MEAT

M.E.A.T. - Mobile Evidence Acquisition Toolkit Meet M.E.A.T! From Jack Farley - BlackStone Discovery This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices and Android in the future. Requirements to run from source Windows or Linux Python 3.7.4 or 3.7.2 Pip...

DirtyTooth-RaspberryPi

DirtyTooth for Raspberry Pi Raspbian Stretch Bluetooth communications are on the increase. Millions of users use the technology to connect to peripherals that simplify and provide greater comfort and experience. There is a trick or hack for iOS 11.1.2 and earlier that takes advantage of the...

ios11-cookie-set-expire-issue

iOS 11 Cookie Set / Expire Issue There appears to be an intermittent issue with setting and expiring cookies in iOS 11 home screen web apps. Two erroneous behaviors can be observed: When a cookie is set and then the app is closed and re-opened, the cookie may no longer be present upon re-opening...

scrounger

설명 Scrounger – 다른 사람에게서 빌리거나 기대어 사는 사람. 이 도구를 설명하는 데 이보다 더 적절한 말은 없습니다. 첫째, 이 도구는 이미 출판된 많은 다른 도구들에서 영감을 받았기 때문이고, 둘째, 모바일 애플리케이션의 취약점에 기대어 살아가기 때문입니다. 이유 여러 모바일 애플리케이션 분석 도구들이 개발되었음에도 불구하고, 안드로이드와 iOS 모두에 사용할 수 있고 모든 모바일 애플리케이션 평가에 반드시 사용해야 하는 "표준"이라고 불릴 만한 도구는 없습니다. Scrounger 의 아이디어는 침투 테스터의 작업...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

CVE-2023-20198

CVE 2023-20198 Introduction The web UI component of Cisco IOS XE Software has a previously undiscovered vulnerability that, when exposed to the internet or untrusted networks, is already being actively exploited, according to Cisco. Due to this vulnerability, a remote, unauthenticated attacker is...

airborn-IOS-CVE-2025-24252

iOS "Airborne" Vulnerabilities - Log Artifact Extractor This script is designed to help identify potential traces of the "Airborne" set of vulnerabilities primarily affecting Apple's AirPlay protocol by querying iOS system logs from a .logarchive bundle. It automates the execution of several log...

CVE_2023_20198_Detector

CVE202320198Detector This script can identify if Cisco IOS XE devices are vulnerable to CVE-2023-20198. The script takes as input a csv file with all the device IP addresses that you want to check. By default the script looks for a file named "devices.csv"; you can name the file something differe...

exploit_mitigations

エクスプロイト緩和策 目標は、様々なオペレーティングシステム、ソフトウェア、ライブラリ、またはハードウェアにおいて、時間の経過とともに追加されたエクスプロイト緩和策をリスト化することです。 特定の脆弱性が、導入されている緩和策に応じて容易に悪用可能かどうかを知るのに便利です。 例を以下に示します: 目次 サポート対象 動機 現在の環境に緩和策Xは存在しますか？ 最後に サポート対象 現在サポートしているオペレーティングシステムは以下の通りです: Microsoft Windows Linux Google Android Apple iPhone OS iOS OpenBSD FreeB...

Exploit11.2

Exploit11.2 Exploit iOS 11.2.x by ZIMPERIUM and semi-completed by me. Sandbox escapes on CVE-2018-4087.This checks also of a root access incompleted. You can creat an app to running exploit on your device if you are a developer and turn the root access @. Thanks to: •RaniXCH, Adam Donenfeld,...

toothpicker

ToothPicker ToothPicker는 iOS를 위한 인-프로세스, 커버리지 가이드 퍼저입니다. iOS의 블루투스 데몬 bluetoothd를 특별히 타겟팅하고 iOS의 다양한 블루투스 프로토콜을 분석하기 위해 개발되었습니다. FRIDA를 기반으로 구축되어 FRIDA가 실행되는 모든 플랫폼을 대상으로 적용할 수 있습니다. 이 저장소에는 InternalBlue를 사용하여 Apple의 MagicPairing 프로토콜을 퍼징하는 예제 구현이 포함된 over-the-air 퍼저도 포함되어 있습니다. 또한 인-프로세스 퍼저가 발견한...

evilnotify

EvilNotify Realls simple iOS app that does stuff with CVE-2025-24091; Not really anything useful, just for funsies Installation 1. Get latest .ipa from Releases tab 2. Install via LiveContainer or some sideloading service Usage Add custom keys or use the preset keys. !NOTE If you find any cool...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 is a critical vulnerability in the Cisco IOS XE software Web UI feature that allows unauthenticated remote attackers to create accounts with privilege level 15 on affected systems, thereby gaining full control of the device. The vulnerability primarily stems from...

Introspy-iOS

Introspy-iOS Blackbox tool to help understand what an iOS application is doing at runtime and assist in the identification of potential security issues. See http://isecpartners.github.io/Introspy-iOS/ for a quick introduction. Description This is the repository for the Introspy-iOS tracer. The...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

slythestx

🐍 Slythestx The Swiss Army Worm for Mobile Security A unified framework for static code analysis and dynamic vulnerability hunting on iOS and Android. 📖 Table of Contents Overview Key Features Architecture Analyzer Suite Quick Start Usage Release Notes Roadmap Contributing Disclaimer License ⚡...

Cisco IOS HTTP Configuration - Authentication Bypass

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. id: CVE-2001-0537 info: name: Cisco IOS HTTP Configuration - Authentication Bypass author:...

CVE-2022-32898

CVE-2022-32898: ANEProgramCreate multiple kernel memory corruption Nov 23, 2022 • Mohamed GHANNAM @simo36 저자 commnet I'm sharing two other iOS kernel vulnerabilities reachable from the default app sandbox that don’t require you to open a UserClient: +16 kernel bugs I reported to Apple have been...

ida_kernelcache

idakernelcache：用于分析 iOS kernelcache 的 IDA 工具包 idakernelcache 是一个适用于 IDA Pro 的 IDAPython 模块，旨在简化对 iOS kernelcache 的分析工作。 该模块提供以下功能： 将 iOS 12 新的静态标记指针（tagged pointer）转换为普通内核指针。 将内核的 PRELINKINFO 段解析为 Python 字典。 根据内核扩展名、Mach-O 段和 Mach-O section 重命名 IDA 中的段。 将某些段中可识别的指针转换为 IDA 偏移量。 基于 OSMetaClass 信息重建...

CVE-2026-28956-jxl-messages-surface

JPEG XL auto-decodes in the iOS Messages preview path A delivery-surface finding for CVE-2026-28956 AppleJPEGXL, plus the patch-diff attribution and a reliability reality-check on the public PoC. TL;DR — Conventional wisdom and our own prior measurement with EXR is that iOS Messages renders...