Add a new routine to XNU's comm page area and call it from a user space program (macOS).

macOS kext, and userspace client to play with the zalloc kernel allocator.

Build your own complete XNU kernel header set, replaces Kernel.framework. Gain access to kernel private structures and symbols etc with IDE indexing worked.

Kernel Fuzzer for Apple's XNU, mainly meant for the iOS operating system

iOS 12.0 -> 12.1.2 _kernproc and _rootvnode offsets for 16K devices

Providing a great interface to the iOS kernel, hardware, threads and processes in a great research environment. (WIP)

Research on Apple's USB protocols

A dump of some things from Jonathan Levin's newosxbook

Research into porting the XNU kernel to ARM devices.

A WIP "Vulnerable by Design" kext for iOS/macOS to play & learn *OS kernel exploitation

Latest XNU Source from Apple.

xnu-4903.270.47 with untested OPEMU for Mojave 10.14.6

PoC showing a method to hide syscalls on XNU (arm64 macOS and iOS) from static analysis

Integration fork of QEMU focusing on XNU platforms (arm, aarch64, etc)

Checks macOS for Kernel Task Port. It may help detect intrusive kexts that would leak the kernel task.

GeoSn0w's OpenJailbreak Project, an open-source iOS 11 to iOS 13 Jailbreak project & vault.

An Open-Source iOS 11.0 -> 11.4.1 (soon iOS 13) Jailbreak, made for teaching purposes.

Get p-state distribution and active frequency on Intel Macs without using IPG or kexts, by accessing /dev/xcpm

A QEMU fork emulates D22AP/D221AP devices(iPhone X).