yalu102

yalu102 一个由 qwertyoruiopz 和 marcograssi 创建的面向 64 位设备的 iOS 越狱工具，目前仍处于“开发中”状态。 请仅通过“Issues”标签页提交与代码相关 的问题。如果你需要支持，请先在 /r/jailbreak 上搜索，然后再在那里提问。 支持的设备和 iOS 版本 设备| 版本 ---|--- iPad Pro| iOS 10.0.0 - iOS 10.2 iPhone 6S| iOS 10.0.0 - iOS 10.2 iPhone SE| iOS 10.0.0 - iOS 10.2 iPhone 5S| iOS 10.0.0 - iOS...

Apple macOS/iOS - Kernel Double Free due to IOSurfaceRootUserClient not Respecting MIG Ownership Rules

I have previously detailed the lifetime management paradigms in MIG in the writeups for: CVE-2016-7612 https://bugs.chromium.org/p/project-zero/issues/detail?id=926 and CVE-2016-7633 https://bugs.chromium.org/p/project-zero/issues/detail?id=954 If a MIG method returns KERNSUCCESS it means that th...

Linux ASLR vulnerabilities: an attacker with unlimited disable ASLR（CVE-2 0 1 6-3 6 7 2-the vulnerability warning-the black bar safety net

! Recently, security personnel repair a Linux ASLR in a relatively old vulnerability, with x86 devices on the 3 2-bit application usage rights of any user, by the RLIMITSTACK resource is set to“unlimited”you can disable ASLR. The vulnerability CVE number CVE-2 0 1 6-3 6 7 2, The CNNVD number of...

Damn Vulnerable iOS App: DVIA

Damn Vulnerable iOS App DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities...