Backr00m

From AwkwardTV
Revision as of 09:55, 12 July 2018 by Nito (talk | contribs)
Jump to: navigation, search

backR00m Jailbreak for AppleTV 4 & 4k for tvOS 10.2.2 - > 11.1
Current Version: 1.0

Release date: July 7th 2018
Current as of: July 7th 2018


backr00m is a jailbreak for tvOS 10.2.2 -> 11.1 for AppleTV 4+. It is based on meridian and electra jailbreaks by PsychoTea and ElectraTeam respectively. It utilizes jailbreakd to avoid buggy KPPBypass bugs.

This application is Copyright © 2007-2018 nito llc. All Rights Reserved.

Install Instructions for AppleTV 4

Step 1: Download backr00m

Step 2: Plug your 4th generation AppleTV into your computer via a USB-C cable

Step 3: Make sure you have a developer account with apple, you can get one for free (your on your own to figure that out!)

Step 4: Download Cydia Impactor

Step 5: Drag the backr00m.ipa into Cydia Impactor

Step 6: Click start

You will almost definitely get some error related to plist files, i dont remember the exact error, this error is fine and expected behavior (it happened every time for me) check your AppleTV to see if its installed

Step 7: Run backr00m and hit the 'Jailbreak' button it should work on the first try! Hit the respring button when prompted to. Once two respring's have occurred nitoTV should launch automatically!

Future Restore Instructions

Preparation

You will need 11.3 blobs saved for your 4th generation AppleTV. If you do not have those, you cannot restore to 11.3. 11.2.x can no longer be installed because there aren't any SEP versions that are still signing that are compatible. These directions are mac specific but with minor changes should work on any comp.

Step 1: Download futurerestore for your respective computer, here is the build i use that works on my mac futurerestore_macos

Step 2: Download either 11.4 or 11.4.1 to get the BuildManifest.plist and sep-firmware.j42d.RELEASE.im4p files.

Step 3: Rename the ipsw to .zip and extract its contents to get the BuildManifest.plist and sep files.

Step 4: Download 11.3

Step 5: Create a folder and put all of these files inside of it

Step 6: Open your terminal app (mac os, linux and windows you are on your own here)

Step 7: cd to the directory you created with futurerestore, the SEP, BuildManifest.plist and 11.3 ipsw.

Step 8: find your SHSH blob and look for the 'generator' inside of it, make a note of this value.


backr00m install

Step 1: Download backr00m

Step 2: Plug your 4th generation AppleTV into your computer via a USB-C cable

Step 3: Make sure you have a developer account with apple, you can get one for free (your on your own to figure that out!)

Step 4: Download Cydia Impactor

Step 5: Drag the backr00m.ipa into Cydia Impactor

Step 6: Click start

You will almost definitely get some error related to plist files, i dont remember the exact error, this error is fine and expected behavior (it happened every time for me) check your AppleTV to see if its installed

Step 7: Run backr00m

Step 8: Double Tap the Play/Pause button on your remote

Step 9: Turn on KPPless mode

Step 10: Click the 'Jailbreak' button it should work on the first try! Hit the respring button when prompted to. Upon respringing SSH into your AppleTV

Step 11: ssh into your device (ie 'ssh root@apple-tv.local') default password is alpine

Step 12: run this command (substitute your nonce in place)

 nvram com.apple.System.boot-nonce=YOUR_NONCE_HERE

Step 13: run this command

 nvram auto-boot=false

Step 14: run this command

 reboot

Step 15: from the directory in the terminal with your future restore files run the following command (with your file names substituted in place)

 ./futurerestore -t YOUR_SHSH_BLOB.shsh -s sep-firmware.j42d.RELEASE.im4p -m BuildManifest.plist -w AppleTV5,3_11.3_15L211_Restore.ipsw --no-baseband

Step 16: Profit!