pattern-f (@pattern_f_) 's Twitter Profile
pattern-f

@pattern_f_

doing iOS&macOS security research

ID: 902573893164056576

calendar_today29-08-2017 16:49:19

120 Tweet

15,15K Takipçi

140 Takip Edilen

pattern-f (@pattern_f_) 's Twitter Profile Photo

Write a jailbreak demo for CVE-2021-30883 (fixed in iOS 15.0.2, by Saar Amar ) on an iPhone 11 iOS 14.0. Why iOS 14.0? I just want to verify if the vulnerability is exploitable. The code is based on the old ipc_kmsg hack. The exploit has better speed than cicuta_virosa.

pattern-f (@pattern_f_) 's Twitter Profile Photo

CVE-2021-30914 I used this one to complete my first iOS LPE exploit demo, on 2021-02-09, . Unfortunately, it is not easy to exploit it in iOS 14.2 and above.

CVE-2021-30914
I used this one to complete my first iOS LPE exploit demo, on 2021-02-09, . Unfortunately, it is not easy to exploit it in iOS 14.2 and above.
pattern-f (@pattern_f_) 's Twitter Profile Photo

Write an iOS 14.6 (iPhoneXR, A12) jailbreak demo for CVE-2021-30883 (fixed in iOS 15.0.2, by Saar Amar). Use a trick from oob-timestamp (by Brandon Azad). Run two commands: "id" and "ls /"

pattern-f (@pattern_f_) 's Twitter Profile Photo

iOS 15.x demo. Run 3 cmds: ls, id, sw_vers. There is a lot of trouble in ios15. Still a long way from a real jailbreak. iPhone XS, iOS 15.0: using cve-2021-30883 (written months ago) iPhone 13 Pro, iOS 15.1: using cve-2021-30955 (thanks Brightiup ) I don't promise anything

pattern-f (@pattern_f_) 's Twitter Profile Photo

proc_entitlement_is_bool_true("com.apple.private.security.container-manager") is changed to AppleMobileFileIntegrity::AMFIEntitlementGetBool in iOS 16.4. So the hack adding entitlements to the backend OSDictionary of OSEntitlements is not working.