Spent some time recreating the ‘Blastpass’ iOS exploit in a faked target process, to understand the heap shaping strategy first-hand. Video here https://youtu.be/0JFcDCW3Sis?si=qcTmt5QOYNJJNSjU