How does it handle the dyld_shared_cache?

The skill provides workflows for address-to-symbol resolution, finding cross-references, and extracting dylibs from the cache.

Can this skill help with iOS kernel research?

Yes, it includes specific commands for extracting kernelcaches, listing KEXTs, and diffing kernel versions.

Do I need to install anything locally?

Yes, this skill requires the ipsw CLI tool, which can be installed via Homebrew using 'brew install blacktop/tap/ipsw'.

Is it possible to analyze entitlements with this skill?

Absolutely; it can extract entitlements from Mach-O files and even build a searchable SQLite database of entitlements from an entire IPSW.

What is the primary use of the IPSW skill?

It is used for reverse engineering Apple firmware and binaries, including tasks like disassembling functions, analyzing kernels, and dumping headers.

IPSW Reverse Engineering Toolkit

Name: IPSW Reverse Engineering Toolkit
Author: blacktop

byblacktop

•

Security & Testing

Analyzes Apple firmware and binaries using the ipsw CLI tool to perform reverse engineering, kernel analysis, and header extraction.

About

The IPSW skill empowers Claude to perform advanced reverse engineering tasks on Apple platforms, including iOS and macOS. It facilitates the downloading and extraction of firmware, analysis of the dyld_shared_cache, kernelcache exploration, and extraction of Mach-O metadata and entitlements. Whether you are performing vulnerability research, analyzing private frameworks via class-dumping, or triaging crash logs using address-to-symbol resolution, this skill provides the specialized commands and workflows needed to navigate Apple's complex ecosystem efficiently.

Key Features

Objective-C header dumping from private frameworks and binaries
Kernel and KEXT analysis with version diffing capabilities
Deep dyld_shared_cache analysis including cross-references and disassembly
33 GitHub stars
Firmware acquisition and automated component extraction for kernels and DSC
Entitlement database generation and querying for security research

Use Cases

Reverse engineering private Apple APIs for advanced app development or research
Vulnerability research and security auditing of iOS/macOS components
Triaging system crashes by resolving addresses to symbols within the dyld_shared_cache

About

Key Features

Objective-C header dumping from private frameworks and binaries
Kernel and KEXT analysis with version diffing capabilities
Deep dyld_shared_cache analysis including cross-references and disassembly
33 GitHub stars
Firmware acquisition and automated component extraction for kernels and DSC
Entitlement database generation and querying for security research

Use Cases

Reverse engineering private Apple APIs for advanced app development or research
Vulnerability research and security auditing of iOS/macOS components
Triaging system crashes by resolving addresses to symbols within the dyld_shared_cache