mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

ipa-scope

IPA-SCOPE v.2 IPA-SCOPE es una herramienta de análisis estático que apunta a aplicaciones iOS y extrae información importante como enlaces, archivos interesantes .json, .cer, .der, .api y es muy útil para mostrar buenos resultados cuando se realiza pentesting en aplicaciones iOS Novedades en esta...

ipa-medit

ipa-medit Ipa-medit es una herramienta de búsqueda y parcheo de memoria para ipa refirmados sin hacer jailbreak. Soporta aplicaciones iOS ejecutándose en iPhone y Mac con Apple Silicon. Fue creada para pruebas de seguridad en juegos móviles. Muchos juegos móviles tienen detección de jailbreak, pe...

frida-ipa-extract

frida-ipa-extract Este proyecto fue inspirado por frida-ios-dump. Ya que recientemente encontré problemas con esa herramienta, decidí crear frida-ipa-extract con mayor robustez y adiciones para abordar los problemas que enfrentamos hoy. Extrae un .ipa descifrado de un dispositivo iOS con jailbrea...

iDevice_ZH

iDevice? Realiza ajustes a nivel de sistema sin jailbreak aprovechando la poderosa vulnerabilidad CVE-2025-24203 descubierta por Ian Beer de Google Project Zero. ✅ iOS 16.0 – iOS 18.3.2 usa CVE-2025-24203 ✅ iOS 16.0 - 18.5 soporta el administrador de archivos y el inyector de ajustes IPA...

apk-medit

apk-medit Apk-medit es una herramienta de búsqueda y parcheo de memoria para apk depurables sin root ni ndk. Fue creada para pruebas de seguridad en juegos móviles. Muchos juegos móviles tienen detección de root, pero apk-medit no requiere privilegios de root, por lo que la modificación de memori...

frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

Malimite

Description Malimite is an iOS and macOS decompiler designed to help researchers analyze and decode IPA files and Application Bundles. Built on top of Ghidra decompilation to offer direct support for Swift, Objective-C, and Apple resources. Features Multi-Platform Mac, Windows, Linux Direct suppo...

ipatool

ipatool は、App Store で iOS、iPadOS、tvOS、visionOS、macOS アプリを検索し、.ipa または macOS の .pkg アプリパッケージをダウンロードできるコマンドラインツールです。 要件 サポートされているオペレーティングシステム（macOS、Linux、Windows、または iOS）。 App Store を使用するように既に設定済みの Apple Account。 インストール Linux および Windows 最新バージョンの ipatool は GitHub releases から入手できます。 macOS Homebrew...

frida-ios-dump

frida-ios-dump Pull a decrypted IPA from a jailbroken device Usage 1. Install frida on device 2. sudo pip install -r requirements.txt --upgrade 3. Run usbmuxd/iproxy SSH forwarding over USB Default 2222 - 22. e.g. iproxy 2222 22 4. Run ./dump.py Display name or Bundle identifier For SSH/SCP make...

frida-ios-dump-modern

Modern iOS IPA Dumper A modern iOS application memory decryption tool built for Frida 17.5.2+ with full support for iOS 14-16 and multiple jailbreaks. Status: ✅ Working and Tested - Successfully dumps and decrypts iOS apps using Frida 17.5.2 on: iOS 14.7.1 + Taurine jailbreak iPad mini 5 iOS...

ipaforge

IPAForge IPAForge is a dependency-free Python command-line tool for unpacking, inspecting, editing, and rebuilding iOS .ipa archives. It extracts the complete archive, converts editable Apple plist and localization formats into readable XML, preserves opaque and binary content byte-for-byte, and...

CVE-2021-30955-POC-IPA

This repository does not have a README...

Rocky Linux 9.2 [CIQ] Security Update: ipa-client / ipa-client-common / ipa-client-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0432)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260432 advisory. This advisory aggregates security fixes for the ipa SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2024-2698, CVE-2024-3183. Tenable has extracted the...

Rocky Linux 8 [CIQ] Security Update: custodia / ipa-healthcheck / ipa-healthcheck-core / opendnssec / etc Multiple Vulnerabilities (crlsa-2024_0143)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20240143 advisory. Kerberos: delegation constrain bypass in S4U2Proxy CVE-2020-17049 ipa: Invalid CSRF protection CVE-2023-5455 Tenable has extracted the preceding descriptio...

Rocky Linux 8 [CIQ] Security Update: custodia / python3-custodia / python3-jwcrypto / python3-kdcproxy / etc Multiple Vulnerabilities (crlsa-2020_4670)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204670 advisory. js-jquery: Cross-site scripting via cross-domain ajax requests CVE-2015-9251 bootstrap: XSS in the data-target attribute CVE-2016-10735 bootstrap: Cross-si...

Rocky Linux 9.2 [CIQ] Security Update: ipa-client / ipa-client-common / ipa-client-epn / ipa-client-samba / etc (ciqsa-2026_1568)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261568 advisory. This advisory aggregates security fixes for the ipa SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2025-7493. Tenable has extracted the preceding description block...

AlmaLinux 9.2 [TuxCare] Security Update: ipa-client / ipa-client-common / ipa-client-epn / ipa-client-samba / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778881463)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778881463 advisory. - A Cross-site request forgery vulnerability exists in ipa/session/loginpassword in all supported versions of IPA. This flaw allows ...

IPA

Interactive PDF Analysis Interactive PDF Analysis also called IPA allows any researcher to explore the inner details of any PDF file. PDF files may be used to carry malicious payloads that exploit vulnerabilities, and issues of PDF viewer, or may be used in phishing campaigns as social engineerin...

Oracle Linux 10 : ipa (ELSA-2026-72279)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72279 advisory. - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval reachable before authorization check allows environment disclosure and denial of...