Hey, I'm Jian. I like breaking iOS security mitigations and building weird tools with Swift.
My main focus right now is the Apple Security Bounty program—hunting logic bugs, kernel issues, and writing PoCs.
-
CVE-2025-46280 (Assigned Dec 2025)
- Impact: An app may be able to execute arbitrary code with kernel privileges
- Description: An out-of-bounds read was addressed with improved bounds checking.
-
CVE-2026-20654
- Impact: An app may be able to cause unexpected system termination
- Description: The issue was addressed with improved memory handling.
-
CVE-2026-28867
- Impact: An app may be able to leak sensitive kernel state
- Description: This issue was addressed with improved authentication.
- Reversing: IDA Pro, Ghidra, Hopper Disassembler
- Dev: Swift (SwiftUI)
- Focus: Bugs in Apple deviecs, Mach-O parsing, Sideloading iPA
- IPASigner – Sign & inject tweaks into
.ipafiles on the fly. - ReDyne – Attempting to build a proper native decompiler for iOS.
- DexLoom – iOS app for running native APKs (Work in Progress).
- UniGram – Simple app to scrape and push university notifications.
Contact: DM me on Discord, Twitter (@Speedyfriend433) or email speedyfriend433@gmail.com.
Note: I break things to learn how to fix them. No piracy, just research.
🇰🇷 / 🇺🇸