- OSX collector - Forensic analysis.
- OSX auditor - Forensic analysis.
- mac_apt - macOS Artifact Parsing Tool for forensic analysis.
- Santa - Binary whitelisting/blacklisting system.
- Masochist - Framework for creating XNU-based rootkits.
- Class-dump - Command-line utility to dump Objective-C runtime information.
- Mach inject - Inter process code injection for macOS.
- Task vaccine - Similar to mach inject.
- Hopper - Hopper disassembler (not free).
- Mach-O diff - Mach-o diffing tool.
- Mac4n6 - A collection of macOS and iOS forensic artifacts.
- XGuardian scanner - Security Scanner for macOS.
- Crashwalk - Bucket and triage on-disk crashes
- PassiveFuzzFrameworks
- osquery - Cross-platform tool for data collection and forensic analysis.
- stronghold - Easily configure macOS security settings from the terminal.
- BlockBlock - BlockBlock continually monitors common persistence locations and displays an alert whenever a persistent component is added to the OS.
- Dylib Hijack Scanner - A Simple utility that will scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
- KextViewer - View all modules loaded in the OS kernel.
- KnockKnock - See what's persistently installed on your Mac.
- LinkLiar - Link-Layer MAC spoofing GUI for macOS.
- LockDown - Open-source tool for El Capitan that audits and remediates security configuration settings.
- MalwareBytes - Malwarebytes crushes the growing threat of Mac malware, so you are protected and your machine keeps running silky smooth.
- OverSight - Monitor mic and webcam, alerting you when the internal mic is activated or whenever a process accesses the webcam.
- RansomWhere? - Ransomware Detection.
- TaskExplorer - Explore all processes running on your Mac with TaskExplorer.
- What's Your Sign? - Adds a menu item to Finder.app to display the cryptographic signing information for any file.
- FSMonitor - Monitor all changes in the file system.
- Pareto Security - A MenuBar app to automatically audit your Mac for basic security hygiene.
- swiftGuard - A lightweight app that safeguards your System's USB Ports from any Unauthorized Access and performs various countermeasures.
- Malimite - iOS and macOS Decompiler
- Lockpaw - macOS menu bar screen guard that locks and unlocks your display with a hotkey. Open source, no telemetry.
- fort - CLI to audit, fix, and prove macOS endpoint security. 15 checks, auto-remediation, SOC 2 evidence report. Single binary, no agent.
- Raccoon - CLI toolkit for macOS security audits, fleet management via SSH, baseline drift detection, and remediation reports. Zero dependencies, agentless.
- macharden - Enterprise-grade macOS security audit, posture assessment, and baseline drift engine. 54 CIS/NIST/MITRE controls, OASIS SARIF v2.1.0, and interactive Liquid Glass HTML5 dashboard.
- macOS (& iOS) Artifact Parsing Tool - mac_apt is a DFIR (Digital Forensics and Incident Response) tool to process Mac computer full disk images (or live machines) and extract data/metadata useful for forensic investigation.
- REA - Local CLI and MCP tools for agent-assisted inspection of macOS application bundles, Mach-O binaries, and Electron apps, with evidence provenance; native deep analysis uses separately installed Hopper, Ghidra, or IDA.
MIDAS - macOS Intrusion Detection Analysis System.Abandoned.Mana Security - Vulnerability Management app for individuals. It helps to keep macOS and installed applications updated.Looks abandoned.
A collection of iOS security-related resources
- IDB - iOS App Security Assessment Tool
- iRET - iOS Reverse Engineering Toolkit
- DVIA - Damn Vulnerable iOS App for learning
- DVIA v2 - Damn Vulnerable iOS App v2 for learning
- EvilCorp iOS - An intentionally vulnerable iOS application built with SwiftUI for modern iOS security training (30 challenges mapped to OWASP MASVS).
- DVMA - Damn Vulnerable Mobile App, an intentionally vulnerable Flutter app for Android and iOS
- LibiMobileDevice - A cross-platform protocol library to communicate with iOS devices
- objection - A runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak
- imobax - iOS Mobile Backup Extractor
- iMessage Fuzzing - iMessage fuzzing tools from Google's Project Zero
- Themis - a multi-platform programming library for solving typical data security tasks: secure data storage, secure messaging, zero-knowledge proof authentication, etc. Recommended by OWASP MASVS.
- NowSecure Lab Automated is an enterprise tool for mobile app security testing. Lab Automated features dynamic and static analysis on real devices in the cloud and returns results in minutes.
- iosy - A CLI decompiler from .ipa files to Swift source code (Xcode projects)
AppCritique - iOS App Security Assessment ToolNeedle - iOS App Pentesting Tool.Abandoned in 2025. The devs recommend using objection instead
- CFW Guide - A complete iOS jailbreaking guide, from stock to jailbroken.
- Dopamine - Rootless Jailbreak for iOS 15.0 - 16.6.1, A8 - A16, and M1 - M2.
- Nathanlr - Rootless Semi-Jailbreak for 16.5.1-16.6.1.
- Taurine - Rootful Jailbreak for iOS 14.0 - 14.8.1.
- Odyssey - Rootful Jailbreak for iOS 13.0 - 13.7.
- Chimera - Rootful Jailbreak for iOS 12 — 12.5.7.
- Electra - Rootful Jailbreak for 11.0 – 11.4.1.
- TotallyNotSpyware - Rootful Jailbreak for iOS 10.0 - 10.3.3 64-bit devices.
- kok3shi9all Rootful Jailbreak for 9.3.2 - 9.3.6, as well as 64-bit devices on 9.2 - 9.3.1.
- PhoenixPwn - Rootful Jailbreak for 9.3.5 32-bit devices.
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
