felix-pb/kfd

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1012 stars · 184 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

kfd is a C library that provides kernel memory read/write on Apple devices by exploiting physical use-after-free (PUAF) vulnerabilities to obtain dangling PTEs. It exposes a small API (kopen/kread/kwrite/kclose) and includes simple executable wrappers for iOS and macOS.

Use cases

• read and write kernel memory on iOS devices
• obtain kernel read/write primitive on macOS
• research physical use-after-free vulnerabilities in XNU kernel
• build jailbreak or security research tooling for Apple platforms
• exploit CVE-2023-23536, CVE-2023-32434, or CVE-2023-41974 in controlled research

When to choose

• you need a kernel read/write primitive on supported iOS/macOS versions for security research
• you want a small, library-contained exploit API rather than a full jailbreak
• you are studying PUAF exploitation techniques on Apple silicon

When to avoid

• you need offsets for devices or iOS versions beyond what the author supports
• you want a maintained tool for current iOS/macOS releases (vulnerabilities are patched)
• you need a general-purpose jailbreak with package management and tweaks
• you require production-safe software - kernel panics are possible

Facets

library · maturity maintenance

security cryptography security apple-ecosystem operating-systems c kernel-exploitation kernel-memory-read-write puaf jailbreak vulnerability-research libkfd ios macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="felix-pb/kfd")