slides

diapositivas Hack Different: Pwnear iOS 14 con Bugz de la Generación Z BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong artículo grabación parodia See No Eval: Ejecución dinámica de código en tiempo de ejecución en Objective-C RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape: Pwnea...

darksword-kexploit

DarkSword 内核漏洞利用 用 Objective-C 重新实现。 据称支持 iOS 15.0 - 26.0.1。 偏移量针对 15.x 硬编码? 注意：此漏洞并非由我发现/泄露，泄露的原始来源是 https://github.com/htimesnine/DarkSword-RCE 此漏洞同样与 CELLEBRITE 完全无关，是我在一个空闲的下午写出来的，所有漏洞逻辑均来自原始仓库（除了一些让它在 iOS 15 上运行的小修复之外）。 如果你是 GitHub 员工并正在阅读本文：目前有大量虚假越狱工具在骗取用户钱财（只需搜索类似 pangu8.com...

igoat

!GSOC...

class-dump

class-dump class-dump 是一个用于检查 Mach-O 文件中 Objective-C 段的 命令行实用程序。它会为类（class）、类别（category）和协议（protocol） 生成声明。这些信息与使用 'otool -ov' 获得的信息相同，但 以正常的 Objective-C 声明形式呈现。 最新版本和信息可在以下网址获取： root@kitploit: http://stevenygard.com/projects/class-dump 源代码也可从我的 Github 仓库获取： root@kitploit:...

SnatchBox

SnatchBox SnatchBox CVE-2020-27935 is a sandbox escape vulnerability affecting macOS up to version 10.15, as well as early beta versions of macOS 11.0. The most significant impact of SnatchBox is that it allows a malicious publisher to escape the non-optional macOS App Store sandbox and obtain...

[SECURITY] Fedora 43 Update: objfw-1.5.5-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 43 Update: mingw-objfw-1.5.5-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: mingw-objfw-1.5.5-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: objfw-1.5.5-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 43 Update: mingw-objfw-1.5.4-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 43 Update: objfw-1.5.4-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: mingw-objfw-1.5.4-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: objfw-1.5.4-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

darksword-kexploit

DarksSword Kernel Exploi...

darksword-kexploit

DarksSword Kernel Exploit Rei...

learn_exploit_dev

Este repositorio contiene un seguim...

BlueNoroff Unleashes New macOS Malware ObjCShellz

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new macOS malware variant linked to the financially motivated BlueNoroff APT group, named "ObjCShellz,“ featuring remote shell capabilities and suspicious domain communication. The malware, written in...

Fedora: Security Advisory for clang (FEDORA-2023-67f0f8d186)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

New Report Exposes Operation Triangulation's Spyware Implant Targeting iOS Devices

More details have emerged about the spyware implant that's delivered to iOS devices as part of a campaign called Operation Triangulation. Kaspersky, which discovered the operation after becoming one of the targets at the start of the year, said the malware has a lifespan of 30 days, after which i...

Dissecting TriangleDB, a Triangulation spyware implant

Over the years, there have been multiple cases when iOS devices were infected with targeted spyware such as Pegasus, Predator, Reign and others. Often, the process of infecting a device involves launching a chain of different exploits, e.g. for escaping the iMessage sandbox while processing a...