evilpenguin/XPCSniffer external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

evilpenguin/XPCSniffer

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/evilpenguin/XPCSniffer)

Close

evilpenguin / XPCSnifferView on GitHubMore

• External links
• Readme badge

Sniff XPC goodies on your iOS device.

☆96Nov 14, 2020Updated 5 years ago

Alternatives and similar repositories for XPCSniffer

Users that are interested in XPCSniffer are comparing it to the libraries listed below

• saaramar / iOS_memory_exhaustion_writeup

  View on GitHub
  ☆20May 24, 2021Updated 4 years ago
• DerekSelander / dsc_symbols

  View on GitHub
  symbol dumps of iOS shared caches
  ☆34Oct 15, 2022Updated 3 years ago
• 0x3c3e / pocs

  View on GitHub
  My collection of PoCs
  ☆26Nov 9, 2023Updated 2 years ago
• zhuowei / PCICrash

  View on GitHub
  PCIDriverKit proof-of-concept for CVE-2022-26763
  ☆37Jul 2, 2022Updated 3 years ago
• opa334 / sandbox_extension_generator

  View on GitHub
  iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives
  ☆132Jun 10, 2022Updated 3 years ago
• tony-go / snixpc

  View on GitHub
  XPC sniffer using LLDB
  ☆50Oct 3, 2024Updated last year
• Siguza / fscmp

  View on GitHub
  CLI frontend for com.apple.decmpfs / AppleFSCompression.framework
  ☆33Oct 18, 2022Updated 3 years ago
• cellebrite-labs / ida_kcpp

  View on GitHub
  An IDAPython module for enhancing c++ support on top of ida_kernelcache
  ☆140May 15, 2025Updated 9 months ago
• Proteas / sep-misc-A10-14.1-18A8395

  View on GitHub
  some research results of sep
  ☆20Apr 9, 2021Updated 4 years ago
• blacktop / darwin-webkit-build

  View on GitHub
  WebKit/JSC CodeQL Databases
  ☆17Dec 15, 2025Updated 2 months ago
• Muirey03 / iometa

  View on GitHub
  arm64 IOKit class dumper
  ☆21Feb 22, 2025Updated last year
• ReverseApple / gxpc

  View on GitHub
  Sniff XPC communication using Frida and Go
  ☆156Feb 10, 2026Updated 3 weeks ago
• pinauten / iDownload

  View on GitHub
  ☆15Oct 27, 2022Updated 3 years ago
• cellebrite-labs / PacXplorer

  View on GitHub
  IDA plugin to find code cross references to virtual functions using PAC codes
  ☆147Mar 16, 2022Updated 3 years ago
• Siguza / IOKernelRW

  View on GitHub
  Insecurity as an IOService
  ☆96Mar 25, 2025Updated 11 months ago
• hot3eed / xpcspy

  View on GitHub
  Bidirectional XPC message interception and more. Powered by Frida
  ☆428Nov 9, 2022Updated 3 years ago
• 0x36 / ghidra_kernelcache

  View on GitHub
  a Ghidra framework for iOS kernelcache reverse engineering
  ☆363Nov 6, 2022Updated 3 years ago
• hot3eed / objtree

  View on GitHub
  tree but for Objective-C messages.
  ☆125Jan 7, 2024Updated 2 years ago
• seemoo-lab / apple_u1

  View on GitHub
  ☆42Aug 5, 2021Updated 4 years ago
• Siguza / iokit-utils

  View on GitHub
  Dev tools for probing IOKit
  ☆200Sep 23, 2023Updated 2 years ago
• seemoo-lab / plist17lib

  View on GitHub
  ☆22Oct 13, 2023Updated 2 years ago
• jhftss / One-Click-Demo

  View on GitHub
  One-Click to Completely Take Over A macOS Device
  ☆18Aug 25, 2022Updated 3 years ago
• jevinskie / xnu-trace

  View on GitHub
  Tracing of iOS/macOS binaries using HW single step and Frida DBI
  ☆86Dec 8, 2024Updated last year
• synacktiv / CVE-2021-1782

  View on GitHub
  ☆39Feb 10, 2021Updated 5 years ago
• EthanArbuckle / unredact-private-os_logs

  View on GitHub
  An explanation on unredacting iOS's <private> os_log privacy mechanism
  ☆222May 29, 2023Updated 2 years ago
• biscuitehh / cve-2022-46718-leaky-location

  View on GitHub
  CVE-2022-46718: an app may be able to read sensitive location information.
  ☆27May 1, 2023Updated 2 years ago
• cellebrite-labs / ida_kernelcache

  View on GitHub
  An IDA Toolkit for analyzing iOS kernelcaches.
  ☆110May 15, 2025Updated 9 months ago
• Siguza / iometa

  View on GitHub
  arm64 IOKit class dumper
  ☆289Jan 5, 2026Updated last month
• evilpenguin / NetworkSniffer

  View on GitHub
  Log iOS network traffic without a proxy
  ☆150Mar 5, 2023Updated 2 years ago
• evilpenguin / ARMRef

  View on GitHub
  ARM Assembly Reference Manual for iOS, iPadOS, and macOS.
  ☆215Jul 15, 2020Updated 5 years ago
• EthanArbuckle / Hopper-Disassembler-API

  View on GitHub
  This project injects into Hopper Disassembler and exposes core functionality via a local server. It can be used to create automations/too…
  ☆16Apr 17, 2021Updated 4 years ago
• c0ntextomy / c0ntextomy

  View on GitHub
  CVE-2020-9992 - A design flaw in MobileDevice.framework/Xcode and iOS/iPadOS/tvOS Development Tools allows an attacker in the same networ…
  ☆73Sep 23, 2020Updated 5 years ago
• BlackwingHQ / iBoot64Binja

  View on GitHub
  Binary View plugin for reverse engineering iBoot like binaries with Binary Ninja
  ☆54Jan 25, 2024Updated 2 years ago
• cellebrite-labs / PPLorer

  View on GitHub
  IDA plugin that resolves PPL calls to the actual underlying PPL function.
  ☆56Feb 28, 2023Updated 3 years ago
• evilpenguin / MachoDecrypt

  View on GitHub
  Decrypt iOS binaries at runtime
  ☆96Oct 19, 2021Updated 4 years ago
• aemmitt-ns / funtime

  View on GitHub
  Objective-C runtime tracing tool
  ☆40Sep 15, 2023Updated 2 years ago
• bazad / ios-command-line-tool

  View on GitHub
  Example showing how to build a standalone iOS executable using Xcode.
  ☆71Sep 18, 2018Updated 7 years ago
• seemoo-lab / frida-scripts

  View on GitHub
  ☆130Jun 14, 2025Updated 8 months ago
• arandomdev / DyldExtractor

  View on GitHub
  Extract Binaries from Apple's Dyld Shared Cache
  ☆469Jan 27, 2025Updated last year