0xjohnnydev/airlift
AirLift — paired-Mac AirTraffic/ATAirlock sandbox escape for iOS 27.0
Older snapshot: check the original source for current information.
From the publisher
README & documentation
Source previewRead the project’s overview, installation instructions and usage examples. The original README is the source of truth.
This is a proof of concept for developers and security researchers. If you are worried about 🔥🪲4⃣☁️ (burning bugs for clout) - there are always more bugs AirTraffic syncs media, including Books, from a Mac to an iPhone. AirLift uses that sync path to make one new file outside AirTraffic's intended Media area. It reads the file back and removes it, without installing an iPhone app. Here, “sandbox escape” means the media service crosses that file boundary; it does not mean kernel access or control of the whole phone. Fresh-file writes were confirmed in these directories on iOS 27.0 RC (24A435): The included PoC uses a fixed /var/tmp destination on iOS 27.0 build 24A437, where it has been used on an iPhone 18 Pro (iPhone19,2). It makes a fresh, randomly named canary file: A canary is short, random text used to show where the write landed. The PoC moves that…
Read the full README ↗ · Preview checked 2026-10-30T07:35:27.609Z
Inside the original README — Document outline
- airlift
- An AirTraffic sandbox escape for iOS 27.0.
- Reachable paths
- Components
- Why the path escapes
- Result and cleanup
- Build and run
Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.
Links from the README
References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.
Documentation belongs to its respective authors. Reported project/model license: MIT. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.
What this repository does
AirLift — paired-Mac AirTraffic/ATAirlock sandbox escape for iOS 27.0
Repository facts
- Owner
- 0xjohnnydev
- Primary language
- Objective-C
- Stars
- 262
- Forks
- 43
- Open issues + pull requests
- 2
- License
- MIT
- Archived
- No
- Default branch
- main
- Created
- 2026-09-14T09:27:44.000Z
- Last push
- 2026-09-15T12:59:27.000Z
Topics and intended use
No topics were included in the latest source metadata.
Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.
Evaluate before installing
Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.
Source and freshness
Source: GitHub. Metadata observed 2026-09-21T12:01:32.144Z. Daily imports are snapshots, not real-time monitoring.
Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.