This project is a fork of the official QEMU repository. Please refer to this README for information about the QEMU project.
The goal of this project is to boot a fully functional iOS system on QEMU.
For technical information about the research, follow our blog: - Running iOS in QEMU to an interactive bash shell (1) - Running iOS in QEMU to an interactive bash shell (2) - Tunnelling TCP connections into iOS on QEMU - Accelerating iOS on QEMU with hardware virtualization (KVM)
Help is wanted!
If you are passionate about iOS and kernel exploitation and want to help us push this project forward, please refer to the open issues in this repo :)
Current project's functionality:
To run iOS 12.1 on QEMU follow this tutorial.
This project works on QEMU with KVM! Check this blog post for more information.
We have implemented multiple GDB scripts that will help you to debug the kernel:
To disable ASLR in DYLD shared cache follow this tutorial.
Follow here to learn about how we've implemented the TCP tunneling.
Follow the code to see all the patches we've made to the iOS kernel for this project: