Alternatives and similar repositories for idevicecap

Users that are interested in idevicecap are comparing it to the libraries listed below

• EthanArbuckle / objfind
  Search running processes on iOS for instances of a given objc class.
  ☆55Updated last year
• jevinskie / xnu-trace
  Tracing of iOS/macOS binaries using HW single step and Frida DBI
  ☆85Updated last year
• CRKatri / trustcache
  Interact with trustcaches
  ☆41Updated 3 years ago
• robre / frida-scripts
  ☆16Updated 4 years ago
• jevinskie / dylibify
  Transform any ARM macho executable to a dynamic library
  ☆44Updated 10 months ago
• miticollo / xpc-tracer
  A tracer based on frida for XPC messages in iOS and macOS.
  ☆35Updated 2 years ago
• jevinskie / jevxpctrace
  Hopefully an insightful XPC tracer that helps vulerability research by tracing server and client call stacks
  ☆20Updated 3 years ago
• Proteas / sep-fw-dyld-cache-loader
  IDA loader for SEP firmware with dyld cache support.
  ☆67Updated last year
• Muirey03 / iometa
  arm64 IOKit class dumper
  ☆20Updated 11 months ago
• NyaMisty / xnu_bypass
  ☆49Updated 4 years ago
• ReverseApple / inject_aarch64
  arm64 and arm64e dylib injector
  ☆38Updated 2 years ago
• jonpalmisc / respawn
  Experimentation environment for checkm8-vulnerable devices
  ☆57Updated 2 years ago
• opa334 / xnuspy_syscall_logger
  Log all syscalls executed by a process (iOS / checkra1n / xnuspy)
  ☆71Updated 3 years ago
• seemoo-lab / plist17lib
  ☆22Updated 2 years ago
• DerekSelander / dynadump
  A runtime ObjC class-dump
  ☆78Updated last year
• doronz88 / ida-scripts
  ☆63Updated 5 months ago
• ChiChou / ios-debug.py
  Shortcut to automate your iproxy, debugserver, lldb workflow
  ☆41Updated last year
• xerub / busybox-apple
  A working busybox for iOS and macOS
  ☆34Updated 3 years ago
• paradiseduo / Anti-Disassembly-On-Arm64
  ☆19Updated 3 years ago
• DerekSelander / dsc_symbols
  symbol dumps of iOS shared caches
  ☆34Updated 3 years ago
• matteyeux / taco
  A tool to download and decrypt a 64 bits iOS firmware images written in Rust
  ☆45Updated 2 years ago
• Lessica / HikariSummer
  Naville's HikariObfuscator for LLVM 12. Under active development. Use with caution.
  ☆56Updated 3 years ago
• aemmitt-ns / funtime
  Objective-C runtime tracing tool
  ☆40Updated 2 years ago
• 0x7ff / golb
  Mapping physical memory to user space (EL0) on iOS.
  ☆74Updated 3 years ago
• tony-go / snixpc
  XPC sniffer using LLDB
  ☆48Updated last year
• markie-dev / desc_race_A15
  CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)
  ☆48Updated 3 years ago
• ReverseApple / gxpc
  Sniff XPC communication using Frida and Go
  ☆156Updated 2 weeks ago
• FFRI / CVE-2025-24204
  PoC and technical details of CVE-2025-24204
  ☆103Updated 4 months ago
• NyaMisty / KernInfra
  KernInfra, a unified kernel operation framework
  ☆57Updated 4 years ago
• jsherman212 / ktrw
  An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.
  ☆60Updated 4 years ago