yalu102

yalu102 64ビットデバイス向けの「開発中」のiOS脱獄ツール。qwertyoruiopz と marcograssi によって作成されました。 「Issues」タブはコード関連 の問題のみにご使用ください。サポートが必要な場合は、質問を投稿する前に /r/jailbreak で検索してください。 対応デバイスとiOSバージョン デバイス| バージョン ---|--- iPad Pro| iOS 10.0.0 - iOS 10.2 iPhone 6S| iOS 10.0.0 - iOS 10.2 iPhone SE| iOS 10.0.0 - iOS 10.2 iPhone 5S|...

Apple macOS/iOS - Kernel Double Free due to IOSurfaceRootUserClient not Respecting MIG Ownership Rules

I have previously detailed the lifetime management paradigms in MIG in the writeups for: CVE-2016-7612 https://bugs.chromium.org/p/project-zero/issues/detail?id=926 and CVE-2016-7633 https://bugs.chromium.org/p/project-zero/issues/detail?id=954 If a MIG method returns KERNSUCCESS it means that th...

Linux ASLR vulnerabilities: an attacker with unlimited disable ASLR（CVE-2 0 1 6-3 6 7 2-the vulnerability warning-the black bar safety net

! Recently, security personnel repair a Linux ASLR in a relatively old vulnerability, with x86 devices on the 3 2-bit application usage rights of any user, by the RLIMITSTACK resource is set to“unlimited”you can disable ASLR. The vulnerability CVE number CVE-2 0 1 6-3 6 7 2, The CNNVD number of...

Damn Vulnerable iOS App: DVIA

Damn Vulnerable iOS App DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This application covers all the common vulnerabilities...