sviehb / jefferson

JFFS2 filesystem extraction tool

This repository has been archived.

Jefferson is now maintained and released from https://github.com/onekey-sec/jefferson/.

This repository should not be relied upon to install Jefferson. We recommend you either clone from https://github.com/onekey-sec/jefferson/ or install from pip using pip install --user jefferson.

---

Jefferson

JFFS2 filesystem extraction tool

Installation

Follow these steps on Debian based systems (Debian, Ubuntu, Kali, ...) to perform a system-wide installation of jefferon:

git clone https://github.com/sviehb/jefferson.git
cd jefferson
sudo apt update
sudo apt install python3-pip liblzo2-dev
sudo python3 -m pip install -r requirements.txt
sudo python3 setup.py install

Features

• big-endian and little-endian support with auto-detection
• zlib, rtime, LZMA, and LZO compression support
• CRC checks - for now only enforced on hdr_crc
• extraction of symlinks, directories, files, and device nodes
• detection/handling of duplicate inode numbers. Occurs if multiple JFFS2 filesystems are found in one file and causes jefferson to treat segments as separate filesystems

Usage

$ jefferson filesystem.img -d outdir