mcg29 Profile Banner
mcg29 Profile
mcg29

@mcg29_

3,675
Followers
153
Following
178
Media
751
Statuses

Arm64 iOS dual boots, Legacy software

/dev/disk0s1
Joined January 2017
Don't wanna be here? Send us removal request.
Pinned Tweet
@mcg29_
mcg29
5 years
A 64bit dual boot tutorial, brought to you by @Ralph0045 and @mcg29_
12
47
177
@mcg29_
mcg29
2 years
Alpine 1A420 (First firmware version to leak outside of Apple) flashed on a retail iPhone 2G
8
70
1K
@mcg29_
mcg29
3 years
iOS 6 booting on the iPhone 5C
18
55
449
@mcg29_
mcg29
5 years
Dual-booted an iPhone 5s with iOS 10.3.3 (14G60) as the main, and 11.0 (15A372) secondary OS. Each version uses its own unique data partition, which is native to an iOS install.
Tweet media one
Tweet media two
Tweet media three
Tweet media four
12
40
366
@mcg29_
mcg29
3 years
iPhone 7, 8, X and 6S Plus production models custom installed with various builds of Internal iOS
Tweet media one
6
17
317
@mcg29_
mcg29
4 years
Successfully installed iOS 13.0 (17A508) Internal UI on a production iPhone 8
Tweet media one
Tweet media two
Tweet media three
Tweet media four
12
33
277
@mcg29_
mcg29
2 years
iOS 13.0 (17A577) booted with latest iOS 15.7.2 (19H218) SEP and baseband, via custom dual boot.
Tweet media one
Tweet media two
31
22
259
@mcg29_
mcg29
4 years
Fixed baseband and Touch ID on 64bit dual boots! Successful dual boot of iOS 13.3 (17C54) main and 13.0 (17A577) secondary on iPhone 8 (d201ap) Haptics, biometrics, and baseband are all fully functioning.
Tweet media one
Tweet media two
Tweet media three
Tweet media four
16
26
237
@mcg29_
mcg29
6 months
Nanshan 1A396b Earliest known build after the Acorn Protoypes, built in February 2007. Running on a production iPhone 2G
4
18
197
@mcg29_
mcg29
4 years
Successful downgrade and untethered install of iOS 7.0 (11A465) Internal UI on an iPhone 5 (n41ap), using #DeRebusAntiquis
6
22
185
@mcg29_
mcg29
5 years
Dual-booted an iPhone 6 (n61ap) with iOS 12.4.6 (12G183) as the main and 11.3.1 (15E302) as the secondary OS.
Tweet media one
Tweet media two
Tweet media three
Tweet media four
5
14
176
@mcg29_
mcg29
6 months
Sundance 10A234 Internal iOS 6.0 build dating to February 2012 This version is so early that there are little differences between iOS 5 Compiled for iPhone 4 (N90)
Tweet media one
Tweet media two
Tweet media three
9
13
183
@mcg29_
mcg29
4 years
Booted 11.0 15A23061c SwitchBoard on an iPhone 6S (N71mAP)
Tweet media one
Tweet media two
4
15
151
@mcg29_
mcg29
5 years
Downgraded an iPhone 4S to iOS 5.0 Untethered using De Rebus Antiquis
5
10
129
@mcg29_
mcg29
3 years
Successfully booted iOS 11.0.2 (15C50) Internal UI on a production iPhone 6S Plus
Tweet media one
Tweet media two
Tweet media three
Tweet media four
6
18
131
@mcg29_
mcg29
6 years
iOS 8.4 Beta 1 (12H4074d) iBEC booted on an iPhone 5S. Thanks to @axi0mX for kloader64.
Tweet media one
9
26
129
@mcg29_
mcg29
4 years
Dual Booted 11.0 (15A93261h) SwitchBoard on an iPhone 8.
Tweet media one
Tweet media two
6
15
123
@mcg29_
mcg29
2 years
iPhone 2G, running prototype software Happy 16 years of #iPhone
Tweet media one
Tweet media two
2
9
130
@mcg29_
mcg29
3 years
iPod Touch 7th generation running iOS 12.3 (16F41260l) SwitchBoard
Tweet media one
Tweet media two
5
11
121
@mcg29_
mcg29
4 years
Unreleased version of iOS 13.0 (17A512) Internal UI installed on a production iPhone X (D221AP) - Thanks to @URedditor for this build. #AppleInternal #AppleCollection
Tweet media one
Tweet media two
Tweet media three
Tweet media four
4
16
113
@mcg29_
mcg29
4 years
Successfully dual booted iOS 11.3 (15E216) with iOS 12.0.1 (16A404) Main OS on an iPhone 8
Tweet media one
Tweet media two
Tweet media three
Tweet media four
5
8
113
@mcg29_
mcg29
2 years
iBoot-99 - First ever known iBoot build outside of Apple, running in QEMU
Tweet media one
3
9
113
@mcg29_
mcg29
5 years
diags loaded on a production iPhone 8 cc: @Ralph0045
Tweet media one
Tweet media two
4
14
106
@mcg29_
mcg29
4 years
Apple Internal software booting untethered on legacy production 32bit devices using DeRebusAntiquis, A thread:
2
16
101
@mcg29_
mcg29
3 years
iPod Touch 4th generation running iOS 7
9
6
102
@mcg29_
mcg29
5 years
NonUI Switchboard 11.0 15A93720r, booted on an iPhone 5s (n51ap).
Tweet media one
2
9
94
@mcg29_
mcg29
4 years
Never thought l would see an unpatchable SEPROM exploit...
5
3
91
@mcg29_
mcg29
4 years
Dual Booted iOS 7.1 (11D31620c) SwitchBoard with iOS 7.1.2 (main) on an iPhone 5S (n51ap)
Tweet media one
Tweet media two
Tweet media three
Tweet media four
2
8
88
@mcg29_
mcg29
3 years
Successful install of iOS 4.1 (8B117) Internal UI on a production iPod touch 4th generation
Tweet media one
Tweet media two
Tweet media three
Tweet media four
3
12
89
@mcg29_
mcg29
4 years
iPhone OS 3.2 (7B367) and latest iOS 5.1.1 (9B206) dual boot on iPad 1st generation
5
3
78
@mcg29_
mcg29
2 years
iPod touch 1st generation prototype firmware custom flash
Tweet media one
Tweet media two
2
4
81
@mcg29_
mcg29
3 years
iPhone 5C running an iOS 6.0 NonUI/SwitchBoard build
Tweet media one
Tweet media two
6
3
79
@mcg29_
mcg29
3 years
Production iPad 2 running iOS 4.3 (8F3191d) SwitchBoard
Tweet media one
Tweet media two
2
1
78
@mcg29_
mcg29
11 months
iBoot-1765.0.81 - running on production iPhone 5S hardware. This version dates in between iOS 6 and 7
Tweet media one
5
0
78
@mcg29_
mcg29
9 months
Jade2A539i - 1.0 SwitchBoard! found on an early iPod touch 1st generation prototype
Tweet media one
6
5
74
@mcg29_
mcg29
4 years
SochiYabuli11D31620l.H5iPhoneFactoryOS (iOS 7.1 SwitchBoard on an iPhone 5c (n48ap) and 5 (n42ap)
Tweet media one
1
4
74
@mcg29_
mcg29
5 years
Since the old tweet disappeared, here it is again. 64bit iOS dual boot tutorial, brought to you by @Ralph0045 and @mcg29_
6
22
68
@mcg29_
mcg29
2 years
iOS 3.1 (Northstar 7C125)
Tweet media one
Tweet media two
3
4
67
@mcg29_
mcg29
2 years
The build runs iBoot-99, predating iPhone OS 1.0
2
1
65
@mcg29_
mcg29
2 years
instead of iPhone OS, the system is called OS X, and kernel version dates to March 2007, (6 months before the release of the iPhone 2G).
Tweet media one
1
0
66
@mcg29_
mcg29
2 years
This build was pulled off an iPhone 2G prototype manufactured in 2006, found on a @MacRumors forum here:
Tweet media one
Tweet media two
Tweet media three
4
3
66
@mcg29_
mcg29
2 years
Entering recovery mode is reminiscent of a special device posted by @TheRedM68_
1
4
66
@mcg29_
mcg29
4 years
iBoot-2796.0.0.1.10 for j99a (iPad Pro 12.9 inch), dating to before iOS 9.0 beta 1
Tweet media one
0
5
57
@mcg29_
mcg29
3 years
iPad 2, 3, 4, and Mini 1st Generation running different builds of Switchboard
Tweet media one
1
4
63
@mcg29_
mcg29
3 years
32bit iPhones custom flashed with various builds of Switchboard
Tweet media one
4
4
60
@mcg29_
mcg29
5 years
Legacy Software. Installed iPhone OS 2.0 beta 1 (5A225c) on an iPhone 2G
Tweet media one
Tweet media two
3
5
56
@mcg29_
mcg29
6 years
It looks like the iPod Touch 4th Generation will also run iOS 7.0 betas. credit to @Ralph0045
Tweet media one
Tweet media two
Tweet media three
11
8
58
@mcg29_
mcg29
3 years
Legacy iPod 3rd and 4th generation models running prototype software
Tweet media one
1
4
58
@mcg29_
mcg29
4 years
TellurideNanshan9A2306f.H4DesenseOS iOS 5.0 (Internal UI) Installed on a production iPhone 4S: This build seems to supports any device that can run iOS 5 (even iPods and iPads) unlike most older internal iOS UI builds, which are only compatible with the matching device.
Tweet media one
Tweet media two
Tweet media three
Tweet media four
2
6
48
@mcg29_
mcg29
6 months
iBoot for n82ap, Copyright 2007 BUILD_TAG: iBoot-253 Diagnostics in this build date to January 2008 This iBoot is essentially iOS 1.x for the iPhone 3G No display and no NAND when flashed on a production unit
Tweet media one
4
4
54
@mcg29_
mcg29
5 years
5
5
49
@mcg29_
mcg29
6 years
The impossible has been done! Booted 10A316 on an iPhone 5. @b1n4r1b01
Tweet media one
Tweet media two
Tweet media three
3
8
51
@mcg29_
mcg29
8 months
iBoot-87.1 - Earliest known iBoot version to exist for iPhone 2G, compiled in 2006. Running on a production unit
Tweet media one
2
2
51
@mcg29_
mcg29
4 years
Booted 11.3 15E61570m NonUI SwitchBoard on an iPad Mini 3 (j86map)
Tweet media one
1
6
45
@mcg29_
mcg29
4 years
Like all iOS internal UI Builds, it features Developer, Carrier, and Internal Settings. A few Internal settings are featured here:
1
4
46
@mcg29_
mcg29
3 years
Production model iPod Touch 4 running iOS 4.1 (8B1084b) SwitchBoard
Tweet media one
Tweet media two
Tweet media three
3
3
48
@mcg29_
mcg29
4 years
iBoot-4055.0.0.1.5 for d21 (iPhone 8 Plus), dating between iOS 11.0 beta 2 and 3.
Tweet media one
2
8
40
@mcg29_
mcg29
6 years
10A316 booting untethered on an iPhone 3GS using a custom made disk image!
4
5
44
@mcg29_
mcg29
4 years
Booted 10.3.2 14F60900l SwitchBoard on an iPad Air (j72ap)
Tweet media one
3
3
45
@mcg29_
mcg29
5 years
iBoot from early iPhone 5c (n48ap) prototype, dating to 2012.
Tweet media one
1
2
45
@mcg29_
mcg29
6 years
NonUI builds are fun. Wish l had some actual hardware.
Tweet media one
2
4
42
@mcg29_
mcg29
5 years
TellurideNanshan9A2264r Usually found on DVTs, this is an early build of 5.0 - Interestingly it seems to have a UI similar to 4.x builds, and features XInternalApps, which is known to be removed with 5.1.
Tweet media one
Tweet media two
Tweet media three
0
3
39
@mcg29_
mcg29
6 years
Development fused iBEC for the iPhone 4s (N94AP), dating to before iOS 5.1 betas.
Tweet media one
0
3
38
@mcg29_
mcg29
4 years
Upon boot, the system immediately recognizes the baseband failure (some oddity that seems to happen on iOS 13.x dual boots), and prints an interesting message:
Tweet media one
1
4
39
@mcg29_
mcg29
7 years
Blast from the past! successful dual boot of 9.0 beta 1 on an iPhone5,2. Thanks to @nyan_satan for the tutorial
Tweet media one
Tweet media two
Tweet media three
10
6
39
@mcg29_
mcg29
4 years
The dual boot guide has been updated to add notes for fixing baseband/Touch ID. There has also been a small rewrite. Hopefully this will be a little more beginner friendly and clarify details that may have been missing before. Check it out at
0
7
41
@mcg29_
mcg29
5 years
This setup uses /dev/disk0s1s3 as the secondary system partition, and disk0s1s4 for the secondary data partition.
Tweet media one
1
3
35
@mcg29_
mcg29
7 years
Lol, iOS 7 beta 1 still has those old loading bars when downloading apps
Tweet media one
4
3
33
@mcg29_
mcg29
5 years
SundanceTaosTianshan10A63971b.iPadFactoryOS Unlike earlier versions of 6.0, it seems to have a display dimming function. Perhaps this was added in later towards the release.
Tweet media one
Tweet media two
1
3
34
@mcg29_
mcg29
4 years
It should be noted that the “Show Internal Apps” toggle in internal settings allows the rest of the apps present in /AppleInternal/Applications to be shown:
0
4
32
@mcg29_
mcg29
7 years
iPhone 5 Verbose Restore
Tweet media one
Tweet media two
Tweet media three
1
8
29
@mcg29_
mcg29
5 years
InnsbruckTianshan11A63840h Given that this only dates three weeks before 11A93840l, and little to no differences in structure, it is safe to assume that the latter is merely a bug fix release.
Tweet media one
Tweet media two
0
3
31
@mcg29_
mcg29
4 years
SundanceNanshan10A23110z Found on an iPhone 5 PVT (production verification testing) unit, this build is slightly newer than Sundance 10A316, contrary to what the build number may suggest.
Tweet media one
3
4
30
@mcg29_
mcg29
4 years
iBoot-3319.0.0.1.9 for d11 (iPhone 7 Plus), dating before iOS 10.0 beta 1 This iBoot is so early that LLB and iBoot were separated into iBootStage1 and iBootStage2. Based on the system, this dates to April 2016.
Tweet media one
0
5
31
@mcg29_
mcg29
5 years
Earthbound is quite interesting. Appears to potentially be a newer version of inferno starting from 7.0, although it’s purpose seems obscure.
Tweet media one
Tweet media two
1
2
30
@mcg29_
mcg29
4 years
Main iOS was never updated from iOS 11.0.3.
Tweet media one
0
2
31
@mcg29_
mcg29
6 years
Untether downgraded my iPhone5,1 to iOS 10.0 beta 1 using shsh blobs. Would not have been possible without @Ralph0045
Tweet media one
Tweet media two
Tweet media three
2
2
30
@mcg29_
mcg29
6 years
iOS 4.0 Beta 1 running on N82AP (iPhone 3G)
Tweet media one
Tweet media two
Tweet media three
3
3
30
@mcg29_
mcg29
4 years
When the LLDiagExtras filesystem and early iBoot are flashed, the device will boot straight into recovery, just like the prototype.
Tweet media one
Tweet media two
3
1
28
@mcg29_
mcg29
4 years
Given how old it is, a dual boot works fine with the latest iOS 13.6.1 - Amazingly, SEP is compatible this far back. (perhaps even earlier!)
Tweet media one
2
2
26
@mcg29_
mcg29
4 years
Here are a few screenshots of diagnostic utilities Apple included on SpringBoard: AGX Reporter, Siri Debug, as well as Tap to Radar. (There are many more hidden apps in the /AppleInternal/Applications directory)
Tweet media one
Tweet media two
Tweet media three
1
3
26
@mcg29_
mcg29
5 years
iBoot from iPad 5th generation (2017) prototype, dating to before iOS 10.3 Betas.
Tweet media one
0
2
27
@mcg29_
mcg29
6 years
Downgrade Party???
7
5
24
@mcg29_
mcg29
4 years
As we now can activate, It is possible to use cellular service on the dual booted system. No more “hacktivation” or partially working dual boots.
2
1
25
@mcg29_
mcg29
2 years
9.61.00 (latest baseband) with No Touch ID
Tweet media one
Tweet media two
2
1
27
@mcg29_
mcg29
5 years
Early revision iBoot for iPhone 5S (n51ap), dating to circa 7.0 beta 1 and 2.
Tweet media one
0
3
25
@mcg29_
mcg29
4 years
Sideloading apps also now works, and potentially with some modifications, it should be possible to run app based jailbreaks on the second OS.
1
0
24
@mcg29_
mcg29
6 years
This beta is proving to be very difficult to jailbreak.
Tweet media one
Tweet media two
2
1
24
@mcg29_
mcg29
7 years
Old iOS betas
Tweet media one
Tweet media two
Tweet media three
1
3
24
@mcg29_
mcg29
3 years
iPod 4 iOS 7 boot up
3
3
25
@mcg29_
mcg29
5 years
Has anyone ever tried exploiting 6.1.3 iBoot with de rebus antiquis on devices such as the iPad 2 or 4s given it’s signed?
3
1
24
@mcg29_
mcg29
4 years
Based on the DEVELOPMENT style kernelcache from the dump, the build dates to early June 2019, just around the time of iOS 13.0 beta 1.
Tweet media one
1
2
24
@mcg29_
mcg29
5 years
Tweet media one
1
2
23
@mcg29_
mcg29
4 years
Dark mode:
Tweet media one
Tweet media two
1
2
23
@mcg29_
mcg29
2 years
The build boots untethered, just like a factory install - the device was custom flashed.
2
1
24
@mcg29_
mcg29
6 years
Flashed an iPhone 3GS to iPhone OS 4.0 Beta 1 (8A230m). Couldn’t have done it without @Ralph0045
Tweet media one
Tweet media two
Tweet media three
1
1
24
@mcg29_
mcg29
4 years
It also seems that the System applications fail to download even with wifi, perhaps due to a lack of a connection to Apple’s Internal VPN.
Tweet media one
1
2
23
@mcg29_
mcg29
6 months
Internal apps present on this firmware
2
1
24
@mcg29_
mcg29
6 years
Untether Installed iOS 5.0 Beta 1 On An iPhone 3GS Using Alloc8!
Tweet media one
Tweet media two
Tweet media three
1
2
23