Program analysis, reverse engineering and vulnerability research at @Apple's Security Engineering & Architecture (SEAR) .
France
Joined August 2011
- Tweets401
- Following237
- Followers8.8K
- Likes753
Jonathan Salwan retweeted
Static Devirtualization of Tencent VM. There are many others with similar results to ours, we have had the VM devirtualized for several months now. Others are posting full devirt bins, so we feel it is ok to release our research now.
back.engineering/blog/31/07/…
Jonathan Salwan retweeted
Static Devirtualization of Themida/CodeVirtualizer. The techniques in this article apply to pretty much every virtual machine obfuscator with minor modifications.
back.engineering/blog/09/05/…
Original Program & Devirtualized Output
github.com/backengineering/t…
Jonathan Salwan retweeted
Today, Project Zero released a 0-click exploit chain for the Pixel 9. While it targets the Pixel, the 0-click bug and exploit techniques we used apply to most other Android devices.
projectzero.google/2026/01/p…
Jonathan Salwan retweeted
🔺iPhone models announced today include Memory Integrity Enforcement, the culmination of an unprecedented design and engineering effort that we believe represents the most significant upgrade to memory safety in the history of consumer operating systems. security.apple.com/blog/memo…
Jonathan Salwan retweeted
My writeup on CVE-2025-31200. This ones an interesting one blog.noahhw.dev/posts/cve-20…. thanks to @bellis1000 for the shoutout.
Jonathan Salwan retweeted
'Blasting Past iOS 18', more like 'Getting blasted away by iOS 18' my first and last blog post on the @dfsec_com blog, where I tried to summarise my @0x41con 's talk in the form of a blog.
You can find the non-fancy markdown version here: github.com/dfsec/dfsec.githu…
Our new blog post is live: blog.dfsec.com/ios/2025/05/3…
Jonathan Salwan retweeted
tachy0n - The last 0day jailbreak by @s1guza blog.siguza.net/tachy0n/
Jonathan Salwan retweeted
Technical analysis of CVE-2025-31201: reverse engineering the diff between iOS 18.4 and 18.4.1 to study the changes made to RPAC.:
blog.epsilon-sec.com/cve-202…
#iOS #apple #cybersecurity #reversing #pac #security #cve #vulnerability
Jonathan Salwan retweeted
In iOS 18.4, Apple introduced a bug in dynamic symbol resolutions for some specific exports. @0xf4b took a long journey down a rabbit hole to understand its root cause.
synacktiv.com/en/publication…
Jonathan Salwan retweeted
My writeup of the 2023 NSO in-the-wild iOS zero-click BLASTDOOR webp exploit: Blasting Past Webp -
googleprojectzero.blogspot.c…
Jonathan Salwan retweeted
I've just published a new blog post detailing how I developed a deterministic kernel exploit for iOS. Enjoy!
alfiecg.uk/2025/03/01/Trigon…
Jonathan Salwan retweeted
You can now jailbreak your AMD CPU! 🔥We've just released a full microcode toolchain, with source code and tutorials. bughunters.google.com/blog/5…
Jonathan Salwan retweeted
Lifting Binaries, Part 0: Devirtualizing VMProtect and Themida: It’s Just Flattening?: nac-l.github.io/2025/01/25/l…
Jonathan Salwan retweeted
How does the new iOS inactivity reboot work? What does it protect from?
I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented.
naehrdine.blogspot.com/2024/…
Jonathan Salwan retweeted
Analyzing Firefox Animation CVE-2024-9680 dimitrifourny.github.io/2024…
Jonathan Salwan retweeted
Our slides about WASM bugs in browsers are now available.
Thanks to everyone who helped with the talk.🫡
Hope we can do better next time.
1. BH USA 2024: i.blackhat.com/BH-US-24/Pres…
2. GeekCon Shanghai 2024: geekcon.top/js/pdfjs/web/vie…
cc my partners (@p1umer @xmzyshypnc1 @q1iqF)
Jonathan Salwan retweeted
We're hiring vulnerability researchers!
Shoot us a message at [email protected]
Jonathan Salwan retweeted
LummaC2: Obfuscation Through Indirect Control Flow cloud.google.com/blog/topics… 👀 #tritonlibrary
