Yes😉

Just bought an iPad. Let's do something fun with it. 😆 #DarkSword

after months of hardwork 👀

I'm an iOS SEP app developer. 👀

My talk was accepted by BlackHat USA 2023. #BHUSA

I hate debugging kernel. The only useful information is register values left in panic log.

iOS 15.x demo. Run 3 cmds: ls, id, sw_vers. There is a lot of trouble in ios15. Still a long way from a real jailbreak. iPhone XS, iOS 15.0: using cve-2021-30883 (written months ago) iPhone 13 Pro, iOS 15.1: using cve-2021-30955 (thanks @realBrightiup ) I don't promise anything

Write an iOS 14.6 (iPhoneXR, A12) jailbreak demo for CVE-2021-30883 (fixed in iOS 15.0.2, by @AmarSaar). Use a trick from oob-timestamp (by @_bazad). Run two commands: "id" and "ls /"

1 CVE, 3 people. Lucky, or unlucky?

CVE-2021-30914 I used this one to complete my first iOS LPE exploit demo, on 2021-02-09, . Unfortunately, it is not easy to exploit it in iOS 14.2 and above.

Write a jailbreak demo for CVE-2021-30883 (fixed in iOS 15.0.2, by @AmarSaar ) on an iPhone 11 iOS 14.0. Why iOS 14.0? I just want to verify if the vulnerability is exploitable. The code is based on the old ipc_kmsg hack. The exploit has better speed than cicuta_virosa.

iOS 14.0 "remote jailbreak" demo.😎 (RCE + LPE exploit) Don't stay on versions on or below iOS 14.3. If you click a malicious link, bad guys would steal everything on your iPhone.