In this pdf file written by the great Saleo: https://saelo.github.io/presentations/36c3_messenger_hacking.pdf
Saleo was able to debug the called method names of imessage during runtime with ida pro, which suggests that he was able to attach debugserver or an equivalent to imessage. My question is whether a rootful jailbroken iphone is necessary to set up a similar debugging environment, or whether a rootless jailbreak will also suffice. In case a rootless jailbreak is not enough due to lack of permission, what are some ways by which a similar imessage debugging environment with ida pro can be set up, for a rootless jailbroken A12+ device <= ios 16.0.3?
*Edit: I have figured out that a jailbroken iphone is necessary for any serious ios app research, and that the alternative is doing it on an M1+ macbook pro. Does anyone have experience or intuition regarding the exploit chain that will eventually trigger a PPL bypass for A12+ devices running on <= ios 16.0.3?