Siguza's Blog

iOS security, vulnerabilities, exploits, hardware mitigations, reverse engineering, that sort of stuff.

Latest posts

iOS kernel exploit for 13.0-13.5 that was dropped as an 0day in unc0ver v5.0.

May 23, 2025

How to escape the iOS sandbox before your code even runs. Patched in iOS 13.5 beta 3.

May 1, 2020

An all-too-simple XNU kernel info leak that was hiding in plain sight for two decades. Patched in iOS 13.3.1 beta 2.

Jan 18, 2020

A design flaw in the ARMv8 specification.

Jan 7, 2020

Teardown of a hardware memory permission mitigation introduced in Apple's A10/A11 chips.

Aug 8, 2019

TyphoonCon 2019 Slides

Jun 13, 2019

How to find a couple dozen thousand C++ symbols for an iOS kernel with minimal effort.

Apr 20, 2019

Teardown of a hardware kernel integrity mitigation introduced in Apple's A10 chip.

Aug 17, 2018

Zer0Con 2018 Slides

Mar 29, 2018

A macOS kernel exploit I dropped as an 0day just for the lulz. Patched in macOS High Sierra 10.13.3.

Dec 31, 2017

The kernel exploit that powers a bunch of iOS 10 jailbreaks.

Dec 7, 2017

"tfp0 powered by Pegasus": the first binary exploit I ever wrote - gets kernel r/w on iOS 9.

Dec 25, 2016