osx-and-ios-security-awesome - OSX and iOS related security tools

项目说明

macOS and iOS Security Related Tools ![Awesome]()

![Test]()
![Lint Markdown]()
![Lint Shell scripts]()
![Lint YAML]()

!GitHub contributors

Contents

macOS Security

1. OSX collector - Forensic analysis.
1. OSX auditor - Forensic analysis.
1. mac_apt - macOS Artifact Parsing 工具 for forensic analysis.
1. Santa - Binary whitelisting/blacklisting system.
1. Masochist - 框架 for creating XNU-based rootkits.
1. Class-dump - Command-line utility to dump Objective-C runtime information.
1. Mach inject - Inter process 代码 injection for macOS.
1. Task - Similar to mach inject.
1. Hopper - Hopper disassembler (not free).
1. Mach-O diff - Mach-o diffing tool.
1. Mac4n6 - A collection of macOS and iOS forensic artifacts.
1. XGuardian scanner - Security Scanner for macOS.
1. Crashwalk - Bucket and triage on-disk crashes
1. Passi
1. osquery - Cross-platform 工具 for data collection and forensic analysis.
1. stronghold - Easily configure macOS security settings from the terminal.
1. BlockBlock - BlockBlock continually monitors common persistence locations and displays an alert whenever a persistent component is added to the OS.
1. Dylib Hijack Scanner - A Simple utility that will scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
1. Kext - View all modules loaded in the OS kernel.
1. KnockKnock - See what's persistently installed on your Mac.
1. LinkLiar - Link-Layer MAC spoofing 界面 for macOS.
1. LockDown - Open-源码 工具 for El Capitan that audits and remediates security configuration settings.
1. MalwareBytes - Malwarebytes crushes the growing threat of Mac malware, so you are protected and your machine keeps running silky smooth.
1. O - Monitor mic and webcam, alerting you when the internal mic is activated or whenever a process accesses the webcam.
1. RansomWhere? - Ransomware Detection.
1. TaskExplorer - Explore all processes running on your Mac with TaskExplorer.
1. What's Your Sign? - Adds a menu item to Finder.app to display the cryptographic signing information for any file.
1. FSMonitor - Monitor all changes in the file system.
1. Pareto Security - A MenuBar app to automatically audit your Mac for basic security hygiene.
1. swiftGuard - A lightweight app that safeguards your System's USB Ports from any Unauthorized Access and performs countermeasures.
1. Malimite - iOS and macOS Decompiler
1. Lockpaw - macOS menu bar screen guard that locks and unlocks your display with a hotkey. Open 源码, no telemetry.
1. fort - CLI to audit, fix, and pro endpoint security. 15 checks, auto-remediation, SOC 2 e report. Single binary, no agent.
1. Raccoon - CLI toolkit for macOS security audits, fleet management via SSH, baseline drift detection, and remediation reports. Zero dependencies, agentless.
1. macharden - Enterprise-grade macOS security audit, posture assessment, and baseline drift 引擎. 54 CIS/NIST/MITRE controls, OASIS SARIF v2.1.0, and interacti Glass HTML5 dashboard.
2. macOS (& iOS) Artifact Parsing 工具 - mac_apt is a DFIR (Digital Forensics and Incident Response) 工具 to process Mac computer full disk images (or li) and extract data/metadata useful for forensic in.
1. ~~MIDAS - macOS Intrusion Detection Analysis System.~~ Abandoned.
1. ~~Mana Security - Management app for indi. It helps to keep macOS and installed applications updated.~~ Looks abandoned.

iOS Security

A collection of iOS security-related resources

Testing apps

1. IDB - iOS App Security Assessment Tool
1. iRET - iOS Reverse Engineering Toolkit
1. DVIA - Damn iOS App for learning
1. DVIA v2 - Damn iOS App v2 for learning
1. E iOS - An intentionally iOS application built with SwiftUI for modern iOS security training (30 challenges mapped to OWASP MASVS).
1. DVMA - Damn Mobile App, an intentionally Flutter app for Android and iOS

iOS Security Tools

1. LibiMobileDevice - A cross-platform 协议 library to communicate with iOS devices
1. objection - A runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak
1. imobax - iOS Mobile Backup Extractor
1. iMessage Fuzzing - iMessage fuzzing tools from Google's Project Zero
1. Themis - a multi-platform programming library for solving typical data security tasks: secure data storage, secure messaging, zero-knowledge proof authentication, etc. Recommended by OWASP MASVS.
1. NowSecure Lab Automated is an enterprise 工具 for mobile app security testing. Lab Automated features dynamic and static analysis on real devices in the cloud and returns results in minutes.
1. iosy - A CLI decompiler from .ipa files to Swift 源码 代码 (Xcode projects)
1. ~~AppCritique - iOS App Security Assessment 工具~~
1. ~~Needle - iOS App Pentesting Tool.~~ Abandoned in 2025. The de using objection instead

iOS Jailbreaks

1. CFW Guide - A complete iOS jailbreaking guide, from stock to jailbroken.
1. Dopamine - Rootless Jailbreak for iOS 15.0 - 16.6.1, A8 - A16, and M1 - M2.
1. Nathanlr - Rootless Semi-Jailbreak for 16.5.1-16.6.1.
1. Taurine - Rootful Jailbreak for iOS 14.0 - 14.8.1.
1. Odyssey - Rootful Jailbreak for iOS 13.0 - 13.7.
1. Chimera - Rootful Jailbreak for iOS 12 — 12.5.7.
1. Electra - Rootful Jailbreak for 11.0 – 11.4.1.
1. TotallyNotSpyware - Rootful Jailbreak for iOS 10.0 - 10.3.3 64-bit devices.
1. kok3shi9all Rootful Jailbreak for 9.3.2 - 9.3.6, as well as 64-bit devices on 9.2 - 9.3.1.
1. PhoenixPwn - Rootful Jailbreak for 9.3.5 32-bit devices.

---

License

![Creati License]()

This work is licensed under a Creati Attribution-ShareAlike 4.0 International License.

项目信息

开发语言：Shell

Star 数：1745

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕OSX and iOS related security tools展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。