Explore advanced iOS exploitation techniques in this 55-minute Recon Conference talk. Delve into the strategies used to remotely pwn iOS 11 systems, breaking Apple's sandbox and installing persistent rogue applications without kernel exploits. Learn about the double free vulnerability (CVE-2017-7162) in the IOKit framework, advanced exploit techniques for 100% reliable exploitation, and methods for bypassing code signing requirements. Gain insights into sandbox escape technology, browser exploitation, and the challenges of chaining vulnerabilities to defeat iOS defenses. Witness a live demonstration of these techniques and compare them to Android exploitation. Examine the Pegasus APT case study and discuss iOS 12 sandbox hardening measures.
Exploiting Userland Vulnerabilities to Get Rogue App Installed Remotely on iOS 11