writeups.xyz / The Nightmare of Apple's OTA Update: Bypassing the Signature Verification and Pwning the Kernel

Submitter : c2a

Date: 15 October 2023

Bounty : undisclosed

Vulnerabilities :

• Signature Validation Bypass
• TOCTOU
• SIP Bypass
• Downgrade Attack
• Kernel Hacking
• Reverse Engineering

Programs :

• Apple (MacOS)

Authors :

• Mickey Jin (@Patch1t)

Link :
https://jhftss.github.io/The-Nightmare-of-Apple-OTA-Update/