pwn2own2018

Pwn2Own 2018: Safari + macOS 针对 macOS 10.13.3 的 Safari RCE、沙箱逃逸和内核 LPE。 用法 安装 nasm 和 tornado： root@kitploit: brew install nasm pip3 install tornado 如果你想更改主机或端口，请检查 config.py。然后使用 ./server.py 启动服务器，并导航到显示的 URL。 概述 这个漏洞利用链使用三个不同的漏洞，从 Safari 内运行的 JavaScript 代码逐步实现内核模式代码执行： 1. DFG JIT...

Safari+macOS full exploit chain-vulnerability and early warning-the black bar safety net

At this year's Pwn2Own 2018 game, there is more for the Apple Safari browser attack challenge, today we will introduce for Safari remote code executionRCE, sandbox escapes, local privilege escalationLPEand for macOS 10.13.3 kernel exploits. To attack the challenges of the environment settings...

0-Days Found in iPhone X, Samsung Galaxy S9, Xiaomi Mi6 Phones

At Pwn2Own 2018 mobile hacking competition held in Tokyo on November 13-14, white hat hackers once again demonstrated that even the fully patched smartphones running the latest version of software from popular smartphone manufacturers can be hacked. Three major flagship smartphones—iPhone X,...

Hackers pwn Edge, Firefox, Safari, macOS, & VirtualBox at Pwn2Own 2018

By Waqas The white hat hackers at Pwn2Own 2018, have once again proved This is a post from HackRead.com Read the original post: Hackers pwn Edge, Firefox, Safari, macOS, & VirtualBox at Pwn2Own 2018...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of February 26, 2018

Pwn2Own 2018 is coming up in a couple of weeks and I am excited to see what interesting vulnerabilities will pop up at the contest. I attempted to explain the contest to my mom, and in the simplest terms, I told her that Pwn2Own is a contest where contestants are rewarded for breaking something...