PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A basic guide to iOS testing

bugcrowd.com | blog | #mobile-security | #ios | #jailbreak | #mobile-testing | #xnu | #testing-guide
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A practical iOS testing guide covering jailbroken devices, the XNU kernel's FreeBSD roots, and core tooling, aimed at hackers confused by outdated mobile testing advice.
Published
Collected

Related coverage

research · calif.io
Learning to Jailbreak an iPhone with Claude (Part 1)
Claude helped me take apart an iOS Safari exploit, and retune it for my Mac. It even wrote its own variant.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · projectzero.google
Deja-XNU
This blog post revisits an old bug found by Pangu Team and combines it with a new, albeit very similar issue I recently found to try to build a "perfect" exploit for iOS 7.1.2.
blog · projectzero.google
task_t considered harmful
A Project Zero deep dive into a design flaw around task_t in the XNU kernel, demonstrating sandbox escapes and privilege escalation and how each mitigation was defeated.
vulnerability · calif.io
[CVE-2025-31207] Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild
# Taking Apart iOS Apps: Anti-Debugging and Anti-Tampering in the Wild Five apps, and what each of them does to stop you attaching a debugger. Huy Nguyen March 17, 2026 applereversing Contents 1....
vulnerability · projectzero.google
[CVE-2017-2370] Exception-oriented exploitation on iOS
A Project Zero write-up on discovering and exploiting CVE-2017-2370, a heap buffer overflow in an iOS mach trap, using deliberate crashes to build a working exploit.
Back