Alternatives and similar repositories for libtakeover:

Users that are interested in libtakeover are comparing it to the libraries listed below

• jsherman212 / svc_stalker
  iOS system call/Mach trap interception for checkra1n'able devices
  ☆152Updated 3 years ago
• jakeajames / dylibify
  Transform any ARM macho executable to a dynamic library
  ☆76Updated 2 years ago
• Haifisch / kuzz
  ios iokit fuzzer (really probably isn't that useful anymore tbh)
  ☆62Updated 8 years ago
• opa334 / xnuspy_syscall_logger
  Log all syscalls executed by a process (iOS / checkra1n / xnuspy)
  ☆64Updated 2 years ago
• jakeajames / sock_port
  iOS 10.0-12.2 tfp0
  ☆129Updated 5 years ago
• xerub / patchfinder64
  iOS ARM64 kernel patchfinder
  ☆75Updated 5 years ago
• deepinstinct / dsc_fix
  Aids in reverse engineering libraries from dyld_shared_cache in IDA
  ☆101Updated 7 years ago
• lilang-wu / p-joker
  p-joker -- iOS/MacOS kernelcache/kexts analysis tool
  ☆106Updated 4 years ago
• 0x7ff / dimentio
  Tool for getting and setting nonce without triggering KPP/KTRR/PAC.
  ☆114Updated last year
• jakeajames / multi_path
  multi_path with root and sandbox escape
  ☆100Updated 6 years ago
• hot3eed / objtree
  tree but for Objective-C messages.
  ☆118Updated last year
• mwpcheung / AppleSEPFirmware
  Apple SEP reverse
  ☆51Updated 4 years ago
• userlandkernel / ios-unstripped-kexts
  Unstripped iOS kernel extensions and more. More coming soon.
  ☆56Updated 5 years ago
• Proteas / ios-anti-anti-dbg-in-kern
  Demo: Anti Anti-Debug in iOS Kernel
  ☆73Updated 7 years ago
• NyaMisty / xnu_bypass
  ☆47Updated 3 years ago
• DanyL / lockdownd_playground
  Lockdown related research, tools and POCs.
  ☆91Updated 5 years ago
• jakeajames / SneakyShot
  Kernel-based method to take screenshots on iOS, works with encrypted videos.
  ☆61Updated 3 years ago
• tihmstar / libpatchfinder
  A arm offsetfinder. It finds offsets, patches, parses Mach-O and even supports IMG4/IMG3
  ☆145Updated 6 months ago
• Siguza / misc
  ☆36Updated this week
• coolstar / substitute
  A free runtime modification library.
  ☆98Updated 5 years ago
• CRKatri / trustcache
  Interact with trustcaches
  ☆39Updated 2 years ago
• cellebrite-labs / ida_kernelcache
  An IDA Toolkit for analyzing iOS kernelcaches.
  ☆107Updated last year
• tjkr0wn / xnu_gym
  xnu_gym is a pongoOS module that patches XNU to reintroduce previously known and patched vulnerabilities. This is an easy way to practice…
  ☆55Updated 3 years ago
• JakeBlair420 / Spice
  Spice - an unfinished iOS 11 untether
  ☆114Updated 3 years ago
• Siguza / iometa
  arm64 IOKit class dumper
  ☆266Updated last month
• jsherman212 / ktrw
  An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.
  ☆55Updated 3 years ago
• markie-dev / desc_race_A15
  CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices (A14-A15)
  ☆48Updated 2 years ago
• in7egral / ios-jailbreak-patchfinder64
  Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.
  ☆66Updated 7 years ago
• tihmstar / v3ntex
  getf tfp0 on iOS 12.0 - 12.1.2
  ☆65Updated 6 years ago
• jsherman212 / iosdbg
  experimental iOS debugger
  ☆26Updated 4 years ago