1

I have a jailbroken IOS8 device, with an A6X processor. I'd like to pull either the device's kernel or a specific module, and decrypt it to use with a compatible objdump.

The IOS kernel modules do not appear to be on the exposed file system.

1

Googled that for you: http://www.slideshare.net/i0n1c/syscan-singapore-2011-stefan-esser-targeting-the-ios-kernel slides 12 and following, by @i0n1c. I don't know if the layout is still the same, but "easier to extract from a firmware image" sounds like good advice.

| improve this answer | |
  • Thank you Vitaly. Unfortunately the method described requires devices that do not appear to have IOS8 or IOS9 firmwares available, and keys that aren't available for more recent devices. I'll update my question accordingly. – Just Asking Oct 26 '15 at 22:38
  • A significant point in that preso is that modules are a part of the iOS kernel file stored in /System/Library/Caches/com.apple.kernelcaches/kernelcache – Vitaly Osipov Nov 13 '15 at 5:15
-1

Just so you know, this is a legal grey area. I know Apple would NOT be happy. Since I don't feel like reading their thousand page terms of use I'll tell you that most software companies(quoting from HTC's bootloader red text) state that you may not distribute your actual findings or source code. You're welcome to report bugs, but anything else could end badly.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.