iOS-Vulnerability-Research
iOS-Vulnerability-Research copied to clipboard
Resources and writeups for studying & practicing iOS security
iOS
Tools
Kernel Debugging
https://github.com/googleprojectzero/ktrw
Jailbreaking
https://checkra.in/
FRIDA
OBTS v4.0: "iOS Reverse Engineering With Frida" - Christine Fossaceca
DFRWS EU 20 - Dynamic Instrumentation for Forensics research using FRIDA - Or Begam
frida-boot - a binary instrumentation workshop, using Frida, for beginners
Exploits database
0day "In the Wild" - By Google Project Zero
Videos (Talks/Presentations/Tutorials)
2018-10 Viewer Discretion Advised: (De)coding an iOS Kernel Vulnerability Adam Donenfeld - Slides
https://objectivebythesea.com/v1/talks.html
https://objectivebythesea.com/v2/talks.html
https://objectivebythesea.com/v3/content.html
https://objectivebythesea.com/v4/talks.html (2021)
Billy Ellis - iOS Exploitation/Security Research Tutorials (Some parts are outdated)
Articles
https://papers.put.as/ios/ios/
2019-08 A very deep dive into iOS Exploit chains found in the wild - Ian Beer
2018-12-Fortinet- A Look into XPC Internals: Reverse Engineering the XPC Objects
2016.12 - tfp0 powered by Pegasus - cl0ver/
Fuzzing
https://googleprojectzero.blogspot.com/2021/05/fuzzing-ios-code-on-macos-at-native.html
Kernel Libraries/Frameworks
https://developer.apple.com/documentation/kernel/iokit_fundamentals
Blogs
https://bazad.github.io/
https://blog.zecops.com/
OLD
https://github.com/kpwn/iOSRE
Source Code
https://github.com/apple/darwin-xnu
MacOS
Articles
https://papers.put.as/macosx/macosx/
CTF challenges
https://blog.ttdennis.com/2019/01/13/writeup-35c3-ctf-keybase.html
https://siguza.github.io/cl0ver/
2021-SynAcktiv-MACOS XPC EXPLOITATION - SANDBOX SHARE CASE STUDY (Alles CTF)