Open-sourced CryptSn0w, our now obsolete untethered iOS ≤27/≤A20 Pro jailbreak via rare Apple server-side TSS/Cryptex bug. PATCHED, educational only. NOT a working jb
Built w @GenericCoding @D4RK7ET. SBInject: @htrowii. Help: @Jakeashacks @forcequitOS
github.com/0xjohnnydev/crypt…
Jake James retweeted
Really glad to have had the chance to work on this with @0xjohnny, @D4RK7ET, and for @htrowii giving us her process injection technique, and for the input and advice from @Jakeashacks without whom there were points this wouldn't have been possible.
github.com/0xjohnnydev/crypt…
hrtowii.dev/blog/making-a-no…
i whipped up a quick writeup here regarding this bug ^^
github repo:
github.com/hrtowii/lycorine-…
Replying to @0xjohnny
3/3 Root access =/= stable jb. Devices w/ the patchworked environment installed can still use what's there, but Apple's server now blocks further modifications. The bug itself is unfortunately useless now. Some1 will surely publish a technical writeup/PoC for those interested.
As others noted, Apple patched the not-so-secret server side bug. It enabled root access and jailbreaking even on iOS 27.2b3 (18 Pro Max). A public release would've meant an instant patch, so it stayed private. Despite efforts to preserve it, it's cooked. RIP 🪦😭
To celebrate iOS 27’s release, why not release a sandbox escape?
Announcing airlift: a PoC abusing a media sync path for out-of-scope access across much of /var/mobile via macOS↔iOS pairing.
No MobileGestalt edits yet; looking into it.
github.com/0xjohnnydev/airli…
Jake James retweeted
Dopamine 3 is out
infosec.exchange/@opa334/117…
Jake James retweeted
Titan: a PPL & SPTM bypass for A14 - A17
github.com/alfiecg24/Titan
Jake James retweeted
#deepsec "A Journey to Break Apple's PPL". PPL's been the kernel's last line of defense on A12+ for years, and it's held up. @pattern_F_ shares two ways through — and maybe one opens the door to an iOS 26 jailbreak…? 🙊 deepsec.cc/202607/speaker-pa…
Jake James retweeted
EU rejects Apple's European App Store changes: Company could be fined 10% of global turnover 9to5mac.com/2024/03/25/app-s… by @benlovejoy
Jake James retweeted
App Stores were a mistake.
Currently, we cannot update VLC on Windows Store, and we cannot update VLC on Android Play Store, without reducing security or dropping a lot of users...
For now, iOS App Store still allows us to ship for iOS9, but until when?
Jake James retweeted
Congratulations to Apple leadership for designing the worst app installation experience in the history of computing! Because Apple designers are the world’s best, there’s no question that this abomination is a premeditated part of a malicious European DMA compliance strategy.
Jake James retweeted
Apple's third-party app store announcements guarantee the company will end up in court 9to5mac.com/2024/01/26/apple… by @benlovejoy



























