---
id: 8662
title: "KTRW: The journey to build a debuggable iPhone"
source_domain: projectzero.google
source_url: "https://projectzero.google/2019/10/ktrw-journey-to-build-debuggable-iphone.html"
published_at: "2019-10-28T00:00:00Z"
tags: ["ios", "debugging", "iphone", "project-zero", "ktrw"]
phying_url: "https://phying.com/item/8662"
lang: en
---

# KTRW: The journey to build a debuggable iPhone

## Summary

In my role here at Project Zero, I do not use some of the tooling used by some external iOS security researchers, in particular development-fused iPhones with hardware debugging capabilities like JTAG enabled. I believe that access to such devices puts those who can obtain them at a significant advantage over researchers who can not or do not wish to use them. Thus, early this year I decided I would try to find a way to build such a capability using regular iPhones you can buy at an Apple store. I identified iBoot and KTRR as primary areas for research, and spent several months looking for vulnerabilities.

## Intelligence Metadata

- **Sources:** projectzero.google
- **Published:** 2019-10-28T00:00:00Z
- **Original:** https://projectzero.google/2019/10/ktrw-journey-to-build-debuggable-iphone.html
- **Phying News:** https://phying.com/item/8662