shenyuanv

PoC

Proofs-of-concept

WebKit-RegEx-Exploit

dsc_fix

Aids in reverse engineering libraries from dyld_shared_cache in IDA

Osiris-Jailbreak

An incomplete iOS 11.2 -> iOS 11.3.1 Jailbreak

iextractor

Automate extraction from iOS firmware files (.ipsw)

pwn2own2018

A Pwn2Own exploit chain

APOLLO

Apple Pattern of Life Lazy Output'er

Undecimus

unc0ver jailbreak for iOS 11.0 - 12.4

Specs

The CocoaPods Master Repo

diaphora

Diaphora, the most advanced Free and Open Source program diffing tool.

awesome-frida

Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)

fancyss

fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.

rekall

Rekall Memory Forensic Framework

ROPMEMU

ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.

core_analyzer

A power tool to debug memory-related issues

libheap

python library to examine ptmalloc (the glibc userland heap implementation)

frida-ios-dump

pull decrypted ipa from jailbreak device

pwntools

CTF framework and exploit development library

superdump

A service for automated crash-dump analysis

r2frida

Radare2 and Frida better together.

blanket

CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.

ipsw-get

A tool to automate the bulk download of IPSWs

merlin_shadowsocks

fork https://github.com/hq450/fancyss

needle

The iOS Security Testing Framework

KSCrash

The Ultimate iOS Crash Reporter

plcrashreporter

Reliable, open-source crash reporting for iOS, macOS and tvOS

LycaJB

LycaJB is a project that aims to fill the gap in iOS 11.0 - 11.3.1 jailbreaks. While this jailbreak is specifically aimed at developers it could be turned into a public stable jailbreak which includes Cydia. Right now we had to make the hard decision to remove Cydia from LycaJB as it caused our test devices to bootloop. We are working hard to make this stable and ready for the public.

exploit_playground

Analysis of public exploits or my 1day exploits

futurerestore

(unmaintained) iOS upgrade and downgrade tool utilizing SHSH blobs (unofficial fork supporting iOS 11 and newer devices)

files