Billy Ellis

Exploit-Challenges. A collection of vulnerable ARM binaries for practicing exploit development

framebuffer_write. A tool to write text to the iOS screen by directly modifying the pixel information in the framebuffer

iOS-File-Explorer. No-jailbreak file explorer application for iOS

coruna-buffout. A work-in-progress re-implementation of the buffout WebKit exploit used in the 'Coruna' iOS spyware

exr-imageio-poc. PoC for CVE-2026-28990, an ImageIO bug patched in iOS/macOS 26.5

Lyla-Debugger. Bare-bones iOS debugger written in C

aslr-kernel-patch. Tool to patch the ASLR slide generation in the kernel to disable user-land ASLR on 32-bit iOS

Jailbreak-Detection-in-iOS-App. Very simple example of how to detect if the device is jailbroken. This is not the most efficient way but it will work in most cases.

kobject. A tool to pull C++ object names from kernel memory

Enter-kDFU-iOS-App. A springboard icon that when clicked, puts your device into kDFU mode.

BlurryLaunch. Cydia substrate tweak that adds colourful blur animations on app launching (supporting iOS 8.0 - 11.1.2)

jitsploitation. iOS browser exploit for CVE-2020-9802, an old JIT bug.

BubbleSort-ARM64. Implementation of the BubbleSort algorithm written from scratch in ARM64 assembly

FlappyBird-NeuralNet. My A-level computer science project from 2017-2018, a neural network that learns to play Flappy Bird

SceneKit-Glass-Box. Glass cube in SceneKit

iOS-System-Actions. Simple app demonstrating how to execute system (mobile user) commands in an iOS app

Billy-Ellis.github.io. blog

NanoChargingView. Check out the tweak on Cydia

SceneKit-Testing. Simple SceneKit testing app that allows you to play with the properties of an SCNBox

UIDevice-Example. Example demonstrating how to read iOS hardware & software information in an iOS app using the UIDevice class