iOS/macOS Research Swiss Army Knife

macos swift golang ios apple ota firmware macho dyld ipsw lzss lzfse class-dump macho-parser img4 kernelcache dyld-shared-cache swift-dump

• Updated Nov 12, 2026
• Go

XNU kernel, Kernel Collection and CodeQL build scripts

apple kernel darwin xnu kernelcache codeql

• Updated Sep 5, 2026
• Shell

Reversing the Apple sandbox

security reverse-engineering sbpl hacktoberfest kernelcache reverser apple-sandbox sandbox-filters sandbox-profiles

• Updated Apr 24, 2025
• Python

Automate extraction from iOS firmware files (.ipsw)

ios firmware filesystem hacktoberfest ipsw kernelcache extracted-data

• Updated Jan 22, 2026
• C++

Plugin to ease reversing iOS projects

ios objective-c ida-plugin idapython kernelcache

• Updated Aug 15, 2026
• Python

`ipsw` symbolication signatures

ios apple symbols signatures symbolicate symbolication ipsw kernelcache

• Updated Nov 5, 2026
• Python

Build System for the Sinty OS Root and Kernelcache

linux buildroot kernelcache

• Updated Nov 12, 2026
• C

A Python library for the ipsw daemon API

python macos ios ipsw security-research macho-parser kernelcache dyld-shared-cache apple-security

• Updated Aug 14, 2023
• Python

iOS 27 kernelcache RE: SEP dispatch map, AMFI diff, Ghidra workflow.

ios reverse-engineering security-research kernelcache ghidra

• Updated Nov 8, 2026
• Assembly

An LZFSE decompressor written in Go. Mostly useful for decompressing iOS kernel caches via blacktop/ipsw.

golang ios apple decompression lzfse lzfse-compression-algorithm kernelcache lzfse-decompressor

• Updated Jul 24, 2020
• Go

Kernel Cache Manipulation Library

ios reverse-engineering hacktoberfest kernelcache

• Updated Feb 11, 2023

iOS 18.7 (22H20) kernel offset derivations for the A12 generation

ios kernel arm64 symbolication offsets ipsw xnu reverse-enginnering iphone-xs kernelcache a12 exploit-research ios-18

• Updated Nov 6, 2026