frida-ipa-extract

frida-ipa-extract This project was inspired by frida-ios-dump. Since I recently encountered problems with that tool, I decided to create frida-ipa-extract with greater robustness and additions to address problems we face today. Extract a decrypted .ipa from a jailbroken iOS device using Frida...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

apk-medit

apk-medit Apk-medit is a memory search and patch tool for debuggable apk without root & ndk. It was created for mobile game security testing. Many mobile games have rooting detection, but apk-medit does not require root privileges, so memory modification can be done without bypassing the rooting...

ipatool

ipatool es una herramienta de línea de comandos que te permite buscar aplicaciones de iOS, iPadOS, tvOS, visionOS y macOS en la App Store, y descargar paquetes de aplicaciones .ipa o .pkg de macOS. Requisitos Un sistema operativo compatible macOS, Linux, Windows o iOS. Una cuenta de Apple ya...

apk-medit

apk-medit Apk-medit 是一款无需 root 和 ndk 即可对可调试 apk 进行内存搜索和修改的工具。 它专为移动游戏安全测试而创建。 许多移动游戏具有 root 检测，但 apk-medit 不需要 root 权限，因此无需绕过 root 检测即可进行内存修改。 动机 内存修改是游戏作弊最简单的方式，也是安全测试中需要检查的项目之一。 还有一些可以随意使用的作弊工具，比如 GameGuardian。 然而，当时没有适用于非 root 设备和 CUI 的工具。因此我将其作为安全测试工具制作了出来。 针对 iOS 应用的版本是 sterrasec/ipa-medit。 ...

Malimite

Descripción Malimite es un descompilador de iOS y macOS diseñado para ayudar a los investigadores a analizar y decodificar archivos IPA y paquetes de aplicaciones Application Bundles. Construido sobre la descompilación de Ghidra para ofrecer soporte directo para Swift, Objective-C y recursos de...

ipa-scope

IPA-SCOPE v.2 IPA-SCOPE 是一个针对 iOS 应用的静态分析工具，能够提取重要信息，如链接、有趣的文件（.json, .cer, .der, .api 等），在渗透测试 iOS 应用时非常有用，能展示良好的结果。 此工具的新功能 ✅快速且易于使用 ✅获取二进制信息（如 API 密钥、子域名等） ✅保存并显示过滤结果 ✅获取目标应用中的链接库 ✅获取应用中的所有字符串和类 要求： Linux 或 Mac OS 安装： git clone https://github.com/xcodeOn1/ipa-scope.git sudo pip3 install -r...

frida-ios-dump

frida-ios-dump Obtén un IPA descifrado de un dispositivo con jailbreak Uso 1. Instala frida en el dispositivo 2. sudo pip install -r requirements.txt --upgrade 3. Ejecuta el reenvío SSH de usbmuxd/iproxy por USB por defecto 2222 - 22. p. ej. iproxy 2222 22 4. Ejecuta ./dump.py Display name o Bund...

frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

iDevice_ZH

iDevice ？ 基于Google Project Zero的Ian Beer发现的强大漏洞CVE-2025-24203无需越狱 进行系统级调整 ✅ iOS 16.0 – iOS 18.3.2 使用CVE-2025-24203 ✅ iOS 16.0 - 18.5 支持文件管理器和IPA调整注入器...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

Critical: Red Hat Security Advisory: ipa security, bug fix, and enhancement update

An update for ipa is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

EUVD-2026-87978

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

frida-ios-dump-modern

Dumper moderno de IPA para iOS Una herramienta moderna de descifrado de memoria de aplicaciones iOS, creada para Frida 17.5.2+ con soporte completo para iOS 14-16 y múltiples jailbreaks. Estado: ✅ Funcionando y probado - Volca y descifra aplicaciones iOS con Frida 17.5.2 en: iOS 14.7.1 + jailbrea...

ipaforge

IPAForge IPAForge es una herramienta de línea de comandos de Python sin dependencias para desempaquetar, inspeccionar, editar y reconstruir archivos .ipa de iOS. Extrae el archivo completo, convierte los formatos editables de plist y localización de Apple en XML legible, preserva el contenido opa...

CVE-2021-30955-POC-IPA

Este repositorio no tiene un README...

ipa security, bug fix, and enhancement update

An update is available for ipa. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rocky Enterprise Software Foundation Identity Management IdM is a centralized...

ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

Critical: Red Hat Security Advisory: ipa security, bug fix, and enhancement update

An update for ipa is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...