To celebrate iOS 27’s release, why not release a sandbox escape?
Announcing airlift: a PoC abusing a media sync path for out-of-scope access across much of /var/mobile via macOS↔iOS pairing.
No MobileGestalt edits yet; looking into it.
github.com/0xjohnnydev/ai…
@rooootdev@thejailbreakhub I wasn’t trying to be helpful ¯\_(ツ)_/¯
Everything I said is my own conclusions that I’ve drawn from what’s been said and what makes the most sense logically.
@thejailbreakhub Spending more effort to improve it wouldn’t make much sense imo.
It makes more sense to just get it over with, either by releasing it publicly or reporting it to Apple
Or someone else can find it and do it for you ¯\_(ツ)_/¯
@thejailbreakhub It sounded to me like “this won’t be released” (by roooot and crew) instead of “this isn’t legit”
I have ideas, but that’s all I’ll say for now.
@BaconManiaGD I’ve since tested, Playgrounds’ data container isn’t even accessible through iTunes/Finder, pymobiledevice3 isn’t able to do anything with it
I have some ideas for a few tricks to try but haven’t gotten around to it yet, I’m not super confident they’ll work, though.
I managed to pull off dylib embedding in Swift Playgrounds.
This requires a sandbox escape (like bad_query), or maybe backup modification.
Here's a demo of some App Store apps running in Playgrounds. (Enchanted LLM, Glimpse 2, Web Archive Inspector)
@afastaudir8@0xjohnny I’m thinking that might be the case and they just don’t care to ever patch it on 26.x, or it’ll be like BookRestore on 18 where it took a few dot updates for them to finally get around to patching it.
2 Followers 42 Followinggreen money in a briefcase green green green money in a briefcase, green money in a briefcase green green green money in a briefcase
80K Followers 0 FollowingSwift is a general-purpose programming language that's fast, modern, safe, and a joy to write. Designed for all, developed in the open.
2K Followers 475 Followingprompt engineer for binaries | reverse engineer, exploit developer, equally bad at both | https://t.co/FJ88dlQw7W | mastodon: @[email protected]
former s.c
24 Followers 145 FollowingGMT+3
Professional retard
C++
Jailbreak/Apple/Darwin things
Mostly RO/reposts
MikuRin/Len is literally the best ship triangle ever
597 Followers 156 Followingios hax + re tooling. floundering artist/photographer, not on socials much, you will find me on your messaging apps. [email protected] also
17K Followers 196 FollowingIn this Twitter world, you are reading the bio of an iOS Tweak Development Hobbyist. Mastodon: @[email protected] Bluesky: @[email protected]
11K Followers 1K FollowingBiggest moron on the platform (probably). iOS Jailbreaking stuff. Openly Autistic.
Not a security researcher or developer.
Side Account: @MasterOfMike88