ABrake27

ABrake27 Linux-native cross-compiler + PoC for iOS AMFI Developer Mode activation arm64/arm64e Research-grade toolkit. Diff iOS 27.0.1 vs 27.2 firmware, reverse-engineer the AMFI IOUserClient dispatch table, cross-compile a bare-metal IOKit PoC from Linux — no Xcode required — and enable Develope...

The use of the macOS kernel vulnerability to escape the Safari sandbox-vulnerability warning-the black bar safety net

In the Pwn2own 2017 game, Apple macOS Sierra and Safari 10 become is attack up one of the goals. In this competition process, although there are multi-branched clan successfully/semi-successfully completed on macOS + Safari target compromised, however 360 security team use exploits the minimum...

Apple macOS 10.12.1 Kernel - Writable Privileged IOKit Registry Properties Code Execution

Apple macOS 10.12.1 Kernel - Writable Privileged IOKit Registry Properties Code Execution / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=974 There are two ways for IOServices to define their IOUserClient classes: they can override IOService::newUserClient and allocate the...