Alternatives and similar repositories for XPF

Users that are interested in XPF are comparing it to the libraries listed below

• opa334 / libroot
  Standardized API to get root path on iOS jailbreaks
  ☆82Updated last year
• alfiecg24 / Achilles
  A checkm8 utility for A7-A11 devices
  ☆73Updated 10 months ago
• tomitokics / IOSurface_poc18
  ☆50Updated last year
• pinauten / KernelPatchfinder
  ☆69Updated 3 years ago
• zhuxinlang / zhuxinlang.github.io
  ☆50Updated 2 years ago
• staturnzz / oob_entry
  iOS 3.0-10.3.4 tfp0 kernel exploit
  ☆100Updated 5 months ago
• kok3shidoll / meow16-kfd-pub
  ios 16 arm64 krw
  ☆29Updated 2 years ago
• fmyyss / XNU_KERNEL_RESEARCH
  ☆139Updated last year
• lunaynx / apfs-reseal
  Script to restore and reseal rootfs on checkm8 devices
  ☆20Updated 2 years ago
• opa334 / TimeBomb2
  Spinlock panic on demand!
  ☆26Updated 11 months ago
• Cryptiiiic / x8A4
  An all-in-one tool for firmware nonces, seeds, and downgrade support
  ☆127Updated 4 months ago
• wh1te4ever / kfund
  kfund, short for my fun with kfd exploit.
  ☆134Updated 2 years ago
• Cryptiiiic / hookra1n
  A custom shellcode hook for checkra1n 0.1337 written in c!
  ☆35Updated 2 years ago
• mineek / openra1n
  ☆78Updated 9 months ago
• alfiecg24 / Vertex
  iOS kernel exploit for iOS 14 and 15
  ☆103Updated 6 months ago
• khanhduytran0 / TaskPortHaxxApp
  Attempt to manipulate platform process task port with CoreTrust bug alone
  ☆103Updated last month
• tealbathingsuit / kfd-on-crack
  ☆30Updated 2 years ago
• NyaMisty / Clutch
  Fast iOS executable dumper, Supporting TrollStore!
  ☆63Updated 3 years ago
• 34306 / writetosymlinked
  Write to any where in /var/mobile/Containers/, running on iOS 16.0 - 26.2 beta 1 (Fixed on iOS 26.2 beta 2)
  ☆109Updated 2 weeks ago
• Lrdsnow / kfd_offsets
  Offsets for KFD
  ☆84Updated 2 years ago
• opa334 / libSandy
  Securely extend the sandbox of system processes and user applications
  ☆100Updated last year
• opa334 / kfd
  kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.
  ☆90Updated last year
• palera1n / jbinit
  iOS, iPadOS, tvOS, HomePod Software and bridgeOS booter ramsdisk
  ☆92Updated last month
• khanhduytran0 / SpringBoardTS
  Launch SpringBoard as an app
  ☆56Updated 7 months ago
• alfiecg24 / coretrust_cli
  A tool to call CoreTrust evaluation from userland
  ☆21Updated last year
• palera1n / magicalcatnyan
  nya~! for palera1n (iBoot payload for palera1n)
  ☆27Updated 3 years ago
• rA9stuff / LiNUZE
  An iOS app for iOS-to-iOS communication. Think of it as iTunes on your iPhone
  ☆50Updated 10 months ago
• m1zole / meow16-kfd-pub
  iOS 9.0(?)~17.0b1 arm64/arm64e krw
  ☆26Updated last year
• alfiecg24 / libgrabkernel2
  Easily download the kernelcache for any iOS release, beta or OTA-only version.
  ☆19Updated 7 months ago
• GeoSn0w / CVE-2025-24203-iOS-Exploit-With-Error-Logging
  Slightly improved exploit of the CVE-2025-24203 iOS vulnerability by Ian Beer of Google Project Zero
  ☆40Updated 3 months ago