Racing the Dark - A New TOCTTOU Story From Apple's Core
Unveils macOS kernel vulnerabilities, highlighting memory mapping issues and race conditions that bypass security updates. Emphasizes the need to reevaluate macOS/iOS memory mapping mechanisms.
The Last Line of Defense - Understanding and Attacking Apple File System on iOS
Explore APFS architecture, previous attacks, and a new method to bypass mitigations, potentially compromising iOS file system security.
Optimized Fuzzing IOKit in iOS
Optimized fuzzing approach for iOS IOKit interfaces, dynamically resolving symbols and parameters to improve efficiency and effectiveness in vulnerability discovery.
Faux Disk Encryption - Realities of Secure Storage on Mobile Devices
Explore mobile device data security challenges, debunk full-disk encryption myths, and learn sophisticated secure storage techniques for iOS and Android, addressing real-world application vulnerabilities.
Enterprise Apps - Bypassing the iOS Gatekeeper
Explore iOS security vulnerabilities through enterprise apps, examining real-world statistics and a zero-day attack that bypasses Apple's gatekeeper, revealing critical flaws in the iOS security model.
Behind the Scenes of iOS Security
Explore iOS security mechanisms including HomeKit, Auto Unlock, iCloud Keychain, Data Protection, and JIT hardening. Learn about Apple's innovative approaches to protect user data and enhance mobile security.
Pangu 9 Internals
Explore iOS 9 jailbreak internals, vulnerabilities, and exploitation techniques used in Pangu 9. Learn about system service flaws, code execution methods, and persistent code signing bypass.
Attacking the XNU Kernel in El Capitan
Explore new techniques to bypass XNU kernel exploit mitigations in El Capitan, including KASLR and SMEP, and learn how to overcome System Integrity Protection through a real kernel exploit demonstration.
Review and Exploit Neglected Attack Surfaces in iOS 8
Explores overlooked iOS 8 vulnerabilities through fuzzing and code auditing, revealing system daemon crashes and memory corruption errors triggerable via XPC, plus an iOS kernel 0day.
Beyond the Crypt - Practical iOS Reverse Engineering
Explore practical iOS reverse engineering techniques to uncover hidden app functionalities and enhance mobile security understanding.
Recreating an iOS 0-Day Jailbreak Out of Apple's Security Updates
Detailed walkthrough of recreating an iOS jailbreak from security updates, covering vulnerability discovery, exploit development, and jailbreak creation. Includes practical demonstration and insights.
Remotely Compromising iOS via Wi-Fi and Escaping the Sandbox
Explore iOS vulnerabilities through Wi-Fi networks, including sandbox escapes and kernel bugs. Learn about attack vectors, exploitation techniques, and security implications for mobile devices.
Fried Apples - Jailbreak DIY
Explore iOS jailbreaking techniques, including persistence, patchfinding, and kernel protection bypass. Learn about internal structures and low-level details of modern jailbreaks for Apple devices.
Security Threats & Mitigations for iOS Developers
Explore iOS security threats and mitigations, covering architecture, malware examples, and best practices for developers to enhance app protection and user safety.
MacOS Security - Escaping The Sandbox & Bypassing TCC
Explore macOS security measures, including sandboxing and TCC, and learn about potential vulnerabilities and bypass techniques in third-party applications and system components.
Spoofing Your Location on iOS Without Jailbreaking
Explore a physical hardware device for GPS spoofing on non-jailbroken iPhones, offering a flexible and accurate solution beyond traditional app-based methods.
Jailbreaks Never Die - Exploiting iOS 13.7
Unveiling iOS 13.7 exploit chain: kernel vulnerabilities, mitigation bypasses, and techniques for reading/writing kernel memory. Insights into iOS security research and jailbreak development.
Rootten Apples - Vulnerability Heaven in the iOS Sandbox
Exploring iOS vulnerabilities beyond containerized apps, revealing multiple privilege escalation flaws affecting all devices and demonstrating a chained exploit to bypass security mitigations.
Story of Jailbreaking iOS 13
Explore the process and techniques of jailbreaking iOS 13, including kernel vulnerabilities and unauthorized code execution, presented by an expert at Black Hat conference.
iOS Kernel PAC, One Year Later
Análisis de la evolución y vulnerabilidades de la autenticación de punteros del kernel de iOS, con demostraciones de nuevos métodos para eludir la seguridad en iOS 13.3.
Unwrapping the Truth - Analysis of Mobile Application Wrapping Solutions
Explore mobile application wrapping solutions for BYOD, analyzing their security claims, implementation, and vulnerabilities in iOS and Android environments.