iPhone 5S – How to create combined CFW for iCloud Bypass with LibiMobileDevice [Alpha]



iPhone 5S – How to create combined CFW for iCloud Bypass with LibiMobileDevice [Alpha] NAND Attack Method
THIS IS A WORK IN PROGRESS!

In this video I will show you how to combine iOS 9.2.1 File System with iOS 9.3.1 IPSW in order to create a custom made firmware (IPSW) for NAND Attack with LibiMobileDevice for iCloud Bypass on iPhone 5S iOS 9.3.1.

The NAND method is harder to perform and requires practice and patience, but it is the best thing you can try for iCloud issue on these devices.
Creation of the CFW modified (patched Setup.app) requires the proper AES keys, this is why we combine the IPSWs.

I managed to successfully bypass iPhone 5 (16 GB) (Black) using this method. You can see it here as well as the proofs:

==IMPORTANT AREA==
How to bypass iPhone 4S and 5C: https://youtu.be/gQv-PPI7-Yk
How to bypass iPhone 5: https://youtu.be/eVgXOmzH-r4
How to exit Recovery Mode: https://www.youtube.com/watch?v=SMuy5ZjUpJ8

P.S. I can upload my CFW if…

iphone 6s jailbreak 9.1

37 comments Add yours
  1. My brother, how I could solve this problem …. I can not find a solution to it
    ERROR: TSS request failed (status=94, message=This device isn't eligible for th requested build

  2. Finally the wait is over. I'm here to subscribe you as fuck as I want lol. You're the first who upload a REAL method how to bypass 5s I'm done on fake method and I know this will works soon. Thankyouu sir thumbs up

  3. READ ME!!
    Hi there! I apologize for not being able to reply to all people, I do my
    best to keep on track, but still there are a lot of comments, so I
    would like to make a small Q and A here:
    Q: Will this 100% work from 1st try?
    A: No. iCloud Bypassing is not something easy and require a lot of work!
    Depends on device, depends on a lot of factors.
    Q: I got ASR Error 80, what to do?
    A: ASR ERROR 80 is caused by the fact that you modified the main DMG
    file and the hash got changed. Unfortunately, there is no easy fix for
    it and the only thing you can do is to try more. On some devices you
    might succeed, one some you might not.
    Q: Do this tutorial comes with any guarantee?
    A: No. It is just a research I made. Take it as an educational
    reference. It is intended to be tried and to be used for future research
    by people smarter than me in iOS field 🙂
    Q: Why is so hard to bypass nowadays?
    A: Apple's security made both Jailbreak and Bypass very hard, that's the
    way Apple works.
    Q: Are the tools provided free?
    A: Yes, literally. Never pay for these tools (Firmware Manager, RedSn0w,
    Libimobile, etc.).
    Q: How many times I need to perform NAND attack?
    A: There is no specific time… Is like asking how many times you need
    to perform brute force on your lockscreen… There is no count on them.
    As I said multiple times in the video, on some devices works easier, on
    some devices works harder, one some devices never works.
    Q: Is there any other method on the internet that works?
    A: NO. The CFW method is used since iOS 3.x and is the only reliable one
    if you don't have access to SSH.
    Q: Is there any hardware method?
    A: Yes, if you replace the motherboard.

    I hope these things will get things clear a little.

  4. im getting stuck at

    "Extracting LLB.n51.RELEASE.im4p…
    Extracting iBoot.n51.RELEASE.im4p…
    Extracting DeviceTree.n51ap.im4p…
    Extracting applelogo@2x~iphone.s5l8960x.im4p…
    Extracting recoverymode@1136~iphone-lightning.s5l8960x.im4p…
    Extracting batterylow0@2x~iphone.s5l8960x.im4p…
    Extracting batterylow1@2x~iphone.s5l8960x.im4p…
    Extracting batterycharging0@2x~iphone.s5l8960x.im4p…
    Extracting batterycharging1@2x~iphone.s5l8960x.im4p…
    Extracting glyphplugin@1136~iphone-lightning.s5l8960x.im4p…
    Extracting batteryfull@2x~iphone.s5l8960x.im4p…
    Extracting sep-firmware.n51.RELEASE.im4p…
    Extracting sep-firmware.n51.RELEASE.im4p…
    Sending NORData now…
    Done sending NORData
    About to send RootTicket…
    Sending RootTicket now…
    Done sending RootTicket
    Partition NAND device (28)"

Leave a Reply

Your email address will not be published. Required fields are marked *