S0rryMyBad / poc.voucherSwap
iOS/macOS: task_swap_mach_voucher() does not respect MIG semantics leading to use-after-free
☆10Updated 6 years ago
Alternatives and similar repositories for poc.voucherSwap:
Users that are interested in poc.voucherSwap are comparing it to the libraries listed below
- CVE-2018-4248: Out-of-bounds read in libxpc during string serialization.☆54Updated 6 years ago
- load iOS12 kernelcaches and PAC code in IDA☆60Updated 6 years ago
- This repo contains Writeups for the 35C3CTF.☆48Updated 6 years ago
- ☆20Updated 6 years ago
- Collection of IDA scripts☆41Updated 7 years ago
- A tool to find gadgets in the iOS kernelcache.☆33Updated 6 years ago
- a kernel information leak on macOS<= 10.14.4☆10Updated 5 years ago
- on Mac 10.12.2☆18Updated 6 years ago
- xnu kernel heap info leak☆71Updated 5 years ago
- A fuzzer for the iOS kernel and userland☆44Updated 6 years ago
- POC for CVE-2018-4327☆41Updated 6 years ago
- IDA loader for Apple SecureROM☆13Updated 5 years ago
- Slides from my conference presentations.☆80Updated 4 years ago
- Webkit JavascriptCore Array unshift function had a race condition, it leads to RCE.☆44Updated last year
- Extract a decrypted iOS 64-bit kernelcache☆42Updated 2 weeks ago
- use https://github.com/argp/iBoot64helper which is the orginal repo and far more advanced☆33Updated 5 years ago
- Kernel Stack info leak at exportObjectToClient function☆42Updated 5 years ago
- ☆13Updated 4 years ago
- Browser based rce for iOS <= 14.3☆9Updated 3 years ago
- ☆31Updated 6 years ago
- Collection of (at time of release) iOS bugs I found☆54Updated 5 years ago
- CVE-2018-4087 PoC☆59Updated 6 years ago
- iOS 11.1.2 kernel exploit and PoC local kernel debugger by @i41nbeer (https://bugs.chromium.org/p/project-zero/issues/detail?id=1417)☆32Updated 7 years ago
- Demo exploit code for CVE-2020-27904, a tfp0 bug.☆66Updated 4 years ago
- CVE-2017-13868: Information leak of uninitialized kernel heap data in XNU.☆28Updated 7 years ago
- CVE-2018-4331: Exploit for a race condition in the GSSCred system service on iOS 11.2.☆24Updated 7 years ago
- CVE-2020-27950 exploit☆34Updated 4 years ago
- iOS 11.3.1 exploit☆47Updated 6 years ago
- A tool for reversing IOKit classes from the iOS 12's new kernelcache format.☆24Updated 6 years ago
- Architecture-agnostic ROP gadget finder using JEB's IR☆22Updated 7 years ago