Individual skill
ipsw
Reverse-engineers Apple firmware and binaries with the ipsw CLI. Inspects IPSWs and OTAs remotely or locally; extracts kernelcaches, dyld_shared_cache, exclave, SEP, and coprocessor firmware; disassembles and cross-references DSC dylibs, KEXTs, and Mach-Os; dumps and diffs ObjC/Swift headers; decompiles and queries sandbox profiles; searches entitlements; symbolicates crashes and panics; and diffs releases. Use for iOS/macOS internals, private frameworks, kernel or firmware research, and Apple security research, even when ipsw is not named.
ipsw/SKILL.md
Source commit 1a797280aa27481e646be89f334784ad04d315c6
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 104
- Repository last updated
- Sep 27, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- apple Repository topic
- claude-code Repository topic
- claude-skills Repository topic
- codex Repository topic
- ipsw Repository topic
- reverse-engineering Repository topic
- skill Repository topic
- vulnerability-research Repository topic
- security Derived category
- research Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
LICENSE.txtdoc · 1,070 bytesSKILL.mdcore · 13,569 bytesSKILL.mdcore · 13,569 bytesSKILL.mdcore · 13,569 bytesSKILL.mdcore · 13,569 bytesSKILL.mdcore · 13,569 bytesSKILL.mdcore · 13,569 bytesSKILL.mdcore · 13,569 bytesSKILL.mdcore · 13,569 bytesSKILL.mdcore · 13,569 bytesreferences/class-dump.mddoc · 5,497 bytesreferences/device.mddoc · 2,641 bytesreferences/diffing.mddoc · 3,625 bytesreferences/download.mddoc · 9,981 bytesreferences/dyld.mddoc · 8,695 bytesreferences/entitlements.mddoc · 3,231 bytesreferences/firmware.mddoc · 7,921 bytesreferences/kernel.mddoc · 6,579 bytesreferences/macho.mddoc · 4,637 bytesreferences/sandbox.mddoc · 5,319 bytesreferences/symbolication.mddoc · 4,139 bytes
Read excerpt
# ipsw
`ipsw` is one CLI for Apple firmware work, organized into command groups (`download`,
`extract`, `dyld`, `kernel`, `macho`, `fw`, `sb`, `ent`, `diff`, `symbolicate`, `idev`, ...).
Install it with `brew install blacktop/tap/ipsw` (other platforms: github.com/blacktop/ipsw
releases). Remote and download commands need network access; `idev` needs a USB-connected
device. This skill describes ipsw as of commit 6e0291a8f (after release 3.1.725); on 3.1.725
and earlier, apply the "Older releases" table below. Flags change between releases:
`ipsw version` shows the installed build, and `ipsw <group> <command> --help` is the source of
truth. Commands marked 🚧 in `--help` are works in progress.
Examples use these shell variables (POSIX sh/bash/zsh syntax):
```bash