GeoSn0w / hspGuard
Checks macOS for Kernel Task Port. It may help detect intrusive kexts that would leak the kernel task.
☆21Updated last year
Alternatives and similar repositories for hspGuard:
Users that are interested in hspGuard are comparing it to the libraries listed below
- Reexport symbols for Mach-O and ELF☆38Updated 6 years ago
- empty_list - exploit for p0 issue 1564 (CVE-2018-4243) iOS 11.0 - 11.3.1 kernel r/w☆19Updated 6 years ago
- crappy "debugger"-like memory reader, to inspect 32bit ios kernel after it paniced☆15Updated 6 years ago
- Radare2 plugin to parse modern iOS 64-bit kernel caches☆29Updated 5 years ago
- ios kernel class tree☆23Updated 5 years ago
- Binary Format of iOS 13 Sandbox Profile Collection☆51Updated 5 years ago
- Get kernel symbols on device. No jailbreak required (note: unslid addresses)☆26Updated 6 years ago
- iOS10~iOS13 Edition) Dump Kext information from iOS kernel cache. Applicable to the kernel which dump from memory. The disassembly framew…☆20Updated 3 years ago
- ☆36Updated last year
- Fun with iOS☆13Updated 11 years ago
- macOS kext for host_special_port(4) patch☆88Updated last year
- Small util to discover OS X sysent via bruteforce☆33Updated 8 years ago
- Accessing physical memory on iOS.☆51Updated 4 years ago
- IDA plugin to extract Mach-O binaries located in the disassembly or data☆19Updated 5 years ago
- Scripts were written by me☆19Updated 3 months ago
- iOS Userland Forensic Dumping Framework for iOS 7/8☆19Updated 6 years ago
- ☆31Updated 5 years ago
- This tool will help to fix the Mach-O header of iOS kernel which dump from the memory. So that IDA or function symbol-related tools can l…☆22Updated 7 years ago
- Research on Apple's USB protocols☆30Updated 5 years ago
- use https://github.com/argp/iBoot64helper which is the orginal repo and far more advanced☆33Updated 5 years ago
- ☆18Updated 3 years ago
- Google Project Zero OS X Vul Report Analysis☆34Updated 7 years ago
- Change your kernel version☆35Updated 6 years ago
- Tool for reverse-engineering Apple's sandbox☆56Updated 7 years ago
- iBoot64 Payload Development Toolkit☆42Updated 7 years ago
- Sniffing on port messages☆25Updated 8 years ago
- CVE-2018-4280: Mach port replacement vulnerability in launchd on macOS 10.13.5 leading to local privilege escalation and SIP bypass.☆58Updated 6 years ago
- ☆29Updated 4 years ago
- Apple's XNU automatically updated live.☆25Updated 3 years ago
- xnu exploitation toolkit☆16Updated 8 years ago