@opa334dev

I do not use this platform

 Germany
infosec.exchange/@opa334
Joined May 2018
  • Tweets7.8K
  • Following330
  • Followers74.5K
437Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Revisiting SecureROM Adventures by Steven De Franco (@iH8sn0w)
1
5
2
95
11,098
For those that aren't aware: 27.2 beta 3 did likely patch an SPTM Bypass. The advice through everything has still been "stay and wait for stuff", and that hasn't changed in the slightest However, as there's more "known" (for lack of a better term) about this (compared to the exact specifics of the Calif chain), I would say that - if you end up in a situation where you absolutely have to update - I would highly recommend avoiding anything past 27.0.1/27.2b2 (and probably 26.7.1 for AlternateSU)
16
33
201
20,183
Hell yeah Cellebrite is dropping SecureROM 0days on stage (variant of usbliter8) !!
8
34
5
367
43,403
Finally got around to releasing Trigon for arm64e. Enjoy! alfiecg.uk/2026/10/17/Trigon…

Trigon: full-chaining arm64e with 100% reliability (part 3)

Completing the trilogy of Trigon blog posts by adopting a unique arm64e exploit strategy.

alfiecg.uk
10
56
1
366
23,820
At #hexacon - Calif.io demos iOS 27.0.1 untethered jailbreak on iPhone 18 Pro
91
325
81
2,182
527,938
Replying to @calif_io
Really cool stuff! Hexacon FOMO is real :D
7
1
141
20,174
Managed to get @opa334dev to talk about the TSS bug on chITchat 👀 You can listen on most platforms but here is the link to Spotify. Will upload to youtube as well. open.spotify.com/episode/5fI…

Opa334 - TSS bug and Dopamine

chITchat by pamoutaf · Episode

open.spotify.com
[email protected]@opa334devOct 9
RIP 🪦 Craziest bug I have ever seen in my 10 years of being in the iOS scene. I really wish Apple would stop being so anti consumer. Everyone who knew about this had an SRD suddenly overnight and nothing bad happened.
1
26
2
177
31,337
Replying to @ReisogluMehmet
None. This bug died today. It cannot be used on any device or version anymore.
1
1
37
6,377
Replying to @dd_pwnd
This bug was unable to be weaponized since it's behind pairing and physical access. If Apple put this behind a mechanism that verifies you are the owner of the device and if so adds the ECID to a whitelist in TSS, that would mitigate 99.9% of bad stuff you could do.
40
5,219
Replying to @dev_majd
The original guy who found it was @liquidsky22, he told a few people and the problem was that originally they didn't understand the severity of what they had. Then a twitter space happened and it spread a bit further after that. But at some point we started to try and contain it.
1
1
67
9,182
I also could show tweaks, but I have been so busy getting the base environment to the point where it's usable even after the bug is patched that I didn't even get around to doing proper tweak injection yet 😅
6
1
108
18,353
As others noted, Apple patched the not-so-secret server side bug. It enabled root access and jailbreaking even on iOS 27.2b3 (18 Pro Max). A public release would've meant an instant patch, so it stayed private. Despite efforts to preserve it, it's cooked. RIP 🪦😭
59
106
13
1,309
316,995
RIP 🪦 Craziest bug I have ever seen in my 10 years of being in the iOS scene. I really wish Apple would stop being so anti consumer. Everyone who knew about this had an SRD suddenly overnight and nothing bad happened.
johnny
@0xjohnnyOct 9
As others noted, Apple patched the not-so-secret server side bug. It enabled root access and jailbreaking even on iOS 27.2b3 (18 Pro Max). A public release would've meant an instant patch, so it stayed private. Despite efforts to preserve it, it's cooked. RIP 🪦😭
22
91
5
1,276
199,590
Replying to @0xkuj
Yes, I fucked something up. Will push a fix shortly. Also please keep in mind this is absolutely not the right platform to report such issues.
2
1
22
1,598
🚨 Meet the first speaker of #POC2026 Lars Fröder (@opa334dev) - “iOS Jailbreaking: From P(PL)ast to PreS(PTM)ent” This is just the beginning. More POC2026 speakers will be revealed soon — stay tuned. 👀 Our CFP is still open until September 30.
20
177
13,249
Dopamine 3 is out infosec.exchange/@opa334/117…

opa334 (@[email protected])

Dopamine 3 is out Big shoutouts to everyone that contributed: @[email protected] staturnz Clarity wh1te4ever dora2ios/kok3shidoll And special thanks to my minecraft friend sk8ingDuck for...

infosec.exchange
154
245
24
1,032
290,338
momentarius: PPL Bypass for A12/A13 by me and @imnotclarity github.com/staturnzz/momenta…

GitHub - staturnzz/momentarius: A12/A13 PPL Bypass

A12/A13 PPL Bypass. Contribute to staturnzz/momentarius development by creating an account on GitHub.

github.com
13
42
1
225
21,339
Titan: a PPL & SPTM bypass for A14 - A17 github.com/alfiecg24/Titan

GitHub - alfiecg24/Titan: An SPTM bypass for iOS 16 - 17.3.1

An SPTM bypass for iOS 16 - 17.3.1. Contribute to alfiecg24/Titan development by creating an account on GitHub.

github.com
12
121
3
603
39,293
Replying to @82Flex
Huh interesting. It worked for me on iOS 17 before. Not sure why I never noticed this.
5
33
5,375
Replying to @GS1023X @ilearn_it
infosec.exchange/@opa334/117…

opa334 (@[email protected])

Okay... verdict: High functioning AI slop Many redundant functions that just wrap around already existing functions, no SPTM page table allocator (it somehow does everything through the VM layer, I'm...

infosec.exchange
6
1,303
Load more