S0rryMyBad / poc.voucherSwap
iOS/macOS: task_swap_mach_voucher() does not respect MIG semantics leading to use-after-free
☆10Updated 5 years ago
Related projects ⓘ
Alternatives and complementary repositories for poc.voucherSwap
- load iOS12 kernelcaches and PAC code in IDA☆60Updated 6 years ago
- CVE-2018-4248: Out-of-bounds read in libxpc during string serialization.☆52Updated 6 years ago
- ☆20Updated 6 years ago
- This repo contains Writeups for the 35C3CTF.☆48Updated 5 years ago
- on Mac 10.12.2☆18Updated 6 years ago
- a kernel information leak on macOS<= 10.14.4☆10Updated 5 years ago
- A tool for reversing IOKit classes from the iOS 12's new kernelcache format.☆23Updated 6 years ago
- xnu kernel heap info leak☆70Updated 5 years ago
- A fuzzer for the iOS kernel and userland☆44Updated 6 years ago
- use https://github.com/argp/iBoot64helper which is the orginal repo and far more advanced☆32Updated 5 years ago
- IDA loader for Apple SecureROM☆13Updated 5 years ago
- WebKit CodeQL Databases☆13Updated 8 months ago
- ☆31Updated 5 years ago
- Collection of IDA scripts☆40Updated 7 years ago
- A tool to find gadgets in the iOS kernelcache.☆33Updated 6 years ago
- Demo exploit code for CVE-2020-27904, a tfp0 bug.☆65Updated 3 years ago
- Collection of (at time of release) iOS bugs I found☆54Updated 4 years ago
- POC for CVE-2018-4327☆41Updated 6 years ago
- Kernel Stack info leak at exportObjectToClient function☆41Updated 5 years ago
- CVE-2018-4087 PoC☆60Updated 5 years ago
- Slides from my conference presentations.☆79Updated 4 years ago
- CVE-2018-4331: Exploit for a race condition in the GSSCred system service on iOS 11.2.☆24Updated 6 years ago
- ☆9Updated 2 years ago
- CVE-2020-27950 exploit☆31Updated 3 years ago
- POCs for IOMemoryDescriptor racing bugs in iOS/OSX kernels☆19Updated 7 years ago
- IDA AArch64 processor extender extension: Adding support for ARMv8.5 memory tagging extension opcodes☆26Updated 4 years ago
- An IDA_Wrapper for linux, shipped with an Function Identifier. It works well with Driller on static linked binaries.☆14Updated 5 years ago