- Published on
How I went from CTFs to my first Apple CVE in a few months: what I read, what I built, the tools I use and how I work with agents without becoming a meat proxy.
Xnu
All Posts
- ctf (9)
- pwn (7)
- postgres (5)
- cyhub2025 (4)
- ios (3)
- jsc (3)
- browser-exploitation (3)
- lantern (3)
- rust (2)
xnu (2)
- cyhub2024 (2)
- reverse-engineering (2)
- javascriptcore (2)
- webkit (2)
- safari (2)
- pac (2)
- pgvector (2)
- kernel (2)
- low-level (1)
- macos (1)
- apple (1)
- bug-bounty (1)
- debugging (1)
- gdb (1)
- talks (1)
- pgday (1)
- web (1)
- race-condition (1)
- godot (1)
- binary-exploitation (1)
- dyld (1)
- snyk2026 (1)
- heap-exploitation (1)
- fsop (1)
- v8 (1)
- sptm (1)
- vphone (1)
- page-tables (1)
- htb (1)
- qemu (1)
- pci (1)
- Published on
A hands-on exercise series for the iOS kernel: with tfp0 on a vphone VM, build one CLI that derives the KASLR slide, finds kernproc, dumps both syscall tables and walks the SPTM-protected page tables, all against a fully stripped kernelcache.