General Found this while intercepting the OTA update on my iPhone possible downgrade? (THEORY)

[niro 1.2k]

(posted this on reddit but it got like no attention and i want a second opinion)

hey guys, so I found these files while intercepting the ios 9.2.1 update while updating my device! So call me crazy but i was thinking this may work as a downgrade method, if we used charles or burp (any HTTP interception program) we could break/pause the connection after we click "update" on our phone and switch it with a non signed update (since this isnt an ipsw it may work different) we would just need someone on a lower firmware to capture the link for us!

an example would be like this (ios 8 = IOS8 and ios 9 = IOS9)

okay so you are on your phone and you have set up your proxy.. you click on update and burp detects something that you are trying to download, and you forward the connection and it processes on your phone, then it tries to start to download the update but the url is IOS9! now we switch this with IOS8 and it may process and "update" to the downgraded firmware?

again no idea if this will work! its just a theory

long URL > http://appldnld.apple.com/ios9.2.1/031-44649-20160119-F62AE1D6-B994-11E5-9A87-C7D18FD31F8F/com_apple_MobileAsset_SoftwareUpdate/b87ddd9b12fb964a985b319af9291184f51d4657.zip

 

let me know what you guys think

[AnotherLurker 1.5k]

There is more stuff to worry about like APTickets, among other things low-level in iOS.

[Diversityy 31.9k]

Interesting.

[niro 1.2k]

There is more stuff to worry about like APTickets, among other things low-level in iOS.

i tested this with the same firmware but on two different devices and the URL was the same, im not talking about editing files just switching the updates

[AnotherLurker 1.5k]

i tested this with the same firmware but on two different devices and the URL was the same, im not talking about editing files just switching the updates

 

Still going to have to worry about APTickets

[AsakuraHAO 67]

Maybe someone can work things with this. We just hope someone can get past the APTickets and this would become a possibility.

[niro 1.2k]

Maybe someone can work things with this. We just hope someone can get past the APTickets and this would become a possibility.

haven't even heard about APTickets is there somewhere I can read on them?

[AsakuraHAO 67]

haven't even heard about APTickets is there somewhere I can read on them?

This links may help:

https://www.reddit.com/r/jailbreak/comments/1tvbwj/could_someone_explain_to_me_what_happened_to/

https://www.theiphonewiki.com/wiki/APTicket

[sneakierpoem 313]

(posted this on reddit but it got like no attention and i want a second opinion)

hey guys, so I found these files while intercepting the ios 9.2.1 update while updating my device! So call me crazy but i was thinking this may work as a downgrade method, if we used charles or burp (any HTTP interception program) we could break/pause the connection after we click "update" on our phone and switch it with a non signed update (since this isnt an ipsw it may work different) we would just need someone on a lower firmware to capture the link for us!

an example would be like this (ios 8 = IOS8 and ios 9 = IOS9)

okay so you are on your phone and you have set up your proxy.. you click on update and burp detects something that you are trying to download, and you forward the connection and it processes on your phone, then it tries to start to download the update but the url is IOS9! now we switch this with IOS8 and it may process and "update" to the downgraded firmware?

again no idea if this will work! its just a theory

long URL > http://appldnld.apple.com/ios9.2.1/031-44649-20160119-F62AE1D6-B994-11E5-9A87-C7D18FD31F8F/com_apple_MobileAsset_SoftwareUpdate/b87ddd9b12fb964a985b319af9291184f51d4657.zip

 

let me know what you guys think

Hey what's ur newest Instagram?