Alternatives and similar repositories for xnu-build

Users that are interested in xnu-build are comparing it to the libraries listed below

• ChiChou / entdb

  View on GitHub
  Host your own *OS Entitlement Database
  ☆54Oct 23, 2025Updated 3 months ago
• antoniozekic / Proof-of-concepts

  View on GitHub
  ☆29Apr 7, 2023Updated 2 years ago
• 0x3c3e / slides

  View on GitHub
  CodeQL + DTrace = Memory Disclosure Vulnerabilities in XNU
  ☆46Jul 10, 2023Updated 2 years ago
• Proteas / bindiff-tool

  View on GitHub
  An assistant for BinDiff
  ☆25Feb 21, 2023Updated 2 years ago
• blacktop / darwin-xnu-build

  View on GitHub
  XNU kernel, Kernel Collection and CodeQL build scripts
  ☆269Jan 8, 2026Updated last month
• cellebrite-labs / PPLorer

  View on GitHub
  IDA plugin that resolves PPL calls to the actual underlying PPL function.
  ☆56Feb 28, 2023Updated 2 years ago
• Proteas / sep-misc-A10-14.1-18A8395

  View on GitHub
  some research results of sep
  ☆20Apr 9, 2021Updated 4 years ago
• pwn0rz / idevicecap

  View on GitHub
  capture ios device traffic without jailbreak / sip disable
  ☆36Apr 25, 2022Updated 3 years ago
• Muirey03 / CVE-2022-42864

  View on GitHub
  Proof-of-concept for the CVE-2022-42864 IOHIDFamily race condition
  ☆66Jan 20, 2023Updated 3 years ago
• Proteas / sep-fw-dyld-cache-loader

  View on GitHub
  IDA loader for SEP firmware with dyld cache support.
  ☆67Aug 22, 2024Updated last year
• lilang-wu / p-joker

  View on GitHub
  p-joker -- iOS/MacOS kernelcache/kexts analysis tool
  ☆111May 18, 2020Updated 5 years ago
• ReverseApple / gxpc

  View on GitHub
  Sniff XPC communication using Frida and Go
  ☆156Updated this week
• skr0x1c0 / binja_kc

  View on GitHub
  Plugin for loading MachO kernelcache and dSYM files to Binary Ninja
  ☆40Mar 23, 2025Updated 10 months ago
• blacktop / ipsw-py

  View on GitHub
  A Python library for the ipsw daemon API
  ☆27Aug 14, 2023Updated 2 years ago
• cellebrite-labs / ida_kernelcache

  View on GitHub
  An IDA Toolkit for analyzing iOS kernelcaches.
  ☆109May 15, 2025Updated 9 months ago
• felix-pb / remote_pocs

  View on GitHub
  Some old unexploited remote kernel memory corruption PoCs
  ☆25Aug 19, 2024Updated last year
• pwn0rz / fairplay_research

  View on GitHub
  Some RE work on Apple's Fairplay DRM
  ☆226Jun 14, 2023Updated 2 years ago
• aemmitt-ns / funtime

  View on GitHub
  Objective-C runtime tracing tool
  ☆40Sep 15, 2023Updated 2 years ago
• cellebrite-labs / ida_kcpp

  View on GitHub
  An IDAPython module for enhancing c++ support on top of ida_kernelcache
  ☆140May 15, 2025Updated 9 months ago
• Muirey03 / CVE-2022-32832

  View on GitHub
  Proof-of-concept and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6
  ☆96Jul 21, 2022Updated 3 years ago
• Siguza / IOKernelRW

  View on GitHub
  Insecurity as an IOService
  ☆95Mar 25, 2025Updated 10 months ago
• ChiChou / XpcScope

  View on GitHub
  Yet another xpc sniffer
  ☆132Aug 12, 2025Updated 6 months ago
• 0x36 / ghidra_kernelcache

  View on GitHub
  a Ghidra framework for iOS kernelcache reverse engineering
  ☆363Nov 6, 2022Updated 3 years ago
• wangtielei / POCs

  View on GitHub
  ☆126Aug 3, 2024Updated last year
• Proteas / ios13-sandbox-profile-format

  View on GitHub
  Binary Format of iOS 13 Sandbox Profile Collection
  ☆52Oct 30, 2019Updated 6 years ago
• Impalabs / applevisor

  View on GitHub
  Rust bindings fo the Apple Silicon Hypervisor.framework
  ☆49Jan 14, 2026Updated last month
• opa334 / xnuspy_syscall_logger

  View on GitHub
  Log all syscalls executed by a process (iOS / checkra1n / xnuspy)
  ☆71May 29, 2022Updated 3 years ago
• 0x3c3e / pocs

  View on GitHub
  My collection of PoCs
  ☆26Nov 9, 2023Updated 2 years ago
• 0x36 / weightBufs

  View on GitHub
  ANE kernel r/w exploit for iOS 15 and macOS 12
  ☆302Nov 20, 2022Updated 3 years ago
• zhuowei / LearningIOSurfaceAccelerator

  View on GitHub
  Learning how to use IOSurfaceAccelerator
  ☆24Apr 9, 2023Updated 2 years ago
• jevinskie / m1n1-xnu-boot

  View on GitHub
  A bootloader and experimentation playground for Apple Silicon. Modified to boot XNU/macOS kernels.
  ☆19Dec 25, 2021Updated 4 years ago
• Siguza / iokit-utils

  View on GitHub
  Dev tools for probing IOKit
  ☆201Sep 23, 2023Updated 2 years ago
• hot3eed / xpcspy

  View on GitHub
  Bidirectional XPC message interception and more. Powered by Frida
  ☆427Nov 9, 2022Updated 3 years ago
• ant4g0nist / ManuFuzzer

  View on GitHub
  Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM
  ☆177May 19, 2025Updated 8 months ago
• jhftss / One-Click-Demo

  View on GitHub
  One-Click to Completely Take Over A macOS Device
  ☆18Aug 25, 2022Updated 3 years ago
• EthanArbuckle / unredact-private-os_logs

  View on GitHub
  An explanation on unredacting iOS's <private> os_log privacy mechanism
  ☆217May 29, 2023Updated 2 years ago
• 0cyn / ksuite

  View on GitHub
  My BinaryNinja toolkit I use for iOS centric RE || Prerelease!
  ☆46Aug 21, 2023Updated 2 years ago
• cellebrite-labs / sandblaster

  View on GitHub
  Reversing the Apple sandbox
  ☆163Dec 7, 2025Updated 2 months ago
• jevinskie / xnu-trace

  View on GitHub
  Tracing of iOS/macOS binaries using HW single step and Frida DBI
  ☆85Dec 8, 2024Updated last year