PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Evasi0n Jailbreak: Precisions on Stage 3

blog.quarkslab.com | research | #exploitation | #ios | #jailbreak | #code-signing | #evasi0n
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Evasi0n's stage 3 explained: a LINKEDIT re-export trick aliases MISValidateSignature to CFEqual so iOS code-signing checks pass without injected code, and how to reproduce it with linker options.
Published
Collected

Related coverage

research · calif.io
Learning to Jailbreak an iPhone with Claude (Part 1)
Claude helped me take apart an iOS Safari exploit, and retune it for my Mac. It even wrote its own variant.
research · blog.quarkslab.com
Modern Jailbreaks' Post-Exploitation
Compares the post-exploitation phases of iOS 11.1.2 jailbreaks LiberiOS and Electra, showing how they cope with KPP/KTRR by patching only writable segments like __DATA.
research · bughunters.google.com
Google's PageBreak Project – Real-World Findings
This post provides a technical deep dive into specific, real-world vulnerabilities discovered by Google's PageBreak scanner
research · theori.io
DeepSeek Security, Privacy, and Governance: Hidden Risks in Open-Source AI
An assessment of DeepSeek R1’s security and privacy risks — easy jailbreaks, higher rates of harmful output and insecure code, an exposed ClickHouse database — plus advice for users and developers.
research · hackerone.com
HackerOne Partners with IBM to Advance AI Protections for Granite Models
HackerOne and IBM launched a bug bounty paying up to $100K for jailbreaks and guardrail flaws in IBM Granite models, tested with Granite Guardian active in enterprise-like deployment scenarios.
research · yeswehack.com
Top web hacking techniques of 2024, McDelivery hijack, 4D SOTA jailbreak – ethical hacker news roundup
Roundup: PortSwigger's top 10 web hacking techniques of 2024 (including a YesWeHack hunter's research), a McDelivery API hijack, a 4D jailbreak of a new open-source SOTA model, and more.
Back