
iDescriptor
privacy-first, open-source and free idevice management tool written in Rust and Qt

privacy-first, open-source and free idevice management tool written in Rust and Qt

Command-line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS…

iOS/macOS/Linux Remote Administration Tool

iOS gamed exploit (fixed in 15.0.2)

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

Now you can mirror and control your jailbroken iPhone over USB

iOS 15 0-day exploit (still works in 15.0.2)

CVE-2018-4185: iOS 11.2-11.2.6 kernel pointer disclosure introduced by Apple's Meltdown mitigation.

Robust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system.

CVE-2020-9992 - A design flaw in MobileDevice.framework/Xcode and iOS/iPadOS/tvOS Development Tools allows an attacker in the same network to gain…

Extraction of iMessage Data via XSS

Technical writeup of CVE-2025-24104: an iOS sandbox escape via symlink validation bypass in backup restoration, enabling arbitrary file reads outside…

CVE-2022-46718: an app may be able to read sensitive location information.

Exploit analysis for CVE-2014-4378: information disclosure in Apple CoreGraphics via crafted PDF, enabling memory layout leak and bypass of ASLR,…

Static analysis tool for iOS applications that extracts links, API keys, subdomains, binary info, linked libraries, and strings to aid mobile…

on Mac 10.12.2

Kernel info leak Proof of Concept patched in iOS 26.4 / macOS 26.4

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, exploiting WebKit (CVE-2025-24201) and Core Media (CVE-2025-24085) to achieve sandbox…