ios-gamed-0day

Exploit di gamed su iOS corretto in 15.0.2 Aggiornamento: Apple ha corretto silenziosamente questo problema in iOS 15.0.2 senza alcun riconoscimento pubblico o credito. Qualsiasi app installata dall'App Store può accedere ai seguenti dati senza alcun prompt all'utente: Email dell'ID Apple e nome...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

Fake Apple Pay charge brings the classic tech support scam to your phone

iPhone users are being targeted in a new tech support scam, using a fake Apple Pay notification to trick users. Tech support scams that use fake warnings to push victims into calling a phone number have been around for years, but this page has been designed specifically for phones. Instead of a...

inputcontrol

inputcontrol Глупое доказательство концепции для CVE-2023-28197, представленное Apple при подаче отчета. Хорошо сочетается с соответствующей записью в блоге: "CVE-2023-28197: inputcontrol"...

CVE-2026-28858

⚠️ CVE-2026-28858 — Buffer Overflow in Apple iOS/iPadOS root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ SEVERITÀ: CRITICA │ CVSS: 9.8 │ CWE-120 │ REMOTO ║ ╚══════════════════════════════════════════════════════════════╝ Un utente remoto può provocare la...

Fourteen_Endpoints

Посредники Подставные компании внутри приватного реле Apple Анонимная LLC в Делавэре публикует в App Store приложение для библейских молитв, ежедневный дневник и определитель звонящего. Эта организация управляет зашифрованной релейной инфраструктурой внутри приватной сети Apple. Это реле...

Fix-Apple-Mail-CVE-2020-9922

Fix-Apple-Mail-CVE-2020-9922 Apple Mail ha una spaventosa vulnerabilità zero-click. Le versioni di OS X precedenti a High Sierra non sono state patchate. https://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c L'ho creato in fretta e l'ho testato solo su...

CVE-2024-0258

CVE-2024-0258 तकनीकी विश्लेषण और सार्वजनिक दस्तावेज़ीकरण CVE-2024-0258 से संबंधित, जो Apple की libxpc में एक कमज़ोरी है। यह रिपॉजिटरी शोध नोट्स, तकनीकी टिप्पणियाँ, रिवर्स इंजीनियरिंग निष्कर्ष और सार्वजनिक संदर्भ शामिल करता है, जो कमज़ोरी और इसके सुरक्षा प्रभावों का दस्तावेज़ीकरण करने के लिए हैं।...

OpenSovix

CVE-2025-46285 – Tiefgehende Sicherheitslückenanalyse und Proof-of-Concept Wichtiger Haftungsausschluss: Die folgenden Inhalte dienen ausschließlich der Sicherheitsbildung, defensiven Forschung und der Analyse von Sicherheitslücken. Testen oder nutzen Sie diese Sicherheitslücke nicht in nicht...

CTT-Apple-Silicon-Refraction

CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Layer WebGL Payload ​这个JavaScript有效载荷使用 \alpha 常量来创建一个高频的"Memory Shiver"。它通过在WebKit垃圾回收器与GPU的Metal命令缓冲区之间制造不同步，触发CVE-2025-43529中的Use-After-Free（UAF）漏洞。 🍎 CTT-Apple-Silicon-Refraction WebKit/ANGLE 零日 "标签保护地址；CTT控制时间。" CVE-ID: CVE-2025-14174...

attesor

Progetto di Reverse Engineering di Rosetta 2 Un approfondito sforzo di reverse engineering per comprendere e documentare la tecnologia di traduzione binaria Rosetta 2 di Apple. Indice dei Contenuti 1. Contesto 2. Cos'è Rosetta? 3. Cos'è Rosetta 2? 4. Come Apple Distribuisce Rosetta 2 in macOS 5...

Inferno

ChefKiss Inferno ChefKiss Inferno est un dérivé du projet QEMU qui fournit le support des invités pour les appareils Apple ARM. !CAUTION Veuillez envisager de faire un don/un pourboire pour aider à poursuivre le développement du projet, en le gardant gratuit et open-source. PayPal ou carte de...

vibebox

eine ultraschnelle Open-Source-Sandbox für das sichere Ausführen von Coding-Agenten. Englisch | 简体中文 VibeBox ist eine projektspezifische Micro-VM-Sandbox zum Ausführen von Coding-Agenten unter macOS Apple Virtualization Framework. Es ist für einen Alltags-Workflow optimiert: schnelles...

AirBorne-PoC

Фреймворк AirBorne PoC – Elite RCE Edition Полный PoC-фреймворк для CVE-2025-24252 и CVE-2025-24132 Автор ekomsSavior | AirBorne — это комбинированный фреймворк PoC, нацеленный на две серьезные уязвимости в сервисе Apple AirPlay. Он включает в себя полный триггер сбоя и рабочую обратную оболочку ...

dd

dd Esegui container Linux su macOS — senza VM. Cos'è dd? dd esegue container Linux in modo nativo su macOS con Apple Silicon senza una macchina virtuale. Non c'è kernel Linux né hypervisor sottostante: un JIT traduce il codice del container e gestisce le sue chiamate di sistema Linux nello spazio...

sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Dank an Joe Vennix von Apple Information Security für das Finden des Fehlers...

cerberus-re-skill

Cerberus RE cerberus-re è un workbench locale per il reverse engineering incentrato su Apple, progettato per costruire un ciclo ripetibile a tre teste statico/dinamico/strumentazione attorno a Ghidra, LLDB e Frida. È pensato per analisti e agenti di codifica che necessitano di artefatti durevoli...

apk-medit

apk-medit Apk-medit è uno strumento di ricerca e patch della memoria per apk debuggable senza root e ndk. È stato creato per i test di sicurezza dei giochi mobili. Molti giochi mobili hanno il rilevamento del rooting, ma apk-medit non richiede privilegi di root, quindi la modifica della memoria p...

openwifipass

OpenWifiPass An open source implementation of the grantor role in Apple's Wi-Fi Password Sharing protocol. Disclaimer OpenWifiPass is experimental software and is the result of reverse engineering efforts by the Open Wireless Link project. The code serves solely documentary and educational...

CVE-2026-56547

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...