Limefix Untethered Downgrade Guide

Limefix Untethered Downgrade with SHSH2 Guide:

1. Open the current version of the tool, select IPSW (any iOS 10 one) and try to do any action. You should get the update prompt to update to the latest version.

2. Once downloaded open terminal and cd into the folder:

cd /Users/md/Downloads/limefix_1.3.0

Run xattr:
xattr -c ./Limefix_Blackbird_SEP_Utility.app
xattr -c ./MacOS/limefix-art-downgrade-tool

Copy necessary binaries to /usr/local/bin:
sudo cp dmg /usr/local/bin
sudo cp ldid2 /usr/local/bin

Try to execute both ldid2 and dmg in terminal to use if they work:
ldid2 -> run in terminal
dmg -> run in terminal


First begin with restoring your device fresh to iOS 15 with Finder/iTunes. (MUST BE DONE)

Download iOS 10.0 beta 3 ipsw for your device -> https://www.theiphonewiki.com/wiki/Beta_Firmware#iPhone


Open and use use the main tool (Limefix_Blackbird_SEP_Utility.app) to downgrade device tethered (without selecting SHSH) to iOS 10.0 beta 3 (must be done to avoid restore issues later on). Here is guide how -> https://www.youtube.com/watch?v=nFDIhR4tA1s. -> For iPhone SE please select the "Use other blackbird exploit" checkbox.


For all issues check our official FAQ on reddit. "Unable to kickstart restore" error usually means exploit failed and you need to just try again. FAQ: https://www.reddit.com/r/limefix/comments/1cvwnok/faq/


Finally downgrade with SHSH:


For iOS 10 restores with blobs just use the tool normally and select SHSH (do not select the "ART restore" checkbox.).








For other versions:

After restoring to iOS 10.0 beta 3 we'll use the tool to set ART for downgrading:

Open the tool and select "ART restore" checkbox. (For iPhone SE please also use the "Use other blackbird exploit" checkbox.)

Click SELECT IPSW and select any iOS 10 iPSW (we will use the same iOS 10.0 beta 3 iPSW again).

Click select SHSH and select desired version SHSH (for example if you are downgrading to iOS 12.1, choose iOS 12.1 blobs).

Finally click "Restore" button and follow through the process. If it succeeds device should boot in verbose mode, set ART and reboot to recovery mode with "ART set successfully" alert.


Now we are ready to restore to our desired version. You shall now download your desired version IPSW.

Put device in DFU mode and execute this command in terminal:

FOR iOS 11,12 (you can use this tool for iOS 10 too but we can use main tool for this).

cd /Users/md/Downloads/limefix_1.3.0 (or where your limefix_1.3.0 folder is)
./MacOS/limefix-art-downgrade-tool {DRAG AND DROP YOUR IPSW} {DRAG and DROP your SHSH2 file}

(ignore the brackets)


FOR iOS 9:
cd /Users/md/Downloads/limefix_1.3.0 (or where your limefix_1.3.0 folder is)

Now we need to find RootFS key for our version. To achieve this you need to visit iPhone wiki firmware keys website -> https://www.theiphonewiki.com/wiki/Firmware_Keys/9.x#iPhone and find RootFS key for your desired version.

Once found, execute:
./MacOS/limefix-art-downgrade-tool {DRAG AND DROP YOUR IPSW} {DRAG and DROP your SHSH2 file} --rfskey {PASTE ROOTFS KEY HERE that you found}

(ignore the brackets)


Your device should start restoring to your desired version and reboot untethered when done. For any problems message us on @limefix_tech. Full video guide coming this weekend.