JFFS2 filesystem extraction tool
$ sudo python setup.py install
cstruct
pylzma
$ sudo pip install cstruct
$ sudo pip install pylzma
- Big/Little Endian support
JFFS2_COMPR_ZLIB
,JFFS2_COMPR_RTIME
, andJFFS2_COMPR_LZMA
compression support- CRC checks - for now only enforced on
hdr_crc
- Extraction of symlinks, directories, files, and device nodes
- Detection/handling of duplicate inode numbers. Occurs if multiple JFFS2 filesystems are found in one file and causes
jefferson
to treat segments as separate filesystems
$ jefferson filesystem.img -d outdir