Posts

• June 29, 2021 GateKeeper - Not a Bypass (Again)
• June 10, 2021 macOS Monterey Shortcuts - First look
• May 26, 2021 NOCVE - TeamViewer Local Privilege Escalation Vulnerability
• April 23, 2021 Experiences with Apple Security Bounty
• April 20, 2021 CVE-2020-9900 & CVE-2021-1786 - Abusing macOS Crash Reporter
• January 19, 2021 About com.apple.private.security.clear-library-validation
• January 17, 2021 Divide and Conquer - A technique to bypass NextGen AV
• December 13, 2020 CVE-2020-9771 - Reversing Engineering the Fix
• November 17, 2020 NOCVE - Microsoft Teams for macOS Local Privilege Escalation
• October 26, 2020 Getting started in macOS security
• October 22, 2020 Let's talk macOS Authorization
• July 3, 2020 CVE-2020-9771 - mount_apfs TCC bypass and privilege escalation
• June 16, 2020 CVE-2020-14977 - Secure coding XPC Services - Part 5 - PID reuse attacks
• June 12, 2020 CVE-2020-14978 - Secure coding XPC Services - Part 4 - Improved client authorization
• June 9, 2020 The AMFI MACF policy system call
• May 29, 2020 CVE-2020-0984 - Secure coding XPC Services - Part 3 - Incorrect client verification
• May 12, 2020 Kernel Debugging macOS with SIP
• March 22, 2020 Secure coding XPC Services - Part 2 - Checking CS (CodeSigning) flags of the client
• March 18, 2020 TALK - Exploiting directory permissions on macOS
• January 12, 2020 CVE-2019-20057 - Secure coding XPC services - Part 1 - Why EvenBetterAuthorization is not enough?

• 1
• 2
• ›
• »