Ipsw Walkthrough Part 2 – The Swiss Army Knife for iOS/MacOS security research

In the first part of this series, we went over the most of ipsw commands and today we will continue with the rest of them. We will see how to work with kernelcache, img4, how to interact with the USB connected device and more.

extract

We will start with the ipsw extract command which allows us to extract kernelcache, dyld_shared_cache, DeviceTree and Im4p keybags from IPSW/OTA files.

Since we have already covered extracting DeviceTree, we will jump right into dumping …