Tools, experiments, and things to pull apart.
Extended an iOS 27 tethered jailbreak research environment for A13 devices. Traced boot and userland launch failures through iBoot, launchd, xpcproxy, sandbox, and kernel exec policy to enable on-device research tooling.
Built a CLI and jailbroken iOS helper that reuses the device's authenticated App Store session to install applications and export decrypted IPAs for static analysis, binary diffing, and reverse engineering.
Built a mobile security scanner that executes Nuclei-driven tests from inside an instrumented app context, allowing internal API assessment through VPN tunnels while bypassing SSL pinning.
Built an IPA diffing tool for security research that compares Mach-O binaries, application resources, and Hermes bytecode, supporting Hermes reversing and security-focused change analysis across mobile app releases.
