DerekSelander

LLDB

A collection of LLDB aliases/regexes and Python scripts to aid in your debugging sessions

dsdump

An improved nm + Objective-C & Swift class-dump

symbol-interposing

dsc_symbols

symbol dumps of iOS shared caches

permasigner

🖊 Permanently signs IPAs on jailbroken iDevices (persists on stock).

apple-malicious-baseband

Sample of a Malicious baseband signed by Apple

CVE-2021-30860

Collection of materials relating to FORCEDENTRY, will eventually delete this repo and migrate the materials to my main exploit repo once finished

dyld-shared-cache-extractor

A CLI for extracting libraries from Apple's dyld shared cache file

iomfb-exploit

Exploit for CVE-2021-30807

IOMFB_integer_overflow_poc

iOS

Here you can find write ups for iOS Vulnerabilities that have been released.

ios-analyticsd-pre14.7-exploit

ios-gamed-0day

iOS 15 0-day exploit

MacRootKit

A RootKit for macOS that can perform kernel read/write, hook kernel and userspace functions, set custom conditional breakpoints, etc

orthrus

Uses Apple's MDM protocol to backdoor a device with a malicious profile.

public

sandbox_extension_generator

iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives

yadsct

placeholder repo for tool accompanying Adv Debgging v4 book.

AirGuard

Protect yourself from being tracked 🌍 by AirTags 🏷 and Find My accessories 📍

AnyKernel3

AnyKernel, Evolved

blog-indexeddb-safari-leaks-demo

Demo showcasing information leaks resulting from an IndexedDB same-origin policy violation in WebKit.

desc_race

iOS 15.1 kernel exploit POC for CVE-2021-30955

hoox_kpf

tfp(ANY) if root

jevxpctrace

Hopefully an insightful XPC tracer that helps vulerability research by tracing server and client call stacks

MIP

MIP – macOS Injection Platform

PongoOS

pongoOS

ssl-kill-switch3

Next Generation SSLKillSwitch with much more support!

TrollNonce

Boot nonce utility for TrollStore

TrollStore

Jailed iOS app that can install IPAs permanently with arbitary entitlements and root helpers because it trolls Apple

xnuspy

an iOS kernel function hooking framework for checkra1n'able devices