devicetype] [version]
   
   
   • Replace [devicetype] with your device type (like iPhone9,2).
   
   
   
   • For iOS 12 and above, replace [version] with the installed iOS version.
   
   
   • For iOS 11 and below, use the device version or 12.0 if it does not work.
   
   
   • If you encounter "Failed to download firmware keys" error, update to Big Sur or later.
   
   
   • A9 devices with the S8003 chip require running with -t: bash create.sh iPhone8,1 14.8 -t

Loading the ramdisk

1. Connect your device and enter DFU mode.


2. Run bash pwndfu.sh to enter pwned DFU mode (this might take a few tries).



3. Run bash load.sh [devicetype].


4. Once the ramdisk has loaded and you see the Apple logo with a gray bar, run ./resources/tcprelay.py -t 22:2222 to start the SSH proxy.
   
   
   • If you get an error, download and open Sliver from the appletech752 website and install Python when prompted.
   
   


5. Open a new terminal window and connect to the device by typing ssh root@localhost -p 2222 (password is alpine).


6. Once connected, run mount_root to mount the root filesystem on /mnt1.


7. Run mount_data to mount the data partition on /mnt2.

Commands