Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
← Înapoi la Urmăritori

Mickey’s Blogs

jhftss.github.io/feed.xml
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 10

  1. CVE-2025-43530: Exploiting a private API for VoiceOver

    (Mickey’s Blogs)

    Happy New Year in advance!

  2. Exploiting the Impossible: A Deep Dive into A Vulnerability Apple Deems Unexploitable

    (Mickey’s Blogs)

    This is a blog post for my presentation at the conference Nullcon Berlin 2025.

  3. Dropping a 0 day: Parallels Desktop Repack Root Privilege Escalation

    (Mickey’s Blogs)

    Today, I am disclosing a 0-day vulnerability that bypasses the patch for CVE-2024-34331.

  4. Endless Exploits: The Saga of a macOS Vulnerability Struck Nine Times

    (Mickey’s Blogs)

    This is a blog post for my presentation at the conference OBTS v7.0.

  5. CVE-2024-54527: MediaLibraryService Full TCC Bypass, Dive Deep into AMFI

    (Mickey’s Blogs)

    Happy New Year!

  6. A New Era of macOS Sandbox Escapes: Diving into an Overlooked Attack Surface and Uncovering 10+ New Vulnerabilities

    (Mickey’s Blogs)

    This is a blog post for my presentation at the conference POC2024.

  7. CVE-2023-42929: Why do we need the App Container Protection

    (Mickey’s Blogs)

    Starting with macOS Sonoma 14.0, Apple has introduced a new TCC category kTCCServiceSystemPolicyAppData to protect the App Container Data.

  8. CVE-2023-42942: xpcroleaccountd Root Privilege Escalation

    (Mickey’s Blogs)

    About two weeks ago, Apple published the CVE-2023-42942 in the security advisory.

  9. macOS AUHelperService Full TCC Bypass

    (Mickey’s Blogs)

    Last year, I discovered a full user TCC bypass issue in the macOS Sonoma beta version.

  10. The Nightmare of Apple’s OTA Update: Bypassing the Signature Verification and Pwning the Kernel

    (Mickey’s Blogs)

    This blog post is written for my talk at OBTS v6.0.