An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.
☆64May 20, 2021Updated 5 years ago
Alternatives and similar repositories for ktrw
Users that are interested in ktrw are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof-of-concept and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6☆97Jul 21, 2022Updated 4 years ago
- some research results of sep☆20Apr 9, 2021Updated 5 years ago
- App with PoC of CVE-2024-44285☆43Nov 30, 2024Updated last year
- ☆19Aug 29, 2022Updated 4 years ago
- An explanation on unredacting iOS's <private> os_log privacy mechanism☆231May 29, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- experimental iOS debugger☆30Jun 17, 2020Updated 6 years ago
- Search running processes on iOS for instances of a given objc class.☆55Jan 3, 2025Updated last year
- Exploit for CVE-2021-30807☆133Nov 29, 2021Updated 4 years ago
- arm64 IOKit class dumper☆23Feb 22, 2025Updated last year
- Lib kernel r/w☆194Nov 1, 2021Updated 4 years ago
- A custom shellcode hook for checkra1n 0.1337 written in c!☆34Dec 20, 2023Updated 2 years ago
- Plugin for loading MachO kernelcache and dSYM files to Binary Ninja☆39Mar 23, 2025Updated last year
- iOS system call/Mach trap interception for checkra1n'able devices☆163Aug 10, 2021Updated 5 years ago
- an iOS kernel function hooking framework for checkra1n'able devices☆602Oct 6, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A bootloader and experimentation playground for Apple Silicon. Modified to boot XNU/macOS kernels.☆23Dec 25, 2021Updated 4 years ago
- ☆16Jul 30, 2020Updated 6 years ago
- iOS `os_log` viewer that supports both real-time and archived logs☆32May 5, 2025Updated last year
- IDA loader for Apple's 64 bits iBoot, SecureROM and AVPBooter☆172Nov 2, 2024Updated last year
- An IDA Toolkit for analyzing iOS kernelcaches.☆150Aug 12, 2026Updated 3 weeks ago
- An *OS bootchain patching library.☆16Updated this week
- Extract a decrypted iOS 64-bit kernelcache☆44Aug 11, 2026Updated 3 weeks ago
- XNU kernel, Kernel Collection and CodeQL build scripts☆313Jun 18, 2026Updated 2 months ago
- Modern C++, range-based Mach-O parser designed for embedded use. Uses stack allocations only.☆35Oct 31, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Mapping physical memory to user space (EL0) on iOS.☆81Jan 3, 2023Updated 3 years ago
- Experiment to attempt to build Apple's dyld tools.☆67May 29, 2020Updated 6 years ago
- Apple Hypervisor.framework bindings for Golang☆40Jan 12, 2026Updated 7 months ago
- Tools to measure an app's App Sandbox usage☆26May 20, 2020Updated 6 years ago
- Deterministic kernel exploit based on CVE-2023-32434.☆142May 14, 2026Updated 3 months ago
- Insecurity as an IOService☆101May 28, 2026Updated 3 months ago
- dyld_shared_cache processing / Single-Image loading for BinaryNinja☆92Feb 25, 2026Updated 6 months ago
- Unicorn Engine based running of SecureROM☆12Sep 13, 2022Updated 3 years ago
- xnu build script☆73Aug 31, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- LLDB wrapped and empowered by iPython's features☆173Aug 10, 2026Updated 3 weeks ago
- call functions in a remote process using Mach API☆105Mar 19, 2025Updated last year
- Apple Silicon NOR dumper☆52Nov 8, 2023Updated 2 years ago
- Output from running Yarden's sandblaster on an iPhone15,2's iOS17 kernelcaches☆19Aug 7, 2024Updated 2 years ago
- 32/64 bit SecureROM/iBoot loader for IDA Pro. Also supports loading and decrypting encrypted .im4ps within IDA.☆73Mar 2, 2022Updated 4 years ago
- arm64 IOKit class dumper☆299Jan 5, 2026Updated 7 months ago
- chroot based kernel level jailbreak detection bypass.☆50Sep 16, 2021Updated 4 years ago