Welcome to Hotel Calif. We're in lockdown mode. You can check in, but you can never leave. Broccoli is served around the clock.
The Brotli bug apparently affected iOS and macOS too. Apple released version 27.2.1 yesterday, fixing this bug among other security issues.
This is an important security update. If you haven't updated yet, now's a good time. The demos show what we were able to do with it.
๐๐๐ retweeted
PS5 HV exploit Byepervisor-Reborn new PR merged by echostretch.
Now includes the missing offset headers for 12.00 to 12.70, 13.40, 13.42 Firmware versions.
github.com/EchoStretch/Byepeโฆ
๐๐๐ retweeted
Introducing worse_query, a zero-day sandbox escape for iOS 26 and 27, again.
In collaboration with @0xjohnny!
github.com/forcequitOS/worseโฆ
And now: iOS AGX r/w via ClearSword krw.
No, this is not an SPTM bypass. It may help further research, but on its own it cannot access SPTM-protected memory without faulting.
github.com/0xjohnnydev/AGX-Rโฆ
New macOS 27.0.1 PoC: AGX firmware R/W via PAC callback + pointer reuse, protected GFX PTE control. Built on @alfiecg_dev's KextRW.
macOS only: M4 Pro/Max, base M5 & MacBook Neo. Also works on iOS (DarkSword); PoC coming.
SPTM bypass pls, @calif_io? ๐
github.com/0xjohnnydev/AGX-Rโฆ
๐๐๐ retweeted
iOS 27 Jailbreak.
Clean Package Manager, Zsh Shell & Installed Tweaks on Real Device.






















