igoat

!GSOC...

slides

슬라이드 다르게 해킹하기: Z세대 버그로 iOS 14 제압하기 BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong 백서 녹화 패러디 Eval은 보지 마: Objective-C 런타임 동적 코드 실행 RWCTF 2021 Zhi Zhou@CodeColorist 크로스 사이트 탈출: 특이한 방법으로 macOS Safari 샌드박스 제압하기 BlackHat EU 2020 Zhi Zhou@CodeColorist 난 자유로워지고 싶어: 특이한 로직 Safari 샌드박스 탈출...

darksword-kexploit

DarkSword Kernel Exploit Objective-C로 재구현됨. iOS 15.0 - 26.0.1 지원 예정. 오프셋은 15.x용으로 하드코딩됨? 참고: 이 익스플로잇은 제가 발견하거나 유출한 것이 아닙니다. 유출의 원본 소스는 https://github.com/htimesnine/DarkSword-RCE 입니다. 또한 이 익스플로잇은 CELLEBRITE와 전혀 관련이 없으며, 제가 여가 시간에 한 오후 동안 작성한 것입니다. 모든 익스플로잇 로직은 원본 저장소에서 가져온 것입니다iOS 15에서 작동하도록 약간의...

class-dump

class-dump class-dump는 Mach-O 파일의 Objective-C 세그먼트를 검사하기 위한 명령줄 유틸리티입니다. 클래스, 카테고리 및 프로토콜에 대한 선언을 생성합니다. 이는 'otool -ov'를 사용하여 제공되는 정보와 동일하지만, 일반적인 Objective-C 선언 형태로 표시됩니다. 최신 버전 및 정보는 다음에서 확인할 수 있습니다: http://stevenygard.com/projects/class-dump 소스 코드는 제 Github 저장소에서도 확인할 수 있습니다:...

SnatchBox

SnatchBox SnatchBox CVE-2020-27935는 macOS 10.15까지, 그리고 macOS 11.0의 초기 베타 버전에 영향을 미치는 샌드박스 이스케이프 취약점입니다. SnatchBox의 가장 중요한 영향은 악의적인 배포자가 필수 macOS App Store 샌드박스를 탈출하여 사용자의 모든 파일에 대한 완전한 접근 권한을 얻을 수 있게 하여, macOS에서 App Store의 보안 모델을 무너뜨린다는 점입니다. 취약점 macOS에서는 iOS와 달리 사용자 공간 작업이 자발적으로 샌드박스에 들어가는 사실 자체...

MacSync under the microscope: new delivery methods and a new payload

MacSync is a relatively young, rapidly evolving family of crypto/info stealers. First advertised on the dark web in 2025 as Mac.c, the stealer was later renamed to MacSync by its creators. The initial versions were implemented as AppleScripts and closely resembled the AMOS stealer family, but ove...

[SECURITY] Fedora 43 Update: objfw-1.5.5-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 43 Update: mingw-objfw-1.5.5-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: mingw-objfw-1.5.5-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: objfw-1.5.5-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 43 Update: mingw-objfw-1.5.4-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 43 Update: objfw-1.5.4-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: mingw-objfw-1.5.4-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: objfw-1.5.4-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

darksword-kexploit

DarksSword Kernel Exploi...

darksword-kexploit

DarksSword Kernel Exploit Rei...

learn_exploit_dev

Este repositorio contiene un seguim...

BlueNoroff Unleashes New macOS Malware ObjCShellz

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new macOS malware variant linked to the financially motivated BlueNoroff APT group, named "ObjCShellz,“ featuring remote shell capabilities and suspicious domain communication. The malware, written in...

Fedora: Security Advisory for clang (FEDORA-2023-67f0f8d186)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

New Report Exposes Operation Triangulation's Spyware Implant Targeting iOS Devices

More details have emerged about the spyware implant that's delivered to iOS devices as part of a campaign called Operation Triangulation. Kaspersky, which discovered the operation after becoming one of the targets at the start of the year, said the malware has a lifespan of 30 days, after which i...