codecolorist

bagbak. [deprecated] Yet another frida based iOS dumpdecrypted. Also decrypts app extensions

grapefruit. Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

vscode-frida. Unofficial frida extension for VSCode

GlobalWebInspect. Enable WebView remote inspector for every app

XpcScope. Yet another xpc sniffer

sploits. PoC

gossip-summer-school-2018. Source code repo for Let's GOSSIP summer school 2018

IDA-ObjCExplorer. Objective C classdump for IDA Pro

fruity-frida. Utilities to deploy frida on rootless iOS and more

novacane. Some frida scripts

entdb. Host your own *OS Entitlement Database

ios-debug.py. Shortcut to automate your iproxy, debugserver, lldb workflow

urlschemes. Enumerate URL schemes on macOS and Windows

grab.js. simple TCP banner grabbing with node.js

slides. Mirror my talk materials

macchk. 🎤 mic check! checksec for Mach-O executables

glskybox. Faster skysphere to skybox convertion using OpenGL

DezhouInstrumenz. Source code of "Dezhou Instrumentz" challenge from RealWorldCTF 2019 quals

entdb. iOS and macOS entitlement database

diciassette. Upgrade frida 16 agent code to 17. Whole project is AI generated, use with caution

mistune-patch-backport. Backporting CVE-2021-1748 patch for iOS <=14.3

dumpster. IPA workflow

BadTokenizerPoc. Abusing fts3_tokenizer

mistune. Browser based rce for iOS <= 14.3

idasvg. IDA Pro plugin for exporting graph view layouts to SVG

zhparser-docker. Postgresql with zhparser

koa-sqlite3-session. sqlite3 adaption for koa-generic-session

Mooring. A macOS menu bar util for iproxy instances

frida-web-client. Frida web client

frida-node-portable. Compile single executable to use frida-node

unwrap. Play with OS X installers and firmwares

entdb-data. Raw entitlement data repository for Apple platforms

vfdecrypt. vfdecrypt that can compile on latest sdk

dsctool. Small command util for parsing dsc

plist.wasm. WebAssembly wrapper for libplist

entitlements-database. Python

tss-frida. TypeScript plugin for ObjC and Java runtime information autocomplete

igf-agent. TypeScript

pl. Makefile

bctf2016-jukebox. https://blog.chichou.me/bctf-2016-jukebox-%E5%87%BA%E9%A2%98%E7%AC%94%E8%AE%B0-961d625ddb59

RuntimeBrowser. Objective-C Runtime Browser, for Mac OS X and iOS

nettop. JavaScript

tinyplist. A lightweight XML property list (plist) parser and serializer that runs entirely in the browser. No dependencies, no build step — just native Web APIs.

igf-testsuites. Test suites for grapefruit

entdb-indexer. Crontab workflow to discover and index entitlements from Apple firmware