Versions in this module Expand all Collapse all v0 v0.1.0 Sep 7, 2023 Changes in this version + const MACH_TRAP_TABLE_COUNT + const RET_ADDR_T + const RET_INT_T + const RET_NONE + const RET_OFF_T + const RET_SIZE_T + const RET_SSIZE_T + const RET_UINT64_T + const RET_UINT_T + func Decompress(kcache, outputDir string) error + func DecompressData(cc *CompressedCache) ([]byte, error) + func DecompressKernelManagement(kcache, outputDir string) error + func DecompressKernelManagementData(kcache string) ([]byte, error) + func Extract(ipsw, destPath string) (map[string][]string, error) + func File2lines(filePath string) ([]string, error) + func GetKextStartVMAddrs(m *macho.File) ([]uint64, error) + func InsertStringToFile(path, str string, index int) error + func InspectKM(m *macho.File, filter string, explicitOnly, asJSON bool) (string, error) + func KextList(kernelPath string, diffable bool) ([]string, error) + func LinesFromReader(r io.Reader) ([]string, error) + func Parse(r io.ReadCloser) ([]byte, error) + func ParseMachO(name string) error + func ParseSyscallFiles(output string) error + func ParseSyscallHeader() (map[int]string, error) + func ParseSyscallsMaster() (map[int]sysMaster, error) + func RemoteParse(zr *zip.Reader, destPath string) (map[string][]string, error) + type BsdSyscall struct + Arguments []string + Name string + Number int + Old bool + type CFBundle struct + AllowUserLoad bool + AppleSecurityExtension bool + BuildMachineOSBuild string + BundlePath string + CompatibleVersion string + Copyright string + DevelopmentRegion string + Executable string + ExecutableLoadAddr uint64 + GetInfoString string + ID string + IOKitPersonalities map[string]interface{} + InfoDictionaryVersion string + MinimumOSVersion string + ModuleIndex uint64 + Name string + OSBundleLibraries map[string]string + OSBundleRequired string + OSKernelResource bool + PackageType string + PlatformBuild string + PlatformName string + PlatformVersion string + RelativePath string + SDK string + SDKBuild string + ShortVersionString string + Signature string + SupportedPlatforms []string + UIDeviceFamily []int + UIRequiredDeviceCapabilities []string + Version string + Xcode string + XcodeBuild string + func GetKexts(kernel *macho.File) ([]CFBundle, error) + type CompressedCache struct + Data []byte + Header interface{} + Magic []byte + Size int + func ParseImg4Data(data []byte) (*CompressedCache, error) + type Im4p struct + Data []byte + IM4P string + Name string + Version string + type KernelVersion struct + Arch string + CPU string + Darwin string + Date time.Time + Type string + XNU string + type KmodInfoT struct + Address uint64 + HeaderSize uint64 + ID uint32 + InfoVersion int32 + Name [64]byte + NextAddr uint64 + ReferenceCount int32 + ReferenceListAddr uint64 + Size uint64 + StartAddr uint64 + StopAddr uint64 + Version [64]byte + func GetKextInfos(m *macho.File) ([]KmodInfoT, error) + func (i KmodInfoT) String() string + type LLVMVersion struct + Clang string + Flags []string + Version string + type MachSyscall struct + Arguments []string + Name string + Number int + type MachTrap struct + Args []string + Name string + Number int + func GetMachTrapTable(m *macho.File) ([]MachTrap, error) + func (m MachTrap) String() string + type PrelinkInfo struct + PrelinkInfoDictionary []CFBundle + type SyscallData struct + Names map[int]string + Table map[int]sysMaster + type SyscallsData struct + BsdSyscalls []BsdSyscall + MachSyscalls []MachSyscall + func (s SyscallsData) GetBsdSyscallByNumber(num int) (BsdSyscall, error) + func (s SyscallsData) GetMachSyscallByNumber(num int) (MachSyscall, error) + type Sysent struct + Args []string + DBName string + Name string + New bool + Number int + Old bool + Proto string + func GetSyscallTable(m *macho.File) ([]Sysent, error) + func (s Sysent) String() string + type Version struct + func GetVersion(m *macho.File) (*Version, error) + func (v *Version) String() string