Submit a plugin
Back to the list
iBoot64helper
v20220221
  • Released on: 2019-08-30
  • Last update: 2022-02-21
iBoot64helper is now an IDA loader!

Just copy iBoot64helper.py to your ~/.idapro/loaders/ (or your IDA/loaders/)
directory, launch IDA, and open a decrypted iBoot, iBEC, or SecureROM binary image.

iBoot64helper is a utility to help with iBoot and SecureROM reverse
engineering. It a) locates the image's proper loading address, b) rebases
the image, c) identifies functions based on common AArch64 function prologues, and
d) finds and renames some interesting functions.

I will be adding features to it, identifying more functions, etc.

For decrypting images you should use xerub's img4lib; the ultimate IMG4 utility.

If you have a device vulnerable to axi0mX's checkm8 you can use "./ipwndfu --dump-rom"
to get a dump of the SecureROM image from your device and use it with iBoot64helper.