iPod touch 5 disabled even after bruteforce is done

Passcode

https://preview.redd.it/qr2sj7ftmvfg1.png?width=433&format=png&auto=webp&s=83e0ee9c7676eab9359be3f5d650a139cd0c276f

My question

Im trying to bruteforce this ipod touch 5 ios 9.2.2 thats on disabled screen.

First thing I tried : I booted it into sh ramdisk on ILK then connected to the server via the port and stuff. I used filezilla and cyberduck. Cyberduck didnt let me do some stuff so I used filezilla, I took the springboard plist file edited the attempts to be -9999 and put it back into " Preferences " folder. Rebooted and its disabled.

Second thing I tried: I installed iwannabrute to bruteforce it in hope that bruteforce will undisable it automatically. I put it in dfu mode it detected it later It wanted me to put it in pwndfu mode with pico I did it and I hooked that ipod to the mac iwannabrute put it into ramdisk and after some minutes I saw that its spamming some stuff in the ramdisk so I thought its broken or I did something wrong. I let it sit for a couple of minutes and It notified me that the passcode is 2412. I rebooted the ipod and boom i'm met with disabled screen ( I thought i did something wrong I tried it again it said passcode is indeed 2412 and rebooted it and its still disabled ).

IF anyone knows the problem or what Im doing wrong because I dont know. After filezilla thing I save it and disconnect from the server reboot the ipod its still disabled. I go back to filezilla while ipod is in ramdisk the springboard plist file outside mnt2 folder ( in like :/ section ) I see that its changed to 11 instead of -9999, while springboard plist file in mnt2 > mobile > preferences is intact.

Posted Jan 27, 2026, 11:32 AM UTC

02
Loading comments…