AndroidDriveSignity

AndroidDriveSignity AndroidDriveSignity è uno script Python progettato per patchare i file del kernel AndroidARMv8.3, consentendo il caricamento dei driver senza essere soggetti a vari controlli di verifica, in particolare la verifica delle firme. Questo strumento mira a facilitare il processo di...

Examining Pointer Authentication on the iPhone XS

Posted by Brandon Azad, Project Zero In this post I examine Apple's implementation of Pointer Authentication on the A12 SoC used in the iPhone XS, with a focus on how Apple has improved over the ARM standard. I then demonstrate a way to use an arbitrary kernel read/write primitive to forge kernel...

voucher_swap: Exploiting MIG reference counting in iOS 12

Posted by Brandon Azad, Project Zero In this post I'll describe how I discovered and exploited CVE-2019-6225, a MIG reference counting vulnerability in XNU's taskswapmachvoucher function. We'll see how to exploit this bug on iOS 12.1.2 to build a fake kernel task port, giving us the ability to re...