Haifisch / iBoot64helper

IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

iBoot64helper

Introduction

iBoot64helper is now an IDA loader!

Just copy iBoot64helper.py to your ~/.idapro/loaders/ (or your IDA/loaders/) directory, launch IDA, and open a decrypted iBoot, iBEC, or SecureROM binary image.

This aims to become an IDAPython utility to help with iBoot and SecureROM reverse engineering. Currently it a) locates the image's proper loading address, b) rebases the image, c) identifies functions based on common AArch64 function prologues, and d) finds and renames some interesting functions.

As you can see in the screenshot below, 1920 functions are recognized after running it on iBoot version 5540.0.129.

I will be adding features to it, identifying more functions, etc.

References

iOS RE Wiki

About

IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering


Languages

Language:Python 100.0%