seemoo-lab / aristoteles
A Wireshark dissector for the Apple Remote Invocation (ARI) protocol, used between Intel base band chips and the iOS CommCenter for various management purposes, SMS, telephony and much more.
☆45Updated 2 years ago
Related projects: ⓘ
- A collection of my Ghidra scripts☆91Updated 11 months ago
- Collection of materials relating to FORCEDENTRY☆91Updated 5 months ago
- Experimentation environment for checkm8-vulnerable devices☆52Updated 8 months ago
- ☆102Updated 2 months ago
- IDA loader for Apple's 64 bits iBoot, SecureROM and AVPBooter☆135Updated last month
- Proof-of-concept for the CVE-2022-42864 IOHIDFamily race condition☆60Updated last year
- An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.☆54Updated 3 years ago
- ☆53Updated 2 years ago
- XNU Image Fuzzer - iOS App for Fuzzing Images with Objective-C Code covering 12 CGCreateBitmap & CGColorSpace Functions working with Raw …☆35Updated 3 months ago
- An IDA Toolkit for analyzing iOS kernelcaches.☆103Updated last year
- Slides for presentations held at conferences☆45Updated last year
- Reversing the Apple sandbox☆126Updated last month
- iOS kernel heap memory profiler for sprayers☆84Updated 2 years ago
- ☆18Updated 11 months ago
- The code repository for the Snake&Apple article series.☆69Updated this week
- ☆38Updated 3 years ago
- XPC sniffer using LLDB☆30Updated last month
- IDA plugin to find code cross references to virtual functions using PAC codes☆135Updated 2 years ago
- Sniff XPC communication using Frida and Go☆115Updated last week
- Mapping physical memory to user space (EL0) on iOS.☆66Updated last year
- Binary Ninja loader for 64 bits Apple SEPROMs☆48Updated 3 months ago
- ☆40Updated 3 years ago
- dyld_shared_cache processing / Single-Image loading for BinaryNinja☆81Updated 9 months ago
- Welcome to Hoyt's macOS Fuzzing & Code Repo. Contribute Code or Open an Issue or Discussion.☆38Updated 3 months ago
- A set of tools for fuzzing SecureROM. Managed to find and trigger checkm8.☆161Updated 3 years ago
- Insecurity as an IOService☆68Updated 10 months ago
- ☆27Updated last year
- Better Apple binary analysis for Ghidra☆40Updated this week
- IDA plugin that resolves PPL calls to the actual underlying PPL function.☆56Updated last year
- A Python library for the ipsw daemon API☆23Updated last year
- xnu_gym is a pongoOS module that patches XNU to reintroduce previously known and patched vulnerabilities. This is an easy way to practice…☆55Updated 3 years ago