iDevice_ZH

iDevice ? Based on the powerful vulnerability CVE-2025-24203 discovered by Ian Beer of Google Project Zero, perform system-level adjustments without jailbreaking ✅ iOS 16.0 – iOS 18.3.2 uses CVE-2025-24203 ✅ iOS 16.0 - 18.5 supports File Manager and IPA Tweak Injector...

apk-medit

apk-medit Apk-medit is a memory search and patch tool for debuggable apk without root & ndk. It was created for mobile game security testing. Many mobile games have rooting detection, but apk-medit does not require root privileges, so memory modification can be done without bypassing the rooting...

frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

Malimite

Description Malimite is an iOS and macOS decompiler designed to help researchers analyze and decode IPA files and Application Bundles. Built on top of Ghidra decompilation to offer direct support for Swift, Objective-C, and Apple resources. Features Multi-Platform Mac, Windows, Linux Direct suppo...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

frida-ipa-extract

frida-ipa-extract This project was inspired by frida-ios-dump. Since I recently encountered problems with that tool, I decided to create frida-ipa-extract with greater robustness and additions to address problems we face today. Extract a decrypted .ipa from a jailbroken iOS device using Frida...

ipatool

ipatool は、App Store で iOS、iPadOS、tvOS、visionOS、macOS アプリを検索し、.ipa または macOS の .pkg アプリパッケージをダウンロードできるコマンドラインツールです。 要件 サポートされているオペレーティングシステム（macOS、Linux、Windows、または iOS）。 App Store を使用するように既に設定済みの Apple Account。 インストール Linux および Windows 最新バージョンの ipatool は GitHub releases から入手できます。 macOS Homebrew...

frida-ios-dump

frida-ios-dump Pull a decrypted IPA from a jailbroken device Usage 1. Install frida on device 2. sudo pip install -r requirements.txt --upgrade 3. Run usbmuxd/iproxy SSH forwarding over USB Default 2222 - 22. e.g. iproxy 2222 22 4. Run ./dump.py Display name or Bundle identifier For SSH/SCP make...

ipa-scope

IPA-SCOPE v.2 IPA-SCOPE is a Static analysis Tool that Targets ios applications and brings important information such as Links, interesting files .json,cer,der,api and is very useful to show good results when you pentesting ios apps What new in this tool ✅Fast & easy to use ✅Get binary info like...

ipa-medit

ipa-medit Ipa-medit is a memory search and patch tool for resigned ipa without jailbreaking. It supports iOS apps running on iPhone and Apple Silicon Mac. It was created for mobile game security testing. Many mobile games have jailbreak detection, but ipa-medit does not require jailbreaking, so...

frida-ios-dump-modern

Modern iOS IPA Dumper A modern iOS application memory decryption tool built for Frida 17.5.2+ with full support for iOS 14-16 and multiple jailbreaks. Status: ✅ Working and Tested - Successfully dumps and decrypts iOS apps using Frida 17.5.2 on: iOS 14.7.1 + Taurine jailbreak iPad mini 5 iOS...

ipaforge

IPAForge IPAForge is a dependency-free Python command-line tool for unpacking, inspecting, editing, and rebuilding iOS .ipa archives. It extracts the complete archive, converts editable Apple plist and localization formats into readable XML, preserves opaque and binary content byte-for-byte, and...

CVE-2021-30955-POC-IPA

このリポジトリには README がありません。...

Rocky Linux 9.2 [CIQ] Security Update: ipa-client / ipa-client-common / ipa-client-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0432)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260432 advisory. This advisory aggregates security fixes for the ipa SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2024-2698, CVE-2024-3183. Tenable has extracted the...

Rocky Linux 8 [CIQ] Security Update: custodia / ipa-healthcheck / ipa-healthcheck-core / opendnssec / etc Multiple Vulnerabilities (crlsa-2024_0143)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20240143 advisory. Kerberos: delegation constrain bypass in S4U2Proxy CVE-2020-17049 ipa: Invalid CSRF protection CVE-2023-5455 Tenable has extracted the preceding descriptio...

Rocky Linux 9.2 [CIQ] Security Update: ipa-client / ipa-client-common / ipa-client-epn / ipa-client-samba / etc (ciqsa-2026_1568)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261568 advisory. This advisory aggregates security fixes for the ipa SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2025-7493. Tenable has extracted the preceding description block...

Rocky Linux 8 [CIQ] Security Update: custodia / python3-custodia / python3-jwcrypto / python3-kdcproxy / etc Multiple Vulnerabilities (crlsa-2020_4670)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204670 advisory. js-jquery: Cross-site scripting via cross-domain ajax requests CVE-2015-9251 bootstrap: XSS in the data-target attribute CVE-2016-10735 bootstrap: Cross-si...

AlmaLinux 9.2 [TuxCare] Security Update: ipa-client / ipa-client-common / ipa-client-epn / ipa-client-samba / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778881463)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778881463 advisory. - A Cross-site request forgery vulnerability exists in ipa/session/loginpassword in all supported versions of IPA. This flaw allows ...

IPA

Interactive PDF Analysis Interactive PDF Analysis also called IPA allows any researcher to explore the inner details of any PDF file. PDF files may be used to carry malicious payloads that exploit vulnerabilities, and issues of PDF viewer, or may be used in phishing campaigns as social engineerin...

Oracle Linux 10 : ipa (ELSA-2026-72279)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72279 advisory. - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval reachable before authorization check allows environment disclosure and denial of...