How to hacktivate a bypassed iOS 5-6 device
- Jailbreak the device (I used Legacy IOS kit as it has the option to restore with jailbreak by default)
- Put your device in pwned DFU (I used an Arduino with a host shield)
- Boot an SSH Ramdisk (Preferably with your iOS build number)
- Connect to ssh (user:root pass:alpine)
- Remove the old lockdownd (
rm -rf /mnt1/usr/libexec/lockdownd)
- Download the bypassed lockdownd
- Use an sftp client to upload the downloaded file to the old one’s location
- Make sure to run
chmod 0755 /mnt1/usr/libexec/lockdownd after you uploaded the file.
- Run
reboot_bak to reboot the device
- Have fun!