Alternatives and similar repositories for KextRW

Users that are interested in KextRW are comparing it to the libraries listed below

• R00tkitSMM / Pishi

  View on GitHub
  Pishi is a code coverage tool like kcov for macOS.
  ☆75Apr 17, 2025Updated 9 months ago
• alfiecg24 / Vertex

  View on GitHub
  iOS kernel exploit for iOS 14 and 15
  ☆103Jun 29, 2025Updated 7 months ago
• wangtielei / POCs

  View on GitHub
  ☆126Aug 3, 2024Updated last year
• alfiecg24 / libprejailbreak

  View on GitHub
  A pre-jailbreak library for devices running iOS 12 - 14.
  ☆44Dec 31, 2024Updated last year
• jprx / PacmanKit

  View on GitHub
  An IOKit kext designed for microarchitectural security research on M1
  ☆46Oct 30, 2022Updated 3 years ago
• amarioguy / libtatsu

  View on GitHub
  Library handling the communication with Apple's Tatsu Signing Server (TSS)
  ☆10Mar 21, 2025Updated 10 months ago
• cellebrite-labs / sandblaster

  View on GitHub
  Reversing the Apple sandbox
  ☆163Dec 7, 2025Updated 2 months ago
• Siguza / IOKernelRW

  View on GitHub
  Insecurity as an IOService
  ☆95Mar 25, 2025Updated 10 months ago
• alfiecg24 / Trigon

  View on GitHub
  Deterministic kernel exploit based on CVE-2023-32434.
  ☆120Aug 7, 2025Updated 6 months ago
• blacktop / go-hypervisor

  View on GitHub
  Apple Hypervisor.framework bindings for Golang
  ☆34Jan 12, 2026Updated last month
• WHW0x455 / CVE-2023-41992

  View on GitHub
  ☆57Oct 22, 2025Updated 3 months ago
• cellebrite-labs / PPLorer

  View on GitHub
  IDA plugin that resolves PPL calls to the actual underlying PPL function.
  ☆56Feb 28, 2023Updated 2 years ago
• wh1te4ever / CVE-2024-54498-PoC

  View on GitHub
  Escape macOS Sandbox using sharedfilelistd exploit
  ☆63Jun 28, 2025Updated 7 months ago
• gergelykalman / CVE-2023-32428-a-macOS-LPE-via-MallocStackLogging

  View on GitHub
  ☆19Nov 26, 2024Updated last year
• antoniozekic / papers_and_slides

  View on GitHub
  ☆264Jul 3, 2025Updated 7 months ago
• wh1te4ever / xnu_1day_practice

  View on GitHub
  ☆68Jan 29, 2026Updated 2 weeks ago
• potmdehex / slides

  View on GitHub
  Slides for presentations held at conferences
  ☆47Jan 2, 2023Updated 3 years ago
• opa334 / sandbox_extension_generator

  View on GitHub
  iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives
  ☆132Jun 10, 2022Updated 3 years ago
• 0x36 / weightBufs

  View on GitHub
  ANE kernel r/w exploit for iOS 15 and macOS 12
  ☆302Nov 20, 2022Updated 3 years ago
• opa334 / fishhook

  View on GitHub
  A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
  ☆23Dec 19, 2024Updated last year
• fmyyss / XNU_KERNEL_RESEARCH

  View on GitHub
  ☆140Feb 17, 2024Updated last year
• blacktop / darwin-xnu-build

  View on GitHub
  XNU kernel, Kernel Collection and CodeQL build scripts
  ☆269Jan 8, 2026Updated last month
• opa334 / Presentations

  View on GitHub
  ☆84May 20, 2025Updated 8 months ago
• alfiecg24 / coretrust_cli

  View on GitHub
  A tool to call CoreTrust evaluation from userland
  ☆21Apr 30, 2024Updated last year
• bjrjk / CVE-2024-8381

  View on GitHub
  CVE-2024-8381: A SpiderMonkey Interpreter Type Confusion Bug.
  ☆15Feb 12, 2025Updated last year
• wh1te4ever / WebKit-Bug-256172

  View on GitHub
  Safari 1day RCE Exploit
  ☆153Mar 22, 2025Updated 10 months ago
• tomitokics / IOSurface_poc18

  View on GitHub
  ☆51Nov 29, 2024Updated last year
• ChiChou / XpcScope

  View on GitHub
  Yet another xpc sniffer
  ☆132Aug 12, 2025Updated 6 months ago
• felix-pb / kfd

  View on GitHub
  kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.
  ☆971Jan 21, 2024Updated 2 years ago
• wh1te4ever / CVE-2025-31258-PoC

  View on GitHub
  1day practice - Escape macOS sandbox (partial) using RemoteViewServices
  ☆42May 12, 2025Updated 9 months ago
• skr0x1c0 / binja_kc

  View on GitHub
  Plugin for loading MachO kernelcache and dSYM files to Binary Ninja
  ☆40Mar 23, 2025Updated 10 months ago
• b1n4r1b01 / n-days

  View on GitHub
  ☆523Sep 28, 2025Updated 4 months ago
• Proteas / a7-sep-bug

  View on GitHub
  a7 sep bug
  ☆55Sep 26, 2023Updated 2 years ago
• R00tkitSMM / CVE-2024-27804

  View on GitHub
  POC for CVE-2024-27804
  ☆139May 14, 2024Updated last year
• Muirey03 / CVE-2022-42864

  View on GitHub
  Proof-of-concept for the CVE-2022-42864 IOHIDFamily race condition
  ☆66Jan 20, 2023Updated 3 years ago
• pinauten / iDownload

  View on GitHub
  ☆15Oct 27, 2022Updated 3 years ago
• cellebrite-labs / ida_kcpp

  View on GitHub
  An IDAPython module for enhancing c++ support on top of ida_kernelcache
  ☆140May 15, 2025Updated 9 months ago
• Siguza / libkrw

  View on GitHub
  Lib kernel r/w
  ☆189Nov 1, 2021Updated 4 years ago
• wangtielei / Slides

  View on GitHub
  slides for conference talks
  ☆105Jul 27, 2025Updated 6 months ago