idb

Idb idb es una herramienta que simplifica algunas tareas comunes en pentesting e investigación de iOS. Originalmente existía una versión de línea de comandos de la herramienta, pero ya no está en desarrollo, por lo que deberías usar la versión GUI. idb tiene una nueva página principal...

PoC

PoC A collection of proof-of-concept codes from DARKNAVY. CVE-2025-43300 Target: iOS && macOS Version: before iOS 18.6.2 && macOS 14.7.8 CVE-2025-6554 Target: Chrome Renderer Version: before 138.0.7204.96 CVE-2024-5274 Target: Chrome Renderer Version: before 125.0.6422.112 Blog Post: CVE-2024-527...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

n-days

n-days A collection of POCs & writeups for iOS vulnerabilities either discovered by me, binary diffed from In-The-Wild updates or just cool non-public bugs. CVE| Patched In| Link| Reported by me| Exploited ITW| Description ---|---|---|---|---|--- CVE-2021-1757| iOS 14.4| poc - info| ✖️| ✖️| Kernel...

CVE-2025-14174-analysis

CVE-2025-14174 Analysis: ANGLE Metal Staging Buffer Out-of-Bounds Write Technical analysis and proof-of-concept for CVE-2025-14174 | ---|--- CVE| CVE-2025-14174 Severity| High Exploited ITW| Yes - targeted attacks on iOS 26 Affected| iOS Safari, macOS Chrome/Chromium/Electron not macOS Safari...

CVE-2025-24104

Análisis de CVE-2025-24104: Lectura de archivos fuera del sandbox Reporté un bug que Apple luego rastreó como CVE-2025-24104. En mi informe original, demostré cómo una copia de seguridad maliciosa podía usarse para eludir las restricciones del sandbox. Sin embargo, la descripción inicial de Apple...

sdks

theos/sdks This repository contains patched iOS SDKs containing private symbols. These were removed from official SDKs starting in Xcode 7.3 and the iOS 9.3 SDK. To use with Theos, download this repo, extract, and copy whichever SDKs you desire into $THEOS/sdks/. Generated using createpatchedsdk....

slides

slides Hack Different: Pwning iOS 14 with Generation Z Bugz BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong paper recording parody See No Eval: Runtime Dynamic Code Execution in Objective-C RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape: Pwning macOS Safari Sandbox the Unusual W...

noia

Noia Noia è uno strumento basato sul web il cui scopo principale è facilitare il processo di navigazione nella sandbox delle applicazioni mobili e visualizzare direttamente database SQLite, immagini e altro. Basato su frida.re. Tieni presente che non sono un programmatore, ma probabilmente sono a...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

x18-leak

x18-leak O iOS 11.2 introduziu um vazamento de informações do kernel que poderia ser usado para determinar o deslocamento do kASLR. O problema foi resultado de uma funcionalidade recém-adicionada, ARMKERNELPROTECT, que inadvertidamente fez com que o endereço da função do kernel...

gex

Gex ist ein Jailbreak für iOS 14.7, der die Exploits CVE-2021-30807 IOMFB und CVE-2021-30860 verwendet Wenn Sie 14.6, 14.7, 14.7.1 und 14.8 jailbreaken möchten und ein A12/A13-Gerät haben, verwenden Sie unc0ver v8.0.0 für 14.8.1 und die anderen Bionic-Chips warten Sie auf dieses...

NoHomeBar

NoHomeBar iOS 14 - 16.1.2 Riavvia il dispositivo per annullare le modifiche. iOS14❌ Installazione TrollStore AltStore Crediti https://github.com/zhuowei exploit MacDirtyCow https://twitter.com/straighttamago NoHomeBar...

NoCameraSound

NoCameraSound iOS 14.0-15.7.1 & 16.0-16.1.2 Dies sollte nicht mehr verwendet werden. https://ichitaso.com/iphone/how-to-silence-the-shutter-sound-in-silent-mode/ Starten Sie Ihr Gerät neu, um die Änderungen rückgängig zu machen. iOS14❌ Installation TrollStore AltStore Danksagungen...

FileSwitcherX

FileSwitcherX iOS 14.0-15.7.1 & 16.0-16.1.2 Installation TrollStore AltStore Danksagungen https://github.com/zhuowei/MacDirtyCow MacDirtyCow-Exploit https://github.com/haxi0/TrollLock-Reborn https://twitter.com/i41nbeer CVE-2022-46689 https://twitter.com/straighttamago FileSwitcherX...

DockTransparent

DockTransparent iOS 14 - 16.1.2 أعد تشغيل جهازك للتراجع عن التغييرات. iOS14❌ التثبيت TrollStore AltStore الاعتمادات https://github.com/zhuowei استغلال MacDirtyCow https://twitter.com/straighttamago DockTransparent...

CVE-2019-8389

CVE-2019-8389 - Beliebiges Dateilesen in Musicloud für iOS v1.6 CVE-2019-8389 Ein Exploit-Code zur Ausnutzung einer lokalen Schwachstelle beim Dateilesen in der iOS-Anwendung Musicloud v1.6 Beschreibung: Eine Schwachstelle beim Dateilesen wurde in der WLAN-Übertragungsfunktion von Musicloud 1.6...

CVE-2025-31200-iOS-AudioConverter-RCE

CVE-2025-31200 – RCE zero-click in AudioConverterService su iOS Divulgazione pubblica di CVE-2025-31200 – una vulnerabilità di esecuzione remota di codice RCE zero-click in iOS 18.X di Apple, in particolare nel componente AudioConverterService. La vulnerabilità viene attivata da un file audio...

iPwn

iPwn Un framework pensato per lo sfruttamento di dispositivi iOS. RICORDA: L'IPHONE CHE STAI TENTANDO DI ACCEDERE CON QUESTO STRUMENTO DEVE ESSERE JAILBROKEN Stato - ❌ Questo progetto è ancora in fase di sviluppo. Sto aggiungendo ulteriori estensioni e opzioni per il post-exploitation per...

toothpicker

ToothPicker O ToothPicker é um fuzzer em processo guiado por cobertura para iOS. Foi desenvolvido para visar especificamente o daemon Bluetooth do iOS bluetoothd e para analisar vários protocolos Bluetooth no iOS. Como é construído usando FRIDA, pode ser adaptado para atingir qualquer plataforma...