I have a jailbroken IOS8 device, with an A6X processor. I'd like to pull either the device's kernel or a specific module, and decrypt it to use with a compatible objdump.

The IOS kernel modules do not appear to be on the exposed file system.

2 Answers 2


Googled that for you: http://www.slideshare.net/i0n1c/syscan-singapore-2011-stefan-esser-targeting-the-ios-kernel slides 12 and following, by @i0n1c. I don't know if the layout is still the same, but "easier to extract from a firmware image" sounds like good advice.

  • Thank you Vitaly. Unfortunately the method described requires devices that do not appear to have IOS8 or IOS9 firmwares available, and keys that aren't available for more recent devices. I'll update my question accordingly. Oct 26, 2015 at 22:38
  • A significant point in that preso is that modules are a part of the iOS kernel file stored in /System/Library/Caches/com.apple.kernelcaches/kernelcache Nov 13, 2015 at 5:15

Just so you know, this is a legal grey area. I know Apple would NOT be happy. Since I don't feel like reading their thousand page terms of use I'll tell you that most software companies(quoting from HTC's bootloader red text) state that you may not distribute your actual findings or source code. You're welcome to report bugs, but anything else could end badly.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.