Alternatives and similar repositories for KextRW

Users that are interested in KextRW are comparing it to the libraries listed below

• blacktop / symbolicator
  `ipsw` symbolication signatures
  ☆74Updated last week
• Proteas / sep-fw-dyld-cache-loader
  IDA loader for SEP firmware with dyld cache support.
  ☆58Updated last year
• Siguza / IOKernelRW
  Insecurity as an IOService
  ☆90Updated 7 months ago
• Proteas / a7-sep-bug
  a7 sep bug
  ☆53Updated 2 years ago
• wh1te4ever / xnu_1day_practice
  ☆56Updated last week
• alfiecg24 / Trigon
  Deterministic kernel exploit based on CVE-2023-32434.
  ☆105Updated 3 months ago
• opa334 / Presentations
  ☆81Updated 5 months ago
• aemmitt-ns / funtime
  Objective-C runtime tracing tool
  ☆40Updated 2 years ago
• WHW0x455 / CVE-2023-41992
  ☆55Updated 3 weeks ago
• Siguza / tachy0n
  iOS 13.5 ✌️
  ☆45Updated 5 months ago
• droe / binja-blocks
  Apple Blocks Plugin for Binary Ninja
  ☆33Updated 2 months ago
• pwn0rz / xnu-build
  xnu build script
  ☆69Updated 2 years ago
• FFRI / CVE-2025-24204
  PoC and technical details of CVE-2025-24204
  ☆66Updated last month
• jonpalmisc / respawn
  Experimentation environment for checkm8-vulnerable devices
  ☆54Updated last year
• opa334 / sandbox_extension_generator
  iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives
  ☆132Updated 3 years ago
• cellebrite-labs / sandblaster
  Reversing the Apple sandbox
  ☆150Updated last year
• felix-pb / remote_pocs
  Some old unexploited remote kernel memory corruption PoCs
  ☆25Updated last year
• CRKatri / trustcache
  Interact with trustcaches
  ☆41Updated 2 years ago
• 0cyn / ksuite
  My BinaryNinja toolkit I use for iOS centric RE || Prerelease!
  ☆46Updated 2 years ago
• alfiecg24 / Presentations
  ☆44Updated 5 months ago
• EthanArbuckle / objfind
  Search running processes on iOS for instances of a given objc class.
  ☆54Updated 10 months ago
• cellebrite-labs / PacXplorer
  IDA plugin to find code cross references to virtual functions using PAC codes
  ☆146Updated 3 years ago
• ChiChou / ios-debug.py
  Shortcut to automate your iproxy, debugserver, lldb workflow
  ☆41Updated last year
• Muirey03 / CVE-2022-42864
  Proof-of-concept for the CVE-2022-42864 IOHIDFamily race condition
  ☆65Updated 2 years ago
• justtryingthingsout / sepsplit-rs
  SEP firmware splitter, made in rust.
  ☆40Updated last year
• 0x7ff / golb
  Mapping physical memory to user space (EL0) on iOS.
  ☆73Updated 2 years ago
• pattern-f / xattr-oob-swap
  Demo exploit code for CVE-2020-27904, a tfp0 bug.
  ☆66Updated 4 years ago
• cellebrite-labs / ida_kernelcache
  An IDA Toolkit for analyzing iOS kernelcaches.
  ☆108Updated 5 months ago
• matteyeux / ida-iboot-loader
  IDA loader for Apple's 64 bits iBoot, SecureROM and AVPBooter
  ☆153Updated last year
• YungRaj / DarwinKit
  A general purpose toolkit to make vulnerability research on macOS easier.
  ☆83Updated this week