attesor

Rosetta 2 Reverse Engineering Project A comprehensive reverse-engineering effort to understand and document Apple's Rosetta 2 binary translation technology. Table of Contents 1. Background 2. What is Rosetta? 3. What is Rosetta 2? 4. How Apple Delivers Rosetta 2 in macOS 5. Technical Architecture...

CVE-2023-31584

CVE-2023-31584 - Cross Site Scripting vulnerability in cu/silicon Github link: https://github.com/cu/silicon Version Affected: 1 Severity and CVSS: Will update when review is done by NIST. Type: Cross Site Scripting Root Cause: Lack of proper input validation and sanitization before inserting...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

coderunner

CodeRunner: A local sandbox for your AI agents CodeRunner helps you sandbox your AI agents and its actions inside a sandbox. Key use case: You can run multiple Claude Code or AI agents in our sandbox without any fear of data loss and exfilteration. Quick Start Prerequisites: Mac with macOS and...

super-tart-vphone-writeup

Building virtual iPhone using VPHONE600AP component of recently released PCC firmware Special Thanks / Acknowledgements dlevi309 Provided ideas for touch interaction on virtual iPhone khanhduytran0, 34306, asdfugil, verygenericname Provided other ideas for building virtual iPhone, including...

dd

dd Run Linux containers on macOS — with no VM. What is dd? dd runs Linux containers natively on Apple-Silicon macOS without a virtual machine. There is no Linux kernel and no hypervisor underneath: a JIT translates the container's code and services its Linux syscalls in userspace the gVisor / PRo...

apk-medit

apk-medit Apk-medit is a memory search and patch tool for debuggable apk without root & ndk. It was created for mobile game security testing. Many mobile games have rooting detection, but apk-medit does not require root privileges, so memory modification can be done without bypassing the rooting...

c2-printf

C2-PRINTF is a small utility that lets you do printf-style debugging over a C2 debugger connection, for use with the Silicon Labs EFM8 and C8051F microcontrollers. Full write up available on my blog: https://jaycarlson.net/2017/07/16/printf-style-trace-messages-using-c2/ If you build the WPF...

CVE-2024-27804

CVE-2024-27804 ./build.sh ./panic.sh paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3: 0xfffffe3a396e3444 x4: 0xfffffe3a396e344...

CVE-2025-70342

CVE-2025-70342: Intercepción de Credenciales mediante Named Pipe en erase-install Resumen erase-install anterior a v40.4 commit 2c31239 escribe la salida de credenciales de swiftDialog en una ruta fija /var/tmp/dialog.json. En Macs con Apple Silicon, las credenciales de administrador ingresadas...

macOS-Security-and-Privacy-Guide

This guide is a collection of techniques for improving the security and privacy of macOS on Apple silicon Macs. It targets experienced users who want security practices commonly used by organizations, but is also suitable for novice users with an interest in privacy and security. For...

jit

JitPass You have API keys and tokens in plaintext on your Mac. Use JitPass to protect them. Download for Mac · brew install jitpass/tap/jitpass · Docs · jitpass.com Free for personal and internal company use · Source-available · No account · No telemetry · Nothing leaves your Mac · Secure Enclave...

ipa-medit

ipa-medit Ipa-medit is a memory search and patch tool for resigned ipa without jailbreaking. It supports iOS apps running on iPhone and Apple Silicon Mac. It was created for mobile game security testing. Many mobile games have jailbreak detection, but ipa-medit does not require jailbreaking, so...

CVE-2026-43682

Proof of concept This proof of concept is expected to kernel-panic and reboot an affected Mac. Use it only on a disposable test system. The evidence capture used Apple silicon running macOS Tahoe 26.3 25D125. Apple fixed CVE-2026-43682 in Tahoe 26.6, Sequoia 15.7.8, and Sonoma 14.8.8. The PoC is ...

hyperpom

HYPERPOM AArch64 fuzzing library based on the Apple Silicon hypervisor Table of contents Disclaimer Getting Started Prerequisites Self-Signed Binaries and Hypervisor Entitlement Compilation Workflow Documentation Examples Running the Tests Authors Hyperpom is a coverage-guided mutation-based...

lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon runs at frequencies that are golden ratio harmonics of 587 kHz: · Performance cores: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · Efficiency cores: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · Neural Engine: 11.0 GHz = 587 kHz × 18739 ≈...

CTT-Apple-Silicon-Refraction

CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Layer WebGL Payload ​This JavaScript payload uses the \alpha constant to create a high-frequency "Memory Shiver." It induces the Use-After-Free UAF in CVE-2025-43529 by desynchronizing the WebKit garbage collector from the GPU's Metal comman...

CVE-2026-84543

Proof of concept This proof of concept is expected to kernel-panic and reboot an affected Mac. The affected test builds used during research were macOS Tahoe 26.4 25E246 and macOS 26.5 beta 4 25F5068a. Apple fixed CVE-2026-84543 in macOS Golden Gate 27, Tahoe 26.7, and Sequoia 15.8. Included PoC...

The vulnerability of the Cisco NX-OS operating system of Cisco Nexus 9000 Series switches, based on Silicon One ASIC chips, arises from the reliance on open IP addresses. This allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Cisco NX-OS operating system of Cisco Nexus 9000 Series switches, based on Silicon One ASIC chips, stems from the binding of open IP addresses during connection to TCP ports 43210 and 43211. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...

Astra Linux – Vulnerability in pillow

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files, due to improper handling of offset and length tables...