A raw dump of my Apple MacOS research. Some likely can be ported over to other Apple OSes. Alot of this should likely be patched, but I did not report many of these as they didnt meet the bar for a bounty.
☆109Nov 4, 2026Updated this week
Alternatives and similar repositories for AppleResearch
Users that are interested in AppleResearch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Static reverse-engineering notes, patch-diffs, and trust-boundary analysis of modern iOS☆76Updated this week
- PoC & panic evidence for CVE-2026-112705: AppleAVE2 kernel OOB write on iOS 27.0.1 (fixed in 27.2) via VideoToolbox NumberOfTemporalLayer…☆53Updated this week
- 📱 Reach any screen with sim-use at Jev speed☆12Oct 25, 2026Updated last week
- A CLI tool to extract dylib from dyld_shared_cache☆14Apr 18, 2026Updated 6 months ago
- ☆29Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Generate private framework headers for iOS simulator runtimes and macOS system frameworks (dyld shared cache aware).☆19Updated this week
- A development tweak for jailbroken iOS that lets you inspect any UIKit process using FLEX or a web browser.☆17Aug 22, 2026Updated 2 months ago
- ☆59Oct 27, 2026Updated last week
- Security research writeups☆19Aug 8, 2026Updated 2 months ago
- 403 Access Bypass Tester☆126Oct 13, 2026Updated 3 weeks ago
- Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own person…☆160Dec 18, 2025Updated 10 months ago
- A Swift library to deactivate fishhook. (Anti-FishHook)☆26Jun 21, 2026Updated 4 months ago
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆48Aug 1, 2026Updated 3 months ago
- CVE-2026-112445: The Simplest macOS Local Privilege Escalation to Date☆53Oct 29, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- iOS 13.7 second-system build and install tool for iPhone 6 Plus (N56AP)☆48Updated this week
- Desarrollo paso a paso de cargadores de payloads, escritos exclusivamente en lenguaje Ensamblador x86-64 para Linux, sin dependencias ext…☆11Jun 1, 2025Updated last year
- A reference manual for the Apple Neural Engine☆18Oct 15, 2026Updated 3 weeks ago
- Repository to gather the BOF files I will be developing☆12Oct 1, 2024Updated 2 years ago
- 🪝Re-implementation of fishhook with Swift using MachOKit☆32Jun 21, 2026Updated 4 months ago
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆23Jun 28, 2024Updated 2 years ago
- ☆14Apr 9, 2026Updated 6 months ago
- Content discovery and fuzzing with HTTP/3 support (100k requests per second)☆138Updated this week
- Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain …☆31Sep 21, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Library that provides Python examples for interacting with the Cobalt Strike REST API☆25Nov 26, 2025Updated 11 months ago
- Android IPC research workbench. Build, capture, replay and fuzz Intents.☆13Jun 11, 2026Updated 4 months ago
- A Chrome extension that automatically scans web pages and internal links for user-defined keywords, storing results and sending notificat…☆26Sep 28, 2025Updated last year
- 📜 A Swift Library for dumping objective-c class/protocol/method/property/ivar informations☆32Aug 8, 2026Updated 2 months ago
- Play with libmalloc☆19Jan 2, 2024Updated 2 years ago
- ☆25Oct 27, 2026Updated last week
- 🐛 A list of writeups from the MSRC (Microsoft) Bug Bounty program☆76Updated this week
- Reversible HTML and JavaScript prompt decoys with opaque per-insertion keys.☆59Updated this week
- Caido plugin for jxscout☆17Jul 7, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Summary of the SPTM research on iOS 27.0.1, iPhone Air☆91Oct 21, 2026Updated 2 weeks ago
- Subdomain Scanner - the most exhaustive tool for sub-domain recognition and mapping to related IPs and ASNs☆18Jul 4, 2025Updated last year
- Why vulnerability discovery is difficult mathematically☆30Jul 19, 2026Updated 3 months ago
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆16Aug 26, 2026Updated 2 months ago
- Theme for Sublime Text inspired by Adobe Brackets☆10Updated this week
- Windows host hardening auditor and remediation tool in PowerShell: CIS, DISA STIG, Essential Eight checks, reversible fixes, optional AI …☆21Updated this week
- Bug Bounty statistics tool.☆34Nov 17, 2022Updated 3 years ago