Tools

checkra1n/pongoos

pongoOS

b16f00t/whapa

Graphical forensic toolkit for parsing, decrypting, and extracting WhatsApp data from Android and iOS devices, including Google Drive and iCloud…

nowsecure/fsmon

Filesystem monitor tool for Linux/Android iOS/macOS

jsherman212/xnuspy

an iOS kernel function hooking framework for checkra1n'able devices

owasp/igoat

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

pranshuchittora/simvyn

Universal mobile devtool for Agents & Humans - control iOS Simulators, Android Emulators, and real devices from a single dashboard and CLI

xorrior/macostools

macOS offensive security toolkit featuring dylib injection, HID keylogger, and in-memory JXA/Python payload runners for red team operations and…

nettitude/scrounger

Mobile application testing toolkit

jfarley248/meat

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

realitynet/ios_triage

Bash script to extract data from a "chekcra1ned" iOS device

lautarovculic/frida-ipa-extract

Robust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system.

mtjailed/unjailme

A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)

c0ntextomy/c0ntextomy

CVE-2020-9992 - A design flaw in MobileDevice.framework/Xcode and iOS/iPadOS/tvOS Development Tools allows an attacker in the same network to gain…

rani-i/bluetoothdpoc

CVE-2018-4087 PoC

moloch--/cve-2016-1764

Extraction of iMessage Data via XSS