Some interesting strings from the binary. Hopefully there will be a write-up explaining the exploit in detail soon. /var/mobile/DemoApp.app Media/Recordings/.haxx/DemoApp.app/Info.plist Media/Recordings/.haxx/Library/Caches/com.apple.mobile.installation.plist Media/Recordings/.haxx/timezone Media/Recordings/.haxx/var/evasi0n/evasi0n Edit: I also spotted a few references to Racoon, the VPN client which I think was abu…
The lazy binding is really interesting. There is lots of interesting stuff in the kernel, dyld, and libSystem. I would encourage you to have a look! You can do interesting things like run code before libSystem_init[1]
[0]:
https://github.com/Apple-FOSS-Mirror/dyld/tree/master/src
https://github.com/Apple-FOSS-Mirror/Libsystem/blob/master/i...
https://github.com/Apple-FOSS-Mirror/xnu/blob/master/bsd/ker...