0xjohnny

Independent iOS/macOS Security Research

Vulnerabilities

CVE-2026-112612

Accounts Arbitrary File Read/Write

accounts · path handling

GPU Drivers Buffer Overflow

macOS · GPU · buffer overflow

Kernel Use-After-Free

Kernel Out-of-Bounds Write

kernel · out-of-bounds write

IOHIDFamily FastPathUserClient UAF

kernel · UAF · race

AppleJPEGDriver startDecoder UAF

AppleSEPKeyStore Use-After-Free

SEP Firmware Panic via AppleKeyStore

kernel/SEP · DoS

Projects

iOS tweak runner on the DarkSword kernel r/w

iOS 17–18.7.1, 26.0–26.0.1 · fork of darksword-kexploit-fun

Cyanide JavaScript tweak repo — browse, view source, download

Userland exploit chain w/ SpringBoard JS injection

iOS 18.4–18.6 · derived from DarkSword

Blog

The iOS 27 Beta 5 Red Wedding

sandbox escapes · MobileGestalt · PoCs

Cyanide: Writing Tweaks

RemoteCall · remote_objc API · developer reference

Patching Metal Graphics into vphone

iOS Tweaks

Add my repo to your package manager

https://0xjohnnydev.github.io

Sileo

Cydia

Zebra

Press

Apple will push out rare backported patches to protect iOS 18 users from DarkSword hacking tool WIRED