staturnz

As promised, DarkSword Kernel Exploit writeup is now live at therealclarity.github.io/blog/clearswor… This goes over the root cause, what happens on the Kernel side and how the kernel exploit is implemented. Hope it helps anyone looking to understand it! :)

Had some fun with new usbliter8 bootrom exploit. Got root shell yesterday by booting custom iOS 27.0b2 firmware on iPhone 11 Pro. Honestly, it's not practical for daily use. For some reason, baseband, Wi-Fi, and USB connections are completely broken.

TrigonLegacy writeup eta is now therealclarity.github.io/blog/trigon-le… Featuring Deterministic iOS 7-9 TFP0, MMIO, Sleep Tokens, PipeRW and a few Apple facepalms

We out here (and under SPTM) #coruna

Amethyst: iOS 12/13 jailbreak for all devices github.com/staturnzz/amet…

iocaste: untethered re-jailbreak for iOS 9.3.5/6 (32bit) github.com/staturnzz/ioca…

iOS 9.3.6 untethered jailbreak demo

Aquila 2.1 (by @staturnzdev) has been released, with support for iOS 4.3.x and 32-bit iOS 7. This is the first ever untethered jailbreak for the iPad 2 on 4.3-4.3.2/4.3.4/4.3.5, which - as an unrelated side note - turns 15 years old in about 3 days.

Trigon-Legacy out at github.com/TheRealClarity… Supports every 64-bit device from iOS 7 to iOS 9 and is fully deterministic, using entirely different techniques from the original Trigon. Special thanks to @alfiecg_dev, @staturnzdev and @dora2ios for the development help.

👀 Thanks to @staturnzdev for help. Release ETA: unknown, don't ask.

Just booted iOS 26 simulator on my jailbroken iPhone XS Max

A8X SEP haxx?

@alfiecg_dev @CellebriteLabs 🫡

I’m thrilled to announce that I will be joining @CellebriteLabs next month, kickstarting my career as a full-time iOS researcher. I hope to wrap up some final projects and release them in the coming weeks, but most of my public work will stop after this - it’s been a blast! 🚀💯

oob_entry: tfp0 kernel exploit supporting every armv7 iOS version (iOS 3.0-10.3.4) github.com/staturnzz/oob_…

Just released a short writeup for the A9 version of the Trigon exploit, which involves getting code execution on a coprocessor before exploiting the kernel - enjoy! alfiecg.uk/2025/07/16/Tri…

Me and @staturnzdev have been going to great lengths to try and get a truly deterministic Trigon exploit working for A9. This is one of the more complicated strategies, but it's working pretty nicely! Expect an open-source release and writeup in the future. 💯

@alfiecg_dev 🤝

🤝 @staturnzdev