#1Tools focused on testing, reversing, and securing iOS applications and the iOS operating system.
Kitploit recommended
clogan9019-dotcom/iohidfamily-poc-researchCVE-2026-28992 IOHIDFamily FastPathUserClient race condition PoC — security research
hawkeye-bd/cve-2025-43537Cybersecurity Researcher | Apple Security Credit (CVE-2025-43537) | Vulnerability Research & Responsible Disclosure
enfilade-labs/cve-2026-20637-applesepkeystore-uafCVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4)
tdquang266/mdcI do some tweaking for iOS from 16.0 to 16.1.2 based on MacDirtyCow (CVE-2022-46689) exploit.
simoesctt/ctt-apple-silicon-refractionwebkit_refraction.js (The 33-Layer WebGL Payload) This JavaScript payload uses the \alpha constant to create a high-frequency "Memory Shiver." It…
nickorlow/cve-2021-30955-pocJake Jame's proof of concept wrapped into an iOS app for CVE-2021-30955
synchancybersecurity/crimson-cloak-ish-wrapper-ios-Wrapper to maximize ISH iOS app capabilities without jailbreak
spiralbl0ck/learning-history-of-cff-bug-in-iphoneDive into CFF font and coincidently learn about a bof in cff parsing from some jailbreak. just for fun
simoesctt/convergent-time-theory-enhanced-ios-safari-rce-cve-2025-43529-CTT-Enhanced iOS Safari Exploit (based on CVE-2025-43529)
3h6-1/cve-2021-30862Write-up and proof of concepts for CVE-2021-30862, 1-click RCE bug in iOS iTunes U
ivanhoe76zzzz/itmsblockBlock "itms scheme" / fix CVE-2021-1748
calysteon/cve-2025-43504Technical deep-dive into CVE-2025-43504, a remote pre-authentication global buffer overflow in LLDB's debugserver for iOS, with PoC code and…
harryanon/poc-cve-2018-4327-and-cve-2018-4330Proof-of-concept exploit for iOS Bluetooth stack vulnerabilities CVE-2018-4327 and CVE-2018-4330, enabling ARM PC register control on iPhone 6S via…
dmytrozykov/appsigniOS/macOS library that exploits CVE-2023-41991 for signing iOS applications.
l3onkers/fuxiosModernized Python 3 exploit PoC for CVE-2016-4631 targeting iOS devices. Features network scanning, malformed IP/TCP payload generation, and packet…
a0zhar/quarkpociOS Application w/Implementation of CVE-2024-27804
gpheheise/cve-2025-70600---urve-smart-office---stored-xss-in-ios-appProof-of-concept for a stored cross-site scripting (XSS) vulnerability in the URVE Smart Office iOS app, with CVE details, impact analysis, and…
kaleth4/cve-2026-28858Technical analysis of CVE-2026-28858, a critical buffer overflow in Apple iOS/iPadOS kernel, including exploit flow, mitigation, and defensive coding…
