For the last few years we have taught iOS and OS X kernel exploitation to a wide variety of students. In these years our course has been under constant development, because Apple keeps adding new security mitigations into the kernel or changes how security relevant implementations like how the kernel heap works. Year after year we improved our course to add the latest security changes into the material.
For iOS 12 Apple has once again added a number of changes and mitigations that were not covered in our previous courses and have not been documented anywhere in the public, yet. Furthermore we have added a number of new tools to our iOS toolkit that help during kernel research and during kernel exploit development for newer devices.
During the training we will make available devices on iOS 11.x to perform the hand on tasks, because they can only be performed on devices having vulnerabilities.
Students must have prior knowledge in exploitation (basics will not be taught) and must be capable of understanding/programming exploits in C. Students will get an introduction into low level ARM/ARM64 as part of the course.