Skip to main content

ipswd API (v1.0)

Download OpenAPI specification:Download

This allows you to interact with ipsw in a VERY powerful and flexible way via a RESTful API.

The ipswd design was heavily influenced by the design of dockerd. So many of the same concepts apply.

Daemon

Ping

This will return "OK" if the daemon is running.

Responses

Ping

This will return if 200 the daemon is running.

Responses

Version

This will return the daemon version info.

Responses

DeviceList

List XCode Devices.

This will return JSON of all XCode devices.

Responses

Diff

Blobs

This will return the diff of two text blobs.

query Parameters
prev
string
curr
string

Responses

Files

This will return the diff of two text files.

query Parameters
prev
string
curr
string

Responses

Download

Latest iOS Build

Get latest iOS build.

Responses

Latest iOS Version

Get latest iOS version.

Responses

DSC

a2o

Convert virtual address to file offset.

query Parameters
path
required
string

path to dyld_shared_cache

addr
required
integer <uint64>

address to convert

Responses

Response samples

Content type
application/json
{
  • "offset": 0,
  • "sub_cache": {
    }
}

a2s

Convert virtual address to symbol.

query Parameters
path
required
string

path to dyld_shared_cache

addrs
required
Array of integers <uint64> [ items <uint64 > ]

address to convert

Responses

Response samples

Content type
application/json
[
  • {
    }
]

Imports

Get list of dylibs that import a given dylib.

query Parameters
path
required
string

path to dyld_shared_cache

dylib
required
string

dylib to search for

Responses

Response samples

Content type
application/json
{
  • "apps": [
    ],
  • "dsc": [
    ]
}

Info

Get info about a given DSC

query Parameters
path
required
string

path to dyld_shared_cache

Responses

Response samples

Content type
application/json
{
  • "code_signature": {
    },
  • "dylibs": [
    ],
  • "magic": "string",
  • "mappings": {
    },
  • "max_slide": 0,
  • "num_sub_caches": 0,
  • "platform": "string",
  • "sub_cache_group_id": 0,
  • "sym_sub_cache_uuid": "string",
  • "uuid": "string"
}

MachO

Get MachO info for a given dylib in the DSC.

query Parameters
path
required
string

path to dyld_shared_cache

dylib
required
string

dylib to search for

Responses

Response samples

Content type
application/json
{
  • "ModTime": "2019-08-24T14:15:22Z",
  • "Mode": "string",
  • "Name": "string",
  • "Size": 0
}

o2a

Convert file offset to virtual address

query Parameters
path
required
string

path to dyld_shared_cache

off
required
integer <uint64>

offset to convert

Responses

Response samples

Content type
application/json
{
  • "address": 0,
  • "sub_cache": {
    }
}

Slide Info

Get slide info for the DSC.

query Parameters
path
required
string

path to dyld_shared_cache

type
string="auth"

filter by mapping type

Responses

Response samples

Content type
application/json
{
  • "Pages": [
    ],
  • "SlideInfo": {
    },
  • "address": 0,
  • "file_offset": 0,
  • "flags": 0,
  • "init_prot": 0,
  • "max_prot": 0,
  • "name": "string",
  • "size": 0,
  • "slide_info_offset": 0,
  • "slide_info_size": 0
}

Split

Split the DSC into its constituent dylibs using XCode's dsc_extractor.bundle

NOTE: darwin ONLY

query Parameters
path
required
string

path to dyld_shared_cache

output
string

the folder to output the split dylibs

xcode_path
string

the path to the Xcode.app to use for splitting

Responses

Strings

Get strings in the DSC that match a given pattern.

query Parameters
path
required
string

path to dyld_shared_cache

pattern
required
string

regex to search for

Responses

Symbols

Get symbols addresses in the DSC that match a given lookup JSON payload.

query Parameters
path
required
string

path to dyld_shared_cache

required
Array of objects (Symbol)

symbols to lookup

Responses

Webkit

Get webkit version from dylib in the DSC.

query Parameters
path
required
string

path to dyld_shared_cache

Responses

Extract

DMG

Extract DMGs from an IPSW.

Request Body schema: application/json
required

Extraction options

dmg_type
string^(app|sys|fs)$
flatten
boolean
insecure
boolean
ipsw
string
output
string
proxy
string
url
string

Responses

Request samples

Content type
application/json
{
  • "dmg_type": "string",
  • "flatten": true,
  • "insecure": true,
  • "ipsw": "string",
  • "output": "string",
  • "proxy": "string",
  • "url": "string"
}

Response samples

Content type
application/json
null

DSC

Extract dyld_shared_caches from an IPSW.

Request Body schema: application/json
required

Extraction options

arches
Array of strings[ items non-empty ]
flatten
boolean
insecure
boolean
ipsw
string
output
string
proxy
string
url
string

Responses

Request samples

Content type
application/json
{
  • "arches": [
    ],
  • "flatten": true,
  • "insecure": true,
  • "ipsw": "string",
  • "output": "string",
  • "proxy": "string",
  • "url": "string"
}

Response samples

Content type
application/json
null

KBAG

Extract KBAGs from an IPSW.

Request Body schema: application/json
required

Extraction options

flatten
boolean
insecure
boolean
ipsw
string
output
string
pattern
string
proxy
string
url
string

Responses

Request samples

Content type
application/json
{
  • "flatten": true,
  • "insecure": true,
  • "ipsw": "string",
  • "output": "string",
  • "pattern": "string",
  • "proxy": "string",
  • "url": "string"
}

Response samples

Content type
application/json
null

Kernel

Extract kernelcaches from an IPSW.

Request Body schema: application/json
required

Extraction options

flatten
boolean
insecure
boolean
ipsw
string
output
string
proxy
string
url
string

Responses

Request samples

Content type
application/json
{
  • "flatten": true,
  • "insecure": true,
  • "ipsw": "string",
  • "output": "string",
  • "proxy": "string",
  • "url": "string"
}

Response samples

Content type
application/json
null

Pattern

Extract files from an IPSW that match a given pattern.

Request Body schema: application/json
required

Extraction options

dmgs
boolean
flatten
boolean
insecure
boolean
ipsw
string
output
string
pattern
string
proxy
string
url
string

Responses

Request samples

Content type
application/json
{
  • "dmgs": true,
  • "flatten": true,
  • "insecure": true,
  • "ipsw": "string",
  • "output": "string",
  • "pattern": "string",
  • "proxy": "string",
  • "url": "string"
}

Response samples

Content type
application/json
null

SPTM

Extract SPTM and TXM Firmwares.

Request Body schema: application/json
required

Extraction options

dmgs
boolean
flatten
boolean
insecure
boolean
ipsw
string
output
string
pattern
string
proxy
string
url
string

Responses

Request samples

Content type
application/json
{
  • "dmgs": true,
  • "flatten": true,
  • "insecure": true,
  • "ipsw": "string",
  • "output": "string",
  • "pattern": "string",
  • "proxy": "string",
  • "url": "string"
}

Response samples

Content type
application/json
null

USB

Info

Get info about USB connected devices.

Responses

Info

IPSW

Get IPSW info.

query Parameters
path
required
string

path to IPSW

Responses

Response samples

Content type
application/json
{
  • "code_signature": {
    },
  • "dylibs": [
    ],
  • "magic": "string",
  • "mappings": {
    },
  • "max_slide": 0,
  • "num_sub_caches": 0,
  • "platform": "string",
  • "sub_cache_group_id": 0,
  • "sym_sub_cache_uuid": "string",
  • "uuid": "string"
}

Remote IPSW

Get remote IPSW info.

query Parameters
url
required
string

url to IPSW

proxy
string

http proxy to use

insecure
boolean

ignore TLS errors

Responses

Response samples

Content type
application/json
{
  • "code_signature": {
    },
  • "dylibs": [
    ],
  • "magic": "string",
  • "mappings": {
    },
  • "max_slide": 0,
  • "num_sub_caches": 0,
  • "platform": "string",
  • "sub_cache_group_id": 0,
  • "sym_sub_cache_uuid": "string",
  • "uuid": "string"
}

OTA

Get OTA info.

query Parameters
path
required
string

path to OTA

Responses

Response samples

Content type
application/json
{
  • "code_signature": {
    },
  • "dylibs": [
    ],
  • "magic": "string",
  • "mappings": {
    },
  • "max_slide": 0,
  • "num_sub_caches": 0,
  • "platform": "string",
  • "sub_cache_group_id": 0,
  • "sym_sub_cache_uuid": "string",
  • "uuid": "string"
}

Remote OTA

Get remote OTA info.

query Parameters
url
required
string

url to OTA

proxy
string

http proxy to use

insecure
boolean

ignore TLS errors

Responses

Response samples

Content type
application/json
{
  • "code_signature": {
    },
  • "dylibs": [
    ],
  • "magic": "string",
  • "mappings": {
    },
  • "max_slide": 0,
  • "num_sub_caches": 0,
  • "platform": "string",
  • "sub_cache_group_id": 0,
  • "sym_sub_cache_uuid": "string",
  • "uuid": "string"
}

IPSW

Entitlements

Get IPSW Filesystem DMG MachO entitlements.

query Parameters
path
required
string

path to IPSW

Responses

Response samples

Content type
application/json
{
  • "property1": {
    },
  • "property2": {
    }
}

Files

Get IPSW Filesystem DMG file listing.

query Parameters
path
required
string

path to IPSW

Responses

launchd Config

Get launchd config from IPSW Filesystem DMG.

query Parameters
path
required
string

path to IPSW

Responses

Kernel

Kexts

Get kernelcache KEXTs info.

query Parameters
path
required
string

path to kernelcache

Responses

Syscalls

Get kernelcache syscalls info.

query Parameters
path
required
string

path to kernelcache

Responses

Version

Get kernelcache version.

query Parameters
path
required
string

path to kernelcache

Responses

Response samples

Content type
application/json
0
0

MachO

Info

Get MachO info.

query Parameters
path
required
string

path to MachO

arch
string

architecture to get info for in universal MachO

Responses

Response samples

Content type
application/json
{
  • "ModTime": "2019-08-24T14:15:22Z",
  • "Mode": "string",
  • "Name": "string",
  • "Size": 0
}

Mount

Mount

Mount a DMG inside a given IPSW.

path Parameters
type
required
string

type of DMG to mount (app|sys|fs)

query Parameters
path
required
string

path to IPSW

Responses

Unmount

Unmount a previously mounted DMG.

Request Body schema: application/json
required

The unmount context (returned from /mount)

dmg_path
string
mount_point
string

Responses

Request samples

Content type
application/json
{
  • "dmg_path": "string",
  • "mount_point": "string"
}

Response samples

Content type
application/json
null