YOU CAN'T SPELL WEBRTC WITHOUT RCE - PART 2

Summary from the TLDR InfoSec newsletter

This post discusses leveraging vulnerabilities in iOS to achieve full Remote Code Execution (RCE) in WebRTC based protocols. It covers topics like breaking Address Space Layout Randomization (ASLR) and exploiting shared libraries like SignalServiceKit. By chaining together various leaks and utilizing ARM64 ROP chains, the researchers successfully achieved their goal of leaking Signal-iOS's database.