Skip to content

Instantly share code, notes, and snippets.

@joswr1ght

joswr1ght/getios10beta1kernelcache.sh

Created June 23, 2016 10:44
Show Gist options
  • Star 9 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save joswr1ght/a02774da552aec0bf1bfee6386e82353 to your computer and use it in GitHub Desktop.
Save joswr1ght/a02774da552aec0bf1bfee6386e82353 to your computer and use it in GitHub Desktop.
Download ZIP
Get iOS 10 Beta 1 Kernelcache for reverse engineering (iPhone 6s hardware)
Raw
getios10beta1kernelcache.sh
# Get decrypted kernelcache
# URL for iOS 10 Beta 1 for iPhone 6s taken from http://pastebin.com/FRMfanmT
wget -q http://apple.co/28R9rhS -O ios10beta1-iphone6s.zip
mkdir ios10beta1
unzip -q ios10beta1-iphone6s.zip -d ios10beta1
cd ios10beta1
wget -q http://nah6.com/%7Eitsme/cvs-xdadevtools/iphone/tools/lzssdec.cpp
g++ -o lzssdec lzssdec.cpp
./lzssdec -o 439 < AssetData/boot/kernelcache.release.n71 >kernelcache.decrypted # 439 is offset byte count to 0xFFCFFAEDFE header
xxd kernelcache.decrypted | head -1
file kernelcache.decrypted
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment