Information Disclosure

The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to a kernel address leakage. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

CVE-2023-20198-IOS-XE-Scanner

CVE-2023-20198-IOS-XE-Scanner Single threaded scanner for a single IP in PowerShell Very quick and dirty PoC to show the concept. Tested in lab. Use at own risk! Other scanners python https://github.com/fox-it/cisco-ios-xe-implant-detection https://github.com/Shadow0ps/CVE-2023-20198-Scanner...

loupe

Loupe Loupe is an iOS and iPadOS app that gives you a hands-on tour of the device fingerprinting surface. It reads real values from public iOS APIs, the same ones any third-party app can call, and shows them to you raw. The point is simple: see what your iPhone quietly exposes, and why each readi...

CVE-2026-20700

dyld-signing-oracle-poc A controlled exploration of dyld's page-in linking and chained fixup machinery as a PAC signing oracle, in the context of CVE-2026-20700. On arm64e, every function pointer is hardware-authenticated. The goal here is to show that dyld itself can be directed — through a...

CVE-2018-4407

CVE-2018-4407 Massive IOS/MAC Attack Exploit CVE-2018-4407 is a Simple and Very Fast BOF attack Against IOS/MAC that can lead to DOS. The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones,...

CVE-2026-28995

CVE-2026-28995 Proof of Concept for CVE-2026-28995 — Path Traversal vulnerability in App Intents on iOS 26.4.2 and below. Description This vulnerability allows a malicious app to read any file outside its sandbox via App Intents. The root cause is insufficient path validation in Apple's App Inten...

Cisco-IOS-XE-CVE-2023-20198

Cisco-IOS-XE-CVE-2023-20198 Exploit PoC for CVE-2023-20198 Vulnerability information and exploit usage offered by smokeintheshell See references Endpoint, http content type and headers management have been modified from other existing POCs to work in situations in which other exploits fail...

frida-scripts

frida-scripts A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps and more. !NOTE My iOS and Android scripts might require some tweakings. For a well-maintained project that includes some of my Frida scripts, refer to Brida. Article...

SSLPatch

SSL Patch CVE-2014-1266 Copyright c 2014 Linus Yang Introduction CVE-2014-1266 , or known as "goto fail SSL verification exploit", is a very serious SSL/TLS vulnerability of iOS and OS X. Apple issues iOS 6.1.6 and 7.0.6 to fix this problem, but ignores some users who can't or just don't want to...

iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC

Improper Input Validation in Siri Shortcuts and Shared Web Credentials Discovered by: Joseph Goydish II Date Discovered: August 20, 2025 Severity: High Executive Summary This report outlines a high-severity vulnerability chain affecting Apple’s Siri Shortcuts and Shared Web Credentials SWC...

iOS-Bluetooth-Ethernet-Exploit

Zero-Cost Ethernet Gateway Exploit on iOS Bluetooth PAN → USB Port 62078 Author: Fares Dahoumane Twitter/X: https://x.com/faresdahoumane Date: June 2026 Status: Public Disclosure Results Only – Full technical details submitted to BlackHat Arsenal for review. ⚠️ Disclaimer This repository is for...

Signal-Desktop

Signal Desktop Signal Desktop links with Signal on Android or iOS and lets you message from your Windows, macOS, and Linux computers. Install the production version or help us out by installing the beta version. Got a question? You can find answers to a number of frequently asked questions on our...

POC-CVE-2024-44258-Py

Conceptual PoC CVE-2024-44258: Symlink Vulnerability in iOS Requirement: Python 3.7+ • License: MIT ⚠️ Warning: This repository contains a proof-of-concept PoC developed for exclusively educational and research purposes. It is not a fully functional exploit. Its use on devices without proper...

airborn-IOS-CVE-2025-24252

iOS "Airborne" Vulnerabilities - Log Artifact Extractor This script is designed to help identify potential traces of the "Airborne" set of vulnerabilities primarily affecting Apple's AirPlay protocol by querying iOS system logs from a .logarchive bundle. It automates the execution of several log...

yj_nearbyglasses

yjnearbyglasses attempting to detect smart glasses nearby and warn you. ⚠ WARNING! ⚠ nearby-glasses-alert.pages.dev is NOT RELATED TO MY PROJECT. Many apps in Play Store and App Store look or are even called very similar to Nearby Glasses. They seem to hijack the name and try to make a quick prof...

CVE_2023_20198_Detector

CVE202320198Detector This script can identify if Cisco IOS XE devices are vulnerable to CVE-2023-20198. The script takes as input a csv file with all the device IP addresses that you want to check. By default the script looks for a file named "devices.csv"; you can name the file something differe...

CVE-2026-28858

⚠️ CVE-2026-28858 — Buffer Overflow in Apple iOS/iPadOS ╔══════════════════════════════════════════════════════════════╗ ║ SEVERITY: CRITICAL │ CVSS: 9.8 │ CWE-120 │ REMOTE ║ ╚══════════════════════════════════════════════════════════════╝ A remote user can cause unexpected system termination or...

POC-CVE-2025-24104-Py

PoC: File Exfiltration in iOS via Backup Manipulation VERY IMPORTANT WARNING: THIS SOFTWARE IS A PROOF OF CONCEPT PoC FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. DO NOT use this script on devices for which you do not have explicit written consent from the owner. Unauthorized access to...

httptoolkit

HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...

CVE-2026-20698-PF_ROUTE-Heap-Overflow

CVE-2026-20698 — XNU Kernel Heap Overflow via PFROUTE RTAGENMASK Overview Heap buffer overflow in XNU's routing socket PFROUTE when processing RTAGENMASK in routemsg. Triggers kernel panic from an unprivileged process with no entitlements. CVE : CVE-2026-20698 credited to DARKNAVY Affected : iOS...