https://hanh.me/tags/vulnerability-research/Recent content in Vulnerability-Research on Hanh Pham's BlogHugoen-usFri, 23 Oct 2026 10:18:35 +0700https://hanh.me/posts/ios-jailbreak-userland-era/Fri, 16 Oct 2026 09:00:00 +0700https://hanh.me/posts/ios-jailbreak-userland-era/The bootrom era was unpatchable but fully readable. The userland era inverted both properties: every bug had a fix, and most of the tool’s shipped life has no published source at all.https://hanh.me/posts/xnu-patch-margin-research/Fri, 09 Oct 2026 09:30:00 +0700https://hanh.me/posts/xnu-patch-margin-research/A source-first method for Apple kernel research: diff consecutive XNU tags, mine the regression tests that ship with the fixes, map sibling call sites, and rank candidates by how well they survive Memory Integrity Enforcement. Four evidence gates, a safe workflow, and the stop conditions that keep this work honest.