Alternatives and similar repositories for trustcache

Users that are interested in trustcache are comparing it to the libraries listed below

• EthanArbuckle / objfind
  Search running processes on iOS for instances of a given objc class.
  ☆55Updated last year
• Proteas / sep-fw-dyld-cache-loader
  IDA loader for SEP firmware with dyld cache support.
  ☆66Updated last year
• alfiecg24 / coretrust_cli
  A tool to call CoreTrust evaluation from userland
  ☆21Updated last year
• iOSForensics / pyimg4
  A python lib for manipulating IMG4, IM4M and IM4P files
  ☆11Updated 2 years ago
• Cryptiiiic / hookra1n
  A custom shellcode hook for checkra1n 0.1337 written in c!
  ☆35Updated 2 years ago
• markie-dev / desc_race_A15
  CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)
  ☆48Updated 3 years ago
• jsherman212 / ktrw
  An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.
  ☆59Updated 4 years ago
• felix-pb / remote_pocs
  Some old unexploited remote kernel memory corruption PoCs
  ☆25Updated last year
• GeoSn0w / CVE-2025-24203-iOS-Exploit-With-Error-Logging
  Slightly improved exploit of the CVE-2025-24203 iOS vulnerability by Ian Beer of Google Project Zero
  ☆40Updated 3 months ago
• jakeajames / SneakyShot
  Kernel-based method to take screenshots on iOS, works with encrypted videos.
  ☆60Updated 4 years ago
• jonpalmisc / respawn
  Experimentation environment for checkm8-vulnerable devices
  ☆57Updated 2 years ago
• wh1te4ever / xnu_1day_practice
  ☆68Updated this week
• Muirey03 / iometa
  arm64 IOKit class dumper
  ☆20Updated 11 months ago
• tihmstar / desc_race-fun_public
  ☆67Updated 3 years ago
• 0x7ff / golb
  Mapping physical memory to user space (EL0) on iOS.
  ☆74Updated 3 years ago
• opa334 / sandbox_extension_generator
  iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives
  ☆132Updated 3 years ago
• opa334 / xnuspy_syscall_logger
  Log all syscalls executed by a process (iOS / checkra1n / xnuspy)
  ☆71Updated 3 years ago
• Siguza / IOKernelRW
  Insecurity as an IOService
  ☆95Updated 10 months ago
• 0cyn / iBoot-IDA
  32/64 bit SecureROM/iBoot loader for IDA Pro. Also supports loading and decrypting encrypted .im4ps within IDA.
  ☆73Updated 3 years ago
• nicolas17 / ipsw_keys
  Extract iOS firmware keys using on-device AES engine
  ☆41Updated 3 years ago
• haiyuidesu / iBoot64Patcher
  Patch the iBoot64 with generic patches.
  ☆52Updated last year
• opa334 / Presentations
  ☆84Updated 8 months ago
• Siguza / aea1
  AEA metadata dumper
  ☆49Updated 8 months ago
• haiyuidesu / sephelper
  IDA loader to help with SEPROM reverse engineering.
  ☆35Updated 5 months ago
• 0x7ff / dimentio
  Tool for getting and setting nonce without triggering KPP/KTRR/PAC.
  ☆113Updated 2 years ago
• jevinskie / dylibify
  Transform any ARM macho executable to a dynamic library
  ☆43Updated 10 months ago
• blacktop / ipsw-py
  A Python library for the ipsw daemon API
  ☆27Updated 2 years ago
• DerekSelander / dsc_symbols
  symbol dumps of iOS shared caches
  ☆34Updated 3 years ago
• blacktop / yardens-sb-profs
  Output from running Yarden's sandblaster on an iPhone15,2's iOS17 kernelcaches
  ☆18Updated last year
• robre / frida-scripts
  ☆16Updated 4 years ago