Jonathan Zdziarski performed a simple “concept” demonstration of a NAND mirroring attack on an iOS 9.0 device to bypass the passcode. He made a copy of two property lists stored on the jailbroken device, then copied them back and rebooted after five attempts. Here are the videos:
And here is the link to the original post.
