Organizer
Partner Company
Evolution of Safari mitigations and bypasses in 2022
Nikita Pupyshev
Abstract
iOS 14 and 15 have seen a large number of new mitigations in Safari that were gradually bypassed. In this talk I’ll discuss various methods that could be used to bypass PAC, APRR, etc. and finally execute custom code in the JIT region and how these evolved facing changes from Apple. Additionally I’ll tell about ways to find these bypasses and their generic structure.
Speaker Info
Nikita Pupyshev
Nikita is an independent security researcher with about 4 years of experience with security research. He mostly focuses on Apple platforms, but also explore Android/Linux and embedded devices occasionally. For 2 years he was researching WebKit, though now trying himself at hacking XNU.