In 2007, as part of the early iOS jailbreaking community, he developed instructions for how to jailbreak an iPhone while using Windows, along with contributing to the initial version of JailbreakMe.[1] In 2010, Wang modified iPhone software to enable using the Android operating system on the phone.[2] He worked on iOS jailbreaks as part of the iPhone Dev Team[3] and the Evad3rs team,[4] and he won a Pwnie Award for his jailbreaking work with the Evad3rs.[5] Their work included Evasi0n.[6] He also wrote an open source tool, xpwn, that was cited in books about iPhone hacking.[7][8]
While working for Azimuth Security, Wang worked on a project for the FBI where he helped unlock an iPhone that belonged to an attacker who was part of the 2015 San Bernardino attack.[5] That situation was part of the Apple–FBI encryption dispute.
In 2016, Wang and collaborators gave a talk at the Black Hat conference with technical details about the iPhone's Secure Enclave Processor.[9]
Wang cofounded Corellium, a company that provides virtualization services for companies to test phone software.[10] Corellium offered or sold the product to at least some companies that make spyware.[11] While at Corellium, Wang worked on an experimental tool to run Android on iPhones in 2020.[12]Apple sued Corellium in 2019, including accusations that the company sold the product to governments that wanted to use it to find ways to break into iPhones,[13] but the companies settled in 2023.[14]
Wang also cofounded Quantum Metric, a data analytics company.[15]