SeaShell - iOS 16/17 Remote Access

This article describes SeaShell, a proof-of-concept post-exploitation framework targeting iOS 16/17, which leverages a vulnerability in the CoreTrust / AMFI system (notably CVE-2022-26766) to bypass…