This is a complete guide on how to use Raspberry Pi Pico 2, Waveshare RP2350 USB-A/Zero, and Pimoroni TINY2350. to pwn DFU for apple A12 and A13 devices.
“Bypass with "UnlockTool” using the RP2350/usbliter8 hardware to put a supported A12/A13 iPhone into PWNED DFU, then using UnlockTool afterward for its supported repair operations, now see the workflow:
BASIC SETUP, YOU NEED
1. Raspberry Pi Pico 2 / RP2350
2. Appropriate usbliter8 firmware
3. USB cable for the RP2350
4 Lightning-to-USB-A cable for the A12/A13 device
5. An iPhone/iPad supported by the exploit
6 A Mac/PC for the subsequent DFU operation
NOTE: Currently Supported devices include iPhone XR, XS/XS Max, iPhone 11/11 Pro/11 Pro Max, iPhone SE 2, and several A12/A13 iPads.
PREPARATION
Compatible boards reported for this workflow include Raspberry Pi Pico 2, Waveshare RP2350 USB-A/Zero, and Pimoroni TINY2350.
The board needs the appropriate usbliter8 firmware.
You can download it here
It have 4 firmware in it, Note the tool you are using and copy and paste inside the tool
FLASHING THE DOWNLOADED FIRMWARE INSIDE YOUR TOOL (.UF2)
The flashing procedure is identical for all RP2350 boards. RP2350PiZero
Firmware installation is a one-time process. Once flashed, the board can be reused indefinitely without reflashing, unless you choose to update to a newer firmware version.
Step 1: Disconnect the RP2350 board from your computer.
Step 2: Press and hold the BOOT (BOOTSEL) button.
Step 3: While holding the BOOT button, connect the board to your computer.
Step 4: Release the BOOT button, a removable USB drive will appear.
Typical drive names include:
RPI-RP2 or RP2350
Step 5: Drag and drop the correct .UF2 firmware file of your own tool into the drive. {Custom firmware development}
Example:
usbliter8.waveshare_rp2350_usb_a.uf2
usbliter8.waveshare_rp2350_zero.uf2
usbliter8.pimoroni_tiny2350.uf2
usbliter8.pico2.uf2
Step 6: Wait 2–5 seconds. The board will automatically reboot.
Firmware installation is now complete.
Now open your Unlocktool, click on apple then navigate to Ramdisk A12-A13 tab, read ios version of the device you want to bypass because is very important, select the ramdisk, model and your device ios then make sure is same model and ios of your ramdisk, you can download from unlocktool wibsite here
Put the iPhone/iPad into DFU mode. You can use this tool to put device to DFU Mode Download or you can use your hand to put to DFU MODE
Once on DFU mode Connect the Apple device to the RP2350, it will show green light then unplug it and plug in device to pc The RP2350 acts as the hardware pwner and triggers the A12/A13 BootROM vulnerability, Successful exploitation results in PWNED DFU.
LED STATUS AND DESCRIPTION
Orange: Board is ready or the operation
Green: USBLITER8 is has completed successfully
Red: Exploit failed, reconnect Board and try again
Reconnect the device to your PC Directly then click BOOT RAMDISK, if done click on backup password, it will save to unlocktool folder after click factory reset, device will reboot.
AFTER THE PROCESS YOU REPEAT THE SAME PROCESS TO RESTORE BACKUP.....DONE
One important point: PWNED DFU itself isn't the same thing as an Activation Lock bypass. It gives the tool a privileged DFU state; what UnlockTool can subsequently erase, diagnose, or bypass depends on the particular model, iOS version, and UnlockTool implementation.
IF NEEDED ANY OF THIS TOOL , DO CALL OR CHAT US ON WHATSAPP +2348037277982