jsherman212 / ktrwLinks
An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.
☆58Updated 4 years ago
Alternatives and similar repositories for ktrw
Users that are interested in ktrw are comparing it to the libraries listed below
Sorting:
- xnu_gym is a pongoOS module that patches XNU to reintroduce previously known and patched vulnerabilities. This is an easy way to practice…☆56Updated 4 years ago
- Apple SEP reverse☆52Updated 5 years ago
- IDA loader for SEP firmware with dyld cache support.☆58Updated last year
- An IDA Toolkit for analyzing iOS kernelcaches.☆108Updated 5 months ago
- IDA loader to help with SEPROM reverse engineering.☆35Updated 2 months ago
- Experimentation environment for checkm8-vulnerable devices☆54Updated last year
- XPC sniffer using LLDB☆46Updated last year
- Unstripped iOS kernel extensions and more. More coming soon.☆59Updated 5 years ago
- Fork of PongoOS which can be run in QEMU☆69Updated 4 years ago
- Mapping physical memory to user space (EL0) on iOS.☆73Updated 2 years ago
- Demo exploit code for CVE-2020-27904, a tfp0 bug.☆66Updated 4 years ago
- Binary Ninja loader for 64 bits Apple SEPROMs☆57Updated last month
- DeviceTree☆81Updated last year
- Interact with trustcaches☆41Updated 2 years ago
- A tool to parse Apple's binary device tree format.☆56Updated 5 years ago
- IDA plugin to find code cross references to virtual functions using PAC codes☆145Updated 3 years ago
- Apple's XNU automatically updated live.☆26Updated 4 years ago
- iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives☆131Updated 3 years ago
- An assistant for BinDiff☆25Updated 2 years ago
- My BinaryNinja toolkit I use for iOS centric RE || Prerelease!☆45Updated 2 years ago
- ☆21Updated 2 years ago
- Insecurity as an IOService☆90Updated 7 months ago
- ☆39Updated 4 years ago
- Objective-C runtime tracing tool☆40Updated 2 years ago
- Tool to patch the ASLR slide generation in the kernel to disable user-land ASLR on 32-bit iOS☆32Updated 4 years ago
- some research results of sep☆20Updated 4 years ago
- Plugin for loading MachO kernelcache and dSYM files to Binary Ninja☆39Updated 7 months ago
- Tracing of iOS/macOS binaries using HW single step and Frida DBI☆81Updated 10 months ago
- Apple Blocks Plugin for Binary Ninja☆34Updated last month
- xnu build script☆69Updated 2 years ago