ios-list-apps
2 | 6K
Uploaded by: @oleavr
List installed iOS apps
List installed iOS apps
Dump encrypted assets from Titanium-built iOS apps
Just a simple demonstration project :)
Combined TLS bypass and proxy redirect for Flutter iOS apps. Patches ssl_verify_peer_cert at a known offset and hooks GetSockAddr to redirect Dart’s sockets to your Burp proxy. No VPN, no iptables, no pfctl needed
Hooks a list of candidate functions from Ghidra’s xref analysis to identify ssl_verify_peer_cert by its return value.
7-layer deep bypass for the safe_device Flutter plugin. Hooks the MethodChannel handler, spoofs Build fields, patches SystemProperties, blocks File.exists() and Runtime.exec() for root/emulator indicators, and neutralizes every underlying detection method.
Universal bypass for the safe_device Flutter plugin, intercepts all MethodChannel calls on the ‘safe_device’ channel and forces safe return values. Works across all builds without needing obfuscated class names. Use flutter-methodchannel-recon to discover any additional methods, then add them to the forced list.
Intercepts and logs all Flutter MethodChannel registrations and method calls at runtime. Reveals every plugin, its channel name, and the exact methods being invoked, useful for mapping a Flutter app’s plugin architecture and attack surface during pentesting..
Bypass most android root detection mechanisms.
FB4A (com.facebook.katana) SSL Pinning Bypass by Danieldev (@zadevz). Two-layer bypass: Native CModule replacement for proxygen::SSLVerification::verifyWithMetrics + Java TrustManager/HostnameVerifier/OkHttp CertificatePinner override. Zero UI lag, exponential backoff module detection, fuzzy symbol matching across FB versions.
An updated version of the Palera1n iOS Jailbreak Detection Bypass script from DevTraleski to work on Frida 17+
A universal Frida script to bypass application self-termination at both Objective-C and native levels on iOS. Designed for penetration testing, ethical hacking, reverse engineering, bug bounty and dynamic analysis of iOS applications that intentionally terminate when security checks (jailbreak detection, tampering, instrumentation) are triggered.
okhttp3.CertificatePinner Android TrustManagerImpl SSLContext HostnameVerifier
A hardened Frida script to bypass IOSSecurity framework protections in iOS applications by intercepting runtime security checks at their decision points.
TikTok Android SSL/TLS pinning bypass — defeats native certificate verification and Java-layer trust managers. Works on com.zhiliaoapp.musically. For authorized security research and reverse engineering only.
The script hooks into the onTextChanged method of android.widget.TextView. It dynamically identifies the view class and queries the Android system to see if the view is protected against obscured touches (overlays). If the protection is disabled (false), it flags the view as vulnerable to Tapjacking.