iOS Exploit
Starterpack

A structured learning path from zero to iOS kernel exploitation.
8 phases. Bilingual. Open source.

🇺🇸 English Read in English 🇻🇳 Tiếng Việt Đọc bằng Tiếng Việt

What's Inside

Phase 0
Foundations
ARM64 assembly, C programming, and setting up your research tools.
Phase 1
Darwin Basics
Mach-O format, code signing, sandbox, dyld, and the Darwin userland.
Phase 2
XNU Kernel
Kernel architecture, Mach IPC, virtual memory, heap zones, and BSD layer.
Phase 3
Attack Surface
IOKit drivers, syscalls, MIG subsystem, and vulnerability classes.
Phase 4
Exploit Primitives
Info leaks, kernel read/write, physical memory access, and post-exploitation.
Phase 5
Hardware Mitigations
PAC, KTRR/CTRR, PPL, SPTM & TXM, and Exclaves.
Phase 6
Case Studies
checkm8, unc0ver, Dopamine, Trigon, Operation Triangulation, and more.
Phase 7
Tools & Lab
Reverse engineering tools, debugging setup, device preparation, and kernelcache analysis.

At a Glance

8
Learning Phases
35+
Topics
10
Case Studies
2
Languages