Cellebrite Labs
Public iOS kernel exploitation has taken a turn for the worse over the past few years. Trigon is the second publicly-available exploit for iOS 16, based on an extremely powerful vulnerability in the XNU kernel. This talk will discuss how an exploit was developed for all of Apple’s arm64(e) SoCs, the various strategies used for each one and the obstacles and mitigations that made exploitation so difficult.
Alfie began hacking iOS devices at 15 years old and is now an iOS researcher at Cellebrite Labs. His public work primarily focuses on kernel exploitation - over the years, he has written jailbreaks, kernel exploits and code signing bypasses, all targeting iOS devices.