# Install ipsw with Homebrew, MacPorts, Nix, winget Research tool for iOS & macOS devices. Version 3.1.702 via Homebrew; verified 2026-07-03. ## Install ```sh sudo av install brew:ipsw ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install ipsw ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install ipsw ``` Evidence: MacPorts ports tree: security/ipsw/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Nix (92%): ```sh nix profile install nixpkgs#ipsw ``` Evidence: nixpkgs package indexes: pkgs/by-name/ip/ipsw/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ### Windows - winget (92%): ```sh winget install --id blacktop.ipsw -e ``` Evidence: Windows Package Manager source index: blacktop.ipsw from https://cdn.winget.microsoft.com/cache/source.msix ## Package facts - **Package key:** brew:ipsw - **Package manager:** Homebrew - **Package manager page:** - **Version:** 3.1.702 - **Source summary:** Research tool for iOS & macOS devices - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Last updated:** 2026-07-03T20:57:35Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - ipsw (cli) - ipsw (alias) ## Build dependencies - go ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 3.1.702 - Package-manager updated: 2026-07-03 - Local data: ok - Upstream repository: https://github.com/blacktop/ipsw - Upstream latest detected: v3.1.702 (current) ## Project history and usage ipsw is blacktop's iOS and macOS firmware research CLI, a large Go-based toolkit for downloading, parsing, extracting, diffing, and analyzing Apple firmware, device artifacts, Mach-O binaries, dyld shared caches, and related security-research data. ### Project history The project presents itself as an iOS/macOS research Swiss Army knife for security researchers, reverse engineers, jailbreak developers, and Apple-platform enthusiasts. Its documentation centers on IPSW and OTA analysis, Mach-O parsing, dyld shared cache analysis, kernelcache work, device interaction, firmware components such as IMG4/iBoot/SEP, App Store Connect integration, and developer tooling. The repository history reflects a fast-moving research tool rather than a small Unix utility: the GitHub page records thousands of commits and hundreds of releases, while release notes in the 3.1.x series show continuing work on symbolication, dyld analysis, extract workflows, AppleDB handling, firmware keys, and dependency updates. ### Adoption history ipsw's adoption is strongest in Apple security and reverse-engineering circles where users need a single command that understands firmware downloads, restore images, kernelcaches, dyld shared caches, Image4 objects, entitlements, crash logs, and connected devices. Homebrew packages ipsw as an official formula with macOS and Linux bottles, and the input metadata also records MacPorts, Nix, and winget packaging. The upstream README also documents a blacktop tap, Snap installation for Linux, and Scoop installation for Windows. ### How it is used Common workflows include downloading firmware by device identifier, extracting kernelcache or DeviceTree artifacts, parsing dyld shared caches, class-dumping Objective-C and Swift metadata, symbolication, comparing IPSWs or OTAs, interacting with USB-connected iOS devices, and inspecting firmware components such as IMG4, iBoot, SEP, and co-processor images. The CLI also grew into a broader research framework: the docs list App Store Connect commands, SSH and Frida-related tooling, sandbox and entitlement tools, package and BOM inspection, a REST API daemon, and AI-assisted decompilation integrations. ### Why package nerds care ipsw matters to package nerds because it bundles a large amount of Apple-platform reverse-engineering knowledge into a distributable CLI. It turns fast-changing proprietary firmware formats into repeatable commands, and its packaging has to keep pace with Go modules, large release artifacts, platform bottles, and security-research workflows. ### Timeline - Repository era: blacktop/ipsw develops as a Go CLI and API daemon for Apple firmware and device research. - 3.x era: Documentation describes an expanded framework covering IPSW/OTA, Mach-O, dyld, kernel, device, firmware, App Store Connect, and AI-assisted analysis commands. - June 2026: Release notes in the 3.1.x line include symbolication, dyld, extract, AppleDB, and firmware-key updates. - 2026: Homebrew formula metadata packages ipsw 3.1.700 with macOS and Linux bottle support. ### Related projects - Apple IPSW and OTA firmware formats are the core data sources. - AppleDB, dyld shared caches, Mach-O tooling, Frida, App Store Connect APIs, and device-management libraries sit around its workflows. - Homebrew, the blacktop tap, Snap, Scoop, MacPorts, Nix, and winget are related distribution channels. ### Sources - Homebrew formula metadata supplies package-manager availability, formula description, and bottle/platform context. - The CLI documentation supplies command coverage and configuration details. - The GitHub repository and release pages supply implementation context, repository scale, release cadence, and recent changelog themes. - The official introduction supplies the project positioning, audience, capabilities, and use cases. ## Security Notes No matching local secret-handling manifest was found for ipsw. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** ipsw - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - ipsw: normalized package name match | nixpkgs package indexes: pkgs/by-name/ip/ipsw/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - MacPorts - ipsw: normalized package name match | MacPorts ports tree: security/ipsw/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - winget - blacktop.ipsw: normalized package name match | Windows Package Manager source index: blacktop.ipsw from https://cdn.winget.microsoft.com/cache/source.msix ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew. - [ghidra](https://www.automicvault.com/pkg/brew/ghidra/) - Shares av.db curated category or tags: cli, reverse-engineering, security. - [jadx](https://www.automicvault.com/pkg/brew/jadx/) - Shares av.db curated category or tags: cli, reverse-engineering, security. - [radare2](https://www.automicvault.com/pkg/brew/radare2/) - Shares av.db curated category or tags: cli, reverse-engineering, security. - [redress](https://www.automicvault.com/pkg/brew/redress/) - Shares av.db curated category or tags: cli, reverse-engineering, security. - [retdec](https://www.automicvault.com/pkg/brew/retdec/) - Shares av.db curated category or tags: cli, reverse-engineering, security. - [rizin](https://www.automicvault.com/pkg/brew/rizin/) - Shares av.db curated category or tags: cli, reverse-engineering, security. - [rp](https://www.automicvault.com/pkg/brew/rp/) - Shares av.db curated category or tags: cli, reverse-engineering, security. - [urh](https://www.automicvault.com/pkg/brew/urh/) - Shares av.db curated category or tags: cli, reverse-engineering, security. ## Combined YAML source View the package source record on GitHub. [combined/ipsw.yml](https://github.com/automic-vault/db/blob/main/combined/ipsw.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph