dlevi309 / MacRootKitLinks
A RootKit for macOS that can perform kernel read/write, hook kernel and userspace functions, set custom conditional breakpoints, etc
☆25Updated 2 years ago
Alternatives and similar repositories for MacRootKit
Users that are interested in MacRootKit are comparing it to the libraries listed below
Sorting:
- One-Click to Completely Take Over A macOS Device☆17Updated 2 years ago
- IDAPython scripts☆10Updated 4 years ago
- My collection of PoCs☆26Updated last year
- Simple Kernel Extension to read and write Kernel Memory☆15Updated 2 years ago
- Accompanying code for blog post "Mapping iOS Persistence Attack Surface using Corellium"☆11Updated 2 weeks ago
- Exploit for CVE-2023-32364☆21Updated last year
- IDA plugin that resolves PPL calls to the actual underlying PPL function.☆58Updated 2 years ago
- arm64 and arm64e dylib injector☆36Updated last year
- Enumerate running processes using com.apple.CodeSigningHelper☆13Updated last year
- Utility to manipulate codesigned application in Mac OS X. Demonstrate the use of csops system call.☆78Updated last year
- PCIDriverKit proof-of-concept for CVE-2022-26763☆38Updated 2 years ago
- Exploit for CVE-2023-38571☆14Updated last year
- An assistant for BinDiff☆25Updated 2 years ago
- ☆54Updated 3 years ago
- A Ghidra extension for reverse-engineering macOS binaries.☆19Updated 5 months ago
- ☆39Updated 4 years ago
- A general purpose toolkit to make vulnerability research on macOS easier.☆80Updated 4 months ago
- SnatchBox (CVE-2020-27935) is a sandbox escape vulnerability and exploit affecting macOS up to version 10.15.x☆31Updated 4 years ago
- WebKit/JSC CodeQL Databases☆17Updated last month
- Kernel Cache Decryption for iOS☆17Updated 3 years ago
- XPC sniffer using LLDB☆44Updated 8 months ago
- RetDec plugin for LLDB. RetDec is a retargetable machine-code decompiler based on LLVM.☆62Updated 2 years ago
- ☆28Updated 2 years ago
- macOS codesigning translocation vulnerability.☆42Updated 3 years ago
- GreenLambert macOS IDA plugin to deobfuscate strings☆12Updated 3 years ago
- A tool to find gadgets in the iOS kernelcache.☆33Updated 7 years ago
- ☆49Updated 11 months ago
- arm64 IOKit class dumper☆18Updated 4 months ago
- Redirect spawned iOS application stdout and stderr to pty☆28Updated 4 months ago
- Discover which process execute a hunted binary inside macOS☆25Updated 3 years ago