prateek147 Goto Github PK

async_wake

iOS 11.1.2 kernel exploit and PoC local kernel debugger by @i41nbeer. This fork will no longer be updated, other forks have progressed much further.

awesome-hacking-resources

A collection of hacking / penetration testing resources to make you better!

awesome-web3-security

A curated list of web3Security materials and resources For Pentesters and Bug Hunters.

cl0ver

tfp0 for iOS 9.0-9.3.4

demo

🤖 Fork me to try out Dependabot

doubleh3lix

Jailbreak for iOS 10.x 64bit devices without KTRR

dvia

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities found in iOS applications (following OWASP top 10 mobile risks) and contains several challenges that the user can try. This application also contains a section where a user can read various articles on iOS application security. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested upto iOS 8.1 .

dvia-v2

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.

electra

Electra iOS 11.0 - 11.1.2 jailbreak toolkit based on async_awake

frida-snippets

Hand-crafted Frida examples

g0blin

a work-in-progress jailbreak for iOS 10.3.x (A7-A9)

gdb-demo

A demo app to explain the use of GDB as a debugger for performing runtime analysis. A related article can be found at http://highaltitudehacks.com/2013/11/08/ios-application-security-part-21-arm-and-gdb-basics

go_crash_course

Basics of the go language

grinder

Grinder is a system to automate the fuzzing of web browsers and the management of a large number of crashes.

hah

Personal Blog

hah-website

hello_jenkins

A Jenkins Demo with a Hello World C++ program.

inalyzer

iOS iNalyzer

insecurecryptography-demo

A demo application to demonstrate insecure and broken cryptography techniques in IOS Applications. Complete article can be found at http://highaltitudehacks.com/2014/01/17/ios-application-security-part-29-insecure-or-broken-cryptography

insecurecryptographydecryptor

A demo application to decrypt a weak encryption technique followed in https://github.com/prateek147/InsecureCryptography

introspy

Security profiling for blackbox iOS

ios-resources

Useful resources for iOS hacking

ios-ssl-kill-switch

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps

ipwndfu

open-source jailbreaking tool for many iOS devices

jailbreak-detector

A simple app with a class named JailbreakDetector to detect whether the IOS device the app is running on is jailbroken or not. A related article can be found at http://highaltitudehacks.com/2013/12/17/ios-application-security-part-24-jailbreak-detection-and-evasion

localdatastoragedemo

A demo app to demonstrate saving local data insecurely in the application. This app is used in a tutorial that can be found at http://highaltitudehacks.com/2013/10/26/ios-application-security-part-20-local-data-storage-nsuserdefaults

mach_portal

iOS 10.1.1 Kernel exploit by Project Zero

prateek147.github.io

Code for my website HighAltitudeHacks.com

pwn2own2020

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities

rusty