{
  "added_at": "2026-11-02",
  "additional_evidence_urls": [
    "https://github.com/kpwn/iOSRE/blob/20aff7761b249cb2f76477ef39f8885bfcb404cf/wiki/README.md",
    "https://github.com/kpwn/iOSRE/blob/20aff7761b249cb2f76477ef39f8885bfcb404cf/wiki/Mach-O.md",
    "https://github.com/kpwn/iOSRE/blob/20aff7761b249cb2f76477ef39f8885bfcb404cf/wiki/IOKit-RE.md",
    "https://github.com/kpwn/iOSRE/blob/20aff7761b249cb2f76477ef39f8885bfcb404cf/resources/papers/README.md",
    "https://github.com/kpwn/iOSRE/tree/20aff7761b249cb2f76477ef39f8885bfcb404cf/resources/scripts",
    "https://github.com/kpwn/iOSRE/blob/20aff7761b249cb2f76477ef39f8885bfcb404cf/LICENSE.txt",
    "https://github.com/kpwn/iOSRE/tree/20aff7761b249cb2f76477ef39f8885bfcb404cf"
  ],
  "category": "learning",
  "description_en": "A community-maintained reference on iOS reverse engineering started by kpwn, built from a wiki, a curated index of public technical papers and talks, and a few environment-setup scripts. The wiki pages introduce iOS internals such as the Mach-O executable format, the XNU kernel and IOKit, the boot chain and a history of platform mitigations, while the README states the project is an early, ongoing effort and several pages remain stubs. The repository hosts notes and external links rather than any Apple firmware, device images or app binaries.",
  "description_zh": "由 kpwn 发起、社区维护的 iOS 逆向工程参考资料，由一个 wiki、一份公开技术论文与演讲的整理索引，以及几个环境配置脚本组成。wiki 页面介绍 iOS 的底层机制，如 Mach-O 可执行文件格式、XNU 内核与 IOKit、启动链，以及平台缓解措施的历史；README 说明项目尚处早期、仍在持续完善，多个页面仍是占位草稿。仓库只收录笔记和外部链接，并不包含任何 Apple 固件、设备镜像或应用二进制文件。",
  "entry_url": "https://awesomerea.org/resources/kpwn-iosre/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/kpwn-iosre/",
  "evidence_url": "https://github.com/kpwn/iOSRE/blob/20aff7761b249cb2f76477ef39f8885bfcb404cf/README.md",
  "group": "learn",
  "id": "kpwn-iosre",
  "json_url": "https://awesomerea.org/resources/kpwn-iosre/record.json",
  "kind": "learning-resource",
  "markdown_url": "https://awesomerea.org/resources/kpwn-iosre/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/kpwn-iosre/index.md",
  "name": "iOSRE: iOS Reverse Engineering reference",
  "name_zh": "iOSRE：iOS 逆向工程参考资料",
  "record_type": "resource",
  "relationship": "learning",
  "requirements": [
    "Reviewed at commit 20aff77 on the master branch; the repository was last pushed on 2018-06-30 and has not been updated since, so its iOS 8/9-era material is historical and does not track current iOS versions. The README calls the effort new and ongoing, and several wiki pages on topics such as auditing the XNU kernel, the boot ROM, the sandbox and userland subjects are still marked TODO.",
    "The repository ships documentation and links, not target files: resources/papers/README.md is an index that links to publicly published papers and talks rather than hosting the PDFs, and no Apple firmware images, device keys or app binaries are committed. Working through the material assumes the reader supplies their own research device and Apple or third-party tooling, which the repository does not provide.",
    "The setup scripts under resources/scripts target macOS with Xcode command-line tools and download third-party software at runtime, including Homebrew, ldid, Theos, Reveal, Hopper and class-dump, while a separate Install XPwn script builds tools on Linux through apt; each stays under its own license.",
    "The README warns that files in the resources folder are mostly user-contributed and may be malicious and advises checking them before running; the project reports no testing or verified results.",
    "LICENSE.txt is the author's Modified Anyone But Richard M Stallman (MABRMS) license, which GitHub cannot classify (NOASSERTION) and which permits broad reuse with the warranty disclaimer in that file; individual files may state otherwise, and the linked papers and tools keep their own terms."
  ],
  "requirements_zh": [
    "审阅基于 master 分支提交 20aff77；仓库最后一次推送为 2018-06-30，此后未再更新，其 iOS 8/9 时代的内容属于历史资料，并不跟进当前 iOS 版本。README 称该项目尚新、仍在持续推进，关于审计 XNU 内核、BootROM、沙箱及用户态等主题的多个 wiki 页面仍标注为 TODO。",
    "仓库提供的是文档与链接，而非目标文件：resources/papers/README.md 是一份索引，链接到公开发表的论文和演讲，而非托管 PDF；仓库未提交任何 Apple 固件镜像、设备密钥或应用二进制。按材料实践需要读者自备研究设备以及 Apple 或第三方工具链，仓库本身并不提供。",
    "resources/scripts 下的配置脚本面向装有 Xcode 命令行工具的 macOS，并在运行时下载第三方软件，包括 Homebrew、ldid、Theos、Reveal、Hopper 和 class-dump；另有一个 Install XPwn 脚本在 Linux 上通过 apt 构建工具。各工具均保留自身许可证。",
    "README 提醒 resources 目录中的文件大多由用户贡献，可能带有恶意，建议运行前自行检查；项目未报告任何测试或验证结果。",
    "LICENSE.txt 为作者自拟的 Modified Anyone But Richard M Stallman（MABRMS）许可证，GitHub 无法识别（NOASSERTION），其条款允许在附带免责声明的前提下广泛复用；个别文件可能另有声明，所链接的论文和工具亦各自保留其条款。"
  ],
  "targets": [
    "app",
    "binary",
    "firmware"
  ],
  "url": "https://github.com/kpwn/iOSRE",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20"
}