theevilbit

Posts

49 posts since 2019.

2026

Sep 1, 2026Inside the screensharingd Bugs: How macOS Screen Sharing Went from Root File Access to Pre-Auth Compromisemacos rce vulnerability cve
Aug 17, 2026How a single PostScript file leaks your Mac's memorymacos spotlight memory corruption vulnerability
Jan 28, 2026The Dangers of Cracking Toolsmacos lpe vulnerability

2025

Dec 5, 2025macOS LPE via the .localized directorymacos lpe installer
Nov 11, 2025CrashOne - A Starbucks Story - CVE-2025-24277macos lpe sandbox vulnerability
Sep 9, 2025Finding Vulnerabilities in Apple Packages at Scalemacos lpe installer vulnerability
Feb 21, 2025The diskarbitrationd and storagekitd Audit Story Part 3macos lpe tcc vulnerability

2023

Oct 9, 2023Launch and Environment Constraints Deep Divemacos internals amfi
Sep 28, 2023macOS Service Management - The SMAppService API - Quick Notesmacos developer malware api
Feb 13, 2023CVE-2022-22655 - TCC - Location Services Bypassmacos tcc vulnerability cve

2022

Nov 14, 2022CVE-2022-32929 - Bypass iOS backup's TCC protectionmacos tcc vulnerability cve
Oct 24, 2022Prologue - The Lord of The Rulesmacos fun
Aug 29, 2022CVE-2017-2533 - The details behindmacos lpe vulnerability cve
Jun 14, 2022AMFI Launch Constraints - First Quick Lookmacos internals amfi

2020

Dec 13, 2020CVE-2020-9771 - Reversing Engineering the Fixlpe vulnerability macos reverse engineering
Nov 17, 2020NOCVE - Microsoft Teams for macOS Local Privilege Escalationmacos vulnerability xpc microsoft
Oct 22, 2020Let's talk macOS Authorizationmacos internals authorization
Jul 3, 2020CVE-2020-9771 - mount_apfs TCC bypass and privilege escalationmacos lpe tcc vulnerability
Jun 16, 2020CVE-2020-14977 - Secure coding XPC Services - Part 5 - PID reuse attacksmacos xpc f-secure lpe
Jun 12, 2020CVE-2020-14978 - Secure coding XPC Services - Part 4 - Improved client authorizationmacos xpc f-secure lpe
Jun 9, 2020The AMFI MACF policy system callmacos internals amfi
May 29, 2020CVE-2020-0984 - Secure coding XPC Services - Part 3 - Incorrect client verificationmacos privilegedhelpertools xpc microsoft
May 12, 2020Kernel Debugging macOS with SIPmacos internals kernel
Mar 22, 2020Secure coding XPC Services - Part 2 - Checking CS (CodeSigning) flags of the clientmacos privilegedhelpertools xpc
Mar 18, 2020TALK - Exploiting directory permissions on macOSmacos cve lpe vulnerability
Jan 12, 2020CVE-2019-20057 - Secure coding XPC services - Part 1 - Why EvenBetterAuthorization is not enough?macos lpe privilegedhelpertools xpc