cynder (@arm64e) header
cynder (@arm64e) profile picture

cynder

@arm64e

ios hax + re tooling. floundering artist/photographer, not on socials much, you will find me on your messaging apps. [email protected] also

 looking
github.com/0cyn
Joined May 2020
  • Tweets274
  • Following164
  • Followers284
29Media
Photo by cynder (@arm64e)Photo by cynder (@arm64e)Photo by cynder (@arm64e)Photo by cynder (@arm64e)Photo by cynder (@arm64e)Photo by cynder (@arm64e)Photo by cynder (@arm64e)Photo by cynder (@arm64e)Photo by cynder (@arm64e)Photo by cynder (@arm64e)
Image from cynder (@arm64e)
1
50
gg
Image from cynder (@arm64e)
cynder (@arm64e) profile picturecynder@arm64eOct 26
Image from cynder (@arm64e)
46
3,357
Image from cynder (@arm64e)
1
12
3,885
cynder retweeted
trailcam (@Trail_Cams) profile picture
trailcam
@Trail_CamsOct 21
51
1,255
76
15,499
213,109
Image from cynder (@arm64e)
1
141
Image from cynder (@arm64e)
1
128
The one year I can't go to conferences, man 😂
139
I'm currently in the job market for a position in security research or RE; If you know anyone hiring remote for client red-teaming, public research, and/or RE/RE automation (worked on BinaryNinja for 4 years) type work, especially in the iOS/macOS space, do give me a shout!
6
15
112
8,574
fun 24hrs. 😛
Image from cynder (@arm64e)
1
1
8
2,461
u will allow me One (1) of these posts, it's been an exciting few weeks and the ASB "u cant talk about it until we fix it!" thing was invented to cause me suffering. some very cool stuff i can't wait to yap about 😛
1
3
710
cannot believe for the life of me that pixel killed off MTE, every *os kernel r/w bug i've found in the past month suffers greatly from MTE. at the rate these pop up anymore i'm kind of terrified of being on non-MTE devices 😵‍💫
1
1
280
iphone xr 18.7.9 🎉 no restoring unsigned firmware. reboots into stock fine. should be useful for "we have SRD at home" ^..^ autodfu and allat. Procursus, ssh and such is working. also embeds openocd controls into the app. :) /p/var is ephemeral. there is much to be done.
9
18
178
12,010
preemptively: * wifi/bt doesn't currently work but i _think_ that is a solvable problem w/ how we're doing things. * same stuff works for A13 iOS 26/27, yet to be written ^..^ * uart will have a shell in it Eventually 😭 * entire boot payload is <1MB! including ramdisk!
1
3
10
1,647
* /private/var is recreated on every boot, if you don't understand what that means/implies this is not 4 u * ^ a lot of the boot slowness comes from setting up and reformatting a ramdisk for it w/ required flags * ^ this allows keybags n stuff to be stored (re: wifi, etc)
1
8
886
coolest thing that i think i've seen since like, checkra1n, man. MIE emu! at reasonable speed! i've never swapped workflows so fast, this is so important for vr.
Joseph Ravichandran (@0xjprx) profile pictureJoseph Ravichandran
@0xjprxAug 28
I got the latest iOS and macOS 27 booting in Qemu (with SPTM!) - Virtual iPhone 17, 16, 15, 14, 13, 12 and every M1-M5 Mac supported - Debug, patch, or modify everything: kernel, SPTM, TXM, launchd, dyld, user programs all modifiable/ GDB-able - Boots directly to root shell in seconds - Run your own programs as root in iOS/ macOS, no jailbreak / kernel patches required - SPTM, TXM, MTE/MIE, genter/ gexit, GXF/SPRR/GL0-2, AMCC, AIC v1-3, Apple timer, many sysregs - Automated setup; get running in just a few minutes - Runs anywhere qemu runs... no ARM CPU required 😉 Try it here: github.com/jprx/darwin-vm
GitHub - jprx/darwin-vm: Run iOS/ macOS in Qemu. Virtual iPhone 17, 16, 15, 14, 13, 12 and M5-M1...

GitHub - jprx/darwin-vm: Run iOS/ macOS in Qemu. Virtual iPhone 17, 16, 15, 14, 13, 12 and M5-M1...

Run iOS/ macOS in Qemu. Virtual iPhone 17, 16, 15, 14, 13, 12 and M5-M1 Apple Si Macs supported. - jprx/darwin-vm

github.com
1
2
89
12,115
i am about to get a lot less urgent with finishing the l41ka debugger probe stuff 😅 only good excuse i had for that timesink was needing to do some lldb in kernel.
646
same board for dfu entry -> exploit -> jtag (WS 2350 zero) also works headlessly. longterm i wanna play with plugging a bunch into a server and just having on demand remote reset -> enter-dfu -> exploit -> jtag. could also be a <decompiler> ui plugin? so much to do!
Image from cynder (@arm64e)
1
7
50
4,336
or per the datasheet, RP2350A-Zreo :floshed:
Image from cynder (@arm64e)
1
3
652
dunno when i can put this out rel. licensing issues + messy git state but fun things are occurring over here.
1
302
697d1d7ee9b3ed2f7b6c8c0a256f96a2e72f6fb6b774d26257c6be7dd6c9f332 a sturgeon:
📷 : d850 + sigma art 24mm F1.4 DG HSM this is a photo of a sturgeon, wow look at it go it is so pretty

ALT 📷 : d850 + sigma art 24mm F1.4 DG HSM this is a photo of a sturgeon, wow look at it go it is so pretty

2
644
Load more