The iPhone Wiki is no longer updated. Visit this article on The Apple Wiki for current information.

Pwnage 2.0

From The iPhone Wiki
Revision as of 15:25, 7 July 2014 by Balika011 (talk | contribs) (It was the source of standard crc32 hash c implementation, whit default polynomial. (dfu footer's last 4 byte))
Jump to: navigation, search

This exploit in the S5L8900 bootrom is really the ultimate exploit, since it allows unsigned code to be run at the lowest level. It is available in all devices that use the S5L8900 - the iPhone, iPod Touch and iPhone 3G. It is also available on some non-iOS iPods.

Credit

iPhone Dev Team

Exploit

There is a stack overflow in the certificate parsing code. By passing a malformed certificate, unsigned code can be run.

Implementations

Retrieved from "https://www.theiphonewiki.com/w/index.php?title=Pwnage_2.0&oldid=41529"