jefferson
JFFS2 filesystem extraction tool
Installation
$ sudo python setup.py install
Dependencies
cstruct
pyliblzma
$ sudo pip install cstruct
$ sudo apt-get install python-lzma
Features
- Big/Little Endian support
JFFS2_COMPR_ZLIB
,JFFS2_COMPR_RTIME
, andJFFS2_COMPR_LZMA
compression support- CRC checks - for now only enforced on
hdr_crc
- Extraction of symlinks, directories, files, and device nodes
- Detection/handling of duplicate inode numbers. Occurs if multiple JFFS2 filesystems are found in one file and causes
jefferson
to treat segments as separate filesystems
Usage
$ jefferson filesystem.img -d outdir