Jailed iOS app that can install IPAs permanently with arbitary entitlements and root helpers because it trolls Apple

CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.

The Swiss army knife of vanilla Hackintoshing

modules deps on HookZz framework.

iOS gamed exploit (fixed in 15.0.2)

A collection of types & functions definitions useful for iOS/macOS binaries analysis.

AEA OTA/IPSW decryption

Decompiling macOS Hypervisor.framework by hand

Securely extend the sandbox of system processes and user applications

This is a work-in-progress command line tool for reversing run-only AppleScripts. It will help parse the output of applescript-disassembler.py into something more human-readable.

Collection of my bugs and CVE, with PoC or writeup

Random rev of shortcuts (mostly WorkflowKit)

C2 using the full power of NSExpressions to replace in memory dylib loading