Mobile Hacking Labs 
DoomScroll

DoomScroll is a social iOS app where users can endlessly scroll through a video feed and share their videos, in the shape everyone already knows. But there is a catch one video can corrupt the app and worst, it can corrupt other users phone if the corrupt video appears in their feed.

Hint: This app contains a real-world vulnerability in imageIO (CVE-2026-28990) fixed in iOS 26.5.

Objective
Exploit a memory corruption bug in the app by uploading a malicious video to the feed, to retrieve the flag.

Skills Required
  • Reverse Engineering: Proficiency in disassembling and analyzing compiled code.
  • Exploitation of low level memory corruption bugs

Course Lessons