Jailbreaks / iBoot-research

Related projects ⓘ

Alternatives and complementary repositories for iBoot-research

• shinvou / decrypt0r
  Automatically download and decrypt SecureRom stuff (iBSS, iBEC, iBoot, etc.) for all iOS versions available.
  ☆50Updated 4 years ago
• Siguza / misc
  ☆35Updated last year
• userlandkernel / USBusted
  Research on Apple's USB protocols
  ☆29Updated 4 years ago
• xerub / patchfinder64
  iOS ARM64 kernel patchfinder
  ☆74Updated 5 years ago
• userlandkernel / ios-unstripped-kexts
  Unstripped iOS kernel extensions and more. More coming soon.
  ☆57Updated 4 years ago
• kpwn / termz
  simple serial console suitable for use with serialsh and iBoot
  ☆46Updated 5 years ago
• UKERN-Developers / darwin-xnu
  Apple's XNU automatically updated live.
  ☆25Updated 3 years ago
• EliseZeroTwo / iBoot-Binja-Loader
  iBoot/SecureROM Loader
  ☆32Updated last year
• Siguza / hsp4
  macOS kext for host_special_port(4) patch
  ☆87Updated 11 months ago
• NyanSatan / checkm8_bootkit
  Boot arbitrary iBoot on S5L8747X, S5L8947X and S7002, T8002, T8004 ("watch" branch)
  ☆43Updated 3 years ago
• BlackwingHQ / iBoot64Binja
  Binary View plugin for reverse engineering iBoot like binaries with Binary Ninja
  ☆50Updated 9 months ago
• haiyuidesu / sephelper
  IDA loader to help with SEPROM reverse engineering.
  ☆32Updated 4 months ago
• xerub / ibex64
  iBoot64 Payload Development Toolkit
  ☆42Updated 7 years ago
• xerub / ibex
  iBoot Payload Development Toolkit
  ☆40Updated 7 years ago
• xerub / img4tool
  image4
  ☆69Updated 6 years ago
• in7egral / ios-jailbreak-patchfinder64
  Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
  ☆65Updated 7 years ago
• mwpcheung / AppleSEPFirmware
  Apple SEP reverse
  ☆50Updated 4 years ago
• Haifisch / kuzz
  ios iokit fuzzer (really probably isn't that useful anymore tbh)
  ☆60Updated 7 years ago
• freedomtan / iOS-device-tree-dump
  Dump non-encrypted iOS device tree extracted from im4p
  ☆40Updated 2 years ago
• Siguza / dt
  DeviceTree
  ☆75Updated 3 weeks ago
• 0cyn / iBoot-IDA
  32/64 bit SecureROM/iBoot loader for IDA Pro. Also supports loading and decrypting encrypted .im4ps within IDA.
  ☆68Updated 2 years ago
• haiyuidesu / iBoot64Patcher
  Patch the iBoot64 with generic patches.
  ☆48Updated 7 months ago
• haiyuidesu / iBoot64Finder
  Find some iBoot functions in an iBoot64.
  ☆40Updated 3 years ago
• xerub / async_wake_ios
  not a jailbreak
  ☆35Updated 6 years ago
• 0x7ff / maphys
  Accessing physical memory on iOS.
  ☆49Updated 4 years ago
• sektioneins / xpwntool-lite
  Lightweight version of xpwntool just for decrypting IMG3 firmware files
  ☆45Updated 3 years ago
• jsherman212 / iosdbg
  experimental iOS debugger
  ☆24Updated 4 years ago
• 0x7ff / golb
  Mapping physical memory to user space (EL0) on iOS.
  ☆66Updated last year
• Synacktiv-contrib / lightspeed
  PoC for the iOS 11.4.1 and MacOS 10.13 kernel vulnerability in lio_listio
  ☆76Updated 6 years ago
• Siguza / ios-build
  Build files for things related to iOS
  ☆36Updated 2 years ago