Tools

tegal1337/cilocks

Crack Interface lockscreen, Metasploit and More Android/IOS Hacking

majd/ipatool

Command-line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app…

frida/frida

Main repo for hosting release binaries

lucasjacks0n/eggshell

iOS/macOS/Linux Remote Administration Tool

stuxctf/mhf

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

speedyfriend433/cve-2026-28867-poc

Kernel info leak Proof of Concept patched in iOS 26.4 / macOS 26.4

idescriptor/idescriptor

privacy-first, open-source and free idevice management tool written in Rust and Qt

xcodeon1/ipa-scope

Static analysis tool for iOS applications that extracts links, API keys, subdomains, binary info, linked libraries, and strings to aid mobile…

b16f00t/whapa

Graphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…

mysk-research/loupe

A privacy-focused iOS app that raises awareness about what native apps can see

owasp/mastg

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

lautarovculic/frida-ipa-extract

Robust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system.

kolbicz/appenumguard

CVE-2025-31207 mitigation and sandboxed tester for rootless and rootHide jailbreaks on iOS 15–18.4.1

axi0mx/ipwndfu

open-source jailbreaking tool for many iOS devices

lautarovculic/ioscpy

Now you can mirror and control your jailbroken iPhone over USB

pranshuchittora/simvyn

Universal mobile devtool for Agents & Humans - control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI

nst/spyphone

This project shows the kind of data a rogue iPhone application can collect.

kelvinben/appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。