iPhone 5S downgrade fail PWNREC mode... error: -9

[riotdream]

Describe the issue
REQUIRED -
Cant' complete restore process of an iPhone 5S.

Screenshots
REQUIRED -
Attached the terminal log, where I can find the logs files?

Computer (please complete the following information):
REQUIRED -

• Computer Model [MacBookPro 13 Early 2015]
• MacOS Version [MacOS. 10.14.6]
• Python Version [Python 3.7.7 (default, Mar 10 2020, 15:43:03)]
• Vieux Version [1.0.1]

iOS Device (please complete the following information):
REQUIRED -

• Device: [ iPhone6,2]
• Desired Version: [iOS 10.3.3]

Additional context

| /Volumes/TJD128GB/iPhone/Downgrade/Vieux-master @ MacBook Pro 13 Retina (suzughia)
| => ./vieux -i /Volumes/TJD128GB/iPhone/Downgrade/A7_10.3.3_OTA_Downgrade/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw

                                           /(//* /                         
                                        /(%@&/*((//*/                      
                                     (((((* %(&@@(*,///                    
                                   ((,((((((((/%%/,/(///                   
                                 ((((((((/*.((((////////**                 
                                (((((((((((((((((///////**.                
                                ((((((((((((((((//////*** .                
                                ((((((((((((((//*//(%#(/*..               
                                (((((((((((////** /%%#(* .                 
                                 (////////////**..##(/* ..                
                                *(/*******,,,,...,* ,...***.               
                               *(((&@@*.......*/***/////(//*////           
                           *** /((#@@@@@@@@@@@@@@@(///(((/**/*///          
                         #&(***/((%@@@@@@@@@@@@@@@(/((((// *****           
                        ((((%(*/((#@@@@@@@@@@@@@@@@((((//****              
                         (((((////(&@@@@@@@@@@@@@(((((//*,,,,           
                          ((((.//* %&&@@&&@@&((((////,.,,/((*          
                           (((/* **(%%&&&&&&&((((//**/** ((//            
                            (((((* ./##%%%%#((///**#&*******           
                             /((*      */(((/****/(((((#(**             
                                                 *(((((((              
                                                  (((((((*               
                                                 *((((((*                 
                                                   (((((                  

Vieux - A tool for 32/64 Bit OTA downgrades

Current version is: 1.0.1
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in NORMAL mode
Files cleaned.
/Volumes/TJD128GB/iPhone/Downgrade/A7_10.3.3_OTA_Downgrade/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:000004358B4295B8 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8]
Device is already in pwned DFU Mode. Not executing exploit.
Exploit worked!
*** SecureROM Signature check remover by Linus Henze ***
Applying patches...
Patches have already been applied. Exiting.

Starting iBSS/iBEC patching
Looks like you are downgrading an iPhone 5s to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
ERROR..
Return code: -9
Sending iBSS/iBEC Failed.
Please reboot device, start the tool again and report the error + full logs if it persists.
Exiting...

[riotdream]

New error after substituting all the bins in resources dir as the original one can't be executed, got killed -9 just after the exec command.

| => python3 vieux -i /Volumes/TJD128GB/iPhone/Downgrade/A7_10.3.3_OTA_Downgrade/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw

                                           /(//* /                         
                                        /(%@&/*((//*/                      
                                     (((((* %(&@@(*,///                    
                                   ((,((((((((/%%/,/(///                   
                                 ((((((((/*.((((////////**                 
                                (((((((((((((((((///////**.                
                                ((((((((((((((((//////*** .                
                                ((((((((((((((//*//(%#(/*..               
                                (((((((((((////** /%%#(* .                 
                                 (////////////**..##(/* ..                
                                *(/*******,,,,...,* ,...***.               
                               *(((&@@*.......*/***/////(//*////           
                           *** /((#@@@@@@@@@@@@@@@(///(((/**/*///          
                         #&(***/((%@@@@@@@@@@@@@@@(/((((// *****           
                        ((((%(*/((#@@@@@@@@@@@@@@@@((((//****              
                         (((((////(&@@@@@@@@@@@@@(((((//*,,,,           
                          ((((.//* %&&@@&&@@&((((////,.,,/((*          
                           (((/* **(%%&&&&&&&((((//**/** ((//            
                            (((((* ./##%%%%#((///**#&*******           
                             /((*      */(((/****/(((((#(**             
                                                 *(((((((              
                                                  (((((((*               
                                                 *((((((*                 
                                                   (((((                  

Vieux - A tool for 32/64 Bit OTA downgrades

Current version is: 1.0.1
If you are using a 64 Bit device then connect it in DFU Mode
If you are using a 32 Bit device then just have it connected in NORMAL mode
Files cleaned.
/Volumes/TJD128GB/iPhone/Downgrade/A7_10.3.3_OTA_Downgrade/iPhone_4.0_64bit_10.3.3_14G60_Restore.ipsw is a zip archive!
Starting IPSW unzipping
Continuing...
IPSW found at given path...
Cleaning up old files...
Files cleaned.
Unzipping..
Found: CPID:8960 CPRV:11 CPFM:03 SCEP:01 BDID:02 ECID:000004358B4295B8 IBFL:1C SRTG:[iBoot-1704.10] PWND:[checkm8]
Device is already in pwned DFU Mode. Not executing exploit.
Exploit worked!
*** SecureROM Signature check remover by Linus Henze ***
Applying patches...
Patches have already been applied. Exiting.

Starting iBSS/iBEC patching
Looks like you are downgrading an iPhone 5s to 10.3.3!
Patched iBSS/iBEC
About to re-build IPSW
Entering PWNREC mode...
Getting SHSH...
Restoring...
Note that errors about 'BbSkeyId', 'FDR Client', 'BasebandFirmware Node' and 'ERROR: zip_name_locate: Firmware/all_flash/manifest' are not important.
Just ignore them and only report errors that actually stop the restore.
Version: 81b98e0425e17250cc83d5badaf9a8cc6399f481 - 245
Libipatcher version: 3159a387584e352f690cca859e013c3a4683f3e8 - 69
Odysseus support: yes
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket resources/other/apnonce.shsh is done
Found device iPhone6,2 n53ap
[TSSC] opening resources/manifests/BuildManifest_iPhone6,2.plist
[TSSR] User specified not to request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Did set SEP+baseband path and firmware
[WARNING] Failed to read BasebandGoldCertID from device! Is it already in recovery?
[WARNING] Using tsschecker's fallback BasebandGoldCertID. This might result in invalid baseband signing status information
[WARNING] Failed to read BasebandSerialNumber from device! Is it already in recovery?
[WARNING] Using tsschecker's fallback BasebandSerialNumber size. This might result in invalid baseband signing status information
[TSSC] opening resources/manifests/BuildManifest_iPhone6,2.plist
[TSSR] User specified to request only a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Found device in DFU mode
[Error] unsupported device mode, please put device in recovery mode or normal mode
[Error] Fail code=-3
Failed with errorcode=-3

ERROR..
Return code: 253
Restore Failed.
Please try again and report the error/send me the full logs and the 'errorlogrestore.txt' file if it persists
Exiting...

[riotdream]

I've resolved all the issue deleting the Vieux folder so any resources/bin modified is gone and after unzipping the new version I've just done:

sudo codesign --sign - --force --deep

for every executable in resources/bin/* and all worked like a charm.

Seems that is a problem with code signing executable

[bkchucnc]

I've resolved all the issue deleting the Vieux folder so any resources/bin modified is gone and after unzipping the new version I've just done:

sudo codesign --sign - --force --deep for every bin in resources/bin/*

for every executable in resources/bin/* and all worked like a charm.

Seems that is a problem with code signing executable

Could you describe it in more detail?
I did:
Case 1:

1. Delete old Vieux and download the new Vieux.
2. Replace igetnonce in Vieux/resources/bin/ by https://github.com/s0uthwest/igetnonce/releases
3. Use Vieux command to downgrade 5s to 10.3.3 (as instruction)
   Get the same error (error: -9)
   Case2:
4. Delete old Vieux and download the new Vieux.
5. run: sudo codesign --sign - --force --deep
   for every bin in resources/bin/*, but can not modified "futurerestore"
6. Use Vieux command to downgrade 5s to 10.3.3 (as instruction)
   Get the same error code 253

[bkchucnc]

Success after flash ios 12.4.4 for 5s and do it again. Thank you so much!