pattern-f / xattr-oob-swapLinks
Demo exploit code for CVE-2020-27904, a tfp0 bug.
☆68Updated 4 years ago
Alternatives and similar repositories for xattr-oob-swap
Users that are interested in xattr-oob-swap are comparing it to the libraries listed below
Sorting:
- An assistant for BinDiff☆25Updated 2 years ago
- IDA loader for SEP firmware with dyld cache support.☆66Updated last year
- Apple SEP reverse☆55Updated 5 years ago
- An IDA Toolkit for analyzing iOS kernelcaches.☆109Updated 8 months ago
- use https://github.com/argp/iBoot64helper which is the orginal repo and far more advanced☆33Updated 6 years ago
- ☆39Updated 4 years ago
- xnu_gym is a pongoOS module that patches XNU to reintroduce previously known and patched vulnerabilities. This is an easy way to practice…☆57Updated 4 years ago
- ☆51Updated 5 years ago
- Slides from my conference presentations.☆80Updated 5 years ago
- My BinaryNinja toolkit I use for iOS centric RE || Prerelease!☆46Updated 2 years ago
- ☆16Updated 5 years ago
- ☆55Updated 4 years ago
- Shortcut to automate your iproxy, debugserver, lldb workflow☆41Updated last year
- Host your own *OS Entitlement Database☆54Updated 3 months ago
- IDA loader to help with SEPROM reverse engineering.☆35Updated 5 months ago
- a7 sep bug☆55Updated 2 years ago
- IDA plugin to find code cross references to virtual functions using PAC codes☆147Updated 3 years ago
- Learning how to use IOSurfaceAccelerator☆24Updated 2 years ago
- iBoot-1145.3 Image3/heap stack RE (+unholy tools)☆84Updated last year
- WebKit/JSC CodeQL Databases☆17Updated last month
- An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.☆59Updated 4 years ago
- PoC for the iOS 11.4.1 and MacOS 10.13 kernel vulnerability in lio_listio☆78Updated 7 years ago
- Tool to patch the ASLR slide generation in the kernel to disable user-land ASLR on 32-bit iOS☆31Updated 5 years ago
- Binary View plugin for reverse engineering iBoot like binaries with Binary Ninja☆54Updated 2 years ago
- My collection of PoCs☆26Updated 2 years ago
- LZVN compression/decompression tool☆17Updated 4 years ago
- Binary Ninja loader for 64 bits Apple SEPROMs☆58Updated 4 months ago
- Objective-C runtime tracing tool☆40Updated 2 years ago
- xnu build script☆70Updated 2 years ago
- CVE-2018-4248: Out-of-bounds read in libxpc during string serialization.☆54Updated 7 years ago