Alternatives and similar repositories for XPF

Users that are interested in XPF are comparing it to the libraries listed below

• opa334 / libroot
  Standardized API to get root path on iOS jailbreaks
  ☆82Updated last year
• alfiecg24 / Achilles
  A checkm8 utility for A7-A11 devices
  ☆73Updated 10 months ago
• tomitokics / IOSurface_poc18
  ☆51Updated last year
• pinauten / KernelPatchfinder
  ☆69Updated 3 years ago
• zhuxinlang / zhuxinlang.github.io
  ☆50Updated 2 years ago
• Cryptiiiic / hookra1n
  A custom shellcode hook for checkra1n 0.1337 written in c!
  ☆35Updated 2 years ago
• 34306 / writetosymlinked
  Write to any where in /var/mobile/Containers/, running on iOS 16.0 - 26.2 beta 1 (Fixed on iOS 26.2 beta 2)
  ☆109Updated last month
• opa334 / TimeBomb2
  Spinlock panic on demand!
  ☆26Updated 11 months ago
• fmyyss / XNU_KERNEL_RESEARCH
  ☆140Updated last year
• kok3shidoll / meow16-kfd-pub
  ios 16 arm64 krw
  ☆29Updated 2 years ago
• tealbathingsuit / kfd-on-crack
  ☆30Updated 2 years ago
• opa334 / libSandy
  Securely extend the sandbox of system processes and user applications
  ☆101Updated last week
• lunaynx / apfs-reseal
  Script to restore and reseal rootfs on checkm8 devices
  ☆20Updated 2 years ago
• alfiecg24 / coretrust_cli
  A tool to call CoreTrust evaluation from userland
  ☆21Updated last year
• khanhduytran0 / TaskPortHaxxApp
  Attempt to manipulate platform process task port with CoreTrust bug alone
  ☆105Updated 2 months ago
• alfiecg24 / Vertex
  iOS kernel exploit for iOS 14 and 15
  ☆103Updated 7 months ago
• doronz88 / pylera1n
  Python adaptation for pelara1n
  ☆38Updated 3 years ago
• Cryptiiiic / x8A4
  An all-in-one tool for firmware nonces, seeds, and downgrade support
  ☆127Updated 4 months ago
• pwned4ever / Freya15
  iOS <=15.1 rootless jailbreak for some devices and some versions. add offsets?
  ☆32Updated 2 years ago
• palera1n / magicalcatnyan
  nya~! for palera1n (iBoot payload for palera1n)
  ☆27Updated 3 years ago
• staturnzz / oob_entry
  iOS 3.0-10.3.4 tfp0 kernel exploit
  ☆101Updated 6 months ago
• NightwindDev / rootless-patcher
  A CLI rootful to rootless patcher. Utilizes a technique that does not require Xina-style symlinks.
  ☆65Updated 9 months ago
• wh1te4ever / kfund
  kfund, short for my fun with kfd exploit.
  ☆134Updated 2 years ago
• mineek / openra1n
  ☆79Updated 10 months ago
• m1zole / meow16-kfd-pub
  iOS 9.0(?)~17.0b1 arm64/arm64e krw
  ☆26Updated last year
• NyaMisty / Clutch
  Fast iOS executable dumper, Supporting TrollStore!
  ☆63Updated 3 years ago
• opa334 / fishhook
  A library that enables dynamically rebinding symbols in Mach-O binaries running on iOS.
  ☆23Updated last year
• Lrdsnow / kfd_offsets
  Offsets for KFD
  ☆84Updated 2 years ago
• palera1n / jbinit
  iOS, iPadOS, tvOS, HomePod Software and bridgeOS booter ramsdisk
  ☆92Updated last month
• KpwnZ / my_bugs_and_CVE_collection
  Collection of my bugs and CVE, with PoC or writeup
  ☆52Updated last year