Hakim BOUKHADRA

windows dude

[Hakim BOUKHADRA @P5_2005]

@i_am__thekid @khanhduytran0 not really, you need to show also stock ios version from /mnt1/System/Library/CoreSeevices/SystemVersion.plist

[Hakim BOUKHADRA @P5_2005]

@dhinakg Congrats dude

[Stefan Esser @i0n1c]

There is a party at #GLx and you have been invited. Don’t miss the next session of our new training course giving you a deep dive into #SPTM, #TXM, #SK and #Exclaves

https://t.co/wT4HWAOyaE

[Hakim BOUKHADRA @P5_2005]

@blacktop__ congrats dude

[matteyeux @matteyeux]

Looks like iOS remote kernel debugging is working well with Binary Ninja and a virtual iPhone running iOS 26.3

[Hakim BOUKHADRA @P5_2005]

@khanhduytran0 @hackerfantastic uname -a output will be funny 😬

[Hakim BOUKHADRA @P5_2005]

@khanhduytran0 @hackerfantastic @bellis1000

[Hakim BOUKHADRA @P5_2005]

@0x4A616D657344 @bellis1000 check this out : https://t.co/okV71XsHzR

[nad @Nadsec11]

Reverse-engineered Coruna - a nation-state iOS exploit kit - from raw JavaScript. 28 modules, 500+ XOR strings decoded, 6,596-line teardown. PAC bypass, JIT cage escape, PACDB hash forgery.
https://t.co/3nTEVTSXHX
https://t.co/KjqGcKMlMe
(technical analysis more interesting, read coruna blog post first, technical analysis looks better on github, link on-site)

[Hakim BOUKHADRA @P5_2005]

@matteyeux @bellis1000

[Hakim BOUKHADRA @P5_2005]

@Lakr233 can you check scp after springboard boot?! seem not working

[Hyungyu Seo @wh1te4ever]

I have posted a write-up for those who are interested in building virtual iPhone.
If have any further questions, please feel free to reach out via DM, Thanks.

https://t.co/YRTlxbKNKb

[Georgy Kucherin @kucher1n]

It turned out there are many more payloads used in the Notepad++ attack! To stay undetected, its masterminds were COMPLETELY changing execution chains about every month.

Here are more IPs used in the attack:
45.76.155[.]202
45.32.144[.]255

Read below for many other IoCs! [1/8]

[Hakim BOUKHADRA @P5_2005]

@0xjohnny @4161ron You should be aware about this

[Alfie @alfiecg_dev]

Regarding this, the kernel now checks specifically for non-root users trying to spawn a binary as root. It does not affect any other UIDs/GIDs. This may allow for TrollStore to function, but certainly won't allow other root helpers to work.

[Nick Chan (@[email protected]) @riscv64]

the sequel:

[Hakim BOUKHADRA @P5_2005]

@hichem_ifpdz it will be used only for peaceful purposes™️, it will it will 💀

[Hakim BOUKHADRA @P5_2005]

@BourAbdelhadi it will be used only for peaceful purposes™️, it will it will

[Hakim BOUKHADRA @P5_2005]

@alfiecg_dev @CellebriteLabs wishing all the best

[Hakim BOUKHADRA @P5_2005]

@MasterMike88 @dora2ios @imnotclarity @mineekdev @0xfa7b 👀

[Michael @MasterMike88]

fine, I added a guide for tethered downgrades (average users shouldn't use it though)

Now we have:
Untethered Guide: https://t.co/4MK7wv26iK
Tethered Guide: https://t.co/QiT3Nmn86X