Stefan Esser

dumpdecrypted. Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.

IDA-IOS-Toolkit. Collection of idapython scripts for dealing with the iOS kernelcache

opensource_taig. Lets create an open source version of the latest TaiG jailbreak.

bad-bad-apple. A curated list of not properly fixed apple security bugs and attempts to influence disclosure

serialKDPproxy. Improved version of David Elliott's SerialKDPProxy

spwndylib. Simple code to trigger low hanging fruit in IOHIDFamily.kext in OS X 10.11.5

twitter_giveaway_2016. Scripts used to select winner for 2016/12/25 AppleTV 4 giveaway at @i0n1c

BabyARM. a very simple emulator for some ARM/Thumb instructions used for gadget enumeration

NSKeyedArchive2dot. Converts plists in NSKeyedArchive format into a better readable .DOT presentation

MachOView. MachOView fork

ndrv_setspec.

keypatch. Multi-architecture assembler for IDA Pro. Powered by Keystone Engine.

mpress_dumper. MPRESS dumper for OS X