Home / Python / Miscellaneous

IDA loader for Apple's iBoot, SecureROM and AVPBooter

IDA iBoot Loader IDA loader for Apple's iBoot, SecureROM and AVPBooter Installation Copy iboot-loader.py to the loaders folder in IDA directory. Credi
Information
Category: Python / Miscellaneous
Watchers: 2
Star: 21
Fork: 2
Last update: Sep 17, 2021
Resource links
https://github.com/matteyeux/ida-iboot-loader

IDA iBoot Loader

IDA loader for Apple's iBoot, SecureROM and AVPBooter

Capture

Installation

Copy iboot-loader.py to the loaders folder in IDA directory.

Credits

0 Open More issues
Closed

noob question xD

hello, i wonder how to find base address per iboot file?, what im trying, always i get this !: [i] bootloader : RELEASE [!] Failed to find base address, it's now set to 0x0 [+] Rebasing to address 0x0

IDA 7.6 on windows

thanks

opened Jan 13, 2022 by P5-2005 4
Closed

Not sure if AVPBooter.vmapple2 is being rebased correctly 

Loading file 'AVPBooter.vmapple2.bin' into database...
Detected file format: SecureROM (AArch64)
  0. Creating a new segment  (0000000000000000-0000000000028250) ... ... OK
[i] bootloader : RELEASE
[+] Rebasing to address 0x100000
Rebasing program to 0x0000000000100000...
[+] _image4_get_partial : 0x100828
[+] _panic : 0x10367c
[+] _platform_get_usb_serial_number_string : 0x102378
[+] _platform_get_usb_more_other_string : 0x102530
[+] _task_init : 0x1042ac
[+] _arm_exception_abort : 0x10e9d4
[+] _platform_get_usb_vendor_id : 0x107d00
[+] _usb_core_init : 0x104ee0
[+] _usb_init_with_controller : 0x104f58
[+] _der_expect_ia5string : 0x1009f0

I personally doubt 0x100000 is the correct rebase address, especially given the amount of errors in the pseudo code:

image

Although, I'm quite new to reversing iBoot so I could be very wrong though

opened Jan 26, 2022 by Naville 0
Closed

screenshots

Capture Capture

opened Sep 16, 2021 by matteyeux 0

v1.0.1(Dec 20, 2022)

Fixes and improvments

v1.0.0(Sep 21, 2021)

  • Rebase file to its correct base address
  • Find specific functions based on strings, functions xref or bytes pattern
  • Bonus for dev/debug images : find a lot of functions based on panic/assert (tested on 12.x 3Dtouchcal images)

Contents

    argp IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering
    avast RetDec plugin for IDA
    matteyeux Binary Ninja loader for 64 bits SEPROMs
    NyanSatan Another Virtualization.framework demo project, with focus to iBoot (WIP)
    x64dbg Official x64dbg plugin for IDA Pro.
    NoamELB A Webpack Loader that automatically inserts react-hot-loader to your App 👨‍🔬
    simonbs 🐵 Animoji app using Apples AvatarKit
    1111joe1111 A set of exploitation/reversing aids for IDA
    nccgroup idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
    x0rloser xorloser's IDA console stuff
    airbus-cert Yet Another Ghidra Integration for IDA
    DGA-MI-SSI YaCo is an Hex-Rays IDA plugin. When enabled, multiple users can work simultaneously on the same binary. Any modification done by any user is synchronized through git version control.
    SinaKarvandi Windbg2ida lets you dump each step in Windbg then shows these steps in IDA
    b1n4r1b01 extract various firmware blobs from iBoot
    kherge-archive A PHP library for country and subdivision data.
    HerringtonDarkholme vue-ts-loader - Type-check your script in your vue-loader.
    ktsn Enable `media` attribute on Vue SFC styles
    eddyerburgh Extract custom test blocks from Vue components
    damianstasik vue-svg-loader - webpack loader that lets you use SVG files as Vue components
    danylokos Nintendo 3DSX loader for Ghidra
    Ga-ryo Fuzzy search tool for IDA Pro.
    Share this repo

    Related Repos


    Miscellaneous
    100
    Playpen is a set of modern, gas optimized staking pool contracts.
    ZeframLou Playpen Playpen is a set of modern, gas optimized staking pool contracts. Features Support for both ERC20 staking and ERC721 staking Can start new rew
     
    Miscellaneous
    47
    DIAL(Did I Alert Lambda?) is a centralised security misconfiguration detection framework w...
    CRED-CLUB DIAL Workloads on cloud provide equal opportunities for hackers as much as they do for internal teams. Cloud-native companies are open to attacks from
     
    Miscellaneous
    42
    Code for "Semantic-Aware Implicit Neural Audio-Driven Video Portrait Generation"
    alvinliu0 Semantic-Aware Implicit Neural Audio-Driven Video Portrait Generation Code for "Semantic-Aware Implicit Neural Audio-Driven Video Portrait Generation"
     
    Miscellaneous
    40
    IDA Frida Plugin for tracing something interesting.
    P4nda0s IDAFrida A simple IDA plugin to generate FRIDA script. Edit template for functions or you can use the default template. Select functions you want to t
     
    Miscellaneous
    15
    https://t.me/master_thyself
    evmn Know Thyself 中文版 Chinese Title Authors Mind Hacks 刘未鹏 编程随想: 2009 ~ 2021 Blog Archives Program Think 晚点 LatePost 宋玮…… English Blogs Title Authors Essay
     
    Miscellaneous
    717
    a Jupyter kernel for Clojure
    clojupyter A Jupyter kernel for Clojure - run Clojure code in Jupyter Lab, Notebook and Console. Table of Contents Getting Started Installation Usage Scenarios -
     
    Miscellaneous
    132
    using your namespace as a notebook
    scicloj notespace Notebook experience in your Clojure namespace What is it? This tool is an attempt to answer the following question: can we have a notebook-l
     
    Miscellaneous
    794
    Python bindings for Clojure
    clj-python Deep Clojure/Python Integration Version Info New Versions Are HOT! Huge New Features! You Can't Afford To Miss Out! API Documentation Java API - you c
     
    Miscellaneous
    78
    Turn data into functions! A simple and functional machine learning library written in elix...
    mrdimosthenis emel Turn data into functions! A simple and functional machine learning library written in elixir. Installation The package can be installed by adding
     
    Miscellaneous
    6
    An optional component handler for hikari, inspired by discord.py's views.
    HyperGH hikari-miru An optional component handler for hikari, inspired by discord.py's views. Installation pip install git+https://github.com/HyperGH/hikari-m
     
    Miscellaneous
    5
    TikTok 4L and 4C checker that doesn't count banned usernames as available
    cliphd TikTok 4L and 4C checker that doesn't count banned usernames as available. Once a username is available, it will send it to your Discord Webhook
     
    Miscellaneous
    4
    TBOT Binance Smart Chain token
    TBOT-Project tbot-bsc-token TBOT Binance Smart Chain token Minting transaction: https://bscscan.com/tx/0xd387a96ac15a616f9b17bf9af84d63fd54de98e176a55bf11bb4f08855
     
    Miscellaneous
    4
    notes on reusable p5.js coding patterns
    M0nica p5.js Notes on random p5.js coding patterns Table of Contents Positioning Elements Responding to User Input Positioning Elements centering elements fu
     
    Miscellaneous
    3
    smart contracts for the implementation of a networked money stream using the ERC1155 stand...
    phydy MoneyStreamNetwork #Short Description A Tradable Cash-Flow DeFi-NFT that gives a holder the power to leverage their superfluid flow to get loans or fu
     
    Miscellaneous
    3
    Fb token and cookie making tools
    niloy0 🥀 🍁 ASSALAMU WALAYKUM 🥰 🥀 🥀 😻 🌺 HI I AM N!LOY 🥀 😘 😻 ! 🥀 😻 WELCOME TO MY PROFILE 🥰 MY PROFILE VISITORS : GITHUB STATES : CONTACT WITH ME :