A demonstration of read write using cve-2025-43529 and userland PAC bypass on iOS 26.1
☆108Aug 4, 2026Updated 2 months ago
Alternatives and similar repositories for pois0nSword
Users that are interested in pois0nSword are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An SPTM bypass for iOS 16 - 17.3.1☆183Aug 7, 2026Updated 2 months ago
- CVE-2026-43724 - Apple's published enough advisories about the issue, I'm not getting paid for any of my kernel bugs.☆23Jul 13, 2026Updated 3 months ago
- Sandbox escape PoC for iOS 26 and 27.☆278Aug 11, 2026Updated 2 months ago
- Building some cool stuff utilizing darksword kernel r/w exploit☆153Sep 28, 2026Updated 3 weeks ago
- Obsolete iOS jailbreak research using the now-patched TSS/Cryptex bug. Source shared for educational purposes. Not a new jailbreak releas…☆179Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A12/A13 PPL Bypass☆115Aug 7, 2026Updated 2 months ago
- pongoOS-loading non-destructive bootkit for iOS A12/13 devices☆55Aug 1, 2026Updated 2 months ago
- ☆55Oct 22, 2025Updated last year
- A DarkSword Kernel exploit C port supporting up to iOS 26.0.1☆91Jul 9, 2026Updated 3 months ago
- ☆52Oct 9, 2026Updated last week
- Write-ups and PoCs for iOS, macOS, and other Apple platforms.☆103Sep 22, 2026Updated last month
- CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)☆86Sep 4, 2026Updated last month
- exploit for cve-2025-43529☆86Jan 5, 2026Updated 9 months ago
- Let an ad-hoc signed binary carry Apple-private entitlements on macOS, by cdhash, without patching amfid☆29Sep 24, 2026Updated 3 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- IOGPUFamily bitmap_mask underflow → kernel heap OOB write. First public PoC. Original discovery by Wang Yu of Cyberserval.☆23Mar 18, 2026Updated 7 months ago
- GhostWave aka "P7 DarkSword" RCE☆100Oct 16, 2026Updated last week
- Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore.☆18Feb 1, 2026Updated 8 months ago
- CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4)☆58Aug 27, 2026Updated last month
- Something, mayhaps?☆113Jul 14, 2026Updated 3 months ago
- PoC for CVE-2026-28990, an ImageIO bug patched in iOS/macOS 26.5☆48Jun 2, 2026Updated 4 months ago
- A LiveContainer systemwide tweak allowing multitask apps to access task port and process info of each other☆43Jul 5, 2026Updated 3 months ago
- Attempt to manipulate platform process task port with CoreTrust bug alone☆110Apr 21, 2026Updated 6 months ago
- Useful resources for iOS hacking☆28Sep 26, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability☆40Sep 24, 2026Updated 3 weeks ago
- Example of CVE-2022-46689 aka MacDirtyCow.☆14Mar 1, 2023Updated 3 years ago
- List of lockdownd vulnerabilities in iOS 26.5☆19Oct 3, 2026Updated 2 weeks ago
- ☆83Jul 27, 2026Updated 2 months ago
- POC for CVE-2024-40815 (Construction is in its final stage ==IOS 17.0)☆13Nov 5, 2025Updated 11 months ago
- excalibur is a project that use DarkSword exploit for customize your iPhone, include some feature like Springboard injection, bypass 3 ap…☆46Apr 8, 2026Updated 6 months ago
- Filza Jailed Darksword, support iOS 17.0-26.0.1. This repo open source the tweak inject into the Filza iPA (4.0.0 and back, 4.0.2 seems c…☆533May 6, 2026Updated 5 months ago
- Tweaks for unusual iOS devices. This is certainly not for you.☆36Aug 7, 2026Updated 2 months ago
- Launch SpringBoard as an app☆62Jun 10, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PoC and technical details of CVE-2025-24204☆115Oct 7, 2025Updated last year
- watchOS kernel R/W + live process memory dumping on Apple Watch Series 4 (watchOS 10.6.2 - latest). Named after the children's book Peepo…☆30Jun 22, 2026Updated 4 months ago
- The leaked exploit toolkit for various iOS versions☆726Jun 18, 2026Updated 4 months ago
- iOS App to respring your Device on open.☆23Jun 13, 2026Updated 4 months ago
- ☆174Aug 13, 2026Updated 2 months ago
- Attempt to boot iOS 26 simulator on iOS 16 (WIP)☆177Oct 5, 2025Updated last year
- macOS VM engine for x86 Linux/KVM, built on cocoon. Boots real macOS guests (Sequoia, Tahoe) via QEMU + OpenCore + OVMF, with ghcr golden…☆54Oct 13, 2026Updated last week