
awesome-mobile-security
An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners.…

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners.…

Publishes per-build diffs of iOS, iPadOS, and macOS IPSW firmware releases, enabling binary-level comparison of system components across versions and…

itunesstored & bookassetd sbx escape

iOS platform security & anti-tampering Swift library

research on finding the bug and fix of CVE-2026-84616 and CVE-2026-84607

iOS 27 kernelcache RE: SEP dispatch map, AMFI diff, Ghidra workflow.Abandoned project

iOS Bluetooth PAN vulnerability that opens USB port 62078 and displays Ethernet icon without any adapter (€0). Apple sells a €89.95 adapter for the…

iOS Airborne vulnerabilities log artifact extractor from LogArchive CVE-2025-24252

CVE-2025-55177 + CVE-2025-43300: reverse-engineering the WhatsApp-ImageIO zero-click iOS chain, with interactive labs.

This uses CVE-2025-43407 as exploit and still testing working not gauranteed.

A privacy-focused iOS app that raises awareness about what native apps can see

Static analysis of the DarkSword iOS WebKit exploit chain — delivery, staging, and CVE breakdown (CVE-2025-31277, CVE-2025-43529)

A curated list of awesome iOS application security resources.

CVE-2026-28992 IOHIDFamily FastPathUserClient race condition PoC — security research

Arcane is a simple script designed to backdoor iOS packages (iphone-arm) and create the necessary resources for APT repositories.

Public disclosure of CVE-2025-31200 – Zero-click RCE in iOS 18.X via AudioConverterService and malicious audio file.

This project shows the kind of data a rogue iPhone application can collect.

Comprehensive deobfuscated research of the Coruna iOS exploit kit targeting CVE-2024-23222. Analysis of WebKit Type Confusion, PAC Bypass, and…