jsherman212 / svc_stalker

Related projects ⓘ

Alternatives and complementary repositories for svc_stalker

• 0x7ff / dimentio
  Tool for getting and setting nonce without triggering KPP/KTRR/PAC.
  ☆109Updated last year
• jakeajames / sock_port
  iOS 10.0-12.2 tfp0
  ☆128Updated 5 years ago
• Siguza / libkrw
  Lib kernel r/w
  ☆191Updated 3 years ago
• opa334 / xnuspy_syscall_logger
  Log all syscalls executed by a process (iOS / checkra1n / xnuspy)
  ☆58Updated 2 years ago
• tihmstar / libtakeover
  call functions in a remote process using Mach API
  ☆100Updated 9 months ago
• jakeajames / time_waste
  iOS 12.0-13.3 tfp0
  ☆151Updated 4 years ago
• tihmstar / libpatchfinder
  A arm offsetfinder. It finds offsets, patches, parses Mach-O and even supports IMG4/IMG3
  ☆144Updated 3 months ago
• xerub / acorn
  untethered+unsandboxed code execution in iOS 11
  ☆189Updated 4 years ago
• xerub / patchfinder64
  iOS ARM64 kernel patchfinder
  ☆74Updated 5 years ago
• JakeBlair420 / Spice
  Spice - an unfinished iOS 11 untether
  ☆113Updated 3 years ago
• 0x7ff / eclipsa
  Checkm8 PoC tool for A8, A8X and A9 devices that allows you to boot untrusted images (macOS only, credits: checkra1n team).
  ☆86Updated 3 years ago
• coolstar / substitute
  A free runtime modification library.
  ☆99Updated 4 years ago
• Siguza / iometa
  arm64 IOKit class dumper
  ☆260Updated 2 weeks ago
• jakeajames / dylibify
  Transform any ARM macho executable to a dynamic library
  ☆75Updated 2 years ago
• DanyL / lockdownd_playground
  Lockdown related research, tools and POCs.
  ☆91Updated 5 years ago
• dayt0n / kairos
  64-bit iOS boot image patcher written in C
  ☆147Updated 2 years ago
• chr1s0x1 / Elysian
  JB ETA????
  ☆29Updated 3 years ago
• in7egral / ios-jailbreak-patchfinder64
  Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
  ☆65Updated 7 years ago
• hot3eed / objtree
  tree but for Objective-C messages.
  ☆115Updated 10 months ago
• jakeajames / SneakyShot
  Kernel-based method to take screenshots on iOS, works with encrypted videos.
  ☆61Updated 3 years ago
• opa334 / sandbox_extension_generator
  iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives
  ☆123Updated 2 years ago
• ichitaso / vnodebypass
  vnodebypass using hidePath of jelbrekLib(Jakeashacks) and maphys (0x7ff) + special thanks to akusio
  ☆67Updated 2 years ago
• jakeajames / jelbrekLib
  Give me tfp0, I give you jelbrek
  ☆262Updated 4 years ago
• userlandkernel / ios-unstripped-kexts
  Unstripped iOS kernel extensions and more. More coming soon.
  ☆57Updated 4 years ago
• deepinstinct / dsc_fix
  Aids in reverse engineering libraries from dyld_shared_cache in IDA
  ☆101Updated 7 years ago
• Haifisch / kuzz
  ios iokit fuzzer (really probably isn't that useful anymore tbh)
  ☆61Updated 7 years ago
• jsherman212 / ktrw
  An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.
  ☆54Updated 3 years ago
• cellebrite-labs / ida_kernelcache
  An IDA Toolkit for analyzing iOS kernelcaches.
  ☆103Updated last year
• matteyeux / ida-iboot-loader
  IDA loader for Apple's 64 bits iBoot, SecureROM and AVPBooter
  ☆138Updated 2 weeks ago
• tihmstar / desc_race-fun_public
  ☆67Updated 2 years ago