More than just a pretty screen
Customize your virtual device exactly the way you need it, and take your work to the next level with our handy built-in utilities.
Tools for every occasion
Our suite of tools helps you research, debug, test and explore your virtual device.
Connect
Connect to devices via XCode, Finders, or libimobile script, and to jailbroken iOS via SSH, and Android via ADB or IDE. And use your favorite HTTP proxy/monitor, like Burp or Charles Proxy.
Apps
Manage and install apps from the UI, ADB or IDE. And the Corellium App Browser facilitates loading, removing, and running applications right in your browser.
Network Monitor
Capture and inspect the flow of HTTP/S traffic while transparently disabling certificate pinning.
CoreTrace
Quickly browse the file system and deeply inspect the state of the device with a holistic view of system calls.
Frida
Easily connect the virtual device to standard debug tools like GDB and IDA, and run scripts, all in the pre-integrated Frida console.
Battery
Charge level, Health, Connection Type and Status.
Environment
Temperature, Light, Pressure and Humidity.
Location
Latitude, Longitude, Altitude and Time Offset.
Motion and Position
Acceleration, Gyroscope, Magnetic and Orientation.
Your device, your kernel
Get the most out of your virtual devices with advanced configuration.
Kernel Patches
Enable or disable patches applied to the kernel to maximize developer convenience.
Boot Arguments
Specify boot arguments that will be passed to the kernel when the device is started.
Kernel Slide
Set the randomization slide value used by iOS to relocate the iOS kernel during boot in order to randomize addresses located inside the kernel.
Random Seed
You can optionally specify the 64 byte hex random seed provided by iBoot to the iOS kernel, which affects things like the dyld shared cache slide.
Pointer Authentication Code
Corellium can simulate the behavior of PAC instructions in mobile processors. You have the option to turn this feature on or leave if off.
Device IDs
We randomize unique device identifiers by default, but you can optionally chance them in the device configuration.
Trust Cache
Even when non-jailbroken, you can modify the code directory hashes to allow certain binaries to run even if they are not signed by Apple.
Extra Access
Enable keyboard passthrough from the web interface, as well as kalloc / kfree trace access via GDB.
Custom Kernel
Instead of the stock kernel, you can upload and use any compatible Arm kernel.
Device Tree
You can specify a custom device tree instead of using a stock device tree.
Ramdisk
You can boot the device from a custom ramdisk instead of from NAND.
Powerful features for the power user
Features only available on our Enterprise and Premium licenses.
Kernel Debugging
Instead of the stock kernel, you can upload and use any compatible Arm kernel.
Projects and Teams
Assign a certain number of cores to a project, and then assign certain users and/or teams to that project.
iBoot Support
Instead of booting the device directly from the kernel, the application processor can be started from iBoot.
SEP Support
Instead of protocol-level SEP emulation, SEP firmware can be run in an emulator. You can also patch SEPOS to print debug messages to console.