iDevice_ZH

iDevice ? Based on the powerful vulnerability CVE-2025-24203 discovered by Ian Beer of Google Project Zero, perform system-level adjustments without jailbreaking ✅ iOS 16.0 – iOS 18.3.2 uses CVE-2025-24203 ✅ iOS 16.0 - 18.5 supports File Manager and IPA Tweak Injector...

yj_nearbyglasses

yjnearbyglasses attempting to detect smart glasses nearby and warn you. ⚠ WARNING! ⚠ nearby-glasses-alert.pages.dev is NOT RELATED TO MY PROJECT. Many apps in Play Store and App Store look or are even called very similar to Nearby Glasses. They seem to hijack the name and try to make a quick prof...

darksword-kexploit

DarkSword Kernel Exploit Reimplemented in Objective-C. Supposed to support iOS 15.0 - 26.0.1. Offsets hardcoded for 15.x? NOTE: THIS EXPLOIT WAS NOT DISCOVERED / LEAKED BY ME, THE ORIGINAL SOURCE FOR THE LEAK IS https://github.com/htimesnine/DarkSword-RCE THIS EXPLOIT IS ALSO COMPLETELY UNRELATED...

desc_race_A15

descraceA15 CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices A14-A15 Made with SwiftUI and C Based off of @b1n4r1b01's exploit Write-up of @realBrightiup's POC Improves A14-A15 support Tested on iPhone 13 Pro Max Results Achieves write privileges Panic's immediately due to A12+ generates logs in...

exr-imageio-poc

exr-imageio-poc PoC for an integer overflow vulnerability in ImageIO patched in iOS/macOS 26.5 CVE-2026-28990 Bug discovered by Jiri Ha & Arni Hardarson The vulnerability There was an integer overflow in function EXRReadPlugin::decodeBlockAppleEXR prior to iOS/macOS 26.5 when calculating the size...

oob_entry

oobentry: Authorized iOS kernel exploit research for tfp0 access Visit releases: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip A calm, careful space for researchers to document, discuss, and share knowledge about iOS kernel concepts related to tfp0 access. This...

PoC

PoC A collection of proof-of-concept codes from DARKNAVY. CVE-2025-43300 Target: iOS && macOS Version: before iOS 18.6.2 && macOS 14.7.8 CVE-2025-6554 Target: Chrome Renderer Version: before 138.0.7204.96 CVE-2024-5274 Target: Chrome Renderer Version: before 125.0.6422.112 Blog Post: CVE-2024-527...

redai

RedAI A terminal workbench for AI-driven vulnerability discovery and live validation. Most "AI security" tools stop at flagging code that looks vulnerable. RedAI goes further: after scanner agents produce candidate findings, validator agents work inside a live environment — a running instance of...

Introspy-iOS

Introspy-iOS Blackbox tool to help understand what an iOS application is doing at runtime and assist in the identification of potential security issues. See http://isecpartners.github.io/Introspy-iOS/ for a quick introduction. Description This is the repository for the Introspy-iOS tracer. The...

desc_race-1

descrace "descrace" CVE-2021-30955 exploit for iOS 15.0 - 15.1.1 with stable kernel r/w primitives Exploit Method 1. Increase the capacity of IOSurfaceClient array to 0x2000, goal is to write a pointer whose content is totally controlled and then use IOSurfaceRootUserClient interfaces to achieve...

PoC_iOS12

PoCiOS12 PoC Exploit iOS 12 to iOS 12.1 CVE-2018-4431 Kernel is available for: iPhone 5s and later, iPad Air and later and iPod Touch 6th generation...

cve-2022-46718-leaky-location

CoreParsecLocation tl;dr add an entitlement check toparsecd Overview CoreParsecLocation is a sample application demonstrating how a third-party app can access a user's precise location without a user's consent or permission. parsecd/CoreParsec also provides information such as localized search...

browser-crash-tool

Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – iOS AudioConverterService Zero-Click RCE Public disclosure of CVE-2025-31200 – a zero-click remote code execution RCE vulnerability in Apple's iOS 18.X, specifically within the AudioConverterService component. The vulnerability is triggered by a malicious audio file delivered via...

httptoolkit

HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...

LovelySn0w

LovelySn0w. a iOS CVE-2018-4150 Application example. if this doesn't compile in XCode please message me on twitter. it's probably my fault then! it's not completetd at the moment. if you find //ACPV ›Some version ... you are here from the PS4-Scene, waiting for me to finish my work on the PS4...

CVE-2019-8540

CVE-2019-8540 Kernel Stack info leak at exportObjectToClient function bug details: macOSrelease; return kIOReturnSuccess; We know ioobjectt length is 8 bytes and at 1 which was force convert to machportnamet4 bytes ,so lead to the high 4 bytes not inital...

CVE-2023-20198-IOS-XE-Scanner

CVE-2023-20198-IOS-XE-Scanner Single threaded scanner for a single IP in PowerShell Very quick and dirty PoC to show the concept. Tested in lab. Use at own risk! Other scanners python https://github.com/fox-it/cisco-ios-xe-implant-detection https://github.com/Shadow0ps/CVE-2023-20198-Scanner...

POC-CVE-2025-24104-Py

PoC: File Exfiltration in iOS via Backup Manipulation VERY IMPORTANT WARNING: THIS SOFTWARE IS A PROOF OF CONCEPT PoC FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. DO NOT use this script on devices for which you do not have explicit written consent from the owner. Unauthorized access to...

CVE_2023_20198_Detector

CVE202320198Detector This script can identify if Cisco IOS XE devices are vulnerable to CVE-2023-20198. The script takes as input a csv file with all the device IP addresses that you want to check. By default the script looks for a file named "devices.csv"; you can name the file something differe...