TweaksNews (@TweaksNews) header
TweaksNews (@TweaksNews) profile picture

REVISIÓN DE TWEAKS / ACTUALIZACIONES / REPOSITORIOS / NOTICIAS / DESARROLLADORES / LANZAMIENTOS / DISPOSITIVOS COMPATIBLES / HERRAMIENTAS / TEMAS / Y MÁS.

Joined April 2021
Photo by TweaksNews (@TweaksNews)Photo by TweaksNews (@TweaksNews)Photo by TweaksNews (@TweaksNews)Photo by TweaksNews (@TweaksNews)Photo by TweaksNews (@TweaksNews)Photo by TweaksNews (@TweaksNews)Photo by TweaksNews (@TweaksNews)Photo by TweaksNews (@TweaksNews)Photo by TweaksNews (@TweaksNews)
¡BIENVENIDO/A! ❤️ Deslízate hacia abajo y encontrarás todos los lanzamientos más recientes de tweaks, repositorios, desarrolladores, noticias, compatibilidad, y mucho más. #TweaksNews
1
7
TweaksNews retweeted
New macOS 27.0.1 PoC: AGX firmware R/W via PAC callback + pointer reuse, protected GFX PTE control. Built on @alfiecg_dev's KextRW. macOS only: M4 Pro/Max, base M5 & MacBook Neo. Also works on iOS (DarkSword); PoC coming. SPTM bypass pls, @calif_io? 😅 github.com/0xjohnnydev/AGX-R…
14
139
6,194
TweaksNews retweeted
Henge 0.1 is out, and with it allows you to run macOS on iOS/iPadOS! This has been a project of mine for about 2 weeks, and I’m very happy to finally release it! It’s in a good state, and ready to release. Download: github.com/Leviidev/Henge/re…
40
115
25
1,055
137,794
I’m found CPU OOB wrote exploit on IOS 27.2 RC😍 (tested on 17 Pro with 26.6.1 RC and base iPhone 14 with 27.2 RC)
15
9
2
148
12,837
TweaksNews retweeted
I wanna highlight that yes.. clearly ofc.. we got jailbreaks going on rn, but I think about the future.. not about some frozen time.. Switzach can work for the next years probably for the next versions. 27.x, 28.x maybe even 29.x and that is why it is so hard in development!
5
8
1
96
14,889
TweaksNews retweeted
Read-Only Sandbox Escape on iOS 27.0 Beta 3 🧵 @forcequitOS Used known `bad_query` vector to read systemgroup `configurationprofiles` (CloudConfigurationDetails.plist) from an App Store app. Write blocked (EPERM). A13. PoC soon on GitHub 👀 Video proof ↓
3
4
1
77
13,392
TweaksNews retweeted
Ipad pro m5 27.0.1
5
6
152
14,397
TweaksNews retweeted
CVE-2026-112688 – Apple CoreMedia memory corruption (iOS/iPadOS <26.7/27.2, macOS) Sandboxed app → crafted Dolby Vision RPU → launchd-owned backboardd Malformed Level-8 record count (forces 42 Level-10) → CoreMedia writes past stack array Overwrites QuartzCore saved LR with 0x4141414141414141 PAC rejects → EXC_ARM_PAC_FAIL, PC stays at QuartzCore retabsppc (+0x2026c4) Same primitive replaces low 32 bits of pointer used by strb 1, [x8] → constrained write-1 (e.g. 0x1f9c49088 reads back 1), process survives PoC + evidence: github.com/0xjohnnydev/CVE-2… Credits: @0xjohnny (building on Ping-2o/duper-cves + quietvoid/dovi_tool) #iOS #Apple #CoreMedia #PAC #backboardd
4
19
2
143
11,600
TweaksNews retweeted
ios27.0.1Completed Keychain / SecItem Access Behavior Testing #ios #ios27
13
28
2
376
53,705
TweaksNews retweeted
🔬 Just published my iOS security research repo. Static RE notes, patch-diffs & trust-boundary analysis on modern iOS: • SPTM / TXM monitors• Secure Kernel exclaves • Kernel zone mitigations • Media parsers (ImageIO etc.) No exploits. Just the map of how Apple hardens things. Feedback from RE / kernel researchers welcome. github.com/AzozzALFiras/iOS-… #iOSSecurity #AppleSecurity #ReverseEngineering #iOS #SecurityResearch
5
63
363
21,544
TweaksNews retweeted
iPhone 18 Pro Max iOS 27.0.1 kernel panic from sandboxed app
5
14
2
162
31,246
TweaksNews retweeted
Lockdown Mode helps, until it doesn't.
254
814
235
9,475
1,441,537
TweaksNews retweeted
Also saw everyone is losing their minds over the iOS kernel r/w. I’m home now and aiming to release the exploit + writeup within the next week or so. Thank you for your attention to this matter (and all the “wen eta”s) 🙏
49
116
17
1,116
116,476
TweaksNews retweeted
iOS27.0 ✅
12
18
3
268
56,658
TweaksNews retweeted
27.0.1
15
24
3
321
60,295
TweaksNews retweeted
iOS 27.0.1 kernel panic from one VideoToolbox value. CVE-2026-112705, AppleAVE2 OOB write. Set NumberOfTemporalLayers to 16463 and the first encode panics videocodecd. 16462 survives. Fixed in 27.2. DoS only, no R/W primitive. Clean repro on iPhone 17 Pro. github.com/MchinaMd57764/AVE… credit: Calif / Chollima team (find), MchinaMd57764 (repro)
2
23
2
174
35,641
TweaksNews retweeted
Working on a jailbreak for iOS 27.0-27.0.1 Currently have: CASLR bypass , Stable kernel read/write Working on sandbox patch and the rest. Open to questions, but no PoC for now. Prefer dropping a clean jailbreak over raw primitives @Lakr233 @onejailbreak_ @0xjohnny @Little_34306
197
107
16
1,104
202,373
TweaksNews retweeted
🥳
81
55
9
913
142,523
TweaksNews retweeted
多巴胺很酷,隐根的更酷,但我们仍有许多新鲜的想法想要自己去实现。Relaxin 现已支持 Apple TV 二代和 Vision Pro M2 的越狱!
9
15
1
172
15,213
TweaksNews retweeted
Back to ROOT! iOS 27.0.1 #MobileSecurity #jailbreak
42
64
15
697
142,216
TweaksNews retweeted
CVE-2026-112706 is probably able to read almost the whole /usr/libexec published here github.com/ceoca69/wwdxwd/re…
18
66
2
547
76,929