xnu_gym is a pongoOS module that patches XNU to reintroduce previously known and patched vulnerabilities. This is an easy way to practice kernel exploitation and jailbreak development!
☆59Jun 17, 2021Updated 5 years ago
Alternatives and similar repositories for xnu_gym
Users that are interested in xnu_gym are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- iBoot/SecureROM Loader☆35Feb 24, 2023Updated 3 years ago
- Writes to nand_llb and triggers the Image3 SHSH overlap bug☆14Dec 2, 2023Updated 2 years ago
- Binary Ninja loader for A12 SEP firmware☆30Feb 4, 2021Updated 5 years ago
- Small binja plugin to import header file to types☆17Nov 11, 2022Updated 3 years ago
- A set of tools for fuzzing SecureROM. Managed to find and trigger checkm8.☆169Sep 18, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Binary View plugin for reverse engineering iBoot like binaries with Binary Ninja☆57Jan 25, 2024Updated 2 years ago
- some research results of sep☆20Apr 9, 2021Updated 5 years ago
- UPDATED: All the action is at https://github.com/xsscx/srd☆12Jul 12, 2021Updated 5 years ago
- WebKit/JSC CodeQL Databases☆17Dec 15, 2025Updated 10 months ago
- Binary Ninja loader for 64 bits Apple SEPROMs☆61Sep 7, 2025Updated last year
- An Open-Source Work-In-Progress iOS 6 Jailbreak Using a Custom Ramdisk☆11May 13, 2022Updated 4 years ago
- Find some iBoot functions in an iBoot64.☆40Feb 10, 2021Updated 5 years ago
- Experimentation environment for checkm8-vulnerable devices☆57Dec 30, 2023Updated 2 years ago
- iOS 5.x iBoot fun for the whole family!☆42Apr 23, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Demo exploit code for CVE-2020-27904, a tfp0 bug.☆68Apr 29, 2021Updated 5 years ago
- Patch the iBoot64 with generic patches.☆56Mar 19, 2024Updated 2 years ago
- CVE-2020-9992 - A design flaw in MobileDevice.framework/Xcode and iOS/iPadOS/tvOS Development Tools allows an attacker in the same networ…☆73Sep 23, 2020Updated 6 years ago
- Boot arbitrary iBoot via ipwndfu's custom protocol on 32-bit platforms (and more)☆75Dec 21, 2025Updated 10 months ago
- A plugin for Binary Ninja to query the Symgrate2 database.☆14Sep 11, 2021Updated 5 years ago
- An *OS bootchain patching library.☆16Updated this week
- Fork of PongoOS which can be run in QEMU☆71Jun 7, 2021Updated 5 years ago
- iOS system call/Mach trap interception for checkra1n'able devices☆165Aug 10, 2021Updated 5 years ago
- A tool to pull C++ object names from kernel memory☆16Aug 13, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- iOS bootchain patchers in Python☆15Sep 6, 2026Updated 2 months ago
- A Universal 32-bit iBoot patcher for iPhone OS 2.0 --> iOS 10☆12Dec 30, 2017Updated 8 years ago
- a7 sep bug☆54Sep 26, 2023Updated 3 years ago
- Unicorn Engine based running of SecureROM☆13Sep 13, 2022Updated 4 years ago
- ☆16Jul 30, 2020Updated 6 years ago
- Python tools of varying usefulness related to iOS jailbreaking.☆32Jan 6, 2022Updated 4 years ago
- A simple nodejs server that acts as a keystore for Grandmaster.☆20Jan 12, 2020Updated 6 years ago
- ☆51Jul 20, 2020Updated 6 years ago
- GUI for kloader/multi_kloader in the spirit of old classic Setup.app☆27Jan 1, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Lockdown related research, tools and POCs.☆90May 18, 2019Updated 7 years ago
- for 32-bit iboot bug on ios 7☆17Mar 11, 2020Updated 6 years ago
- an iOS kernel function hooking framework for checkra1n'able devices☆607Oct 6, 2021Updated 5 years ago
- 64-bit iOS boot image patcher written in C☆148Sep 18, 2022Updated 4 years ago
- Spice - an unfinished iOS 11 untether☆119Oct 16, 2021Updated 5 years ago
- Binja Arm64 Disassembler☆108Oct 3, 2026Updated last month
- Tool to patch the ASLR slide generation in the kernel to disable user-land ASLR on 32-bit iOS☆32Dec 6, 2020Updated 5 years ago