Alternatives and similar repositories for KextRW

Users that are interested in KextRW are comparing it to the libraries listed below

• Proteas / sep-fw-dyld-cache-loader
  IDA loader for SEP firmware with dyld cache support.
  ☆58Updated last year
• blacktop / symbolicator
  `ipsw` symbolication signatures
  ☆71Updated 2 weeks ago
• Siguza / IOKernelRW
  Insecurity as an IOService
  ☆90Updated 7 months ago
• opa334 / Presentations
  ☆80Updated 5 months ago
• Proteas / a7-sep-bug
  a7 sep bug
  ☆54Updated 2 years ago
• wh1te4ever / xnu_1day_practice
  ☆50Updated last week
• pwn0rz / xnu-build
  xnu build script
  ☆69Updated 2 years ago
• aemmitt-ns / funtime
  Objective-C runtime tracing tool
  ☆40Updated 2 years ago
• alfiecg24 / Trigon
  Deterministic kernel exploit based on CVE-2023-32434.
  ☆106Updated 2 months ago
• jonpalmisc / respawn
  Experimentation environment for checkm8-vulnerable devices
  ☆54Updated last year
• ChiChou / ios-debug.py
  Shortcut to automate your iproxy, debugserver, lldb workflow
  ☆40Updated 11 months ago
• WHW0x455 / CVE-2023-41992
  ☆52Updated last month
• droe / binja-blocks
  Apple Blocks Plugin for Binary Ninja
  ☆34Updated last month
• FFRI / CVE-2025-24204
  PoC and technical details of CVE-2025-24204
  ☆62Updated 2 weeks ago
• pattern-f / xattr-oob-swap
  Demo exploit code for CVE-2020-27904, a tfp0 bug.
  ☆66Updated 4 years ago
• cellebrite-labs / PacXplorer
  IDA plugin to find code cross references to virtual functions using PAC codes
  ☆145Updated 3 years ago
• Siguza / tachy0n
  iOS 13.5 ✌️
  ☆44Updated 5 months ago
• jsherman212 / ktrw
  An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.
  ☆58Updated 4 years ago
• 0cyn / ksuite
  My BinaryNinja toolkit I use for iOS centric RE || Prerelease!
  ☆45Updated 2 years ago
• alfiecg24 / Presentations
  ☆45Updated 5 months ago
• felix-pb / remote_pocs
  Some old unexploited remote kernel memory corruption PoCs
  ☆25Updated last year
• alfiecg24 / Vertex
  iOS kernel exploit for iOS 14 and 15
  ☆98Updated 3 months ago
• jevinskie / xnu-trace
  Tracing of iOS/macOS binaries using HW single step and Frida DBI
  ☆81Updated 10 months ago
• cellebrite-labs / ida_kernelcache
  An IDA Toolkit for analyzing iOS kernelcaches.
  ☆108Updated 5 months ago
• Proteas / bindiff-tool
  An assistant for BinDiff
  ☆25Updated 2 years ago
• justtryingthingsout / sepsplit-rs
  SEP firmware splitter, made in rust.
  ☆40Updated last year
• Muirey03 / CVE-2022-42864
  Proof-of-concept for the CVE-2022-42864 IOHIDFamily race condition
  ☆66Updated 2 years ago
• CRKatri / trustcache
  Interact with trustcaches
  ☆41Updated 2 years ago
• cellebrite-labs / sandblaster
  Reversing the Apple sandbox
  ☆149Updated 11 months ago
• skr0x1c0 / binja_kc
  Plugin for loading MachO kernelcache and dSYM files to Binary Ninja
  ☆39Updated 7 months ago