CVE-2024-27804

CVE-2024-27804 root@kitploit: ./build.sh ./panic.sh root@kitploit: paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3:...

ipa-medit

ipa-medit Ipa-medit is a memory search and patch tool for resigned ipa without jailbreaking. It supports iOS apps running on iPhone and Apple Silicon Mac. It was created for mobile game security testing. Many mobile games have jailbreak detection, but ipa-medit does not require jailbreaking, so...

ipa-medit

ipa-medit Ipa-medit es una herramienta de búsqueda y parcheo de memoria para ipa refirmados sin hacer jailbreak. Soporta aplicaciones iOS ejecutándose en iPhone y Mac con Apple Silicon. Fue creada para pruebas de seguridad en juegos móviles. Muchos juegos móviles tienen detección de jailbreak, pe...

macOS-Security-and-Privacy-Guide

This guide is a collection of techniques for improving the security and privacy of macOS on Apple silicon Macs. It targets experienced users who want security practices commonly used by organizations, but is also suitable for novice users with an interest in privacy and security. For...

jit

jitpass - just-in-time passwords Just-in-time credentials for your dev machine. Documentation · Quickstart · Supported tools · Command reference · Security Status: macOS-only Apple Silicon, and still in development. What jit is 30 seconds Your secrets live in plaintext all over your machine: .env...

CVE-2023-31584

CVE-2023-31584 - Vulnerabilità di Cross Site Scripting in cu/silicon Link Github: https://github.com/cu/silicon Versione interessata: 1 Gravità e CVSS: Verrà aggiornato al termine della revisione da parte di NIST. Tipo: Cross Site Scripting Causa principale: Mancanza di una corretta validazione e...

hyperpom

HYPERPOM Libreria di fuzzing AArch64 basata sull'hypervisor Apple Silicon Indice dei contenuti Disclaimer Per Iniziare Prerequisiti Binari auto-firmati ed entitlement dell'hypervisor Flusso di compilazione Documentazione Esempi...

vphone-cli

🇰🇷한국어 | 🇯🇵日本語 | 🇨🇳中文 | 🇬🇧English vphone-cli Avvia un iPhone virtuale tramite il framework Virtualization.framework di Apple utilizzando l'infrastruttura VM di ricerca PCC. Prerequisiti Host: Apple Silicon macOS 15+ Sequoia Xcode + iOS SDK compila in cross il daemon guest Rilassamento SIP/AMFI per...

CVE-2025-70342

CVE-2025-70342: Intercettazione delle credenziali tramite Named Pipe in erase-install Riepilogo erase-install antecedente alla v40.4 commit 2c31239 scrive l'output delle credenziali di swiftDialog in un percorso hardcoded /var/tmp/dialog.json. Su Mac Apple Silicon, le credenziali di amministrazio...

c2-printf

C2-PRINTF è una piccola utility che consente di eseguire il debug in stile printf su una connessione di debugger C2, per l'uso con i microcontrollori Silicon Labs EFM8 e C8051F. Trattazione completa disponibile sul mio blog: https://jaycarlson.net/2017/07/16/printf-style-trace-messages-using-c2/ ...

CTT-Apple-Silicon-Refraction

CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Layer WebGL Payload ​这个JavaScript有效载荷使用 \alpha 常量来创建一个高频的"Memory Shiver"。它通过在WebKit垃圾回收器与GPU的Metal命令缓冲区之间制造不同步，触发CVE-2025-43529中的Use-After-Free（UAF）漏洞。 🍎 CTT-Apple-Silicon-Refraction WebKit/ANGLE 零日 "标签保护地址；CTT控制时间。" CVE-ID: CVE-2025-14174...

attesor

Progetto di Reverse Engineering di Rosetta 2 Un approfondito sforzo di reverse engineering per comprendere e documentare la tecnologia di traduzione binaria Rosetta 2 di Apple. Indice dei Contenuti 1. Contesto 2. Cos'è Rosetta? 3. Cos'è Rosetta 2? 4. Come Apple Distribuisce Rosetta 2 in macOS 5...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 in Entwicklung Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Rechtlich geschützte Forschung – Dieses Projekt arbeitet im Rahmen etablierter rechtlicher Grundlagen für Sicherheitsforschung, Recht auf Reparatur un...

dd

dd Esegui container Linux su macOS — senza VM. Cos'è dd? dd esegue container Linux in modo nativo su macOS con Apple Silicon senza una macchina virtuale. Non c'è kernel Linux né hypervisor sottostante: un JIT traduce il codice del container e gestisce le sue chiamate di sistema Linux nello spazio...

lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon उन आवृत्तियों पर चलता है जो 587 kHz के स्वर्ण अनुपात हार्मोनिक्स हैं: · प्रदर्शन कोर: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · दक्षता कोर: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · न्यूरल इंजन: 11.0 GHz = 587 kHz × 18739 ≈ φ¹⁰ ×...

coderunner

CodeRunner: आपके AI एजेंटों के लिए एक लोकल सैंडबॉक्स CodeRunner आपके AI एजेंटों और उनकी गतिविधियों को सैंडबॉक्स के भीतर सुरक्षित रूप से चलाने में मदद करता है। मुख्य उपयोग: आप हमारे सैंडबॉक्स में कई Claude Code या AI एजेंटों को डेटा हानि और डेटा बहिर्गमन exfiltration के किसी भी भय के बिना चला सकते...

Astra Linux – Vulnerability in pillow

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files, due to improper handling of offset and length tables...

PT-2026-65963

GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-66757

A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions ysize and zsize are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum value 65535, the...

CVE-2026-66757

A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions ysize and zsize are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum value 65535, the...