DRA v6

Similar to powdersn0w, DRA v6 refers to an exploit for iOS 6 allowing supported devices to restore and boot unsigned target iOS versions untethered. This is possible thanks to the work of synackuk and Pingzi610 on De-Rebus-Antiquis-v6.

In Legacy iOS Kit, DRA v6 is utilized with automatic creation of the custom firmware with easy setup and usage.

To use the DRA v6 feature, iOS 6 SHSH blobs are required, but since iOS 6 is signed for the supported devices, no existing blobs are required and the script will automatically save them for you.

Restoring back to iOS 6.1.6 or any iOS below iOS 9 requires performing the Clear NVRAM procedure in order for the device to boot. This can be done through: Useful Utilities -> Clear NVRAM

While it is theoretically possible to use DRA v6 on all compatible devices, exploit ramdisks have not yet been implemented for all model and version combinations. See the support for the devices listed below.

Requirements

• iPhone 4S or iPod touch 4

Supported target versions range from the earliest iOS version supported by the device up to:

• iOS 6.1.5 for iPod touch 4
• iOS 9.3.5 for iPhone 4S

Note

• Like powdersn0w, iOS 4 on iPod touch 4 and iOS 5 on iPhone 4S may not work on later-manufactured devices.
  • On affected iPhone 4S devices, restoring to iOS 5 will leave the device stuck on a white screen after the restore.
• iPhone 4S devices that are not compatible with iOS 6 cannot use DRA v6.
  • Attempting to do so will result in the device getting stuck in DFU mode. See issue #1122](https://github.com/LukeZGD/Legacy-iOS-Kit/issues/1122) for reference.
  • You can check whether your device is affected by attempting to restore to iOS 6.1.3. If the restore hangs at Waiting for NAND, your device is not compatible.
• The issues above are caused by hardware revisions and cannot be fixed.
• There is an issue on some iPod touch 4 devices where the device does not boot after the restore. Not sure on what the cause or the fix is. discussion #1109
• There is an issue where the baseband may be broken after restoring to iOS 5 on the iPhone 4S. Workaround is to restore back to latest (6.0 with DRA v6 works too), dump the baseband, and enable the --disable-bbupdate flag on the next restore attempt.
• See more related notes in the powdersn0w wiki page.

Usage

For usage, go to Restore-iPhone-4-and-older or Restore 32-bit device