matteyeuxMar 9
After playing a bit with the coruna exploit chain, I dumped the kernel exploit and one of the implants in powerd
https://github.com/matteyeux/coruna
GitHub - matteyeux/coruna: deobfuscated JS and blobs from https://b27[.]icu, first attempt at using claude

deobfuscated JS and blobs from https://b27[.]icu, first attempt at using claude - matteyeux/coruna

GitHub
Show threadBucciaMar 9
@matteyeux The exploit links are still alive? If not, where did you get the files?
Show threadmatteyeuxMar 9
@BucciaBuccia this one https://sadjd[.]mijieqi[.]cn/group[.]html is still up, I tested it yesterday. Then I dumped from memory the payloads
Show threadBuccia
@matteyeux Are the latest version of iOS 16 and 17 patched?
Mar 9 at 1:52pmWeb
Show threadmatteyeuxMar 9
@BucciaBuccia no idea which minor version is patched