Alternatives and similar repositories for yardens-sb-profs

Users that are interested in yardens-sb-profs are comparing it to the libraries listed below

• Proteas / a7-sep-bug
  a7 sep bug
  ☆54Updated last year
• alfiecg24 / coretrust_cli
  A tool to call CoreTrust evaluation from userland
  ☆20Updated last year
• jonpalmisc / respawn
  Experimentation environment for checkm8-vulnerable devices
  ☆54Updated last year
• CRKatri / trustcache
  Interact with trustcaches
  ☆42Updated 2 years ago
• lechium / iPhone_OS_17.0_21A328
  Private headers & entitlements for daemons, frameworks, applications private frameworks and more for iOS 17.0 21A328
  ☆25Updated last year
• Cryptiiiic / hookra1n
  A custom shellcode hook for checkra1n 0.1337 written in c!
  ☆38Updated last year
• iOSForensics / pyimg4
  A python lib for manipulating IMG4, IM4M and IM4P files
  ☆12Updated last year
• 0x7ff / golb
  Mapping physical memory to user space (EL0) on iOS.
  ☆74Updated 2 years ago
• HoolockLinux / m1n1_old
  This repository is archived. Please refer to https://github.com/HoolockLinux/m1n1 instead.
  ☆35Updated 5 months ago
• Proteas / sep-fw-dyld-cache-loader
  IDA loader for SEP firmware with dyld cache support.
  ☆58Updated last year
• m1stadev / eyepatch
  An *OS bootchain patching library.
  ☆15Updated last week
• felix-pb / remote_pocs
  Some old unexploited remote kernel memory corruption PoCs
  ☆24Updated last year
• JonathanSeals / Ancient-iBoot-Fun
  iOS 5.x iBoot fun for the whole family!
  ☆43Updated 5 years ago
• haiyuidesu / iBoot64Finder
  Find some iBoot functions in an iBoot64.
  ☆41Updated 4 years ago
• haiyuidesu / sephelper
  IDA loader to help with SEPROM reverse engineering.
  ☆34Updated 8 months ago
• justtryingthingsout / sepsplit-rs
  SEP firmware splitter, made in rust.
  ☆40Updated 10 months ago
• alfiecg24 / Presentations
  ☆44Updated 3 months ago
• miniexploit / pyipatcher
  iOS bootchain patchers in Python
  ☆13Updated last year
• haiyuidesu / iBoot64Patcher
  Patch the iBoot64 with generic patches.
  ☆53Updated last year
• matteyeux / seprom-loader
  Binary Ninja loader for 64 bits Apple SEPROMs
  ☆54Updated last month
• Siguza / aea1
  AEA metadata dumper
  ☆48Updated 3 months ago
• tjkr0wn / xnu_gym
  xnu_gym is a pongoOS module that patches XNU to reintroduce previously known and patched vulnerabilities. This is an easy way to practice…
  ☆57Updated 4 years ago
• nicolas17 / ipsw_keys
  Extract iOS firmware keys using on-device AES engine
  ☆42Updated 3 years ago
• opa334 / fishhook
  A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
  ☆21Updated 8 months ago
• SongXiaoXi / Reductant
  Translate and patch arm64e binaries or macOS arm64 binaries to run on an arm64 iPhone at runtime.
  ☆68Updated 3 years ago
• skr0x1c0 / binja_kc
  Plugin for loading MachO kernelcache and dSYM files to Binary Ninja
  ☆37Updated 5 months ago
• citruz / pongoOS-QEMU
  Fork of PongoOS which can be run in QEMU
  ☆69Updated 4 years ago
• EthanArbuckle / objfind
  Search running processes on iOS for instances of a given objc class.
  ☆51Updated 7 months ago
• GeoSn0w / CVE-2025-24203-iOS-Exploit-With-Error-Logging
  Slightly improved exploit of the CVE-2025-24203 iOS vulnerability by Ian Beer of Google Project Zero
  ☆30Updated 3 months ago
• NyanSatan / checkm8_bootkit
  Boot arbitrary iBoot via ipwndfu's custom protocol on some cursed platforms and more
  ☆58Updated 7 months ago