igoat

!GSOC...

darksword-kexploit

DarkSword Kernel Exploit Objective-C で再実装されました。 iOS 15.0 - 26.0.1 をサポートする予定です。 オフセットは 15.x? 用にハードコードされています。 注: このエクスプロイトは私が発見/リークしたものではなく、リークの元のソースは https://github.com/htimesnine/DarkSword-RCE です。 このエクスプロイトは CELLEBRITE とはまったく関係なく、私が自由時間のひとつの午後に書いたものです。エクスプロイトロジックはすべて元のリポジトリからのものです iOS 15...

slides

スライド Hack Different: Z世代のバグでiOS 14を攻略する BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong 論文 録画 パロディ See No Eval: Objective-Cにおけるランタイム動的コード実行 RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape: 変わった方法でmacOS Safariサンドボックスを攻略する BlackHat EU 2020 Zhi Zhou@CodeColorist I Want to Break Free...

class-dump

class-dump class-dump は、Mach-O ファイルの Objective-C セグメントを調査するためのコマンドラインユーティリティです。クラス、カテゴリ、プロトコルの宣言を生成します。これは 'otool -ov' で提供される情報と同じですが、通常の Objective-C の宣言として表示されます。 最新バージョンと情報は以下で入手できます: http://stevenygard.com/projects/class-dump ソースコードは私の Github リポジトリからも入手できます: https://github.com/nygard/class-dum...

SnatchBox

SnatchBox SnatchBox CVE-2020-27935는 macOS 10.15까지, 그리고 macOS 11.0의 초기 베타 버전에 영향을 미치는 샌드박스 이스케이프 취약점입니다. SnatchBox의 가장 중요한 영향은 악의적인 배포자가 필수 macOS App Store 샌드박스를 탈출하여 사용자의 모든 파일에 대한 완전한 접근 권한을 얻을 수 있게 하여, macOS에서 App Store의 보안 모델을 무너뜨린다는 점입니다. 취약점 macOS에서는 iOS와 달리 사용자 공간 작업이 자발적으로 샌드박스에 들어가는 사실 자체...

MacSync under the microscope: new delivery methods and a new payload

MacSync is a relatively young, rapidly evolving family of crypto/info stealers. First advertised on the dark web in 2025 as Mac.c, the stealer was later renamed to MacSync by its creators. The initial versions were implemented as AppleScripts and closely resembled the AMOS stealer family, but ove...

[SECURITY] Fedora 43 Update: objfw-1.5.5-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 43 Update: mingw-objfw-1.5.5-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: mingw-objfw-1.5.5-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: objfw-1.5.5-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 43 Update: mingw-objfw-1.5.4-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 43 Update: objfw-1.5.4-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: objfw-1.5.4-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: mingw-objfw-1.5.4-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

darksword-kexploit

DarksSword Kernel Exploi...

darksword-kexploit

DarksSword Kernel Exploit Rei...

learn_exploit_dev

Este repositorio contiene un seguim...

BlueNoroff Unleashes New macOS Malware ObjCShellz

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new macOS malware variant linked to the financially motivated BlueNoroff APT group, named "ObjCShellz,“ featuring remote shell capabilities and suspicious domain communication. The malware, written in...

Fedora: Security Advisory for clang (FEDORA-2023-67f0f8d186)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

New Report Exposes Operation Triangulation's Spyware Implant Targeting iOS Devices

More details have emerged about the spyware implant that's delivered to iOS devices as part of a campaign called Operation Triangulation. Kaspersky, which discovered the operation after becoming one of the targets at the start of the year, said the malware has a lifespan of 30 days, after which i...