Futurerestore

futurerestore is a tool to downgrade, upgrade, and/or restore to unsigned versions of iOS, iPadOS, and tvOS. Contrary to popular belief, futurerestore in itself is not a restoring tool, rather a wrapper for idevicerestore that allows manually specifying the SEP and Baseband firmwares for restoring.

Methods
FutureRestore most commonly uses the Prometheus method, which utilises a replay attack in Apple's APTicket restore verification system. Any APTicket depends on the following conditions to be consistent with the device the ticket is being used to restore:
 * Board ID
 * ECID
 * Chip ID
 * APNonce
 * Unique Build ID

If any of the following conditions are not met, the replay attack will fail and the AP will refuse to flash the firmware onto the device.

Requirements
The following are requirements in order to use futurerestore:


 * 1) A valid APTicket for your device and firmware version you want to restore to.
 * 2) The IPSW of the target firmware that you want to restore to for your device
 * 3) A way to set your device's boot-nonce (see note below)
 * 4) A signed SEP and Baseband which is compatible  with the target firmware for your device

Options
futurerestore has several options, these include:


 * / : This option keeps user data. It should generally not be used when downgrading as it may lead to various issues, including corrupted [/var] leading to a recovery mode loop.
 * : This option does not flash a baseband. It should only be used for iPods and WiFi-only iPads.
 * : This option exits the device out of recovery mode.
 * / : This option Keeps rebooting the device until the ApNonce matches the APTicket. It's meant for legacy devices on older iOS versions. You have a practically zero chance of hitting a collision on modern devices and iOS versions.
 * / : this option allows you to manually specify SEP. SEP files are usually named in this format:  and can usually be found in the   directory of an IPSW. after typing , you must also type
 * / : this option allows you to manually specify Baseband. baseband files usually begin with MAV/ICE and end in .bbfw. They're usually found in the /Firmware/ directory in IPSW files. After using, you must also type

Restoring
There are two main ways to use futurerestore, CLI and GUI.

CLI
Download or Compile Futurerestore for your OS.

Newer test builds are available from the test branch. This may be needed for some A14 devices and Wi-Fi only iPads. In order to get the newer builds, open the test branch link, press on the newest workflow run, scroll down to "artifacts" and choose the one appropriate for your OS.

Open a terminal or command prompt, then write in the following command:

/path/to/futurerestore -t /path/to/ticket.shsh2 --latest-sep --latest-baseband -d /path/to/firmware.ipsw

GUI
Download FutureRestore-GUI then select the IPSW and SHSH2 blobs. It's recommended to have "Extra logs" enabled so we can better help diagnose any issues. If you are upgrading or re-restoring, it's ok to turn on "Preserve Data", however make sure to restore rootfs before doing so.