Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Evasi0n Jailbreak: Precisions on Stage 3

blog.quarkslab.com | research | #exploitation | #ios | #jailbreak | #code-signing | #evasi0n

Summary

Evasi0n's stage 3 explained: a LINKEDIT re-export trick aliases MISValidateSignature to CFEqual so iOS code-signing checks pass without injected code, and how to reproduce it with linker options.
Published
Collected

original ↗

Related coverage

  1. Modern Jailbreaks' Post-Exploitation (blog.quarkslab.com)
  2. Rethinking & Repackaging iOS Apps: Part 1 (bishopfox.com)
  3. Getting Started with iOS Penetration Testing (Part 1) (yeswehack.com)
  4. Dopamine: rootless semi-untethered jailbreak for iOS 15 to 26.0.1 (github.com)
  5. Attacking the ARM's TrustZone (blog.quarkslab.com)
  6. Security assessment of instant messaging app ChatSecure: when privacy matters (blog.quarkslab.com)

back