34306 / ios-exploit-starterpack

What is ios-exploit-starterpack?

This is a personal documentation site built with Jekyll that walks you through iOS kernel exploitation from scratch. The author structured their learning into eight phases, starting with ARM64 assembly and C fundamentals, progressing through Darwin and XNU kernel internals, then diving into attack surfaces, exploit primitives, and hardware mitigations like PAC and KTRR. It includes real-world case studies covering checkm8, unc0ver, Dopamine, and Ian Beer's famous exploits. The site features bilingual content (English and Vietnamese), a responsive sidebar, reading progress tracking, and automatic table of contents generation.

Why is it gaining traction?

The structured curriculum is the hook. Instead of scattered blog posts and raw exploit code, you get a guided path that builds concepts incrementally. The 32-page navigation structure shows serious depth, covering everything from basic reversing tools to hardware security features like PPL and Exclaves. The mobile-friendly interface with collapsible sections makes it practical to reference during actual research work. For anyone breaking into this space, the curated case studies provide context you won't find in documentation alone.

Who should use this?

Security researchers breaking into iOS vulnerability research. Reverse engineers who understand low-level concepts but want a structured path into kernel exploitation. CTF players tackling iOS challenges who need consolidated reference material. Hobbyists building jailbreak tools who want to understand the underlying architecture rather than copying code blindly.

Verdict

The content structure is solid, but this is an unproven personal project with 19 stars and a credibility score of 0.699%. The README itself admits it was made "for myself" with uncertain maintenance. Use it as a learning scaffold, but cross-reference with established resources like Apple's documentation, the Objective-See blog, and security conference presentations. Treat it as one data source among many, not a definitive reference.