1770 matches found
IOSSecuritySuite
⭐️ Do you want to become a certified iOS Application Security Engineer? ⭐️ Check out our practical & fully online course at: https://courses.securing.pl/courses/iase ISS Description by @r3ggi 🌏 iOS Security Suite is an advanced and easy-to-use platform security & anti-tampering library written in...
SwiftyInsta
SwiftyInsta legacy Please notice SwiftyInsta is no longer actively maintained. Refer to 244 for more info. Check out Swiftagram if you're looking for up-to-date alternatives. Instagram offers two kinds of APIs to developers. The Instagram API Platform extremely limited in functionality and close ...
SwiftBelt
SwiftBelt About SwiftBelt is a macOS enumerator inspired by @harmjoy's Windows-based Seatbelt enumeration tool. SwiftBelt does not utilize any command line utilities and instead uses Swift code leveraging the Cocoa Framework, Foundation libraries, OSAKit libraries, etc. to perform system...
machscope
MachScope A native macOS binary analysis tool providing Mach-O parsing, ARM64 disassembly, and process debugging. Built entirely in Swift with zero external dependencies. Features Feature| Description ---|--- Mach-O Parsing| Headers, segments, sections, symbols, dylibs, strings Code Signatures|...
fuzzilli
Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...
r2frida
r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...
swift-nio-ssh
SwiftNIO SSH This project contains SSH support using SwiftNIO. What is SwiftNIO SSH? SwiftNIO SSH is a programmatic implementation of SSH: that is, it is a collection of APIs that allow programmers to implement SSH-speaking endpoints. Critically, this means it is more like libssh2 than openssh...
NeuroCore
NeuroCore High-Performance Structural Binary Analysis and Visualization Utility Abstract NeuroCore is a native macOS utility engineered for the structural analysis of binary data through high-velocity visualization. By leveraging General-Purpose Computing on Graphics Processing Units GPGPU via...
CVE-2026-18718
Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...
Swift-Attack
Swift-Attack Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods. I have included some post exploitation examples using both command line history and API calls. The post exploitation examples included here are not all encompassing. Instead the...
ios-mac-app
iOS 및 macOS용 Proton VPN Copyright c 2025 Proton Technologies AG 의존성 이 프로젝트는 모든 의존성에 Swift Package Manager를 사용합니다. 타깃을 실행하기 전에 Xcode가 패키지를 확인하도록 허용하십시오. 타사 의존성 ACKNOWLEDGEMENTS.md 설정 컴퓨터에서 Git LFS를 활성화하십시오. 이 저장소를 클론하십시오. 서브모듈을 클론했는지 확인하십시오 git submodule init + git submodule update. brew bundle로...
aftermath
소개 Aftermath는 Swift 기반의 오픈 소스 침해 대응 프레임워크입니다. Aftermath는 방어자가 손상된 호스트의 데이터를 수집하고 분석하기 위해 사용할 수 있습니다. Aftermath는 MDM이상적을 통해 배포하거나, 감염된 사용자의 명령줄에서 독립적으로 실행할 수도 있습니다. Aftermath는 먼저 일련의 모듈을 실행하여 정보를 수집합니다. 출력 결과는 -o 또는 --output 옵션을 통해 원하는 위치에 저장하거나, 기본적으로 /tmp 디렉토리에 기록됩니다. 수집이 완료되면 최종 zip/아카이브 파일을 최종...
aftermath
About Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected...
MacShellSwift
이 저장소에는 README가 없습니다...
CVE-2026-78903-SWIFT-Kick-to-the-Creds
CVE-2026-78903 — SWIFT 자격 증명에 대한 킥 SWIFT API 게이트웨이 JWT 알고리즘 혼동 필드| 값 ---|--- 심각도| 9.1 치명적 공격 경로| 네트워크 영향받는 버전| 3.2.0 – 3.2.4 발견자| 𝕍𝕠𝕤𝕤🥷 설명 SWIFT API 게이트웨이의 치명적인 잘못된 구성으로 인해 공격자가 서버가 RS256을 기대하는 동안 HS256 알고리즘을 사용하여 JWT를 위조할 수 있습니다. 서버는 공개 RSA 키를 HMAC 비밀 키로 사용하여 토큰을 잘못 검증하므로, 공격자가 유효한 관리자 토큰을 위조할 수...
CVE-2025-50460
CVE-2025-50460: Remote Code Execution in modelscope/ms-swift via unsafe PyYAML deserialization Status: Awaiting Analysis This CVE record has been marked for NVD enrichment efforts. A remote code execution RCE vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization...
CVE-2025-50472
CVE-2025-50472 ModelScope Ms-Swift ModelFileSystemCache Deserialization of Untrusted Data Remote Code Execution Vulnerability RCE PoC I uploaded a code repository containing a malicious .mdl file to ModelScope for testing purposes. It can be used directly during testing. The link is:...
CVE-2023-6289
CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - Missing Authorization to Unauthenticated Settings Export Description The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the on functionality hooked via admininit functi...