R3zk0n

Vulnerability research exploring macOS IPC internals, with a focus on XPC and its security boundaries and attack surface.

Setting up devices for security research deployment often takes longer than the testing itself.

The misconfigured content provider bug in com.microsoft.launcher is disclosing issues with the proper functioning of this Android launcher application.

An XHR request to xmlhttp.do with the "ChartDataProcessor" processor in the POST request allows the enumeration of the ServiceNow GQL database, including read access to the `sys_user_session` and `sys_user_token` tables, which provide the necessary inform…

The plugin includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execution vulnerability.

SwitchResX installs a privileged helper tool that runs as root but fails to validate incoming XPC connections.

ACL issue leading to system privileges.

Leaking FQDN information from Microsoft Exchange by parsing the AV_PAIR structures returned in an NTLM challenge over RPC-over-HTTP.

A short Python tool that generates XSS payloads in several encodings — HTML entities, unicode escapes, and URL encoding — to help bypass WAFs during testing.

Using Frida to hook the RealmConfiguration function on Android, an encrypted Realm database's encryption key can be extracted at runtime.

During a mobile audit engagement the target application enforced root and emulator detection.

Breaking down a neat zero-interaction XSS challenge payload from @junorouse — abusing a URI scheme, a name attribute, onfocus, and a domain + URL-hash bypass to reach execution.

Frida is a dynamic instrumentation toolkit that lets you introspect running applications and inject JavaScript to hook functions and APIs.