iOS Developer Toolkit
The all-in-one iPhone and iPad workbench for your Mac.
iOSmacOSPythonv0.3.4
Independent macOS & iOS security lab
See what your Mac and iPhone are really doing.
Open-source apps for security posture, code-signing inspection, iPhone diagnostics, and packet capture, plus evidence-first research into Apple internals. Each tool shows you exactly what it observes, and nothing more.
- Apps
- 13
- Research papers
- 6
- Trackers on this site
- 0
Featured app
iOS Developer Toolkit
iOSmacOSv0.3.4
Mount Developer Disk Images, run guided pymobiledevice3 and DVT diagnostics, stream Unified Logs, capture packets, simulate locations, inspect IPAs, make encrypted backups, and build hashed evidence cases from one trusted connection.
- 12 focused workspaces, from Device & DDI to Evidence Capture
- 49 guided commands with risk labels and exact argument previews
- Typed confirmation before any change to the device
- Evidence cases with coverage states and SHA-256 manifests
Applications
Tools for your Mac and iPhone
For security researchers, incident responders, iOS developers, and Mac users who want to understand their own devices.
iOS Developer Toolkit (Swift)
The iPhone and iPad workbench, rebuilt as a native Mac app.
iOSmacOSSwiftv1.0.0
RVI-Sentinel
iPhone packet capture with a memory for what changed.
iOSmacOSCross-platform: also runs on Windows, Linux, ChromeOSPythonSource only
RVI-Sentinel for macOS
Guided iPhone and iPad packet capture, as a native Mac app.
iOSmacOSSwiftSource only
RVI + PKTAP Correlator
Put iPhone traffic, Mac packets, and Mac logs on one timeline.
iOSmacOSSwiftSource only
MacScope
Security posture and vulnerability scanning that changes nothing.
macOSGoSource only
EntitlementLens
See what signed code declares.
macOSSwiftSource only
Interface Sentinel
Only the network interfaces you allow stay up.
macOSSwiftSource only
System Profiler Explorer
Understand what your Mac reports about itself.
macOSSwiftv0.1.2
Volume Mount Troubleshooter
Diagnose and mount external drives without risking them.
macOSSwiftv0.3.0
ManPagesCatalog
Your Mac’s manuals, within reach.
macOSSwiftv2.0.0-beta.1
DriveTrace
See what’s in your Google Drive, and who changed it.
macOSSwiftSource only
Sandbox Lens
Inspect sandbox policy files and compare precise evidence.
macOSSwiftv0.1.1
How we build
Security tools should be the most trustworthy software on your machine.
Observe first, change explicitly
Scanners and inspectors are read-only. Tools that do change something, like mounting a volume or disabling an interface, say so and ask first.
Local-first, no telemetry
Tools run on your machine with no accounts or analytics. Where one needs the network, its README says exactly why.
Observation vs. interpretation
Every tool and write-up separates what was directly seen from what it might mean.
Evidence you can verify
Hashed outputs, sanitized screenshots, and reproducible steps, so you don’t have to take our word for it.
Research
Evidence-first write‑ups
Deep dives into Apple internals, from firmware restore pipelines to the network traffic behind iCloud.
- 9 min read
Inside Apple’s Software Update RAMDisk
T2 DFU restore, the ramrod pipeline, SSV sealing, and firmware Option ROMs.
macOS - 18 min read
iOS System Research
Carrier profiles, OTAUpload, sysdiagnose, and unexplained MDM records.
iOS - 7 min read
Apple Networking & Cloud Infrastructure
What four minutes of Unified Logs reveal about Apple’s network.
macOS - 22 min read
The Unofficial skywalkctl Field Guide
Apple’s kernel networking subsystem, one command at a time.
macOS - 28 min read
Optical Air-Gap Lab
Recovering near-invisible QR codes from an iPhone photo of a screen.
macOSiOS - 5 min read
macOS Install Security Research
Installer, recovery RAMDisk, firmware, and EFI forensics for macOS 26.6.2.
macOS
Recent releases
Synced from GitHub Oct 8, 2026Everything here is open source
Read the code, check the evidence, and help improve it. Bug reports with reproducible steps, focused pull requests, and research corrections are all welcome.