Bypass iOS 9.0.2 iCloud And Built custom Root
As long as we know, asr doesn't verify a copy iOS ramdisk, so i have some trick how to built root ramdisk with asr verification.
1. Decrypt root file system key from ipsw.
2. Mount the filesystem and delete setup.app
3. Copy the Trek-5.5.00.Release.plist and Trek-5.5.00.Release.bbfw form Firmware folder inside IPSW to Volume/usr/standlone/update/ramdisk
4. Go to Volume/Filesystem/CoreService and Modify System.Version.plist
5. Format all DMG as read only or UDZO
6. to verify asr image scan
6. To bypass ramdisk asr verification you should run this command
7. Now crack the ipsw with this command line
zip -r iPhone4.1_8.3_12H321_Restore.ipsw Firmware 058-24033-023.dmg 058-24104-023.dmg 058-24341-023.dmg BuildManifest.plist kernelcache.release.n94 Restore.plist
EmoticonEmoticon