noia

Noia Noia 是一个基于 Web 的工具，其主要目的是简化浏览移动应用程序沙箱的过程，并直接预览 SQLite 数据库、图像等。由 frida.re 提供支持。 请注意，我并非程序员，但我的代码熟练度可能高于平均水平。欢迎试用，如果发现任何问题，请提交 issue。欢迎提交 PR。 安装与使用 root@kitploit: npm install -g noia noia 特性 浏览第三方应用程序的文件和目录。Noia 会显示详细信息，包括访问权限、文件类型等。 查看自定义二进制文件。直接预览 SQLite 数据库、图像等。 按名称搜索应用程序。 按名称搜索文件和目录。 使用快捷键...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

CVE-2023-20198-Scanner

Cisco IOS XE Device Scanner User Guide for CVE-2023-20198-Scanner This is a webshell fingerprinting scanner designed to identify implants on Cisco IOS XE WebUI's affected by CVE-2023-20198 and CVE-2023-20273. This Python script checks for compromised Cisco IOS XE devices by making HTTP and HTTPS...

CVE-2023-20198

CVE-2023-20198 Exploit PoC para CVE-2023-20198 Descripción CVE-2023-20198 se caracteriza por una validación de ruta incorrecta que permite eludir el filtrado de Nginx para alcanzar el endpoint web webuiwsmahttp sin requerir autenticación. Al omitir la autenticación en el endpoint, un atacante pue...

CVE-2025-31200

CVE-2025-31200: CoreAudio APAC Channel Remapping Buffer Overflow Vulnerability Overview CVE-2025-31200 is a buffer overflow vulnerability in Apple's CoreAudio framework affecting the Apple Positional Audio Codec APAC decoder. The bug exists in the APACChannelRemapper::Process function within...

objection

📱objection - 运行时移动探索工具 objection 是一个运行时移动探索工具包，基于 Frida，旨在帮助你评估移动应用的安全状况，无需越狱。 支持 iOS 和 Android。 检查并交互容器文件系统。 绕过 SSL 证书固定。 导出钥匙串。 执行内存相关任务，例如转储与修补。 探索并操作堆上的对象。 还有更多更多功能... 截图可在wiki中查看。 安装 安装非常简单，只需执行 pip3 install objection。这将为你提供 objection 命令。你可以通过 pip3 install --upgrade objection 更新现有的 objection...

CVE-2014-1266-poc

OS X/iOS SSL Flaw POC Overview This repository contains some Go code that demonstrates the recently discovered SSL verification vulnerability in iOS and OS X. Apple Update Announcement Adam Langley's writeup Usage root@kitploit: $ git clone https://github.com/gabrielg/CVE-2014-1266-poc.git $ cd...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

truegaze

truegaze 一款专注于源代码之外的安全问题（如资源字符串、第三方库和配置文件）的 Android 和 iOS 应用程序静态分析工具。 要求 需要 Python 3，所需模块可在 requirements.txt 文件中找到。仅在 Python 3.7 上测试过，但应能兼容其他 3.x 版本。目前暂无支持 2.x 的计划。 安装 你可以通过 PIP 安装，方法如下： root@kitploit: pip install truegaze truegaze 要手动下载并运行，请执行以下操作： root@kitploit: git clone...

x18-leak

x18-leak iOS 11.2 introduced a kernel information leak that could be used to determine the kASLR slide. The issue was the result of a newly added feature, ARMKERNELPROTECT, that inadvertently caused the address of the kernel function Lel0synchronousvector64long to appear in register x18 when...

SwiftyInsta

SwiftyInsta legacy Please notice SwiftyInsta is no longer actively maintained. Refer to 244 for more info. Check out Swiftagram if you're looking for up-to-date alternatives. Instagram offers two kinds of APIs to developers. The Instagram API Platform extremely limited in functionality and close ...

CVE-2018-4407

CVE-2018-4407 Exploit masivo de ataque contra IOS/MAC CVE-2018-4407 es un ataque BOF simple y muy rápido contra IOS/MAC que puede provocar DOS. La vulnerabilidad es un desbordamiento de búfer en el montón en el código de red del kernel del sistema operativo XNU. XNU se utiliza tanto en iOS como e...

POC-CVE-2025-24104-Py

PoC: File Exfiltration in iOS via Backup Manipulation VERY IMPORTANT WARNING: THIS SOFTWARE IS A PROOF OF CONCEPT PoC FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. DO NOT use this script on devices for which you do not have explicit written consent from the owner. Unauthorized access to...

xnuspy

xnuspy 编译并运行 example/open1hook.c 后内核日志的输出 xnuspy 是一个 pongoOS 模块，它安装了一个新的系统调用 xnuspyctl，允许你从用户空间钩取内核函数。它支持 checkra1n 0.12.2 及以上版本的 iOS 13.x、iOS 14.x 和 iOS 15.x。不支持 4K 设备。 该模块完全禁用 KTRR/KPP，使得在 EL1 内创建 RWX 内存成为可能。请勿在你的主力设备上使用。 需要 libusb：brew install libusb 构建 在顶层目录中运行 make。它将构建加载器和模块。 构建选项 在 make...

xnuspy

xnuspy Output from the kernel log after compiling and running example/open1hook.c xnuspy is a pongoOS module that installs a new system call, xnuspyctl, which allows you to hook kernel functions from userspace. It supports iOS 13.x, iOS 14.x, and iOS 15.x on checkra1n 0.12.2 and up. 4K devices ar...

oob_entry

oobentry: Investigación autorizada de exploits del kernel de iOS para acceso tfp0 Visita las versiones: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip Un espacio tranquilo y cuidadoso para que los investigadores documenten, discutan y compartan conocimientos sob...

CiscoIOSSNMPToolkit

CiscoIOSSNMPToolkit Kit de explotación de desbordamiento SNMP en Cisco iOS CVE-2017-6736 ¿CVE-2018-0296? Recientemente he añadido como submódulo CVE-2018-0296, el cual se puede usar junto con este exploit original para realizar reconocimiento y ver qué contiene el dispositivo de antemano...

cisco-rce

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...

CVE-2023-41993

CVE-2023-41993 Exploit PoC This repository contains a Proof of Concept PoC exploit for the CVE-2023-41993 vulnerability. This PoC demonstrates limited read/write primitives based on the PoC released by po6ix. Demo of this PoC can be found here. Please make an issue if you have any questions,...

house

root@kitploit: / | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Dynamic Mobile Analysis Tool Contact: [email protected] House : A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile...