Security_Usage_Intelligence

pwn0win You know there will be an iOS challenge as this is R3CTF.

This challenge is from Nebula Security (@nebusecurity)

Please pack your exploit into a regular and installable IPA file. And open a ticket to start challenge. You will have 3 minutes to pwn the challenge. During the attempt, you can request any form of restart or environment reset.

Before submitting, please verify that your exploit works reliably and displays the flag on the screen. Each team is limited to 3 attempts.

Note: Flag is in /var/jb/var/root/flag with -r-------- 1 root wheel. We have configured the sandbox profile so the service in the attachment are reachable within the iOS sandbox.