Tools

owasp/mastg

Comprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…

vaib25vicky/awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners.…

kelvinben/appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

lautarovculic/ioscpy

Now you can mirror and control your jailbroken iPhone over USB

palera1n/palera1n

Jailbreak for A8 through A11, T2 devices, on iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 and higher.

chefkissinc/inferno

Apple Silicon device emulator.

b1n4r1b01/desc_race

iOS 15.1 kernel exploit POC for CVE-2021-30955

seemoo-lab/toothpicker

Coverage-guided in-process fuzzer for iOS Bluetooth daemon (bluetoothd) using FRIDA, with over-the-air fuzzing for MagicPairing protocol and crash…

genericcoding/pois0nsword

A demonstration of read write using cve-2025-43529 and userland PAC bypass on iOS 26.1

rani-i/bluetoothdpoc

CVE-2018-4087 PoC

straight-tamago/nocamerasound

CVE-2022-46689

jgoyd/glass-cage-ios18-cve-2025-24085-cve-2025-24201

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, bypassing LockDown mode protection by exploiting ImageIO (CVE-2025-43300), then…

f4r3sx0/ios-bluetooth-ethernet-exploit

iOS Bluetooth PAN vulnerability that opens USB port 62078 and displays Ethernet icon without any adapter (€0). Apple sells a €89.95 adapter for the…

lumberjackstorys/cve

Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.

jclarkcom/ble_proxy

BLE-based HTTP proxy system routing browser traffic through an iOS device. Supports HTTP/HTTPS, data compression, and mock mode for testing without…

ox1111/jailbreak-ios12

OS 12.0 & 12.1.2 - Jailbreak with CVE-2019-6225