Open-source alternatives to RE IOS Apps

Various recipes for testing common scenarios with Cypress

Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.

Steal Net-NTLM Hash using Bad-PDF

A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:

Fishhook is a binary instrumentation library for iOS and iOS simulators. It functions as a Mach-O symbol rebinder and instrumenter, allowing for the replacement of system library implementations with custom logic at runtime. The project redirects function calls by updating lazy and non-lazy symbol pointers within Mach-O binary data segments. This approach enables the interception and modification of existing function behavior without altering the original binary on disk. The toolset covers binary instrumentation and dynamic hooking for iOS applications, facilitating the monitoring and altera

idb is a suite of tools for controlling and automating iOS simulators and physical devices. It consists of a command line interface, a simulator controller, and a bridge that provides access to internal system interfaces for automating features normally restricted to the graphical user interface. The project includes a remote target manager that enables the control of iOS devices and simulators across different machines or data centers using a companion host process. This system separates the command line interface from the process managing the actual device connection. The toolset provides

Easily spoof your MAC address in macOS, Windows, & Linux!

FLEX is an in-app debugging tool and runtime exploration environment for iOS applications. It provides an integrated suite for inspecting and modifying the internal state of a running process without the use of an external debugger. The project includes a runtime inspector for browsing the memory heap and calling methods dynamically, alongside a view hierarchy debugger for visualizing and adjusting layout structures in real time. It features a network traffic monitor to log and analyze HTTP request history, headers, and responses, as well as a sandbox manager for viewing and editing files and

ios-webkit-debug-proxy is a command-line proxy that bridges Chrome DevTools to Safari Web Inspector on iOS devices, enabling remote debugging of web content over USB. It translates WebKit remote debugging protocol messages into Chrome DevTools Protocol over persistent WebSocket connections, allowing developers to use Chrome DevTools, Safari Web Inspector, or Firefox DevTools to inspect and debug web content in MobileSafari and UIWebViews on real and simulated iOS devices. The proxy discovers and communicates with iOS devices over USB using the libimobiledevice library without requiring iTunes

This repository contains several tools Project Zero uses to test iPhone messaging. It includes:

Detect-It-Easy is a binary file identifier and analysis toolkit designed to determine file formats, compilers, and packers. It functions as a binary file identifier that utilizes signature matching and heuristic analysis to identify executable and archive formats. The project includes a custom file signature engine and a scriptable rule system for defining and applying detection logic to identify specific binary patterns. It features specialized detectors for Android packages, such as APK and DEX files, and a malware packer detector to identify protections, obfuscators, and virus families. T

OS X Auditor is a free Mac OS X computer forensics tool

Netfox is an iOS and macOS network debugging library designed to intercept and monitor HTTP traffic. It functions as an in-app HTTP traffic inspector that captures request headers and response bodies for real-time network analysis. The tool provides a network performance monitor to calculate response times and data sizes, as well as a network log exporter for sharing captured request and response data via email. The project covers network analysis capabilities including traffic filtering to exclude specific URLs, request body capture, and a debug interface that can be toggled via programmati

Detects the hardware, software and display of the current iOS or Mac OS X device at runtime.

Profiling / Debugging assist tools for iOS. (Memory Leak, OOM, ANR, Hard Stalling, Network, OpenGL, Time Profile ...)

A collection of resources for OSX/iOS reverse engineering.