Victor Oliveira victor-oliveira1

Bypassing activation lock on A7 devices with Legacy iOS Kit

Devices on iOS 10 can bypass activation if /Applications/Setup.app is deleted before first boot. Since A7 devices can be restored to iOS 10.3.3 through Legacy iOS Kit, we can bypass activation lock very easily on these models.

Guide

Get Legacy iOS Kit for macOS or Linux from https://github.com/LukeZGD/Legacy-iOS-Kit. The complete version is not required for this guide.
Connect your activation locked A7 device (mine was an iPad Air 1) and choose Restore/Downgrade -> iOS 10.3.3, then choose the option to download the IPSW file for iOS 10.3.3. Once the file is downloaded, select "Start Restore" and wait for the restore to complete.

Warning

You must immediately boot the device into DFU mode once the restore has completed using the instructions for your device at https://theapplewiki.com/wiki/DFU_Mode. If the device's first boot occurs at this point, you'll need to restore to 10.3.3 again.

On Linux

Installing mkisofs

apt-get install mkisofs

Editing ISO image

mkdir /tmp/custom_iso

	wget http://stedolan.github.io/jq/download/linux64/jq
	aws ec2 describe-instances --filters "Name=tag:Name,Values=$NAME" \
	"Name=instance-state-name,Values=running" \
	\| jq -r \
	".Reservations[] \| .Instances[] \| .InstanceId" \

	aws ec2 describe-volumes --filters \
	"Name=status,Values=available" \
	\| jq -r ".Volumes[] \| .VolumeId" \

	adb shell content query --uri content://settings/secure --where "name=\'android_id\'"

	adb shell content delete --uri content://settings/secure --where "name=\'android_id\'"

	adb shell content insert --uri content://settings/secure --bind name:s:android_id --bind value:s:7373de1e9e9670c2