Alternatives and similar repositories for xnuexp-toolkit

Users that are interested in xnuexp-toolkit are comparing it to the libraries listed below

• kpwn / rapd2
  simple radare2 rap:// server
  ☆25Updated 8 years ago
• OpenJailbreak / sudochop
  iOS Userland Forensic Dumping Framework for iOS 7/8
  ☆20Updated 6 years ago
• xerub / ibex64
  iBoot64 Payload Development Toolkit
  ☆42Updated 7 years ago
• xerub / separt
  ART
  ☆16Updated 7 years ago
• danzatt / ibex_find
  Identifies common functions in iBSS/iBEC/iBoot/LLB
  ☆32Updated 9 years ago
• lightbulbone / ios
  Fun with iOS
  ☆13Updated 11 years ago
• Jailbreaks / empty_list
  empty_list - exploit for p0 issue 1564 (CVE-2018-4243) iOS 11.0 - 11.3.1 kernel r/w
  ☆19Updated 7 years ago
• kpwn / termz
  simple serial console suitable for use with serialsh and iBoot
  ☆47Updated 5 years ago
• tihmstar / kdp.py
  crappy "debugger"-like memory reader, to inspect 32bit ios kernel after it paniced
  ☆16Updated 6 years ago
• Razzile / Ghetto-Hook
  mach based hooking library for OS X (and soon iOS). Still WIP
  ☆18Updated 8 years ago
• JonathanSeals / kernelversionhacker
  Change your kernel version
  ☆35Updated 6 years ago
• matteyeux / ibooter
  A small utility I use with binaries built from iBoot src
  ☆16Updated 5 years ago
• gdbinit / bruteforcesysent
  Small util to discover OS X sysent via bruteforce
  ☆33Updated 8 years ago
• xerub / reexport
  Reexport symbols for Mach-O and ELF
  ☆38Updated 7 years ago
• stefanesser / spwndylib
  Simple code to trigger low hanging fruit in IOHIDFamily.kext in OS X 10.11.5
  ☆14Updated 9 years ago
• comex / attach-and-detach
  use .dmgs on iOS
  ☆22Updated 13 years ago
• Siguza / hsp4
  macOS kext for host_special_port(4) patch
  ☆88Updated last year
• NyanSatan / WayOut
  GUI for kloader/multi_kloader in the spirit of old classic Setup.app
  ☆27Updated 5 months ago
• realnp / nvram_patcher
  Patches iOS kernel to allow access to all nvram variables
  ☆48Updated 8 years ago
• bat0s / BootROM
  ☆19Updated 9 years ago
• cocoahuke / ioskextdump_ios10
  iOS10~iOS13 Edition) Dump Kext information from iOS kernel cache. Applicable to the kernel which dump from memory. The disassembly framew…
  ☆21Updated 3 years ago
• tihmstar / libgrabkernel
  just a kernelgrabber, for those who can't reach out of sandbox
  ☆17Updated last year
• Siguza / misc
  ☆37Updated 4 months ago
• xerub / macho
  Dealing with Mach-O kexts, vtables and more
  ☆85Updated 6 years ago
• xerub / async_wake_ios
  not a jailbreak
  ☆35Updated 7 years ago
• sektioneins / xpwntool-lite
  Lightweight version of xpwntool just for decrypting IMG3 firmware files
  ☆47Updated 4 years ago
• ilAYAli / kcache
  kernelcache encrypt/decrypt utility
  ☆49Updated 13 years ago
• jakeajames / kernelSymbolFinder
  Get kernel symbols on device. No jailbreak required (note: unslid addresses)
  ☆27Updated 6 years ago
• xerub / voucher_swap
  ☆31Updated 6 years ago
• tihmstar / powend
  powerd exploit : Sandbox escape to root for Apple iOS < 12.2 on A11 devices
  ☆17Updated 6 years ago