GitHub/ipsw
1
0
Fork 0
mirror of https://github.com/blacktop/ipsw.git synced 2026-06-07 12:27:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,650 Commits 30 Branches 967 Tags
dependabot/github_actions/github/codeql-action-4.36.2
Commit Graph
135 Commits
Author SHA1 Message Date
blacktop e209828c31 feat(diff): add cacheable task-based reports 
Refactor diff jobs into task-owned renderers with persistent cache support, root-confined walkers, and quieter Mach-O/Firmware output.
 2026-06-04 12:02:46 -06:00
blacktop 5ce9eb1525 fix: add MountedFilesystemRoot helper and apply it consistently 2026-05-07 10:12:55 -06:00
blacktop c20f9af712 fix: multiple security vulnerabilities (SSRF, path traversal) 
- Remove POST /diff/files endpoint that allowed arbitrary host file reads
  (CWE-22); clients must now read files locally and POST content to
  /diff/blobs instead
- Add validatePublicURL() to /info remote endpoints, rejecting URLs that
  resolve to loopback, private, link-local, or multicast addresses to
  prevent SSRF; also remove attacker-controlled proxy/insecure params
- Add SanitizeArchivePath() helper that verifies extracted archive entry
  paths stay within the destination directory (zip-slip / tar-slip,
  CWE-22); replace bare filepath.Join(dest, filepath.Clean(name)) calls
  in SearchZip, OTA parser, AA payload extractor, and ota_extract
- Fix server listen address to use net.JoinHostPort to respect Host config
 2026-04-11 14:37:41 -06:00
blacktop 23eb047fee chore: replace buffer with decoder in HasMTEInstructions function 2026-03-09 21:14:19 -06:00
blacktop 8e6f2c554b chore: modernize to 1.26 
Refactor string concatenation to use strings.Builder for improved performance in multiple files
 2026-02-12 10:02:01 -07:00
blacktop 5b92508e5b fix(dmg): improve handling of AEA-encrypted DMGs and cleanup logic 2026-02-11 21:01:30 -07:00
Sam CollinsonandGitHub d35f0ebdff fix: add proxy support for downloading FCS keys 🥝 (#914) 2025-11-09 11:38:09 -07:00
blacktop a8ef1f724b feat: add --mte to ipsw dsc search command 2025-11-06 14:45:30 -07:00
blacktop e1ad160d0d feat: added --mount-point|-m flag to ipsw mount cmd to let you pick the mount location + docs update 2025-08-12 15:55:42 -06:00
blacktop 478a569c74 fix: add partial --insecure support to fcs key pem download in AEA commands 2025-07-29 15:11:53 -06:00
blacktop 52a85d2f37 fix: attempt to fix apfs-fuse not being found errors (#793 #774) 2025-07-13 19:54:47 -06:00
blacktop 94359afd7d chore: move from iterm2 only terminal images to go-termimg pkg 2025-07-11 20:59:41 -06:00
blacktop a51fd931f7 feat: support mounting on linux for OLD HFS+ DMGs 2025-06-20 13:05:24 -06:00
blacktop 5cbd83a718 fix: symbolicate strings with emojis in ipsw disass cmds 2025-06-02 23:45:21 -06:00
Vincent AndraeandGitHub 9f31446a8b fix: XML Parsing Error During Code Signing (#722) 2025-05-31 10:29:37 -06:00
MaksymandGitHub e56a63c7a9 feat: add --dec-retries and --dec-retry-backoff arguments to enable retries when encountering issues with calling LLM APIs (#706) 2025-05-18 10:34:27 -06:00
blacktop 1bf45e29e0 feat: 🆕 add --dec flag to ipsw dsc disass and ipsw macho disass to add AI decompiler 🎉 + a few improvements to disass output 2025-05-01 12:40:47 -06:00
blacktop 3ef2b93200 feat: improve ipsw fw iboot cmd 2025-04-03 13:02:12 -06:00
blacktop b6dee16f2c feat: add new abilities to ipsw idev img ddi cmd 2025-03-30 12:48:39 -06:00
blacktop 645758e3c4 feat: add ipsw idev img ddi cmd 2025-03-30 00:20:21 -06:00
blacktop 6cca9a980d refactor: replace interface{} with any and simplify loop constructs 2025-03-26 22:53:29 -06:00
blacktop 4126b60460 feat: add new DDI handing utils 2025-03-25 16:46:42 -06:00
blacktop 69f5d5c947 feat: add ability to ipsw mount encrypted DMGs with --key flag OR --lookup them from TheAppleWiki 🇦🇷 2025-02-26 21:44:54 -07:00
blacktop 5880d55474 fix: allow copy errors in ExtractFromDMG #538 2025-02-23 22:02:51 -07:00
blacktop 4ca56524b5 chore: lookup abs path for apfs-fuse in $PATH #570 2025-01-09 11:03:19 -07:00
blacktop bcbcb14f89 fix: add better error handling to XCode 16 ipsw idev img cmds 🏎️ 2024-09-12 13:08:45 -06:00
blacktop 6d0e742a5c fix: ipsw diff new/removed MachO bug + a unit test 👀 well, would ya look at that 2024-08-20 15:32:37 -06:00
blacktop 8b55aaedb0 fix: rm extra 'bad path' check from Mount() 2024-08-10 17:17:26 -06:00
blacktop ca20cb85fb chore: add support for aea.DecryptConfig and B64SymKey arg 2024-07-26 14:01:37 -06:00
blacktop b71f77f7ae feat: add support for --pem-db everywhere it's needed to allow for external AEA pem key JSON databases to be used 2024-07-08 22:14:10 -06:00
blacktop dfe5565a3b fix: symbol server database code 2024-07-02 20:44:21 -06:00
blacktop 12f280b2c2 chore: add util.Bits to pretty print a uint64 as bits 2024-06-18 23:27:31 -06:00
blacktop 3c5e3b02a5 feat: add ability to partial-partialzip AEA1 private-key .pem files from remote/local IPSWs 2024-06-11 12:42:44 -06:00
blacktop b92ac6c82f feat: thread the 🆕 AEA1 decryption transparently through all relevant ipsw cmds 2024-06-11 02:25:18 -06:00
blacktop 48d23f6787 feat: ipsw fw aea DMG.aea --output /tmp is working! 🎉 2024-06-10 23:53:37 -06:00
blacktop 719d64682e chore: rm deprecated rand.Seed from utils.go 2024-06-03 08:26:21 -06:00
blacktop a4e7cbe7f8 chore(deps): bump mpb to v8 2024-06-01 12:49:43 -06:00
blacktop 02616e64ec fix: ipsw dl appledb cmd which defaults to using git will use the bin if installed othewise will use a pure Go git implementation 2024-04-27 10:54:44 -06:00
blacktop a09f62f281 feat: add 🆕 --decrypt flag to ipsw dl ipsw to attempt to lookup and use keys for --pattern files 2024-04-20 20:15:50 -06:00
blacktop 1673ee487a feat: add ability to filter the extracted kernelcaches to a single device 2024-01-06 23:07:58 -07:00
blacktop c19d85180c fix: add support for fat machos to ipsw ent and ipsw diff cmds 2023-12-12 17:47:27 -07:00
blacktop fd24fba428 fix: ipsw ota extract command to search cryptexes as well (darwin only) 🥙 2023-09-23 19:14:42 -06:00
blacktop 418a68cf28 fix: ipsw idev img nonce --qr-code --qr-size 512 to output to VSCode terminal as well as iTerm2 2023-09-08 00:13:17 -06:00
blacktop 2a4d945997 feat: add ipsw kernel kmutil create hidden convenience cmd 2023-08-24 21:21:13 -06:00
blacktop d7dd76b598 feat: add --install flag to ipsw dl kdk command 2023-08-24 12:37:47 -06:00
blacktop 816921a44a chore(deps): switch to chroma v2 2023-07-19 13:47:20 -06:00
blacktop 84625092ff fix: ipsw dl db cmd to support --build flag 2023-07-18 09:59:50 -06:00
blacktop 253d9189a2 feat: add --local flag to ipsw dl appledb cmd to use local git repo instead of API 2023-07-16 17:43:33 -05:00
blacktop da9f522dbc feat: add NEW ipsw idev nonce --qr-code command 2023-06-19 15:11:44 -06:00
blacktop 8f10980960 feat: add option to install sim runtimes with ipsw download xcode --sim cmd 2023-06-19 12:02:30 -06:00