EggShell - iOS/macOS Remote Administration Tool

EggShell is an iOS and macOS post exploitation surveillance pentest tool written in Python. This tool creates 1 line multi stage payloads that give you a command line session with extra functionality. EggShell gives you the power and convenience of uploading/downloading files, taking pictures,...

You Can Crash Anyone's iPhone Or iPad With A Simple Emoji Text Message

A newly discovered bug in Apple's iOS mobile operating system is being exploited in a prank that lets anyone crash your iPhone or iPad by just sending an emoji-filled iMessage, according to several reports. YouTube star EverythingApplePro published a video highlighting a sequence of characters th...

iOS 10 iMessage character crash Bug again-vulnerability warning-the black bar safety net

! Recently, hacker@vincedes3 found a from iOS 8 to iOS 10.2.1 b2 universal iMessage character crash Bug, the Bug also utilizes the iOS 8 iMessage SMS Bug of a similar technique, a section of malicious code sent to the victims, the victims in receiving SMS, browse SMS can be caught, then the SMS...

From Old exploits to new vulnerabilities – iMessage 0day(CVE-2 0 1 6-1 8 4 3) Tap record-vulnerability warning-the black bar safety net

0x01 introduction Note: in the article“0day”in the report to the official after the assigned vulnerability ID: CVE-2 0 1 6-1 8 4 3 A few days ago a foreigner posted a 3 month update to fix iMessage xssVulnerability, CVE-2 0 1 6-1 7 6 4）details:...

Apple OS X < 10.11.5 iMessage denial of service vulnerability

Apple OS X in 10.11.5 version before error processing the file name encoding issues causing denial of service vulnerability. Specific vulnerability mining ideas can be in the Paper in the view: http://paper.seebug.org/65/ 发送以下文件名的附件可触发此漏洞 zzzzzz.htm 1x;color/red;aaa/...

Apple Tracks Who You're Chatting Using iMessage — and Shares that Data with Police

Doing conversations with your friend on iMessage and thinking that they are safe and out of reach from anyone else other than you and your friend? No, it's not. End-to-end encryption doesn't mean that your iMessages are secure enough to hide your trace because Apple not only stores a lot of...

Apple's operating system exposed new vulnerabilities in addition to the latest version without immune-vulnerability warning-the black bar safety net

Security researchers recently discovered that Appleoperating systemthere is a huge security vulnerability. Hackers only need to know your phone number, you can use this security vulnerability to steal the user's password. ! IDG according to foreign media reports, security researchers recently...

The use of SMS and CVE-2 0 1 6-4 6 3 1 attacks Apple devices-vulnerability warning-the black bar safety net

According to foreign media reports, Security Studies experts discovered, in the iOS ImageIO framework there is a serious security vulnerabilityCVE-2 0 1 6-4 6 3 1,a remote attacker can exploit this vulnerability from the Apple device to steal sensitive information. The majority of Apple fans, I...

Beware! Your iPhone Can Be Hacked Remotely With Just A Message

In Brief Do you own an iPhone? Mac? Or any Apple device? Just one specially-crafted message can expose your personal information, including your authentication credentials stored in your device's memory, to a hacker. The vulnerability is quite similar to the Stagefright vulnerabilities, discovere...

How to Use Apple's iMessage on Android Phone

If you wish to send iMessages from your Android smartphone to a friend who owns an iPhone, it's possible now, at least for those who own MacBooks and iMacs. A developer has come up with a smart solution to bring Apple's iPhone messaging platform to Android phones. Though the solution is not...

Viber adds End-to-End Encryption and PIN protected Hidden Chats features

In Brief Viber, the popular mobile messaging app announced Tuesday that it has added full end-to-end encryption for video, voice and text message services for its millions of users. Here, the end-to-end encryption means only you and the person you are communicating with can read the content, and...

Apple OSX Message cross-domain scripting attacks vulnerability details（CVE-2 0 1 6-1 7 6 4-the vulnerability warning-the black bar safety net

! Apple in 3 months to fix the CVE-2 0 1 6-1 7 6 4 out of CNNVD-2 0 1 6 0 3-3 4 7, is an application-layer vulnerabilities that can lead to a remote attacker by means of a iMessage client leaked all message content and attachments. Contrast to attack the iMessage Protocol, this is a relatively...

iMessage Executes JavaScript URIs as Clickable Links

At the height of the Apple-FBI battle, researchers at Johns Hopkins University tunneled their way through the encryption protocol protecting iMessage to get at content sent via the Apple application Last week, a decidedly less complicated approach surfaced. Rather than having to learn crypto,...

FBI Breaks into Terrorist's Encrypted iPhone

A six-week public standoff between Apple and the FBI ended today when the Department of Justice said it had accessed encrypted data stored on the San Bernardino terrorist’s iPhone. The DOJ said in its motion that it no longer needed Apple’s help as mandated in a Feb. 16 court order and asked that...

On Apple Patches, the iMessage Bug, Apple vs. FBI, Locky, and Badlock

Mike Mimoso and Chris Brook recap the week in news, including how the FBI vacated Tuesday’s Apple hearing, a crypto iMessage bug that was patched, and the latest hospital to be hit by the ransomware Locky. The two also preview Badlock and what, if any, implications this week’s announcement may...

Apple Intel HD3000 Graphics kernel driver patch

While the iMessage crypto bug got most of the attention among this week’s Apple patches, another vulnerability that was addressed represents a nasty trend of privilege escalation flaws that merit watching. Researchers at Cisco on Wednesday disclosed details on a flaw in an OS X graphics kernel...

An iOS 0-day will lead to iCloud photos and videos in crack-vulnerability warning-the black bar safety net

There is a bad news, the Johns Hopkins University's Matthew Green, a Professor in the iOS encryption system found a 0-day vulnerability, which could allow a skilled attacker to intercept and decipher iMessages on. However, the good news is that this vulnerability is hard to exploit. Green explain...

Deluge of Apple Patches Fix Vulnerabilities in OS X, iOS, Safari, and More

In addition to fixing the serious crypto vulnerabilities in iMessage that surfaced yesterday, Apple also deployed patches for nearly all of its products, including Safari, OS X, iOS, Apple TV’s tvOS, and watchOS. The iOS update, 9.3, is arguably the most pressing given the cryptographic issue dug...

Johns Hopkins Researchers: Crypto Flaws Endanger iMessage Integrity

When Apple released its iOS Security Guide for public consumption, it was an unprecedented look inside the security architecture behind its products. For cryptographer and professor Matthew Green and a team of four Johns Hopkins University graduate students, it was a road map to understanding not...

Apple Could Offer iMessage App for Android

Although Apple has its own operating system for both desktop Mac OS X and iPhone iOS, the company has always tried to port its in-house applications to other OS platforms. Apple debuted on its rival mobile OS platform last year with the launch of Apple Music on Android. However, iTunes and Safari...