ssl-kill-switch2

SSL Kill Switch 2 Blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications. Second iteration of https://github.com/iSECPartners/ios-ssl-kill-switch . Description Once loaded into an iOS or macOS application, SSL Kill Switch 2 will...

iPwn

iPwn iOSデバイスの悪用を目的としたフレームワークです。 注意: このツールを使って侵入しようとしているiPhoneは脱獄済みでなければなりません ステータス - ❌ このプロジェクトはまだ開発中です。端末情報の収集などのポストエクスプロイト機能を拡張するための拡張機能やオプションを追加しています。また、通常のiOS tweakにペイロードを埋め込んでリバースシェルを簡単に取得する方法も研究中です。 更新ログ 2021/6/2 - デバイスをコンピュータに接続して弄りたい人のために、追加メニューを追加しました。間もなくさらに機能を追加予定です。 2021/6/2 -...

Introspy-iOS

Introspy-iOS 黑盒工具，用于帮助理解 iOS 应用在运行时的行为， 并协助识别潜在的安全问题。 参见 http://isecpartners.github.io/Introspy-iOS/ 以获取快速介绍。 描述 这是 Introspy-iOS 追踪器的仓库。 该追踪器可以安装在越狱设备上，用于挂钩并记录 设备上运行的应用所调用的安全敏感型 iOS API。该 工具会记录相关 API 调用的详细信息，包括参数和返回值， 并将其持久化到数据库中。 此外，这些调用还会发送到 Console 以进行实时分析。 然后可以将数据库提供给 Introspy-Analyzer（一个...

frida-ios-dump

frida-ios-dump 从越狱设备中提取解密后的 IPA 使用方法 1. 在设备上安装 frida 2. sudo pip install -r requirements.txt --upgrade 3. 通过 USB 运行 usbmuxd/iproxy SSH 转发（默认 2222 - 22）。例如：iproxy 2222 22 4. 运行 ./dump.py 显示名称 或 Bundle 标识符 对于 SSH/SCP，请确保你的公钥已添加到目标设备的 /.ssh/authorizedkeys 文件中。 ./dump.py Aftenposten Start the target...

iOSForensic

iOSForensic iosForensic es una herramienta de Python para ayudar en el análisis forense en iOS. Obtiene archivos, registros, extrae bases de datos sqlite3 y descomprime archivos .plist en xml. Instalación Simplemente clone este repositorio git e instale las dependencias. Dependencias Linux OpenSS...

CVE-2026-34490

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...

CVE-2026-34490

CVE-2026-34490 affects the XAAP Android application (pre-1.53). The issue is cleartext storage of sensitive data in an unencrypted local database on the device, allowing a local attacker on a jailbroken or otherwise compromised device to retrieve sensitive information. CVSS v4.0 base score 4.8 (M...

EUVD-2024-35258

Malicious code in bioql PyPI...

CVE-2024-35282

A cleartext storage of sensitive information in memory vulnerability CWE-316 affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain...

CVE-2024-35282

A cleartext storage of sensitive information in memory vulnerability CWE-316 affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain...

PT-2024-9824

Name of the Vulnerable Software and Affected Versions: FortiClient VPN iOS versions 6.0 through 7.2 Description: A cleartext storage of sensitive information in memory issue may allow an unauthenticated attacker with physical access to a jailbroken device to obtain cleartext passwords via keychai...

CVE-2021-42111

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application. The IOS app version 1.4.1631262629 resolves this issue by storing a hash PIN code...

Code injection

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application. The IOS app version 1.4.1631262629 resolves this issue by storing a hash PIN code...

CVE-2021-42111

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application. The IOS app version 1.4.1631262629 resolves this issue by storing a hash PIN code...

CVE-2021-42111: Undefined Security Weakness

An issue was discovered in the RCDevs OpenOTP app 1.4.13 and 1.4.14 for iOS. If it is installed on a jailbroken device, it is possible to retrieve the PIN code used to access the application. The IOS app version 1.4.1631262629 resolves this issue by storing a hash PIN code...

CVE-2018-13435

An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method to disable passcode authentication. NOTE: the vendor indicates that this is not an attack of interest within the...

iOS Security Testing Framework: needle

iOS Security Testing Framework Needle is an open source, modular framework to streamline the process of conducting security assessments of iOS apps. Assessing the security of an iOS application typically requires a plethora of tools, each developed for a specific need and all with different modes...

needle - The iOS Security Testing Framework

Needle is an open source, modular framework to streamline the process of conducting security assessments of iOS apps. Description Assessing the security of an iOS application typically requires a plethora of tools, each developed for a specific need and all with different modes of operation and...

Facebook Reassures Users, But Hole May Put Mobile Data at Risk

UPDATED: Facebook Security assured users on Thursday who access their Facebook account via Android or iOS devices that mobile sessions on the social networking site aren’t vulnerable to hacking. However, research published this week suggests otherwise. A blog entry posted by UK-based mobile...

Key Combos Bust iPhone Password Protection

A flaw in the iOS software that runs Apple’s iPhone allows any user to bypass the password entry screen by manipulating the emergency call feature, essentially rendering iPhone passwords useless. The flaw, first disclosed in a discussion on the forums site macrumors.com on October 22, requires...