ClearSword

ClearSword 概述 一个 DarkSword 内核漏洞的 C 语言移植 我尽量保持与原版一致，但为了在早期 iOS 版本上运行，不得不做了一些修改。 这些更改和个人修改将通过 NOTE 注释标明。 我几乎为整个漏洞的每一行都添加了行注释，说明每行代码的作用。 Write-up eta s0n。向这个伟大的漏洞 RIP。 CVE CVE-2025-43520 "Darksword" - clusterwritecontig/clusterreadcontig 中的竞态条件 构建 构建 IPA root@kitploit: make ipa 构建二进制文件 root@kitploit...

darksword-kexploit

DarkSword 内核漏洞利用 用 Objective-C 重新实现。 据称支持 iOS 15.0 - 26.0.1。 偏移量针对 15.x 硬编码? 注意：此漏洞并非由我发现/泄露，泄露的原始来源是 https://github.com/htimesnine/DarkSword-RCE 此漏洞同样与 CELLEBRITE 完全无关，是我在一个空闲的下午写出来的，所有漏洞逻辑均来自原始仓库（除了一些让它在 iOS 15 上运行的小修复之外）。 如果你是 GitHub 员工并正在阅读本文：目前有大量虚假越狱工具在骗取用户钱财（只需搜索类似 pangu8.com...

DarkSword_analysis

DarkSwordanalysis DarkSword iOS WebKit 利用链的静态分析 — 投递、部署与 CVE 分解 CVE-2025-31277, CVE-2025-43529 我是一名大一信息系统专业的学生，在构建逆向工程和恶意软件分析技能的过程中，正在研究这条利用链。随着学习新概念和深入分析代码，我会更新这份分析报告。 来源 htimesnine/DarkSword-RCE Lookout Threat Intelligence iVerify — Inside DarkSword Google GTIG — Proliferation of DarkSword...

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

An unknown Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys said it identified the threat actor running more than 100 web properties, most ...

cyanide

Cyanide By @zeroxjf — an iOS...

DarkSword Malware

DarkSword is a sophisticated piece of malware--probably government designed--that targets iOS. Google Threat Intelligence Group GTIG has identified a new iOS full-chain exploit that leveraged multiple zero-day vulnerabilities to fully compromise devices. Based on toolmarks in recovered payloads, ...

Apple expands “DarkSword” patches to iOS 18.7.7

Apple widened its latest iOS 18 security update to cover far more iPhones and iPads, specifically to stop real‑world DarkSword attacks that can compromise a device from a single website visit. After researchers published their findings about the DarkSword attacks and an exploit kit abusing the...

Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit

Apple on Wednesday expanded the availability of iOS 18.7.7 and iPadOS 18.7.7 to a broader range of devices to protect users from the risk posed by a recently disclosed exploit kit known as DarkSword. "We enabled the availability of iOS 18.7.7 for more devices on April 1, 2026, so users with...

Apple Pushes Rare iOS 18 Patch for Devices at Risk from DarkSword Exploit

Apple pushes rare iOS 18 security patch to protect devices at risk from the DarkSword exploit, urging users to update or move to iOS 26 for stronger protection...

Apple Will Push Out Rare ‘Backported’ Patches to Protect iOS 18 Users From DarkSword Hacking Tool

As DarkSword spreads, Apple tells WIRED it will enable iOS 18-specific fixes for millions of iPhone owners who remain on that iOS version rather than force them to update to iOS 26...

TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

Proofpoint has disclosed details of a targeted email campaign in which threat actors with ties to Russia are leveraging the recently disclosed DarkSword exploit kit to target iOS devices. The activity has been attributed with high confidence to the Russian state-sponsored threat group known as...

DarKSward

DarKSward-DarKSword Webpack source code reconstruction of the...

DarkSword iPhone Exploit Leaked Online, Hundreds of Millions at Risk

DarkSword exploit leak puts up to 270 million iPhones at risk, with hackers able to access data through…...

darksword-kexploit

DarksSword Kernel Exploit Rei...

Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit Attacks

Apple is urging users who are still running an outdated version of iOS to update their iPhones to secure against web-based attacks carried out via powerful exploit kits like Coruna and DarkSword. These attacks employ malicious web content to target out-of-date versions of iOS, triggering an...

A DarkSword hangs over unpatched iPhones

Researchers at Google have identified an iOS exploit chain, named DarkSword, that has been used since late last year by multiple actors to infect iPhones with malware in targeted attacks. DarkSword combines six vulnerabilities in iOS and Safari to deploy malware on the device. It demonstrates, on...

DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover

A new exploit kit for Apple iOS devices designed to steal sensitive data from is being wielded by multiple threat actors since at least November 2025, according to reports from Google Threat Intelligence Group GTIG, iVerify, and Lookout. According to GTIG, multiple commercial surveillance vendors...

Hundreds of Millions of iPhones Can Be Hacked With a New Tool Found in the Wild

A powerful iPhone-hacking technique known as DarkSword has been discovered in use by Russian hackers. It can take over devices running iOS 18 that simply visit infected websites...