Prateek Gianchandani

DVIA-v2. Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.

DVIA. Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities found in iOS applications (following OWASP top 10 mobile risks) and contains several challenges that the user can try. This application also contains a section where a user can read various articles on iOS application security. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested upto iOS 8.1 .

SLAE. All the code written in the "SecurityTube Linux Assembly Expert course"

gdb-demo. A demo app to explain the use of GDB as a debugger for performing runtime analysis. A related article can be found at http://highaltitudehacks.com/2013/11/08/ios-application-security-part-21-arm-and-gdb-basics

localDataStorageDemo. A demo app to demonstrate saving local data insecurely in the application. This app is used in a tutorial that can be found at http://highaltitudehacks.com/2013/10/26/ios-application-security-part-20-local-data-storage-nsuserdefaults

InsecureCryptography-Demo. A demo application to demonstrate insecure and broken cryptography techniques in IOS Applications. Complete article can be found at http://highaltitudehacks.com/2014/01/17/ios-application-security-part-29-insecure-or-broken-cryptography

Jailbreak-Detector. A simple app with a class named JailbreakDetector to detect whether the IOS device the app is running on is jailbroken or not. A related article can be found at http://highaltitudehacks.com/2013/12/17/ios-application-security-part-24-jailbreak-detection-and-evasion

Test. 555-555-0199@example.com

prateek147.github.io. Code for my website HighAltitudeHacks.com

InsecureCryptographyDecryptor. A demo application to decrypt a weak encryption technique followed in https://github.com/prateek147/InsecureCryptography

Awesome-Hacking-Resources. A collection of hacking / penetration testing resources to make you better!

hah. Personal Blog

frida-snippets. Hand-crafted Frida examples

ipwndfu. open-source jailbreaking tool for many iOS devices

cl0ver. tfp0 for iOS 9.0-9.3.4

ios-ssl-kill-switch. Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps

ios-resources. Useful resources for iOS hacking

doubleH3lix. Jailbreak for iOS 10.x 64bit devices without KTRR

hah-website. SCSS

yalu102. incomplete iOS 10.2 jailbreak for 64 bit devices by qwertyoruiopz and marcograssi

pwn2own2020. Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities

v0rtex. IOSurface exploit

Awesome-web3-Security. A curated list of web3Security materials and resources For Pentesters and Bug Hunters.

introspy. Security profiling for blackbox iOS

iNalyzer. iOS iNalyzer

grinder. Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.

electra. Electra iOS 11.0 - 11.1.2 jailbreak toolkit based on async_awake

mach_portal. iOS 10.1.1 Kernel exploit by Project Zero

async_wake. iOS 11.1.2 kernel exploit and PoC local kernel debugger by @i41nbeer. This fork will no longer be updated, other forks have progressed much further.

SiriProxy. A (tampering) proxy server for Apple's Siri

taig8-ios-jailbreak-patchfinder. Analyzes a binary iOS kernel to determine function offsets and where to apply the canonical jailbreak patches.

go_crash_course. Basics of the go language

g0blin. a work-in-progress jailbreak for iOS 10.3.x (A7-A9)