Alternatives and similar repositories for kairos

Users that are interested in kairos are comparing it to the libraries listed below

• 0x7ff / dimentio
  Tool for getting and setting nonce without triggering KPP/KTRR/PAC.
  ☆114Updated 2 years ago
• 0x7ff / eclipsa
  Checkm8 PoC tool for A8, A8X and A9 devices that allows you to boot untrusted images (macOS only, credits: checkra1n team).
  ☆88Updated 4 years ago
• Siguza / libkrw
  Lib kernel r/w
  ☆191Updated 3 years ago
• tihmstar / libpatchfinder
  A arm offsetfinder. It finds offsets, patches, parses Mach-O and even supports IMG4/IMG3
  ☆147Updated 8 months ago
• JakeBlair420 / Spice
  Spice - an unfinished iOS 11 untether
  ☆111Updated 3 years ago
• xerub / patchfinder64
  iOS ARM64 kernel patchfinder
  ☆76Updated 5 years ago
• 0cyn / iBoot-IDA
  32/64 bit SecureROM/iBoot loader for IDA Pro. Also supports loading and decrypting encrypted .im4ps within IDA.
  ☆74Updated 3 years ago
• NyanSatan / Virtual-iBoot-Fun
  Another Virtualization.framework demo project, with focus to iBoot (WIP)
  ☆166Updated last year
• chr1s0x1 / pwnedOS11
  WIP iOS 11 - 12.2 & 13b1,b2 Safari Jailbreak
  ☆44Updated 4 years ago
• pgarba / King
  port of checkm8 to C
  ☆142Updated 11 months ago
• citruz / pongoOS-QEMU
  Fork of PongoOS which can be run in QEMU
  ☆66Updated 3 years ago
• matteyeux / autodecrypt
  Tool to decrypt 64 bits iOS firmware images (iBoot/LLB/iBSS/iBEC).
  ☆179Updated last year
• NyaMisty / PongoHelper
  Adds some convenient commands to pongoOS
  ☆50Updated 5 years ago
• jakeajames / sock_port
  iOS 10.0-12.2 tfp0
  ☆132Updated 5 years ago
• Siguza / hsp4
  macOS kext for host_special_port(4) patch
  ☆88Updated last year
• haiyuidesu / iBoot64Finder
  Find some iBoot functions in an iBoot64.
  ☆41Updated 4 years ago
• jakeajames / time_waste
  iOS 12.0-13.3 tfp0
  ☆151Updated 4 years ago
• JonathanSeals / Ancient-iBoot-Fun
  iOS 5.x iBoot fun for the whole family!
  ☆42Updated 5 years ago
• xerub / acorn
  untethered+unsandboxed code execution in iOS 11
  ☆186Updated 5 years ago
• userlandkernel / ios-unstripped-kexts
  Unstripped iOS kernel extensions and more. More coming soon.
  ☆56Updated 5 years ago
• tihmstar / v1ntex
  getf tfp0 on iOS 11.2 - 11.4.1
  ☆70Updated 6 years ago
• NyanSatan / Image3RE
  iBoot-1145.3 Image3/heap stack RE (+unholy tools)
  ☆77Updated last year
• jsherman212 / svc_stalker
  iOS system call/Mach trap interception for checkra1n'able devices
  ☆155Updated 3 years ago
• DanyL / lockdownd_playground
  Lockdown related research, tools and POCs.
  ☆91Updated 5 years ago
• bazad / devicetree-parse
  A tool to parse Apple's binary device tree format.
  ☆55Updated 5 years ago
• in7egral / ios-jailbreak-patchfinder64
  Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
  ☆66Updated 7 years ago
• sbingner / kerneldec
  iOS Kernel Decompressor
  ☆87Updated 5 years ago
• opa334 / sandbox_extension_generator
  iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives
  ☆127Updated 2 years ago
• shinvou / decrypt0r
  Automatically download and decrypt SecureRom stuff (iBSS, iBEC, iBoot, etc.) for all iOS versions available.
  ☆51Updated 5 years ago
• m1stadev / Criptam
  iOS firmware key decrypter
  ☆45Updated last year