Apple's Predicament - NSPredicate Exploits on iOS and macOS

Explore a 36-minute Black Hat conference talk that delves into NSPredicate exploits on iOS and macOS. Discover how the FORCEDENTRY sandbox escape in 2021 introduced NSPredicate usage in iOS exploits, allowing attackers to bypass codesigning, ASLR, and other security measures. Learn about Apple's subsequent restrictions on NSPredicate and the research revealing how these limitations were circumvented in iOS 16. Gain insights into exploiting NSPredicates for code execution in privileged iOS processes. Benefit from a technical deep dive that makes complex iOS security concepts accessible to a broader audience, even without extensive experience in the field.