KTRW: The journey to build a debuggable iPhone

In my role here at Project Zero, I do not use some of the tooling used by some external iOS security researchers, in particular development-fused iPhones with hardware debugging capabilities like JTAG enabled. I believe that access to such devices puts those who can obtain them at a significant advantage over researchers who can not or do not wish to use them. Thus, early this year I decided I wou

[efcl]

iOSのKTRR bypass

[yosuke_furukawa]

iPhone を debuggable にするためにKTRRっていう保護機構を突破する KTRW っていう Kernel Base でmemoryをwritableに書き換えるツール作ってやったよっていう話