525 matches found
IOSSecuritySuite
⭐️ 想要成为认证的 iOS 应用安全工程师吗？⭐️ 了解我们实用且完全在线的课程：https://courses.securing.pl/courses/iase ISS 描述 作者 @r3ggi 🌏 iOS Security Suite 是一个高级且易于使用的平台安全与防篡改库，完全使用纯 Swift 编写！如果你正在为 iOS 开发，并且希望根据 OWASP MASVS 标准（第 v8 章）保护你的应用，那么这个库可以为你节省大量时间。🚀 ISS 检测的内容： 越狱 🧨 附加调试器 👨🏻🚀 应用是否在模拟器中运行 👽 设备上正在运行的常见逆向工程工具 🔭 设置 有四种方式可以开始使用...
idb
Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...
httptoolkit
HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...
awesome-ios-security
Awesome Seguridad iOS Una lista curada de increíbles recursos de seguridad de aplicaciones iOS. Una colección de increíbles herramientas, libros, cursos, publicaciones de blog y material interesante sobre seguridad de aplicaciones iOS y pruebas de penetración. Contenido Herramientas Herramientas ...
Apple-Platform-Security-Guides
Apple Platform Security Guides Every Apple Platform Security Guide Older iOS Security Guides & older OS X/ macOS Whitepapers Official Apple Document revision history Date| macOS| iOS| watchOS| Comments ---|---|---|---|--- Fall 2019| 10.15.2| 13.3| 6.1.1| Spring 2020| 10.15.4| 13.4| 6.2| February...
needle
Needle Needle 是一个开源、模块化的框架，旨在简化 iOS 应用安全评估的流程。 注意：此工具已停用，不再维护。我们保留原始项目仅供存档。 Needle 最初是为 iOS 9 和 iOS 10 设计的。此后，Frida 发布并成为移动安全评估的事实标准工具。后来 Needle 中实现了一些常见的 Frida 移动安全脚本，这些脚本在某些情况下表现更好，或解决了 Needle 自定义工具中的一些问题。 随着 iOS 11 的发布，新的安全保护措施对用户有利，但对 Needle 不利。这些增强功能实际上破坏了 Needle 的功能，因此 F-Secure 面临两个选择： 从头重写...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in the iOS Security UI of Google Chrome prior to version 121.0.6167.85 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17838
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...
N4V3R41N-Suite
N4V3R41N: The Ultimate Unified iOS Exploit & Bypass Suite !V...
CVE-2018-4310
An access issue was addressed with additional sandbox restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14...
CVE-2018-4420
A memory corruption issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1...
CVE-2018-4325
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12...
CVE-2018-4443
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9...
CVE-2018-4328
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...
CVE-2018-4401
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...
CVE-2021-31013
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may result in the disclosure of process memory...
CVE-2019-7293
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A local user may be able to read kernel memory...
