Author: maksimka539
Compatibility: iOS 5.0 – 9.3.6 (32-bit devices only)
Purpose: Bypass iCloud activation screen using SSH Ramdisk method.
This tool is designed for iCloud-locked 32-bit iOS devices running iOS 5–9.
It uses an SSH Ramdisk, loaded via Legacy iOS Kit, to patch system files and simulate activation.
No activation files are required — everything is done directly via SSH.
| iOS Version | Activation Method |
|---|---|
| iOS 5–6 | Replace lockdownd with patched version |
| iOS 7–10 | Patch MobileGestalt and remove Setup.app |
Install the required tools:
macOS (Homebrew):
brew install sshpass libimobiledeviceLinux (APT, for Debian/Ubuntu):
sudo apt update
sudo apt install sshpass libimobiledevice-utilsAlso ensure these are installed:
sshscpncbash
-
Legacy iOS Kit
Used to create and launch the SSH Ramdisk.
→ https://github.com/LukeZGD/Legacy-iOS-Kit -
SSH Ramdisk Mode
Enter this mode using Legacy iOS Kit.
After launching, the device will be accessible at127.0.0.1:6414via SSH.
Remember to click Connect to SSH. -
Mounted Filesystem
Before running the script, make sure the device's filesystems are mounted.
In the SSH window, run:
mount.shios_5_10_hacktivation_tool/
├── hacktivate.sh # Main script
└── lockdownd # Required only for iOS 5–6
- 📥 Download and unzip the tool:
unzip ios_5_10_hacktivation_tool.zip
cd ios_5_10_hacktivation_tool
chmod +x hacktivate.sh-
🔧 Run SSH Ramdisk using Legacy iOS Kit
The device must be in SSH mode (port 6414).
See: Legacy iOS Kit SSH Ramdisk Guide -
🗂 Connect to SSH and mount filesystems:
ssh -p 6414 root@127.0.0.1
mount.sh- 📌 Without closing the SSH window, open a new terminal window, navigate to the folder containing the script, and run it:
./hacktivate.sh- ⌨️ Enter the iOS version when prompted (e.g.,
6.1.3,8.4.1,9.3.5).
- Works only on 32-bit devices (iPhone 4, 4s, 5; iPad 2/3/4; iPad mini 1; iPod touch 4/5).
- Does not support 64-bit devices (iPhone 5s and newer).
- This does not remove iCloud lock, it only bypasses the activation screen. Signal will not work.
Author: @maksimka539
Credits to iPh0ne4s for the lockdownd file.
Feel free to open Issues or Pull Requests for suggestions and improvements.