
igoat
OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar
authenticationcryptographydata-exfiltration+9

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

Technical writeup of CVE-2025-24104: an iOS sandbox escape via symlink validation bypass in backup restoration, enabling arbitrary file reads outside…

iOS Shortcut-based keylogger designed to capture keystrokes and exfiltrate data from compromised devices.

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, exploiting WebKit (CVE-2025-24201) and Core Media (CVE-2025-24085) to achieve sandbox…

Proof-of-concept Python script demonstrating iOS file exfiltration via malicious symlink in device backup restoration, targeting the…