objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

packages_apps_KeyChain_AOSP10_r33_CVE-2021-0963

Este repositorio no tiene un README...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

CVE-2024-43468_mTLS_go

CVE-2024-43468 SCCM SQL Injection Exploit mTLS client certs from MacOS keychain version Go implementation of CVE-2024-43468 exploit that uses macOS Keychain for mTLS authentication without need to export keys from keychain. Additionally: Added proxy support to not use problematic proxychains. Add...

CVE-2025-24204

CVE-2025-24204 Acerca de CVE-2025-24204 es una vulnerabilidad que permite leer la memoria de cualquier proceso en sistemas macOS con SIP habilitado. La causa raíz de esta vulnerabilidad se debe a la adición de un entitlement excesivamente potente com.apple.system-task-ports.read al binario gcore...

OpenSC.tokend

OpenSC.tokend El controlador de tarjetas inteligentes de código abierto para OS X Un tokend hace que las claves y certificados de tu tarjeta inteligente aparezcan en Keychain Access.app y estén disponibles para aplicaciones como Safari o Chrome. OpenSC.tokend es la implementación de tokend de...

CVE-2023-42829

CVE-2023-42829; 'An app may be able to access SSH passphrases' This document presents both an analysis of a logic vulnerability identified in the ssh binary on macOS my first software vulnerability!, and a patch analysis demonstrating how Apple fixed the vulnerability. I reported the issue Apple...

CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

CVE-2026-84628

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to access the System Keychain...

CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

EUVD-2026-78103

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

CVE-2026-84628

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to access the System Keychain...

EUVD-2026-77975

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to access the System Keychain...

CVE-2026-84628

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to access the System Keychain...

CVE-2026-84628

An authorization issue exists in several Apple operating systems, including iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 . The root cause is related to improper state management , which could allow a sandboxed app to gain unauthorized access to the System Key...

PT-2026-91670

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 tvOS versions prior to 27 visionOS versions prior to 27 watchOS versions prior to 27 Description An authorization issue exists due to improper state...

CVE-2026-84628: Incorrect Authorization

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to access the System Keychain...