KpwnZ / d22-qemuLinks
A QEMU fork emulates D22AP/D221AP devices(iPhone X).
☆42Updated last year
Alternatives and similar repositories for d22-qemu
Users that are interested in d22-qemu are comparing it to the libraries listed below
Sorting:
- a7 sep bug☆54Updated 2 years ago
- iBoot/SEPOS decryption kit for JTAGgable iOS device prototypes☆125Updated last month
- Patch the iBoot64 with generic patches.☆52Updated last year
- Translate and patch arm64e binaries or macOS arm64 binaries to run on an arm64 iPhone at runtime.☆74Updated 3 years ago
- ☆45Updated 5 months ago
- iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives☆131Updated 3 years ago
- ☆67Updated 3 years ago
- A custom shellcode hook for checkra1n 0.1337 written in c!☆35Updated last year
- 32/64 bit SecureROM/iBoot loader for IDA Pro. Also supports loading and decrypting encrypted .im4ps within IDA.☆73Updated 3 years ago
- iOS 3.0-10.3.4 tfp0 kernel exploit☆99Updated 2 months ago
- Binary Ninja loader for 64 bits Apple SEPROMs☆56Updated last month
- Deterministic kernel exploit based on CVE-2023-32434.☆106Updated 2 months ago
- Fork of PongoOS which can be run in QEMU☆69Updated 4 years ago
- ☆138Updated last year
- Collection of my bugs and CVE, with PoC or writeup☆52Updated last year
- Interact with trustcaches☆41Updated 2 years ago
- Output from running Yarden's sandblaster on an iPhone15,2's iOS17 kernelcaches☆16Updated last year
- macOS kext with kernel R/W, kalloc and kcall☆95Updated 4 months ago
- IDA loader for Apple's 64 bits iBoot, SecureROM and AVPBooter☆154Updated 11 months ago
- Experimentation environment for checkm8-vulnerable devices☆54Updated last year
- iOS kernel exploit for iOS 14 and 15☆98Updated 3 months ago
- Insecurity as an IOService☆90Updated 6 months ago
- This repository is archived. Please refer to https://github.com/HoolockLinux/m1n1 instead.☆31Updated 7 months ago
- IDA loader to help with SEPROM reverse engineering.☆35Updated last month
- A arm offsetfinder. It finds offsets, patches, parses Mach-O and even supports IMG4/IMG3☆148Updated 4 months ago
- Find some iBoot functions in an iBoot64.☆40Updated 4 years ago
- ☆50Updated last week
- Failed experiment for running command line macOS tools on jailbroken iOS. There's nothing useful here.☆58Updated 4 years ago
- A python lib for manipulating IMG4, IM4M and IM4P files☆11Updated last year
- Boot arbitrary iBoot via ipwndfu's custom protocol on some cursed platforms and more☆59Updated last month