- Published on
A hands-on exercise series for the iOS kernel: with tfp0 on a vphone VM, build one CLI that derives the KASLR slide, finds kernproc, dumps both syscall tables and walks the SPTM-protected page tables, all against a fully stripped kernelcache.