winget install --id=syedinsaf.otaripper -e otaripper is a high-performance, multi-threaded partition extractor for Android OTA packages (payload.bin and full OTA .zip files). Built in Rust, it features SIMD-accelerated memory operations and robust fail-safe behavior.
Extract partitions from Android OTA files with cryptographic verification, strong reliability guarantees, and high-performance execution.
For in-depth architecture and performance details, see TECHNICAL.md
otaripper extracts partitions from Android OTA packages (payload.bin or full OTA .zip files).
The tool is written in Rust and prioritizes:
Unlike many extraction tools, otaripper verifies output images by default and refuses to leave behind partially valid or corrupted files.
⚠️ Incremental OTA packages are intentionally not supported.
| otaripper v3.0 | payload-dumper-go | payload_dumper (Python) | |
|---|---|---|---|
| Output verification | ✅ SHA-256 | ❌ | ❌ |
| Remote HTTP Streaming | ✅ (Extract URL) | ❌ | ❌ |
| SIMD optimization | ✅ AVX-512 / AVX2 / SSE2 | ❌ | ❌ |
| Cache-aware large writes | ✅ | ❌ | ❌ |
| Graceful interruption | ✅ | ❌ | ❌ |
| Auto-cleanup on failure | ✅ | ❌ | ❌ |
| Performance statistics | ✅ | ❌ | ❌ |
| Selective extraction | ✅ | ✅ | ✅ |
| Direct ZIP Memory Mapping | ✅ (Zero-Copy) | ❌ (Extracts temp) | ❌ |
| Multi-threaded | ✅ | ✅ | ❌ (single-threaded) |
| Cross-platform | ✅ | ✅ | ⚠️ Requires Python |
| Standalone binary | ✅ | ✅ | ❌ |
> otaripper is designed to fail early and cleanly rather than produce questionable output.
otaripper automatically detects CPU capabilities and selects the optimal execution path.
Version 3.0 introduces flawless Remote HTTP Streaming and massive I/O savings:
boot.img.STORED OTA zips, mapping the internal payload.bin straight from the disk using a zero-copy offset. Saves gigabytes of SSD writes per extraction.liblzma backend safely handles modern Android payloads utilizing the ARM64 BCJ filter (e.g., Xiaomi HyperOS).extractor and simd modules.AVX-512, AVX2, SSE2) through non-temporal cache-bypassing mechanisms.
Throughput Example (3GB system partition)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
otaripper (AVX-512) ████████████ 2.8 GB/s
otaripper (AVX2) ████████ 1.9 GB/s
payload-dumper-go ████ 1.0 GB/s
payload_dumper ██ 0.4 GB/s
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Performance scales with:
For architectural details, see TECHNICAL.md
Prebuilt binaries are available on the Releases page:
otaripper-x86_64-pc-windows-msvc.exeotaripper-x86_64-unknown-linux-gnuotaripper-x86_64-unknown-linux-muslotaripper-x86_64-apple-darwinotaripper-aarch64-apple-darwin> Note: Each release also includes otaripper-lite binaries. These are compiled without remote HTTP extraction features (--no-default-features), resulting in an ultra-minimal footprint for users who only extract local files.
otaripper releases follow a "Gold Standard" two-layer checksum architecture:
checksums.txt file containing hashes for all .tar.gz and .zip archives.otaripper-vX.Y.Z.sha256 file enclosed alongside the executables. Run sha256sum -c *.sha256 in your terminal to instantly verify the integrity of the extracted binaries.otaripper is available via the Windows Package Manager:
winget install syedinsaf.otaripper
To update to the latest version:
winget upgrade syedinsaf.otaripper
otaripper is available on the AUR:
paru -S otaripper # build from source (recommended)
paru -S otaripper-bin # prebuilt glibc binary
yay -S otaripper
yay -S otaripper-bin
If otaripper-bin fails to run due to libc/runtime issues, use the
fully static musl build from GitHub Releases:
https://github.com/syedinsaf/otaripper/releases
Extract everything:
otaripper ota.zip
List partitions:
otaripper -l ota.zip
Extract selected partitions:
otaripper ota.zip -p boot,vendor_boot,init_boot
🌐 Remote HTTP Streaming (Zero-Download Extraction):
Extract specific partitions directly from a web URL without downloading the full OTA package!
otaripper https://android.googleapis.com/packages/ota-api/package.zip -p boot,init_boot
Print hashes:
otaripper ota.zip --print-hash
Strict verification:
otaripper ota.zip --strict
Disable automatic folder opening:
otaripper ota.zip -n
Analyze Qualcomm bootloader Anti-Rollback (ARB) metadata (accepts .img, .bin, or .zip):
otaripper arb update.zip
🌐 Remote ARB Inspection (Zero-Download):
Instantly check the ARB index of a firmware update without downloading the massive 3GB+ zip file! otaripper will intelligently stream and extract just the tiny xbl_config.img directly from the URL over the internet.
$ otaripper arb https://example.com/firmware.zip -n
[arbscan] OTA package detected. Extracting xbl_config.img temporarily...
[arbscan] Analyzing: xbl_config.img
OEM Metadata
────────────
Major Version : 3
Minor Version : 0
ARB Index : 0
Remove previously extracted folders:
otaripper clean
Clean a specific directory:
otaripper clean -o /path/to/output
The cleanup command only removes directories matching extracted_*
and refuses to operate on filesystem roots for safety.
| Option | Description |
|---|---|
-l, --list | List partitions only |
-p, --partitions | Extract specific partitions |
-o, --output-dir | Custom output directory |
--strict | Enforce manifest hashes |
--no-verify | Disable verification (unsafe) |
--print-hash | Print SHA-256 hashes |
--sanity | Detect obviously invalid output |
--stats | Show performance statistics |
-t, --threads | Thread control (1–256, 0 = auto) |
-n, --no-open | Disable folder auto-open |
clean | Remove extracted_* folders safely |
arbscan, arb | Extract ARB metadata from bootloader images or payloads |
We provide two built-in Cargo aliases for easy compilation:
git clone https://github.com/syedinsaf/otaripper.git
cd otaripper
# Build the standard CLI (with Remote HTTP Streaming support)
cargo full
# Build the 'lite' CLI (Network-free, local extraction only)
cargo lite
Binary output:
target/release/otarippertarget/lite/release/otaripper> Note: The cargo lite alias automatically isolates its output into a separate target/lite/ directory. This ensures you can compile and test both versions side-by-side locally without them overwriting each other!
otaripper can be built locally with CPU-specific optimizations for maximum performance. This enables all instruction sets supported by your CPU (AVX2 / AVX-512 / ARMv8, etc.).
⚠️ Important: Binaries built this way are NOT portable and must NOT be redistributed.
A helper script is provided to:
curlunzipchmod +x build.sh
./build.sh
Output binary:
After running build.sh, a new folder named otaripper-native
will be created in the same directory where build.sh is located.
~/otaripper-native/otaripper
On Windows, a native PowerShell script is provided. It uses the official Windows rustup installer and defaults to the MSVC toolchain.
Before running the script, allow execution for the current session only:
Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass
Then run:
.\build.ps1
Output binary:
After running build.ps1, a new folder named otaripper-native
will be created in the same directory where build.ps1 is located.
otaripper-native\otaripper.exe
-C target-cpu=nativeTesting, bug reports, and performance feedback are welcome.
Please include:
Pull requests should:
otaripper benefits greatly from real-world testing and feedback.
Special thanks to Jean Rivera for extensive validation, edge-case testing, and correctness feedback.
Thanks also to:
If otaripper helped you:
otaripper is licensed under the Apache License 2.0. See LICENSE for details.
Use at your own risk.
The author and contributors are not responsible for data loss, bricked devices, or damage resulting from misuse.