About

About

Low-level developer and security researcher focused on iOS internals, reverse engineering, and C/C++ systems programming.

I work at the layer where Swift meets the Objective-C runtime, and where sockets meet the kernel — private frameworks, Mach-O, XPC, IOKit, arm64e. Most of my public work targets TrollStore-enabled devices.

Focus areas

  • iOS internals — XNU, Mach-O, IOKit registry, XPC, launchd, sandbox
  • Reverse engineering — private frameworks, system daemons, runtime introspection
  • Systems programming — POSIX networking, low-level C/C++, Swift/Objective-C interop
  • arm64e — PAC, pointer signing, exploring hardware-backed integrity

Selected projects

  • SystemExplorer — read-only iOS system monitor for TrollStore. Processes, entitlements, Mach-O layout, XPC daemons, IOKit registry.
  • tcp-cpp-server — HTTP + real-time chat server written from scratch in C++ over raw POSIX sockets. No frameworks.
  • OneXray — Cross-platform Xray-core client with patches for xhttp session handling, TrollStore Network Extension entitlements, and provider configuration fallbacks.

Contact

Open to discussing iOS security research, low-level tooling, and collaboration.