UFOFinder on iOS 11.1.2

[hieplpvip]

Could you rebuild the ipa with support for iOS 11.1.2. I want to test the webkit exploit but don't want to upgrade.

It would be really great if you share source code too.

Thanks.

[MTJailed]

If you know how to extract the ipa (zip file) you can just change the minimumosversion in info.plist, but I’ll compile it for you when I have time.

[hieplpvip]

Thanks. I have installed the app. But some offsets are not found. How do I find it manually. Could you write a post about it?

[MTJailed]

The UFOFinder? If you can send me a dm on twitter @MTJailed I’ll give you something better, it’s still in beta but eventually will be extremely useful for security research.

[MTJailed]

Depending on what offsets are not found you should look them up yourselves and use Apple’s (and improved by me) dsc_extractor which is also on my github.

[MTJailed]

You need to look into three extracted frameworks probably:

• JavaScriptCore
• ModelIO
• CoreAudio

These are located in the extracted folder as following:
System/Library/Frameworks

[MTJailed]

UFOFinder 2 has now been release with arm64 iOS 10 - iOS 11.4.1 support!
It's way more stable and can find the link code gadget as well