Automic VaultAutomic Vault

brew

Install ipsw with Homebrew, MacPorts, Nix, winget

Research tool for iOS & macOS devices. Version 3.1.702 via Homebrew; verified 2026-07-03.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install ipsw

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install ipsw

MacPorts ports tree · security/ipsw/Portfile · source: api.github.com

Linux

Nixverified · 92%
nix profile install nixpkgs#ipsw

nixpkgs package indexes · pkgs/by-name/ip/ipsw/package.nix · source: api.github.com

Windows

Windows Package Managerverified · 92%
winget install --id blacktop.ipsw -e

Windows Package Manager source index · blacktop.ipsw · source: cdn.winget.microsoft.com

overview

Package summary

Research tool for iOS & macOS devices

Commands and aliases

  • ipsw

history

Project history and usage

ipsw is blacktop's iOS and macOS firmware research CLI, a large Go-based toolkit for downloading, parsing, extracting, diffing, and analyzing Apple firmware, device artifacts, Mach-O binaries, dyld shared caches, and related security-research data.

Project history

The project presents itself as an iOS/macOS research Swiss Army knife for security researchers, reverse engineers, jailbreak developers, and Apple-platform enthusiasts. Its documentation centers on IPSW and OTA analysis, Mach-O parsing, dyld shared cache analysis, kernelcache work, device interaction, firmware components such as IMG4/iBoot/SEP, App Store Connect integration, and developer tooling.

The repository history reflects a fast-moving research tool rather than a small Unix utility: the GitHub page records thousands of commits and hundreds of releases, while release notes in the 3.1.x series show continuing work on symbolication, dyld analysis, extract workflows, AppleDB handling, firmware keys, and dependency updates.

Adoption history

ipsw's adoption is strongest in Apple security and reverse-engineering circles where users need a single command that understands firmware downloads, restore images, kernelcaches, dyld shared caches, Image4 objects, entitlements, crash logs, and connected devices.

Homebrew packages ipsw as an official formula with macOS and Linux bottles, and the input metadata also records MacPorts, Nix, and winget packaging. The upstream README also documents a blacktop tap, Snap installation for Linux, and Scoop installation for Windows.

How it is used

Common workflows include downloading firmware by device identifier, extracting kernelcache or DeviceTree artifacts, parsing dyld shared caches, class-dumping Objective-C and Swift metadata, symbolication, comparing IPSWs or OTAs, interacting with USB-connected iOS devices, and inspecting firmware components such as IMG4, iBoot, SEP, and co-processor images.

The CLI also grew into a broader research framework: the docs list App Store Connect commands, SSH and Frida-related tooling, sandbox and entitlement tools, package and BOM inspection, a REST API daemon, and AI-assisted decompilation integrations.

Why package nerds care

ipsw matters to package nerds because it bundles a large amount of Apple-platform reverse-engineering knowledge into a distributable CLI. It turns fast-changing proprietary firmware formats into repeatable commands, and its packaging has to keep pace with Go modules, large release artifacts, platform bottles, and security-research workflows.

Timeline

  • Repository era: blacktop/ipsw develops as a Go CLI and API daemon for Apple firmware and device research.
  • 3.x era: Documentation describes an expanded framework covering IPSW/OTA, Mach-O, dyld, kernel, device, firmware, App Store Connect, and AI-assisted analysis commands.
  • June 2026: Release notes in the 3.1.x line include symbolication, dyld, extract, AppleDB, and firmware-key updates.
  • 2026: Homebrew formula metadata packages ipsw 3.1.700 with macOS and Linux bottle support.

Related projects

  • Apple IPSW and OTA firmware formats are the core data sources.
  • AppleDB, dyld shared caches, Mach-O tooling, Frida, App Store Connect APIs, and device-management libraries sit around its workflows.
  • Homebrew, the blacktop tap, Snap, Scoop, MacPorts, Nix, and winget are related distribution channels.

Sources

  • Homebrew formula metadata supplies package-manager availability, formula description, and bottle/platform context.
  • The CLI documentation supplies command coverage and configuration details.
  • The GitHub repository and release pages supply implementation context, repository scale, release cadence, and recent changelog themes.
  • The official introduction supplies the project positioning, audience, capabilities, and use cases.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for ipsw. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
ipswcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version3.1.702
manager updated2026-07-03
local dataok
upstreamcurrent
latest detectedv3.1.702

https://github.com/blacktop/ipsw

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:ipsw
Version3.1.702
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/ipsw
Homepagehttps://blacktop.github.io/ipsw
Repositoryhttps://github.com/blacktop/ipsw
Upstream docshttps://blacktop.github.io/ipsw/docs/cli/ipsw
LicenseMIT
Source archivehttps://github.com/blacktop/ipsw/archive/refs/tags/v3.1.702.tar.gz
Last updated2026-07-03T20:57:35Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameipsw
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

ipsw

nix profile install nixpkgs#ipsw
  • normalized package name match
  • Matched by: Ipsw
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ip/ipsw/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
MacPorts95%

ipsw

sudo port install ipsw
  • normalized package name match
  • Matched by: Ipsw
MacPorts ports tree · api.github.com · MacPorts ports tree: security/ipsw/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
winget95%

blacktop.ipsw

winget install --id blacktop.ipsw -e
  • normalized package name match
  • Matched by: Ipsw
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: blacktop.ipsw from https://cdn.winget.microsoft.com/cache/source.msix

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment