
Sandbox-Escape-iOS-18.0-26.0
This uses CVE-2025-43407 as exploit and still testing working not gauranteed.

This uses CVE-2025-43407 as exploit and still testing working not gauranteed.

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security…

This project shows the kind of data a rogue iPhone application can collect.

This is POC for IOS 0click CVE-2025-43300

itunesstored & bookassetd sbx escape

research on finding the bug and fix of CVE-2026-84616 and CVE-2026-84607

Comprehensive deobfuscated research of the Coruna iOS exploit kit targeting CVE-2024-23222. Analysis of WebKit Type Confusion, PAC Bypass, and…


Exploit chain utilizing directory traversal and iOS restore to overwrite protected files.

iOS Airborne vulnerabilities log artifact extractor from LogArchive CVE-2025-24252

A collection of resources for OSX/iOS reverse engineering.

A curated list of awesome iOS application security resources.

Arcane is a simple script designed to backdoor iOS packages (iphone-arm) and create the necessary resources for APT repositories.

iOS platform security & anti-tampering Swift library

Publishes per-build diffs of iOS, iPadOS, and macOS IPSW firmware releases, enabling binary-level comparison of system components across versions and…

A privacy-focused iOS app that raises awareness about what native apps can see

Curated collection of iOS kernel and userland exploit PoCs and writeups for in-the-wild and researched CVEs, including binary-diffed vulnerability…

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS