skills.rest
blacktop
blacktopCOMMUNITY
Explore all skills by this author →
𝕏@blacktop__GitHub

ipsw

Operates IPsec-based virtual private networks for Linux using a command-line interface.

75|7|Updated Dec 24, 2025
Search Tags:#firmware#kernel#reverse-engineering#entitlements#ipsw#dyld_shared_cache#Mach-O
One-click install
npx skills add https://github.com/blacktop/ipsw-skill --skill ipsw
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ipsw
Source: https://github.com/blacktop/ipsw-skill/tree/main/skill
Command: npx skills add https://github.com/blacktop/ipsw-skill --skill ipsw

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a guided, automated workflow for analyzing Apple firmware and binaries by enabling streamlined acquisition, inspection, and analysis of IPSWs, kernelcaches, dyld_shared_cache, entitlements, and Mach-O data for iOS/macOS security research.

Core Features & Use Cases

  • Firmware acquisition: Download the latest IPSWs and extract components such as kernelcaches and dyld_shared_cache for quick RE workflows.
  • Userspace analysis: Inspect the dyld_shared_cache, perform symbol lookups, cross-references, string searches, and ObjC header extraction from private frameworks.
  • Mach-O & kernel exploration: Analyze Mach-O binaries, inspect entitlements, inspect code signatures, and examine kernel/KEXT data across versions.
  • Entitlements research: Build and query entitlement data across IPSWs to identify privilege escalations and sandbox configurations.
  • Use Case: In vulnerability triage, fetch the latest device firmware, inspect the DSC, and verify private API surfaces and entitlements across builds.

Quick Start

Install the ipsw CLI and run a basic workflow to fetch kernel and DSC data for a device, for example: ipsw download ipsw --device iPhone16,1 --latest --kernel --dyld

Frequently Asked Questions about ipsw

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract kernel and dyld_shared_cache data from an IPSW file?▼

You can extract kernelcaches and dyld_shared_cache data from an IPSW file by using the ipsw CLI to download and unpack firmware components for iOS and macOS reverse engineering.

What is the process for dumping ObjC headers from a dyld_shared_cache?▼

Dumping ObjC headers from a dyld_shared_cache involves inspecting the cache to perform symbol lookups, string searches, and extract private framework headers for userspace analysis.

Can I research entitlements and sandbox configurations across iOS firmware builds?▼

Yes, you can build and query entitlement data across IPSWs to identify privilege escalations and sandbox configurations across different iOS and macOS firmware builds.

How do I disassemble Mach-O binaries for iOS vulnerability triage?▼

Disassembling Mach-O binaries for vulnerability triage requires analyzing the binary structure, inspecting code signatures, and verifying private API surfaces using the ipsw CLI tool.

Do I need a specific runtime environment to analyze Apple kernelcaches?▼

Yes, analyzing Apple kernelcaches relies on the ipsw CLI and a compatible runtime environment to execute commands and produce structured outputs for reverse engineering workflows.

What is the best way to automate Apple firmware acquisition for security research?▼

Automating Apple firmware acquisition involves using the ipsw CLI to fetch the latest IPSWs and extract components like kernelcaches and dyld_shared_cache for security research workflows.

Related Skills

Explore More Software Engineering Skills→
philo-grovesphilo-groves
12

maxtac-asb-ipsw

Analyze Apple IPSW and kernelcache firmware with provenance tracking.

Community
Advanced
smilebank7smilebank7
2

Generate Notes

Generate structured Markdown lecture notes with PDF conversion and cross-references.

Community
Intermediate
gmcabritagmcabrita
6

ipsw

Coordinate IPSW downloads, DSC extraction, and Mach-O inspection for Apple firmware analysis.

Community
Advanced
ArianHobson333ArianHobson333
7

reverser-firmware

Unpack firmware images and analyze extracted data for security vulnerabilities.

Community
Advanced