#1Tools focused on testing, reversing, and securing iOS applications and the iOS operating system.
Kitploit recommended
alonemonkey/frida-ios-dumpExtracts decrypted IPA files from jailbroken iOS devices using Frida for reverse engineering, security analysis, and mobile app pentesting.
securing/iossecuritysuiteiOS platform security & anti-tampering Swift library
githubsecuritylab/seclab-taskflowsExample AI-agent taskflows and MCP servers for auditing source code, triaging issues, and detecting vulnerabilities across web, Android, and iOS…
hahwul/mobilehackersweaponsMobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting
0xcub3/wblockFree, open-source Safari ad blocker for macOS, iOS, iPadOS and visionOS. Up to 750,000 rules, custom filter lists, userscripts and userstyles. No…
jwalker/frida-ios-dump-modernAn updated Frida iOS dump tool supporting the latest Frida 17.5.2 APIs
chichou/grapefruitOpen-source mobile security testing suite for iOS and Android. Previously Passionfruit
kjcracks/clutchJailbreak-only iOS utility that decrypts installed app executables and dumps them as .ipa or raw binary files for security research and…
nabla-c0d3/ssl-kill-switch2Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
elevenpaths/iphonerestrictionspasscodebfExtracts and decrypts the 4-digit restriction passcode from iPhone backups on Windows machines, enabling recovery of device access controls.
idescriptor/idescriptorprivacy-first, open-source and free idevice management tool written in Rust and Qt
lucasjacks0n/eggshelliOS/macOS/Linux Remote Administration Tool
0xdea/frida-scriptsA collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.
s4dp4nd4/frida-c2-mcpAgentic C2-style MCP server for Frida instrumentation on rooted Android and jailbroken iOS.
zhkl0228/unidbgAllows you to emulate an Android native library, and an experimental iOS emulation
ejfkdev/daeConfig-driven Dart AOT snapshot analyzer that exports blutter-compatible symbols and structs for IDA, radare2 and Frida, and decompiles functions…
sensepost/objectionFrida-powered runtime mobile exploration toolkit for assessing iOS and Android app security. Bypass SSL pinning, dump keychains, manipulate heap…
jgoyd/ios18.6.2-persistent-automation-exploit-in-siri-shortcuts-and-apple-swcThis repo documents a vulnerability in Siri Shortcuts and Shared Web Credentials (SWC) allowing malformed payloads to persistently execute, trigger…
