ApkUnpacker apkunpacker

This is for iOS 26+ only. Read mineek's secret.txt for more info.

I didn't plan to release this that early, but as iOS 27 has already nuked partial restore; and A12/A13 being jailbreakable (including A12 iPads EOL at 26) as soon as a new kernel exploit drops, there is not much to lose.

MissedRevoke

^{(the "secret.txt" for iOS 26)}

iOS has had a long time storing revocation details in separate plists, it was trivially bypassable by zeroing and chflags immutable on them. Since iOS 26.0b2, all of these files have been migrated to mis.db.

ThePedroo's Zygisk Module Guide

The Zygisk API is fairly easy to understand: two main functions, 4 functions that are set on runtime, pre and post for both apps and system server. However, when you get more into the development of a Zygisk module, it gets significantly harder to know how to improve the module in terms of efficiency, and how to avoid detections, after all there are no (properly) documented resources for either.

This post/guide, written by ReZygisk's developer, documents numerous information (and that are actually valuable) that allow to build a better Zygisk module, improving hiding and performance/speed.

1. Untargeted processes; Minimal execution

Many Zygisk modules have specific targets, and aren't meant to execute on other processes. It is common for many to also need to execute a considerable amount of code preparing for later execution. However, it is important to check, as the first real step, in preAppSpecialize, if you actually need to run any code in that process.

Task Hijacking Vulnerability in WhatsApp - Android

Around a year ago, I discovered a long-standing vulnerability in WhatsApp and other popular Android applications. Despite its existence for years, this vulnerability remained largely theoretical. To demonstrate its real-world impact, I successfully exploited it in WhatsApp, Facebook, and Facebook Lite. I promptly reported my findings to Facebook's Whitehat program. In this post, I'll share the details I provided to Facebook.

Don't want to read? Skip the technical details and watch the demo video here: https://youtu.be/1p3tehj3aUQ

Finding Description

While reviewing the WhatsApp Android application we have identified a misconfiguration in AndroidManifest.xml related to task control features. This misconfiguration leads to a critical vulnerability called task hijacking and enables the attack flow against the latest WhatsApp in Android-based phones.

In successful exploitation of the vulnerability, the malicious

	//
	// dotdot.m
	// dotdot
	//
	// Created by roooot on 03.08.26.
	// Copyright (C) 2026 roooot
	//
	// This program is free software: you can redistribute it and/or modify
	// it under the terms of the GNU Affero General Public License as published
	// by the Free Software Foundation, either version 3 of the License, or

	/*
	* Copyright (c) 1996, 1998, Oracle and/or its affiliates. All rights reserved.
	* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
	*
	* This code is free software; you can redistribute it and/or modify it
	* under the terms of the GNU General Public License version 2 only, as
	* published by the Free Software Foundation. Oracle designates this
	* particular file as subject to the "Classpath" exception as provided
	* by Oracle in the LICENSE file that accompanied this code.
	*

	/*
	* shizuku_starter.c
	*
	* Starts Shizuku server with root privileges.
	* Intended to be executed via Xiaomi IMQSNative service.
	*
	*
	* Compile (Termux):
	* clang -O2 -Wall -o /data/local/tmp/shizuku_starter shizuku_starter.c
	*

	/*
	* provision_device_ids.c
	* Copyright (c) 2026 mhmrdd. All rights reserved.
	*
	* Standalone Device ID provisioning utility for Qualcomm Keymaster.
	*
	* This tool provisions Android attestation identifiers (brand, device,
	* product, serial, IMEI/MEID, manufacturer, model) into secure storage
	* through QSEECom and finalizes Device ID provisioning state.
	*

	import os
	import shutil

	"""
	Steps to retrieve the IPA file from the Configurator app:

	1. Install Apple Configurator from the Mac App Store and sign in
	2. Connect your iOS device to your Mac
	3. Select "Add > Apps..." and search for the app you want to install, click "Add"
	4. The newer Apple Configurator deletes the IPA after installing it, so you'll need to use this tool to grab it

	#!/bin/zsh

	# Save content as extract-ipa.sh file name
	# chmod +x extract-ipa.sh
	# Open terminal and run ./extract-ipa.sh <app id>
	# App ID is Id in appstore url. Like https://apps.apple.com/cn/app/ai-app/id6447539504?l=en&uo=4
	# App ID -> id6447539504
	# Full command like: ./extract-ipa.sh id6447539504

	WATCHED_DIR="$HOME/Library/Group Containers/K36BKF7T3D.group.com.apple.configurator/Library/Caches/Assets/TemporaryItems/MobileApps"