GGsmZone

Bypass Passcode (Signal) Apple iPhone XS Max (A2104) — EFT Pro

osama

osama

Master
9/27/2026
Tool
EFT Pro
Device

Apple iPhone XS Max (A2104)

Operation
Bypass Passcode (Signal)
Path

APPLE > Ramdisk > Boot Passcode/Hello IOS 11.x Up 26.x One Click

EFT Pro

Get this tool on GsmZone

View Tool →

Notes

iCloud Bypass (Passcode) with Signal **Requirements:** * A compatible RP2350-based board flashed with `usbliter8` firmware. * The device must be connected in **DFU Mode**. Steps 1. Backup Passcode. then Erase Device 2. Restore Passcode

Bypass Passcode (Signal) — Apple iPhone XS Max (A2104) — Log

=== LOG ===
[*] Checking device state... 
[*] No ramdisk SSH - checking DFU/Recovery... 
Detected A12/A13 device (iPhone11,6) - using Usbliter8 ramdisk boot 
Preparing Environment : OK 
Check Apple drivers..... ✓.. 
[*] Cleaning previous USB session state... 
[+] PRODUCT: iPhone11,6 MODEL: d331pap ECID: 0005258236F2002E SRNM: ? CPID: 8020 
Preparing usbliter8 bootchain....OK 
[+] Selected: Method 1 (iPhone11,6-8020.zip) 
Preparing RAMDISK payload (iPhone11.6 / iPhone11,6-8020.zip)....OK 
[+] Payload loaded (ibss=0B kernel=18957527B ramdisk=268442919B) 
[*] Booting patched iBEC (2271600 B) via usbliter8 CUSTOM_BOOT... 
[*] Uploading patched iBEC (2271600 B) via libirecovery... 
[*] CUSTOM_BOOT sent, waiting for device to transition... 
[!] Please press and hold the POWER button for 2 seconds now. 
[*] Waiting for device in recovery... 
[+] iBEC booted, device in Recovery. 
Preparing Environment : OK 
Check Apple drivers..... ✓.. 
[*] Waiting 3s for iBEC/Recovery to settle... 
[+] Recovery identity: ECID=0005258236F2002E SRNM=FK1XJ83PKPH3 CPID=8020 
[*] Setting black (bgcolor 0 0 0)...OK 
Sending File (logo).....OK 
[*] Setting picture...OK 
[!] sptm missing - skipping 
[!] txm missing - skipping 
Sending File (AOP).....OK 
Sending File (ANE).....OK 
Sending File (AVE).....OK 
Sending File (ISP).....OK 
Sending File (GFX).....OK 
Sending File (SIO).....OK 
[!] PMP missing - skipping 
[!] WHC missing - skipping 
Sending File (DeviceTree).....OK 
Sending File (sep-firmware).....OK 
Sending File (trustcache).....OK 
Sending File (ramdisk)..... 268442919 B 
[*] Uploading 268442919 B via raw irecv (no progress cb)... 
[+] Upload complete. 
[+] ramdisk cmd OK - md0 registered 
Sending File (kernel).....OK 
[*] Setting boot-args...OK 
[*] Verifying boot-args via irecv_getenv... 
[+] iBoot boot-args = "rd=md0 -v debug=0x14e serial=3 wdt=-1 keepsyms=1" 
[*] bootx...OK 
[+] RAMDISK boot triggered. 
[*] Waiting for device to leave Recovery mode... 
[+] Device left Recovery after 1s 
[?] If it took >15s to leave Recovery: device likely booted 
NORMAL iOS via watchdog reset, not the RAMDISK. 
Check screen: teal+verbose = ramdisk, Apple logo = iOS. 
[*] Establishing SSH (port 22 alpine, 5 attempts)... 
P:16..OK 
[+] SSH connected on attempt 1 (port cfg 16) 
[*] Mounting partitions (Method 1)... 
[*] Mounting (host strategy_universal)... 
[*] mount System -> /mnt1 
[*] scan disk1s3..s7 (Preboot/xART/Hardware)... 
[*] volumes: mnt6=Y mnt7=71B50238-42A7-52AD-9F9C-5D5892B32ACC.gl mnt4=Y 
[*] seputil gigalocker-init... 
[*] seputil --load /mnt6/E31FA490E07CD0D81087ED1CA1B7A64219E6A7550FA64405FCFBD7606333CA6BFA351666C7963BFBDEE8F7F14BEB778B/usr/standalone/firmware/sep-firmware.img4 
[+] seputil --load finished 
[*] mount Data -> /mnt2 
[+] Data mounted 
[+] mount done 
[+] Partitions Mounted Successfully! 
[*] Backup Passcode... 
Checking iDevices.....OK 
Checking SSH......P:16..OK 
Waiting for server.....OK 
BuildID : 95E42B56-E950-11F0-BD78-772AF743B328 
ProductBuildVersion : 22H218 
ProductName : iPhone OS 
ProductVersion : 18.7.4 
Activation Files Backing up .......Accounts3.sqlite found at: /mnt8/Library/Accounts/Accounts3.sqliteMAKING IC-Info.sisv...OK 
Pulling device IC-Info.sisv (as IC-Info2.sisv) .......OK 
Checking backup files...OK 
Path:Backups/0005258236F2002E 
com.apple.AppleMediaServices=local (iTunes Store) 
com.apple.AppleMediaServices=local (iTunes Store (Sandbox)) 
[email protected] (IDMS) 
[email protected] (Apple ID) 
[email protected] (Messages) 
[email protected] (iTunes Store) 
[email protected] (iCloud) 
com.apple.accounts.accountsd=local 
com.apple.accounts.accountsd=local 
com.apple.accounts.accountsd=local 
[email protected] (CloudKit) 
[email protected] (IMAPMail) 
[email protected] (iCloud - Device Locator) 
[email protected] (iCloud - Find My Friends) 
[email protected] ([email protected]) 
dataaccessd=local 
CopiedSIMPhoneNumber:+201010074748 
CopiedSIMPhoneNumber:+201010634441 
CopiedSIMPhoneNumber:+201552950079 
CopiedSIMPhoneNumber:+201080730344 
LastKnownICCID:8920022023349346954 
PhoneNumber:201080730344 
Checking iDevices.....OK 
Checking SSH......P:16..OK 
Erase All Content and Settings ..........OK 
Operation {Boot Passcode/Hello IOS 11.x Up 26.x One Click} ID: 2DF8855A27C51EB8 
Elapsed time 02:45 -- Version 5.6.3 Release 0827 Build 7
0 15

Comments

No comments yet