pattern-f / xattr-oob-swapLinks
Demo exploit code for CVE-2020-27904, a tfp0 bug.
☆68Updated 4 years ago
Alternatives and similar repositories for xattr-oob-swap
Users that are interested in xattr-oob-swap are comparing it to the libraries listed below
Sorting:
- An assistant for BinDiff☆25Updated 2 years ago
- IDA loader for SEP firmware with dyld cache support.☆64Updated last year
- ☆39Updated 4 years ago
- Apple SEP reverse☆54Updated 5 years ago
- use https://github.com/argp/iBoot64helper which is the orginal repo and far more advanced☆33Updated 6 years ago
- An IDA Toolkit for analyzing iOS kernelcaches.☆109Updated 7 months ago
- ☆55Updated 4 years ago
- xnu_gym is a pongoOS module that patches XNU to reintroduce previously known and patched vulnerabilities. This is an easy way to practice…☆57Updated 4 years ago
- Shortcut to automate your iproxy, debugserver, lldb workflow☆41Updated last year
- Host your own *OS Entitlement Database☆54Updated 2 months ago
- ☆51Updated 5 years ago
- WebKit/JSC CodeQL Databases☆17Updated 3 weeks ago
- ☆16Updated 5 years ago
- LZVN compression/decompression tool☆16Updated 4 years ago
- Tool to patch the ASLR slide generation in the kernel to disable user-land ASLR on 32-bit iOS☆31Updated 5 years ago
- Slides from my conference presentations.☆80Updated 5 years ago
- My collection of PoCs☆26Updated 2 years ago
- Learning how to use IOSurfaceAccelerator☆24Updated 2 years ago
- IDA loader to help with SEPROM reverse engineering.☆35Updated 4 months ago
- p-joker -- iOS/MacOS kernelcache/kexts analysis tool☆111Updated 5 years ago
- PCIDriverKit proof-of-concept for CVE-2022-26763☆37Updated 3 years ago
- CVE-2018-4248: Out-of-bounds read in libxpc during string serialization.☆54Updated 7 years ago
- xnu build script☆70Updated 2 years ago
- PoC for the iOS 11.4.1 and MacOS 10.13 kernel vulnerability in lio_listio☆78Updated 7 years ago
- An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.☆58Updated 4 years ago
- some research results of sep☆20Updated 4 years ago
- My BinaryNinja toolkit I use for iOS centric RE || Prerelease!☆46Updated 2 years ago
- XPC sniffer using LLDB☆48Updated last year
- Binary Format of iOS 13 Sandbox Profile Collection☆52Updated 6 years ago
- IDA plugin to find code cross references to virtual functions using PAC codes☆146Updated 3 years ago