iOSForensic

iOSForensic iosForensic ist ein Python-Tool zur Unterstützung bei forensischen Analysen auf iOS. Es sammelt Dateien, Logs, extrahiert sqlite3-Datenbanken und dekomprimiert .plist-Dateien in XML. Installation Klonen Sie einfach dieses Git-Repository und installieren Sie die Abhängigkeiten...

Introspy-iOS

Introspy-iOS Blackbox-Tool, das hilft zu verstehen, was eine iOS-Anwendung zur Laufzeit tut und bei der Identifizierung potenzieller Sicherheitsprobleme unterstützt. Siehe http://isecpartners.github.io/Introspy-iOS/ für eine kurze Einführung. Beschreibung Dies ist das Repository für den...

SSH-KILLv2

Cosa riguarda SSH-KILLv2 Script Attacco a iPhone se il servizio ssh è aperto, molti utenti usano "Open SSH" su dispositivi jailbroken per trasferire file tra laptop/PC e iPhone per semplificarsi la vita, ma il problema è che il tweak "Open SSH" utilizza la password predefinita "alpine" e molti...

iPwn

iPwn Un framework pensato per lo sfruttamento di dispositivi iOS. RICORDA: L'IPHONE CHE STAI TENTANDO DI ACCEDERE CON QUESTO STRUMENTO DEVE ESSERE JAILBROKEN Stato - ❌ Questo progetto è ancora in fase di sviluppo. Sto aggiungendo ulteriori estensioni e opzioni per il post-exploitation per...

frida-c2-mcp

FridaC2MCP एक MCP सर्वर जिसमें स्ट्रीमेबल HTTP ट्रांसपोर्ट है जो Frida की डायनामिक इंस्ट्रुमेंटेशन को पूरी तरह से डिवाइस पर ही चलाता है — क्लाइंट-साइड किसी टूलिंग की आवश्यकता नहीं। यह प्रोजेक्ट सीधे रूट किए गए Android और जेलब्रेक किए गए iOS डिवाइसों पर चलता है , Frida को HTTP पर कॉल करने योग्य...

ioscpy

ioscpy Da fare https://github.com/lautarovculic/ioscpy/issues/7 Registrazione dello schermo con indicazione dello stato nel pannello laterale. Ricerca: supporto per Windows con interfaccia grafica e installer Riservato, l'autore implementerà completamente Aggiungere autenticazione e autorizzazion...

frida-ipa-extract

frida-ipa-extract Questo progetto è stato ispirato da frida-ios-dump. Poiché ho recentemente riscontrato problemi con quello strumento, ho deciso di creare frida-ipa-extract con maggiore robustezza e aggiunte per affrontare i problemi che affrontiamo oggi. Estrai un .ipa decriptato da un...

frida-ios-dump

frida-ios-dump Estrai un IPA decrittato da un dispositivo jailbroken Utilizzo 1. Installa frida sul dispositivo 2. sudo pip install -r requirements.txt --upgrade 3. Esegui l'inoltro SSH di usbmuxd/iproxy via USB predefinito 2222 - 22. es. iproxy 2222 22 4. Esegui ./dump.py Nome visualizzato o...

Clutch

Clutch Clutch è uno strumento di decrittazione iOS ad alta velocità. Clutch supporta iPhone, iPod Touch e iPad, nonché tutte le versioni iOS, i tipi di architettura e la maggior parte dei binari. Clutch è pensato solo per scopi educativi e ricerca sulla sicurezza. Clutch richiede un dispositivo i...

bfinject

bfinject Einfache Dylib-Injektion für gejailbreakte 64-Bit-iOS-11.0–11.1.2-Geräte. Kompatibel mit den Electra- und LiberiOS-Jailbreaks. bfinject lädt beliebige Dylibs in laufende App-Store-Apps. Es verfügt über integrierte Unterstützung zum Entschlüsseln von App-Store-Apps und wird mit iSpy und...

CVE-2026-34490

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...

CVE-2026-34490

CVE-2026-34490 affects the XAAP Android application (pre-1.53). The issue is cleartext storage of sensitive data in an unencrypted local database on the device, allowing a local attacker on a jailbroken or otherwise compromised device to retrieve sensitive information. CVSS v4.0 base score 4.8 (M...

EUVD-2024-35258

Malicious code in bioql PyPI...

EUVD-2021-29097

Malicious code in bioql PyPI...

A week in security (June 23 – June 29)

Last week on Malwarebytes Labs: Gmail’s multi-factor authentication bypassed by hackers to pull off targeted attacks Thousands of private camera feeds found online. Make sure yours isn’t one of them Sextortion email scammers increase their "Hello pervert" money demands Many data brokers are faili...

Jailbroken AIs are helping cybercriminals to hone their craft

Cybercriminals are bypassing the guardrails that are supposed to keep AI models from carrying out criminal activities, according to researchers. We've seen the misuse of AI models by cybercriminals growing rapidly over the past several years, shaping a new era of digital threats. Early on,...

WormGPT Makes a Comeback Using Jailbroken Grok and Mixtral Models

Cato CTRL uncovers new WormGPT variants on Telegram powered by jailbroken Grok and Mixtral. Learn how cybercriminals jailbreak top LLMs for uncensored, illegal activities in this latest threat research...

How to load unsigned or fake-signed apps on iOS

TL;DR Issues commonly arise when clients provide an application which is unsigned or does not meet device requirements. Installing an application can be challenging without a Mac, access to Xcode or if the client is having trouble signing the application manually as this is normally done by the a...

Rooted Androids 3,000x More Likely to Be Breached, Even iPhones Not Safe

A new Zimperium report reveals that rooted Android phones and jailbroken iOS devices face growing threats, with advanced toolkits making detection nearly impossible for cybersecurity researchers...

CVE-2024-35282

A cleartext storage of sensitive information in memory vulnerability CWE-316 affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain...