NSPredicate exploit on iOS and macOS
An overview of NSPredicate internals, mitigations, bypasses, and their role in iOS and macOS exploitation.
All writing
Posts
Every published note, ordered from newest to oldest.
Archive →See No Eval: Runtime Dynamic Code Execution in Objective-C
An analysis of dynamic Objective-C method invocation through NSExpression and its use in the See No Eval challenge.
Root is no more used in Palera1n
A short guide to the account and password changes for SSH access on devices jailbroken with palera1n.
Mobile pentesting over VPN
A practical guide to routing a mobile device's traffic through a VPN-connected Mac for interception and testing.