Jefferson is now maintained and released from https://github.com/onekey-sec/jefferson/.
This repository should not be relied upon to install Jefferson. We recommend you either clone from https://github.com/onekey-sec/jefferson/ or install from pip using pip install --user jefferson
.
JFFS2 filesystem extraction tool
Follow these steps on Debian based systems (Debian, Ubuntu, Kali, ...) to perform a system-wide installation of jefferon:
git clone https://github.com/sviehb/jefferson.git
cd jefferson
sudo apt update
sudo apt install python3-pip liblzo2-dev
sudo python3 -m pip install -r requirements.txt
sudo python3 setup.py install
- big-endian and little-endian support with auto-detection
- zlib, rtime, LZMA, and LZO compression support
- CRC checks - for now only enforced on
hdr_crc
- extraction of symlinks, directories, files, and device nodes
- detection/handling of duplicate inode numbers. Occurs if multiple JFFS2 filesystems are found in one file and causes
jefferson
to treat segments as separate filesystems
$ jefferson filesystem.img -d outdir