nick-botticelli / vma2pwn
Scripts + patches to pwn vma2 (Virtualization.framework) macOS virtual machines
☆49Updated 4 months ago
Related projects ⓘ
Alternatives and complementary repositories for vma2pwn
- tart, but with custom AVPBooter ROM, serial I/O, DFU mode, GDB debugging (port 8000), and panic halting. See help menus for `tart create`…☆37Updated last year
- Interact with trustcaches☆39Updated last year
- A tool to parse Apple's binary device tree format.☆55Updated 4 years ago
- Sniff XPC communication using Frida and Go☆119Updated last week
- macOS Sandbox Profile Language (SBPL) Interpreter☆43Updated 4 years ago
- A runtime ObjC class-dump☆45Updated last month
- Ghidra CI/CD to build and host a universal macOS Ghidra.app☆24Updated this week
- Translate and patch arm64e binaries or macOS arm64 binaries to run on an arm64 iPhone at runtime.☆45Updated 2 years ago
- Useless tools for exploring Virtualization.framework☆23Updated 3 years ago
- AEA metadata dumper☆45Updated 3 months ago
- Apple Silicon NOR dumper☆44Updated last year
- Insecurity as an IOService☆75Updated 11 months ago
- `ipsw` symbolication signatures☆42Updated 2 weeks ago
- ☆20Updated last year
- Extract Binaries from Apple's DYLD Shared Cache☆18Updated last year
- XPC sniffer using LLDB☆35Updated last month
- Reversed iOS sandbox profile files☆24Updated 4 years ago
- DeviceTree☆75Updated 3 weeks ago
- Transform any ARM macho executable to a dynamic library☆41Updated 2 years ago
- symbol dumps of iOS shared caches☆32Updated 2 years ago
- Guessed headers of non-public Apple SDK☆25Updated this week
- Apple's XNU automatically updated live.☆25Updated 3 years ago
- App sandbox escapes for macOS☆28Updated 4 years ago
- Grant private entitlements to OSX apps☆99Updated 4 years ago
- Decompiling macOS Hypervisor.framework by hand☆119Updated 2 years ago
- An Apple Silicon hooking library written in C☆13Updated 3 years ago
- Tool for conversion between iBoot images and PNG.☆35Updated last year
- Slides and resources for talks I've given☆15Updated 3 months ago
- Objective-C runtime tracing tool☆40Updated last year