#1Tools focused on testing, reversing, and securing iOS applications and the iOS operating system.
Kitploit recommended
ldebug/extra_recipeIan Beer's exploit for CVE-2017-2370 (kernel memory r/w on iOS 10.2)
owasp/igoatOWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar
geosn0w/pentagram-exploit-testerA test app to check if your device is vulnerable to CVE-2021-30955
fatgrass/osirisjailbreak12iOS 12.0 -> 12.1.2 Incomplete Osiris Jailbreak with CVE-2019-6225 by GeoSn0w (FCE365)
cryptiiiic/skybreak8.4.1 Jailbreak using CVE-2016-4655 / CVE-2016-4656
hackintoanetwork/arc-browser-address-bar-spoofing-pocProof-of-concept exploit for CVE-2024-25733 demonstrating address bar spoofing in ARC Browser on iOS/iPadOS using JavaScript-based navigation…
spotlightishere/inputcontrolproof-of-concept for CVE-2023-28197
simoesctt/ctt-apple-silicon-refractionwebkit_refraction.js (The 33-Layer WebGL Payload) This JavaScript payload uses the \alpha constant to create a high-frequency "Memory Shiver." It…
0xblackash/cve-2026-86950Defensive research documentation for CVE-2026-86950, an Apple CoreGraphics out-of-bounds write, covering vulnerability triage, affected versions,…
0x36/weightbufsANE kernel r/w exploit for iOS 15 and macOS 12
mtjailed/unjailmeA sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)
owasp/mas-websiteThe OWASP Mobile Application Security Project website is the central hub for industry-leading standards, guides, and resources—helping developers and…
ox1111/cve-2022-32932Technical analysis and proof-of-concept for CVE-2022-32932, a double fetch vulnerability in Apple's ANE kernel driver leading to out-of-bounds write…
iswaxan/jailedcementSimple iOS bootlooper using CVE-2022-46689. Desguised as onlyfans
nomnomheapnom/cve-2024-27815Proof-of-concept trigger for CVE-2024-27815, an XNU kernel heap buffer overflow in sbconcat_mbufs() reachable via AF_UNIX datagram sockets, causing…
0xmachos/apple-platform-security-guidesEvery Apple Platform Security Guide
straight-tamago/nocamerasoundCVE-2022-46689
mineek/filemanagerFile Manager for CVE-2022-46689
