iOS security, vulnerabilities, exploits, hardware mitigations, reverse engineering, that sort of stuff. https://blog.siguza.net/ en siguza@siguza.net (Siguza) siguza@siguza.net (Siguza) 60 https://siguza.net/img/ava.png https://blog.siguza.net/ Fri, 23 May 2025 23:35:27 +0200 https://www.rssboard.org/rss-specification https://blog.siguza.net/tachy0n/ iOS kernel exploit for 13.0-13.5 that was dropped as an 0day in unc0ver v5.0. tachy0n Fri, 23 May 2025 23:35:27 +0200 https://blog.siguza.net/psychicpaper/ How to escape the iOS sandbox before your code even runs. Patched in iOS 13.5 beta 3. psychicpaper Fri, 1 May 2020 10:15:02 +0200 https://blog.siguza.net/cuck00/ An all-too-simple XNU kernel info leak that was hiding in plain sight for two decades. Patched in iOS 13.3.1 beta 2. cuck00 Sat, 18 Jan 2020 03:48:00 +0100 https://blog.siguza.net/PAN/ A design flaw in the ARMv8 specification. PAN Tue, 7 Jan 2020 02:27:50 +0100 https://blog.siguza.net/APRR/ Teardown of a hardware memory permission mitigation introduced in Apple's A10/A11 chips. APRR Thu, 8 Aug 2019 13:20:49 +0200 https://raw.githubusercontent.com/ssd-secure-disclosure/typhooncon2019/master/Siguza%20-%20Mitigations.pdf TyphoonCon 2019 Slides TyphoonCon2019 Thu, 13 Jun 2019 11:15:00 +0900 https://github.com/Siguza/iometa/blob/master/sym/README.md How to find a couple dozen thousand C++ symbols for an iOS kernel with minimal effort. symbols Sat, 20 Apr 2019 07:37:19 +0200 https://blog.siguza.net/KTRR/ Teardown of a hardware kernel integrity mitigation introduced in Apple's A10 chip. KTRR Fri, 17 Aug 2018 07:38:11 +0200 https://dl.siguza.net/pdf/2018-Zer0Con.pdf Zer0Con 2018 Slides Zer0Con2018 Thu, 29 Mar 2018 16:00:00 +0900 https://blog.siguza.net/IOHIDeous/ A macOS kernel exploit I dropped as an 0day just for the lulz. Patched in macOS High Sierra 10.13.3. IOHIDeous Sun, 31 Dec 2017 23:56:04 +0100 https://blog.siguza.net/v0rtex/ The kernel exploit that powers a bunch of iOS 10 jailbreaks. v0rtex Thu, 7 Dec 2017 16:42:51 +0100 https://blog.siguza.net/cl0ver/ "tfp0 powered by Pegasus": the first binary exploit I ever wrote - gets kernel r/w on iOS 9. cl0ver Sun, 25 Dec 2016 06:21:25 +0100