The Kernel Framework provides the APIs and support for kernel-resident device drivers and other kernel extensions. It defines the base class for I/O Kit device drivers (IOService), several helper classes, and the families that support many types of devices.

XNU is a hybrid kernel combining the Mach kernel developed at Carnegie Mellon University with components from FreeBSD and a C++ API for writing drivers called IOKit. XNU runs on x86_64 and ARM64 for both single processor and multi-processor configurations.

2014年11月8日 · The kernel of iOS is the XNU kernel. To learn about what "kernel" means in general, see the Wikipedia article. Pre-2.0, it was vulnerable to the Ramdisk Hack and may still be, but iBoot doesn't allow boot-args to be passed anymore. It is mapped to memory at 0x80000000, forcing a 2/2GB address separation, similar to Windows 32-bit model.

XNU ("X is Not Unix") is the computer operating system (OS) kernel developed at Apple Inc. since December 1996 for use in the Mac OS X (now macOS) operating system and released as free and open-source software as part of the Darwin OS, which, in addition to being the basis for macOS, is also the basis for Apple TV Software, iOS, iPadOS, watchOS ...

XNU代表的含义是“XNU is Not Unix”（XNU不是Unix），这是一个类似Unix的内核，用在各类苹果 Darwin 操作系统中，包括电脑系统 macOS （以及早先的版本OS X），还有移动操作系统 iOS 。

XNU is a hybrid kernel combining the Mach kernel developed at Carnegie Mellon University with components from FreeBSD and a C++ API for writing drivers called IOKit. XNU runs on x86_64 for both single processor and multi-processor configurations.

Mach-O的全称为Mach Object，是OS X与iOS上的一种可执行文件格式。 Mach本身指一种操作系统的微内核标准，被用于OS X与iOS系统的内核中。 相信对于移动端的iOS开发者来说，对Mach-O文件一定不陌生，我们编译打包的iOS IPA文件，内部其实就有一个可执行的Mach-O

2024年8月24日 · 探索iOS内核的奥秘：利用iOS Kernel Utilities开源项目. 项目地址:https://gitcode.com/gh_mirrors/io/ios-kern-utils. 项目介绍. 在iOS开发的世界中，有一片神秘而深邃的领域——内核空间。对于勇于探索和深入系统底层的技术爱好者来说，iOS Kernel Utilities正是通向这一未知世界的 ...

2017年3月31日 · 直到iOS10，内核kernelcache都是加密的，要分析它，就要先进行解密。 有以下三种方法。 1. 从OTA更新固件解压，OTA固件（e65K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6A6M7s2y4%4i4K6u0W2L8h3g2Q4x3V1k6G2N6r3q4K6）里的kernecache是不加密的。 下载解压便能拖到ida里进行分析。 2. 解密再解压。 由于img3的解密网上已有很多例子，这里以iPhone5s设备iOS9的固件为例子。 先 …

6 天之前 · 关于 iOS 18.4 和 iPadOS 18.4 的安全性内容 ... Kernel. 适用于：iPhone XS 及更新机型、13 英寸 iPad Pro、12.9 英寸 iPad Pro（第 3 代）及更新机型、11 英寸 iPad Pro（第 1 代）及更新机型、iPad Air（第 3 代）及更新机型、iPad（第 7 代）及更新机型，以及 iPad mini（第 5 …