dayt0n / kairos
64-bit iOS boot image patcher written in C
☆146Updated 2 years ago
Related projects: ⓘ
- Tool for getting and setting nonce without triggering KPP/KTRR/PAC.☆105Updated last year
- Checkm8 PoC tool for A8, A8X and A9 devices that allows you to boot untrusted images (macOS only, credits: checkra1n team).☆86Updated 3 years ago
- A arm offsetfinder. It finds offsets, patches, parses Mach-O and even supports IMG4/IMG3☆143Updated 3 weeks ago
- Spice - an unfinished iOS 11 untether☆111Updated 2 years ago
- Adds some convenient commands to pongoOS☆48Updated 4 years ago
- Lib kernel r/w☆190Updated 2 years ago
- port of checkm8 to C☆132Updated 3 months ago
- iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives☆123Updated 2 years ago
- iOS 10.0-12.2 tfp0☆128Updated 5 years ago
- WIP iOS 11 - 12.2 & 13b1,b2 Safari Jailbreak☆43Updated 4 years ago
- iOS 12.0-13.3 tfp0☆150Updated 3 years ago
- iOS 5.x iBoot fun for the whole family!☆42Updated 4 years ago
- Find some iBoot functions in an iBoot64.☆41Updated 3 years ago
- iOS ARM64 kernel patchfinder☆73Updated 5 years ago
- 32/64 bit SecureROM/iBoot loader for IDA Pro. Also supports loading and decrypting encrypted .im4ps within IDA.☆68Updated 2 years ago
- open-source jailbreaking tool for many iOS devices☆155Updated 3 years ago
- Fork of PongoOS which can be run in QEMU☆63Updated 3 years ago
- Another Virtualization.framework demo project, with focus to iBoot (WIP)☆158Updated 9 months ago
- Patch the iBoot64 with generic patches.☆47Updated 6 months ago
- IDA loader for Apple's 64 bits iBoot, SecureROM and AVPBooter☆135Updated last month
- untethered+unsandboxed code execution in iOS 11☆189Updated 4 years ago
- Lockdown related research, tools and POCs.☆91Updated 5 years ago
- iOS Kernel Decompressor☆85Updated 4 years ago
- iOS system call/Mach trap interception for checkra1n'able devices☆148Updated 3 years ago
- Tool to decrypt 64 bits iOS firmware images (iBoot/LLB/iBSS/iBEC).☆166Updated last year
- iBoot-1145.3 Image3/heap stack RE (+unholy tools)☆71Updated 7 months ago
- An open source implemention of Apple's `launchctl(1)`☆66Updated last month
- macOS kext for host_special_port(4) patch☆87Updated 10 months ago
- ☆23Updated 4 years ago
- ☆67Updated 2 years ago