CVE-2019-9791

Catena di exploit per CVE-2019-9791 e CVE-2019-11708 contro Firefox 65.0 Funziona contro Firefox 65.0 su Windows 64 bit. La parte CVE-2019-11708 è presa dall'exploit di 0vercl0k: https://github.com/0vercl0k/CVE-2019-11708 L'exploit utilizza CVE-2019-9791 per ottenere una primitiva di...

extra_recipe

// ianbeer iOS 10.2용 CVE-2017-2370 커널 임의 읽기/쓰기 익스플로잇 iPod Touch 6G 14C92에서만 테스트됨 - 다른 기기/펌웨어에서는 기본 상태로 동작하지 않습니다! 취약점 machvoucherextractattrrecipetrap은 모든 컨텍스트에서 호출할 수 있는 mach 트랩입니다. iOS 10에 추가된 완전히 새로운 코드입니다. kernreturnt machvoucherextractattrrecipetrapstruct machvoucherextractattrrecipeargs arg...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Post-Exploitation-Technik, um beliebige Kernel-Schreibvorgänge / Inkremente in eine vollständige Lese-/Schreib-Primitive auf Windows 11 22H2+ umzuwandeln. Dieser PoC verwendet den HackSysExtremeVulnerableDriver. Der PoC unterstützt sowohl beliebiges Schreiben als auch...

JITSploitation III: Subverting Control Flow

Posted by Samuel Groß, Project Zero This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed i...