Alternatives and similar repositories for darwin-xnu

Users that are interested in darwin-xnu are comparing it to the libraries listed below

• userlandkernel / USBusted
  Research on Apple's USB protocols
  ☆30Updated 6 years ago
• jsherman212 / ktrw
  An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.
  ☆58Updated 4 years ago
• JonathanSeals / Ancient-iBoot-Fun
  iOS 5.x iBoot fun for the whole family!
  ☆43Updated 5 years ago
• haiyuidesu / sephelper
  IDA loader to help with SEPROM reverse engineering.
  ☆35Updated 2 months ago
• jsherman212 / iosdbg
  experimental iOS debugger
  ☆30Updated 5 years ago
• Siguza / hsp4
  macOS kext for host_special_port(4) patch
  ☆90Updated 2 years ago
• bazad / devicetree-parse
  A tool to parse Apple's binary device tree format.
  ☆57Updated 5 years ago
• tihmstar / kdp.py
  crappy "debugger"-like memory reader, to inspect 32bit ios kernel after it paniced
  ☆16Updated 6 years ago
• citruz / pongoOS-QEMU
  Fork of PongoOS which can be run in QEMU
  ☆69Updated 4 years ago
• kpwn / termz
  simple serial console suitable for use with serialsh and iBoot
  ☆47Updated 6 years ago
• Siguza / misc
  ☆39Updated 9 months ago
• haiyuidesu / iBoot64Finder
  Find some iBoot functions in an iBoot64.
  ☆40Updated 4 years ago
• 0x7ff / golb
  Mapping physical memory to user space (EL0) on iOS.
  ☆74Updated 2 years ago
• DerekSelander / dsc_symbols
  symbol dumps of iOS shared caches
  ☆33Updated 3 years ago
• Billy-Ellis / aslr-kernel-patch
  Tool to patch the ASLR slide generation in the kernel to disable user-land ASLR on 32-bit iOS
  ☆31Updated 4 years ago
• Proteas / sep-misc-A10-14.1-18A8395
  some research results of sep
  ☆20Updated 4 years ago
• CRKatri / trustcache
  Interact with trustcaches
  ☆41Updated 2 years ago
• freedomtan / iOS-device-tree-dump
  Dump non-encrypted iOS device tree extracted from im4p
  ☆39Updated 3 years ago
• jevinskie / dylibify
  Transform any ARM macho executable to a dynamic library
  ☆42Updated 8 months ago
• chr1s0x1 / Elysian
  JB ETA????
  ☆28Updated 4 years ago
• jakeajames / dylibify
  Transform any ARM macho executable to a dynamic library
  ☆77Updated 3 years ago
• tjkr0wn / xnu_gym
  xnu_gym is a pongoOS module that patches XNU to reintroduce previously known and patched vulnerabilities. This is an easy way to practice…
  ☆57Updated 4 years ago
• chr1s0x1 / pwnedOS11
  WIP iOS 11 - 12.2 & 13b1,b2 Safari Jailbreak
  ☆43Updated 5 years ago
• m1stadev / Criptam
  iOS firmware key decrypter
  ☆45Updated 2 years ago
• userlandkernel / ios-unstripped-kexts
  Unstripped iOS kernel extensions and more. More coming soon.
  ☆59Updated 5 years ago
• arandomdev / DyldExtractorC
  Extract Binaries from Apple's DYLD Shared Cache
  ☆19Updated 2 years ago
• xerub / patchfinder64
  iOS ARM64 kernel patchfinder
  ☆77Updated 6 years ago
• Jailbreaks / empty_list
  empty_list - exploit for p0 issue 1564 (CVE-2018-4243) iOS 11.0 - 11.3.1 kernel r/w
  ☆19Updated 7 years ago
• SongXiaoXi / Reductant
  Translate and patch arm64e binaries or macOS arm64 binaries to run on an arm64 iPhone at runtime.
  ☆76Updated 3 years ago
• matteyeux / sepfw-loader
  Binary Ninja loader for A12 SEP firmware
  ☆28Updated 4 years ago