Framework allowing applications to establish XPC communications between the main app and background processes

SipHash in Python

Decrypt iOS Apps and Mach-O binaries

A collection of tools for working with Apple software/hardware

Decrypt FairPlay encrypted executable binaries on macOS

A fast usermode x86 and x86-64 emulator for Arm64 Linux

An ARM dynamic recompiler.

Free Accounting Software

Extract sandbox profiles from the sandbox kernel extension

A kernel for aarch64

A bootloader for my aarch64 kernel

Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

A markdown parser with high extensibility.

Host your own *OS Entitlement Database

Apple Continuity Protocol Reverse Engineering and Dissector

Windows inline hooking tool.

Test a phone for stalkerware using a wifi hotspot and deep packet inspection

Test a phone for stalkerware using adb and usb debugging to scan for suspicious apps and configuration

Simulator tweak injection and helpers

A high-performance C library for Longest Prefix Match (LPM) lookups, supporting both a multi-bit trie of 8-bit stride for IPv4 and a wide multi-level 16-bit stride for IPv6, featuring runtime dynam…

libdnet provides a simplified, portable interface to several low-level networking routines.

rxtls is a hyper-optimized, per-core Certificate Transparency (CT) log processor built for one purpose: to extract and process 100,000+ X.509 certificates per second from the global CT ecosystem wi…

Tail Certificate Transparency logs and extract hostnames

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

arm64 IOKit class dumper

Experimental improvements to Objective-C analysis for Binary Ninja

Integration fork of QEMU focusing on XNU platforms (arm, aarch64, etc)

Useful resources for iOS hacking

Command line utility for inserting a dylib load command into a Mach-O binary