Jefferson

JFFS2 filesystem extraction tool.

Installation

You can install Jefferson from PyPi with the following command:

pip install --user jefferson

Usage

jefferson filesystem.img -d outdir

Features

• big-endian and little-endian support with auto-detection
• zlib, rtime, LZMA, and LZO compression support
• CRC checks - for now only enforced on hdr_crc
• extraction of symlinks, directories, files, and device nodes
• detection/handling of duplicate inode numbers. Occurs if multiple JFFS2 filesystems are found in one file and causes jefferson to treat segments as separate filesystems

Development

The package is maintained with Poetry. If you want to contribute, we recommend you follow these steps:

git clone https://github.com/onekey-sec/jefferson.git
cd jefferson
poetry install
poetry run jefferson

You can install Poetry by following this guide