node-cve-2018-4407

node-cve-2018-4407 Node.js PoC exploit code for CVE-2018-4407 Author: Sam Decrock This script is based on the scapy script provided by Zuk: iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC in a tweet: pip install scapy sudo scapy sendIPdst=“Target...

bfinject

bfinject ジェイルブレイク済み64ビットiOS 11.0 - 11.1.2向けの、簡単なdylibインジェクション。ElectraおよびLiberiOSジェイルブレイクに対応しています。 bfinjectは、実行中のApp Storeアプリに任意のdylibを注入します。App Storeアプリの復号を組み込みでサポートしており、iSpyとCycriptが同梱されています。...

bl_sbx

blsbx itunesstored & bookassetd サンドボックスエスケープ このリポジトリには、巧妙に細工された downloads.28.sqlitedb および BLDatabaseManager.sqlite データベースが iOS 上の itunesstored と bookassetd のサンドボックスをエスケープできることを示す概念実証が含まれています。これらのダウンロード機構を悪用することで、POC は /private/var/ 内の制限された場所に任意の mobile 所有ファイルを書き込むことができ、MobileGestalt...

CVE-2018-4407

CVE-2018-4407 IOS/macOS kernel crash Usage: python CVE20184407.py IP/CIDR python CVE-20184407.py 192.168.1.1 python CVE20184407.py 192.168.1.0/24 1. find iphone nmap -sS -p 62078 --open 192.168.1.0/24 2. attack python CVE20184407.py iphoneip...

iblessing

☠️ ██╗██████╗ ██╗ ███████╗███████╗███████╗██╗███╗ ██╗ ██████╗ ██║██╔══██╗██║ ██╔════╝██╔════╝██╔════╝██║████╗ ██║██╔════╝ ██║██████╔╝██║ █████╗ ███████╗███████╗██║██╔██╗ ██║██║ ███╗ ██║██╔══██╗██║ ██╔══╝ ╚════██║╚════██║██║██║╚██╗██║██║ ██║ ██║██████╔╝███████╗███████╗███████║███████║██║██║...

TCLtools

TCL scripts for Cisco IOS penetration testing With TCLtools you can transform any Cisco IOS hardware into a pivoting station. It's easy to set up and use! Features TCLmap — Port scanner implementation nmap TCLproxy — Proxy server implementation TCLproxy TCLproxy is a tool for pivoting through Cis...

redai

RedAI AI 기반 취약점 발견 및 실시간 검증 을 위한 터미널 워크벤치입니다. 대부분의 "AI 보안" 도구는 취약해 보이는 코드를 플래그 지정하는 데 그칩니다. RedAI는 한 단계 더 나아갑니다: 스캐너 에이전트가 후보 결과물을 생성한 후, 검증기 에이전트가 실제 환경대상의 실행 인스턴스와 상호작용에 필요한 도구 내에서 작업하여 보고서에 포함되기 전에 각 결과물을 증명하거나 반증합니다. UI를 클릭하고, 엔드포인트를 호출하고, PoC 스크립트를 작성하고, 도우미 서버를 호스팅하고, 증거를 저장합니다. 환경은 플러그인입니다...

wBlock

wBlock Safari 광고 차단의 끝판왕 macOS, iOS, iPadOS, visionOS용 Safari 콘텐츠 차단기입니다. 5개 확장 프로그램에 750,000개 규칙, Protocol Buffer 저장, LZ4 압축, iCloud 동기화를 지원합니다. !NOTE 자세한 비교가 필요하신가요? 비교 가이드에서 wBlock이 다른 Safari 콘텐츠 차단기와 어떻게 비교되는지 확인해 보세요. 기능 스크린샷 기술 구현 개발 지원 wBlock은 무료 오픈 소스입니다. 프로젝트를 지원하고 싶다면: FAQ wBlock은 다른 광고...

zero-click-exploit-analysis

Zero-Click, Old Tricks Anatomy of the 2025 WhatsApp/ImageIO zero-click exploit chain CVE-2025-55177 + CVE-2025-43300. Research paper plus an interactive web companion with CVE walkthroughs, patch diffs, and hands-on heap/stack labs. Live site: https://mcs.danielwagner.ro Paper PDF:...

MEAT

M.E.A.T. - Mobile Evidence Acquisition Toolkit Meet M.E.A.T! From Jack Farley - BlackStone Discovery This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices and Android in the future. Requirements to run from source Windows or Linux Python 3.7.4 or 3.7.2 Pip...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

DirtyTooth-RaspberryPi

DirtyTooth for Raspberry Pi Raspbian Stretch Bluetooth communications are on the increase. Millions of users use the technology to connect to peripherals that simplify and provide greater comfort and experience. There is a trick or hack for iOS 11.1.2 and earlier that takes advantage of the...

ios11-cookie-set-expire-issue

iOS 11 Cookie Set / Expire Issue There appears to be an intermittent issue with setting and expiring cookies in iOS 11 home screen web apps. Two erroneous behaviors can be observed: When a cookie is set and then the app is closed and re-opened, the cookie may no longer be present upon re-opening...

scrounger

설명 Scrounger – 다른 사람에게서 빌리거나 기대어 사는 사람. 이 도구를 설명하는 데 이보다 더 적절한 말은 없습니다. 첫째, 이 도구는 이미 출판된 많은 다른 도구들에서 영감을 받았기 때문이고, 둘째, 모바일 애플리케이션의 취약점에 기대어 살아가기 때문입니다. 이유 여러 모바일 애플리케이션 분석 도구들이 개발되었음에도 불구하고, 안드로이드와 iOS 모두에 사용할 수 있고 모든 모바일 애플리케이션 평가에 반드시 사용해야 하는 "표준"이라고 불릴 만한 도구는 없습니다. Scrounger 의 아이디어는 침투 테스터의 작업...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

CVE-2023-20198

CVE 2023-20198 Introduction The web UI component of Cisco IOS XE Software has a previously undiscovered vulnerability that, when exposed to the internet or untrusted networks, is already being actively exploited, according to Cisco. Due to this vulnerability, a remote, unauthenticated attacker is...

airborn-IOS-CVE-2025-24252

iOS "Airborne" Vulnerabilities - Log Artifact Extractor This script is designed to help identify potential traces of the "Airborne" set of vulnerabilities primarily affecting Apple's AirPlay protocol by querying iOS system logs from a .logarchive bundle. It automates the execution of several log...

CVE_2023_20198_Detector

CVE202320198Detector This script can identify if Cisco IOS XE devices are vulnerable to CVE-2023-20198. The script takes as input a csv file with all the device IP addresses that you want to check. By default the script looks for a file named "devices.csv"; you can name the file something differe...

exploit_mitigations

エクスプロイト緩和策 目標は、様々なオペレーティングシステム、ソフトウェア、ライブラリ、またはハードウェアにおいて、時間の経過とともに追加されたエクスプロイト緩和策をリスト化することです。 特定の脆弱性が、導入されている緩和策に応じて容易に悪用可能かどうかを知るのに便利です。 例を以下に示します: 目次 サポート対象 動機 現在の環境に緩和策Xは存在しますか？ 最後に サポート対象 現在サポートしているオペレーティングシステムは以下の通りです: Microsoft Windows Linux Google Android Apple iPhone OS iOS OpenBSD FreeB...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...