vphone-cli
lakr233/vphone-cliBoot and manage virtual iPhones on Apple Silicon with firmware patching, jailbreak variants, and security research features for iOS testing and…
exploitationfirmware-analysisios-security+3
14.8k
lakr233/vphone-cliBoot and manage virtual iPhones on Apple Silicon with firmware patching, jailbreak variants, and security research features for iOS testing and…
felix-pb/kfdkfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.
sterrasec/ipa-meditMemory modification tool for re-signed ipa supports iOS apps running on iPhone and Apple Silicon Mac without jailbreaking.
feliam/cve-2014-4377Exploit for Apple CoreGraphics heap overflow (CVE-2014-4377) enabling arbitrary code execution on iOS 7.1.x via crafted PDF used as HTML image.
gabrielg/cve-2014-1266-pocProof-of-concept exploit for Apple SSL/TLS verification vulnerability (CVE-2014-1266) in iOS and OS X, demonstrating HTTPS interception via a proxy…
owenpawl/cve-2026-84600Information on the security content of Apple software updates
feliam/cve-2014-4481Apple CoreGraphics framework fails to validate the input when parsing CCITT group 3 encoded data resulting in a heap overflow condition. A small heap…
0x36/weightbufsANE kernel r/w exploit for iOS 15 and macOS 12
0xjohnnydev/cve-2026-20687-applejpegdriver-uafCVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)
eddinos2/cve-2026-28956-jxl-messages-surfaceiOS Messages JPEG XL delivery-surface probe and patch-diff notes for CVE-2026-28956.
spotlightishere/inputcontrolproof-of-concept for CVE-2023-28197
chefkissinc/infernoApple Silicon device emulator.
majd/ipatoolCommand-line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app…
idescriptor/idescriptorprivacy-first, open-source and free idevice management tool written in Rust and Qt
jgoyd/ios-attack-chain-cve-2025-31200-cve-2025-31201CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS.…
lautarovculic/frida-ipa-extractRobust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system.