coderunner

CodeRunner: A local sandbox for your AI agents CodeRunner helps you sandbox your AI agents and its actions inside a sandbox. Key use case: You can run multiple Claude Code or AI agents in our sandbox without any fear of data loss and exfilteration. Quick Start Prerequisites: Mac with macOS and...

attesor

Rosetta 2 Reverse Engineering Project A comprehensive reverse-engineering effort to understand and document Apple's Rosetta 2 binary translation technology. Table of Contents 1. Background 2. What is Rosetta? 3. What is Rosetta 2? 4. How Apple Delivers Rosetta 2 in macOS 5. Technical Architecture...

ipa-medit

ipa-medit Ipa-medit is a memory search and patch tool for resigned ipa without jailbreaking. It supports iOS apps running on iPhone and Apple Silicon Mac. It was created for mobile game security testing. Many mobile games have jailbreak detection, but ipa-medit does not require jailbreaking, so...

CVE-2023-31584

CVE-2023-31584 - ثغرة برمجة نصية عبر المواقع في cu/silicon رابط جيتهاب: https://github.com/cu/silicon الإصدار المتأثر: 1 الخطورة وCVSS: سيتم التحديث عند الانتهاء من المراجعة من قبل NIST. النوع: Cross Site Scripting السبب الجذري: عدم وجود التحقق السليم من الإدخال وتنظيفه قبل إدراج البيانات التي...

c2-printf

C2-PRINTF هي أداة صغيرة تتيح لك إجراء تصحيح أخطاء بأسلوب دالة printf عبر اتصال مُنقِّح C2، لاستخدامها مع متحكمات Silicon Labs EFM8 و C8051F. الشرح الكامل متاح على مدونتي: https://jaycarlson.net/2017/07/16/printf-style-trace-messages-using-c2/ إذا قمت ببناء تطبيق WPF، فستحتاج إلى التأكد من أن ملفا...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

dd

dd Run Linux containers on macOS — with no VM. What is dd? dd runs Linux containers natively on Apple-Silicon macOS without a virtual machine. There is no Linux kernel and no hypervisor underneath: a JIT translates the container's code and services its Linux syscalls in userspace the gVisor / PRo...

apk-medit

apk-medit Apk-medit is a memory search and patch tool for debuggable apk without root & ndk. It was created for mobile game security testing. Many mobile games have rooting detection, but apk-medit does not require root privileges, so memory modification can be done without bypassing the rooting...

CVE-2026-43682

Preuve de concept Cette preuve de concept est censée provoquer un kernel panic et redémarrer un Mac affecté. Utilisez-la uniquement sur un système de test jetable. La capture de preuves a été réalisée sur un Apple silicon exécutant macOS Tahoe 26.3 25D125. Apple a corrigé CVE-2026-43682 dans Taho...

hyperpom

HYPERPOM bibliothèque de fuzzing AArch64 basée sur l'hyperviseur Apple Silicon Table des matières Avertissement Pour commencer Prérequis Binaires auto-signés et entitlement hyperviseur Processus de compilation Documentation Exemples Exécution des tests Auteurs Hyperpom est un framework de fuzzing...

vphone-cli

Docs · English · 中文 · 日本語 · 한국어 vphone-cli Run a virtual iPhone on an Apple Silicon Mac. vphone-cli runs iOS with Apple's Virtualization.framework and PCC research virtual machines, for security research, reverse engineering, and debugging. Graphical Window: Use the virtual iPhone's screen on you...

lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

ثغرة الرنين ألفا في Apple Silicon CVE-2024-23296 نظرة عامة يُظهر هذا البحث ثغرة في التماسك الزمني في رقاقات سلسلة M من Apple Silicon باستخدام مبادئ نظرية الزمن المتقارب CTT. تنشأ الثغرة من كون ترددات ساعة Apple متوافقات φ لـ 587 kHz، مما يُحدث تداخل رنين α في بنية الذاكرة الموحدة. الخلفية...

CVE-2024-27804

CVE-2024-27804 ./build.sh ./panic.sh paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3: 0xfffffe3a396e3444 x4: 0xfffffe3a396e344...

CTT-Apple-Silicon-Refraction

CTT-Apple-Silicon-Refraction webkitrefraction.js Le Payload WebGL à 33 Couches ​Ce payload JavaScript utilise la constante \alpha pour créer un « Frémissement Mémoire » à haute fréquence. Il induit le Use-After-Free UAF dans CVE-2025-43529 en désynchronisant le ramasse-miettes de WebKit du tampon...

CVE-2026-84543

Preuve de concept Cette preuve de concept devrait provoquer un kernel panic et redémarrer un Mac affecté. Les builds de test affectés utilisés lors de la recherche étaient macOS Tahoe 26.4 25E246 et macOS 26.5 bêta 4 25F5068a. Apple a corrigé CVE-2026-84543 dans macOS Golden Gate 27, Tahoe 26.7 e...

CVE-2025-70342

CVE-2025-70342: اعتراض بيانات الاعتماد عبر الأنبوب المسمى في erase-install الملخص يقوم erase-install في الإصدارات السابقة للإصدار v40.4 commit 2c31239 بكتابة مخرجات بيانات الاعتماد الخاصة بـ swiftDialog إلى مسار ثابت الترميز /var/tmp/dialog.json. على أجهزة Mac المزودة بمعالج Apple Silicon، تتم...

macOS-Security-and-Privacy-Guide

Ce guide est un recueil de techniques pour améliorer la sécurité et la confidentialité de macOS sur les Mac Apple silicon. Il s'adresse aux utilisateurs expérimentés qui souhaitent des pratiques de sécurité couramment utilisées par les organisations, mais convient également aux utilisateurs novic...

jit

JitPass Vous avez des clés API et des jetons en clair sur votre Mac. Utilisez JitPass pour les protéger. Télécharger pour Mac · brew install jitpass/tap/jitpass · Docs · jitpass.com Gratuit pour un usage personnel et interne en entreprise · Source-available · Aucun compte · Aucune télémétrie · Ri...

The vulnerability of the Cisco NX-OS operating system of Cisco Nexus 9000 Series switches, based on Silicon One ASIC chips, arises from the reliance on open IP addresses. This allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Cisco NX-OS operating system of Cisco Nexus 9000 Series switches, based on Silicon One ASIC chips, stems from the binding of open IP addresses during connection to TCP ports 43210 and 43211. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...

Astra Linux – Vulnerability in pillow

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files, due to improper handling of offset and length tables...