AndSecYi

AirportBrcmFixup

An open source kernel extension providing a set of patches required for non-native Airport Broadcom Wi-Fi cards.

airspy

AirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training https://www.nowsecure.com/event/advanced-frida-and-radare-a-hackers-delight/

CVE-2021-1883

fairplay_research

Some RE work on Apple's Fairplay DRM

FreeTheSandbox_LPE_POC_13.7

Jailbreak for iOS 13.7 and earlier

fuzzing-silk-with-afl

Fuzzing SILK with AFL

FuzzingPaper

Recent Fuzzing Paper

img4lib

image4 vfs

ios_15_rce

Remote Code Execution V1 For iOS 15 sent through airdrop after the device was connected to a trusted host

Jackalope

Binary, coverage-guided fuzzer for Windows and macOS

kobackupdec

Huawei backup decryptor

Lilu

Arbitrary kext and process patching on macOS

LLDBagility

A tool for debugging macOS virtual machines

mbp2018-bridge-drv

A driver for MacBook models 2018 and newer, which makes the keyboard, mouse and audio output work.

n-days

neural-engine

Everything we actually know about the Apple Neural Engine (ANE)

oob_events

kernel exploit for Apple iOS 13.X

opendrop

An open Apple AirDrop implementation written in Python

p-joker

p-joker -- iOS/MacOS kernelcache/kexts analysis tool

passionfruit

[WIP] Crappy iOS app analyzer

pocs

Proof-of-Concepts for fixed bugs

pwn-my

iOS 14.5 WebKit/Safari based Jailbreak

pymobiledevice3

Pure python3 implementation for working with iDevices (iPhone, etc...).

qemu-vm-escape

research

src

IDAPython project for Hex-Ray's IDA Pro

toothpicker

vmware-exploitation

A collection of links related to VMware escape exploits

xattr-oob-swap

Demo exploit code for CVE-2020-27904, a tfp0 bug.

yggdrasil-go

An experiment in scalable routing as an encrypted IPv6 overlay network