ABrake27

ABrake27 iOS AMFI開発者モード有効化のためのLinuxネイティブクロスコンパイラ + PoC arm64/arm64e 研究グレードのツールキット。 iOS 27.0.1と27.2のファームウェアを差分比較し、AMFI IOUserClientディスパッチテーブルをリバースエンジニアリングし、Linux からベアメタルのIOKit PoCをクロスコンパイルし（Xcode不要）、標準のApple lockdownプロトコル経由でiOS 27.0.1の開発者モードを有効化 します（カーネルレベルで永続性を検証済み）。 これは何か IPSファームウェア差分 — iOS...

The use of the macOS kernel vulnerability to escape the Safari sandbox-vulnerability warning-the black bar safety net

In the Pwn2own 2017 game, Apple macOS Sierra and Safari 10 become is attack up one of the goals. In this competition process, although there are multi-branched clan successfully/semi-successfully completed on macOS + Safari target compromised, however 360 security team use exploits the minimum...

Apple macOS 10.12.1 Kernel - Writable Privileged IOKit Registry Properties Code Execution

Apple macOS 10.12.1 Kernel - Writable Privileged IOKit Registry Properties Code Execution / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=974 There are two ways for IOServices to define their IOUserClient classes: they can override IOService::newUserClient and allocate the...