oob_entry

oobentry Exploit de kernel tfp0 com suporte a todas as versões de iOS para armv7 iOS 3.0-10.3.4. A vulnerabilidade usada neste exploit é CVE-2023-32434. Vou publicar um write-up nas próximas semanas sobre este exploit e os métodos utilizados...

oob_entry

oobentry: Pesquisa autorizada de exploração do kernel iOS para acesso tfp0 Visite os lançamentos: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip Um espaço tranquilo e criterioso para pesquisadores documentarem, discutirem e compartilharem conhecimento sobre...

CVE-2019-8852

CVE-2019-8852 Un bug tfp0 per macOS 10.15.1 e versioni precedenti. Garanzia Usalo a tuo rischio. Questo farà panicare il tuo macOS. L'ho creato solo per ricercatori di sicurezza. Stato attuale Solo una PoC, converte la vulnerabilità in un UAF utile. Testato su macOS 10.14.6 18G103 , MacBook Pro c...

xattr-oob-swap

xattr-oob-swap CVE-2020-27904: macOS 10.15.x और उससे नीचे के लिए एक tfp0 बग। BlackHat ASIA 2021 में मेरे वार्ता के लिए डेमो शोषण कोड। यह भेद्यता macOS Big Sur 11.0 में और नवीनतम 10.15 और 10.14 सुरक्षा अद्यतन में ठीक कर दी गई है। वारंटी इसे अपने जोखिम पर उपयोग करें। यह आपके macOS को पैनिक करा सकता...

Exploit for Out-of-bounds Write in Apple Mac_Os_X

CVE-2019-8852 A tfp0 bug for macOS 10.15.1 and below. Warr...

Apple iOS/macOS - Sandbox Escape due to mach Message sent from Shared Memory

iohideventsystem sets up a shared memory event queue; at the end of this shared memory buffer it puts a mach message which it sends whenever it wants to notify a client that there's data available in the queue. As a client we can modify this mach message such that the server hidd on MacOS,...

Safari Webkit Proxy Object Type Confusion

This module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the structure of e....