Jefferson

JFFS2 filesystem extraction tool.

Installation

You can install Jefferson from PyPi with the following command:

pip install --user jefferson

Usage

jefferson filesystem.img -d outdir

Features

• big-endian and little-endian support with auto-detection
• zlib, rtime, LZMA, and LZO compression support
• CRC checks - for now only enforced on hdr_crc
• extraction of symlinks, directories, files, and device nodes
• detection/handling of duplicate inode numbers. Occurs if multiple JFFS2 filesystems are found in one file and causes jefferson to treat segments as separate filesystems

Development

The package is maintained with uv. If you want to contribute, we recommend you follow these steps:

git clone https://github.com/onekey-sec/jefferson.git
cd jefferson
uv sync
uv run jefferson
uv run pre-commit install

Nix users get the environment from nix develop or direnv.