R00tkitSMM

CVE-2024-27804. POC for CVE-2024-27804

Pishi. Pishi is a code coverage tool like kcov for macOS.

R00tkitSMM.github.io. HTML

h264fuzzer. Objective-C

TinyInstLibfuzzer. C++

MacRootKit. macOS RootKit that can fuzz binaries/drivers, do kernel r/w, hook kernel and userspace functions, set custom breakpoints, GDB stub (in progress), match KDK kernels with DWARF debug symbols to release kernels, MachOs of all kinds, dyld shared caches, Objective C/Swift metadata, dump libraries, library injection (e.g. cycript), and crawl iOS apps

apple-fuzz-poc. I will provide details and pocs for some bugs I found.

xnuspy. an iOS kernel function hooking framework for checkra1n'able devices

KextFuzz. Code of KextFuzz: Fuzzing macOS Kernel EXTensions on Apple Silicon via Exploiting Mitigations (USENIX Security'23)

macosvm. Tool for running macOS guest virtual machines in macOS 12 host or higher on M1 arm64 Macs

RouterOS. Overview of router OS and some reversing.

iOS-SDKs. iOS 9 - iOS 16 SDK including symbols for private frameworks.

bookmarks. A personal list of various resources for those who are interested in learning about infosec and hacking and keeping themselves up to date. This is by no means a complete nor fresh list, but I occasionally add entries to lists.

desc_race. iOS 15.1 kernel exploit POC for CVE-2021-30955

Win32k-heap-sanitizer. win32k.sys heap memory sanitizer.

fsfuzzer. C++

Apple-Sample-Code. Apple Sample Codes

VirtualApple. Work with macOS VMs using Virtualization

VmDeviceFuzz. inprocess userspace driver hardware interface analysis

iOSRyuk. Forked from original @bxl1989 who then was forked by @userlandkernel

Vulnerability-analyze. Vulnerability analyze QEMU

haiku. The Haiku operating system. (Pull requests will be ignored; patches may be sent to https://review.haiku-os.org).

ViDeZZo. ViDeZZo source code.

fairplay_research. load kext into user mode

darwin-xnu-build. XNU kernel, Kernel Collection and CodeQL build scripts

webdavfs. C

arm-trusted-firmware. Read-only mirror of Trusted Firmware-A

iokit-utils. Dev tools for probing IOKit

TQ-pre-jailbreak. Hello from pattern-f.

vpwn. xnu local privilege escalation via cve-2015-1140 IOHIDSecurePromptClient injectStringGated heap overflow | poc||gtfo

iomfb-exploit. Exploit for CVE-2021-30807

acrn-hypervisor. Project ACRN hypervisor

HelloSilicon. An introduction to ARM64 assembly on Apple Silicon Macs

openqnx. mirror of git://git.code.sf.net/p/monartis/openqnx

VirtioCrash. C++