As promised, DarkSword Kernel Exploit writeup is now live at https://t.co/aji0Xc3JNU
This goes over the root cause, what happens on the Kernel side and how the kernel exploit is implemented.
Hope it helps anyone looking to understand it! :)
Had some fun with new usbliter8 bootrom exploit. Got root shell yesterday by booting custom iOS 27.0b2 firmware on iPhone 11 Pro.
Honestly, it's not practical for daily use. For some reason, baseband, Wi-Fi, and USB connections are completely broken.
Aquila 2.1 (by @staturnzdev) has been released, with support for iOS 4.3.x and 32-bit iOS 7.
This is the first ever untethered jailbreak for the iPad 2 on 4.3-4.3.2/4.3.4/4.3.5, which - as an unrelated side note - turns 15 years old in about 3 days.
Trigon-Legacy out at https://t.co/So2v986AI4
Supports every 64-bit device from iOS 7 to iOS 9 and is fully deterministic, using entirely different techniques from the original Trigon.
Special thanks to @alfiecg_dev, @staturnzdev and @dora2ios for the development help.