
HyperDeceit
HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate operating system…

HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate operating system…

Dracos Linux ( www.dracos-linux.org ) is the Linux operating system from Indonesian

🪅 Windows & Linux userspace emulator

Tool for reverse engineering macOS/OS X

Incarcero is a tool that creates Virtual Machines (VMs) preconfigured with malware analysis tools and security settings tailored for malware analysis…

GNU IFUNC is the real culprit behind CVE-2024-3094

NeuroCore is a native macOS application that visualizes the internal structure of binary files using a Hilbert Curve mapping and Shannon Entropy…

CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)

Generate Objective-C headers from Mach-O files.

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

iOS and macOS Decompiler

a Ghidra framework for iOS kernelcache reverse engineering

ANE kernel r/w exploit for iOS 15 and macOS 12

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

Proof-of-concept for CVE-2026-65343, an out-of-bounds read in AppleKeyStore that leaks kernel pointers to defeat KASLR on iOS 26.6. Includes ACM…

FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2

An IDAPython module for enhancing c++ support on top of ida_kernelcache

IDA plugin that resolves PPL calls to the actual underlying PPL function.