tihmstar / libpatchfinder
A arm offsetfinder. It finds offsets, patches, parses Mach-O and even supports IMG4/IMG3
☆146Updated 7 months ago
Alternatives and similar repositories for libpatchfinder:
Users that are interested in libpatchfinder are comparing it to the libraries listed below
- Checkm8 PoC tool for A8, A8X and A9 devices that allows you to boot untrusted images (macOS only, credits: checkra1n team).☆88Updated 3 years ago
- Tool for getting and setting nonce without triggering KPP/KTRR/PAC.☆114Updated last year
- iOS 10.0-12.2 tfp0☆131Updated 5 years ago
- ☆68Updated 3 years ago
- iOS 15.0 - 15.3.1 sandbox escape technique using kernel read/write primitives☆126Updated 2 years ago
- Find some iBoot functions in an iBoot64.☆41Updated 4 years ago
- Spice - an unfinished iOS 11 untether☆112Updated 3 years ago
- A reboot of the popular iBoot32Patcher but with twice the amount of bits☆101Updated 6 months ago
- iOS 12.0-13.3 tfp0☆151Updated 4 years ago
- Lib kernel r/w☆191Updated 3 years ago
- 64-bit iOS boot image patcher written in C☆146Updated 2 years ago
- Fork of PongoOS which can be run in QEMU☆66Updated 3 years ago
- iOS ARM64 kernel patchfinder☆76Updated 5 years ago
- untethered+unsandboxed code execution in iOS 11☆186Updated 5 years ago
- iOS Kernel Decompressor☆87Updated 4 years ago
- a tool for browsing and downloading files from zip files on remote webserver☆95Updated 7 months ago
- Adds some convenient commands to pongoOS☆50Updated 5 years ago
- JB ETA????☆29Updated 4 years ago
- 32/64 bit SecureROM/iBoot loader for IDA Pro. Also supports loading and decrypting encrypted .im4ps within IDA.☆74Updated 3 years ago
- getf tfp0 on iOS 12.0 - 12.1.2☆66Updated 6 years ago
- iOS system call/Mach trap interception for checkra1n'able devices☆155Updated 3 years ago
- Tool to decrypt 64 bits iOS firmware images (iBoot/LLB/iBSS/iBEC).☆178Updated last year
- CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)☆48Updated 3 years ago
- IDA loader for Apple's 64 bits iBoot, SecureROM and AVPBooter☆152Updated 5 months ago
- Securely extend the sandbox of system processes and user applications☆89Updated 8 months ago
- port of checkm8 to C☆141Updated 10 months ago
- Mapping physical memory to user space (EL0) on iOS.☆72Updated 2 years ago
- Patch the iBoot64 with generic patches.☆50Updated last year
- getf tfp0 on iOS 11.2 - 11.4.1☆70Updated 6 years ago
- xnu_gym is a pongoOS module that patches XNU to reintroduce previously known and patched vulnerabilities. This is an easy way to practice…☆55Updated 3 years ago