How to hacktivate a bypassed iOS 5-6 device

  1. Jailbreak the device (I used Legacy IOS kit as it has the option to restore with jailbreak by default)
  2. Put your device in pwned DFU (I used an Arduino with a host shield)
  3. Boot an SSH Ramdisk (Preferably with your iOS build number)
  4. Connect to ssh (user:root pass:alpine)
  5. Remove the old lockdownd (rm -rf /mnt1/usr/libexec/lockdownd)
  6. Download the bypassed lockdownd
  7. Use an sftp client to upload the downloaded file to the old one’s location
  8. Make sure to run chmod 0755 /mnt1/usr/libexec/lockdownd after you uploaded the file.
  9. Run reboot_bak to reboot the device
  10. Have fun!