v3ntex but better. Uses techniques from Ian Beer's async_wake. Much like v1ntex, but with pipes and for iOS 12.

• tested on 12.1.2
• works up to 12.1.2
• gets you tfp0

It is by no means necessary, but adds the missing flair ;)

Offsets hardcoded for: Darwin Kernel Version 18.2.0: Mon Nov 12 20:31:59 PST 2018; root:xnu-4903.232.2~1/RELEASE_ARM64_S5L8960X
Get your own if you wanna run it on something else ;)

Should work on all 4K devices on 12.0-12.1.2.

Note:
Exploit can probably be slightly improved to replace at least one non-deterministic component. Might look into it some time.

Special thanks to:
@S0rryMybad
@s1guza
@_bazad @i41nbeer