mint@mint:/mnt/installed-linux/ios$ sudo ./bin/turdusra1n --help
Usage: ./bin/turdusra1n [MODES] [OPTIONS]
-h, --help : Prints usage information
--version : Print version information
Modes:
-D, --dfu-boot : Set DFU boot mode
-g, --get-block : Fetch SEP ciphertext block for A9(X) SEPROM exploit
-T, --tethered-boot-a9 : Set tethered boot mode for A9(X)
-t, --tethered-boot-a10 <PATH> : Set tethered boot mode for A10(X)
General options:
-E, --early-exit : Exit after uploading Pongo
-k, --override-pongo <FILE> : Override pongo image
-K, --override-kpf <FILE> : Override kpf image
-R, --override-sepracer <FILE> : Override sep racer image
-v, --debug-logging : Debug logging
-b, --boot-nonce <GENERATOR> : Set boot-nonce
-S, --sigcheck-patch : Apply signature check patch
-X, --sep-exploit-only : Run SEPROM exploit only and exit before kernel patch for tethered booting
-x, --sep-kpatch-only : Run SEPROM exploit and patch the kernel for tethered booting, then exit without booting
-e, --extra-bootargs <args> : Set extra bootargs
-V, --verbose-boot : Enable verbose boot
-P, --load-pteblock <PATH> : Load ciphertex block for A9(X) SEPROM exploit (tz0_boot race)
-C, --load-shcblock <PATH> : Load ciphertex block for A9(X) SEPROM exploit (fwload race)
-i, --sep-img4 <PATH> : Load valid SEP.img4 file for SEPROM exploit
-p, --sep-im4p <PATH> : Load SEP.im4p file for SEPROM exploit
-r, --checkra1n : Jailbreak with checkra1n (unofficial, 12.0-14.8.1 only)
-s, --safemode : Boot with safemode (need checkra1n flag)
-c, --cache-dir <DIR> : Use specified directory for caching
--show-hash : Show the SHA2-384 Hashes of embedded modules
Example:
- Enter pwned DFU mode for restore:
./bin/turdusra1n -D [-b <GENERATOR>]
- Fetch SHC ciphertex block for A9(X):
./bin/turdusra1n -g
- Fetch PTE ciphertex block for A9(X):
./bin/turdusra1n -g -i <sep.img4> -C <shcblock.bin>
- Just boot tethered for A9(X):
./bin/turdusra1n -T -P <pteblock.bin>
./bin/turdusra1n -T -C <shcblock.bin> -i <sep.img4> -p <sep.im4p>
- Just boot tethered for A10(X):
./bin/turdusra1n -t <iBoot.img4> -i <sep.img4> -p <sep.im4p>
-- Credits --
Made by : Clarity, kok3shi, Mineek, staturnz
Thanks to : checkra1n team
--- Note ---
- This tool uses some of the code used by checkra1n, but this does not imply that it was developed by the checkra1n team.
- DO NOT contact the checkra1n team for support regarding this tool.
- The original checkra1n binary is available from: https://checkra.in/1337
-- Library info --
libciderra1n 2.0.1-75ded8ed (master) [usb backend: liteusb-linux]
-- Tool info --
turdusra1n 1.1.1-db64bb80 (master)
Homepage : <https://sep.lol>
Bug Reports : <https://github.com/turdus-m3rula/bugTracker>