SEC-T 2026

[Community Training] Low-Level iOS Hacking - an introduction

Ever wondered what's going on inside your iPhone?
It's an incredible can of worms, that Etum/Agnes would love to explore with you!

We'll crack open how iOS and its apps actually work under the hood, then get you hands-on with Arm64 and LLDB ( the real tools that jailbreakers and security researchers use) before setting you loose on live disassembly and debugging. Bring questions, a linux laptop and a can do attitude!

This workshop is beginner-friendly, no experience required (but if you've touched a terminal before, you'll feel right at home)

Workshop outline:

  • Introductory talk about how iOS/iOS apps work "under the hood".
  • Arm64 and LLDB basics, follow-along.
  • Hands-on simple disassembly and LLDB debugging.
  • Post-workshop reversing material
  • ... Probably low-level iOS tangents if you poke Etum enough about it

Materials:
Bring your own laptop. (Mac or Linux)
For the hands-on section, we will supply as many Jailbroken iOS devices as we have available; otherwise, go ahead and bring a macbook with vphone-CLI [https://github.com/Lakr233/vphone-cli] installed (Requires AMFI turned off over csrutil)

Agnes Borg

Agnes Borg is a Reversec security consultant who enjoys exploring the vast world of web and mobile technologies.
She has a growing interest in low-level iOS internals and application hacking.
On her spare time when not lazy, she likes to do bug bounty hunting.