This guide will instruct you on how to downgrade any A10 or A10X-based iOS device to any version that the device supports. This method does not require SHSH blobs, however, it is tethered, meaning that you will need to plug the device into a computer every time it is rebooted in order to boot the phone.
This tutorial will use a tool called turdus merula. Downgrades are made possible thanks to the checkm8 bootrom exploit, as well as the Blackbird SEP exploit. turdus merula is the first public downgrade tool to use the Blackbird exploit - downgrades were possible without it, however, several functions of the phone did not work if the SEP was bypassed. This tool supports both A9 and A10 devices, however, the process is slightly different between the two. If you have an A9 device, see here for a guide for your device.
"Global" iPhone 7 and 7 Plus devices (iPhone 9,1 and 9,2) will have have stability issues when running iOS 10 due to an issue with the baseband. They will activate, but you will get constant "No SIM Card Installed" popups (unless suppressed by a jailbreak tweak) and a minor performance/battery life hit.
A10X iPad Pros have a similar baseband issue with iOS 10, however, these will not activate at all.
These devices all function fine on iOS 11+
1. Extract turdus_merula to a folder. Open Terminal, and navigate to the turdus_merula directory. You can do this by typing cd into the terminal, then dragging the folder from Finder into the terminal.
2. Run the following command in Terminal: /usr/bin/xattr -c ./bin/turdusra1n && /usr/bin/xattr -c ./bin/turdus_merula
3. Place your device into recovery mode by holding the power and home buttons until it displays the Connect to iTunes/Connect to Computer screen. Then, plug your device into the computer.
4. Run the command ./bin/turdusra1n -ED in Terminal. The tool will then instruct you on how to place your device into DFU mode. Once in DFU mode, the tool will put the device into Pwned DFU mode.
Coming soon