Learning resource
iOSRE: iOS Reverse Engineering reference
A community-maintained reference on iOS reverse engineering started by kpwn, built from a wiki, a curated index of public technical papers and talks, and a few environment-setup scripts. The wiki pages introduce iOS internals such as the Mach-O executable format, the XNU kernel and IOKit, the boot chain and a history of platform mitigations, while the README states the project is an early, ongoing effort and several pages remain stubs. The repository hosts notes and external links rather than any Apple firmware, device images or app binaries.
Requirements & limits
- Reviewed at commit 20aff77 on the master branch; the repository was last pushed on 2018-06-30 and has not been updated since, so its iOS 8/9-era material is historical and does not track current iOS versions. The README calls the effort new and ongoing, and several wiki pages on topics such as auditing the XNU kernel, the boot ROM, the sandbox and userland subjects are still marked TODO.
- The repository ships documentation and links, not target files: resources/papers/README.md is an index that links to publicly published papers and talks rather than hosting the PDFs, and no Apple firmware images, device keys or app binaries are committed. Working through the material assumes the reader supplies their own research device and Apple or third-party tooling, which the repository does not provide.
- The setup scripts under resources/scripts target macOS with Xcode command-line tools and download third-party software at runtime, including Homebrew, ldid, Theos, Reveal, Hopper and class-dump, while a separate Install XPwn script builds tools on Linux through apt; each stays under its own license and none were installed or run for this review.
- The README warns that files in the resources folder are mostly user-contributed and may be malicious and advises checking them before running; the project reports no testing or verified results.
- LICENSE.txt is the author's Modified Anyone But Richard M Stallman (MABRMS) license, which GitHub cannot classify (NOASSERTION) and which permits broad reuse with the warranty disclaimer in that file; individual files may state otherwise, and the linked papers and tools keep their own terms. The reviewed sources establish no AI or REA connection.
About this entry
- Type
- Learning resource
- Category
- Learning resources
- Relationship
- Learning resource
- Targets
- App · Binary · Firmware
Sources reviewed
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · kpwn/iOSRE · Revision 20aff77
- wiki/README.md GitHub · kpwn/iOSRE · Revision 20aff77
- wiki/Mach-O.md GitHub · kpwn/iOSRE · Revision 20aff77
- wiki/IOKit-RE.md GitHub · kpwn/iOSRE · Revision 20aff77
- resources/papers/README.md GitHub · kpwn/iOSRE · Revision 20aff77
- resources/scripts GitHub · kpwn/iOSRE · Revision 20aff77
- LICENSE.txt GitHub · kpwn/iOSRE · Revision 20aff77
- https://github.com/kpwn/iOSRE/tree/20aff7761b249cb2f76477ef39f8885bfcb404cf
More in References and learning
- linux-re-101 · Learning resource
- Frida Labs · Learning resource
- osx & ios re 101 · Learning resource
- Installation and client setup · Documentation
- CLI and Evidence · Documentation
- MCP contracts and generated catalog · Documentation